Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
0
60

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
220
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
150
Shared Mutable State
Avatar for Greg Heo gregheo
0
480
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
63
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
140
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
530
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
130
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
130
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
400

Other Decks in Technology

See All in Technology
Foundation Model × VisionKit で実現するローカル OCR
Avatar for SansanTech sansantech
PRO
1
370
全員が手を動かす組織へ - 生成AIが変えるTVerの開発現場 / everyone-codes-genai-transforms-tver-development
Avatar for tohae tohae
0
180
データモデリング通り #2オンライン勉強会 ～方法論の話をしよう～
Avatar for データ横丁 datayokocho
0
160
金融サービスにおける高速な価値提供とAIの役割 #BetAIDay
Avatar for LayerX layerx
PRO
1
830
Amazon Inspector コードセキュリティで手軽に実現するシフトレフト
Avatar for mai miya maimyyym
0
110
バクラクによるコーポレート業務の自動運転 #BetAIDay
Avatar for LayerX layerx
PRO
1
950
LLMで構造化出力の成功率をグンと上げる方法
Avatar for Keisuke Takiguchi keisuketakiguchi
0
820
大規模イベントに向けた ABEMA アーキテクチャの遍歴 ~ Platform Strategy 詳細解説 ~
Avatar for Katsutoshi Nagaoka nagapad
0
230
【新卒研修資料】数理最適化 / Mathematical Optimization
Avatar for BrainPad brainpadpr
27
13k
Claude Codeから我々が学ぶべきこと
Avatar for Oikon oikon48
10
2.8k
LLMをツールからプラットフォームへ〜Ai Workforceの戦略〜 #BetAIDay
Avatar for LayerX layerx
PRO
1
980
プロダクトエンジニアリングで開発の楽しさを拡張する話
Avatar for sagawa / barometrica barometrica
0
170

Featured

See All Featured
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
190
11k
Keith and Marios Guide to Fast Websites
Avatar for Keith Pitt keithpitt
411
22k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
229
22k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
34
6k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1370
200k
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
329
21k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
95
14k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
Typedesign – Prime Four
Avatar for Hannes Fritz hannesfritz
42
2.7k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
278
23k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
18
1.1k
10 Git Anti Patterns You Should be Aware of
Avatar for Lemi Orhan Ergin lemiorhan
PRO
656
60k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo