trailofbits / polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
Apache License 2.0
517 stars 47 forks source link

Support for streaming inputs such as stdin and sockets as taint source #6511

Closed hbrodin closed 1 year ago

hbrodin commented 1 year ago

Upon connect/accept a taint source name will be derived from the involved parties. This implementation supports AF_INET sockets.

Enabled instrumentation of a couple of functions such as getchar and others. Tracks read offsets via per source index counters.

Refactor program_trace fixture to use smaller fixtures

Fixes #6501 Closes #6488