[cfe-dev] Help with Taint analysis

Zhongxing Xu xuzhongxing at gmail.com
Tue Jan 12 21:37:19 PST 2010


Check out the Checker interface. Maybe you can create a new Checker, track
all taint information in that Checker with a generic data mapping. Then
update the taint information via the Checker::EvalCallExpr() callback. Note
that GRExprEngine is path sensitive analysis. I don't know if that is what
you want.

2010/1/13 Juan Carlos Martinez Santos <juanc.martinez.santos at gmail.com>

> Hello clang,
> I am interested in doing taint analysis. My idea is get a complete list of
> all variables which are potentially influenced by outside input. Checking
> the mail list, I found that a way to do this is walking into GRExprEngine
> and his friends (SVals and MemRegion).
> However, I don't know how to start.
> Thanks in advance,
> --
> Juan Carlos
> _______________________________________________
> cfe-dev mailing list
> cfe-dev at cs.uiuc.edu
> http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20100113/d0221ac9/attachment.html>

More information about the cfe-dev mailing list