
<html>


<head>


<meta http-equiv="Content-Type" content="text/html; charset=utf-8">


</head>


<body text="#000000" bgcolor="#FFFFFF">


<div class="moz-cite-prefix">On 12/09/2019 06:02, Priyanka Panigrahi via llvm-dev wrote:<br>


</div>


<blockquote type="cite" cite="mid:CAAZZyVq48yyybceintbiovPWGLtzYLm7ty=ag-CG=0SJ66VXXA@mail.gmail.com">


<div dir="auto">


<p style="margin-bottom:16px;color:rgb(36,41,46);font-family:-apple-system,blinkmacsystemfont,"segoe


          ui",helvetica,arial,sans-serif,"apple color


          emoji","segoe ui emoji","segoe ui


          symbol";background-color:rgb(255,255,255);margin-top:0px!important">


Let in a program a variable 'x' is tainted. There is an assignment 'y=x' where y is untainted.<br>


How to check the taintflow in the output or data flow graph ?</p>


</div>


</blockquote>


<p>I'm not involved in it, but you might be interested in the DataFlowSanitizer, dfsan:


<a class="moz-txt-link-freetext" href="https://clang.llvm.org/docs/DataFlowSanitizer.html">


https://clang.llvm.org/docs/DataFlowSanitizer.html</a>, which sounds like it can do what you want.</p>


<p>I'd be interested to hear in other answers to this question, too.</p>


</body>


</html>