Don't Waste My Efforts: Pruning Redundant Sanitizer Checks by Developer-Implemented Type Checks
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Learn about an innovative approach to reducing dynamic type confusion sanitizer overhead in a 14-minute conference presentation from USENIX Security '24. Explore T-PRUNIFY, a novel tool designed to identify and leverage developer-implemented runtime type information (RTTI) in C++ projects. Discover how this tool automatically detects relationships between field and method return values and concrete object types, enabling the safe removal of redundant sanitizer checks. Examine the tool's effectiveness when integrated with HexType, a leading type confusion sanitizer, and understand how it achieves significant performance improvements by reducing average overhead by 25% to 75% in large C++ programs. Gain insights into type confusion vulnerabilities, their security implications, and the challenges faced by both static and dynamic detection approaches in complex C++ projects.