search for: stackaddrescape

...riginal plan we've had in mind was to keep track of dangerous values like str.c_str() in the program state (similarly to how SimpleStreamChecker tracks file descriptors) and then see if any of them are still present in memory at the end of the original value's lifetime (similarly to how StackAddrEscape checker finds stack pointers at the end of a function's stack frame). The unknowns here include how easy would it be to track scopes (for now we only track function scopes, but if fairly old but recently reincarnated patches [1] and [2] land any time soon, we may get a much better granular...

...ve had in mind was > to keep track of dangerous values like str.c_str() in the program state > (similarly to how SimpleStreamChecker tracks file descriptors) and then > see if any of them are still present in memory at the end of the > original value's lifetime (similarly to how StackAddrEscape checker > finds stack pointers at the end of a function's stack frame). > Ok I think that I understand the idea. So the idea is that this checker will be an API that will permit to track those invariants (and we will use this API to track str.c_str()). Am I right ? > The unknowns...

Hey, On 02/20/2018 11:51 PM, Paul Semel wrote: > Hello, > > > I'm Paul Semel, a French student in computer science. I am currently in > my 4th year (1st year of graduate school) at EPITA and enrolled in the > system and security laboratory of the school. > > I would be very interested in working on a LLVM project during this > GSoC. Implementing a PoC for an

Hello, I'm Paul Semel, a French student in computer science. I am currently in my 4th year (1st year of graduate school) at EPITA and enrolled in the system and security laboratory of the school. I would be very interested in working on a LLVM project during this GSoC. Implementing a PoC for an unsequenced modification checker in CSA helped me discover LLVM. However, I would like to