Implement queries to detect Trojan Source
Aperta
question
- Lingua principale
- CodeQL
- Stelle
- 10.1k
- Fork
- 2.1k
- Merge medio
- 2g 15h
- PR unite (30g)
- 141
Descrizione
Does CodeQL have plans to implement automated detection of attempts to exploit the Trojan Source vulnerabilities that have been recently publicized?
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
For instance, it seems right now that CodeQL with `security-and-quality` enabled does not raise any issues on the proof of concept repository for this security research paper: https://github.com/nickboucher/trojan-source
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.