weggli - weggli is a fast and robust semantic search tool f

项目说明

weggli

!weggli example

Introduction

weggli is a fast and robust semantic search 工具 for C and C++ codebases.
It is designed to help security researchers identify interesting functionality in large codebases.

weggli performs pattern matching on Abstract Syntax Trees based on user provided queries. Its query language
resembles C and C++ 代码, making it easy to turn interesting 代码 patterns into queries.

weggli is inspired by great tools like Semgrep, Coccinelle, joern and CodeQL, but makes some different design decisions:

C++ support: weggli has first class support for modern C++ constructs, such as lambda expressions, range-based for loops and constexprs.

Minimal setup: weggli should work *out-of-the box* against most software you will encounter. weggli does not require the ability to build the software and can work with incomplete sources or missing dependencies.

Interactive: weggli is designed for interacti and fast query performance. Most of the time, a weggli query will be faster than a grep search. The goal is to enable an interacti where quick switching between 代码 review and query creation/impro is possible.

Greedy: weggli's pattern matching is designed to find as many (useful) matches as possible for a specific query. While this increases the risk of false positives it simplifies query creation. For example, the query $x = 10; will match both assignment expressions (foo = 10;) and declarations (int bar = 10;).

Usage

Examples

Calls to memcpy that write into a stack-buffer:

Calls to foo that don't check the return value:

Potentially snprintf() users:

Potentially uninitialized pointers:

Potentially insecure WeakPtr usage:

Debug only iterator :

Functions that perform writes into a stack-buffer based on
a function argument.

Functions with the string decode in their name

Encoding/Con functions

Install

Build Instruction

Implementation details

Weggli is built on top of the tree-sitter parsing library and its C and C++ grammars.
Search queries are first parsed using an extended of the corresponding grammar, and the resulting AST is
transformed into a set of tree-sitter queries
in builder.rs.
The actual query matching is implemented in query.rs, which is a relatively small wrapper around tree-sitter's query 引擎 to add weggli specific features.

Contributing

See CONTRIBUTING.md for details.

License

Apache 2.0; see LICENSE for details.

Disclaimer

This project is not an official Google project. It is not supported by
Google and Google specifically disclaims all warranties as to its quality,
merchantability, or fitness for a particular purpose.

项目信息

开发语言：Rust

Star 数：2499

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕weggli is a fast and robust semantic search 工具 for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。