############################################### Profiling 2016-08-10 13:53:08.742765 ###############################################

##### Profiling test_projects/flaskbb_lite_1/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.100027 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 34596 19687 0.6 19.7 JOIN = set()

14 64654 36026 0.6 36.0 for ingoing in cfg_node.ingoing:

15 30058 30505 1.0 30.5 JOIN |= ingoing.old_constraint

16 34596 13809 0.4 13.8 return JOIN

Total time: 1.30757 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 30657 17686 0.6 1.4 result = set()

21 899053 393007 0.4 30.1 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 868396 424534 0.5 32.5 if _id is not cfg_node.left_hand_side:

24 863528 459466 0.5 35.1 result.add(cfg_node)

25 30657 12879 0.4 1.0 return result

Total time: 2.6588 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 34596 26784 0.8 1.0 if isinstance(cfg_node, AssignmentNode):

31 30657 230261 7.5 8.7 JOIN = self.join(cfg_node)

32 30657 14232 0.5 0.5 arrow_result = JOIN

33 30657 20338 0.7 0.8 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 30657 2303651 75.1 86.6 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 30657 20023 0.7 0.8 arrow_result.add(cfg_node)

36 30657 18586 0.6 0.7 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 3939 24928 6.3 0.9 cfg_node.new_constraint = self.join(cfg_node)

Wed Aug 10 13:53:09 2016 stats.prof

1115433 function calls (1109189 primitive calls) in 0.435 seconds

Ordered by: cumulative time

List reduced from 751 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.435 0.435 {built-in method builtins.exec}

1 0.000 0.000 0.435 0.435 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 0.357 0.357 ../pyt/fixed_point.py:41(analyse)

7 0.000 0.000 0.356 0.051 ../pyt/fixed_point.py:28(fixpoint_runner)

194 0.018 0.000 0.330 0.002 ../pyt/fixed_point.py:35(fixpoint_iteration)

34596 0.041 0.000 0.312 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

30657 0.177 0.000 0.239 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

894220 0.064 0.000 0.064 0.000 {method 'add' of 'set' objects}

44/9 0.000 0.000 0.041 0.005 <frozen importlib._bootstrap>:966(_find_and_load)

44/9 0.000 0.000 0.041 0.005 <frozen importlib._bootstrap>:939(_find_and_load_unlocked)

##### Profiling test_projects/flaskbb_lite_2/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 7.80966 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 1548602 1023302 0.7 13.1 JOIN = set()

14 2994137 1996115 0.7 25.6 for ingoing in cfg_node.ingoing:

15 1445535 4154997 2.9 53.2 JOIN |= ingoing.old_constraint

16 1548602 635246 0.4 8.1 return JOIN

Total time: 374.495 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 1467058 974029 0.7 0.3 result = set()

21 254661642 109700721 0.4 29.3 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 253194584 129272131 0.5 34.5 if _id is not cfg_node.left_hand_side:

24 252813382 133927025 0.5 35.8 result.add(cfg_node)

25 1467058 621407 0.4 0.2 return result

Total time: 648.407 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 1548602 1461537 0.9 0.2 if isinstance(cfg_node, AssignmentNode):

31 1467058 14371167 9.8 2.2 JOIN = self.join(cfg_node)

32 1467058 686717 0.5 0.1 arrow_result = JOIN

33 1467058 1226815 0.8 0.2 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 1467058 628106513 428.1 96.9 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 1467058 986740 0.7 0.2 arrow_result.add(cfg_node)

36 1467058 1027157 0.7 0.2 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 81544 540392 6.6 0.1 cfg_node.new_constraint = self.join(cfg_node)

Wed Aug 10 13:54:42 2016 stats.prof

261667345 function calls (261646062 primitive calls) in 90.121 seconds

Ordered by: cumulative time

List reduced from 754 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 90.121 90.121 {built-in method builtins.exec}

1 0.000 0.000 90.121 90.121 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 89.886 89.886 ../pyt/fixed_point.py:41(analyse)

14 0.007 0.000 89.886 6.420 ../pyt/fixed_point.py:28(fixpoint_runner)

1102 1.791 0.002 84.617 0.077 ../pyt/fixed_point.py:35(fixpoint_iteration)

1548602 2.404 0.000 82.826 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

1467058 56.285 0.000 75.867 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

254280475 19.708 0.000 19.708 0.000 {method 'add' of 'set' objects}

1548602 4.236 0.000 4.236 0.000 ../pyt/reaching_definitions_taint.py:11(join)

1102 0.007 0.000 2.950 0.003 ../pyt/fixed_point.py:18(constraints_changed)

##### Profiling test_projects/flaskbb_lite_3/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 1.36268 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 360436 245064 0.7 18.0 JOIN = set()

14 696038 456391 0.7 33.5 for ingoing in cfg_node.ingoing:

15 335602 512314 1.5 37.6 JOIN |= ingoing.old_constraint

16 360436 148911 0.4 10.9 return JOIN

Total time: 39.8733 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 332441 232814 0.7 0.6 result = set()

