PoisonCap: Efficient Hierarchical Temporal Safety for CHERI
PoisonCap is a hardware extension for CHERI systems that enforces strict, hierarchical use-after-free and uninitialised access protection without performance or memory overhead. It introduces 'poison capabilities' to prevent access to freed memory locations, using capability bounds metadata to manage nested allocators safely.