You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Since we are adding a new sink, we need to add a tuple to the **sinkModel** extensible predicate.
@@ -79,7 +79,7 @@ The sixth value should be left empty and is out of scope for this documentation.
79
79
The remaining values are used to define the **access path**, the **kind**, and the **provenance** (origin) of the sink.
80
80
81
81
- The seventh value **Argument[0]** is the **access path** to the first argument passed to the method, which means that this is the location of the sink.
82
-
- The eighth value **sql** is the kind of the sink. The sink kind is used to define the queries where the sink is in scope. In this case - the SQL injection queries.
82
+
- The eighth value **sql-injection** is the kind of the sink. The sink kind is used to define the queries where the sink is in scope. In this case - the SQL injection queries.
83
83
- The ninth value **manual** is the provenance of the sink, which is used to identify the origin of the sink.
84
84
85
85
Example: Taint source from the **java.net** package
@@ -303,7 +303,6 @@ Taint source. Most taint tracking queries will use all sources added to this ext
303
303
304
304
- **output**: Access path to the source, where the possibly tainted data flows from.
305
305
- **kind**: Kind of the source.
306
-
- **provenance**: Provenance (origin) of the source definition.
307
306
308
307
As most sources are used by all taint tracking queries there are only a few different source kinds.
309
308
The following source kinds are supported:
@@ -359,7 +358,6 @@ Flow through (summary). This extensible predicate is used to model flow through
359
358
- **input**: Access path to the input of the element (where data will flow from to the output).
360
359
- **output**: Access path to the output of the element (where data will flow to from the input).
361
360
- **kind**: Kind of the flow through.
362
-
- **provenance**: Provenance (origin) of the flow through.
363
361
364
362
The following kinds are supported:
365
363
@@ -374,7 +372,6 @@ It only has minor impact on the data flow analysis.
374
372
Manual neutrals are considered high confidence dispatch call targets and can reduce the number of dispatch call targets during data flow analysis (a performance optimization).
375
373
376
374
- **kind**: Kind of the neutral. For neutrals the kind can be **summary**, **source**, or **sink** to indicate that the callable is neutral with respect to flow (no summary), source (is not a source) or sink (is not a sink).
377
-
- **provenance**: Provenance (origin) of the flow through.
0 commit comments