Race conditions remain a stubborn class of security bug because they only manifest when multiple threads execute in a particular order. Google Project Zero has described a new testing approach that combines memory access tracing with stack-based delay injection to make those interleavings more likely to occur.
The technique is designed to help researchers confirm bug candidates that have already been identified through manual inspection or static analysis. By tracing memory accesses and injecting delays at specific points in the call stack, the method can push execution into the narrow window where the race condition triggers.
The post emphasises how difficult it is to reproduce these bugs in practice, and positions the approach as a way to reduce that difficulty. The source does not compare the technique with other existing race-detection methods, so its relative effectiveness remains an open question.