Hacker News new | ask | show | jobs
by planede 762 days ago
> BTW. Use the AddressSanitizer. Please! The toolchain improved the usage and safety of the language so much.

In general I agree with the sentiment, use AddressSanitizer in testing/debugging. However it's not meant to be a hardening option, AFAIK, so I advise against using it in production (along with other sanitizers), even if you can live with the performance hit.

1 comments

Yep.

Theoretically it is possible but libasan is not intended for linking or shipping in production. Also stuff like LeakSanitizer[1] actually cannot [1] be used with GDB.

While shipping debug symbols is something I recommend and has no side-effects aside from mere file-size (debug symbols are only loaded when used).

Usual exceptions apply as you encounter them.

[1] https://github.com/google/sanitizers/issues/857