Replies: 1 comment
-
The answer is to use the provenance feature of souffle: https://souffle-lang.github.io/provenance |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I'm attempting to write a simple dataflow analysis for a control flow graph (represented by a series of facts, similar to here. My first attempt is a simple script that detects use-after-free conditions. Here is what I have so far:
In this scenario,
b3
freesm1
, andb2
usesm1
. The UAF relation correctly detects that there is a use-after-free and returnsb3 b2
. However, I want to also output the path through the Edges the Souffle followed to arrive at that answer. How would I go about dumping the entire path?Beta Was this translation helpful? Give feedback.
All reactions