README.md

Awesome Sanitizer

A curated list of sanitizer resources.

Sanitizers are dynamic tools that detect software bugs through compiler instrumentation.

Contents

• C/C++
  • address sanity
  • undefined behavior
  • data races
  • uninitialized reads
  • type confusion
  • dataflow analysis
• Rust
  • address sanity
  • data races
  • uninitialized reads
• GPU
  • sanitizers by vendors
  • data races
• ETC

C/C++

address sanity

AddressSanitizer - A Fast Address Sanity Checker.

• AddressSanitizer (Clang documentation)
• wiki/Address Sanitizer
• HOWTO: Use Address Sanitizer

ASAN-- - Debloating Address Sanitizer.

• junxzm1990/ASAN--

RetroWrite - Statically Instrumenting COTS Binaries for Fuzzing and Sanitization.

• HexHive/retrowrite

BoKASAN - Binary-only Kernel Address Sanitizer for Effective Kernel Fuzzing.

• seclab-yonsei/BoKASAN

SafePM - a sanitizer for persistent memory.

• TUM-DSE/safepm

FuZZan - Efficient Sanitizer Metadata Design for Fuzzing.

• HexHive/FuZZan

SANRAZOR - Reducing Redundant Sanitizer Checks in C/C++ Programs.

• SanRazor-repo/SanRazor

OBSan - An Out-Of-Bound Sanitizer to Harden DNN Executables.

• yanzuochen/obsan

ASanity - On Bug Shadowing by Early ASan Exits.

undefined behavior

UndefinedBehaviorSanitizer (Clang documentation)

• Improving Application Security with UndefinedBehaviorSanitizer (UBSan) and GCC
• A Guide to Undefined Behavior in C and C++

data races

ThreadSanitizer - data race detection in practice.

• ThreadSanitizer (Clang documentation)
• wiki/ThreadSanitizer

uninitialized reads

MemorySanitizer - fast detector of uninitialized memory use in C++.

• MemorySanitizer (Clang documentation)
• wiki/MemorySanitizer

MTSan - A Feasible and Practical Memory Sanitizer for Fuzzing {COTS} Binaries.

FloatZone - Accelerating Memory Error Detection using the Floating Point Unit.

• vusec/floatzone

type confusion

TypeSan - Practical Type Confusion Detection.

• vusec/typesan

CastSan - Efficient Detection of Polymorphic C++ Object Type Confusions with LLVM.

HexType - Efficient Detection of Type Confusion Errors for C++.

• HexHive/HexType

EffectiveSan - type and memory error detection using dynamically typed C/C++.

• GJDuck/EffectiveSan

TCD - Statically Detecting Type Confusion Errors in C++ Programs.

dataflow analysis

DataFlowSanitizer (Clang documentation)

Rust

address sanity

AddressSanitizer (The Rust Unstable Book)

HWAddressSanitizer (The Rust Unstable Book)

ERASan - Efficient Rust Address Sanitizer.

• S2-Lab/ERASan

data races

ThreadSanitizer (The Rust Unstable Book)

uninitialized reads

MemorySanitizer (The Rust Unstable Book)

MemTagSanitizer (The Rust Unstable Book)

GPU

sanitizers by vendors

NVIDIA: cuCatch - A Debugging Tool for Efficiently Catching Memory Safety Violations in CUDA Applications

AMD: Using the AddressSanitizer on a GPU (beta release)

data races

iGUARD - In-GPU Advanced Race Detection

• csl-iisc/iGUARD-SOSP21

ETC

NeuralSanitizer - Detecting Backdoors in Neural Networks.

DySan - Dynamically Sanitizing Motion Sensor Data Against Sensitive Inferences through Adversarial Networks.

• DynamicSanitizer/DySan

Contributing

Please refer to the guidelines at Contributing.md for details.

Table of contents generated with markdown-toc