5 ms·
There is unlikely ever to be a perfect, but a getting better by constraining behavior that breaks things. Throw all of the compile-time, profiling, checked buil
by tinglymintyfrsh 4y ago
There is unlikely ever to be a perfect, but a getting better by constraining behavior that breaks things. Throw all of the compile-time, profiling, checked builds, and binary-level tools at projects for defense-in-depth and checklists, no matter the platform or the application. Fuzzing, valgrind, gperftools, dtrace, {[amt],ub}san, etc. and formal methods like seL4 if you can afford the investment. :>
- galangalalgol 4y agoDoes valgrind add anything to asan given the same unit tests? I haven't used in years because it is so slow.
- saagarjha 4y agoAddress sanitizer is not precise and can miss certain classes of bugs that Valgrind would catch.
- tinglymintyfrsh 4y agoYeap. Although Google killed off afl, exercise code with fuzzing too that unit and integration tests didn't catch.