trailofbits / polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
Apache License 2.0
516 stars 47 forks source link

UBet specific adaptations #6553

Closed hbrodin closed 1 year ago

hbrodin commented 1 year ago

UBet uses a tainted control flow log to get the data needed to detect variability bugs. This is the instrumentation changes that were done to support it.

To enable the Control Affecting Dataflow log, invoke the instrument-targets command using --cflog in addition to the --taint and/or --ftrace arguments.

There is still some overlap between the features but we can unify that over time. This PR should be non-intrusive in that it shouldn't impact any of the existing functionality.