Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Sanitizing 
All* The Things

Avatar for Greg Heo Greg Heo
September 12, 2017
Technology
68
0

Sanitizing 
All* The Things

Address sanitizer and thread sanitizer. What, why, how?

Avatar for Greg Heo

Greg Heo

September 12, 2017

More Decks by Greg Heo

See All by Greg Heo
Concurrency From the Ground Up
Avatar for Greg Heo gregheo
0
250
The least you need to know about hashing in Swift
Avatar for Greg Heo gregheo
0
200
Shared Mutable State
Avatar for Greg Heo gregheo
0
540
Promises, Futures, and the Shape of Your Code
Avatar for Greg Heo gregheo
0
72
Shared, Exclusive, Mutable, Immutable
Avatar for Greg Heo gregheo
0
160
Getting Under Swift’s Skin
Avatar for Greg Heo gregheo
0
560
Sanitizing Threads for Fun & Profit
Avatar for Greg Heo gregheo
0
160
Thirteen Ways of Looking at a View Controller
Avatar for Greg Heo gregheo
0
140
Five Unbelievable Secrets of Reactive Programming the Experts Don't Want You to Know!
Avatar for Greg Heo gregheo
3
430

Other Decks in Technology

See All in Technology
AI Agentをシステムに組み込む前にゆるく向き合ってみる
Avatar for hayama hayama17
0
170
アラート調査向けAIエージェントの本番導入とその後/AI Agents for Alert Investigation: Production Deployment and After
Avatar for SadayoshiTada taddy_919
1
240
秘密度ラベル初心者が第1歩でつまづかないための「設計・運用」ポイント
Avatar for seafay seafay
PRO
1
500
IaC コードを資産へ：AWS CDK 社内ライブラリと横断展開 / aws-summit-japan-2026
Avatar for k.goto gotok365
10
1.6k
「軸足」は 固定しなくていい - 熱量と強みで描く、しなやかなキャリアの形
Avatar for KAKEHASHI kakehashi
PRO
1
280
テスト設計の本質を改めて考えてみる～生成AIを活用する時代だからこそ、作ったテストの説明性を高めよう～
Avatar for YAMASAKI Takashi yamasaki696
1
110
螺旋型キャリアの生存戦略 / kinoko-conf2026
Avatar for Rakus_Dev rakus_dev
1
1.2k
Multi-Agent並列開発を 安全に回すための技術 / Technology for Safely Multi-Agent Parallel Development
Avatar for philomagi tooppoo
0
210
製造現場での生成AIの活用、およびエージェントAIの実装のあり方、AVEVAの取り組み
Avatar for AIxIoTビジネス共創ラボ iotcomjpadmin
0
180
AWS Security Hub CSPMの成功・失敗体験
Avatar for cm-usuda-keisuke cmusudakeisuke
0
580
【FinOps】データドリブンな意思決定を目指して
Avatar for kaita z63d
2
470
脱SaaS！FDEを支えるプロビジョニングと分離設計
Avatar for Kenichi SUZUKI knih
0
300

Featured

See All Featured
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4.3k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
1.9k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
470
Become a Pro
Avatar for Speaker Deck speakerdeck
PRO
31
6k
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
370
The agentic SEO stack - context over prompts
Avatar for schlessera schlessera
0
830
Jess Joyce - The Pitfalls of Following Frameworks
Avatar for Tech SEO Connect techseoconnect
PRO
1
170
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
508
140k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
340
58k
The browser strikes back
Avatar for Jono Alderson jonoalderson
0
1.3k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
254
22k
Conquering PDFs: document understanding beyond plain text
Avatar for Ines Montani inesmontani
PRO
4
2.8k

Transcript

  1. Sanitizing
 All* The Things tacow / September 2017 / @gregheo

  2. ❓ ✋

  3. None

  4. ✅

  5. None

  6. ‣ ASAN ‣ TSAN

  7. ‣ What? ‣ So what? ‣ How? ‣ Show me?

  8. Address Sanitizer allocated buffer unallocated!

  9. ‣ Buffer overflows ‣ Subtle bugs ‣ Security vulnerabilities

  10. None

  11. allocated buffer padding shadow memory poisoned poisoned OK

  12. asan_malloc malloc asan_free free Shadow memory check Pointer access

  13. Live Coding!

  14. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free

  15. Thread Sanitizer memory buffer read write

  16. ‣ Race conditions ‣ Very subtle and
 difficult-to-reproduce bugs ‣

    Thread mismatch errors
  17. None

  18. ‣ Thread ID ‣ Timestamp ‣ Read or write? ‣

    Bytes accessed
  19. None

  20. Live Coding!

  21. Thread Sanitizer Data race detector Find race conditions & thread

    issues Thread IDs & timestamps

  22. Address Sanitizer Memory corruption & errors Security & crashes Custom

    malloc & free
  23. None

  24. @gregheo