Taint analysis in LLVM

Hello all,

Can anyone give me a proper documentation of taint analysis in llvm?

How to get the taint flow for a given source code in llvm ?

Any help would be appreciated.

Thank you.

Regards,
Priyanka

I used this for a similar reason but not sure if it addresses your needs.

Hopefully it’s a good start.

https://clang.llvm.org/docs/DataFlowSanitizer.html