internal/

Package regexp contains functionality for unmarshalling regular expressions from a config.

Package dump contains functions for writing a function's SSA as SSA or DOT source to a file.

Package node contains utility functions for working with SSA nodes.

Package earpointer introduces a pointer analysis based on unifying equivalent abstract references (EAR), which implements Steensgaard's algorithm.

Package fieldpropagator implements identification of field propagators.

Package fieldtags defines an analyzer that identifies struct fields identified as sources via a field tag.

Package propagation implements the core taint propagation analysis that can be used to determine what ssa Nodes are tainted if a given Node is a source.

Package summary provides function summaries for a range of standard library functions that could be involved in a taint propagation.

Package sanitizer contains the logic responsible for determining whether sources are sanitized before they are being sent to sinks.

Package source can be used to identify SSA values that are Sources.

Package infer defines an analyzer that identifies Sources that either 1.

Package sourcetype handles identification of sources based on their type.

Package suppression defines an analyzer that identifies calls suppressed by a comment.

Package utils contains various utility functions.