Implement queries to detect Trojan Source
Đang mở
question
- Ngôn ngữ chính
- CodeQL
- Star
- 10.1k
- Fork
- 2.1k
- Merge trung bình
- 2 ngày 15 giờ
- Pull request đã merge (30 ngày)
- 141
Mô tả
Does CodeQL have plans to implement automated detection of attempts to exploit the Trojan Source vulnerabilities that have been recently publicized?
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
For instance, it seems right now that CodeQL with `security-and-quality` enabled does not raise any issues on the proof of concept repository for this security research paper: https://github.com/nickboucher/trojan-source
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.