Enum TaintSource 

pub enum TaintSource {
    Unknown,
    Parameter(u16),
    Local(u16),
    Field(u32),
    StaticField(u32),
    ArrayElement,
    MethodReturn(u32),
    UserInput,
    ExternalData,
    Computation,
    Constant,
    Exception,
}

Source/origin of a symbolic value for taint tracking.

Taint sources identify where symbolic values originate, enabling data flow analysis and security auditing. Some sources are considered “tainted” (potentially malicious), while others are neutral.

Taint Propagation

When operations are performed on tainted values, the result is also tainted. The TaintSource::Computation variant is used for values derived from other values.

Variants

Unknown

Origin is unknown.

This is the default for values that cannot be tracked. Not considered tainted.

Parameter(u16)

Value comes from a method parameter.

Parameters are considered tainted because they come from outside the current method’s control.

Local(u16)

Value comes from a local variable that was initialized symbolically.

Locals are considered tainted if they were never assigned a concrete value.

Field(u32)

Value comes from a field load.

The u32 is the field’s metadata token.

StaticField(u32)

Value comes from a static field load.

Static fields are potentially tainted as they can be modified by other code.

ArrayElement

Value comes from an array element load.

MethodReturn(u32)

Value comes from a method return value.

The u32 is the called method’s metadata token.

UserInput

Value comes from external/user input (e.g., Console.ReadLine).

Always tainted - represents potentially malicious data.

ExternalData

Value comes from a file, network, or other external source.

Always tainted - represents potentially malicious data.

Computation

Value was computed from other values.

Taint status depends on the input values’ taint status. If any input is tainted, the computation result is tainted.

Constant

Value comes from a constant in the metadata.

Constants are not tainted as they are embedded in the assembly.

Exception

Value comes from exception handling (catch block).

Implementations

impl TaintSource

pub fn is_tainted(&self) -> bool

Returns true if this source is considered tainted.

Tainted sources include:

• User input
• External data
• Parameters (untrusted input)
• Fields (can be modified externally)
• Array elements (contents can change)
• Method returns (behavior unknown)

pub fn description(&self) -> &'static str

Returns a human-readable description of this source.

Trait Implementations

impl Clone for TaintSource

fn clone(&self) -> TaintSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TaintSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TaintSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for TaintSource

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TaintSource

fn eq(&self, other: &TaintSource) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for TaintSource

impl StructuralPartialEq for TaintSource