3 ms·
The goal is the same but the approach is different. This is entirely compile time and it covers all executions of the program, whereas taint analysis done at ru
by mathetic 5y ago
The goal is the same but the approach is different. This is entirely compile time and it covers all executions of the program, whereas taint analysis done at runtime and consider only some executions.
Also taint analysis typically doesn't track implicit flows described in the post, but detects the explicit ones.
- a1369209993 5y ago> This is entirely compile time and it covers all executions of the program, whereas taint analysis done at runtime and consider only some executions. That is literally just the difference between static versus dynamic typing.