trailofbits / polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Refactor TDAG-format, differentiate taint sources

hbrodin opened this issue · comments

Decide on a more appropriate abstraction for taint sources. Currently it is file-focused, e.g. the file descriptor is stored along side. However, with the introduction of argv tainting this abstraction no longer holds. Also, additional taint sources are being planned for e.g. sockets.

This will require a refactor of the TDAG file (at least slightly).
I believe we should plan for implementing the 'Section'-type previously discussed, and use a shared string table.

#6500 implements the section handling.