Skip to content
Catching OpenSSL misuse using CodeQL
blog.trailofbits.com | blog | #appsec | #cryptography | #c | #openssl | #static-analysis | #codeql | #cpp
Summary
Five CodeQL queries catch OpenSSL libcrypto misuse—short cipher keys, missing entropy initialization, and uncleared bignums—that can cause memory leaks or authentication bypasses in C/C++ codebases.
- Published
- Collected