search

ucsb-seclab / dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers
BSD 2-Clause "Simplified" License
329 stars 71 forks source link

Handle taint propagation in sscanf #17

Closed Machiry closed 7 years ago

Machiry commented 7 years ago

As of now, taint propagation does not happen in case of sscanf and DR.CHECKER raises warnings if tainted data is used.

This could and should be fixed. Warning should be raised only if %s is used in the format specifier.