Catching OpenSSL misuse using CodeQL

By Damien Santiago I’ve created five CodeQL queries that catch potentially potent bugs in the OpenSSL libcrypto API, a widely adopted but often unforgiving API that can be misused to cause memory leaks, authentication bypasses, and other subtle cryptographic issues in implementations. These queries—which I developed during my internship with my mentors, Fredrik Dahlgren and […]

api authentication bugs catch codeql cryptographic dahlgren internship projects leaks memory memory leaks openssl