microsoft / microsoft/litebox

Automated search for runtime-loaded libraries

Open
#768 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement priority-low
Dominant language
Rust
Stars
2.7k
Forks
144
Avg merge
12h 21m
Merged PRs (30d)
146

Description

Related to #765, @CvvT pointed out that we should (more generally) search for more runtime-loaded libraries, similar to libgcc_s.so.1.

I think there is no harm in conservatively over-approximating (modulo some minor one-time perf hit due to rewriter overhead) to just pull in any .so-like strings we notice that also exist on the system.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading related issue #765 and tracing the rewriter path mentioned here. Investigate how runtime-loaded libraries such as libgcc_s.so.1 are discovered, then verify that .so-like strings found by the rewriter are checked against libraries present on the system without unnecessary additions.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
operating-systems
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.