Taint tracking Graph chart ? #14747
-
For debugging reasons, what are the ways to visualize the taint tracking graph (edges/nodes)? maybe using a dot graph ? thx in advance |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
This isn't answering your question, but in case you aren't familiar with it I thought I should mention that the most common way of debugging taint tracking problems is to use partial flow. |
Beta Was this translation helpful? Give feedback.
-
The CodeQL CLI can output in dot file format. See the help in The caveat is that the query you are running needs to be When using the feature be careful that the graph you are creating is small since it's easy to generate something that is too large to visualize. Usually, we try to limit the scope to a single file or function. |
Beta Was this translation helpful? Give feedback.
The CodeQL CLI can output in dot file format. See the help in
codeql datbase analyze --help
. I think this is what you're asking for. When running the command, use the--format=dot
. The results can be viewed by any Graphviz viewer.The caveat is that the query you are running needs to be
@kind graph
and have a specific format. See #7437 for more info. This is an internal feature, so it's not well documented.When using the feature be careful that the graph you are creating is small since it's easy to generate something that is too large to visualize. Usually, we try to limit the scope to a single file or function.