https://github.com/jetbrains-research/cofra

A CFL-r-based static analyser
https://github.com/jetbrains-research/cofra

analysers cfl-r interprocedural resharper static-code-analysis taint-analysis

Last synced: about 2 months ago
JSON representation

A CFL-r-based static analyser

• Host: GitHub
• URL: https://github.com/jetbrains-research/cofra
• Owner: JetBrains-Research
• License: apache-2.0
• Created: 2019-02-17T12:36:58.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2019-11-13T16:40:20.000Z (about 5 years ago)
• Last Synced: 2023-10-20T20:44:27.861Z (about 1 year ago)
• Topics: analysers, cfl-r, interprocedural, resharper, static-code-analysis, taint-analysis
• Language: C#
• Size: 194 KB
• Stars: 6
• Watchers: 4
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

README

        
[![Build status](https://ci.appveyor.com/api/projects/status/4uuha50qe858lcd6/branch/master?svg=true)](https://ci.appveyor.com/project/ilya-nozhkin/cofra/branch/master)

[![Build Status](https://travis-ci.org/JetBrains-Research/CoFRA.svg?branch=master)](https://travis-ci.org/JetBrains-Research/CoFRA)

# Short description.

CoFRA project implements context-free language reachability approach to provide an extensible platform for performing interprocedural static analyses. The core of the project is a service which is responsible for accumulating information about the source code and running different analyses defined in terms of pushdown automata. It provides a socket-based interface for interaction with frontends which are responsible for extracting necessary information and notificating user about issues found by the analysers.

# The plugin

There is also one implementation of a frontend which is based on ReSharper SDK and thus can be installed into ReSharper, Rider and InspectCode. It also contains a bundled backend providing one analysis performing a kind of taint tracking. 

It tracks the data from specially marked fields called sources to methods called sinks checking whether they are passed through filters.

Examples of use can be found in the [tests folder](test/data/TaintAnalysis).

The plugin itself can be downloaded [here](https://ci.appveyor.com/project/ilya-nozhkin/cofra/build/artifacts)