search

fkie-cad / cwe_checker

cwe_checker finds vulnerable patterns in binary executables
https://docs.cwe-checker.io
GNU Lesser General Public License v3.0
1.11k stars 115 forks source link

support Kernel ELF binaries #274

Open sh4m2hwz opened 2 years ago

sh4m2hwz commented 2 years ago

support kernel modules and vmlinux scan

Enkelmann commented 2 years ago

Kernel modules are also on my wish list. :-) I think rudimentary support for them should be possible without too much effort, but I cannot make promises on when I will find the time to tackle this.

A vmlinux scan would correspond to scanning a whole linux kernel image, right? This might take a long time until we are able to do something like this. It would be similar to checking bare-metal binaries (since we cannot assume anything about the environment that the kernel runs in), but would be much harder, since the linux kernel is much more complicated than an ordinary bare-metal binary. And even our bare-metal support is very limited right now. I do not have a plan yet on how we could implement useful analyses on whole kernel images and it might need a lot of experimentation and effort to get it to work in the end. So this is not on the list of things I want to implement in the near future right now.