In case you were wondering, Joern supports data-flow across procedure (and file) boundaries. This is based on preprocessing step of intraprocedural data-flow slicing done in parallel, followed by on-the-fly symbol tracking during query time. These are mainly accessed via data-flow query steps . During these data-flow...

Major Updates and News The Joern blog and community updates have been quiet since the last update at the end of 2021, but the team has not stopped working in the background to bring you major updates. In this blog, we’ll be talking about the new companies sponsoring resources to developing Joern, and the future of the...

Joern ’s frontend family is growing, and we welcome our newest member, Ghidra2cpg ! It makes Joern the first code querying tool with binary support. What can Ghidra2cpg do for you that other tools can’t? Well, everything you are used to doing with Joern but with assembly. For example, you can query function content:...

VLC 3.0.13 fixes a vulnerability that we identified automatically using joern-scan and reported a few weeks back. In particular, the following query that is part of joern-scan’s default bundle pointed to the flaw. {val src = cpg.method(".*malloc$").callIn.where(.argument(1).arithmetics).l...

What is Plume? Plume is a library which makes use of Soot to transform JVM bytecode into code property graphs. Given Java class files, the JVM bytecode is transformed into Soot’s UnitGraph representation with call graphs constructed using either Class Hierarchy Analysis (CHA) or SPARK algorithms. This intermediate...