Al

Because handling of the raw network stream is directly done by the ffmpeg process, there's no immediately obvious way of detecting a change in orientation, short of parsing the ffmpeg...

SCRCPY supports sending of input events, as well as receiving of some metadata. I my first priority will be to figure out a way of exposing it from the class....

"push ax" misaligns stack from DWORD

3

An instruction when pushing potentially non DWORD-aligned strings to the stack can potentially cause the SP to become a value non-divisible by 4. Aside from the serious performance hit from...

Ptrace Segmentation Fault signal handler can't handle RETurns to invalid addresses

1

Trying to _analyze() or display() a ProcessSignal of type SIGSEGV raised by a "RET" condition currently raises an Exception, as the current instruction handler has no detection for the RET...

COMPCOV off-by-one (or more!), index overflowing map

2

I have managed to trigger a buffer overflow in my Qiling target if `_uc_hook_sub_impl_64` is called with a `cur_loc` close to, but less than the total `MAP_SIZE`. I believe the...

Synacktiv have done an awesome write up of using CodeQL for source/sink analysis for detection of Java deserialization that would go well in this list Writeup: https://www.synacktiv.com/en/publications/finding-gadgets-like-its-2022 Associated tool/codebase: https://github.com/synacktiv/QLinspector