Fully Automated Dynamic Analysis of RPM packages
summary
Describes extending Fedora’s csmock tool to run dynamic analyzers (valgrind, strace) automatically on source RPM packages to collect bugs from embedded regression tests. Emphasizes an approach that filters out unrelated reports coming from bash, make, Python interpreters and external test frameworks so results focus on real package issues.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:03Fully Automated Dynamic Analysis of RPM Packages
- 0:26Static vs. Dynamic Analysis
- 3:05Tests Embedded in RPM Packages
- 3:59Dynamic Analysis of RPM Packages - Simple Approach
- 4:57Dynamic Analysis of RPM Packages - Better Approach
- 5:53Program Interpreter
- 7:19Wrapper of Dynamic Linker - Implementation
- 8:56Wrapper of Dynamic Linker - Evaluation
- 10:49Dynamic Analysis of RPM Packages with csmock
- 19:13Future Work
related talks
48mFedora Automated Testing State of the Art: Not Quite CI for Distributions, but...
39mPractical Static Analysis for Continuous Application Security
35mValidating Freedom From Interference in Automotive Linux
42mContemporary Automatic Program Analysis
32mApplied static firmware analysis in a CI environment for increased safety and code review insights
52mBuilding Community-Driven Security Analysis for Your .NET Software Supply Chain
18mPreview: Verification (Correctness & Debugging)
01h 08mAutomated Dynamic Fireware Analysis At Scale: A Case Study on Embedded Web Interfaces