Google Project Zero's MAccConc tool automatically tests race conditions in the Linux kernel
Testing race conditions with mem access tracing and stack-based delay injection
Google Project Zero released MAccConc, a toolset for exploring interleavings of multi-threaded Linux kernel test cases. It traces memory accesses via KCOV and ASAN instrumentation, identifies them with count-augmented stack traces, and injects delays through a new ioctl to force specific orderings. The package includes an automatic A-B-A tester, a terminal UI, and a GUI. A demo shows it discovering a surprising dup(5) result when racing dup and close.
Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear.