Sponsorised links
This year
DLFP: Découverte d'une faille de sécurité critique dans OpenSSL de Debian
by srcmax
& 1 other
, 1 comment
Le 13 mai, un message publié sur la liste de sécurité Debian identifiait une anomalie impactant le paquet openssl. Ce bug a été introduit par un mainteneur Debian, qui a eu la main lourde en voulant "corriger" des alertes remontées par Valgrind (un logiciel qui audite le code). Résultat des courses : le générateur de nombres aléatoires, composant critique de nombreux systèmes de chiffrements, n'est au final pas si aléatoire que ça, voire carrément prévisible.
En conséquence, tous les certificats et clefs SSL/SSH générés sur une Debian (ou dérivée) depuis 2006 l'ont été à partir d'un univers des possibles très restreint (environ 250 000 clefs, à confirmer) et présentent donc un niveau de sécurité largement inférieur à celui estimé.
2008
blogZero - Cachegrind your Web apps
by kasi77
Valgrind is a entire suite of open-source tools, including basic debugging, profiling, and more advanced techniques such as threading, memory management, and leak detection. For the purposes of this article, I will focus on Cachegrind, and in particular within the domain of Web applications. Although there are a number of developers contributing to Valgrind, Julian Seward is the original designer and author.
Helgrind, TotT: Finding Data Races in C
by sylvainulg
(via)
helgrind: more than data checks (valgrind), it also help you finding who did not bring a beer in multithreaded programs.
Sponsorised links
2007
Valgrind Home
by parmentierf
& 5 others
Valgrind is an award-winning suite of tools for debugging and profiling Linux programs. With the tools that come with Valgrind, you can automatically detect many memory management and threading bugs, avoiding hours of frustrating bug-hunting, making your programs more stable. You can also perform detailed profiling, to speed up and reduce memory use of your programs.
Valgrind
by Regis
& 5 others
Valgrind is an award-winning suite of tools for debugging and profiling Linux programs. With the tools that come with Valgrind, you can automatically detect many memory management and threading bugs, avoiding hours of frustrating bug-hunting, making your programs more stable. You can also perform detailed profiling, to speed up and reduce memory use of your programs.
Valgrind Home
by jdrsantos
& 5 others
Valgrind is an award-winning suite of tools for debugging and profiling Linux programs. With the tools that come with Valgrind, you can automatically detect many memory management and threading bugs, avoiding hours of frustrating bug-hunting, making your
2006
Valgrind Home
by frank2006
& 5 others
(via)
suite of tools for debugging and profiling Linux programs. detect many memory management and threading bugs...
KcacheGrind
by iamabc
& 1 other
Callgrind uses runtime instrumentation via the Valgrind framework for its cache simulation and call-graph generation. This way, even shared libraries and dynamically opened plugins can be profiled. The data files generated by Callgrind can be loaded into KCachegrind for browsing the performance results. But there is also a command line tool in the package to get ASCII reports from data files without the need to use KCachegrind.
KcacheGrind
by rmaltete
& 1 other
Callgrind uses runtime instrumentation via the Valgrind framework for its cache simulation and call-graph generation. This way, even shared libraries and dynamically opened plugins can be profiled. The data files generated by Callgrind can be loaded into KCachegrind for browsing the performance results. But there is also a command line tool in the package to get ASCII reports from data files without the need to use KCachegrind.
Profilage de code PHP | iPerSec
by balluche
& 9 others
Profilage de code PHP avec une extension à PHP donc plus efficace qu'une classe de débogage. Le résultat est exploitable avec Valgrind.
Valgrind Home
by fakechris
& 5 others
Valgrind is an award-winning suite of tools for debugging and profiling Linux programs
2005
Rob Holland: Useful tool for auditing/debugging
by mbertier
This is a small tool which allows you to force any execution of a binary on your system to always be via a debugger (such as strace/valgrind) without having to modify the binary or the way its called in any way.
1970
1
(17 marks)
