PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Understanding AddressSanitizer: Better memory safety for your code

blog.trailofbits.com | blog | #rce | #memory-safety | #fuzzing | #llvm | #cpp | #compilers | #addresssanitizer
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits explains how AddressSanitizer works, covering shadow memory, redzones, container annotations, limitations, and false positives, plus the LLVM contributions these findings produced.
Published
Collected

Related coverage

blog · blog.trailofbits.com
High-fidelity build instrumentation with blight
Trail of Bits open-sourced blight, a Python framework that wraps and instruments C/C++ build tools, enabling caching, static analysis, profiling, and build assurance without fragile compiler hacks.
blog · blog.trailofbits.com
Use constexpr for faster, smaller, and safer code
Because constexpr code cannot invoke undefined behavior, C++14 constexpr eliminates bug classes like silently optimized overflow checks while shrinking binaries. A libclang tool automates this.
blog · blog.trailofbits.com
How McSema Handles C++ Exceptions
McSema can now correctly lift C++ programs with exception-based control flow, claimed as the only binary lifter to do so. It covers x86-64 exception tables, stack unwinding, and recovery into LLVM.
blog · blog.trailofbits.com
ReMASTering Applications by Obfuscating during Compilation
Introducing MAST, an LLVM-based obfuscation toolkit: symbol mangling, opaque predicates, code diffusion and environmental keying, inspired by nation-state malware; funded via DARPA Cyber Fast Track.
blog · hackerone.com
The Art of Detecting Memory Leaks in C++ Applications
HackerOne surveys tools for detecting memory leaks in C++ applications, covering Valgrind Memcheck and AddressSanitizer, and how each pinpoints leaks with stack traces and allocation details.
blog · projectzero.google
Effective Fuzzing: A Dav1d Case Study
A case study on effective fuzzing of dav1d, the open-source AV1 decoder, covering harnessing decisions, coverage strategy, and lessons for hunting codec vulnerabilities.
Back