Implement queries to detect Trojan Source
未关闭
question
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
Does CodeQL have plans to implement automated detection of attempts to exploit the Trojan Source vulnerabilities that have been recently publicized?
https://krebsonsecurity.com/2021/11/trojan-source-bug-threatens-the-security-of-all-code/
For instance, it seems right now that CodeQL with `security-and-quality` enabled does not raise any issues on the proof of concept repository for this security research paper: https://github.com/nickboucher/trojan-source
贡献指南
评估
这个 Issue 还没有评估数据。