AddressSanitizer, or How to Make C/C++ Programs More Reliable and Secure

on YouTube ↗40m

" summary

AddressSanitizer is presented as a tool for making C/C++ programs more reliable and secure by detecting memory errors. The talk covers how AddressSanitizer works, its integration into build systems and toolchains, and practical usage for finding and fixing bugs like buffer overflows and use-after-free in C/C++ code.

AI-written summary · about

" chapters (26)

1. 0:00AddressSanitizer intro
2. 1:08Why C/C++ matters
3. 3:39Memory errors in C/C++
4. 5:26Limitations of tools
5. 7:34What is AddressSanitizer
6. 8:15AddressSanitizer with Clang
7. 9:41Features and speed
8. 11:04Live demo with Chrome
9. 12:27Buffer overflow detection
10. 13:30Stack overflow detection
11. 13:57Use-after-free errors
12. 14:40Q&A
13. 15:03Firefox and AddressSanitizer
14. 16:34Performance impact
15. 17:59Memory quarantine
16. 19:06Shadow memory
17. 25:11Library functions and shadow memory
18. 26:38Handling libc functions
19. 27:01Chrome bug findings
20. 28:04Server-side bug detection
21. 28:46Open source adoption
22. 29:07Future improvements
23. 30:11Summary
24. 30:57Other sanitizers
25. 31:39ThreadSanitizer and MemorySanitizer
26. 32:27Final Q&A

" related talks

• 01h 29mAddressSanitizer on WindowsVictor Ciura · ACCU 2021 Online
• 50mAddressSanitizer/ThreadSanitizer for Linux KernelKonstantin Serebryany, Dmitry Vukov · Collaboration Summit 2013
• 01h 00mSanitize for your Sanity: Sanitizers tools for Modern C++Evgenii Seliverstov · Meeting C++ 2025
• 01h 02mSanitize your C++ codeKostya Serebryany · CppCon 2014
• 49mTeaching Containers and Allocators How to Sanitize AddressesMiro Knejp · CppNorth 2023
• 59mBeyond Sanitizers...Kostya Serebryany · CppCon 2015
• 06mLightning Talk: You Should Use AddressSanitizerBrody Holden · CppCon 2023
• 36mCode Analysis: Empowering developers to write performant, reliable, and safe C++Sunny Chatterjee, Jim Radigan · Pure Virtual C++ 2021