Skip to content

Signature matching with argument identification in Call graph analysis #36

@OmkarPh

Description

@OmkarPh

Some signatures specifically need argument information in addition to called function name.
For example, in order to identify md5 hashing in java we need to identify - MessageDigest.getInstance("MD5") ie. not just funciton call, but also the argument

Precisely identifying arguments is tough especially when nested functions eg. somefunc(arg1, someFunc2(..)) are invoved. To begin with, we're focusing on identifying simple identifiers and assignments

For example,
We should be able to identify these cases -

MessageDigest.getInstance("MD5")
// or
hashAlgorithm = "MD5"
MessageDigest.getInstance(hashAlgorithm)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions