Performant type-checking for python.
-
Updated
Jul 21, 2021 - OCaml
{{ message }}
Performant type-checking for python.
Program for determining types of files for Windows, Linux and MacOS.
I wrote some of the code to do this in a branch https://github.com/python-security/pyt/compare/class_based_views, but since I'm working on other things and this feature seems cool and important I'm making this issue
Let me know if you would like any help in implementing.
Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
Binary Analysis Platform
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
[1127/1671] Compiling C object librz/core/rz_core.dll.p/cmd.c.obj
In file included from ../librz/core/cmd.c:80:
../librz/core/cmd_debug.c(1753,1): warning: non-void function does not return a value in all control paths [-Wreturn-type]
}
^
In file included from ../librz/core/cmd.c:86:
../librz/core/cmd_cmp.c(669,10): warning: implicit declaration of function 'chdir' is invalid in C99 [-W
DIE engine
A LLVM-based static analysis framework.
I noticed you have a plugin for Ghidra, but it is not the only one FOSS tool available.
Radare2 is a highly-portable cross-platform reverse engineering framework and a toolkit without dependencies. It has support for analyzing binaries, disassembling code, debugging programs, attaching to remote GDB/LLDB, WinDbg servers, rich plugin system (see r2pm), an
T.J. Watson Libraries for Analysis
History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
Binary Analysis Framework in Rust
SeaHorn Verification Framework
Static Analysis Compiler Plugin for Scala
We should probably run go generate and other commands that generate code, such as goa gen, as part of our autobuilder.
[LLVM Static Slicer] Various program analyses, construction of dependence graphs and program slicing of LLVM bitcode.
Describe the bug
See returntocorp/semgrep#3065
Steps to reproduce
https://semgrep.dev/s/enochii:false-negative-of-sql-injection
The fix seems very easy: the original reporter proposed

To avoid false positives, we might prefer
`- pattern: $OB
Type Analyzer for JavaScript
Static program analysis for TIP
Static Analyzer for LLVM bitcode based on Abstract Interpretation
Malware Behavior Analyzer
A binary analysis framework
Dynamic Program Slicing in LLVM Compiler
CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses
Find the ideal fuzz targets in a Rust codebase
A Dynamic Symbolic Execution (DSE) engine for JavaScript. ExpoSE is highly scalable, compatible with recent JavaScript standards, and supports symbolic modelling of strings and regular expressions.
Add a description, image, and links to the program-analysis topic page so that developers can more easily learn about it.
To associate your repository with the program-analysis topic, visit your repo's landing page and select "manage topics."
It's nice if testing doesn't produce unnecessary artifacts after running with success but keeps relevant info on fail for further inspection.
Pytest should have a nice way of creating fixtures that can post-process a test based on whether it failed or not https://docs.pytest.org/en/latest/example/simple.html#making-test-result-information-available-in-fixtures
If a test fails, then keep the