linux-kernel - Re: coccinelle: misc: add array_size_dup script to detect missed overflow checks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <a91200c0-b5ce-5c6c-5bd1-1a03d94d9d6d@web.de>
Date:   Wed, 17 Jun 2020 20:45:39 +0200
From:   Markus Elfring <Markus.Elfring@....de>
To:     Kees Cook <keescook@...omium.org>, cocci@...teme.lip6.fr
Cc:     Julia Lawall <julia.lawall@...6.fr>,
        Denis Efremov <efremov@...ux.com>,
        "Gustavo A. R. Silva" <garsilva@...eddedor.com>,
        linux-kernel@...r.kernel.org
Subject: Re: coccinelle: misc: add array_size_dup script to detect missed
 overflow checks

> How do I get something to match A and B but not C and D (i.e. I do not
> want to match any operations, function calls, etc, only a variable,
> which may be identified through dereference, array index, or struct
> member access.)

I suggest to take software design possibilities a bit more into account
around the application of disjunctions for the semantic patch language.
SmPL disjunctions can be used to search for unwanted source code fragments
before processing the remaining interesting cases.
I would find a direct search approach nicer.
But other special consequences might be usual for such use cases.

Regards,
Markus