aclements / libelfin

C++11 ELF/DWARF parser
MIT License
314 stars 99 forks source link

Could libelfin benefit from free security help? #72

Open Amir-Montazery opened 1 year ago

Amir-Montazery commented 1 year ago

Hello libelfin community! Open Source Technology Improvement Fund is piloting out helping critical projects like libelfin with their security needs. We have some resources dedicated to helping improve security posture and tooling. I wasn't sure how best to reach out. Please let me know if this sounds interesting and who to connect with. Thank you in advance!

darealshinji commented 10 months ago

That would be good. The project is easy to use but seems to suffer from many unfixed security issues.

Update: adding GCC builtins to do overflow checks and similar checks might help: https://gcc.gnu.org/onlinedocs/gcc/Integer-Overflow-Builtins.html