7 ms·
An idea I that I considered implementing was to instrument parser libraries (png/pdf etc) with address sanitizer (for iMessage/Chrome/Webkit) and run the instru
by r9295 2y ago
An idea I that I considered implementing was to instrument parser libraries (png/pdf etc) with address sanitizer (for iMessage/Chrome/Webkit) and run the instrumented version for 5% of all parsing operations. If we get enough people to use this, exploits may be easier to discover?
- saagarjha 2y agoGoogle and Apple already do this to some extent: https://arxiv.org/html/2311.09394v2/#S5 https://arxiv.org/html/2311.09394v2/#S5