Skip to content

Commit

Permalink
Update java data flow docs: two misc improvements
Browse files Browse the repository at this point in the history
Copied from the C# equivalent.
  • Loading branch information
owen-mc committed Jan 16, 2025
1 parent 037ce3d commit 75424f3
Showing 1 changed file with 5 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -194,10 +194,10 @@ You use the global data flow library by implementing the signature ``DataFlow::C
These predicates are defined in the configuration:

- ``isSource``defines where data may flow from
- ``isSink``defines where data may flow to
- ``isBarrier``optional, restricts the data flow
- ``isAdditionalFlowStep``optional, adds additional flow steps
- ``isSource`` - defines where data may flow from.
- ``isSink`` - defines where data may flow to.
- ``isBarrier`` - optional, restricts the data flow.
- ``isAdditionalFlowStep`` - optional, adds additional flow steps.

The data flow analysis is performed using the predicate ``flow(DataFlow::Node source, DataFlow::Node sink)``:

Expand All @@ -210,7 +210,7 @@ The data flow analysis is performed using the predicate ``flow(DataFlow::Node so
Using global taint tracking
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Global taint tracking is to global data flow as local taint tracking is to local data flow. That is, global taint tracking extends global data flow with additional non-value-preserving steps. You use the global taint tracking library by applying the module ``TaintTracking::Global<ConfigSig>`` to your configuration instead of ``DataFlow::Global<ConfigSig>``:
Global taint tracking is to global data flow what local taint tracking is to local data flow. That is, global taint tracking extends global data flow with additional non-value-preserving steps. You use the global taint tracking library by applying the module ``TaintTracking::Global<ConfigSig>`` to your configuration instead of ``DataFlow::Global<ConfigSig>``:

.. code-block:: ql
Expand Down

0 comments on commit 75424f3

Please sign in to comment.