zlacker

[return to "Arm releases experimental CHERI-enabled Morello board"]
1. phkahl+Hu[view] [source] 2022-01-20 14:34:46
>>zxombi+(OP)
How does this compare to testing with address sanitizers?
◧◩
2. fulafe+wd3[view] [source] 2022-01-21 06:17:31
>>phkahl+Hu
Testing for security bugs means mostly fuzzing these days. AddressSanitizer is added instrumentation, flagging illegal program states even when the test case wouldn't trigger a crash normally.

Fuzzing helps but it's a probabilistic method with fallible search mechanisms, there's going to be cases left that an intelligent adversary can find by reasoning, a different/better fuzzer, better instrumentation, or alt techniques like symbolic execution etc.

[go to top]