Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add verification helper tool #747

Open
GeckoEidechse opened this issue Jan 14, 2024 · 0 comments
Open

Add verification helper tool #747

GeckoEidechse opened this issue Jan 14, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@GeckoEidechse
Copy link
Member

Add some logic to assist in mod verification (https://github.com/R2Northstar/VerifiedMods/)

In particular

  • easily create diff to last verification if it exists (to allow for fast re-verification especially when there's only small changes)
  • flag "dangerous" calls to native (in particular Safe I/O and SquirrelHTTP, while on it's own not dangerous at all, they can be used to add additional logic that is impossible to verify using solely automated static analysis and require the knowledge of a human reviewer to ensure safety)

Features

downloader

download version requested for verification

diff creation

  1. download last verified version
  2. extract
  3. git init
  4. git commit with some dummy user
  5. delete all files except .git folder
  6. download version requested for verification
  7. extract into same folder
  8. stage files without committing
  9. launch vscode to then easily see diff

"dangerous" keyword finder

simply do string search over the code and flag for certain keywords that would require additional scrutiny (SquirrelHTTP, SafeI/O, ...) or should be ban the mod entirely from verification (compilestring).

@GeckoEidechse GeckoEidechse added the enhancement New feature or request label Jan 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant