codyze
codyze copied to clipboard
Coko 'ArgumentOrigin' Evaluator
This PR adds an ArgumentOrigin
evaluator to Coko that verifies the origin of an argument.
It finds instances of the target Op
and checks whether the argument at the specified position was produced by a call of the origin Op
.
It also makes sure that the value of the argument was not changed between the origin call and the target call.
This evaluator is useful when you have a trusted method whose return value should be used as input to another method in all cases. (e.g. always use SecureRandom.getInstanceStrong() as RNG source)