{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T04:51:50Z","timestamp":1780635110322,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,6,6]],"date-time":"2023-06-06T00:00:00Z","timestamp":1686009600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,6,6]]},"DOI":"10.1145\/3589250.3596139","type":"proceedings-article","created":{"date-parts":[[2023,6,6]],"date-time":"2023-06-06T20:34:07Z","timestamp":1686083647000},"page":"27-33","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["HWASanIO: Detecting C\/C++ Intra-object Overflows with Memory Shading"],"prefix":"10.1145","author":[{"given":"Konrad","family":"Hohentanner","sequence":"first","affiliation":[{"name":"Fraunhofer AISEC, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Florian","family":"Kasten","sequence":"additional","affiliation":[{"name":"Fraunhofer AISEC, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lukas","family":"Auer","sequence":"additional","affiliation":[{"name":"Fraunhofer AISEC, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,6,6]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the 18th USENIX Security Symposium (SEC \u201909)","author":"Akritidis Periklis","year":"2009","unstructured":"Periklis Akritidis , Manuel Costa , Miguel Castro , and Steven Hand . 2009 . Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors . In Proceedings of the 18th USENIX Security Symposium (SEC \u201909) . USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity09\/technical-sessions\/presentation\/baggy-bounds-checking-efficient-and Periklis Akritidis, Manuel Costa, Miguel Castro, and Steven Hand. 2009. Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors. In Proceedings of the 18th USENIX Security Symposium (SEC \u201909). USENIX Association. https:\/\/www.usenix.org\/conference\/usenixsecurity09\/technical-sessions\/presentation\/baggy-bounds-checking-efficient-and"},{"key":"e_1_3_2_1_2_1","unstructured":"ARM Limited. 2019. ARM Architecture Reference Manual \u2013 ARMv8-A for ARMv8-A architecture profile. ARM DDI 0487E.a (ID070919). \t\t\t\t  ARM Limited. 2019. ARM Architecture Reference Manual \u2013 ARMv8-A for ARMv8-A architecture profile. ARM DDI 0487E.a (ID070919)."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/178243.178446"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.5555\/2190025.2190067"},{"key":"e_1_3_2_1_5_1","unstructured":"MITRE Corporation. 2022. 2022 CWE Top 25 Most Dangerous Software Errors. https:\/\/cwe.mitre.org\/top25\/archive\/2022\/2022_cwe_top25.html Accessed: 2023-03-15. \t\t\t\t  MITRE Corporation. 2022. 2022 CWE Top 25 Most Dangerous Software Errors. https:\/\/cwe.mitre.org\/top25\/archive\/2022\/2022_cwe_top25.html Accessed: 2023-03-15."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134309"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2006.31"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2892208.2892212"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3296979.3192388"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23287"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/2259016.2259034"},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the","author":"Hastings Reed","year":"1991","unstructured":"Reed Hastings and Bob Joyce . 1991 . Purify: Fast Detection of Memory Leaks and Access Errors . In Proceedings of the Winter 1992 USENIX Conference. Reed Hastings and Bob Joyce. 1991. Purify: Fast Detection of Memory Leaks and Access Errors. In Proceedings of the Winter 1992 USENIX Conference."},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 38th ACM\/SIGAPP Symposium on Applied Computing (SAC \u201923)","author":"Hohentanner Konrad","year":"2023","unstructured":"Konrad Hohentanner , Philipp Zieris , and Julian Horsch . 2023 . CryptSan: Leveraging ARM Pointer Authentication for Memory Safety in C\/C++ . In Proceedings of the 38th ACM\/SIGAPP Symposium on Applied Computing (SAC \u201923) . Association for Computing Machinery, New York, NY, USA. isbn:978-1-4503-9517-5\/23\/03 https:\/\/doi.org\/10.1145\/3555776.3577635 10.1145\/3555776.3577635 Konrad Hohentanner, Philipp Zieris, and Julian Horsch. 2023. CryptSan: Leveraging ARM Pointer Authentication for Memory Safety in C\/C++. In Proceedings of the 38th ACM\/SIGAPP Symposium on Applied Computing (SAC \u201923). Association for Computing Machinery, New York, NY, USA. isbn:978-1-4503-9517-5\/23\/03 https:\/\/doi.org\/10.1145\/3555776.3577635"},{"key":"e_1_3_2_1_14_1","volume-title":"Cyclone: A Safe Dialect of C. In USENIX Annual Technical Conference. USENIX Association, 275\u2013288","author":"Jim Trevor","year":"2002","unstructured":"Trevor Jim , J Gregory Morrisett , Dan Grossman , Michael W Hicks , James Cheney , and Yanling Wang . 2002 . Cyclone: A Safe Dialect of C. In USENIX Annual Technical Conference. USENIX Association, 275\u2013288 . Trevor Jim, J Gregory Morrisett, Dan Grossman, Michael W Hicks, James Cheney, and Yanling Wang. 2002. Cyclone: A Safe Dialect of C. In USENIX Annual Technical Conference. USENIX Association, 275\u2013288."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 3rd International Workshop on Automatic and Algorithmic Debugging (AADEBUG \u201997)","author":"Jones Richard W M","year":"1997","unstructured":"Richard W M Jones and Paul H J Kelly . 1997 . Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs . In Proceedings of the 3rd International Workshop on Automatic and Algorithmic Debugging (AADEBUG \u201997) . Link\u00f6ping University Electronic Press. Richard W M Jones and Paul H J Kelly. 1997. Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs. In Proceedings of the 3rd International Workshop on Automatic and Algorithmic Debugging (AADEBUG \u201997). Link\u00f6ping University Electronic Press."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806651.1806657"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503286"},{"key":"e_1_3_2_1_19_1","volume-title":"Concurrent Checking of Pointer and Array Accesses in C Programs. Software: Practics and Experience, 27, 1","author":"Patil Harish","year":"1997","unstructured":"Harish Patil and Charles Fischer . 1997. Low-Cost , Concurrent Checking of Pointer and Array Accesses in C Programs. Software: Practics and Experience, 27, 1 ( 1997 ), Jan., issn:0038-0644 Harish Patil and Charles Fischer. 1997. Low-Cost, Concurrent Checking of Pointer and Array Accesses in C Programs. Software: Practics and Experience, 27, 1 (1997), Jan., issn:0038-0644"},{"key":"e_1_3_2_1_20_1","unstructured":"Bruce Perens. 1999. Electric Fence Malloc Debugger. https:\/\/linux.die.net\/man\/3\/libefence Accessed: 2023-03-15. \t\t\t\t  Bruce Perens. 1999. Electric Fence Malloc Debugger. https:\/\/linux.die.net\/man\/3\/libefence Accessed: 2023-03-15."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS \u201904)","author":"Ruwase Olatunji","unstructured":"Olatunji Ruwase and Monica S. Lam . 2004. A Practical Dynamic Buffer Overflow Detector . In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS \u201904) . Internet Society. Olatunji Ruwase and Monica S. Lam. 2004. A Practical Dynamic Buffer Overflow Detector. In Proceedings of the 11th Annual Network and Distributed System Security Symposium (NDSS \u201904). Internet Society."},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of the 2012 USENIX Annual Technical Conference (ATC \u201912)","author":"Serebryany Konstantin","year":"2012","unstructured":"Konstantin Serebryany , Derek Bruening , Alexander Potapenko , and Dmitry Vyukov . 2012 . AddressSanitizer: A Fast Address Sanity Checker . In Proceedings of the 2012 USENIX Annual Technical Conference (ATC \u201912) . USENIX, Boston, MA. 309\u2013318. https:\/\/www.usenix.org\/conference\/atc12\/technical-sessions\/presentation\/serebryany Konstantin Serebryany, Derek Bruening, Alexander Potapenko, and Dmitry Vyukov. 2012. AddressSanitizer: A Fast Address Sanity Checker. In Proceedings of the 2012 USENIX Annual Technical Conference (ATC \u201912). USENIX, Boston, MA. 309\u2013318. https:\/\/www.usenix.org\/conference\/atc12\/technical-sessions\/presentation\/serebryany"},{"key":"e_1_3_2_1_23_1","unstructured":"Kostya Serebryany Evgenii Stepanov Aleksey Shlyapnikov Vlad Tsyrklevich and Dmitry Vyukov. 2018. Memory Tagging and How it Improves C\/C++ Memory Safety. arxiv:cs.CR\/1802.09517. arxiv:1802.09517 \t\t\t\t  Kostya Serebryany Evgenii Stepanov Aleksey Shlyapnikov Vlad Tsyrklevich and Dmitry Vyukov. 2018. Memory Tagging and How it Improves C\/C++ Memory Safety. arxiv:cs.CR\/1802.09517. arxiv:1802.09517"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 2005 USENIX Annual Technical Conference (ATC) (ATC \u201905)","author":"Seward Julian","year":"2005","unstructured":"Julian Seward and Nicholas Nethercote . 2005 . Using Valgrind to Detect Undefined Value Errors with Bit-Precision . In Proceedings of the 2005 USENIX Annual Technical Conference (ATC) (ATC \u201905) . USENIX Association. Julian Seward and Nicholas Nethercote. 2005. Using Valgrind to Detect Undefined Value Errors with Bit-Precision. In Proceedings of the 2005 USENIX Annual Technical Conference (ATC) (ATC \u201905). USENIX Association."},{"key":"e_1_3_2_1_25_1","volume-title":"Adding Run-Time Checking to the Portable C Compiler. Software: Practice and Experience, 22, 4","author":"Steffen Joseph L.","year":"1992","unstructured":"Joseph L. Steffen . 1992. Adding Run-Time Checking to the Portable C Compiler. Software: Practice and Experience, 22, 4 ( 1992 ). Joseph L. Steffen. 1992. Adding Run-Time Checking to the Portable C Compiler. Software: Practice and Experience, 22, 4 (1992)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.9"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029894.1029913"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755707"}],"event":{"name":"SOAP '23: 12th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis","location":"Orlando FL USA","acronym":"SOAP '23","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages"]},"container-title":["Proceedings of the 12th ACM SIGPLAN International Workshop on the State Of the Art in Program Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589250.3596139","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3589250.3596139","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:53Z","timestamp":1750182533000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3589250.3596139"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,6]]},"references-count":28,"alternative-id":["10.1145\/3589250.3596139","10.1145\/3589250"],"URL":"https:\/\/doi.org\/10.1145\/3589250.3596139","relation":{},"subject":[],"published":{"date-parts":[[2023,6,6]]},"assertion":[{"value":"2023-06-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}