Address Sanitizer isn't designed to be used in production. See this thread: http://seclists.org/oss-sec/2016/q1/363 http://seclists.org/oss-sec/2016/q1/363 ASA

Address Sanitizer isn't designed to be used in production. See this thread: http://seclists.org/oss-sec/2016/q1/363 http://seclists.org/oss-sec/2016/q1/363 ASAN is great at detecting many unintentional memory errors, but it's not designed to thwart malicious attacks. If you need a specific example of ASAN binary being exploited then see: http://int3pids.blogspot.ch/2015/04/confidence-2015-teaser-quarantine-write.html http://int3pids.blogspot.ch/2015/04/confidence-2015-teaser-q...