Files
google-security-research/analysis/kernel/README.md
T
Jordy Zomer 64cf5c30f2 Add Linux kernel CodeQL queries (#75)
* Add first util query that finds syscalls and their arguments.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Add README for kernel dir and query to find interesting objects for
kernel heap exploitation.

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Fix superfluous `:`

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename directory

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

* Rename again so we can add more tools :)

Signed-off-by: Jordy Zomer <jordyzomer@google.com>

---------

Signed-off-by: Jordy Zomer <jordyzomer@google.com>
2024-01-19 17:30:41 +01:00

29 lines
1.0 KiB
Markdown

# Linux Kernel Analysis with CodeQL
This directory contains repositories focused on the security analysis of the Linux kernel using CodeQL.
## Available directories:
### util
Description: Contains CodeQL queries for general-purpose analysis of the Linux kernel source code.
Example query: `syscalls.ql` to identify and extract system calls and their
parameters.
See the README within this repository for more details and instructions.
### heap-exploitation
Description: Contains CodeQL queries specifically designed to find patterns and objects relevant to heap exploitation in the Linux kernel.
Example query: `InterestingObjects.ql` to locate interesting heap objects.
See the README within this repository for more details and instructions.
## Prerequisites
CodeQL installation: Refer to the CodeQL documentation (https://codeql.github.com/docs/) for installation and setup.
CodeQL databases: You will need to create CodeQL databases representing the Linux kernel source code. Follow the guidelines in the documentation or within each repository's README.