Owner

PLSysSec

2 indexed repositories · View on GitHub

rlbox
RLBox sandboxing framework

C++ · 319 stars
cargo-scan
A tool for auditing Rust crates

Rust · 47 stars

Beginner friendly Everything

Open All

publishing and sharing audit files Open

enhancement roadmap-unplanned

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#62 · Opened Jul 25, 2024
crash on `std` Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

PLSysSec/cargo-scan#61 · 1 comment · Opened Jul 12, 2024
Identify crates using SemVer and crates.io Open

enhancement roadmap-v1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PLSysSec/cargo-scan#60 · Opened Jul 11, 2024
Nondeterministic output on test crates Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PLSysSec/cargo-scan#59 · 1 comment · Opened Dec 5, 2023
! operator on tainted bool automatically unwraps it Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

PLSysSec/rlbox#56 · 1 reaction · Opened Nov 17, 2023
Tracking issue: resource exhaustion cases Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 28/100

PLSysSec/cargo-scan#58 · 5 comments · Opened Nov 7, 2023
improve FFI call effect Open

roadmap-v1

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PLSysSec/cargo-scan#51 · 1 comment · Opened Oct 25, 2023
RLBox v2: Include method to call function pointer Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

PLSysSec/rlbox#55 · Opened Sep 25, 2023
Roadmap for `cfg` attributes Open

enhancement roadmap-v1

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#50 · Opened Sep 6, 2023
Performance improvements Open

enhancement roadmap-unplanned

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#39 · 2 comments · Opened Jul 12, 2023
Tracking issue: crashes in `chain` binary Open

bug roadmap-unplanned

Difficulty 4/5 3-5 days Newbie friendliness 30/100

PLSysSec/cargo-scan#38 · 4 comments · Opened Jun 29, 2023
Sanity check: check that call graph is complete Open

enhancement good first issue help wanted roadmap-v1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PLSysSec/cargo-scan#36 · Opened Jun 5, 2023
Updated roadmap for traits Open

roadmap-v1

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PLSysSec/cargo-scan#35 · Opened Jun 1, 2023
Updated roadmap for closures and fn pointers Open

roadmap-v1

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#34 · 3 comments · Opened Jun 1, 2023
Severity labels + continuous integration Open

roadmap-unplanned

Difficulty 5/5 Over a week Newbie friendliness 30/100

PLSysSec/cargo-scan#23 · Opened Apr 17, 2023
Dependency fencing Open

roadmap-unplanned

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#20 · Opened Apr 10, 2023
Update audits on diff Open

roadmap-v1

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#17 · Opened Feb 27, 2023
track information flow for arguments Open

roadmap-unplanned

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/cargo-scan#14 · Opened Feb 3, 2023
Build-time effects Open

roadmap-v0

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PLSysSec/cargo-scan#13 · 1 comment · Opened Jan 27, 2023
Add example crates in `data/test-packages` Open

good first issue

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

PLSysSec/cargo-scan#7 · 1 comment · Opened Dec 18, 2022
example should guard against null string pointer Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

PLSysSec/rlbox#44 · 3 comments · Opened Mar 3, 2022
Minor cleanup Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PLSysSec/rlbox#30 · 2 comments · Opened Jul 13, 2021
Provide useful error message/add support when invoke variadic function calls Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

PLSysSec/rlbox#26 · Opened Dec 15, 2020
don't unregister callbacks automatically Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

PLSysSec/rlbox#24 · Opened Jul 5, 2020
Try compacting signature of convert_base_types_t_helper by passing parameters as a struct Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PLSysSec/rlbox#23 · Opened Mar 26, 2020
copy_and_verify_string of unsigned char* Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

PLSysSec/rlbox#22 · Opened Dec 30, 2019
expose sandbox created? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

PLSysSec/rlbox#21 · Opened Dec 30, 2019
memcpy and malloc_in_sandbox documentation Open

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

PLSysSec/rlbox#20 · Opened Dec 30, 2019
comparing integers of different signs Open

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

PLSysSec/rlbox#19 · Opened Dec 30, 2019
Improve error message when sandbox argument to sandbox_invoke is missing Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

PLSysSec/rlbox#18 · 3 comments · Opened Dec 28, 2019
Make the test suite compile error testing more robust by using a custom exception type Open

Difficulty 3/5 1-2 days Newbie friendliness 28/100

PLSysSec/rlbox#17 · Opened Aug 9, 2019
Pass to eliminate reinterpret_cast where possible Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

PLSysSec/rlbox#15 · Opened Aug 9, 2019
Do a pass with ubsan to check for safety issues, possibly in glue tests. Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

PLSysSec/rlbox#14 · Opened Aug 9, 2019
Do a warnings cleanup pass on code when compiling for Arch Linux Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

PLSysSec/rlbox#13 · Opened Aug 9, 2019
rlbox_noop_sandbox should be self sufficient Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

PLSysSec/rlbox#12 · Opened Aug 9, 2019
Implement auto conversion of wrapper types to opaque Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

PLSysSec/rlbox#11 · Opened Aug 9, 2019
Remove function casting used in callbacks to support tainted_opaque callback parameters Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

PLSysSec/rlbox#10 · Opened Aug 9, 2019
Implement the implicit type conversions for wrapper types, such as tainted<foo*> converts to tainted<void*> etc Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/rlbox#9 · Opened Aug 9, 2019
Add support for double fetch detection mode Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

PLSysSec/rlbox#8 · Opened Aug 9, 2019
Add support for threading Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

PLSysSec/rlbox#7 · Opened Aug 9, 2019
Add support for RLBox helper types like stack_arr or heap_arr Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

PLSysSec/rlbox#5 · Opened Aug 9, 2019
Add support for RLBox tainted_freezable types, to help prevent double fetch bugs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

PLSysSec/rlbox#4 · Opened Aug 9, 2019
Add support for standard int types (uint32_t, size_t etc.) for appropriate conversion Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

PLSysSec/rlbox#3 · Opened Aug 6, 2019

PLSysSec

Get new issues in your inbox