anthropics / anthropics/defending-code-reference-harness

Add more languages

未关闭
#27 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
7.5k
派生
605
PR 合并指标
30 天内没有已合并 PR

描述

Agentic security review for Rust. An autonomous recon → find → grade → find→fuzz → report → patch loop for the bugs that actually bite Rust: memory-safety in unsafe/FFI, panic-DoS from untrusted input, deserialization trust (an integrity check is not a bounds check), and Send/Sync + panic-safety soundness. Static analysis drives the dynamic stage — the threat model routes which sanitizer, fuzz rung, and vote budget each finding gets. Detectors: Miri (undefined behavior), AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz for execution-verified reproduction.

https://github.com/scadastrangelove/rust-in-peace

贡献指南

这个仓库没有索引到贡献指南

调研方向

No repository files or tests are named; start by reading the Python scanning harness and the linked rust-in-peace project to locate the language-integration entry points. Define how the recon, finding, grading, fuzzing, reporting, and patching stages support Rust, including Miri, AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz; done means the loop can produce execution-verified Rust findings.

由索引模型根据 Issue 内容生成。

评估

技术栈
python, rust
领域
devtools, security
Issue 类型
功能
难度
5/5
预计耗时
一周以上
活跃度
冷清
描述清晰度
需要澄清
新手友好度
30/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。