Provides classes for performing local (intra-procedural) and global (inter-procedural) taint-tracking analyses.
We define taint propagation informally to mean that a substantial part of
the information from the source is preserved at the sink. For example, taint
x + 100, but it does not propagate from
x > 100 since we consider a single bit of information to be too little.
Holds if the additional step from
Holds if taint can flow in one local step from
Holds if taint can flow from
Holds if taint may propagate from
Holds if taint propagates from