News for hackers. Stuff that matters.

A comment on RAMBleed Attack – Reading Bits in Memory Without Accessing Them. Parent comment

Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by mehrdadn on Tuesday June 11, 2019 @09:32PM (#20161017)
> SAL annotations

Are there tools for developers to use these (e.g. with VC++), or are they all Microsoft internal?

[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by ryacko on Tuesday June 11, 2019 @10:20PM (#20161201)
I have read about this: https://github.com/google/styleguide/tree/gh-pages/cpplint

There is also this: https://github.com/mre/awesome-static-analysis

[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by mehrdadn on Tuesday June 11, 2019 @10:26PM (#20161229)
I was specifically asking about SAL.
[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by ryacko on Tuesday June 11, 2019 @10:32PM (#20161259)
There is also this: https://docs.microsoft.com/en-us/visualstudio/code-quality/u...
[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by mehrdadn on Tuesday June 11, 2019 @10:36PM (#20161271)
I think they talk about the annotation but not the analysis tools?
[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by hoseja on Wednesday June 12, 2019 @02:25AM (#20162222)
https://docs.microsoft.com/en-us/visualstudio/code-quality/c...

It's part of VC++.

But I do not recommend using SAL for modern code.

[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by mehrdadn on Wednesday June 12, 2019 @02:34AM (#20162267)
Oh wow. I'd used /analyze before but I hadn't realized it takes SAL into account. I thought it just does limited extra analysis without SAL. Thank you!
[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by tru3_power on Wednesday June 12, 2019 @12:28AM (#20161779)
Yup there are a few static code analysis tools that support using annotations afaik
[ Parent | on HN ]
Re:RAMBleed Attack – Reading Bits in Memory Without Accessin... by mehrdadn on Wednesday June 12, 2019 @12:50AM (#20161858)
SAL specifically, or other kinds?
[ Parent | on HN ]