Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Publishing Trail of Bits’ CodeQL queries

blog.trailofbits.com | blog | #cryptography | #c | #go | #tls | #static-analysis | #vulnerability-detection | #codeql | #trail-of-bits | #semgrep

Summary

Trail of Bits published custom CodeQL queries for Go and C that uncover issues standard queries miss: (EC)DSA misuse, insecure file permissions, string bugs, and missing TLS minimum versions.
Published
Collected

original ↗

Related coverage

  1. A few notes on AWS Nitro Enclaves: KMS integration (blog.trailofbits.com)
  2. Rust-proof your code with our new Testing Handbook chapter (blog.trailofbits.com)
  3. Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case study (blog.trailofbits.com)
  4. Catching OpenSSL misuse using CodeQL (blog.trailofbits.com)
  5. Using Static Analysis and Clang To Find Heartbleed (blog.trailofbits.com)
  6. SAST and Business Logic Vulnerabilities: What Static Analysis Can Reach (borghq.io)

back