Sanitizing 
All* The Things

06609d73ad2165c4aafcf65a1ddb9563?s=47 Greg Heo
September 12, 2017
Technology
0
34

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

06609d73ad2165c4aafcf65a1ddb9563?s=128

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
65
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
45
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
150
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
16
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
28
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
490
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
62
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
96
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
3
160

Other Decks in Technology

See All in Technology
0edbcf49de5aed437e279402dc0c6a7e?s=48 omn
0
550
404139d782ec666acea93dffc86e089f?s=48 sylph01
0
160
F082484f19b518225501fafa28d05b93?s=48 greymd
0
590
3487ed46845ad0c09d36c3c1c0533ea6?s=48 masakick
0
110
A64ac825509279a770c13c6fc517f11a?s=48 kawaguti
0
110
9e4ea8b3f81c2acc322cc6ed0db32be9?s=48 satoshirobatofujimoto
0
110
53850955f15249a1a9dc49df6113e400?s=48 line_developers
PRO
0
140
53e2d354b3299d64a54af680865516d5?s=48 satotakeshi
0
160
11d3072d628a7b976cd2f4e6a3cf750f?s=48 yuyaabo
0
240
567600e04dbcb14d6bd8f120e6625a27?s=48 tsuyo
0
180
966e29b84ae7dbde170f66b0bc75b7a6?s=48 ishiayaya
PRO
0
320
96de66872f54da75c05c881c7a3713ce?s=48 kenya888
1
100

Featured

See All Featured
7fa6101cd43067653cf4ac6c7ca54305?s=48 akmur
252
19k
E4f5d494ebdc9e7cce1aecf3ce3e8bc1?s=48 shpigford
165
19k
C0390e8b11079f8761c0cd3274ed61cb?s=48 productmarketing
5
640
C0b42577cfc2b321be3474618107e933?s=48 samanthasiow
56
6.3k
78b475797a14c84799063c7cd073962f?s=48 holman
461
280k
B47b288784fda77a94aeb234ca743c24?s=48 keavy
106
14k
Ded01cdab114abe4ec13511e4c25b9bb?s=48 andyhume
62
3.3k
3d6ace9554821d552146413bcdf874f6?s=48 trishagee
20
2k
C620790ae5bf5b50c245b2e0ef95f338?s=48 deanohume
295
27k
79acae287842acf29084005533a7fb3b?s=48 hursman
106
9.2k
9cde37f47e4a800ea081ea42de8d749a?s=48 dougneiner
119
7.8k
95d9f37115fbb0d13135d0f77132f856?s=48 morganepeng
92
13k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo