Google Summer of Code projects for the GNU C Library.

Joseph S. Myers joseph@codesourcery.com
Fri Feb 21 01:45:00 GMT 2014


On Thu, 20 Feb 2014, Konstantin Serebryany wrote:

> Idea for glibc GSoC project: instrument the glibc source with
> AddressSanitizer (asan).
> https://code.google.com/p/address-sanitizer/
> goal #1: test glibc itself for bugs like stack or global buffer overflow.

I suspect most interesting such bugs are for cases involving extreme (but 
valid) input that's currently not covered by the testsuite.  In my 
experience it's quite easy to find problems with memory allocation just by 
looking for them; it might be interesting to have a project to review 
allocations in glibc more thoroughly, especially where the size depends on 
user input.

-- 
Joseph S. Myers
joseph@codesourcery.com



More information about the Libc-alpha mailing list