Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
0
60

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
220
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
150
Shared Mutable State
Avatar for Greg Heo gregheo
0
490
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
64
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
140
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
530
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
130
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
130
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
400

Other Decks in Technology

See All in Technology
フルカイテン株式会社 エンジニア向け採用資料
Avatar for FULL KAITEN fullkaiten
0
9k
「Verify with Wallet API」を アプリに導入するために
Avatar for hinakko hinakko
1
230
Shirankedo NOCで見えてきたeduroam/OpenRoaming運用ノウハウと課題 - BAKUCHIKU BANBAN #2
Avatar for marokiki marokiki
0
140
関係性が駆動するアジャイル──GPTに人格を与えたら、対話を通してふりかえりを 習慣化できた話
Avatar for リリカル mhlyc
0
130
Access-what? why and how, A11Y for All - Nordic.js 2025
Avatar for Geisy Domiciano gdomiciano
1
110
KMP の Swift export
Avatar for Koki Hirokawa kokihirokawa
0
330
英語は話せません！それでも海外チームと信頼関係を作るため、対話を重ねた2ヶ月間のまなび
Avatar for ニイオカ niioka_97
0
120
バイブコーディングと継続的デプロイメント
Avatar for nwiizo nwiizo
2
420
ACA でMAGI システムを社内で展開しようとした話
Avatar for Yuji Masaoka | まっぴぃ mappie_kochi
1
260
AIが書いたコードをAIが検証する！自律的なモバイルアプリ開発の実現
Avatar for henteko henteko
1
340
「AI駆動PO」を考えてみる - 作る速さから価値のスループットへ：検査・適応で未来を開発 / AI-driven product owner. scrummat2025
Avatar for yosuke nagai yosuke_nagai
4
590
Where will it converge?
Avatar for Ibukun Adedeji ibknadedeji
0
180

Featured

See All Featured
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
30
2.9k
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
31k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
71
11k
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.6k
Raft: Consensus for Rubyists
Avatar for Patrick Van Stee vanstee
139
7.1k
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
33
8.8k
Gamification - CAS2011
Avatar for David Bonilla davidbonilla
81
5.5k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
54
3k
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
514
110k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
40
2.1k
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
29
2.6k
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
57
5.9k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo