It would be really interesting to run this over the apps. Maybe reach out to
the author for help with that?
From: Dmitry Belyavsky
Date: Sunday, May 31, 2020 at 5:44 AM
To: "openssl-project@openssl.org"
Subject: Detecting Bad OpenSSL Usage
Hello,
Here is a nice article about a tool desired to catch misuse of the OpenSSL API.
https://blog.trailofbits.com/2020/05/29/detecting-bad-openssl-usage/<https://urldefense.proofpoint.com/v2/url?u=https-3A__blog.trailofbits.com_2020_05_29_detecting-2Dbad-2Dopenssl-2Dusage_&d=DwMFaQ&c=96ZbZZcaMF4w0F4jpN6LZg&r=4LM0GbR0h9Fvx86FtsKI-w&m=umc-9fW6eYwZuJa_RJ7Qh_tR1Zs7MzCSarQ3YgyEe2w&s=284ow8SPuGpA6WJ-uDXnpJnBJEJ0SRXklOQAgRmqMTk&e=>
I'm not sure whether it's worth using by the team but maybe it's worth
mentioning in OpenSSL Wiki.
--
SY, Dmitry Belyavsky
