PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Finding bugs in C code with Multi-Level IR and VAST

blog.trailofbits.com | vulnerability | #vulnerability-research | #c | #static-analysis | #llvm | #program-analysis | #compilers | #mlir | #reversing | #vast
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits introduces VAST, a tower of IRs built on MLIR that lets analyses move across abstraction levels to identify, classify, and remediate C bugs such as stack buffer overflows.
Published
Collected

Related coverage

research · blog.quarkslab.com
A glance at compiler internals: Keep my memset
Why Clang/LLVM can delete your memset: tracing llvm.memset through Dead Store Elimination, the risk for code that wipes secrets, and the volatile function-pointer trick that keeps the wipe alive.
blog · blog.trailofbits.com
Holy Macroni! A recipe for progressive language enhancement
Trail of Bits introduces Macroni, a tool combining Clang, PASTA, VAST, and MLIR to preserve CPP macro provenance and enable macro-aware C static analyses and safer language constructs.
blog · blog.trailofbits.com
High-fidelity build instrumentation with blight
Trail of Bits open-sourced blight, a Python framework that wraps and instruments C/C++ build tools, enabling caching, static analysis, profiling, and build assurance without fragile compiler hacks.
blog · blog.trailofbits.com
Creating an LLVM Sanitizer from Hopes and Dreams
A Trail of Bits winternship report explains how to build custom LLVM sanitizers, covering compile-time instrumentation, runtime support libraries, and lessons from a dynamic points-to analysis attempt.
blog · blog.trailofbits.com
The Problem with Dynamic Program Analysis
Dynamic tools like AddressSanitizer only check executed paths; Trail of Bits' PointsTo applies whole-program static data-flow analysis on LLVM bitcode to find use-after-free bugs at scale.
blog · blog.trailofbits.com
ReMASTering Applications by Obfuscating during Compilation
Introducing MAST, an LLVM-based obfuscation toolkit: symbol mangling, opaque predicates, code diffusion and environmental keying, inspired by nation-state malware; funded via DARPA Cyber Fast Track.
Back