maltek

Yes, that's the threat model I have in mind. Prevent in-container-unprivileged-user from triggering file system changes that could allow it to escalate to in-container-root. (My use-cases aren't actually with containers...

I'm running into the same exception, only with different line numbers. (This is version 0.5.0 from F-Droid.) I'm running a recent Cyanogenmod 13 Nightly on a LG G3. ``` 05-29...

While I've found some working workarounds for the moment, I already found two issues with the missing calling convention when implementing `toString` in #1: - In AARCH64, when a return...

@pandasauce 4.0.2 should work in my experience. If it doesn't work for you, it's either a regression or an unhandled edge case in that binary. Feel free to open a...

Given that this is practically unsupported right now, I don't really have compatibility concerns here. One thing to keep in mind for the schema changes: python doesn't just have the...

Another aspect: how do we want to agree on changes to stable APIs? I feel rigorous documentation is less important there than discussions before-hand so that no stake-holders have a...

Besides the weirdly formatted Java code, JSP will usually contain HTML. At qwiet, we don't use jimple2cpg, but for javasrc2cpg and java2cpg we look at the HTML contained in `.jsp`...

Maybe some of the discussion on time complexity of collection classes can be replaced with a link to the Scala docs on the topic? (I found these very useful when...

In dataflow queries, calls stand for the value returned by these calls. If you are interested in something other than that return value, you must adjust the sink of query....

@AndreiDreyer for the `select` call, it's the `methodFullName` that is set to "__core.Kernel.select" (and thereby also the `CALL` edge) I don't know why you don't see that `.alloc` call -...