Struct TaintTracker 

pub struct TaintTracker { /* private fields */ }

Tracks taint through a single execution session.

This is the main interface for cross-function taint tracking in the Rust core. It maintains the set of sources and sinks, and records confirmed taint flows.

Implementations

impl TaintTracker

pub fn new() -> Self

Create a new empty taint tracker.

pub fn register_source( &mut self, api: impl Into<String>, description: impl Into<String>, ) -> TaintLabel

Register a new taint source.

Returns the assigned taint label for this source. CRITICAL FIX: Uses saturating arithmetic to prevent overflow.

pub fn register_sink( &mut self, api: impl Into<String>, dangerous_args: Vec<usize>, severity: Severity, cwe: impl Into<String>, )

Register a new taint sink.

pub fn is_source(&self, api: &str) -> Option<&Source>

Check if an API is a registered source.

pub fn is_sink(&self, api: &str) -> Option<&Sink>

Check if an API is a registered sink.

pub fn apply_source_taint(&self, api: &str, value: Value) -> Value

Apply taint to a value returned from a source API.

If the API is a registered source, the value is marked with the corresponding taint label. Otherwise, the value is returned unchanged.

pub fn check_sink(&mut self, api: &str, args: &[Value]) -> Option<TaintFlow>

Check for taint flows at a sink API call.

If any of the dangerous arguments are tainted, records a taint flow and returns it. Returns None if no tainted data reached the sink.

pub fn flows(&self) -> &[TaintFlow]

Get all recorded taint flows.

pub fn take_flows(&mut self) -> Vec<TaintFlow>

Take all recorded taint flows (clears internal list).

pub fn has_flows(&self) -> bool

Returns true if any taint flows were recorded.

pub fn flow_count(&self) -> usize

Count of confirmed taint flows.

pub fn sources(&self) -> &HashMap<String, Source>

Get all registered sources.

pub fn sinks(&self) -> &HashMap<String, Sink>

Get all registered sinks.

Trait Implementations

impl Debug for TaintTracker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TaintTracker

fn default() -> TaintTracker

Returns the “default value” for a type.