Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
0
60

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?
Avatar for Greg Heo

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
210
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
140
Shared Mutable State
Avatar for Greg Heo gregheo
0
470
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
63
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
140
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
530
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
130
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
130
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
400

Other Decks in Technology

See All in Technology
Test Smarter, Not Harder: Achieving Confidence in Complex Distributed Systems
Avatar for Elias Nogueira eliasnogueira
1
130
これならできる！Kotlin・Spring・DDDを活用したAll in oneのマイクロサービス開発術
Avatar for 株式会社出前館 demaecan
0
130
おれのAI活用の現状とこれから
Avatar for TsukasaSekiguchi tsukasagr
0
120
為什麼我們需要 Observability？
Avatar for Marcus marcustung
0
490
Cursor Meetup Tokyo
Avatar for Shunta Komatsu iamshunta
5
1.5k
dbt Cloudの新機能を紹介！データエンジニアリングの民主化：GUIで操作、SQLで管理する新時代のdbt Cloud
Avatar for Sagara sagara
0
120
SwiftUI Transaction を徹底活用！ZOZOTOWN UI開発での活用事例
Avatar for Ryo Tsuzukihashi tsuzuki817
1
140
現場で役立つAPIデザイン
Avatar for 草薙昭彦 nagix
1
190
impressions-trying-lambda-web-adapter
Avatar for Junki Ishigaki junkishigaki
2
140
単一Gitリポジトリから独立しました
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
360
Introduction to Sansan Meishi Maker Development Engineer
Avatar for Sansan, Inc. sansan33
PRO
0
270
AI Engineering Summit Pre Event LT #10
Avatar for Kaoru okaru
2
420

Featured

See All Featured
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
PRO
20
1.3k
Become a Pro
Avatar for Speaker Deck speakerdeck
PRO
28
5.4k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
45
7.3k
What’s in a name? Adding method to the madness
Avatar for Product Marketing Alliance productmarketing
PRO
22
3.5k
Done Done
Avatar for chrislema chrislema
184
16k
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
134
9.3k
How GitHub (no longer) Works
Avatar for Zach Holman holman
314
140k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
54
6.4k
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
63
7.8k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
14
1.5k
Designing for humans not robots
Avatar for Tammie Lister tammielis
253
25k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
31
1.2k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo