A question about taint propagation rules in array

65 views
Skip to first unread message

bobo

unread,
Oct 25, 2012, 2:03:12 AM10/25/12
to taint...@googlegroups.com
Firstly, forgive my poor English please, I had do my best.

from "TaintDroid An Information-Flow Tracking System for Realtime PrivacyMonitoring on Smartphones" :
 For example, if untainted variable u is stored into array A at index 0 (A[0]) and tainted variable t is stored into A[1], then array A is tainted. Later, if variable v is assigned to A[0], v will be tainted, even though u was untainted.

so, if untainted variable q is assigned to A[1] instead of tainted variable t, the array still be tainted?
thanks for your kind reply.

Jaeyeon Jung

unread,
Oct 25, 2012, 5:47:58 PM10/25/12
to taint...@googlegroups.com
Sorry for the confusion. I think we fixed it in our journal submission. Basically, once a tainted variable is stored into array A, then the array A gets tainted so from that point any variable that is read from the array A will get tainted (a potential source of false positives). Also, if I remember correctly, once array A is tainted then it will stay tainted until the end of its lifetime.

-- 
Jaeyeon Jung (정재연)

bobo

unread,
Oct 26, 2012, 12:27:08 AM10/26/12
to taint...@googlegroups.com
Thank you very much.
Reply all
Reply to author
Forward
0 new messages