Hacker News new | ask | show | jobs
by r9295 529 days ago
An idea I that I considered implementing was to instrument parser libraries (png/pdf etc) with address sanitizer (for iMessage/Chrome/Webkit) and run the instrumented version for 5% of all parsing operations. If we get enough people to use this, exploits may be easier to discover?
1 comments

Google and Apple already do this to some extent: https://arxiv.org/html/2311.09394v2/#S5