domains / families / security / address-sanitizer

address-sanitizer

separate

Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests. Covers -fsanitize=address builds, ASAN_OPTIONS, reading the crash report, LeakSanitizer, and the overhead and platform trade-offs. Use when fuzzing C/C++ or Rust that has unsafe blocks or FFI, when debugging a memory corruption crash, or when reading an ASan stack trace.

When to use

• Fuzzing C/C++ code for memory safety vulnerabilities
• Testing Rust code with unsafe blocks
• Debugging crashes related to memory corruption
• Running unit tests where memory errors are suspected
• Reading an ASan stack trace

When not to use

• Running production code
• Platform is Windows or macOS
• Performance overhead is unacceptable
• Fuzzing pure safe languages without FFI

Skill page

Source