Validating intra-procedural taint analysis

xlab-uiuc / cflow

Flow-based configuration analysis

9 stars 3 forks source link

Validating intra-procedural taint analysis #9

Closed X-czh closed 3 years ago

X-czh commented 3 years ago

[x] Validate on the testing procedures under the ccc/Test folder
[x] Validate on 5 selected methods from Hadoop @zjzijielu

tianyin commented 3 years ago

@X-czh I don't have a chance to read the code.

but quick question -- why the codebase does not live in the acai project but in the ccc project?

X-czh commented 3 years ago

The main reason is that it's easier to restart from scratch here. acai has a lot of code related to FD.

X-czh commented 3 years ago

@zjzijielu The intra-procedural analysis is updated, can you make sure it passes all mini tests? Also, pick 5 Hadoop functions to test, record which functions you selected in this thread. It'll better if you can implement automated tests for them as well, so that we can make sure we don't break things when moving forward.

zjzijielu commented 3 years ago

Just added a few test cases for Hadoop, two of which cover testing tainted field. The other test case is just set up for testing return flow function in the future. So far, the taint analysis has passed all test cases.