Michele Alberti authored 3 years ago and David Bühler committed 3 years ago

[Eva] Rework assign support so that control and data dependency taint analysis are performed as not alternatives to each other.

Michele Alberti authored 4 years ago and David Bühler committed 3 years ago

[Eva] Revise assign so that if the left-value appears in statement annotation, then it will always be considered tainted.

Without this commit, an assignment 'x = 3' with annotation '//@ taint x;' would had not resulted in 'x' as tainted because '3' is a literal, hence not tainted.

Michele Alberti authored 4 years ago and David Bühler committed 3 years ago

[Eva] In assume, update state's control statement also when the current one is to be tainted and outside the scope of the former.

Instead, emits an error but continues the analysis with the probably unsound
specification generated by the kernel.
Also prints the callstack when -eva-print-callstacks is enabled.

As the Apron binding does not support recursion.