Skip to content

Fixing writing Taint flow information to file#247

Merged
tmbrbr merged 9 commits into
SAP:mainfrom
tmbrbr:spew-fix
Jan 23, 2025
Merged

Fixing writing Taint flow information to file#247
tmbrbr merged 9 commits into
SAP:mainfrom
tmbrbr:spew-fix

Conversation

@tmbrbr

@tmbrbr tmbrbr commented Jan 13, 2025

Copy link
Copy Markdown
Contributor

There were a few issues with writing tainting information to file, which are fixed with this PR.

Now the user has two options:

  1. Enable taint spewing via the JIT spewer. This option requires the usual ac_add_options --enable-jitspew compile flag plus the SPEW=TaintFlowSpewer,AtStartup environment variable at the start.
  2. Enable taint spewing via a new option: ac_add_options --enable-taintspew. This option will output a single file per taint flow determined by the TAINT_FILE environment variable (or taint_output) as the default.

In both cases, information from the __taintreport function such as URL and timestamp are now also included.

@tmbrbr

tmbrbr commented Jan 13, 2025

Copy link
Copy Markdown
Contributor Author

This should also address #246 once it is merged.

@tmbrbr

tmbrbr commented Jan 13, 2025

Copy link
Copy Markdown
Contributor Author

We need to first merge #248 for the playwright merge action to succeed again.

@tmbrbr tmbrbr requested a review from leeN January 13, 2025 13:08
Comment thread js/src/jsapi.cpp

@leeN leeN left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM based on our internal testing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants