[cfe-dev] Help with Taint analysis

章磊 ioripolo at gmail.com
Tue Jan 12 17:39:08 PST 2010


Maybe a new engine, instead of using the path sensitive one(GRExprEngine)?
Some work like phoenix have done using SSA & lattices?

2010/1/13 Juan Carlos Martinez Santos <juanc.martinez.santos at gmail.com>

> Hello clang,
>
> I am interested in doing taint analysis. My idea is get a complete list of
> all variables which are potentially influenced by outside input. Checking
> the mail list, I found that a way to do this is walking into GRExprEngine
> and his friends (SVals and MemRegion).
>
> However, I don't know how to start.
>
> Thanks in advance,
>
> --
> Juan Carlos
>
> _______________________________________________
> cfe-dev mailing list
> cfe-dev at cs.uiuc.edu
> http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20100113/c0ddba80/attachment.html>


More information about the cfe-dev mailing list