Version 0.2.1

Description:

An improved analysis core using Boomerang 3.x which fixes a number of issues in the previous version.

Key-points:

• Migration of the analysis from Boomerang 2.x to 3.x version.
• Minor change in the API for the Source and Sink site location details.
• Some changes in the Sample application.

Known issues:

• Required propagators are false negatively reported.
• Out parameters to source methods; in the case of tainting a reference value, results into some internal errors.
• Usability issue, for the sub-typed interface calls, the type of parent interface should be specified in fully qualified names in the case of taint-flow specifications.

Version 0.1

Description:

First release of SecuCheck Taint-analysis core.

Key-points:

• Strongly typed API.
• Intermediate analysis result listener with cancellation capability.
• In-process and out-process analysis hosting.
• Based on Boomerang 2.x.

Known issues:

• False positives despite taint-flow breaking method's existence.
• False negatives in the case of sink containing a call to a type with no source available.