Skip to content

LLVM passes to analyze C programs to detect violations of secure coding guideline

License

Notifications You must be signed in to change notification settings

domainexpert/bug-checker-passes

Repository files navigation

Bug Checker Passes

Security analyses implemented on LLVM 3.4.2 to detect the violations of SEI CERT C coding standard.

Copyright (c) 2016 National University of Singapore See LICENSE.TXT for the license.

LLVM 3.4.2 Copyright (c) 2003-2013 University of Illinois at Urbana-Champaign

Currently, there are two analyses implemented:

  • bad-cast analysis to detect the violation of Rule EXP36-C in lib/Analysis/BadCast.
  • string-literal-write analysis to detect the violation of Rule STR30-C in lib/Analysis/StringLiteralWrite.

See the run.sh in each directory for the instruction on how to build and execute the analyses.

About

LLVM passes to analyze C programs to detect violations of secure coding guideline

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published