AddressWatcher: Sanitizer-Based Localization of Memory Leak Fixes

Abstract

We present AddressWatcher, a technique that uses sanitizer-based analysis to localize memory leak fixes. AddressWatcher has eliminated 25 security-critical memory leaks in open-source projects, including one in software critical to large prime-number computation.