Add marks to exclude ranges from vulnerability reporting

[jandro996]

What Does This Do

• Add mark attribute to Range
• Provide a mark for each vulnerabilityType
• Provide a new method get all ranges that are not marked for a vulnerability type
• Overload taintString and taintObject methods with a mark parameter to allow tainting with marks
• Improve highestPriorityRange algorithm using marks

Motivation

Add an exclusion mark system to avoid reporting vulnerabilities if all its ranges are marked as excluded for that type of vulnerability.

Additional Notes

• Use an int bit field for flagging system to improve performance
• Remove previous Range constructor to maintain ranges inmutables
• highestPriorityRange algorithm can be more accurate but we decided to keep it simple for performance

[pr-commenter]

Benchmarks

Parameters

	Baseline	Candidate
commit	1.18.0-SNAPSHOT~48fe24d67b	1.18.0-SNAPSHOT~af984886ba
config	baseline	candidate

See matching parameters

	Baseline	Candidate
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 22 cases.

[smola]

It looks good. But I think we're missing skipping marked ranges from vulnerability reports. If there is one secure range and one non-secure, the secure one should be omitted. This might change in the future if/when we have a spec on how to send this additional info to the backend.

[jandro996]

It looks good. But I think we're missing skipping marked ranges from vulnerability reports. If there is one secure range and one non-secure, the secure one should be omitted. This might change in the future if/when we have a spec on how to send this additional info to the backend.

I'm working on it

[jandro996]

It looks good. But I think we're missing skipping marked ranges from vulnerability reports. If there is one secure range and one non-secure, the secure one should be omitted. This might change in the future if/when we have a spec on how to send this additional info to the backend.

Done!