Dominik Klemba

Summary: Trail of Bits published a December 16, 2025 post by Dominik Czarnota and Dominik Klemba describing GWP-ASan, a sampling-based memory error detection tool that catches use-after-free and buffer overflows in production with near-zero performance overhead. The post contrasts it with AddressSanitizer, a compiler plugin that inserts memory-access checks at compile time but is too resource-intensive to deploy in production.
What's compelling: The bugs GWP-ASan targets - use-after-free and buffer overflows - are the same class the post links to remote code execution attacks such as WannaCry and a WebP implementation bug, and the tool's near-zero overhead is what makes catching them possible in production rather than only in test environments.

Read the original at Trail of Bits Blog ↗