anthropics / anthropics/defending-code-reference-harness

Add more languages

未關閉
#27 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Python
星號
7.5k
分支
605
PR 合併指標
30 天內沒有已合併 PR

描述

Agentic security review for Rust. An autonomous recon → find → grade → find→fuzz → report → patch loop for the bugs that actually bite Rust: memory-safety in unsafe/FFI, panic-DoS from untrusted input, deserialization trust (an integrity check is not a bounds check), and Send/Sync + panic-safety soundness. Static analysis drives the dynamic stage — the threat model routes which sanitizer, fuzz rung, and vote budget each finding gets. Detectors: Miri (undefined behavior), AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz for execution-verified reproduction.

https://github.com/scadastrangelove/rust-in-peace

貢獻指南

這個儲存庫沒有索引到貢獻指南

研究方向

No repository files or tests are named; start by reading the Python scanning harness and the linked rust-in-peace project to locate the language-integration entry points. Define how the recon, finding, grading, fuzzing, reporting, and patching stages support Rust, including Miri, AddressSanitizer, panic/abort, hang-timeout, and cargo-fuzz; done means the loop can produce execution-verified Rust findings.

由索引模型根據 Issue 內容生成。

評估

技術堆疊
python, rust
領域
devtools, security
Issue 類型
功能
難度
5/5
預估耗時
一週以上
活躍度
冷清
描述清晰度
需要釐清
新手友好度
30/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。