search

secure-software-engineering / phasar

A LLVM-based static analysis framework.
Other
930 stars 140 forks source link

how can i get a taint path in ifds-taint/ide-xtaint analysis? #506

Closed JJ2nu closed 1 year ago

JJ2nu commented 2 years ago

i was trying to get a taint paths from phasar but im having hard time getting those results.

which options do i have to use to get those path information?

fabianbs96 commented 2 years ago

Hi @JJ2nu, there is currently no way of getting path information from PhASAR's analyses. However, we are working on a path sensitive analysis. We will eventually integrate it into open-source PhASAR. As of now, you still can retrieve tainted values for any instruction by invoking the resultsAt function on the respective IDESolver object. Does this answer your question?

JJ2nu commented 2 years ago

Then could you give me a detailed explanation of how to use resultsAt function?

MMory commented 1 year ago

The function returns the set of dataflow facts that hold at the statement that was asked for. In case of a taint analysis it returns all variables that are tainted at that statement.