Poison, redzones and shadows: inside KASAN
Summary
Bootlin’s article delves into Kernel Address Sanitizer (KASAN), explaining how it detects memory errors in the Linux kernel and how shadow memory, instrumentation, and redzones work. It provides practical guidance on enabling KASAN, choosing between inline and outline instrumentation, and running experiments with virtme-ng and GDB to observe KASAN behavior. The post also covers advanced topics like VMALLOC, quarantines, and stack monitoring, offering a thorough look at KASAN internals and usage.