Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
0
62

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
230
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
160
Shared Mutable State
Avatar for Greg Heo gregheo
0
500
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
66
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
150
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
540
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
140
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
130
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
410

Other Decks in Technology

See All in Technology
巨大モノリスのリプレイス──機能整理とハイブリッドアーキテクチャで挑んだ再構築戦略
Avatar for ZOZO Developers zozotech
PRO
0
290
AS59105におけるFreeBSD EtherIPの運用と課題
Avatar for t-umeda x86taka
0
270
AWS re:Invent 2025 で頻出の 生成 AI サービスをおさらい
Avatar for komakichi komakichi
3
220
クラスタ統合リアーキテクチャ全貌～1,000万ユーザーのウェルネスSaaSを再設計～
Avatar for hacomono Inc. hacomono
PRO
0
150
Greenは本当にGreenか？ - B/GデプロイとAPI自動テストで安心デプロイ
Avatar for Kaz Watanabe kaz29
0
130
AWS Media Services 最新サービスアップデート 2025
Avatar for Eiji KOMINAMI / 小南英司 eijikominami
0
110
膨大なデータをどうさばく？ Java × MQで作るPub/Subアーキテクチャ
Avatar for igu zenta
0
120
ABEMAのCM配信を支えるスケーラブルな分散カウンタの実装
Avatar for Honoka Toda hono0130
4
1.1k
個人から巡るAI疲れと組織としてできること - AI疲れをふっとばせ。エンジニアのAI疲れ治療法 ショートセッション -
Avatar for kichion kikuchikakeru
5
1.9k
IaC を使いたくないけどポリシー管理をどうにかしたい
Avatar for kazzpapa3 kazzpapa3
1
150
メッセージ駆動が可能にする結合の最適化
Avatar for かとじゅん j5ik2o
9
1.5k
AI駆動開発を実現するためのアーキテクチャと取り組み
Avatar for Yuichiro Yamashita baseballyama
16
12k

Featured

See All Featured
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
25
1.6k
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
110k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
463
34k
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.3k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
18k
Fashionably flexible responsive web design (full day workshop)
Avatar for Andy Clarke malarkey
407
66k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.5k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
9.8k
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
51
51k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
180
10k
Navigating Team Friction
Avatar for Lara Hogan lara
190
16k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo