Skip to content
Using Static Analysis and Clang To Find Heartbleed
blog.trailofbits.com | blog | #openssl | #static-analysis | #vulnerability-detection | #compilers | #clang | #heartbleed
Summary
Trail of Bits built a Clang analyzer plugin that statically detects Heartbleed-style bugs: it taints ntohl/ntohs return values and flags unconstrained data used as memcpy sizes, tested on OpenSSL.
- Published
- Collected