Skip to content

Repo sync for protected branch #4717

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Sep 21, 2023
Merged

Repo sync for protected branch #4717

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
41665e2
incorp review
Sep 20, 2023
d7ede77
Merge pull request #5036 from TylerMSFT/herbfix
prmerger-automator[bot] Sep 20, 2023
95e00ba
Merge pull request #5037 from MicrosoftDocs/main
PhilKang0704 Sep 21, 2023
afd82fa
Merging changes synced from https://github.com/MicrosoftDocs/cpp-docs…
Sep 21, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/code-quality/build-reliable-secure-programs.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
description: "Learn more about: Building reliable and secure C++ programs by applying NISTIR 8397 guidelines."
title: Build reliable and secure C++ programs
ms.date: 09/07/2023
ms.date: 09/20/2023
ms.topic: "conceptual"
---

Expand Down Expand Up @@ -383,7 +383,7 @@ When fuzzing reports a failure, it always naturally provides a reproducible test

When using both sanitizers such as [Address Sanitizer (ASan)](../sanitizers/asan.md) and fuzzing:
- First run your normal tests with sanitizers enabled to see if there are issues, then once the code is sanitizer-clean start fuzzing.
- For C or C++, there are compilers that automate injection of runtime assertions and meta-data that enable ASan. When compiled for ASan, the resulting binaries link with a runtime library that can precisely diagnose [15+ categories of memory safety errors](../sanitizers/asan.md#error-types) with zero false positives. For C or C++ when you have source, use [LibFuzzer](https://www.llvm.org/docs/LibFuzzer.html); if you enable ASan, LibFuzzer is enabled automatically.
- For C or C++, there are compilers that automate injection of runtime assertions and meta-data that enable ASan. When compiled for ASan, the resulting binaries link with a runtime library that can precisely diagnose [15+ categories of memory safety errors](../sanitizers/asan.md#error-types) with zero false positives. For C or C++ when you have source, use [LibFuzzer](https://www.llvm.org/docs/LibFuzzer.html) which requires ASan to be enabled first.
- For libraries written in Java, C#, Python, Rust, and so on, use the [AFL++ framework](https://aflplus.plus/).

**Key qualities**
Expand Down