blog.trailofbits.comarticleRust-proof your code with our new Testing Handbook chapter
Trail of Bits announces a new chapter of its Testing Handbook dedicated to security testing Rust programs, covering Rust's safety-guarantee gaps (unwind safety, arithmetic errors, nondeterminism), dynamic analysis with Miri and proptest, static analysis with Clippy, a gotchas/footguns checklist for manual review, memory zeroization techniques, model checking with Kani, and supply-chain dependency vetting. The post also announces rust-review, a Claude Code plugin co-built with Aptos Labs that automates detection of over a dozen Rust bug classes including memory safety, concurrency, FFI, and async cancellation issues.
TL;DR Trail of Bits publishes a Rust security-testing handbook chapter (Miri, Clippy, Kani, memory zeroization) and releases rust-review, a Claude Code plugin for automated Rust security audits.
Organisations named here
- Aptos Labs
Technologies named here
- Testing Handbook
- Rust
- Miri
- proptest
- Clippy
- Kani
- rust-review
- Claude Code
- Cargo
- Trail of Bits
Techniques named here
- Dynamic analysis
- Static analysis via Clippy lints
- Manual code review via gotchas and footguns checklist
- Memory zeroization
- Model checking
- Supply chain dependency vetting
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup