AddressSanitizer on Windows

on YouTube ↗01h 29m

" summary

AddressSanitizer is available in Visual Studio (stable since 16.9) and finds real heap, stack and container overflows that static checks miss, with typical slowdowns around ~2x runtime and about 2x memory for heap-heavy apps. Integration produces portable snapshot (.dmp) files that open in the debugger’s memory window, and pairs with Azure OneFuzz for cloud fuzzing. Gotchas: edit‑and‑continue, incremental linking, /NODEFAULTLIB and RTC checks are incompatible until workarounds or newer builds are used.

AI-written summary · about

" chapters (12)

1. 0:00Introduction to testing
2. 1:08AddressSanitizer on Windows
3. 3:16The importance of tooling
4. 6:03Static analysis techniques
5. 15:24Clang support in Visual Studio
6. 19:16Static vs dynamic analysis
7. 27:22Using AddressSanitizer
8. 36:16Asan IDE integration
9. 43:45How AddressSanitizer works
10. 57:06Asan implementation details
11. 1:06:55Debugging examples
12. 1:17:26Fuzzing and conclusion

" related talks

• 50mC++ Sanitizers & Fuzzing for the Windows Platform Using New Compilers...Jim Radigan · CppCon 2019
• 40mAddressSanitizer, or How to Make C/C++ Programs More Reliable and SecureKonstantin Serebryanyy · HighLoad++ 2012
• 36mCode Analysis: Empowering developers to write performant, reliable, and safe C++Sunny Chatterjee, Jim Radigan · Pure Virtual C++ 2021
• 06mLightning Talk: You Should Use AddressSanitizerBrody Holden · CppCon 2023
• 50mAddressSanitizer/ThreadSanitizer for Linux KernelKonstantin Serebryany, Dmitry Vukov · Collaboration Summit 2013
• 59mBeyond Sanitizers...Kostya Serebryany · CppCon 2015
• 01h 02mSanitize your C++ codeKostya Serebryany · CppCon 2014
• 49mTeaching Containers and Allocators How to Sanitize AddressesMiro Knejp · CppNorth 2023