Sam Blackshear
319463b3bc
[quandary] propagating taint from unknown procedures and constructors
...
Summary:
Right now, taint gets lost if it flows into a constructor or procedure whose implementation is missing.
Since the core Java (e.g., String) and Android classes (e.g, Intent) are among these, this is bad.
We could handle this by writing a bunch of models instead, but that would be a lot of work (plus we may still miss cases).
Reviewed By: jvillard
Differential Revision: D4051591
fbshipit-source-id: 65851c8
8 years ago
Sam Blackshear
6aee686cb2
[quandary] passing actuals to the sink-determining code
...
Differential Revision: D4012216
fbshipit-source-id: 86e8aca
8 years ago
Sam Blackshear
1a958d1d8b
[quandary] simplifying Source module interface now that calls have single retval
...
Reviewed By: jberdine
Differential Revision: D3998163
fbshipit-source-id: 399db5a
8 years ago
Sam Blackshear
35bb540bf4
[quandary] adding TaintSpec module for clearer naming
...
Reviewed By: jberdine
Differential Revision: D3997622
fbshipit-source-id: 3f22c8e
8 years ago
Sam Blackshear
5e2e7b88aa
[quandary] allow trace-specific rules for handling unknown code
...
Reviewed By: jeremydubreil
Differential Revision: D3962285
fbshipit-source-id: b14f3d2
8 years ago
Josh Berdine
c094a38d56
[IR] Simplify to single return id, with type
...
Summary:
Change Sil.Call instruction to have only a single optional return
identifier, insted of a list. Essentially none of the code handled
multiple return identifiers. Also, add the type of the return
identitifier to Call instructions.
Reviewed By: sblackshear
Differential Revision: D3919358
fbshipit-source-id: d2d4f72
8 years ago
Sam Blackshear
3051d90307
[quandary] kill unused Source.to_return proc
...
Reviewed By: jvillard
Differential Revision: D3927750
fbshipit-source-id: a4047f4
8 years ago
Sam Blackshear
de146f4f2d
[quandary] switch to using base -> formal num map in extras
...
Reviewed By: dkgi
Differential Revision: D3883256
fbshipit-source-id: 857e1f9
8 years ago
Sam Blackshear
d6d7293633
[quandary] moving logging of errors into analysis
...
Reviewed By: jeremydubreil
Differential Revision: D3850807
fbshipit-source-id: d34f1ab
8 years ago
Sam Blackshear
31435fa936
[quandary] summaries for interprocedural analysis
...
Reviewed By: mbouaziz
Differential Revision: D3838659
fbshipit-source-id: 2382a81
8 years ago
Sam Blackshear
27cfb141da
richer sink specifications
...
Reviewed By: jeremydubreil
Differential Revision: D3831688
fbshipit-source-id: 199f1a5
8 years ago
Sam Blackshear
a31a735e35
separate pretty-printer for pp_kind
...
Reviewed By: jvillard
Differential Revision: D3762892
fbshipit-source-id: 49dcf48
8 years ago
Cristiano Calcagno
91d9cd83b5
Cleanup instruction names: use Load/Store instead of Letderef/Set.
...
Reviewed By: jberdine
Differential Revision: D3749108
fbshipit-source-id: c5aa438
9 years ago
Sam Blackshear
262a121cf6
handle casts
...
Reviewed By: jberdine
Differential Revision: D3742480
fbshipit-source-id: 97b6b44
9 years ago
Sam Blackshear
514107ec88
track sinks
...
Reviewed By: mbouaziz
Differential Revision: D3725051
fbshipit-source-id: 294203a
9 years ago
Sam Blackshear
f0028669ee
propagate tainted sources
...
Reviewed By: mbouaziz
Differential Revision: D3723878
fbshipit-source-id: 6774e0b
9 years ago
Sam Blackshear
3b12208e1b
intraprocedural taint analysis that records sources
...
Reviewed By: jvillard
Differential Revision: D3723819
fbshipit-source-id: 941e1fc
9 years ago