search

secure-software-engineering / secucheck

Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to support multiple IDEs.
MIT License
16 stars 7 forks source link

The result of ForwardQuery. #8

Open dyd1024 opened 2 years ago

dyd1024 commented 2 years ago

Hello, I found that the seeds are of type ForwardQuery, and after solving it with Boomerang, the result seems to be all the edges reachable from the seed on the control flow graph, and then the result is filtered. My understanding of the query result of ForwardQuery seems to be wrong, can you help me, thanks a lot!

dyd1024 commented 2 years ago

I found the answer in your paper, thanks a lot!