Install any skill in seconds. Free to start, no credit card required.
Get Started Free →trailofbits/address-sanitizer
AddressSanitizer detects memory errors during fuzzing.
Passed 0 of 22 test cases with the skill, and 22 of 22 without it.
1 fixed20 passed either way0 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
We are fuzzing a Rust crate that wraps a C library using `cargo-fuzz`. What command-line option should be passed to `cargo fuzz run` to enable AddressSanitizer for detecting memory corruption across the FFI boundary?
| Checked | Without skill | With skill |
|---|---|---|
| Includes `--sanitizer=address` | Missed | Passed |
The instructions your model reads when the skill loads.
AddressSanitizer (ASan) is a widely adopted memory error detection tool used extensively during software testing, particularly fuzzing. It helps detect memory corruption bugs that might otherwise go unnoticed, such as buffer overflows, use-after-free errors, and other memory safety violations.
ASan is a standard practice in fuzzing due to its effectiveness in identifying memory vulnerabilities. It instruments code at compile time to track memory allocations and accesses, detecting illegal operations at runtime.
| Concept | Description |
|---|---|
| Instrumentation | ASan adds runtime checks to memory operations during compilation |
| Shadow Memory | Maps 20TB of virtual memory to track allocation state |
| Performance Cost | Approximately 2-4x slowdown compared to non-instrumented code |
| Detection Scope | Finds buffer overflows, use-after-free, double-free, and memory leaks |
Apply this technique when:
Skip this technique when:
| Task | Command/Pattern |
|---|---|
| Enable ASan (Clang/GCC) | -fsanitize=address |
| Enable verbosity | ASAN_OPTIONS=verbosity=1 |
| Disable leak detection | ASAN_OPTIONS=detect_leaks=0 |
| Force abort on error | ASAN_OPTIONS=abort_on_error=1 |
| Multiple options | ASAN_OPTIONS=verbosity=1:abort_on_error=1 |
test cases passed, vs 22 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.