Debug

Author: mamaria-k

configs/annotations.json

@@ -2332,8 +2332,7 @@
     "annotation": [
       [],
       [
-        "TaintSink::FormatString",
-        "TaintSink::SensitiveDataLeak"
+        "TaintSink::FormatString"
       ]
     ],
     "properties": []

lib/Core/Executor.cpp

@@ -5574,6 +5574,8 @@ void Executor::executeChangeTaintSource(ExecutionState &state,
                                      StateTerminationType::ReadOnly);
       } else {
         wos->updateTaint(Expr::createTaintBySource(source), isAdd);
+        errs() << "source was: " << source << " ";
+        wos->readTaint()->dump();
       }
     }
   }
@@ -5622,6 +5624,8 @@ void Executor::executeGetTaintRule(ExecutionState &state,
     hitsBySinkTaint =
         OrExpr::create(hitsBySinkTaint, Expr::createTaintBySource(source));
   }
+  errs() << "sink: " << sink << " sources: ";
+  hitsBySinkTaint->dump();
 
   address = optimizer.optimizeExpr(address, true);
   ref<Expr> isNullPointer = Expr::createIsZero(address->getValue());
@@ -5646,7 +5650,10 @@ void Executor::executeGetTaintRule(ExecutionState &state,
           it->second->addressSpace.findOrLazyInitializeObject(mo);
       ref<const ObjectState> os = op.second;
 
-      ref<Expr> hits = AndExpr::create(os->readTaint(), hitsBySinkTaint);
+      ref<Expr> taint = os->readTaint();
+      ref<Expr> hits = AndExpr::create(taint, hitsBySinkTaint);
+      errs() << "taint: ";
+      taint->dump();
 
       auto curState = it->second;
       for (size_t source = 0;