A prototype of taint-style vulnerablity discovery method in embedded firmware (SinkTaint), a precise a novel taint-style vulnerability discovery method by employsing backtracking and constraint analysis to achieve high precision.
We present our approach and findings of this work in the following research paper:
Precise Discovery of More Taint-Style Vulnerabilities in Embedded Firmware (Under review)