awesome-sanitizer

A curated list of sanitizers to detect bugs
https://github.com/junwha/awesome-sanitizer

Last synced: 12 days ago
JSON representation

C/C++
- Address Sanity
  - AddressSanitizer (Paper) - A fast address sanity checker.
  - AddressSanitizer (Clang Documentation) - Official Clang (LLVM) docs for Address Sanitizer.
  - wiki/AddressSanitizer - Address Sanitizer page in Google sanitizers wiki.
  - HOWTO: Use Address Sanitizer - Basic usage tutorial for Address Sanitizer.
  - ASAN-- - Debloating Address Sanitizer.
  - junxzm1990/ASAN-- - Repository for ASAN--.
  - RetroWrite - Statically instrumenting COTS binaries for fuzzing and sanitization.
  - HexHive/retrowrite - RetroWrite implementation.
  - BoKASAN - Binary-only Kernel Address Sanitizer for effective kernel fuzzing.
  - seclab-yonsei/BoKASAN - Repository for BoKASAN.
  - TUM-DSE/safepm - SafePM repository.
  - FuZZan - Efficient sanitizer metadata design for fuzzing.
  - HexHive/FuZZan - FuZZan repository.
  - SANRAZOR - Reducing redundant sanitizer checks in C/C++ programs.
  - SanRazor-repo/SanRazor - SanRazor repository.
  - OBSan - An out-of-bound sanitizer to harden DNN executables.
  - yanzuochen/obsan - OBSan repository.
  - ASanity - On bug shadowing by early ASan exits.
  - CMASan - Custom Memory Allocator-aware Address Sanitizer.
  - GIANTSAN - Efficient memory sanitization with segment folding.
  - Conference
  - Conference
  - ![Star - -)
  - Conference
  - ![Star
  - Conference
  - ![Star - repo/SanRazor)
  - Conference
  - ![Star
  - ![Star - yonsei/BoKASAN)
  - SafePM - A sanitizer for persistent memory.
  - Conference
  - ![Star - DSE/safepm)
  - Conference
  - ![Star
  - Conference
  - GWP-ASan - Sampling-Based Detection of Memory-Safety Bugs in Production.
  - Conference
  - ![Star
  - Conference - 2025-047e63)
  - ![Star - Artifact)
  - ![Star - Lab/CMASan)
  - DFirmSan - DFirmSan: A lightweight dynamic memory sanitizer for Linux-based firmware
  - Conference
  - ![Star
  - RangeSanitizer - Detecting Memory Errors with Efficient Range Checks
  - Conference
  - ![Star
  - OLASan - Practical Object-Level Sanitizer with Aggregated Memory Access and Custom Allocator
  - Conference
  - DFirmSan - DFirmSan: A lightweight dynamic memory sanitizer for Linux-based firmware
  - Top of the Heap - Efficient memory error protection of safe heap objects.
  - Conference
  - ShadowBound - Efficient heap memory protection through advanced shadow metadata management and customized compiler optimization.
  - ![Star
  - CAMP - Compiler and allocator-based heap memory protection using boundary-checking instrumentation and escape tracking.
  - ![Star
  - IPEA-San - Pointer capability-based sanitizer for resource-constrained IoT firmware with stateless instrumentation.
  - Conference
  - Sticky Tags - Efficient and deterministic spatial memory error mitigation using ARM MTE with persistent memory tags.
  - Conference
  - Beyond Tag Collision - Cluster-based memory management for tag-based sanitizers.
  - Conference
  - ![Star - repo)
  - PSan - Hybrid metadata scheme for efficient pointer checking combining fat pointers and shadow memory.
  - Conference
  - NanoTag - Systems support for efficient byte-granular overflow detection on ARM MTE.
  - Conference
  - ![Star - rlab/nanotag)
  - FPN - Compiler-instrumented use-after-free prevention via fast pointer nullification at region-level metadata.
  - Conference
  - ![Star - -)
  - ![Star
  - ![Star - repo/SanRazor)
  - ![Star
  - ![Star - DSE/safepm)
  - ![Star - yonsei/BoKASAN)
  - ![Star
  - ![Star
  - ![Star - Artifact)
  - ![Star
  - ![Star
  - ![Star - Lab/CMASan)
  - ![Star
  - ![Star
  - ![Star - repo)
  - ![Star - rlab/nanotag)
- Dataflow Analysis
  - DataFlowSanitizer (Clang Documentation) - A general data flow analysis framework.
- Data Races
  - ThreadSanitizer (Paper) - Data race detection in practice.
  - ThreadSanitizer (Clang Documentation) - Official Clang (LLVM) docs for Thread Sanitizer.
  - wiki/ThreadSanitizer - Thread Sanitizer page in Google sanitizers wiki.
  - BINTSAN - A Binary-level Thread Sanitizer or Why Sanitizing on the Binary Level is Hard.
  - DMARacer - Dynamic detection of vulnerable DMA race conditions in Linux kernel drivers.
  - ![Star
  - HawkSet - Automatic and efficient concurrent persistent memory bug detection via lockset analysis.
  - Conference
  - ![Star
- Sanitizer Unification
  - CombiSan - Unifying Software Sanitizers for Comprehensive Fuzzing
  - Conference
  - ![Star
  - ![Star
- Type Confusion
  - vusec/typesan - TypeSan repository.
  - HexHive/HexType - HexType repository.
  - GJDuck/EffectiveSan - EffectiveSan repository.
  - TCD - Statically detecting type confusion errors in C++ programs.
  - Type++ - Prohibiting type confusion with inline type information.
