code for encrypting sensitive tcmalloc metadata

base/allocator/allocator.gyp

Index: base/allocator/allocator.gyp
diff --git a/base/allocator/allocator.gyp b/base/allocator/allocator.gyp
index 97490eab5f41962e854658293ec7e9904d656834..7a9b386e04aab1cea9017bab3d14d4e4bc5568a4 100644
--- a/base/allocator/allocator.gyp
+++ b/base/allocator/allocator.gyp
@@ -11,6 +11,7 @@
     {
       'target_name': 'allocator',
       'type': 'static_library',
+      'defines' : ["TCMALLOC_SPAN_ENCRYPT"],

[jschuh, 2011/09/13 16:37:12]

You'll probably want a flag in a main TCMalloc header that combines all these
options for simplicity. Something like TCMALLOC_HARDENED.

[bxx, 2011/09/13 19:36:09]

Done.

       'include_dirs': [
         '.',
         '<(tcmalloc_dir)/src/base',
@@ -120,6 +121,9 @@
         '<(tcmalloc_dir)/src/memfs_malloc.cc',
         '<(tcmalloc_dir)/src/memory_region_map.cc',
         '<(tcmalloc_dir)/src/memory_region_map.h',
+        '<(tcmalloc_dir)/src/metadata_encrypt.h',
+        '<(tcmalloc_dir)/src/metadata_encrypt_disabled.h',
+        '<(tcmalloc_dir)/src/metadata_encrypt_generic.h',
         '<(tcmalloc_dir)/src/packed-cache-inl.h',
         '<(tcmalloc_dir)/src/page_heap.cc',
         '<(tcmalloc_dir)/src/page_heap.h',