Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
68
0

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
250
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
200
Shared Mutable State
Avatar for Greg Heo gregheo
0
540
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
72
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
160
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
560
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
160
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
140
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
430

Other Decks in Technology

See All in Technology
10年目を迎えた「ABEMA」がどのように AI 活用を推進して、AI 駆動開発にシフトしているのか / How ABEMA, entering its 10th year, is promoting the use of AI and shifting toward AI-driven development
Avatar for Yusei Yamanaka miyukki
0
370
GoでCコンパイラを作った話
Avatar for repunit11 repunit
0
150
文字起こし基盤の信頼性
Avatar for abnoumaru abnoumaru
0
120
AI時代こそ、スケールしないことをしよう -「作る人」から「なぜ作るか」を考える人へ / Do Things That Don't Scale in the AI Era — From How to Why
Avatar for 株式会社カミナシ kaminashi
1
100
現場との対話から始める “作る前に問い直す”業務改善
Avatar for mochico50 mochico50
1
220
AI時代の開発生産性を捉え直す — 経営と現場をつなぐ「開発組織のオブザーバビリティ」— / AI Dev Ex Conference 2026
Avatar for tkyowa tkyowa
1
1.3k
大量データに対しても、生成AIを用いてリーズナブルにデータ加工をしたい！Databricksのai_queryについて調べてみた
Avatar for Kamoshika kamoshika
1
280
OPENLOGI Company Profile for engineer
Avatar for OPENLOGI hr01
1
74k
2年前に削除したPHPクラスが、 ある日突然決済をエラーにした
Avatar for ykagano ykagano
1
780
Oracle Exadata Database Service on Cloud@Customer X11M (ExaDB-C@C) サービス概要
Avatar for oracle4engineer oracle4engineer
PRO
2
8.5k
Aurora MySQL 8.4リリース！ Rubyistが備えること / what-rubyist-should-prepare-for-aurora-mysql-8-4
Avatar for Yuki Fukuma fkmy
0
690
テックカンファレンス三大ステークホルダーの文化人類学 ─ 違いを認め合う関係性作り
Avatar for bash0C7 bash0c7
1
170

Featured

See All Featured
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3.4k
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
225
10k
HTML-Aware ERB: The Path to Reactive Rendering @ RubyCon 2026, Rimini, Italy
Avatar for Marco Roth marcoroth
3
360
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
133
19k
Six Lessons from altMBA
Avatar for Skipper Chong Warson skipperchong
29
4.3k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
370
From π to Pie charts
Avatar for Rasagy Sharma rasagy
0
240
Mozcon NYC 2025: Stop Losing SEO Traffic
Avatar for Sam Torres samtorres
1
410
The Language of Interfaces
Avatar for Des Traynor destraynor
162
27k
Design in an AI World
Avatar for tapps tapps
1
270
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
1
160

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo