Skip to content

feat(analyzer): Add third-party + stdlib taint passThrough propagators #154

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
misonijnik wants to merge 8 commits into
base: main
Choose a base branch
from
Open

feat(analyzer): Add third-party + stdlib taint passThrough propagators #154

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
0edf76c
feat(analyzer): Add third-party + stdlib taint passThrough propagators
misonijnik May 22, 2026
47442d0
refactor(analyzer): Complete passThrough builder chains and package c…
misonijnik May 24, 2026
d35886d
refactor(analyzer): Route wrapper/builder taint through typed virtual…
misonijnik May 25, 2026
39253c3
refactor(analyzer): Drop passThrough approximations duplicated elsewhere
misonijnik May 25, 2026
69443a7
refactor(analyzer): Fix RequestEntity static factories in v7, drop 5.…
misonijnik May 25, 2026
e2d0bb6
refactor(analyzer): Use builder-typed RequestEntity slot with re-key …
misonijnik May 25, 2026
ec3bdd8
refactor(analyzer): Type virtual-field slot owners precisely with re-…
misonijnik May 26, 2026
0b087fd
refactor(analyzer): Exact per-overload signatures and named vfields i…
misonijnik May 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/ant-1.10.14.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
passThrough:
- function: org.apache.tools.ant.types.FileSet#setDir
copy:
- from: arg(0)
to:
- this
- .org.apache.tools.ant.types.FileSet#path#java.lang.Object
- function: org.apache.tools.ant.types.FileSet#setFile
copy:
- from: arg(0)
to:
- this
- .org.apache.tools.ant.types.FileSet#path#java.lang.Object
17 changes: 17 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/commons-codec-1.16.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
passThrough:
- function: org.apache.commons.codec.binary.Base64#encodeBase64String
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64URLSafeString
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64URLSafe
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64Chunked
copy:
- from: arg(0)
to: result
17 changes: 17 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/commons-io-2.15.1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
passThrough:
- function: org.apache.commons.io.IOUtils#toString
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#toByteArray
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#toCharArray
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#readLines
copy:
- from: arg(0)
to: result
36 changes: 36 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/groovy-3.0.21.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
passThrough:
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.io.File) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.net.URL) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.lang.String, java.io.InputStream) *
copy:
- from: arg(1)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (org.codehaus.groovy.control.SourceUnit) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
43 changes: 43 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/httpcore5-5.2.4.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
passThrough:
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, java.nio.charset.Charset) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, java.nio.charset.Charset, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType, java.lang.String, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
22 changes: 22 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/jenkins-core-2.426.3.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
passThrough:
- function: hudson.FilePath#<init>
signature: (hudson.remoting.VirtualChannel, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .hudson.FilePath#path#java.lang.Object
- function: hudson.FilePath#<init>
signature: (java.io.File) *
copy:
- from: arg(0)
to:
- this
- .hudson.FilePath#path#java.lang.Object
- function: hudson.FilePath#<init>
signature: (hudson.FilePath, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .hudson.FilePath#path#java.lang.Object
21 changes: 21 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/mvel2-2.5.2.Final.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
passThrough:
- function: org.mvel2.MVEL#compileExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.MVEL#compileSetExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.MVEL#compileGetExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.jsr223.MvelScriptEngine#compile
copy:
- from: arg(0)
to: result
- function: org.mvel2.jsr223.MvelScriptEngine#compiledScript
copy:
- from: arg(0)
to: result
166 changes: 166 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/okhttp-4.12.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,166 @@
passThrough:
- function: okhttp3.Request$Builder#url
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#header
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#addHeader
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#headers
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#post
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#put
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#patch
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#delete
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#method
signature: (java.lang.String, okhttp3.RequestBody) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#get
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#head
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#removeHeader
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#cacheControl
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#tag
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#build
copy:
- from: this
to: result
- from:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
to:
- result
- .okhttp3.Request#url#java.lang.Object
13 changes: 13 additions & 0 deletions core/opentaint-config/java-config/config/java-config/jar-split/spring-jdbc-5.3.39.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
passThrough:
- function: org.springframework.jdbc.core.namedparam.NamedParameterUtils#parseSqlStatement
copy:
- from: arg(0)
to: result
- function: org.springframework.jdbc.core.namedparam.NamedParameterUtils#substituteNamedParameters
copy:
- from: arg(0)
to: result
- function: org.springframework.jdbc.core.namedparam.NamedParameterUtils#parseSqlStatementIntoString
copy:
- from: arg(0)
to: result
Loading
Loading