Parsia Hakimian

raptor-ret-stack-address not checking for `static` variables

2

The `raptor-ret-stack-address` rule checks if we are returning a pointer to a stack variable. It returns a false positive if we are returning a static variable. ```cpp static SomeObject* getObject()...

Switch to Semgrep from eslint

2

Pros: * Easier rule writing. * Most likely lower load * Easier setup and installation Cons: * If the rules are not there, we have to create them ourselves. *...

Write javadoc for functions at least.

Use the Google formatter, it will mess up some of the code especially where I am doing multi-line function calls. In those cases, undo the change. Mostly do Organize Imports...

Due to the way I am shutting down threads, the connection to the database is not closed when the extension is unloaded. Even killing the threads does not fix it...

The detective file in the same package (`burp`) is a good candidate.

This allows the extension to log different types. For example, very verbose logs or normal debug logs. Then the type of the debug config item must be changed to an...

Create utility static methods in BurpExtender to call from outside

1

Instead of ```java import static burp.BurpExtender.mainTab; // And then calling mainTab.lintTable.populate(results); ``` Create a method in BurpExtender called `updateTable` and then call it from `UpdateTableThread`.

Because we are updating the table every second, our last selection is lost. This is not an issue when double-clicking to save because we grab the selected row right after...

This means the extension can only get a new config by using the `config.json` file by the jar. This will not be fun IF the extension is added to the...