https://blog.omiilgo.com/tags/asan/ Recent content in Asan on Security Notes Hugo en-us Thu, 20 Jun 2024 10:00:00 +0800 https://blog.omiilgo.com/posts/android-kernel-lpe-classes/ Thu, 20 Jun 2024 10:00:00 +0800 https://blog.omiilgo.com/posts/android-kernel-lpe-classes/ Futex, perf_event, and get_user-era Android kernel LPE classes as broken invariants. No kernel exploit code. A toy C file-TOCTOU analog, a planted strcpy, ASAN output. https://blog.omiilgo.com/posts/format-string-vulnerability-patterns/ Wed, 08 May 2019 15:00:00 +0800 https://blog.omiilgo.com/posts/format-string-vulnerability-patterns/ Toy printf(user) lab: gdb dump of stack words matching a %p leak (canary included conceptually), SIGSEGV from %s, ASan on a sprintf companion, patched printf("%s", user).