Use GWP-ASan to detect exploits in production environments
blog.trailofbits.com | blog | #vulnerability-research | #memory-safety | #developer-security | #use-after-free | #mitigation | #gwp-asan | #buffer-overflow | #c-cpp
Summary
GWP-ASan is a sampling-based memory error detector that catches use-after-free, double-free, and heap overflows in production at near-zero overhead, where AddressSanitizer's 2-4x cost is too heavy.
- Published
- Collected
Skip to content