3 ms·

Can you link to an example case where Address Sanitizer has been used to find and resolve a bunch of memory safety issues in a codebase? (it seems likely true,

by jka 5y ago

Can you link to an example case where Address Sanitizer has been used to find and resolve a bunch of memory safety issues in a codebase? (it seems likely true, and with a success rate like that, improvements rather than migration of existing codebases would make sense. just keen to find some supporting success stories :) I found some cfengine ASAN examples but nothing hugely conclusive yet)

jart 5y ago
> The Chromium open-source browser [1] has been regularly tested with AddressSanitizer since we released the tool in May 2011. In the first 10 months of testing the tool detected over 300 previously unknown bugs in the Chromium code and in third-party libraries. 210 bugs were heap-use-after-free, 73 were heap-buffer-overflow, 8 global-buffer-overflow, 7 stack-buffer-overflow and 1 memcpy parameter overlap. https://static.googleusercontent.com/media/research.google.com/en//pubs/archive/37752.pdf https://static.googleusercontent.com/media/research.google.c...
- jka 5y ago
  Nice, thank you!