Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

06609d73ad2165c4aafcf65a1ddb9563?s=47 Greg Heo
September 12, 2017
Technology
0
34

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

06609d73ad2165c4aafcf65a1ddb9563?s=128

Greg Heo

September 12, 2017
Tweet

More Decks by Greg Heo

See All by Greg Heo
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
77
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
51
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
170
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
16
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
35
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
500
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
66
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
0
100
06609d73ad2165c4aafcf65a1ddb9563?s=48 gregheo
3
180

Other Decks in Technology

See All in Technology
7634917a0679d61341cb5cf40dbc7766?s=48 yokawasa
0
330
6ddc65998177a0f05be629dc31321a8f?s=48 kken78
0
290
Eb6be531bcfaa99714d8d3b48665a5a9?s=48 budougumi0617
2
670
140494d272a4d89883a94fdfdb29dea2?s=48 oracle4engineer
PRO
0
9.4k
A35557d139d8d53246763a01ec847a3f?s=48 kichiemon
2
210
Fccb5974b63d64636a7c90faf3bab51f?s=48 kikuzo
2
350
405fe9ab689473f267e2cfbd95f78c75?s=48 kyonmm
1
170
A64ac825509279a770c13c6fc517f11a?s=48 kawaguti
PRO
0
200
6249f569a29ccb5fd9c1b1b3e572ee89?s=48 omuomugin
1
360
13d936e697fe0f4fa96f926d0a712f6c?s=48 sansanbuildersbox
PRO
0
220
2d855b951ff3160c55915821261432f9?s=48 uzzu
1
480
85da685d91fda190e2e3162d0de248a4?s=48 recruitengineers
4
230

Featured

See All Featured
D47656e20ff5e42f125fc5ea0fd636c6?s=48 tmm1
64
10k
D67fff74178013024d833b3eec6cf27f?s=48 lynnandtonic
277
17k
0c6fd6a08d0f898159cda7cafcacf07f?s=48 afnizarnur
180
14k
761be20b5ebd271008bcee1244fc5b52?s=48 matthewcrist
73
7.7k
4394ceb8b277f35ee3da7030384efb5d?s=48 davidbonilla
75
3.8k
5f50f94346fbcb23706f0707169317a4?s=48 aarron
261
36k
0bce06bd06ee7a2c4f5500f25dcf7f18?s=48 paulrobertlloyd
72
3.9k
282d599b414022eba5096510f675b6e2?s=48 chrislema
231
16k
5f2da528927a2ec9ba4fec2069cbc958?s=48 kneath
297
39k
A9179349dd2bdc67f377719f56d85656?s=48 garrettdimon
292
110k
88bc30284c6a424b63a92aad27d0ba36?s=48 jnunemaker
PRO
43
4.9k
E76911cbe088e5b850d966de3fc7435b?s=48 robhawkes
55
3k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo