Tool Talk: WALA
summary
WALA is a cross-language analysis pipeline that converts per-language ASTs into a common CAST -> IR -> SDG and builds call graphs so a single graph engine can do taint checks across Python, JavaScript, Java and HTML. It finds concrete paths using graph reachability BFS, reporting per-path annotations like tainted source, tainted sink and tainted-flow step. Examples shown: Flask request.suggestion flowing to subprocess.call, document.url to document.write, and Android getDeviceId to sendTextMessage. Integration with Magpie Bridge supplies project scope and IDE hooks.
AI-written summary · about
chapters (5)
related talks
40mWhamm! A WebAssembly Bytecode Instrumentation DSL
29mMy Little Parser: Tooling is Magic
24mMeta-tracing Interpreters in WebAssembly
17mLet It Flow: A Formally Verified Compilation Framework for Asynchronous Dataflow
44mLet's talk about transpilers
36mBAML - A new programming language for building Agents
44mJava Code Analysis with Database and Domain Specific Language
52mA bird's eye view of a compiler