anthropics / anthropics/defending-code-reference-harness

Add more languages

Abierto
#27 0 comentarios 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
7.5k
Forks
605
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

Agentic security review for Rust. An autonomous recon → find → grade → find→fuzz → report → patch loop for the bugs that actually bite Rust: memory-safety in unsafe/FFI, panic-DoS from untrusted input, deserialization trust (an integrity check is not a bounds check), and Send/Sync + panic-safety soundness. Static analysis drives the dynamic stage — the threat model routes which sanitizer, fuzz rung, and vote budget each finding gets. Detectors: Miri (undefined behavior), AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz for execution-verified reproduction.

https://github.com/scadastrangelove/rust-in-peace

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Línea de trabajo

No repository files or tests are named; start by reading the Python scanning harness and the linked rust-in-peace project to locate the language-integration entry points. Define how the recon, finding, grading, fuzzing, reporting, and patching stages support Rust, including Miri, AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz; done means the loop can produce execution-verified Rust findings.

Escrito por el modelo de indexación a partir del texto del issue.

Evaluación

Stack tecnológico
python, rust
Área
devtools, security
Tipo de issue
Nueva funcionalidad
Dificultad
5/5
Tiempo estimado
Más de una semana
Estado de actividad
Tranquilo
Claridad
Necesita aclaración
Aptitud para principiantes
30/100

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.