Implement queries to detect Trojan Source
Offen
question
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
Does CodeQL have plans to implement automated detection of attempts to exploit the Trojan Source vulnerabilities that have been recently publicized?
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
For instance, it seems right now that CodeQL with `security-and-quality` enabled does not raise any issues on the proof of concept repository for this security research paper: https://github.com/nickboucher/trojan-source
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.