Address Sanitizer for Bare-metal Firmware

Android engineers outline how to bring Kernel Address Sanitizer (KASan) to bare‑metal firmware targets using Clang/LLVM and QEMU, detailing shadow memory layout, required runtime hooks for loads/stores, globals/stack handling, sanitized memcpy/memmove/memset, noreturn handling, and heap allocator instrumentation, along with compiler flags to control instrumentation size and mapping. They report KASan has already identified 40+ memory safety bugs in pre‑production firmware testing and recommend integrating it with fuzzing, while also advocating adoption of memory‑safe Rust for long‑term risk reduction.