mirror of
https://github.com/google/security-research
synced 2026-06-08 14:27:23 +00:00
Jordy Zomer
69b5e32fe7
* Add first util query that finds syscalls and their arguments. Signed-off-by: Jordy Zomer <jordyzomer@google.com> * Add README for kernel dir and query to find interesting objects for kernel heap exploitation. Signed-off-by: Jordy Zomer <jordyzomer@google.com> * Fix superfluous `:` Signed-off-by: Jordy Zomer <jordyzomer@google.com> * Rename directory Signed-off-by: Jordy Zomer <jordyzomer@google.com> * Rename again so we can add more tools :) Signed-off-by: Jordy Zomer <jordyzomer@google.com> * Add queries to find fields and functions, used for the dashboard and update results to linux-6.6 with the syzkaller ci-upstream-kasan-gce-root config. --------- Signed-off-by: Jordy Zomer <jordyzomer@google.com>
30 lines
803 B
Markdown
30 lines
803 B
Markdown
# Description
|
|
|
|
This repository contains CodeQL utility queries designed to analyze the Linux kernel source code.
|
|
|
|
## Queries
|
|
|
|
### syscalls.ql
|
|
|
|
Identifies system calls within the Linux kernel codebase and extracts relevant parameters for each syscall.
|
|
|
|
### Functions.ql
|
|
|
|
Identifies within the Linux kernel codebase and extracts their file, start-line and end-line.
|
|
|
|
### Fields.ql
|
|
|
|
Identifies fields within the Linux kernel codebase and extracts their parent struct, their name, their type, their offset and if they might be interesting.
|
|
|
|
#### Run query
|
|
```
|
|
codeql query run $query -d=$database --threads=$(nproc) -o output.bqrs
|
|
```
|
|
|
|
#### Export results
|
|
```
|
|
codeql bqrs decode output.bqrs --format=csv > syscalls.csv
|
|
```
|
|
|
|
Note: in the results directory you will find some results of a previous run.
|