Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
78 commits
Select commit Hold shift + click to select a range
09c99be
Format parsing of command line args
KevinHock Apr 21, 2018
aae9625
Fix https://stackoverflow.com/questions/43393764/python-3-6-project-s…
KevinHock Apr 21, 2018
ed59b6d
[tests] Make test_no_args pass after re-formatting the arg parsing
KevinHock Apr 21, 2018
72285cd
Re-organize a lot of stuff
KevinHock Apr 21, 2018
bbb6c2e
made github_search the only thing that imports repo_runner
KevinHock Apr 21, 2018
cc3e10e
Trim reaching definitions, and definition chains
KevinHock Apr 21, 2018
eebff47
Made fixed point only accept reaching_definitions_taint_test
KevinHock Apr 21, 2018
54d53c5
Updated more analyse call-sites
KevinHock Apr 21, 2018
53e8ae0
Move analysis modules and tests into their own folders
KevinHock Apr 21, 2018
078d171
Moved cfg modules into their own submodule
KevinHock Apr 21, 2018
6bd97ba
Move vulnerability files into their own submodule
KevinHock Apr 21, 2018
1316bc0
Move argparse code into usage.py, delete python 2 option, still need …
KevinHock Apr 23, 2018
079a235
A great minimalist usage.py
KevinHock Apr 24, 2018
867f344
Take code out of __init__ files, __all__ the things, delete more stuff
KevinHock Apr 24, 2018
d1471af
Delete baseline.py, move to vulnerability_helper
KevinHock Apr 24, 2018
7ce2d58
Make core, web_frameworks and helper_visitors directories
KevinHock Apr 24, 2018
9a4555e
Make tests pass with the 'Make core, web_frameworks and helper_visito…
KevinHock Apr 24, 2018
151e59f
Organize tests into different folders
KevinHock Apr 24, 2018
f238575
[wip] trying to make deadcode in reaching_definitions_taint_test work
KevinHock Apr 24, 2018
448e987
Fixed deadcode in reaching_definitions_taint_test
KevinHock Apr 26, 2018
de48495
[coveragerc] Add show_missing = True
KevinHock Apr 26, 2018
0f5fb43
fix silly usage and main -r things
KevinHock Apr 26, 2018
882b519
Refactored out string_compare_alpha and string_compare_alnum out of b…
KevinHock Apr 27, 2018
7c81a16
Refactored out assertInCfg, assertLineNumber and cfg_list_to_dict out…
KevinHock Apr 27, 2018
3c3f6f5
Added a test for usage.py
KevinHock Apr 27, 2018
609acd6
Added a test for __main__ and the outfile option
KevinHock Apr 27, 2018
1860966
Per-directory READMEs, coming soon
KevinHock Apr 27, 2018
0f01404
[many readme] start to write a bit
KevinHock Apr 28, 2018
febb605
Better links/Grammar
KevinHock Apr 28, 2018
780b48d
Update README.rst
KevinHock Apr 28, 2018
ddbb7eb
Merge https://github.com/python-security/pyt into re_organize_code
KevinHock Apr 28, 2018
e02aa41
Added more to pyt/README.rst
KevinHock Apr 28, 2018
49915aa
Replace trigger word with source and sink
KevinHock Apr 28, 2018
0a14c23
Merge branch 're_organize_code' of https://github.com/python-security…
KevinHock Apr 28, 2018
f875398
Update README.rst
KevinHock Apr 28, 2018
df2402c
Add usage to root README.rst
KevinHock Apr 28, 2018
bfb549e
Merge branch 're_organize_code' of https://github.com/python-security…
KevinHock Apr 28, 2018
9e44237
Update README.rst
KevinHock Apr 28, 2018
387e60e
Update README.rst
KevinHock Apr 28, 2018
03e2622
Update README.rst
KevinHock Apr 28, 2018
8f68b3e
Update README.rst
KevinHock Apr 28, 2018
c8a0f32
Update README.rst
KevinHock Apr 28, 2018
28004b1
Update README.rst
KevinHock Apr 28, 2018
1a7be14
Update README.rst
KevinHock Apr 28, 2018
11ce535
Update README.rst
KevinHock Apr 28, 2018
cd011d7
Update README.rst
KevinHock Apr 28, 2018
fd3d74a
Update README.rst
KevinHock Apr 28, 2018
272b76e
First attempt at analysis/README.rst
KevinHock Apr 28, 2018
ddb239f
Update pyt/analysis/README.rst
KevinHock Apr 28, 2018
e84d99e
Update README.rst
KevinHock May 1, 2018
554d08f
Update README.rst
KevinHock May 1, 2018
9d84599
Update README.rst
KevinHock May 1, 2018
ad0767c
Update README.rst
KevinHock May 1, 2018
d360c7e
Merge https://github.com/python-security/pyt into re_organize_code
KevinHock May 2, 2018
1a649bb
Merge branch 're_organize_code' of https://github.com/python-security…
KevinHock May 2, 2018
890f6bf
Added some stmt_star_handler stuff
KevinHock May 2, 2018
b9a1bae
Trim stmt_star_handler code
KevinHock May 2, 2018
13c66ba
Update README.rst
KevinHock May 2, 2018
5f33fcb
[reorg] make tests pass
KevinHock May 2, 2018
9f9f3eb
Merge branch 're_organize_code' of https://github.com/python-security…
KevinHock May 2, 2018
f7d9ff3
add ignore-nosec to readme
KevinHock May 2, 2018
9b8e3d7
Add image to pyt/ readme, add link to pyt/ readme from root readme, f…
KevinHock May 5, 2018
5781228
update readme's
KevinHock May 5, 2018
c7199ab
type
KevinHock May 5, 2018
935a04d
change page of thesis in link
KevinHock May 5, 2018
1cb0688
update readme's, more links mostly
KevinHock May 5, 2018
9644060
update broken link due to rst links being hard
KevinHock May 5, 2018
b2ebd64
update broken link due to rst links being hard
KevinHock May 5, 2018
364a276
Glitch Boy (Dyto Remix) https://soundcloud.com/qmando/likes
KevinHock May 5, 2018
fbd151c
More links, b/c backticks in markdown are better than rst
KevinHock May 5, 2018
56b9c88
More links, b/c backticks in markdown are better than rst
KevinHock May 5, 2018
95ecff4
semicolon instead of parenthesis
KevinHock May 5, 2018
8e197ad
del closing parenthesis
KevinHock May 5, 2018
1d0f444
del closing parenthesis
KevinHock May 5, 2018
af3de1f
Add ast link to pyt/ readme
KevinHock May 5, 2018
b5f7e50
Edit vulns/README.rst
KevinHock Jun 5, 2018
1e6597a
Merge https://github.com/python-security/pyt into re_organize_code
KevinHock Jun 6, 2018
1d62f26
Merge branch 're_organize_code' of https://github.com/python-security…
KevinHock Jun 6, 2018
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update pyt/analysis/README.rst
  • Loading branch information
KevinHock committed Apr 28, 2018
commit ddb239f98f526f635bd4b12509fde4ed995cb1c0
11 changes: 6 additions & 5 deletions pyt/analysis/README.rst
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@ Where do definitions reach?
Traditionally `reaching definitions`_, a classic dataflow-analysis,
has been used to answer this question. To understand reaching definitions,
watch this `wonderful YouTube video`_ and come back here.
We use `reaching definitions`_,
with one small modification, a `reassignment check`_.
We use reaching definitions, with one small modification,
a `reassignment check`_.


