mirror of https://github.com/google/security-research synced 2026-06-08 14:27:23 +00:00

Files

T

Jordy Zomer 69b5e32fe7 Add more queries that are useful for the dashboard. (#77 )

* Add first util query that finds syscalls and their arguments.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Add README for kernel dir and query to find interesting objects for
kernel heap exploitation.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Fix superfluous `:`

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename directory

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename again so we can add more tools :)

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Add queries to find fields and functions, used for the dashboard and
update results to linux-6.6 with the syzkaller
ci-upstream-kasan-gce-root config.

---------

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

2024-01-22 13:38:17 +01:00

803 B

Raw Permalink Blame History

Description

This repository contains CodeQL utility queries designed to analyze the Linux kernel source code.

Queries

syscalls.ql

Identifies system calls within the Linux kernel codebase and extracts relevant parameters for each syscall.

Functions.ql

Identifies within the Linux kernel codebase and extracts their file, start-line and end-line.

Fields.ql

Identifies fields within the Linux kernel codebase and extracts their parent struct, their name, their type, their offset and if they might be interesting.

Run query

codeql query run $query -d=$database --threads=$(nproc) -o output.bqrs

Export results

codeql bqrs decode output.bqrs --format=csv > syscalls.csv

Note: in the results directory you will find some results of a previous run.

803 B Raw Permalink Blame History