CodeQL library for C/C++
Search

Module TaintTrackingImpl

Provides an implementation of global (interprocedural) taint tracking. This file re-exports the local (intraprocedural) taint-tracking analysis from TaintTrackingParameter::Public and adds a global analysis, mainly exposed through the Configuration class. For some languages, this file exists in several identical copies, allowing queries to use multiple Configuration classes that depend on each other without introducing mutual recursion among those configurations.

Import path

import semmle.code.cpp.dataflow.internal.tainttracking1.TaintTrackingImpl

Imports

Public

Provides classes for performing local (intra-procedural) and global (inter-procedural) taint-tracking analyses.

Classes

Configuration

A configuration of interprocedural taint tracking analysis. This defines sources, sinks, and any other configurable aspect of the analysis. Each use of the taint tracking library must define its own unique extension of this abstract class.