Practical Security in Production: Hardening C++ Standard Library at Massive Scale
Abstract
We document the work required to roll out Hardened Libc++ across Google, including collaboration with Apple on the implementation. We discuss the requirements for hardening, the benefits of rolling out to production instead of pre-production environments. Lastly, we discuss the bugs found, the performance work required to make such a change, and the lasting impact.
