Sanitizers

Exposing bugs

To make a Fuzzer more sensitive to failures other than crashes, sanitizers can be used to inject assertions that crash the program when a failure is detected. There are different sanitizers for different kinds of bugs:

• to detect memory related errors, such as buffer overflows and use-after-free (using memory debuggers such as AddressSanitizer),
• to detect race conditions and deadlocks (ThreadSanitizer),
• to detect undefined behavior (UndefinedBehaviorSanitizer),
• to detect memory leaks (LeakSanitizer), or
• to check control-flow integrity (CFISanitizer).