[RFC ABRT PATCH v2] Add gdb python plugin which analyzes vulnerability

Jiri Moskovcak jmoskovc at redhat.com
Fri Jun 14 07:01:25 UTC 2013


On 06/13/2013 06:42 PM, Jan Kratochvil wrote:
> On Thu, 13 Jun 2013 17:08:44 +0200, Nikola Pajkovsky wrote:
>> CC'ing Jan
>
> I cannot agree with this approach, doing static analysis from the binary is
> too late, this is why RH David Malcolm is developing an interface into GCC:
> 	https://fedorahosted.org/gcc-python-plugin/
>
> It may be better to ask him personally more about the plugin, I do not know it.

- well that works only if you have the code, our project should be able 
to help users identify possible threats even in the apps which doesn't 
come with the source code
- besides, the page says: "The project is at an "alpha" level of 
quality: it works, and ​has uncovered numerous coding errors - but the 
APIs aren't set in stone yet."
- when it's ready it can be used as a first level of defence and ABRT as 
the last, but from what I understand it's totally unrelated to ABRT


--Jirka


More information about the Crash-catcher mailing list