-
Hi,
(1) Some types of instruction, for example movdqu, which would influence the taint analysis result , are ignored by libdft, so how can you get the right taint result?
(2) XADD instructio…
-
Hello, can I get a big control flow diagram with JuCify? I used taint analysis but didn't know we got a control flow diagram.
-
Hi, sorry for bothering. I met with a problem that while I was trying to use taint analysis with my own source-sink yaml file, the following command line does not work:
```
CodeChecker analyze --ana…
-
# Summary
A user reported seeing:
> node(s) had taints that the pod didn't tolerate
There's apparently enough information available in the system to help users:
https://stackoverflow.com/quest…
-
### Description
Hi,
When I was testing the taint analysis plugin, I found an issues in type cast. It seems that current pointer analysis engine could not resolve the assignment relation in type ca…
-
when we're fuzzing based on taint analysis
we don't need to rerun instructions that weren't affected by modified input
-
Psalm does not detect Trust Boudary Violation (CWE-501) such as in this sample https://psalm.dev/r/5399ad3e59
I'll write a PR to fix this issue.
-
Hi Infer devs!
I tried to use Infer for implementation custom taint analysis and faced with some issues of virtual call handling. Could you clarify the current status of the taint tracking features…
yuske updated
3 years ago
-
https://psalm.dev/r/e3d3058ede
Why doesn't this work? Is there a workaround?
-
Angora uses LLVM DFSan for taint analysis. Even it is the best taint tracking tool I can found, it is not friendly if your tested program has external libraries. Also, it needs source code to compile…