Re:Before you ship a “security mitigation”
by jart on Monday September 28, 2020 @01:22AM
(#24613236)
2x is very reasonable compared to alternatives like full emulation and electric fencing. It is production worthy. I use -fsanitize-address with static linking all the time. You just have to roll your own runtime to do that. All it entails is a little glue to veneer mmap() and malloc() so it calls memset() to poison (ADDR>>3)+0x7fff8000 appropriately.
[ Parent
| on HN ]
There are no comments on this comment yet.