--- wikisrc/users/maya.mdwn 2017/02/16 00:10:22 1.4 +++ wikisrc/users/maya.mdwn 2018/02/25 11:30:25 1.8 @@ -20,14 +20,11 @@ are not intercepted. 2. Not even close to canonical commands, should probably be improved. -3. ASAN_OPTIONS=alloc_dealloc_mismatch=0 is because atf-run itself triggers a bug. Should have a look at it so this option doesn't need to be disabled. +3. To workaround "Shadow memory range interleaves with an existing memory mapping. ASan cannot proceed correctly". An alternative is to LD_PRELOAD and LD_LIBRARY_PATH an entirely separate libc, ld.elf_so, etc. -4. To workaround "Shadow memory range interleaves with an existing memory mapping. ASan cannot proceed correctly". An alternative is to LD_PRELOAD and LD_LIBRARY_PATH an entirely separate libc, ld.elf_so, etc. +4. ASan can be wrong about which function is faulting, if we're talking about functions internal to the library. Running it on a separate file or in GDB can be helpful. Worth trying if the failure doesn't make sense. -5. ASan can be wrong about which function is faulting, if we're talking about functions internal to the library. Running it on a separate file or in GDB can be helpful. Worth trying if the failure doesn't make sense. - -Important note: ASan should not be run on production systems. [It can pose a -security risk](http://www.openwall.com/lists/oss-security/2016/02/17/9). +**Important note: ASan should not be run on production systems. [It can pose a security risk](http://www.openwall.com/lists/oss-security/2016/02/17/9).** ## Coverity ## @@ -51,7 +48,7 @@ reported: - Library or other code you know well already - Drivers for hardware you actually own and can test -Future ideas: +## Future ideas: ## - GCC could be told to add ASan flags for all shared objects, making it easier to build world with those flags - We could run all of NetBSD with ASan for some real world tests.