Software supply chain-secure build system for the VPN client.

Easy to use STUN daemon for Linux

Auto Configuration Server controls in Rust

Fully new router management cloud service.

Fully new custom network router.

Custom OpenWRT-based ROM.

Router cloud management UI

The UI for a private network management project written based on Isabelle platform and Yew framework. Coded pages logic, dashboards, and everything about it. The project is released.

Wrote a processing engine for a private network management project. It included writing the core (based on Isabelle), related plugins, deployment processes. The project is released.

Management platform for the sport club based on Isabelle. This is a side project designed to simplify my own life.

Small yet powerful device intrusion detection mechanism. It has a negligible footprint, it is very portable, and basically can be used anywhere, even in IoT devices.

Dynamic tree implementation which allows for advanced use cases - like state keeping.

Parsing for Go based on C++/Rust.

High-performant server for managing basically anything. Written in Rust for the highest performance and stability, it is successfully used in many projects.

The static analysis orchestration server

Bringup of a MediaTek SoC to a software project along with the kernel, uBoot, target setup.

DMA implementation for a custom MediaTek NAND driver

printf/scanf format parser

Convert compile_commands.json to Atmel Studio projects

Eclipse IDE integration for the Equid static analyzer.

A project that is tracing the build on Linux, Windows and Mac and prepares configuration for the static analysis.

Numerous issues in MediaTek SoC were fixed.

Find and fix numerous issues in a commercial WiFi Mesh implementation.

Detect existing toolchains and their parameters

Message broker that can be installed to embedded software and used from Python test suite.

A complete test suite for wristband software based on Robot Framework

Emulator of Bluetooth activity for a consumer electronics device

Test ANTLR grammars and prepare JUnit result XML from results. Useful in CI.

Recreate signatures of Clang's builtin functions.

A simple console interface for adding peers to Wireguard configuration files.

A complete test suite for the C/C++/Java reversible debugger has been written under my supervision.

Detected, reverse-engineered and eliminated malware in a big project.

A complete infrastructure was built for the commercial company.

A complete infrastructure was built for my company.

RuC is a research language created to resolve issues in C languages. My role in it is in consulting of project members and occasional fixes.

Inject pages to SLAB caches in Linux. That may help improve performance and stability in memory-critical drivers in constrained environments.

Prepared a complete driver for emulating LAN clients.

Prepared cryptography improvements for router software.

SECCOMP mechanism has been ported to older Linux to facilitate LXC integration.

A custom package manager has been coded for a commercial router software. It was based on opkg, but supported many additional features.

A custom OpenVPN solution for Linux-based router software was architected, developed and made available publicly. Partially supports cryptography offloading and packet traffic acceleration.

A complete solution based on LXC has been written for commercial router. It was created with resource constraints in mind, so it actually could provide working containerization on a disk drive smaller than 30MB.

OverlayFS support has been implemented in Linux-based router software package. While the OverlayFS itself is a kernel's feature, a lot of efforts were put into making it supported on a complete solution level, with booting process altered, security, secure erase and other levels sorted out.

The Docker didn't have MIPS support back at that time, but the customer wanted to see it running. I investigated whether it is possible to port Docker (yes, it was), however, we stumbled upon Docker's design implications that prevented us from finishing the project.

Fixed multiple issues in Atheros and Intel (Metalink) WiFi drivers.

A new initial setup wizard was implemented for router software.

A graphical interface to Race static analyzer, allowing to quickly spot locking failures.

A static analyzer aimed at finding race conditions in the Linux code. It uses Lockset algorithm with sophisticated selection of executed function pairs, and it has proven to be quite useful in production. The C parsing has been implemented through Roslyn patches.

Ported DWC2 driver to a new platform, significantly improving stability and performance.

Since we had a host controller driver which was fatally flawed regarding locking, I've made a custom static analyzer to deal with locking problems. It was based on Roslyn patched to support C.

Host Controller Driver used in one of commercial SoCs has been fatally flawed. Fixing it was a major challenge, which required creation of a custom static analyzer.

An L2TP/L2TP+IPSec solution for Linux-based router software was architected, developed and made available publicly. It also works with partial cryptography and packet traffic acceleration.

I've architected and implemented a complete certificate store module for commercial router, which supported certificate/private key generation, import/export, verification against a private key. Still used without major edits (as of 2022).

I've optimized web interface prefetching and loading got 7x performance boost.

I've created a custom DynDNS client that is deployed to thousands of devices worldwide.

A tool to extract Windows Phone 8 FFU images.

Contributed to XPERIA X1 Android project