Security in C++ - Hardening Techniques from the Trenches

Explore security mitigation techniques for C++ applications in this conference talk from Meeting C++ 2024, where experts Louis Dionne and Konstantin Varlamov delve into two powerful implementations in the Clang and libc++ toolchain. Learn about Standard Library hardening for catching undefined behavior like out-of-bounds memory accesses, and discover typed memory allocation that leverages compiler-inferred type information to enhance protection against type confusion attacks. Gain practical insights from real-world implementation experiences in large-scale production environments, understanding how these techniques can strengthen application security without requiring significant code modifications. Examine the evolutionary challenges encountered during implementation and their solutions, while getting a glimpse into proposed changes to the C++ Standard that could elevate these security measures to first-class status.