3 ms·
asan only catches what your test suite covers. specifically, that doesn't include novel attacks.
by adgjlsfhk1 3y ago
asan only catches what your test suite covers. specifically, that doesn't include novel attacks.
- duped 3y agoThat's kinda true, but if you use the compiler inserted address sanitizer code it will turn bugs from exploits into crashes. You can't exploit a OOB write if the write fails and the program crashes.
- adgjlsfhk1 3y agoif you can afford the cost of that, just write your program in any other language c with asan is a lot slower than the safe alternatives
- duped 3y agoI made another comment about exactly that, but was addressing the concern that asan doesn't make code safe.