[RFC ABRT PATCH v2] Add gdb python plugin which analyzes vulnerability
Jiri Moskovcak
jmoskovc at redhat.com
Fri Jun 14 07:01:25 UTC 2013
On 06/13/2013 06:42 PM, Jan Kratochvil wrote:
> On Thu, 13 Jun 2013 17:08:44 +0200, Nikola Pajkovsky wrote:
>> CC'ing Jan
>
> I cannot agree with this approach, doing static analysis from the binary is
> too late, this is why RH David Malcolm is developing an interface into GCC:
> https://fedorahosted.org/gcc-python-plugin/
>
> It may be better to ask him personally more about the plugin, I do not know it.
- well that works only if you have the code, our project should be able
to help users identify possible threats even in the apps which doesn't
come with the source code
- besides, the page says: "The project is at an "alpha" level of
quality: it works, and ​has uncovered numerous coding errors - but the
APIs aren't set in stone yet."
- when it's ready it can be used as a first level of defence and ABRT as
the last, but from what I understand it's totally unrelated to ABRT
--Jirka
More information about the Crash-catcher
mailing list