How do I enable AddressSanitizer in Clang or GCC?

You can enable ASan by adding the '-fsanitize=address' flag to your compiler and linker commands. Adding '-g' is also recommended to ensure you get readable stack traces in error reports.

What types of memory errors can AddressSanitizer detect?

ASan is designed to detect heap, stack, and global buffer overflows, use-after-free (dangling pointers), use-after-return, use-after-scope, double-free, and memory leaks.

Why does my fuzzer immediately crash when ASan is enabled?

ASan reserves a massive amount of virtual memory (around 20TB). You must disable your fuzzer's memory limits, for example using '-rss_limit_mb=0' in libFuzzer or '-m none' in AFL++.

Can I use ASan with Rust code?

Yes, ASan is highly effective for testing Rust code that utilizes 'unsafe' blocks or interfaces with C libraries via Foreign Function Interface (FFI) to ensure memory safety at the boundaries.

How does ASan impact program performance?

ASan typically introduces a 2x-4x slowdown and increases memory usage. Because of this overhead, it is intended for use during testing and fuzzing rather than in production environments.

AddressSanitizer (ASan) Memory Detection

Name: AddressSanitizer (ASan) Memory Detection
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Detects memory corruption bugs like buffer overflows and use-after-free errors during C/C++ fuzzing and software testing.

AddressSanitizer (ASan) is a fast memory error detector that instruments code at compile-time to identify critical safety violations at runtime. This skill enables Claude to guide developers through the implementation of ASan within their testing pipelines, helping to uncover heap-buffer-overflows, stack-buffer-overflows, use-after-free vulnerabilities, and memory leaks. It provides specific patterns for integrating with popular fuzzers like libFuzzer and AFL++, configuring complex environment variables, and interpreting detailed crash reports to effectively harden C, C++, and unsafe Rust applications.

主な機能

01Detects buffer overflows, use-after-free, and double-free errors

02Configures runtime behavior via ASAN_OPTIONS and environment flags

03Instruments C/C++ and Rust code for runtime memory tracking

04Provides detailed stack traces and allocation/deallocation reports

050 GitHub stars

06Integrates with major fuzzing engines like libFuzzer and AFL++

ユースケース

01Fuzzing C/C++ libraries for exploitable security vulnerabilities

02Debugging complex memory corruption in legacy codebases

03Validating memory safety within Rust FFI boundaries and unsafe blocks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks address-sanitizer

For use in Claude.ai and ChatGPT

主な機能

01Detects buffer overflows, use-after-free, and double-free errors

02Configures runtime behavior via ASAN_OPTIONS and environment flags

03Instruments C/C++ and Rust code for runtime memory tracking

04Provides detailed stack traces and allocation/deallocation reports

050 GitHub stars

06Integrates with major fuzzing engines like libFuzzer and AFL++

ユースケース

01Fuzzing C/C++ libraries for exploitable security vulnerabilities

02Debugging complex memory corruption in legacy codebases

03Validating memory safety within Rust FFI boundaries and unsafe blocks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks address-sanitizer

For use in Claude.ai and ChatGPT