REDUCING THE VULNERABILITY LEVEL OF GARBAGE COLLECTION USING ARENA ALLOCATOR
DOI:
https://doi.org/10.28925/2663-4023.2026.32.1096Keywords:
memory allocator, allocation strategy, memory garbage-collection, GC, arena allocator, use-after-free vulnerabilityAbstract
Memory allocation is substantially overcomplicated with commonly used self-managing background systems like: garbage-collection, smart pointers and RAII. Oftentimes these systems and memory allocation paradigms cause performance and safety issues. In most scenarios (projects) a decent alternative to said allocation paradigms can be used to avoid the performance hit that garbage-collection and smart pointers can impose on the made software, and greater control can be achieved that can help avoid possible safety risks in between prune-and-sweep clean intervals of garbage collection.
Arena allocator is a pretty appealing allocation strategy that has relatively few mentions despite all the said benefits. With very concise implementation, Arenas can be very handy and make memory management trivial while keeping full control in hands of the developer. Arenas can be widely used in almost any project that revolves around real-time systems, user oriented software or inside highly optimized systems such as compilers.
Downloads
References
Buschnick. (2010). Garbage collection considered harmful. https://blog.buschnick.net/2010/02/garbage-collection-considered-harmful.shtml
Redis. (2025). Security advisory: CVE-2025-49844. https://redis.io/blog/security-advisory-cve-2025-49844/
Oracle. (2024). Garbage collector implementation. Java SE 24 documentation. https://docs.oracle.com/en/java/javase/24/gctuning/garbage-collector-implementation.html
Anastos, M. (2019). Unified theory of garbage collection. Cornell CS 6120 Blog. https://www.cs.cornell.edu/courses/cs6120/2019fa/blog/unified-theory-gc/
Quantum Developer. (n.d.). Demonstration of Java garbage collection flaws for game development and explanation of switching to Zig [Video]. YouTube. https://www.youtube.com/watch?v=PxUkTxA8OWU
Quantum Developer. (n.d.). CubyZ – early public alpha showcase [Video]. YouTube. https://www.youtube.com/watch?v=jm_0nRQEn_o
Krajačić, V. (2025). File Pilot: Inside the engine – BSC 2025 [Conference presentation]. YouTube. https://www.youtube.com/watch?v=bUOOaXf9qIM
Fleury, R. (n.d.). Untangling lifetimes: The arena allocator. https://www.rfleury.com/p/untangling-lifetimes-the-arena-allocator
mkirchner. (2019). Simple implementation of zero-dependency garbage collector [Source code]. GitHub. https://github.com/mkirchner/gc
amuerta. (2025). handy C header(s): A personal standard library for the C programming language [Source code]. GitHub. https://github.com/amuerta/hch
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Олег Курченко

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.