CPP: Support taint flow from qualifiers.

This commit is contained in:
Geoffrey White
2020-01-22 15:48:51 +00:00
parent e6daf3b7ee
commit 704bfe7184
4 changed files with 9 additions and 3 deletions

View File

@@ -444,5 +444,5 @@ void test_qualifiers()
sink(d.getString());
d.setString(strings::source());
sink(d); // tainted
sink(d.getString()); // tainted [NOT DETECTED]
sink(d.getString()); // tainted
}

View File

@@ -43,3 +43,4 @@
| taint.cpp:430:9:430:14 | member | taint.cpp:428:13:428:18 | call to source |
| taint.cpp:438:7:438:7 | c | taint.cpp:437:15:437:20 | call to source |
| taint.cpp:446:7:446:7 | d | taint.cpp:445:14:445:28 | call to source |
| taint.cpp:447:9:447:17 | call to getString | taint.cpp:445:14:445:28 | call to source |

View File

@@ -31,3 +31,4 @@
| taint.cpp:430:9:430:14 | taint.cpp:428:13:428:18 | AST only |
| taint.cpp:438:7:438:7 | taint.cpp:437:15:437:20 | AST only |
| taint.cpp:446:7:446:7 | taint.cpp:445:14:445:28 | AST only |
| taint.cpp:447:9:447:17 | taint.cpp:445:14:445:28 | AST only |