You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Sam Blackshear 0b9727214d [quandary] support `StringBuilder`'s and other methods for propagating `String` taint ... Summary: Our default strategy for handling unknown code is to propagate taint from the actuals to the return value. But for commonly-used methods like `StringBuilder.append` (used every time you do `+` with a string in Java), this doesn't work. The taint should be propagated to both the receiver and the return value in these cases. I'm considering a solution where we always propagate taint to the receiver of unknown functions in the future, but I am concerned about the performance. So let's stick with a few special string cases for now. Reviewed By: cristianoc Differential Revision: D4124355 fbshipit-source-id: 5b2a232		8 years ago
..
checkers	fix tests	8 years ago
crashcontext	[tests] Convert java tests to avoid phony targets	8 years ago
eradicate	[tests] Convert java tests to avoid phony targets	8 years ago
errors	Fix indentation of multiline copyright comment	9 years ago
harness	[tests] Convert java tests to avoid phony targets	8 years ago
infer	skipping ReadWrite Locks	8 years ago
quandary	[quandary] support `StringBuilder`'s and other methods for propagating `String` taint	8 years ago
tracing	[tests] Convert java tests to avoid phony targets	8 years ago
.inferconfig	One step closer to shipping initial GUARDEDBY	9 years ago
config.make	[tests] Convert java tests to avoid phony targets	8 years ago
java.make	[tests] Convert java tests to avoid phony targets	8 years ago