.. code-block:: python
Expand Down Expand Up @@ -37,8 +37,8 @@ we still want to know that something from a request reached `send_file`.
How does a definition reach?
============================

After we know that a definition reaches a use that we are interested in
We make what are called `definition-use chains`_ figure out how that definition
After we know that a definition reaches a use that we are interested in,
we make what are called `definition-use chains`_ figure out how the definition
reaches the use. This is necessary because there may be more than one path from
the definition to the use.

Expand All @@ -53,7 +53,7 @@ This folder probably will not change at all for the lifetime of the project,
unless we were to implement more advanced analyses like `solving string
constraints`_ or doing `alias analysis`_. Right now and in the foreseeable
future there are more pressing concerns, like handling web frameworks
and handling all ast node types in the CFG construction.
and handling all AST node types in the `CFG construction`_.

Stefan and Bruno like the `Schwartzbach notes`_, as you will see in some comments.
But looking these two algorithms up will yield countless results, my favorite is
Expand All @@ -62,5 +62,6 @@ this `amazing guy from YouTube`_.

.. _solving string constraints: https://zyh1121.github.io/z3str3Docs/inputLanguage.html
.. _alias analysis: https://www3.cs.stonybrook.edu/~liu/papers/Alias-DLS10.pdf
.. _CFG construction: https://github.com/python-security/pyt/tree/re_organize_code/pyt/cfg
.. _Schwartzbach notes: http://lara.epfl.ch/w/_media/sav08:schwartzbach.pdf
.. _amazing guy from YouTube: https://www.youtube.com/watch?v=NVBQSR_HdL0