Sanitize for your Sanity: Sanitizers tools for Modern C++

on YouTube ↗01h 00m

" summary

Covers concrete results: how to instrumenting an application with GCC/LLVM flags, CMake and Conan toolchain tricks, and when rebuilding dependencies is mandatory; explains address, memory, thread, undefined-behavior sanitizers and LeakSanitizer plus experimental hardware support; shows shadow‑memory mechanics and stack red zones; quantifies typical overhead as 2x–3x memory/slowdown and gives mitigation: selective instrumentation, ignore attributes, suppressions, shared vs static runtime issues, and cross‑language (Rust/Python) bridge constraints and false‑negative causes.

AI-written summary · about

" chapters (30)

1. 0:00Introduction to sanitizers for memory safety
2. 1:08Approaches to ensure memory safety in C++
3. 2:10Overview of major sanitizer tools
4. 3:13Building and packaging sanitized code
5. 6:23Configuring build systems for sanitizers
6. 7:28Deep dive into Address Sanitizer
7. 9:33Live demo of Address Sanitizer in action
8. 14:15How Address Sanitizer handles stack memory
9. 16:46Shadow memory and its role in detection
10. 17:50Performance costs and optimizations of sanitizers
11. 19:21Disabling checks and false positives mitigation
12. 21:29Leak Sanitizer and its use cases
13. 23:13Thread Sanitizer for concurrency bugs
14. 26:03Common pitfalls with sanitizer integration
15. 27:48Platform-specific behavior of sanitizers
16. 29:17Bloomberg’s experience with sanitizers
17. 30:00Memory Sanitizer limitations and alternatives
18. 32:12Costs and false positives in Thread Sanitizer
19. 33:15Sanitizer interactions with static libraries
20. 35:29Handling dynamic libraries and sanitizers
21. 37:00Cross-language support with Rust and sanitizers
22. 41:11Building Rust-C++ bridges with sanitizers
23. 44:23Challenges in cross-language sanitizer integration
24. 45:26Where and how to use sanitizers effectively
25. 47:12Unit tests and integration tests with sanitizers
26. 48:40Fuzzing and data coverage for sanitizers
27. 49:45Running sanitizers in production safely
28. 51:49Deployment strategies for sanitizers in production
29. 52:11Summary and key takeaways from the talk
30. 53:05Q&A session on sanitizer documentation and issues

" related talks

• 01h 02mSanitize your C++ codeKostya Serebryany · CppCon 2014
• 59mBeyond Sanitizers...Kostya Serebryany · CppCon 2015
• 40mAddressSanitizer, or How to Make C/C++ Programs More Reliable and SecureKonstantin Serebryanyy · HighLoad++ 2012
• 50mSecure development with C++ - Lessons and techniquesHelge Penne · NDC TechTown 2023
• 14mSANRAZOR: Reducing Redundant Sanitizer Checks in C/C++ ProgramsManuel Rigger, Zhendong Su, Shuai Wang, Jiang Zhang, Pinjia He · 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI '21)
• 50mAddressSanitizer/ThreadSanitizer for Linux KernelKonstantin Serebryany, Dmitry Vukov · Collaboration Summit 2013
• 18mDon't Look UB: Exposing Sanitizer-Eliding Compiler OptimizationsHerbert Bos, Klaus von Gleissenthall, Cristiano Giuffrida, Raphael Isemann, Erik van der Kouwe · PLDI 2023
• 01h 03mPurging Undefined Behavior & Intel Assumptions in a Legacy C++ CodebaseRoth Michaels · CppCon 2022