@@ -85,7 +85,7 @@ public class TaintTracking extends Analysis implements ISecAnalysisConnectorChec
STEntryelement=null;
StringBuildersBuilder=newStringBuilder("Taint tracking: The trustlevel becomes higher with this transition "+entry+". Before the input is used, it must be filtered. The following pass is used: "+entry);
StringBuildersBuilder=newStringBuilder("Taint tracking: The trustlevel becomes higher with the transition "+entry+". Before the input is used, it must be filtered. The following pass is used: '"+entry);
//Already used
iterator.next();
...
...
@@ -102,12 +102,12 @@ public class TaintTracking extends Analysis implements ISecAnalysisConnectorChec
}
if(elementinstanceofFilterEntry){
sBuilder.append(element.getName()+"*");
sBuilder.append(" "+element.getName()+"*");
}
}
sBuilder.append(" The filter is marked with a *. If the filter is missing, the input cannot be used.");
sBuilder.append("'. The filter is marked with a *. If the filter is missing, the input cannot be used.");
addReport("The trustlevel of the source and target component is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
addReport("The trustlevel of the source and target component of connector "+entry+" is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
addReport("The trustlevel of the target component is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
addReport("The trustlevel of the target component of connector "+entry+" is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
addReport("The trustlevel of the source component is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
addReport("The trustlevel of the source component of connector "+entry+" is lower than the trustlevel of the environment.",node.get_SourcePositionStart());
@@ -130,7 +130,7 @@ public class IdentityWithEncryption extends ComponentExistence implements ISecA
}
if(!pathfound){
addReport("There is an identity link between the component "+entry.getSource()+" and "+entry.getTarget()+", but an encrypted connection is missing.",node.get_SourcePositionStart());
addReport("There is an identity link between the components "+entry.getSource()+" and "+entry.getTarget()+", but an encrypted connection is missing.",node.get_SourcePositionStart());
addReport("A trustlevelrelation is defined between the components "+lowerTrustlevelComoponent.getName()+" and "+higherTrustlevelComoponent.getName()+". Therefore a trustlevel should be defined for both.",node.get_SourcePositionStart());
addReport("A trustlevelrelation is defined between the components "+lowerTrustlevelComoponent.getName()+" and "+higherTrustlevelComoponent.getName()+". Therefore a trustlevel should be defined for both.",node.get_SourcePositionStart());