-
Hi! I am trying to analyze the accuracy of `cflow`.
I run the command
```
./run.sh -a hadoop_common -i -s
```
and find there is a taint propagation path from source method `getLong()` to sink me…
-
```
1. Configure analysis for Android. That is, restrict THIS of
non-private methods of app classes extending/implementing
Android library classes/interfaces, to {POLY,TAINTED}. In other
words, disall…
-
https://wsxk.github.io/%E9%9D%99%E6%80%81%E5%88%86%E6%9E%90_datalog/
1. Motivation
2. Introduction to Datalog
3. Pointer Analysis via Datalog
4. Taint Analysis via Datalog
1. Motivation
…
-
```
1. Configure analysis for Android. That is, restrict THIS of
non-private methods of app classes extending/implementing
Android library classes/interfaces, to {POLY,TAINTED}. In other
words, disall…
-
This is currently not found: https://psalm.dev/r/664f7b7006
```php
-
### Thanks for taking the time to fill out this feature request!"
- [X] I have searched the issue tracker for similar requests
### Which @snicco/* package(s) are relevant/related of the feature requ…
-
I wonder whether FlowDroid supports doing taint analysis on .class or .jar file instead of .apk file. If so, how can I set target file. Moreover, I have to perform taint analysis which involves differ…
-
[The check in AnalyzedTemplatesTainter](https://github.com/psalm/psalm-plugin-symfony/blob/583bfd706f69c31504db0738a9f0de3fc5743b8e/src/Twig/AnalyzedTemplatesTainter.php#L80) for Twig variables just c…
-
Hi @StevenArzt
In the following example, when `b` is tainted at line3, a backward alias analysis is triggered. I register a taint propagation handler and I can see that the `a` returned in `foo` i…
-
OWASP Top Ten recipe has errors on spring-framework, spring-integration, and netflix/photon. Seem to be related to data flow or taint tracking analysis
![image](https://github.com/openrewrite/rewri…