Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
0
60

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
210
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
150
Shared Mutable State
Avatar for Greg Heo gregheo
0
480
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
63
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
140
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
530
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
130
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
130
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
400

Other Decks in Technology

See All in Technology
Snowflake のアーキテクチャは本当に筋がよかったのか / Data Engineering Study #30
Avatar for Yoshi Matsuzaki indigo13love
0
260
そもそも AWS FIS について。なぜ今 FIS のハンズオンなのか？などなど
Avatar for kazzpapa3 kazzpapa3
2
120
組織内、組織間の資産保護に必要なアイデンティティ基盤と関連技術の最新動向
Avatar for Naohiro Fujie fujie
0
510
株式会社島津製作所_研究開発（集団協業と知的生産）の現場を支える、OSS知識基盤システムの導入
Avatar for Kuniharu, AKAHANE (赤羽根/州晴) akahane92
1
1.2k
「手を動かした者だけが世界を変える」ソフトウェア開発だけではない開発者人生
Avatar for Yasuhiro Onishi onishi
12
4.7k
Webの技術とガジェットで那須の子ども達にワクワクを！ / IoTLT_20250720
Avatar for you（@youtoy） you
PRO
0
120
経理出身PdMがAIプロダクト開発を_ハンズオンで学んだ話.pdf
Avatar for Shunsuke Narita shunsukenarita
1
110
M365アカウント侵害時の初動対応
Avatar for LHazy lhazy
7
4.5k
Jitera Company Deck / JP
Avatar for Jitera Inc. jitera
0
150
今日からあなたもGeminiを好きになる
Avatar for subaru subaruhello
1
560
「AI駆動開発」のボトルネック『言語化』を効率化するには
Avatar for Tomohiro Tani taniiicom
1
110
TROCCO今昔
Avatar for gtnao gtnao
0
210

Featured

See All Featured
Fashionably flexible responsive web design (full day workshop)
Avatar for Andy Clarke malarkey
407
66k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
120k
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
207
24k
It's Worth the Effort
Avatar for 3n 3n
185
28k
RailsConf 2023
Avatar for Aaron Patterson tenderlove
30
1.2k
Fireside Chat
Avatar for paigeccino paigeccino
37
3.5k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
507
140k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
72
4.9k
Done Done
Avatar for chrislema chrislema
184
16k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
18
1k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.4k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
130
19k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo