taint

type AnalysisReqs struct {
	// Tag is the tag to analyze, ignored if non-empty.
	Tag string
}

type AnalysisResult struct {
	// TaintFlows contains all the data flows from the sources to the sinks detected during the analysis
	TaintFlows *Flows

	// State is the state at the end of the analysis, if you need to chain another analysis
	State *dataflow.State

	// Graph is the cross function dataflow graph built by the dataflow analysis. It contains the linked summaries of
	// each function appearing in the program and analyzed.
	Graph dataflow.InterProceduralFlowGraph

	// Errors contains a list of errors produced by the analysis. Errors may have been added at different steps of the
	// analysis.
	Errors []error
}

type CondError struct {
	Cond       *ssa.If        // Cond is the conditional statement
	ParentName string         // ParentName is the name of the function in which the conditional statement occurs
	Trace      string         // Trace is a string representing the taint trace
	Pos        token.Position // Pos is the position
}

type EscapeInfo struct {
	InstructionLocality map[ssa.Instruction]*df.EscapeRationale
	CallSiteInfo        map[*ssa.Call]df.EscapeCallsiteInfo
}

type FlowNode struct {
	// Instr is the SSA instruction of the node.
	Instr ssa.Instruction
	// Trace is a string representation of the trace of the node.
	Trace string
}

type FlowReport struct {
	Tag    string
	Source dataflow.ReportNodeInfo
	Sink   dataflow.ReportNodeInfo
	Trace  []dataflow.ReportNodeInfo
}

type Flows struct {
	// Sinks maps the sink nodes to the source node from which the data flows
	// More precisely, Sinks[sink][source] <== data from source flows to sink
	Sinks map[FlowNode]map[FlowNode]bool

	// Escapes maps the instructions where data escapes, coming from the source instruction it maps to.
	// More precisely, Escapes[instr][source] <== data from source escapes the thread at instr
	Escapes map[ssa.Instruction]map[ssa.Instruction]bool
}

type Visitor struct {
	// contains filtered or unexported fields
}