soot.jimple.infoflow.taintWrappers

接口 IReversibleTaintWrapper

所有超级接口:

ITaintPropagationWrapper

所有已知实现类:

TaintWrapperList, TaintWrapperSet

public interface IReversibleTaintWrapper
extends ITaintPropagationWrapper

While a normal ITaintPropagationWrapper answers the question which taints are valid after a given statement has been called with a given incoming taint abstraction, a IReversibleTaintWrapper can also identify those taint that were possibly tainted before a given statement if the result of that statement is a given taint. Note that reversing a taint wrapper will very likely be less precise than computing it forward, because many methods combine taint from multiple sources. When reversing, we have to assume that all those previous taints are possible.

作者:

Steven Arzt

方法概要

限定符和类型	方法和说明
Set<Abstraction>	getInverseTaintsForMethod(soot.jimple.Stmt stmt, Abstraction d1, Abstraction taintedPath) Checks an invocation statement for black-box taint propagation.

从接口继承的方法 soot.jimple.infoflow.taintWrappers.ITaintPropagationWrapper

getAliasesForMethod, getTaintsForMethod, getWrapperHits, getWrapperMisses, initialize, isExclusive, supportsCallee, supportsCallee

方法详细资料

getInverseTaintsForMethod

Set<Abstraction> getInverseTaintsForMethod(soot.jimple.Stmt stmt,
                                           Abstraction d1,
                                           Abstraction taintedPath)

Checks an invocation statement for black-box taint propagation. This allows the wrapper to artificially propagate taints over method invocations without requiring the analysis to look inside the method. Note that this method is the inverse of getTaintsForMethod. It obtains the taints that could have been tainted before a certain statement was executed given a taint that was active after the call.

参数:

stmt - The invocation statement which to check for black-box taint propagation

d1 - The abstraction at the beginning of the method that calls the wrapped method

taintedPath - The tainted field or value to propagate. Note that this taint must be valid after the execution of the black-box method.

返回:

The list of possibly tainted values before the invocation statement referenced in Stmt has been executed