EffectiveSan: Type and Memory Error Detection using Dynamically Typed C/C++∗ Gregory J. Duck Roland H. C. Yap Department of Computer Science Department of Computer Science National University of Singapore National University of Singapore Singapore Singapore
[email protected] [email protected] Abstract Keywords Type errors, memory errors, (sub-)object bounds Low-level programming languages with weak/static type errors, use-after-free errors, type confusion, dynamic types, systems, such as C and C++, are vulnerable to errors re- type checking, bounds checking, sanitizers, low-fat pointers, lating to the misuse of memory at runtime, such as (sub- C, C++ )object bounds overflows, (re)use-after-free, and type con- ACM Reference Format: fusion. Such errors account for many security and other Gregory J. Duck and Roland H. C. Yap. 2018. EffectiveSan: Type undefined behavior bugs for programs written in these lan- and Memory Error Detection using Dynamically Typed C/C++. guages. In this paper, we introduce the notion of dynamically In Proceedings of 39th ACM SIGPLAN Conference on Programming typed C/C++, which aims to detect such errors by dynami- Language Design and Implementation (PLDI’18). ACM, New York, cally checking the “effective type” of each object before use NY, USA, 15 pages. https://doi.org/10.1145/3192366.3192388 at runtime. We also present an implementation of dynami- cally typed C/C++ in the form of the Effective Type Sanitizer 1 Introduction (EffectiveSan). EffectiveSan enforces type and memory safety Modern programming languages employ type systems to using a combination of low-fat pointers, type meta data and control object usage and detect bugs.