New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[dataflow] missing taint path when two dataflow edges reaches one node #4470
Labels
bug
Something isn't working
Comments
It seems that the problem is caused by the
I read the code and found the path of the same source and sink, which takes the longest path if only one. Is it possible to provide a config option that provides the complete result to the user |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
In this example, there should be two taint paths to the
echo
call, whilejoern
outputs only one:To Reproduce
$_POST['xxx']
as source nodeecho
call as sink nodereachablebyFlows
Expected behavior
Two taint paths, from
$k
to$output
and$v
to$output
Desktop (please complete the following information):
The text was updated successfully, but these errors were encountered: