2 ms·
sanitizers don't work because they only check the paths that you actually run them on. vulnerabilities come from the weird combination of edge cases you didn't
by adgjlsfhk1 4y ago
sanitizers don't work because they only check the paths that you actually run them on. vulnerabilities come from the weird combination of edge cases you didn't test.
- mk89 4y agoThanks. I thought so too, I just wanted to have some confirmation. It's not that they don't find issues, but it's more of a coverage issue then? (In which case I really understand, someone said it's 25 million lines of code...)
- adgjlsfhk1 4y agoit's not even line coverage. to be secure you need to be secure for every combination of branches. at 25 million lines of code, hitting every if/else combination would take longer than the lifetime of the universe.