{"id":114018,"date":"2024-03-02T06:25:42","date_gmt":"2024-03-02T04:25:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm"},"modified":"2024-03-02T06:25:42","modified_gmt":"2024-03-02T04:25:42","slug":"opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","title":{"rendered":"Pubblicati i risultati dell'audit sulla sicurezza del codice sorgente LLVM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il Fondo OSTIF (Open Source Technology Improvement Fund), creato con l'obiettivo di migliorare la sicurezza dei progetti open source, ha annunciato il completamento di un audit indipendente del codice del progetto LLVM. Il lavoro \u00e8 stato svolto dalla societ\u00e0 inglese Ada Logics. Durante il lavoro \u00e8 stato ripreso il processo di test interrotto oltre un anno fa in OSS-Fuzz. La copertura del codice coinvolto nel fuzzing \u00e8 aumentata da 1,1 a 2,4 milioni di righe di codice. \u00c8 stato inoltre ampliato l'arsenale usato per il fuzzing, e il numero di motori di fuzzing utilizzati per i controlli \u00e8 aumentato da 12 a 15. <\/p>\n

Alla fine, nel codice sorgente di LLVM sono state individuate 12 nuove problematiche, di cui 8 causate da errori che portano a danneggiamento della memoria. 6 delle vulnerabilit\u00e0 scoperte portavano a un overflow del buffer, 2 a accesso a memoria gi\u00e0 liberata, 3 a dereferenziazione di puntatori nulli e 1 alla lettura al di fuori della zona di buffer allocata.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 LLVM. \u0420\u0430\u0431\u043e\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Ada Logics. \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u044b\u043b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u0435\u0440\u0432\u0430\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 OSS-Fuzz. \u0421 1.1 \u0434\u043e 2.4 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u043e\u0445\u0432\u0430\u0442 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u044b\u0437\u044b, \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u043e\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114018","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pubblicati i risultati dell'audit di sicurezza della base di codice LLVM | ProHoster","description":"Il Fondo OSTIF (Open Source Technology Improvement Fund), creato per rafforzare la sicurezza dei progetti open source, ha annunciato il completamento di un audit indipendente del codice del progetto LLVM. Il lavoro \u00e8 stato svolto dalla compagnia inglese Ada Logics. Durante l'attivit\u00e0 \u00e8 stato ripreso il processo di testing, interrotto oltre un anno fa, in OSS-Fuzz. La copertura della base di codice \u00e8 aumentata da 1,1 a 2,4 milioni di righe di codice, coinvolgendo","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b LLVM | ProHoster","og:description":"\u0424\u043e\u043d\u0434 OSTIF (Open Source Technology Improvement Fund), \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 LLVM. \u0420\u0430\u0431\u043e\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Ada Logics. \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u044b\u043b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u0435\u0440\u0432\u0430\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 OSS-Fuzz. \u0421 1.1 \u0434\u043e 2.4 \u043c\u043b\u043d \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u043e\u0445\u0432\u0430\u0442 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u044b\u0437\u044b, \u0432\u043e\u0432\u043b\u0435\u0447\u0451\u043d\u043d\u043e\u0439 \u0432","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-bezopasnosti-kodovoj-bazy-llvm","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-02T04:25:42+00:00","article:modified_time":"2024-03-02T04:25:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=114018"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114018\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=114018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=114018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=114018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}