News for hackers. Stuff that matters.
Re:Before you ship a “security mitigation” by jart on Monday September 28, 2020 @01:22AM (#24613236)
2x is very reasonable compared to alternatives like full emulation and electric fencing. It is production worthy. I use -fsanitize-address with static linking all the time. You just have to roll your own runtime to do that. All it entails is a little glue to veneer mmap() and malloc() so it calls memset() to poison (ADDR>>3)+0x7fff8000 appropriately.

There are no comments on this comment yet.