StaticcomposeComposes at least two taint analysis definitions into a single composite taint analysis. The component analyses are evaluated simultaneously during a single control-flow traversal and their taints are combined into a product of the lattice values per each CFG node (see TaintInterpreter).
The unique name of the resulting composite taint analysis
The component taint analysis definitions to compose (must have unique names)
Optionaloptions: ComposeOptions
Optional reductions (for a reduced product) and a report message
StaticcreateCreate a new taint analysis builder. run is unreachable on the result until at least one of add, addComposite, or addPredefined has been called on it.
Add propagator or sanitizer rules that determine the resulting taint of matching calls.
Shortcut when no transformers, sinks, and/or a report message should be defined
Add rules for function categories (i.e. sets of functions from BuiltInIndex fulfilling certain properties)
Optionalhandler: TaintConditionFunction<AnyAbstractDomain>Set the message reported when the analysis produces a finding.
The end state of this single analysis, holding its own taint lattice values rather than a product of them.
Add propagator or sanitizer rules that determine the resulting taint of matching calls.
Add sink rules signaling findings by yielding Bottom.
Fluent builder class for defining new taint analyses. Use TaintAnalysisDefinition.create to obtain an instance; The methods TaintAnalysis.from, TaintAnalysis.through, TaintAnalysis.to, and TaintAnalysis.report have to be called in order.