[cfe-dev] Help with Taint analysis

[Zhongxing Xu]

Hi,

Check out the Checker interface. Maybe you can create a new Checker, track
all taint information in that Checker with a generic data mapping. Then
update the taint information via the Checker::EvalCallExpr() callback. Note
that GRExprEngine is path sensitive analysis. I don't know if that is what
you want.

2010/1/13 Juan Carlos Martinez Santos <juanc.martinez.santos at gmail.com>

> Hello clang,
>
> I am interested in doing taint analysis. My idea is get a complete list of
> all variables which are potentially influenced by outside input. Checking
> the mail list, I found that a way to do this is walking into GRExprEngine
> and his friends (SVals and MemRegion).
>
> However, I don't know how to start.
>
> Thanks in advance,
>
> --
> Juan Carlos
>
> _______________________________________________
> cfe-dev mailing list
> cfe-dev at cs.uiuc.edu
> http://lists.cs.uiuc.edu/mailman/listinfo/cfe-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20100113/d0221ac9/attachment.html>