REDUCING THE VULNERABILITY LEVEL OF GARBAGE COLLECTION USING ARENA ALLOCATOR

Authors

DOI:

https://doi.org/10.28925/2663-4023.2026.32.1096

Keywords:

memory allocator, allocation strategy, memory garbage-collection, GC, arena allocator, use-after-free vulnerability

Abstract

Memory allocation is substantially overcomplicated with commonly used self-managing background systems like: garbage-collection, smart pointers and RAII. Oftentimes these systems and memory allocation paradigms cause performance and safety issues. In most scenarios (projects) a decent alternative to said allocation paradigms can be used to avoid the performance hit that garbage-collection and smart pointers can impose on the made software, and greater control can be achieved that can help avoid possible safety risks in between prune-and-sweep clean intervals of garbage collection.

Arena allocator is a pretty appealing allocation strategy that has relatively few mentions despite all the said benefits. With very concise implementation, Arenas can be very handy and make memory management trivial while keeping full control in hands of the developer. Arenas can be widely used in almost any project that revolves around real-time systems, user oriented software or inside highly optimized systems such as compilers.

Downloads

Download data is not yet available.

References

Buschnick. (2010). Garbage collection considered harmful. https://blog.buschnick.net/2010/02/garbage-collection-considered-harmful.shtml

Redis. (2025). Security advisory: CVE-2025-49844. https://redis.io/blog/security-advisory-cve-2025-49844/

Oracle. (2024). Garbage collector implementation. Java SE 24 documentation. https://docs.oracle.com/en/java/javase/24/gctuning/garbage-collector-implementation.html

Anastos, M. (2019). Unified theory of garbage collection. Cornell CS 6120 Blog. https://www.cs.cornell.edu/courses/cs6120/2019fa/blog/unified-theory-gc/

Quantum Developer. (n.d.). Demonstration of Java garbage collection flaws for game development and explanation of switching to Zig [Video]. YouTube. https://www.youtube.com/watch?v=PxUkTxA8OWU

Quantum Developer. (n.d.). CubyZ – early public alpha showcase [Video]. YouTube. https://www.youtube.com/watch?v=jm_0nRQEn_o

Krajačić, V. (2025). File Pilot: Inside the engine – BSC 2025 [Conference presentation]. YouTube. https://www.youtube.com/watch?v=bUOOaXf9qIM

Fleury, R. (n.d.). Untangling lifetimes: The arena allocator. https://www.rfleury.com/p/untangling-lifetimes-the-arena-allocator

mkirchner. (2019). Simple implementation of zero-dependency garbage collector [Source code]. GitHub. https://github.com/mkirchner/gc

amuerta. (2025). handy C header(s): A personal standard library for the C programming language [Source code]. GitHub. https://github.com/amuerta/hch

Downloads


Abstract views: 3

Published

2026-03-26

How to Cite

Shpak, M., Kurchenko, O., & Shcheblanin, Y. (2026). REDUCING THE VULNERABILITY LEVEL OF GARBAGE COLLECTION USING ARENA ALLOCATOR. Electronic Professional Scientific Journal «Cybersecurity: Education, Science, Technique», 4(32), 550–564. https://doi.org/10.28925/2663-4023.2026.32.1096