Memory safety is quickly changing from a luxury to a necessity, driven by increased security requirements and regulatory pressure. In this workshop, we'll bring together practitioners, developers, and enthusiasts interested in supporting memory safety in the context of Clang and LLVM. This includes techniques that improve the memory safety and security of C and C++ programs (like static analysis, dynamic mitigations and best practices), representing and optimizing memory-safety constructs, and interoperation across languages. The workshop will be a mix of talks and hands-on activities (like roundtables), with the goal of fostering community, sharing knowledge and kickstarting collaboration.
8:30 - 8:40: Welcome - David Tarditi and Yitzhak Mandelbaum
8:40 - 9:00: The LLVM Memory Safety Working Group - Max Shavrick
9:00 - 9:30: Demystifying -fbounds-safety: Current and Future - Yeoul Na
9:30 - 10:00: Development of a C++ Array Spanification Tool - Wontae Choi
10:00 - 10:30: Break
10:30 - 11:00: A Framework for Allocator Partitioning Hints - Stefan Blair
11:00 - 11:30: Memory safe C/C++ interop in Swift - Henrik Olsson and Gábor Horváth
11:30 - 12:30: Lightning talks
Lifetime Safety in Clang: Trailer - Utkarsh Saxena
Inexpressible Lifetime Annotations - Gábor Horváth
Cross-TU Analysis and Transformation RFC - Jan Korous
Combining Memory Tagging and Type-Isolating Allocators - Julian Lettner
Strict Memory Safety in Swift - Doug Gregor
_FORTIFY_SOURCE in Android - Sharjeel Khan
Verifying Correctness of Bounds Check Elimination - Florian Hahn
12:30 - 1:30: Lunch
1:30 - 3:00: Breakout/Roundtables (1)
3:00 - 3:30: Break
3:30 - 4:00: Breakout/Roundtables (2)
4:00 - 4:30: BorrowSanitizer: Finding Ownership Bugs in Multilanguage Rust Applications, Ian McCormick
4:30 - 5:00: Structure protection, a family of UAF mitigation techniques, Peter Collingbourne
5:00 - 5:20: Breakout/Roundtables Summaries
5:20 - 5:30: Close