Google Summer of Code projects for the GNU C Library.
Joseph S. Myers
joseph@codesourcery.com
Fri Feb 21 01:45:00 GMT 2014
On Thu, 20 Feb 2014, Konstantin Serebryany wrote:
> Idea for glibc GSoC project: instrument the glibc source with
> AddressSanitizer (asan).
> https://code.google.com/p/address-sanitizer/
> goal #1: test glibc itself for bugs like stack or global buffer overflow.
I suspect most interesting such bugs are for cases involving extreme (but
valid) input that's currently not covered by the testsuite. In my
experience it's quite easy to find problems with memory allocation just by
looking for them; it might be interesting to have a project to review
allocations in glibc more thoroughly, especially where the size depends on
user input.
--
Joseph S. Myers
joseph@codesourcery.com
More information about the Libc-alpha
mailing list