Hardened

Hardened.jl is a simple package to strictly check that Julia is running with the correct flags for Hardened Compilation. This is useful for security and safety crtical systems.

Currently this checks for:

Bounds checking
Global IEEE math mode
Function overwrite

Bounds checking: overrides any @inbounds declarations IEEE math mode: overrides any @fastmath declarations Function overwrite: insures against resource injection and ensures testing integrity

Example workflow

using Hardened
using PrecompileTools

# PrecompileTools workload
@setup_workload begin

    # This will check that the compilation is hardened
    Hardened.check()

    @compile_workload begin
        # ...
    end
end

Covered CWEs

Additional Checks

This package only provides coverage against some CWEs. For additional checks, tools such as JuliaHub can provide greater static coverage.

JuliaComputing/Hardened.jl

Hardened

Example workflow

Covered CWEs

CWE-125: Out-of-bounds Read

CWE-787: Out-of-bounds Write

CWE-1339: Insufficient Precision or Accuracy of a Real Number

CWE-99: Improper Control of Resource Identifiers ('Resource Injection')

Additional Checks