3 ms·
FWIW it is not recommended to use asan+co for release builds. These are designed as debugging tools, if you use them in production builds they may actually open
by hannob 3y ago
FWIW it is not recommended to use asan+co for release builds. These are designed as debugging tools, if you use them in production builds they may actually open up new bugs. See also:
https://www.openwall.com/lists/oss-security/2016/02/17/9 https://www.openwall.com/lists/oss-security/2016/02/17/9
I don't think anyone has built anything practically usable that is meant for production, though it wouldn't be impossible to do so.
- astrange 3y agoIt's more or less okay to use UBSan in production though, and that can be good. But sometimes DoS is considered an exploit, and in that case you don't want to make things easier to crash.