PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation

blog.quarkslab.com | research | #vulnerability-research | #developer-security | #binary-analysis | #bolt | #llvm | #ostif | #stack-protection | #compiler-hardening
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
Published
Collected

Related coverage

research · blog.quarkslab.com
Clang Hardening Cheat Sheet - Ten Years Later
Quarkslab updates its Clang Hardening Cheat Sheet a decade later with OpenSSF-recommended flags and newer mitigations against memory corruption, ROP/JOP and speculative execution attacks.
blog · blog.trailofbits.com
McSema is Officially Open Source!
McSema is now open source under a BSD license: the framework translates x86 machine code to LLVM bitcode so tools like KLEE can run on existing binaries; development was DARPA-sponsored.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · blog.quarkslab.com
Cortex Security Audit
Quarkslab audited Cortex, a multi-tenant Prometheus time-series store, for OSTIF: seven findings, including tenant impersonation via PushStream gRPC, were identified and all resolved.
research · blog.quarkslab.com
Scala Security Audit
Quarkslab's security audit of Scala 3 for OSTIF: threat modeling, manual review, static analysis and fuzzing across the compiler, standard library, REPL, TASTy Inspector and doc generator.
research · blog.quarkslab.com
Paramiko Security Audit
Quarkslab's security audit of Paramiko for OSTIF covered the pure-Python SSHv2 library, its cryptography dependencies and rust-openssl bindings, entropy sources, constant-time code, testing and CI/CD.
Back