-
Hello,Infer developers!
I am trying to use the quandary under infer for taint analysis. My test sample is as follows.
![image](https://user-images.githubusercontent.com/33443724/94222381-ca38a380-f…
-
Given a function that takes in an object and uses one of its attributes in a taint sink, is there any way to set it as a taint source assuming it contains parameters that are user-supplied?
-
Psalm does not detect Trust Boudary Violation (CWE-501) such as in this sample https://psalm.dev/r/5399ad3e59
I'll write a PR to fix this issue.
-
[`\Psalm\Internal\Codebase\TaintFlowGraph`](https://github.com/vimeo/psalm/blob/master/src/Psalm/Internal/Codebase/TaintFlowGraph.php) is somehow a mystery, however the central place for handling the …
-
https://psalm.dev/r/adf4fa4aea
```
-
Hello from @RustSec! :wave:
We have a long standing issue (https://github.com/rustsec/rustsec/issues/21) to use call graph analysis for false positive elimination.
Right now our advisories somet…
-
### Description
Hi,
When I was testing the taint analysis plugin, I found an issues in type cast. It seems that current pointer analysis engine could not resolve the assignment relation in type ca…
-
https://psalm.dev/r/97bae91b9c
```php
-
How do I verify which propagations are applied to a specific function, mariana-trench spends alot of time analysing functions like this
```
-09-26 13:10:52 WARNING Analyzing `Lcom/google/android/gms…
-
Dear developers,
I hope this message finds you well. Firstly, I would like to express my appreciation for your excellent work on the Soot-FlowDroid module. It has been instrumental in my recent ana…