{"id":114018,"date":"2024-03-02T06:25:42","date_gmt":"2024-03-02T04:25:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm"},"modified":"2024-03-02T06:25:42","modified_gmt":"2024-03-02T04:25:42","slug":"opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","title":{"rendered":"Byly zve\u0159ejn\u011bny v\u00fdsledky auditu bezpe\u010dnosti k\u00f3dov\u00e9 z\u00e1kladny LLVM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Fond OSTIF (Open Source Technology Improvement Fund), zalo\u017een\u00fd za \u00fa\u010delem pos\u00edlen\u00ed zabezpe\u010den\u00ed otev\u0159en\u00fdch projekt\u016f, ozn\u00e1mil dokon\u010den\u00ed nez\u00e1visl\u00e9ho auditu k\u00f3du projektu LLVM. Pr\u00e1ce byla provedena anglickou spole\u010dnost\u00ed Ada Logics. B\u011bhem proveden\u00e9 pr\u00e1ce byl obnoven p\u0159eru\u0161en\u00fd v\u00edce ne\u017e p\u0159ed rokem proces testov\u00e1n\u00ed v OSS-Fuzz. Pokryt\u00ed k\u00f3du vzrostlo z 1,1 na 2,4 milionu \u0159\u00e1dk\u016f k\u00f3du zapojen\u00fdch do fuzzingov\u00e9ho testov\u00e1n\u00ed. Tak\u00e9 byl roz\u0161\u00ed\u0159en pou\u017eit\u00fd n\u00e1stroj pro fuzzing a po\u010det pou\u017e\u00edvan\u00fdch motor\u016f pro ov\u011b\u0159ov\u00e1n\u00ed fuzzingu vzrostl z 12 na 15. <\/p>\n

Nakonec se v k\u00f3dov\u00e9 z\u00e1kladn\u011b LLVM poda\u0159ilo identifikovat 12 nov\u00fdch probl\u00e9m\u016f, z nich\u017e 8 bylo zp\u016fsobeno chybami vedouc\u00edmi k po\u0161kozen\u00ed pam\u011bti. 6 zji\u0161t\u011bn\u00fdch zranitelnost\u00ed vedlo k p\u0159ete\u010den\u00ed vyrovn\u00e1vac\u00ed pam\u011bti, 2 k p\u0159\u00edstupu k ji\u017e uvoln\u011bn\u00e9 pam\u011bti, 3 \u2014 k dereferencov\u00e1n\u00ed nulov\u00fdch ukazatel\u016f a 1 k \u010dten\u00ed z oblasti mimo p\u0159id\u011blenou vyrovn\u00e1vac\u00ed pam\u011b\u0165.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 LLVM. \u0420\u0430\u0431\u043e\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Ada Logics. \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u044b\u043b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u0435\u0440\u0432\u0430\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 OSS-Fuzz. \u0421 1.1 \u0434\u043e 2.4 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u043e\u0445\u0432\u0430\u0442 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u044b\u0437\u044b, \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u043e\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114018","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byly zve\u0159ejn\u011bny v\u00fdsledky auditu bezpe\u010dnosti k\u00f3dov\u00e9 z\u00e1kladny LLVM | ProHoster","description":"Fond OSTIF (Open Source Technology Improvement Fund), zalo\u017een\u00fd za \u00fa\u010delem pos\u00edlen\u00ed zabezpe\u010den\u00ed otev\u0159en\u00fdch projekt\u016f, ozn\u00e1mil dokon\u010den\u00ed nez\u00e1visl\u00e9ho auditu k\u00f3du projektu LLVM.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b LLVM | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 LLVM.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-02T04:25:42+00:00","article:modified_time":"2024-03-02T04:25:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=114018"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114018\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=114018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=114018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=114018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}