Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

infer quandary changed #980

Open
grip3 opened this issue Aug 7, 2018 · 0 comments
Open

infer quandary changed #980

grip3 opened this issue Aug 7, 2018 · 0 comments

Comments

@grip3
Copy link

grip3 commented Aug 7, 2018

Hello, I have been interested in Infer's taint defect analysis, but I found that since the 0.15 version, I have not analyzed the results of many test cases, of course, including infer's own, such as the one I mentioned before IOS defect analysis, and the annotation analysis, now only retains the annotation to the path reachable, and there is no analysis of single annotations and sink(such as @PrivacySourc to java.sql.Statement.execute), for example, infer tests-case taintExample.java @PrivacySource String mPrivacySource;

  @PrivacySource String sPrivacySource;

  Public void testPrivacySourceInstanceFieldAnnot_FN() {
    String source = mPrivacySource;
    InferTaint.inferSensitiveSinkUndefined(source); // should report
  }

  } There is no such analysis since 0.13 version.
This kind of analysis is very useful for analyzing taint annotations. Will Infer be improved afterwards to add these functions alive? I found some information by comparing the historical versions. I wanted to try to recover, but the flexibility of ocmal and its loose syntax are a huge challenge for me, so I would like to ask for help or advice, thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant