Files
Jordy Zomer 64cf5c30f2 Add Linux kernel CodeQL queries (#75)
* Add first util query that finds syscalls and their arguments.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Add README for kernel dir and query to find interesting objects for
kernel heap exploitation.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Fix superfluous `:`

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename directory

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename again so we can add more tools :)

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

---------

Signed-off-by: Jordy Zomer <jordyzomer@google.com>
2024-01-19 17:30:41 +01:00

6 lines
125 B
Plaintext

import cpp
from Function syscall
where syscall.getName().matches("__do_sys_%")
select syscall, syscall.getParameterString()