3 ms·
> Security Analyzer ... walks the AST and performs the taint propagation and analysis on the AST. This way it is able to detect potential vulnerable blocks that
by mpeterv 9y ago
> Security Analyzer ... walks the AST and performs the taint
propagation and analysis on the AST. This way it is able to
detect potential vulnerable blocks that allow dangerous tainted inputs from the user into the sensitive sinks.
This is basically the only thing about their detection method, which is pretty disappointing, even more so comparing to exciting things like 'inter- and intra-procedural data flow analysis' in related work section.
> Alternatively, one could use
the parsers from the existing tools, such as LuaCheck [17] or lua-checker [19]. Unfortunately the parsers in those tools are tailored to particular versions of Lua specifications and adapting them to all or latest Lua specifications may be untrivial or may introduce bugs and unnecessary complexity.
Wrong, at least for Luacheck parser: it supports all Lua syntax starting from 5.1.