  - EffectiveSan - Type and memory error detection using dynamically typed C/C++.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - T-PRUNIFY - Pruning redundant sanitizer checks by developer-implemented type checks.
  - TypeSan - Practical type confusion detection.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - Conference
  - ![Star
  - Conference
  - ![Star
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - Conference
  - Conference
  - ![Star
  - TCD - Statically detecting type confusion errors in C++ programs.
  - Conference
  - Conference
  - ![Star
  - ![Star - ucr/TPrunify)
  - HexType - Efficient detection of type confusion errors for C++.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - CastSan - Efficient detection of polymorphic C++ object type confusions with LLVM.
  - Sourcerer - Channeling the void: precise type confusion detection covering void* casts.
  - Conference
  - ![Star
  - Sourcerer - Channeling the void: precise type confusion detection covering void* casts.
  - ![Star
  - ![Star
  - ![Star
  - ![Star - ucr/TPrunify)
  - ![Star
  - Sourcerer - Channeling the void: precise type confusion detection covering void* casts.
  - ![Star
- Undefined Behavior
  - UndefinedBehaviorSanitizer (Clang Documentation) - Official Clang (LLVM) docs for Undefined Behavior Sanitizer.
  - Improving Application Security with UndefinedBehaviorSanitizer and GCC - Basic usage tutorial for Undefined Behavior Sanitizer in Oracle blog.
  - A Guide to Undefined Behavior in C and C++ - Basic usage tutorial for Undefined Behavior Sanitizer in John Regehr's blog.
- Uninitialized Reads
  - MemorySanitizer (Paper) - Fast detector of uninitialized memory use in C++.
  - MemorySanitizer (Clang Documentation) - Official Clang docs.
  - wiki/MemorySanitizer - Google sanitizers wiki.
  - MTSan - A feasible and practical memory sanitizer for fuzzing COTS binaries.
  - FloatZone - Accelerating memory error detection using the floating point unit.
  - vusec/floatzone - FloatZone repository.
  - MSET - Evaluating the effectiveness of memory safety sanitizers
  - Conference
  - Conference
  - ![Star
  - QMSan - QMSan: Efficiently Detecting Uninitialized Memory Errors During Fuzzing
  - ![Star
  - Janitizer - Rethinking Binary Tools for Practical and Comprehensive Security
  - Conference
  - BSan - A Non-Intrusive and Comprehensive Binary-Level Memory Sanitizer
  - Conference
  - ![Star
  - ![Star
Contributing
- Data Races and Others
  - contributing.md
data races
- DySan - Dynamically Sanitizing Motion Sensor Data Against Sensitive Inferences through Adversarial Networks.
Etc
- Data Races
  - DynamicSanitizer/DySan - DySan repository.
GPU
- Data Races
  - csl-iisc/iGUARD-SOSP21 - iGUARD repository.
  - iGUARD - In-GPU advanced race detection.
  - Conference
  - ![Star - iisc/iGUARD-SOSP21)
- Data Races and Others
  - RedSan - A Redundant Memory Instruction Sanitizer for GPU Programs
  - Conference
  - TritonSan - Toward Precise Debugging of Triton Kernels via LLVM Sanitizers
  - Microsoft
  - ![Star - shared/blob/main/triton-san/README.md)
  - Triton-Sanitizer - A Fast and Device-Agnostic Memory Sanitizer for Triton with Rich Diagnostic Context
  - Conference
  - HiRace - Accurate and fast data race checking for GPU programs using source-code instrumentation.
  - Conference
  - GPUArmor - Hardware-software co-design for efficient and scalable memory safety on GPUs.
  - Conference
  - SafeRace - Assessing and addressing WebGPU memory safety in the presence of data races.
  - Conference
  - SuperCollider - Scalable and effective data race detection for CUDA programs.
  - Conference
  - ![Star - iisc/iGUARD-SOSP21)
  - CuSafe - Fast detection of memory safety vulnerabilities in CUDA programs.
- Sanitizers by Vendors
  - NVIDIA: cuCatch - A debugging tool for efficiently catching memory safety violations in CUDA applications.
  - AMD: Using the AddressSanitizer on a GPU - Document for AMD's GPU sanitizer.
Miscellaneous
- Data Races
  - NeuralSanitizer - Detecting backdoors in neural networks.
  - Conference
  - ![Star
  - ![Transaction
  - ![Star
  - DySan - Dynamically sanitizing motion sensor data through adversarial networks.
  - SoK: Sanitizing for security
  - Conference
  - WBSan - WebAssembly Bug Detection for Sanitization and Binary-Only Fuzzing
  - ![Transaction

Programming Languages

C++ 5 C 4 Python 3 LLVM 1 Cuda 1

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

awesome-sanitizer

C/C++

Address Sanity

Dataflow Analysis

Data Races

Sanitizer Unification

Type Confusion

Undefined Behavior

Uninitialized Reads

Contributing

Data Races and Others

data races

Etc

Data Races

GPU

Data Races

Data Races and Others

Sanitizers by Vendors

Miscellaneous

Data Races