Vulnerabilities and scanning

Dataflow analysis

Dataflow analysis tracks how values move through a program. It is the foundation of taint tracking, constant propagation, and many compiler optimizations. In security, dataflow analysis answers the question: can an attacker-controlled value reach a sensitive operation, and if so, what transformations does it pass through.