clang 22.0.0git
Taint.h File Reference

Go to the source code of this file.

Namespaces

namespace  clang
 The JSON file list parser is used to communicate input to InstallAPI.
namespace  clang::ento
namespace  clang::ento::taint

Typedefs

using clang::ento::taint::TaintTagType = unsigned
 The type of taint, which helps to differentiate between different types of taint.

Functions

ProgramStateRef clang::ento::taint::addTaint (ProgramStateRef State, const Stmt *S, const LocationContext *LCtx, TaintTagType Kind=TaintTagGeneric)
 Create a new state in which the value of the statement is marked as tainted.
ProgramStateRef clang::ento::taint::addTaint (ProgramStateRef State, SVal V, TaintTagType Kind=TaintTagGeneric)
 Create a new state in which the value is marked as tainted.
ProgramStateRef clang::ento::taint::addTaint (ProgramStateRef State, SymbolRef Sym, TaintTagType Kind=TaintTagGeneric)
 Create a new state in which the symbol is marked as tainted.
ProgramStateRef clang::ento::taint::addTaint (ProgramStateRef State, const MemRegion *R, TaintTagType Kind=TaintTagGeneric)
 Create a new state in which the pointer represented by the region is marked as tainted.
ProgramStateRef clang::ento::taint::removeTaint (ProgramStateRef State, SVal V)
ProgramStateRef clang::ento::taint::removeTaint (ProgramStateRef State, const MemRegion *R)
ProgramStateRef clang::ento::taint::removeTaint (ProgramStateRef State, SymbolRef Sym)
ProgramStateRef clang::ento::taint::addPartialTaint (ProgramStateRef State, SymbolRef ParentSym, const SubRegion *SubRegion, TaintTagType Kind=TaintTagGeneric)
 Create a new state in a which a sub-region of a given symbol is tainted.
bool clang::ento::taint::isTainted (ProgramStateRef State, const Stmt *S, const LocationContext *LCtx, TaintTagType Kind=TaintTagGeneric)
 Check if the statement has a tainted value in the given state.
bool clang::ento::taint::isTainted (ProgramStateRef State, SVal V, TaintTagType Kind=TaintTagGeneric)
 Check if the value is tainted in the given state.
bool clang::ento::taint::isTainted (ProgramStateRef State, SymbolRef Sym, TaintTagType Kind=TaintTagGeneric)
 Check if the symbol is tainted in the given state.
bool clang::ento::taint::isTainted (ProgramStateRef State, const MemRegion *Reg, TaintTagType Kind=TaintTagGeneric)
 Check if the pointer represented by the region is tainted in the given state.
std::vector< SymbolRefclang::ento::taint::getTaintedSymbols (ProgramStateRef State, const Stmt *S, const LocationContext *LCtx, TaintTagType Kind=TaintTagGeneric)
 Returns the tainted Symbols for a given Statement and state.
std::vector< SymbolRefclang::ento::taint::getTaintedSymbols (ProgramStateRef State, SVal V, TaintTagType Kind=TaintTagGeneric)
 Returns the tainted Symbols for a given SVal and state.
std::vector< SymbolRefclang::ento::taint::getTaintedSymbols (ProgramStateRef State, SymbolRef Sym, TaintTagType Kind=TaintTagGeneric)
 Returns the tainted Symbols for a SymbolRef and state.
std::vector< SymbolRefclang::ento::taint::getTaintedSymbols (ProgramStateRef State, const MemRegion *Reg, TaintTagType Kind=TaintTagGeneric)
 Returns the tainted (index, super/sub region, symbolic region) symbols for a given memory region.
std::vector< SymbolRefclang::ento::taint::getTaintedSymbolsImpl (ProgramStateRef State, const Stmt *S, const LocationContext *LCtx, TaintTagType Kind, bool returnFirstOnly)
std::vector< SymbolRefclang::ento::taint::getTaintedSymbolsImpl (ProgramStateRef State, SVal V, TaintTagType Kind, bool returnFirstOnly)
std::vector< SymbolRefclang::ento::taint::getTaintedSymbolsImpl (ProgramStateRef State, SymbolRef Sym, TaintTagType Kind, bool returnFirstOnly)
std::vector< SymbolRefclang::ento::taint::getTaintedSymbolsImpl (ProgramStateRef State, const MemRegion *Reg, TaintTagType Kind, bool returnFirstOnly)
void clang::ento::taint::printTaint (ProgramStateRef State, raw_ostream &Out, const char *nl="\n", const char *sep="")
LLVM_DUMP_METHOD void clang::ento::taint::dumpTaint (ProgramStateRef State)

Variables

static constexpr TaintTagType clang::ento::taint::TaintTagGeneric = 0