Provides definitions for augmenting source/sink pairs with data-flow paths
between them. From a
@kind path-problem query, import this module in the
global scope, extend
TaintTrackingConfiguration, and use
in place of
Importing this module will also import the query predicates that contain the
(a,b) is an edge in the graph of data flow path explanations.
n is a node in the graph of data flow path explanations.
Holds if there is flow from
out across a call that can by summarized by the flow from
ret within it, in the graph of data flow path explanations.
tainted may contain taint from
sinkNode are the corresponding
PathNodes that can be used in a query to provide path explanations. Extend
TaintTrackingConfiguration to use this predicate.
tainted can be reached from a taint source without passing through a global variable.
An opaque type used for the nodes of a data-flow path.
A taint-tracking configuration that matches sources and sinks in the same way as the