Skip to content

Support for vuln-regex-detector#6

Open
davisjam wants to merge 5 commits into2bdenny:masterfrom
davisjam:SupportForVRD
Open

Support for vuln-regex-detector#6
davisjam wants to merge 5 commits into2bdenny:masterfrom
davisjam:SupportForVRD

Conversation

@davisjam
Copy link
Copy Markdown

@davisjam davisjam commented Jan 1, 2019

  • Maven tweaks to build jar, not just compile
  • Input and output changes to match the vuln-regex-detector spec
  • Shift some outputs from stdout to stderr

These changes look sufficient for use with vuln-regex-detector, and I can add a ReScue driver there after they are merged.

Let me know if you want any changes!

Jamie Davis added 5 commits December 31, 2018 15:19
- Add members to Trace
- Set from Pumper
- Print as part of the summary.
  This makes it easy to consume the output
  as part of vuln-regex-detector
Build and use ReScue as follows:
  mvn clean
  mvn compile
  mvn package
  java -jar target/ReScue-1.0.jar ...
1. --regexFile F is now a way to specify a regex
2. Emit AttackResult with fields:

   regex
   canAnalyze
   isSafe
   evilInputs[]

These input and output changes make it fit the
vuln-regex-detector spec.
So it will be easy to add to VRD.
@davisjam
Copy link
Copy Markdown
Author

davisjam commented Jan 1, 2019

After #5 is merged, we should add the new build instructions.

They are:

mvn clean
mvn compile
mvn package

@2bdenny You may want to change the build directory and jar file. At the moment it goes to target/ReScue-1.0.jar.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant