CodeQL library for C#
Search

Module TaintTracking

Import path

import csharp

Predicates

localExprTaint

Holds if taint can flow from e1 to e2 in zero or more local (intra-procedural) steps.

localTaint

Holds if taint propagates from source to sink in zero or more local (intra-procedural) steps.

Classes

Configuration

A configuration of interprocedural taint tracking analysis. This defines sources, sinks, and any other configurable aspect of the analysis. Each use of the taint tracking library must define its own unique extension of this abstract class.

TaintedMember

A member (property or field) that is tainted if its containing object is tainted.

Aliases

localTaintStep

Holds if taint propagates from nodeFrom to nodeTo in exactly one local (intra-procedural) step.