> Detecting Iterator Invalidation with CodeQL
[DATE: 09/10/2020 12:30]
[LANGUAGE: EN]
Iterator invalidation is a common and subtle class of C++ bugs that often leads to exploitable vulnerabilities. During my Trail of Bits internship this summer, I developed Itergator, a set of CodeQL classes and queries for analyzing and discovering iterator invalidation. Results are easily interpretable by an auditor, […]