Taint mechanism

47 views
Skip to first unread message

marie

unread,
Mar 27, 2012, 8:29:30 AM3/27/12
to BitBlaze User Discussion group
Hi,
I want to know if the taint mechanism depends only of the input data?
In the code below if x=3, only y will be tainted? or z too?

int main(int argc, char **argv)
{
int x;
int z;
int y;
scanf("%d", &x);
if (x != 5)
y=x;
else
z=x;

}
I would know if bitblaze take account of the dependencies of control
flow independently of the branche executed?
That's mean since x is tainted then y and z must be tainted?
Thank you

Alex Bazhanyuk

unread,
Apr 6, 2012, 1:15:30 AM4/6/12
to bitblaz...@googlegroups.com
Hi,

On Tue, Mar 27, 2012 at 3:29 PM, marie <marm...@gmail.com> wrote:
Hi,
I want to know if the taint mechanism depends only of the input data?

input_data will be tainted if you write in temu console:
taint_nic
taint_file
taint_sendkey
 
In the code below if x=3, only y will be tainted? or z too?

Only y.
 
 int main(int argc, char **argv)
 {
 int x;
 int z;
 int y;
 scanf("%d", &x);
 if (x != 5)
 y=x;
 else
 z=x;

 }
I would know if bitblaze take account of the dependencies of control
flow independently of the branche executed?

using taint propagation.
 
Reply all
Reply to author
Forward
0 new messages