Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-07 | build: Use and test PE binutils with --reloc-section | Carl Dong | |
Also fix test-security-check.py to account for new PE PIE failure indication. | |||
2021-07-07 | devtools: Improve *-check.py tool detection | Carl Dong | |
This is important to make sure that we're not testing tools different from the one we're building with. Introduce determine_wellknown_cmd, which encapsulates how we should handle well-known tools specification (IFS splitting, env override, etc.). | |||
2021-05-09 | scripts: test for MACHO control flow instrumentation | fanquake | |
2021-03-13 | test: Cleanup test files in test-{security,symbol}-check.py | Hennadii Stepanov | |
2020-07-28 | devtools: Add security check for separate_code | Wladimir J. van der Laan | |
Check that sections are appropriately separated in virtual memory, based on their (expected) permissions. This checks for missing -Wl,-z,separate-code and potentially other problems. Co-authored-by: fanquake <fanquake@gmail.com> | |||
2020-06-16 | test: use subprocess.run() in test-security-check.py | fanquake | |
2020-06-16 | tests: run test-security-check.py in CI | fanquake | |
2020-04-23 | scripts: add PE .reloc section check to security-check.py | fanquake | |
2020-04-21 | scripts: add MACHO LAZY_BINDINGS test to test-security-check.py | fanquake | |
I didn't add the relevant test in #18295. | |||
2020-04-21 | scripts: add MACHO Canary check to security-check.py | fanquake | |
2020-04-16 | scripted-diff: Bump copyright headers | MarcoFalke | |
-BEGIN VERIFY SCRIPT- ./contrib/devtools/copyright_header.py update ./ -END VERIFY SCRIPT- | |||
2020-03-26 | scripts: rename test_64bit_PE to test_PE | fanquake | |
2020-03-26 | scripts: add MACHO NX check to security-check.py | fanquake | |
2020-03-26 | scripts: add MACHO tests to test-security-check.py | fanquake | |
2019-12-30 | scripted-diff: Bump copyright of files changed in 2019 | MarcoFalke | |
-BEGIN VERIFY SCRIPT- ./contrib/devtools/copyright_header.py update ./ -END VERIFY SCRIPT- | |||
2019-05-03 | Remove Windows 32 bit build | MarcoFalke | |
2018-08-08 | Merge #13780: 0.17: Pre-branch maintenance | Wladimir J. van der Laan | |
3fc20632a3ad30809356a58d2cf0ea4a4ad4cec3 qt: Set BLOCK_CHAIN_SIZE = 220 (DrahtBot) 2b6a2f4a28792f2fe9dc1be843b1ff1ecae35e8a Regenerate manpages (DrahtBot) eb7daf4d600eeb631427c018a984a77a34aca66e Update copyright headers to 2018 (DrahtBot) Pull request description: Some trivial maintenance to avoid having to do it again after the 0.17 branch off. (The scripts to do this are in `./contrib/`) Tree-SHA512: 16b2af45e0351b1c691c5311d48025dc6828079e98c2aa2e600dc5910ee8aa01858ca6c356538150dc46fe14c8819ed8ec8e4ec9a0f682b9950dd41bc50518fa | |||
2018-07-27 | Update copyright headers to 2018 | DrahtBot | |
2018-07-26 | contrib: Fix test-security-check fail in Ubuntu 18.04 | Chun Kuan Lee | |
2018-06-12 | Explicitly specify encoding when opening text files in Python code | practicalswift | |
2018-05-11 | Enable W191 and W291 flake8 checks. | John Bampton | |
Remove trailing whitespace from Python files. Convert tabs to spaces. | |||
2018-04-27 | tests: Add test for 64-bit PE, modify 32-bit test results | Chun Kuan Lee | |
9a75d29b6f0d6c4834e451b0fae2200786655a35 change the error result from `PIE` to `DYNAMIC_BASE`. And there are no test for 64-bit, so I made one | |||
2018-04-14 | [contrib] convert test-security-check to python3 | John Newbery | |
2018-01-03 | Increment MIT Licence copyright header year on files modified in 2017 | Akira Takizawa | |
2017-01-13 | Remove unused Python imports | practicalswift | |
2016-09-11 | [copyright] add MIT License copyright header to remaining Python files | isle2983 | |
2016-06-26 | Use portable #! in python scripts (/usr/bin/env) | Matthew King | |
2015-10-22 | devtools: Add security-check.py | Wladimir J. van der Laan | |
Perform the following ELF security checks: - PIE: Check for position independent executable (PIE), allowing for address space randomization - NX: Check that no sections are writable and executable (including the stack) - RELRO: Check for read-only relocations, binding at startup - Canary: Check for use of stack canary Also add a check to symbol-check.py that checks that only the subset of allowed libraries is imported (to avoid incompatibilities). |