tainted flow analysis

[iohehe]

in the tainted point(or flow) analysis we may define these below:

• Source point: the source data input into the code, which can be potentially controlled by the users or the environment. those can be considered as a taint

• Sink: locations of those places where the consumed data must not be tainted.