{"id":18894204,"url":"https://github.com/trailofbits/vast-checker","last_synced_at":"2026-02-27T07:30:16.683Z","repository":{"id":166939728,"uuid":"629101084","full_name":"trailofbits/vast-checker","owner":"trailofbits","description":null,"archived":false,"fork":false,"pushed_at":"2023-06-06T17:03:13.000Z","size":73,"stargazers_count":24,"open_issues_count":0,"forks_count":3,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-12-31T07:24:35.347Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"MLIR","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/trailofbits.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-04-17T16:09:02.000Z","updated_at":"2024-08-12T20:30:54.000Z","dependencies_parsed_at":null,"dependency_job_id":"b38a3fa2-0bf7-4d63-b70f-8596c0352385","html_url":"https://github.com/trailofbits/vast-checker","commit_stats":null,"previous_names":["trailofbits/vast-checker"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trailofbits%2Fvast-checker","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trailofbits%2Fvast-checker/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trailofbits%2Fvast-checker/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trailofbits%2Fvast-checker/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/trailofbits","download_url":"https://codeload.github.com/trailofbits/vast-checker/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":239869218,"owners_count":19710485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-08T08:19:52.294Z","updated_at":"2026-02-27T07:30:16.640Z","avatar_url":"https://github.com/trailofbits.png","language":"MLIR","funding_links":[],"categories":[],"sub_categories":[],"readme":"# vast-checker\n\nVAST-checker is a [VAST](https://github.com/trailofbits/vast)-based tool that\nscans C code for variants of the\n[Sequoia](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33909) bug. It\nis intended to be run after translating C code to\n[](https://github.com/trailofbits/vast/blob/master/docs/HighLevel/HighLevel.md)VAST's\n`hl` MLIR dialect via the `vast-front` tool that ships with VAST. The main\npurpose of the project is to demonstrate the capabilities of VAST and MLIR in\nbug hunting and program analysis use cases.\n\n# Building on Ubuntu 22.04\n\n```sh\n\nwget -O - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -\nsudo add-apt-repository 'deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-16 main'\n\nsudo apt-get update \u0026\u0026 sudo apt-get install -y --no-install-recommends \\\n  clang-16 \\\n  clang-tools-16 \\\n  libclang-common-16-dev \\\n  libclang-16-dev \\\n  llvm-16 \\\n  llvm-16-dev \\\n  libllvm16 \\\n  libmlir-16-dev \\\n  mlir-16-tools \\\n  lld-16\n```\n\n```sh\ngit clone --recursive https://github.com/trailofbits/vast-checker.git\n```\n\n```sh\ncmake -S vast-checker -B build --toolchain ./external/vast/cmake/lld.toolchain.cmake \\\n                      -D CMAKE_BUILD_TYPE=Release \\\n                      -D CMAKE_PREFIX_PATH=/usr/lib/llvm-16 \\\n                      -D CMAKE_C_COMPILER=clang-16 \\\n                      -D CMAKE_CXX_COMPILER=clang++-16\n```\n\n```sh\ncmake --build build -j$(nproc)\n```\n\n# Usage\n\n```sh\n./build/external/vast/tools/vast-front/vast-front \\\n                      -vast-emit-mlir=hl \\\n                      -o extract.hl.mlir \\\n                      vast-checker/sequoia/extract.c\n```\n\n```sh\n./build/vast-checker -sequoia extract.hl.mlir \u003e /dev/null\n\n```\n\n# Contributing\n\nSee the [CONTRIBUTING](CONTRIBUTING.md) document.\n\n# Licensing\n\nvast-checker is licensed according to the Apache 2.0 license. VAST and vast-checker link against and uses Clang and LLVM APIs. Clang is also licensed under Apache 2.0, with LLVM exceptions.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrailofbits%2Fvast-checker","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrailofbits%2Fvast-checker","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrailofbits%2Fvast-checker/lists"}