News for hackers. Stuff that matters.

A comment on OpenSSL Security Advisory - 26 Sep 2016. Parent comment

Re:OpenSSL Security Advisory - 26 Sep 2016 by the_why_of_y on Monday September 26, 2016 @06:17PM (#12586080)
Worse than the performance impact is the problem that AddressSanitizer was designed to be a debugging tool and not to mitigate exploits in production.

http://seclists.org/oss-sec/2016/q1/363

[ Parent | on HN ]
Re:OpenSSL Security Advisory - 26 Sep 2016 by duneroadrunner on Tuesday September 27, 2016 @11:14AM (#12590200)
I see. Interesting that the Tor project and others had the same idea though. I wonder how feasible it would be to derive an "AddressHardener" from the AddressSanitizer.
[ Parent | on HN ]