SVF-tools / SVF

Static Value-Flow Analysis Framework for Source Code
http://svf-tools.github.io/SVF/
Other
1.42k stars 435 forks source link

Where is the implementation for CRED in ICSE'18? #1037

Open junwha opened 1 year ago

junwha commented 1 year ago

Hi, I'm currently trying to experiment with SABER, and I realized that it can not deal with UAF as mentioned in #481 But I thought it is weird because I know that your group had been published the paper for UAF detection using SVF.

Could you let me know where to use CRED?

junwha commented 1 year ago

I also want to know the bellow repo is the implementation of CRED https://github.com/whichbug/SVF-UAF

yuleisui commented 1 year ago

I also want to know the bellow repo is the implementation of CRED https://github.com/whichbug/SVF-UAF

No, I don't think so. The CRED implementation unfortunately has not been integrated into SVF yet.

junwha commented 1 year ago

Thank you for the answer. you mean CRED is not open-source yet?

yuleisui commented 1 year ago

Not yet. Hopefully we will have someone to port or reimplement it into SVF in the future

junwha commented 1 year ago

Got it. Thank you:)