codyze icon indicating copy to clipboard operation
codyze copied to clipboard

Coko 'ArgumentOrigin' Evaluator

Open CodingDepot opened this issue 8 months ago • 1 comments

This PR adds an ArgumentOrigin evaluator to Coko that verifies the origin of an argument. It finds instances of the target Op and checks whether the argument at the specified position was produced by a call of the origin Op.

It also makes sure that the value of the argument was not changed between the origin call and the target call.

This evaluator is useful when you have a trusted method whose return value should be used as input to another method in all cases. (e.g. always use SecureRandom.getInstanceStrong() as RNG source)

CodingDepot avatar Jun 12 '24 08:06 CodingDepot