PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Detecting Bad OpenSSL Usage

blog.trailofbits.com | blog | #cryptography | #openssl | #static-analysis | #llvm | #program-analysis | #misuse-detection | #pattern-matching
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Anselm, a Trail of Bits LLVM pass, lets developers describe and search patterns of bad OpenSSL usage—mismanaged error queues, reused initialization vectors—in any LLVM-target language.
Published
Collected

Related coverage

blog · blog.trailofbits.com
The Problem with Dynamic Program Analysis
Dynamic tools like AddressSanitizer only check executed paths; Trail of Bits' PointsTo applies whole-program static data-flow analysis on LLVM bitcode to find use-after-free bugs at scale.
blog · blog.trailofbits.com
Using Static Analysis and Clang To Find Heartbleed
Trail of Bits built a Clang analyzer plugin that statically detects Heartbleed-style bugs: it taints ntohl/ntohs return values and flags unconstrained data used as memcpy sizes, tested on OpenSSL.
research · blog.quarkslab.com
SCAF - Source Code Analysis Framework based on Clang - Pre-alpha preview
A preview of SCAF, a Clang-based source code analysis framework: a Python API and GUI that store ASTs and metadata in a shared database, plus a make-process hook for accurate build context.
blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
Rust-proof your code with our new Testing Handbook chapter
Trail of Bits added a Rust testing chapter to its Testing Handbook: Miri, property testing, Clippy, zeroization, Kani model checking and dependency vetting, plus the rust-review Claude Code plugin.
blog · blog.trailofbits.com
Catching OpenSSL misuse using CodeQL
Five CodeQL queries catch OpenSSL libcrypto misuse—short cipher keys, missing entropy initialization, and uncleared bignums—that can cause memory leaks or authentication bypasses in C/C++ codebases.
Back