## +24 ## Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by Design ## MAX HOFFMANN ## Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by Design FIFTY YOURSELF IN THE FOOT WITH A RAILGUN FEBRUARY 26, 2024 # Press Release: Future Software Should Be Memory Safe ONCD BRIEFING ROOM PRESS RELEASE Leaders in Industry Support White House Call to Address Root 25 of the past 5 years Weaknesses associated with languages that do not have strong support for memory management or type enforcement. CWE-119, CWE-190, CWE-416, CWE-787, and CWE-476 are in this group

Installing Ubuntu from a USB memory stick This guide will help you install Ubuntu on your computer by using a USB memory stick. USB memory sticks are sometimes known as flash drives, memory pens or USB Mass Storage Storage devices. Installing from a memory stick is useful if you have a computer without a CD drive (like a netbook), or prefer the convenience of a memory stick. Alternative methods are available, like running Windows. ### 1. What do I need to get started? To install Ubuntu from a USB memory stick you need: - A memory stick with a capacity of at least 2GB. It will be formatted (erased) during this process

## +24 ## Improving Our Safety With a Quantities and Units Library ## MATEUSZ PUSZ ## The future is here  ## The future Computer  ## C++ safety • A major concern in the C++ Community in the recent years • Potential improvements are being discussed library ## • Compile-time safety – correct handling of physical quantities, units, and numerical values ## mp-units: C++20/23 quantities and units library ## • Compile-time safety – correct handling of

## A Relaxed Guide to memory_order_relaxed Hans Boehm Paul E. McKenney Google Facebook CPPCON 2020 ## std::atomic/std::atomic_ref and memory_order_relaxed - C++ atomic operations are sequentially consistent sacrificing the simple threads-as-interleaving semantics - by passing memory order enum values to explicit atomic operations. - In particular, memory_order_relaxed allows arbitrary visibility reordering with respect respect to accesses to other locations. ## What is Not to Like About memory order relaxed? - Just a load, just a store: Full control, excellent efficiency and scalability! ☐ Assuming aligned machine-sized

## +21 ## Misra Parallelism Safety-critical Guidelines for C++11, 17, Then C++20, 23 ANDREAS WEIS, MICHAEL WONG & ILYA BURYLOV 20 21 October 24-29 ## Staff Engineer at Woven Planet 📸 / 🎧 ComicSansMS architect of C++ software solutions for autonomous driving market in Intel Contribution into functional safety MISRA standard Contribution into WG21 in threading, vectorization and numerics. Contribution into Chair of WG21 SG14 Games Dev/Low Latency/Financial Trading/Embedded - Editor: C++ SG5 Transactional Memory Technical Specification • Editor: C++ SG1 Concurrency Technical Specification MISRA C++ and AUTOSAR

## 20 23 October 01 - 06 ## +23 ## Lifetime Safety in C++: Past, Present and Future #### GABOR HORVATH Gabor.Horvath@microsoft.com ## Welcome to CppCon 2023! Come by our booth and join #visual_studio ecbd0a2aac297caf075ed3c2/p4_1.jpg) Approaches to safety ## ↑ C++ is getting safer The lifetime safety toolbox What comes next? 2023 ## Safety & Security: The Future of C++ JF Bastien  All the Sean Parer Coding for Safety, Security, and

## +23 ## Object Introspection: A Revolutionary Memory Profiler for C++ Objects ## JONATHAN HASLAM & ADITYA SARWADE 20 23 October 01 - 06 ## Scene Setting “... functions then provide the basic 2d6739cbe6128deb047eb1259822d6/p4_1.jpg) ## Object Introspection (Ol) Goals - Byte level memory footprint analysis for objects • Complete object type hierarchies • Dynamic allocations and containers object hierarchy from a given root type • Understand the layout in memory of the entire hierarchy • Understand how to interpret data at memory offsets • Understand containers • Compiler generated debug information

## Khronos APIs for Heterogeneous Compute and Safety: SYCL and SYCL SC MICHAEL WONG, NEVIN LIBER & VERENA BECKHAM ## Open Standards and Open Source implementations, community driven Open cross-company Expressiveness and simplicity for heterogeneous programming in modern C++ New Features Unified Shared Memory | Parallel Reductions Subgroup Operations | Class template Argument Deduction https://github.c \textsuperscript{3} $ U.S. Department of Energy laboratory managed by UChicago Argonne, LLC. # UNIFIED SHARED MEMORY IMPLICIT VS EXPLICIT DATA MOVEMENT Examples: - SYCL, C++ AMP Implementation: - Data is moved

Practical memory pool based allocators for Modern C++ ## PREVIOUSLY ON cppcon • CppCon 2019: Safe Software for Autonomous Mobility With Modern C++ by Andreas Pasternak • Quote: “Memory pools and allocators piece in (more) depth ## Memory allocations in real-time safety-critical environment • The solution should be safe and certifiable • What does it mean practically for C++ memory allocations? We asked asked an independent 3 $ ^{rd} $ party safety assessor and the answer was “It should comply to Autosar C++ 14 Coding Guidelines regarding memory allocations” ## Autosar C++ guidelines Rule A18-5-5 (required

## +24 ## LLVM's Realtime Safety Revolution: Tools for Modern Mission Critical Systems DAVID TREVELYAN & CHRISTOPHER APPLE ## Chris Apple ## David Trevelyan • 10-year veteran of the audio industry dependencies? ## What if we had a tool that could simply tell us? ## A nice tool would - Assess real-time safety - Detect a wide range of violations - ...even from third-party and pre-compiled dependencies - - Point to any problematic code - Be able to fail a Cl pipeline build unit tests real-time safety build:mac unit:mac rtsan build:win unit:mac:arm build:linux unit:win unit:linux ## LLVM 20