Description:
An improved analysis core using Boomerang 3.x which fixes a number of issues in the previous version.
Key-points:
- Migration of the analysis from Boomerang 2.x to 3.x version.
- Minor change in the API for the Source and Sink site location details.
- Some changes in the Sample application.
Known issues:
- Required propagators are false negatively reported.
- Out parameters to source methods; in the case of tainting a reference value, results into some internal errors.
- Usability issue, for the sub-typed interface calls, the type of parent interface should be specified in fully qualified names in the case of taint-flow specifications.