• Use BEAR to generate a compilation database.
• Run an analysis over that in order to determine what capabilities are used in which symbols.
• Annotate all implicated files with the computed pledge statements.

Usage (eventually)

• ¯\_(ツ)_/¯ Just discovered bear, so lets just see what arises organically.

Requirements (MSYS2)

• (all prefixed w/mingw-w64-x86_64-) clang, clang-tools-extra, cmake, extra-cmake-modules, gdb, make, lld

Building

• mkdir build
• cd build
• cmake -G "MSYS Makefiles" ../src
• make

Links

• Paper (github repo)
• Measurement tool
• OpenBSD checkout