Perspective Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by DesignMax Hoffmann Security Beyond Memory Safety CppCon 2024 2 Security Beyond Memory Safety Using Modern C++ to Security Beyond Memory Safety CppCon 2024 3 FIFTY SHADES OF SHOOTING YOURSELF IN THE FOOT WITH A RAILGUNMax Hoffmann Security Beyond Memory Safety CppCon 2024 4Max Hoffmann Security Beyond Memory Safety CppCon Security Beyond Memory Safety CppCon 2024 6Max Hoffmann Security Beyond Memory Safety CppCon 2024 7Max Hoffmann Security Beyond Memory Safety CppCon 2024 8Max Hoffmann Security Beyond Memory Safety CppCon

Pepabo, Inc. 2019.07.25 GopherCon 2019 Optimization for number of goroutines using feedback control Principal engineer Yusuke MIYAKE @monochromegane Pepabo R&D Institute, GMO Pepabo, Inc. https://blog complexity Design Implementation Runtime Concurrent Parallel • Thread management • Race conditions • Memory access sync • Deadlocks • Starvation • Granularity • Number of concurrency 1. Concurrency Concurrent Parallel • Thread management • Granularity • Number of concurrency • Race conditions • Memory access sync • Deadlocks • Starvation Runtime scheduler of Go �17 G M P G G Local Run Queue

A Relaxed Guide to memory_order_relaxed Hans Boehm Paul E. McKenney Google Facebook CPPCON 2020std::atomic/std::atomic_ref and memory_order_relaxed ● C++ atomic sacrificing the simple threads-as-interleaving semantics ● by passing memory_order enum values to explicit atomic operations. ● In particular, memory_order_relaxed allows arbitrary visibility reordering with respect About memory_order_relaxed? ● Just a load, just a store: Full control, excellent efficiency and scalability! ○ Assuming aligned machine-sized atomic objects, that is…What is Not to Like About memory_order_relaxed

© 2019 Apex.AI, Inc. Safe and certified software for autonomous mobility TM Practical memory pool based allocators for Modern C++ by Misha Shalem misha.shalem@apex.ai © 2020 Apex.AI, Inc.● CppCon Andreas Pasternak ● Quote: “Memory pools and allocators are only one piece of the solution” Today we going to talk about this one piece in (more) depth © 2020 Apex.AI, Inc.Memory allocations in real-time practically for C++ memory allocations? We asked an independent 3rd party safety assessor and the answer was “It should comply to Autosar C++ 14 Coding Guidelines regarding memory allocations” © 2020

Bar std::string Bar std::string Bar std::stringObject Introspection (OI) Goals • Byte level memory footprint analysis for objects • Complete object type hierarchies • Dynamic allocations and containers hierarchy from a given root type • Understand the layout in memory of the entire hierarchy • Understand how to interpret data at memory offsets • Understand containers • Compiler generated debug Object Introspection Measurement Code Code GenerationApplied Example 1 • Unused container memory: Unused Sz = (C.capacity() - C.size()) * sizeof(element) Name TypeName Number ElemStatSz Length

Memory Model C++11 – C++23About Me: alex.dathskovsky@speedata.io www.linkedin.com/in/alexdathskovsky https://www.cppnext.comAlex Dathskovsky | alex.dathskovsky@speedata.io | www.linkedin.com/in/a hazards • an instruction can be executed when its operands have been calculated or loaded from memory • an instruction stalls if operands are not availableAlex Dathskovsky | alex.dathskovsky@speedata com/in/alexdathskovsky Reordering Types • Data dependencies must be honored • C++ compiler may reorder any memory access under the as-if rule • Different processors have different reordering guarantiesAlex

Java 内存模型 Java 程序内存运行分析 Java 内存管理建议 JVM 内存溢出和参数调优  当遇到 OutOfMemoryError 时该如何做？ ▶ 常见的 OOM（Out Of Memory）内存溢出异常，就是堆内 存空间不足以存放新对象实例时导致。 ▶ 永久区内存溢出相对少见，一般是由于需要加载海量的 Class 数据，超过了非堆内存的容量导致。 ▶ 栈内存也会溢出，但是更加少见。 Java 内存模型 Java 程序内存运行分析 Java 内存管理建议 JVM 内存溢出和参数调优  当遇到 OutOfMemoryError 时该如何做？ ▶ 常见的 OOM（Out Of Memory）内存溢出异常，就是堆内 存空间不足以存放新对象实例时导致。 ▶ 永久区内存溢出相对少见，一般是由于需要加载海量的 Class 数据，超过了非堆内存的容量导致。 ▶ 栈内存也会溢出，但是更加少见。 Java 内存模型 Java 程序内存运行分析 Java 内存管理建议 JVM 内存溢出和参数调优  当遇到 OutOfMemoryError 时该如何做？ ▶ 常见的 OOM（Out Of Memory）内存溢出异常，就是堆内 存空间不足以存放新对象实例时导致。 ▶ 永久区内存溢出相对少见，一般是由于需要加载海量的 Class 数据，超过了非堆内存的容量导致。 ▶ 栈内存也会溢出，但是更加少见。

Code Packages and Package Imports §11. Expressions, Statements and Simple Statements §12. Basic Control Flows §13. Goroutines, Deferred Function Calls and Panic/Recover Go Type System §14. Go Type System sync/atomic standard package. §41. Memory Order Guarantees in Go §42. Common Concurrent Programming Mistakes Memory Related §43. Memory Blocks §44. Memory Layouts §45. Memory Leaking Scenarios Some Summaries as many dynamic script languages is the main selling point of Go language. §0. About Go 101 5 Memory saving, fast program warming-up, fast code execution speed and fast compilations combined is another