- 21 Jul, 2020 1 commit
-
-
Added brand new (and still experimental) checks for CWEs 415 and 416 together with a new interprocedural data-flow analysis engine written in Rust. Add `-partial=Memory` as command line flag to try out the new checks.
Enkelmann authored
-
- 29 Jun, 2020 1 commit
-
-
Enkelmann authored
-
- 16 Mar, 2020 1 commit
-
-
Improved the CWE reports generated by emulation based checks.
Melvin Klimke authored
-
- 04 Dec, 2019 1 commit
-
-
Added cwe_checker executable allowing shorter command line calls
Melvin Klimke authored
-
- 11 Sep, 2019 1 commit
-
-
adds check_path flag to cwe_checker for finding paths from user input functions to CWE hits.
Thomas Barabosch authored
-
- 30 Jul, 2019 1 commit
-
-
* Fixed some stuff mentioned in review; added flag --no-logging to surpress logging to STDOUT; * Changes.md
Thomas Barabosch authored
-
- 24 Jul, 2019 1 commit
-
-
* Removes old version of log_utils, prototypes for new version. * Implemented native logging * Json-Output basically working. * Added acceptance test for JSON parsing * Adds some odoc to log_utils. * Added support for file output (--cwe-checker-out) * Add acceptance test for file output
Thomas Barabosch authored
-
- 19 Jun, 2019 1 commit
-
-
* Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * [cwe560] works for x64, fix function check_umask_call to detect on other arches * Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * Initial version of CWE560 check * [cwe560] works for x64, fix function check_umask_call to detect on other arches * Now working on the other architectures * Refactored version of check for CWE 560 that work on several architectures. Added first unit tests for the checkers code base * Fixes some dune warnings. * Added CWE 560 to CHANGES.md. Fixes another dune warning. * Requested change: Private module as a wrapper for unit tests
Thomas Barabosch authored
-
- 18 Jun, 2019 1 commit
-
-
Enkelmann authored
-
- 17 Jun, 2019 1 commit
-
-
This ensures that cwe_checker is deployable with opam.
Enkelmann authored
-
- 16 Apr, 2019 1 commit
-
-
* Initial commit of cwe_checker emulation feature using bap primus under the hood. * Fixed some Core issues with Maps and Hashtbls * Moved plugins to their own folders as expected by BAP. * Added .merlin since everybody likes merlin * Further improvements in the build process * Commented cwe_checker_emulation plugin * cwe_checker_emulation detects double frees with the help of Primus. * Refactoring of cwe_checker_emulation, extracted incident reporting to module Incident_reporter. * Added test cases for cwe125, cwe416, and modified cwe415. * Now reporting use-after-free correctly * Adjusted README * Adjusted CHANGES.md. * Added spaces to content codacy. * Adjusted build process for emulation plugin * fixed emulation recipe * Reports out-out-bounds read/writes, events are not reported multiple times now. * Adds tests for cwe-415 and cwe-416. Arritifical examples for cwe-125 and cwe-787 * Travis aware emulation tests. * Fixed acceptance tests.
Thomas Barabosch authored
-
- 05 Apr, 2019 1 commit
-
-
* Initial version of Type inference
Enkelmann authored
-