CATCHING OPENSSL MISUSE USING CODEQL

Summary from the TLDR InfoSec newsletter

This post walks through five different CodeQL queries that can be used to catch potentially serious bugs in the OpenSSL libcrypto API that can cause memory leaks, authentication bypasses, and other cryptographic issues. It encourages developers and code reviewers to use tools like CodeQL to build and share queries to secure their code.