Yitzhak Mandelbaum is a Staff Software Engineer at Google, leading the C++ Safety team. He and his team are committed to improving memory safety and reliability in C++ through innovative static and dynamic analysis techniques. Yitzhak has been tackling challenges at the intersection of C++ security, static analysis, and large-scale change tooling since 2016, leading development of the Clang Dataflow Analysis and Clang Transformer frameworks, along the way. Prior to Google, he researched parsing, type theory and computer security at CMU's Software Engineering Institute and AT&T Labs-Research. He holds a PhD (2006) and an A.B. (1999) in Computer Science from Princeton University.
Code safety continues to be a regulatory and security imperative, driving C++ organizations to adopt robust memory safety solutions. Last year, we overviewed Google's suite of static analysis and code transformation projects that aim to eliminate a variety of safety bugs from our massive C++ codebase. This year, we lay out our vision for a path to safe-by-construction C++, including null safety, spatial safety and temporal safety. In null safety, we’ll describe our progress and challenges in upgrading millions of files towards null safety. For spatial safety, we’ll overview our forthcoming spatial safety mode, which, when enabled, will ensure developers […]
Code safety is quickly changing from a luxury to a necessity, driven by increased security requirements and regulatory pressure. Rust demonstrates that it is possible to achieve memory safety without compromising performance. Existing C++ codebases are under pressure to adapt to this new environment. This is especially true for organizations like Google, where a massive C++ codebase presents unique challenges for ensuring memory safety at scale. In this talk, I'll dive into a suite of projects at Google that use static analysis and code transformations to dramatically improve the C++ safety experience. These static approaches offer significant cost advantages over […]