Asan | Security Notes

Android Kernel LPE Classes, at Invariant Level, Plus a Userspace TOCTOU Lab

Futex, perf_event, and get_user-era Android kernel LPE classes as broken invariants. No kernel exploit code. A toy C file-TOCTOU analog, a planted strcpy, ASAN output.

Format String Lab: Leak, Crash, and the %s Patch

Toy printf(user) lab: gdb dump of stack words matching a %p leak (canary included conceptually), SIGSEGV from %s, ASan on a sprintf companion, patched printf("%s", user).