search

cisco-open / llvm-crash-analyzer

llvm crash analysis
Apache License 2.0
40 stars 17 forks source link

Taint crash-start Destination base register and upgrade TaintInfo debug print #8

Closed niktesic closed 2 years ago

niktesic commented 2 years ago

When performing startTaint for the crash-start instruction, besides memory location, represented by base register and offset, we should taint the Destination base register also.

Additionally, upgrade debug prints for Taint Info, which is seen when using -debug-only=taint-analysis argument. This is beneficial for tracking status and updates of Taint List.

Taint Info debug prints have the following format:

{reg:$rcx; off:4} (mem addr: 4) - memory location
{reg:$eax} - register location