trailofbits / polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
Apache License 2.0
532 stars 46 forks source link

Refactor TDAG-format, differentiate taint sources #6490

Open hbrodin opened 2 years ago

hbrodin commented 2 years ago

Decide on a more appropriate abstraction for taint sources. Currently it is file-focused, e.g. the file descriptor is stored along side. However, with the introduction of argv tainting this abstraction no longer holds. Also, additional taint sources are being planned for e.g. sockets.

This will require a refactor of the TDAG file (at least slightly). I believe we should plan for implementing the 'Section'-type previously discussed, and use a shared string table.

hbrodin commented 1 year ago

6500 implements the section handling.