Documentation
¶
Overview ¶
Package dataflow implements source-to-sink data flow analysis on top of the existing CALLS graph. It heuristically tags function/method nodes as "sources" (data entry points: HTTP handlers, parsers, env-var accessors) or "sinks" (dangerous data exits: SQL exec, file writes, exec.Command), then creates DATA_FLOWS summary edges for each (source, sink) pair reachable within maxHops via CALLS edges.
This is call-path-based taint analysis — not variable-level taint propagation. It delivers 80% of the security review value without the edge explosion and token-budget problems that full inter-procedural taint analysis would cause.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AnnotateGraph ¶
AnnotateGraph walks all function/method nodes, marks sources and sinks via built-in heuristics supplemented by cfg patterns, then creates DATA_FLOWS summary edges for each (source, sink) pair reachable within maxHops CALLS hops. Returns the number of DATA_FLOWS edges created.
Types ¶
This section is empty.
Source Files