openharmony-security-review

What problem does it solve?

It helps you systematically identify security vulnerabilities in privileged OpenHarmony system service C++ code, especially where untrusted data enters through IPC or network interfaces.

Core Features & Use Cases

• IPC & Deserialization Safety: Verifies MessageParcel reads are checked and that post-deserialization validation prevents size/logic exploitation.
• Multithreading & Concurrency Hardening: Detects container thread-safety issues, iterator invalidation, deadlock risk, and TOCTOU patterns.
• Sensitive Data & Permission Validation: Flags PII/pointer/address leakage in logs and ensures privileged operations validate caller permissions.

Quick Start

Use openharmony-security-review to audit an xxxService.cpp and its corresponding xxxStub.cpp for IPC input handling, concurrency hazards, sensitive logging, and permission checks.