3 ms·
It likely won't help. I excluded glibc from using ASAN to let this work. It is theoretically possible to use ASAN on glibc as well, but it's complicated and ce
by hannob 11y ago
It likely won't help. I excluded glibc from using ASAN to let this work.
It is theoretically possible to use ASAN on glibc as well, but it's complicated and certainly not ready for any kind of production use.
Also although this is my work, it's far from clear to me whether using ASAN in production really is a useful thing. Practically I'd rather suggest looking at the safestack and CFI features of clang for production use instead.
- yugr 11y agoBTW at least Clang's ASan is capable of detecting CVE-2015-7547 (in https://groups.google.com/forum/#!topic/address-sanitizer/ttPxNhTK9TU https://groups.google.com/forum/#!topic/address-sanitizer/tt...).