{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:13:12Z","timestamp":1783008792633,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":29,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,4,14]],"date-time":"2024-04-14T00:00:00Z","timestamp":1713052800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,4,14]]},"DOI":"10.1145\/3639477.3640328","type":"proceedings-article","created":{"date-parts":[[2024,5,31]],"date-time":"2024-05-31T13:27:26Z","timestamp":1717162046000},"page":"168-177","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["GWP-ASan: Sampling-Based Detection of Memory-Safety Bugs in Production"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-2379-3641","authenticated-orcid":false,"given":"Kostya","family":"Serebryany","sequence":"first","affiliation":[{"name":"Google, Mountain View, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9404-7875","authenticated-orcid":false,"given":"Chris","family":"Kennelly","sequence":"additional","affiliation":[{"name":"Google, Mountain View, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0640-7341","authenticated-orcid":false,"given":"Mitch","family":"Phillips","sequence":"additional","affiliation":[{"name":"Google, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0462-3374","authenticated-orcid":false,"given":"Matt","family":"Denton","sequence":"additional","affiliation":[{"name":"Google, Mountain View, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1747-8399","authenticated-orcid":false,"given":"Marco","family":"Elver","sequence":"additional","affiliation":[{"name":"Google, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-2297-2583","authenticated-orcid":false,"given":"Alexander","family":"Potapenko","sequence":"additional","affiliation":[{"name":"Google, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4059-1812","authenticated-orcid":false,"given":"Matt","family":"Morehouse","sequence":"additional","affiliation":[{"name":"Independent Researcher, Fargo, North Dakota, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9511-5460","authenticated-orcid":false,"given":"Vlad","family":"Tsyrklevich","sequence":"additional","affiliation":[{"name":"Independent Researcher, Mountain View, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2282-6847","authenticated-orcid":false,"given":"Christian","family":"Holler","sequence":"additional","affiliation":[{"name":"Mozilla Corporation, Bonn, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3548-9558","authenticated-orcid":false,"given":"Julian","family":"Lettner","sequence":"additional","affiliation":[{"name":"Apple, Cupertino, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-8268-5993","authenticated-orcid":false,"given":"David","family":"Kilzer","sequence":"additional","affiliation":[{"name":"Apple, Cupertino, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-7453-3381","authenticated-orcid":false,"given":"Lander","family":"Brandt","sequence":"additional","affiliation":[{"name":"Meta, Menlo Park, California, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,5,31]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"James P. Anderson. 1972. Computer security technology planning study. Tech. rep. ESD-TR-73-51.","DOI":"10.21236\/AD0772806"},{"key":"e_1_3_2_1_2_1","volume-title":"The morris worm: A fifteen-year perspective","author":"Orman Hilarie","unstructured":"Hilarie Orman. 2003. The morris worm: A fifteen-year perspective.IEEE Security & Privacy, 1, 5, 35--43."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","unstructured":"Nicholas Nethercote and Julian Seward. 2007. Valgrind: a framework for heavyweight dynamic binary instrumentation. In PLDI. ACM 89--100. 250734.1250746. 10.1145\/1","DOI":"10.1145\/1"},{"key":"e_1_3_2_1_4_1","volume-title":"Addresssanitizer: A fast address sanity checker","author":"Serebryany Konstantin","year":"2012","unstructured":"Konstantin Serebryany, Derek Bruening, Alexander Potapenko, and Dmitriy Vyukov. 2012. Addresssanitizer: A fast address sanity checker. In USENIX. USENIX Association, 309--318. https:\/\/www.usenix.org\/conference\/atc12\/technical-sessions\/presentation\/serebryany."},{"key":"e_1_3_2_1_5_1","volume-title":"Memory tagging and how it improves C\/C++ memory safety. CoRR, abs\/1802.09517. arXiv","author":"Serebryany Kostya","year":"1802","unstructured":"Kostya Serebryany, Evgenii Stepanov, Aleksey Shlyapnikov, Vlad Tsyrklevich, and Dmitry Vyukov. 2018. Memory tagging and how it improves C\/C++ memory safety. CoRR, abs\/1802.09517. arXiv: 1802.09517."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2015.35"},{"key":"e_1_3_2_1_7_1","unstructured":"Kostya Serebryany. 2019. ARM memory tagging extension and how it improves C\/C++ memory safety. login Usenix Mag. 44 2. https:\/\/www.usenix.org\/publications\/login\/summer2019\/serebryany."},{"key":"e_1_3_2_1_8_1","article-title":"Shift-Left Testing","volume":"26","author":"Smith Larry","year":"2001","unstructured":"Larry Smith. 2001. Shift-Left Testing. Dr. Dobb's J., 26, 9, (Sept. 2001).","journal-title":"Dr. Dobb's J."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.20"},{"key":"e_1_3_2_1_10_1","volume-title":"What science can tell us about C and C++'s security. (May","author":"Gaynor Alex","year":"2020","unstructured":"Alex Gaynor. 