Skip to content

Comments

Fixing writing Taint flow information to file#247

Merged
tmbrbr merged 9 commits intoSAP:mainfrom
tmbrbr:spew-fix
Jan 23, 2025
Merged

Fixing writing Taint flow information to file#247
tmbrbr merged 9 commits intoSAP:mainfrom
tmbrbr:spew-fix

Conversation

@tmbrbr
Copy link
Contributor

@tmbrbr tmbrbr commented Jan 13, 2025

There were a few issues with writing tainting information to file, which are fixed with this PR.

Now the user has two options:

  1. Enable taint spewing via the JIT spewer. This option requires the usual ac_add_options --enable-jitspew compile flag plus the SPEW=TaintFlowSpewer,AtStartup environment variable at the start.
  2. Enable taint spewing via a new option: ac_add_options --enable-taintspew. This option will output a single file per taint flow determined by the TAINT_FILE environment variable (or taint_output) as the default.

In both cases, information from the __taintreport function such as URL and timestamp are now also included.

@tmbrbr
Copy link
Contributor Author

tmbrbr commented Jan 13, 2025

This should also address #246 once it is merged.

@tmbrbr
Copy link
Contributor Author

tmbrbr commented Jan 13, 2025

We need to first merge #248 for the playwright merge action to succeed again.

@tmbrbr tmbrbr requested a review from leeN January 13, 2025 13:08
Copy link
Collaborator

@leeN leeN left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM based on our internal testing.

@tmbrbr tmbrbr merged commit d51a31b into SAP:main Jan 23, 2025
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants