Tian-Yi Zhang

When Dependencies Depend: A Large-Scale Study on Conditional Dependencies and Their Security Implications in C/C++

Condor is developed, a static analysis approach that parses CMake build files to extract conditional dependencies together with their inclusion logic, revealing a C/C++-specific landscape of dependency variability that is difficult for existing SCA tools to capture.