|
Featured Research: LinuxGuard
My primary focus is LinuxGuard, a pipeline that learns from Linux kernel bug fixes to generate custom
clang-tidy checkers. By mining commit history, the system builds AST matchers that flag unchecked error paths across
kernels v3.0 through v6.0, turning each fixed vulnerability into a proactive safeguard.
- End-to-end automation: bug mining, checker synthesis, LLVM build, and multi-version scans.
- Flagship checker:
linuxkernel-must-check-errs catches missing error handling at scale.
- 200+ unchecked error flows surfaced per kernel release, revealing long-lived anti-patterns.
|