Hacker News new | past | comments | ask | show | jobs | submit login
Clang Address Sanitizer (mikeash.com)
61 points by chmaynard on July 3, 2015 | hide | past | favorite | 5 comments



AddressSanitizer is great. It's been around for a long time now though, the only thing that's new is that it now has Xcode integration. (And Apple marketing apparently thought that the name was better with a space in the middle, like they think that "LLVM Compiler" is a better name than clang.)


Awesome to see this integrated with Xcode! What's the status of the memory sanitizer?


Interestingly enough, the x86 processor has a BOUND instruction, which was supposed to be used for array bounds checking and would throw interrupt 5 on error.

It has never really caught on.


AMD removed BOUND as part of the 64-bit transition. Intel is adding a similar feature to Skylake (Aug 2015) called "Intel Memory Protection Extensions" (MPX).

The Address Sanitizer team has an analysis of it: https://code.google.com/p/address-sanitizer/wiki/IntelMemory...

> A very biased conclusion: Intel MPX might be useful for in-struct buffer overflow detection, and for general buffer overflow detection in programs with lots of arrays and few pointers. However AddressSanitizer (and, if implemented, AddressSanitizerInHardware) is more useful: faster, finds more bugs, easier to deploy.


Just awesome.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: