Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Single Source File Assignment Graph and Call Target Resolution #251

Open
abhisek opened this issue Oct 15, 2024 · 0 comments
Open

Single Source File Assignment Graph and Call Target Resolution #251

abhisek opened this issue Oct 15, 2024 · 0 comments
Assignees

Comments

@abhisek
Copy link
Member

abhisek commented Oct 15, 2024

To be able to support #94 we first need to achieve:

  1. Call Graph building across source files
  2. Call Graph path query
  3. Vulnerable function symbols in vulnerability database

This paves the path for [1]. We need to extend vet's code analysis framework to support call target resolution within a single source file. For example:

import x from y

v1 = v()
v2 = v1
v2()

Our analysis engine should be able to resolve v2 as x. Actual approach can be through assignment graph, PDG or other methodology.

@abhisek abhisek self-assigned this Oct 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant