- 07 Jan, 2021 1 commit
-
-
Enkelmann authored
-
- 02 Dec, 2020 1 commit
-
-
Enkelmann authored
-
- 28 Aug, 2020 1 commit
-
-
Enkelmann authored
-
- 27 Jul, 2020 1 commit
-
-
Added a simple check that prints an error message when no dynamic symbol calls could be resolved.
Melvin Klimke authored
-
- 21 Jul, 2020 1 commit
-
-
Added brand new (and still experimental) checks for CWEs 415 and 416 together with a new interprocedural data-flow analysis engine written in Rust. Add `-partial=Memory` as command line flag to try out the new checks.
Enkelmann authored
-
- 28 Apr, 2020 1 commit
-
-
Added a new symbol structure enabling more precise handling of extern symbols.
Melvin Klimke authored
-
- 14 Feb, 2020 1 commit
-
-
Melvin Klimke authored
-
- 28 Jan, 2020 1 commit
-
-
Unit tests no longer fail silently on Travis CI builds.
Enkelmann authored
-
- 27 Jan, 2020 1 commit
-
-
Enkelmann authored
-
- 21 Jan, 2020 1 commit
-
-
refactored cwe476 to add stack tracking
Enkelmann authored
-
- 26 Nov, 2019 1 commit
-
-
This PR fixes two minor bugs and adds a workaround for the address computation of Ghidra, which sometimes adds an offset and sometimes not. There seems to be no function in the Ghidra API that can be used to tell the plugin when this happens and when not.
Enkelmann authored
-
- 25 Nov, 2019 1 commit
-
-
This PR adds a plugin for annotating the results of the cwe_checker in Ghidra.
Enkelmann authored
-
- 11 Sep, 2019 1 commit
-
-
adds check_path flag to cwe_checker for finding paths from user input functions to CWE hits.
Thomas Barabosch authored
-
- 30 Jul, 2019 1 commit
-
-
* Fixed some stuff mentioned in review; added flag --no-logging to surpress logging to STDOUT; * Changes.md
Thomas Barabosch authored
-
- 24 Jul, 2019 1 commit
-
-
* Removes old version of log_utils, prototypes for new version. * Implemented native logging * Json-Output basically working. * Added acceptance test for JSON parsing * Adds some odoc to log_utils. * Added support for file output (--cwe-checker-out) * Add acceptance test for file output
Thomas Barabosch authored
-
- 19 Jul, 2019 1 commit
-
-
Thomas Barabosch authored
-
- 18 Jul, 2019 1 commit
-
-
* Added more documentation to checks * Corrected typo in opam files * Added documentation command to makefile * updated documentation build command in Readme.md * Fixed some documentation typos * rand without srand is always treated as an anti-pattern. * delete generated documentation on "make clean"
Enkelmann authored
-
- 19 Jun, 2019 1 commit
-
-
* Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * [cwe560] works for x64, fix function check_umask_call to detect on other arches * Initial version of CWE560 check * CWE560 identifies calls to umask, missing the check of the umask calls. * Initial version of CWE560 check * [cwe560] works for x64, fix function check_umask_call to detect on other arches * Now working on the other architectures * Refactored version of check for CWE 560 that work on several architectures. Added first unit tests for the checkers code base * Fixes some dune warnings. * Added CWE 560 to CHANGES.md. Fixes another dune warning. * Requested change: Private module as a wrapper for unit tests
Thomas Barabosch authored
-
- 18 Jun, 2019 1 commit
-
-
Enkelmann authored
-
- 16 Apr, 2019 1 commit
-
-
* Initial commit of cwe_checker emulation feature using bap primus under the hood. * Fixed some Core issues with Maps and Hashtbls * Moved plugins to their own folders as expected by BAP. * Added .merlin since everybody likes merlin * Further improvements in the build process * Commented cwe_checker_emulation plugin * cwe_checker_emulation detects double frees with the help of Primus. * Refactoring of cwe_checker_emulation, extracted incident reporting to module Incident_reporter. * Added test cases for cwe125, cwe416, and modified cwe415. * Now reporting use-after-free correctly * Adjusted README * Adjusted CHANGES.md. * Added spaces to content codacy. * Adjusted build process for emulation plugin * fixed emulation recipe * Reports out-out-bounds read/writes, events are not reported multiple times now. * Adds tests for cwe-415 and cwe-416. Arritifical examples for cwe-125 and cwe-787 * Travis aware emulation tests. * Fixed acceptance tests.
Thomas Barabosch authored
-
- 05 Apr, 2019 1 commit
-
-
* Initial version of Type inference
Enkelmann authored
-
- 22 Feb, 2019 1 commit
-
-
* improved CWE476-check with dataflow analysis
Enkelmann authored
-
- 21 Jan, 2019 1 commit
-
-
This adds a check for CWE248: Uncaught Exception
Enkelmann authored
-
- 18 Jan, 2019 1 commit
-
-
checks. Ready to implement partial analyses.
Thomas Barabosch authored
-
- 08 Oct, 2018 1 commit
-
-
Thomas Barabosch authored
-