nickboucher / trojan-source

Trojan Source: Invisible Vulnerabilities
https://trojansource.codes
MIT License
1.24k stars 266 forks source link

complete tests for ubuntu/windows #12

Closed simplylu closed 1 year ago

simplylu commented 2 years ago

Tested all scripts on remaining platforms

Included rustc output for detected bidi-chars.

nickboucher commented 2 years ago

@js-on This is fantastic, thanks for putting this together! It's great to be able to compare as many platforms as possible.

I'd be happy to merge this in, although I would like to repeat the experiments to ensure that the claims reproduce on my machine before inserting this into the main codebase. It may be a little while before I have time to do this, so for now I am going to leave this as an open PR so that others can see it here. I'll circle back to review as soon as there's bandwidth to do so.

simplylu commented 2 years ago

Sure, thanks for appreciating. Sorry for the second commit, this wasn't intended. Anyway, commit dc9ad31 contains templated versions of all your examples where all BiDi chars were replaced with their unicode abbreviation (like LRO, etc.), which were generated via this script. Another thing worth to mention: https://access.redhat.com/security/vulnerabilities/RHSB-2021-007#diagnostic-tools: