cstatic-analysislintsplint

Taint Analysis for C

I need to perform static taint analysis on my C program. I tried using Splint, no luck. Are there any other open source or freeware tools that are available to perform taint analysis?

If yes, can you please also mention about the way to use it or refer to any link. Appreciate your help. Thanks

Solution

  • Searching google I have found the following that support taint analysis for C programs:

    1. http://code.google.com/p/tanalysis/
    2. http://www.cs.umd.edu/~jfoster/cqual/ -- see their printf format string example