Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2018-1002105] Finding unhandled errors using CodeQL

blog.trailofbits.com | blog | CVE-2018-1002105 | #vulnerability-research | #kubernetes | #static-analysis | #codeql | #variant-analysis | #cve-2018-1002105

Summary

Unhandled error codes can be exploitable, as Kubernetes CVE-2018-1002105 showed. This walkthrough uses CodeQL with a custom query pack to run variant analysis and find every similar bug at once.
Published
Collected

original ↗

Related coverage

  1. Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis (blog.trailofbits.com)
  2. Offensive Security with Large Language Models (2) (theori.io)
  3. Rust-proof your code with our new Testing Handbook chapter (blog.trailofbits.com)
  4. Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case study (blog.trailofbits.com)
  5. Don’t recurse on untrusted input (blog.trailofbits.com)
  6. Streamline your static analysis triage with SARIF Explorer (blog.trailofbits.com)

back