PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Creating an LLVM Sanitizer from Hopes and Dreams

blog.trailofbits.com | blog | #static-analysis | #llvm | #program-analysis | #compilers | #sanitizers
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Trail of Bits winternship report explains how to build custom LLVM sanitizers, covering compile-time instrumentation, runtime support libraries, and lessons from a dynamic points-to analysis attempt.
Published
Collected

Related coverage

blog · blog.trailofbits.com
The Problem with Dynamic Program Analysis
Dynamic tools like AddressSanitizer only check executed paths; Trail of Bits' PointsTo applies whole-program static data-flow analysis on LLVM bitcode to find use-after-free bugs at scale.
blog · blog.trailofbits.com
ReMASTering Applications by Obfuscating during Compilation
Introducing MAST, an LLVM-based obfuscation toolkit: symbol mangling, opaque predicates, code diffusion and environmental keying, inspired by nation-state malware; funded via DARPA Cyber Fast Track.
blog · blog.trailofbits.com
Using Static Analysis and Clang To Find Heartbleed
Trail of Bits built a Clang analyzer plugin that statically detects Heartbleed-style bugs: it taints ntohl/ntohs return values and flags unconstrained data used as memcpy sizes, tested on OpenSSL.
research · blog.quarkslab.com
Implementing a Custom Directive Handler in Clang
How-to on implementing a custom #pragma directive handler in clang, used to drive an LLVM-based obfuscator while keeping sources compilable elsewhere; a tour of the preprocessing and parsing stages.
research · blog.quarkslab.com
llvm_dev_meeting:
Report from the 2015 LLVM Developer Meeting: Quarkslab's out-of-tree pass tutorial and a lightning talk on LLVM's limits, plus recaps of talks on WebAssembly, OpenCL and performance tracking.
research · blog.quarkslab.com
goto llvm_dev_meeting;
Announcement: Quarkslab's compiler crew is off to the LLVM Developer Meeting in California, presenting an out-of-tree LLVM pass tutorial and a lightning talk on bytecode obfuscation.
Back