2020. What science can tell us about C and C++'s security. (May 2020). Retrieved Aug. 8, 2023 from https:\/\/alexgaynor.net\/2020\/may\/27\/science-on-memory-unsafety-and-security\/."},{"key":"e_1_3_2_1_11_1","volume-title":"efence: Electric Fence Malloc Debugger. Retrieved","author":"Perens Bruce","year":"2023","unstructured":"Bruce Perens. 2003. efence: Electric Fence Malloc Debugger. Retrieved Aug. 8, 2023 from https:\/\/web.archive.org\/web\/20100829220331\/http:\/\/perens.com\/FreeSoftware\/ElectricFence\/."},{"key":"e_1_3_2_1_12_1","unstructured":"Microsoft Corporation. 2022. GFlags and PageHeap. Retrieved Aug. 8 2023 from https:\/\/learn.microsoft.com\/en-us\/windows-hardware\/drivers\/debugger\/gflags-and-pageheap."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2010.68"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2\\_3"},{"key":"e_1_3_2_1_15_1","volume-title":"Patterson","author":"Hennessy John L.","year":"2012","unstructured":"John L. Hennessy and David A. Patterson. 2012. Computer Architecture - A Quantitative Approach, 5th Edition. Morgan Kaufmann. isbn: 978-0-12-383872-8.","edition":"5"},{"key":"e_1_3_2_1_16_1","volume-title":"TCMalloc: Thread-Caching Malloc. Retrieved","author":"Malloc Authors The","year":"2023","unstructured":"The TCMalloc Authors. 2023. TCMalloc: Thread-Caching Malloc. Retrieved Aug. 8, 2023 from https:\/\/github.com\/google\/tcmalloc."},{"key":"e_1_3_2_1_17_1","volume-title":"Use-after-freedom: MiraclePtr. Retrieved","author":"Taylor Adrian","year":"2022","unstructured":"Adrian Taylor, Bartek Nowierski, and Kentaro Hara. 2022. Use-after-freedom: MiraclePtr. Retrieved Aug. 8, 2023 from https:\/\/security.googleblog.com\/2022\/09\/use-after-freedom-miracleptr.html."},{"key":"e_1_3_2_1_18_1","volume-title":"compiler-rt runtime libraries. Retrieved","author":"Authors The LLVM","year":"2023","unstructured":"The LLVM Authors. 2023. compiler-rt runtime libraries. Retrieved Aug. 8, 2023 from https:\/\/compiler-rt.llvm.org\/."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"e_1_3_2_1_20_1","unstructured":"Jonathan Corbet. 2007. The SLUB allocator. Linux Weekly News (LWN). https:\/\/lwn.net\/Articles\/229984\/."},{"key":"e_1_3_2_1_21_1","unstructured":"The Linux Kernel Authors. 2023. Static Keys. Retrieved Aug. 8 2023 from https:\/\/docs.kernel.org\/staging\/static-keys.html."},{"key":"e_1_3_2_1_22_1","volume-title":"Debug Malloc Library. Retrieved","author":"Watson Gray","year":"2024","unstructured":"Gray Watson. 2020. Debug Malloc Library. Retrieved Jan. 8, 2024 from https:\/\/dmalloc.com\/docs\/dmalloc.pdf."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/781131.78"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","unstructured":"George C. Necula Scott McPeak and Westley Weimer. 2002. Ccured: type-safe retrofitting of legacy code. In POPL. ACM. 10.1145\/503272.503286","DOI":"10.1145\/503272.503286"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","unstructured":"Piramanayagam Arumuga Nainar Ting Chen Jake Rosin and Ben Liblit. 2007. Statistical debugging using compound boolean predicates. In ISSTA. ACM. 10.1145\/1273463.1273467","DOI":"10.1145\/1273463.1273467"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024412"},{"key":"e_1_3_2_1_27_1","volume-title":"GWP-TSan: Zero-Cost Detection of Data Races in Production. (Oct","author":"Morehouse Matt","year":"2020","unstructured":"Matt Morehouse and Kostya Serebryany. 2020. GWP-TSan: Zero-Cost Detection of Data Races in Production. (Oct. 2020). Retrieved Aug. 8, 2023 from https:\/\/llvm.org\/devmtg\/2020-09\/slides\/Morehouse-GWP-Tsan.pdf."},{"key":"e_1_3_2_1_28_1","volume-title":"Memory Protection Keys. Retrieved","author":"Kernel Authors The Linux","year":"2023","unstructured":"The Linux Kernel Authors. 2023. Memory Protection Keys. Retrieved Aug. 8, 2023 from https:\/\/www.kernel.org\/doc\/html\/latest\/core-api\/protection-keys.html."},{"key":"e_1_3_2_1_29_1","volume-title":"Lightweight UaF Detector. (Dec","author":"Hara Kentaro","year":"2022","unstructured":"Kentaro Hara and Sergei Glazunov. 2022. Lightweight UaF Detector. (Dec. 2022). Retrieved Aug. 8, 2023 from https:\/\/docs.google.com\/document\/d\/1xfGa_IMtFZiQ3beOmkncEafODwn4U90ZyL4NfPaAtDY\/edit?resourcekey=0-89BZl1SVILB6ylOHula0IA."}],"event":{"name":"ICSE-SEIP '24: 46th International Conference on Software Engineering: Software Engineering in Practice","location":"Lisbon Portugal","acronym":"ICSE-SEIP '24","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS","Faculty of Engineering of University of Porto"]},"container-title":["Proceedings of the 46th International Conference on Software Engineering: Software Engineering in Practice"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639477.3640328","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3639477.3640328","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:32Z","timestamp":1750290272000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639477.3640328"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,14]]},"references-count":29,"alternative-id":["10.1145\/3639477.3640328","10.1145\/3639477"],"URL":"https:\/\/doi.org\/10.1145\/3639477.3640328","relation":{},"subject":[],"published":{"date-parts":[[2024,4,14]]},"assertion":[{"value":"2024-05-31","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}