[cfe-dev] Help with Taint analysis
xuzhongxing at gmail.com
Tue Jan 12 21:37:19 PST 2010
Check out the Checker interface. Maybe you can create a new Checker, track
all taint information in that Checker with a generic data mapping. Then
update the taint information via the Checker::EvalCallExpr() callback. Note
that GRExprEngine is path sensitive analysis. I don't know if that is what
2010/1/13 Juan Carlos Martinez Santos <juanc.martinez.santos at gmail.com>
> Hello clang,
> I am interested in doing taint analysis. My idea is get a complete list of
> all variables which are potentially influenced by outside input. Checking
> the mail list, I found that a way to do this is walking into GRExprEngine
> and his friends (SVals and MemRegion).
> However, I don't know how to start.
> Thanks in advance,
> Juan Carlos
> cfe-dev mailing list
> cfe-dev at cs.uiuc.edu
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the cfe-dev