Static Analysis for CHERI - SOAP 2024

Explore a 19-minute video presentation from the SOAP 2024 conference that delves into custom static analyses supporting the transition of C/C++ code to CHERI hardware. Learn about CHERI, a novel architectural extension for RISC-V and AArch64 that utilizes capabilities for fine-grained memory protection and scalable software compartmentalization. Discover how researchers Irina Dudina and Ian Stark from the University of Edinburgh developed custom checkers for the clang static analyzer to handle capability alignment, memory copying, and integer manipulation. Gain insights into their evaluation of these tools on a sample of packages from the CheriBSD ports library. Understand how static analysis can help identify necessary source code changes to avoid runtime faults when recompiling large code collections for the CHERI platform.