Small yet powerful device intrusion detection mechanism

Dynamic tree implementation which allows for advanced use cases - like state keeping.

The platform for keeping management of everything - from Continuous Integration-like stuff to farming.

The static analysis orchestration server

Bringup of a MediaTek SoC to a software project along with the kernel, uBoot, target setup.

DMA implementation for a custom MediaTek NAND driver

printf/scanf format parser

Convert compile_commands.json to Atmel Studio projects

Eclipse IDE integration for the Equid static analyzer.

A project that is tracing the build on Linux, Windows and Mac and prepares configuration for the static analysis.

Numerous issues in MediaTek SoC were fixed.

Find and fix numerous issues in a commercial WiFi Mesh implementation.

Detect existing toolchains and their parameters

Message broker that can be installed to embedded software and used from Python test suite.

A complete test suite for wristband software based on Robot Framework

Emulator of Bluetooth activity for a consumer electronics device

Test ANTLR grammars and prepare JUnit result XML from results. Useful in CI.

Recreate signatures of Clang's builtin functions.

A simple console interface for adding peers to Wireguard configuration files.

A complete test suite for the C/C++/Java reversible debugger has been written under my supervision.

Detected, reverse-engineered and eliminated malware in a big project.

A complete infrastructure was built for the commercial company.

A complete infrastructure was built for my company.

RuC is a research language created to resolve issues in C languages. My role in it is in consulting of project members and occasional fixes.

Inject pages to SLAB caches in Linux. That may help improve performance and stability in memory-critical drivers in constrained environments.

Prepared a complete driver for emulating LAN clients.

Prepared cryptography improvements for router software.

SECCOMP mechanism has been ported to older Linux to facilitate LXC integration.

A custom package manager has been coded for a commercial router software. It was based on opkg, but supported many additional features.

A custom OpenVPN solution for Linux-based router software was architected, developed and made available publicly. Partially supports cryptography offloading and packet traffic acceleration.

A complete solution based on LXC has been written for commercial router. It was created with resource constraints in mind, so it actually could provide working containerization on a disk drive smaller than 30MB.

OverlayFS support has been implemented in Linux-based router software package. While the OverlayFS itself is a kernel's feature, a lot of efforts were put into making it supported on a complete solution level, with booting process altered, security, secure erase and other levels sorted out.

The Docker didn't have MIPS support back at that time, but the customer wanted to see it running. I investigated whether it is possible to port Docker (yes, it was), however, we stumbled upon Docker's design implications that prevented us from finishing the project.

Fixed multiple issues in Atheros and Intel (Metalink) WiFi drivers.

A new initial setup wizard was implemented for router software.

A graphical interface to Race static analyzer, allowing to quickly spot locking failures.

A static analyzer aimed at finding race conditions in the Linux code. It uses Lockset algorithm with sophisticated selection of executed function pairs, and it has proven to be quite useful in production. The C parsing has been implemented through Roslyn patches.

Ported DWC2 driver to a new platform, significantly improving stability and performance.

Since we had a host controller driver which was fatally flawed regarding locking, I've made a custom static analyzer to deal with locking problems. It was based on Roslyn patched to support C.

Host Controller Driver used in one of commercial SoCs has been fatally flawed. Fixing it was a major challenge, which required creation of a custom static analyzer.

An L2TP/L2TP+IPSec solution for Linux-based router software was architected, developed and made available publicly. It also works with partial cryptography and packet traffic acceleration.

I've architected and implemented a complete certificate store module for commercial router, which supported certificate/private key generation, import/export, verification against a private key. Still used without major edits (as of 2022).

I've optimized web interface prefetching and loading got 7x performance boost.

I've created a custom DynDNS client that is deployed to thousands of devices worldwide.

A tool to extract Windows Phone 8 FFU images.

Contributed to XPERIA X1 Android project