Lines Matching refs:taint
9 // This checker defines the attack surface for generic taint propagation.
11 // The taint information produced by it might be useful to other checkers. For
38 using namespace taint;
138 /// Catch taint related bugs. Check if tainted data is passed to a
143 /// Add taint sources on a pre-visit. Returns true on matching.
152 /// Propagate taint generated at pre-visit. Returns true on matching.
209 /// A struct used to specify taint propagation rules for a function.
211 /// If any of the possible taint source arguments is tainted, all of the
213 /// src list to specify that all of the arguments can introduce taint. Use
222 /// List of arguments which can be taint sources and should be checked.
276 /// Pre-process a function which propagates taint according to the
277 /// taint rule.
626 // Clear up the taint info from the state.
681 // Check for taint in arguments.
692 // Check for taint in variadic arguments.
744 // If argument 0(protocol domain) is network, the return value should get taint.
819 // Check for taint.
881 // If yes, should taint be a global setting?