Fix local taint steps

Local taint should include local flow and simple summaries through library code
This commit is contained in:
Tony Torralba
2022-11-29 10:36:56 +01:00
parent e0c8a8ecff
commit 0e59257442
2 changed files with 1412 additions and 0 deletions

View File

@@ -74,7 +74,13 @@ private module Cached {
*/
cached
predicate localTaintStepCached(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
DataFlow::localFlowStep(nodeFrom, nodeTo)
or
defaultAdditionalTaintStep(nodeFrom, nodeTo)
or
// Simple flow through library code is included in the exposed local
// step relation, even though flow is technically inter-procedural
FlowSummaryImpl::Private::Steps::summaryThroughStepTaint(nodeFrom, nodeTo, _)
}
}

File diff suppressed because it is too large Load Diff