The upcoming Android P, which was recently released in beta, will use more compiler-based security mitigations, writes Google engineer Ivan Lozano, including control flow integrity and integer overflow sanitization. The basic idea behind compiler-based mitigations, a set of features provided by the LLVM/Clang compiler, is instrumenting runtime operations at compile-time to catch operations that trigger undefined behavior and make them fail safely.

Read full news article on InfoQ