Tootfinder

from my link log —
Find memory errors in unsafe Rust in production with GWP-ASan and the Scudo hardened allocator.
https://blog.colinbreck.com/making-unsafe-rust-a-little-safer-find-memory-errors-in-production-wit…

Making Unsafe Rust a Little Safer: Find Memory Errors in Production with GWP-ASan
GWP-ASan finds rare memory errors in C and C++ called from Rust.

Fixed a recently reported, asan-caught UaF in ngscopeclient earlier today when loading session files containing a protocol analyzer.
Apparently the analyzer never called AddRef() / Release() on the filter and could thus outlive it.
Yet another reason why the planned refactoring of filter ownership to use std::shared_ptr's rather than manual hand refcounting can't come soon enough. Just need to ship v0.1 first...

NanoTag: Systems Support for Efficient Byte-Granular Overflow Detection on ARM MTE
Mingkai Li, Hang Ye, Joseph Devietti, Suman Jana, Tanvir Ahmed Khan
https://arxiv.org/abs/2509.22027

NanoTag: Systems Support for Efficient Byte-Granular Overflow Detection on ARM MTE
Memory safety bugs, such as buffer overflows and use-after-frees, are the leading causes of software safety issues in production. Software-based approaches, e.g., Address Sanitizer (ASAN), can detect such bugs with high precision, but with prohibitively high overhead. ARM's Memory Tagging Extension (MTE) offers a promising alternative to detect these bugs in hardware with a much lower overhead. However, in this paper, we perform a thorough investigation of Google Pixel 8, the first production i…