21 25459412 11771649 0.5 29.5 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 25126971 12591490 0.5 31.6 if _id is not cfg_node.left_hand_side:

24 25049392 15128989 0.6 37.9 result.add(cfg_node)

25 332441 148387 0.4 0.4 return result

Total time: 69.2388 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 360436 328782 0.9 0.5 if isinstance(cfg_node, AssignmentNode):

31 332441 2875202 8.6 4.2 JOIN = self.join(cfg_node)

32 332441 168029 0.5 0.2 arrow_result = JOIN

33 332441 255674 0.8 0.4 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 332441 64963372 195.4 93.8 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 332441 229760 0.7 0.3 arrow_result.add(cfg_node)

36 332441 208997 0.6 0.3 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 27995 208969 7.5 0.3 cfg_node.new_constraint = self.join(cfg_node)

Wed Aug 10 14:05:57 2016 stats.prof

27061502 function calls (27053131 primitive calls) in 9.258 seconds

Ordered by: cumulative time

List reduced from 755 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.005 0.000 9.258 9.258 {built-in method builtins.exec}

1 0.000 0.000 9.258 9.258 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 9.111 9.111 ../pyt/fixed_point.py:41(analyse)

7 0.002 0.000 9.111 1.302 ../pyt/fixed_point.py:28(fixpoint_runner)

412 0.261 0.001 8.550 0.021 ../pyt/fixed_point.py:35(fixpoint_iteration)

360436 0.518 0.000 8.288 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

332441 5.368 0.000 7.166 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

25381868 1.825 0.000 1.825 0.000 {method 'add' of 'set' objects}

360436 0.531 0.000 0.531 0.000 ../pyt/reaching_definitions_taint.py:11(join)

405 0.307 0.001 0.307 0.001 ../pyt/fixed_point.py:22(swap_constraints)

############################################### Profiling 2016-08-11 08:42:50.417640 ###############################################

##### Profiling test_projects/flaskbb_lite_1/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.001953 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 658 380 0.6 19.5 JOIN = set()

14 1239 695 0.6 35.6 for ingoing in cfg_node.ingoing:

15 581 599 1.0 30.7 JOIN |= ingoing.old_constraint

16 658 279 0.4 14.3 return JOIN

Total time: 0.02661 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 582 314 0.5 1.2 result = set()

21 19000 7620 0.4 28.6 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 18418 8705 0.5 32.7 if _id is not cfg_node.left_hand_side:

24 18340 9730 0.5 36.6 result.add(cfg_node)

25 582 241 0.4 0.9 return result

Total time: 0.053916 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 658 551 0.8 1.0 if isinstance(cfg_node, AssignmentNode):

31 582 4296 7.4 8.0 JOIN = self.join(cfg_node)

32 582 273 0.5 0.5 arrow_result = JOIN

33 582 409 0.7 0.8 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 582 47140 81.0 87.4 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 582 357 0.6 0.7 arrow_result.add(cfg_node)

36 582 362 0.6 0.7 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 76 528 6.9 1.0 cfg_node.new_constraint = self.join(cfg_node)

Thu Aug 11 08:42:50 2016 stats.prof

84825 function calls (78581 primitive calls) in 0.086 seconds

Ordered by: cumulative time

List reduced from 747 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.086 0.086 {built-in method builtins.exec}

1 0.000 0.000 0.086 0.086 ../pyt/pyt.py:1(<module>)

44/9 0.000 0.000 0.037 0.004 <frozen importlib._bootstrap>:966(_find_and_load)

44/9 0.000 0.000 0.037 0.004 <frozen importlib._bootstrap>:939(_find_and_load_unlocked)

44/9 0.000 0.000 0.036 0.004 <frozen importlib._bootstrap>:659(_load_unlocked)

38/9 0.000 0.000 0.036 0.004 <frozen importlib._bootstrap_external>:656(exec_module)

54/10 0.000 0.000 0.034 0.003 <frozen importlib._bootstrap>:214(_call_with_frames_removed)

7 0.000 0.000 0.026 0.004 ../pyt/cfg.py:236(__init__)

63/7 0.002 0.000 0.026 0.004 ../pyt/cfg.py:354(stmt_star_handler)

3524/31 0.003 0.000 0.026 0.001 /usr/local/lib/python3.5/ast.py:241(visit)

##### Profiling test_projects/flaskbb_lite_2/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.020054 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 3656 2798 0.8 14.0 JOIN = set()

14 7101 4968 0.7 24.8 for ingoing in cfg_node.ingoing:

15 3445 10665 3.1 53.2 JOIN |= ingoing.old_constraint

16 3656 1623 0.4 8.1 return JOIN

Total time: 1.29135 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 3478 2512 0.7 0.2 result = set()

21 804342 377045 0.5 29.2 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 800864 424803 0.5 32.9 if _id is not cfg_node.left_hand_side:

24 800044 485403 0.6 37.6 result.add(cfg_node)

25 3478 1590 0.5 0.1 return result

Total time: 2.10662 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 3656 4501 1.2 0.2 if isinstance(cfg_node, AssignmentNode):

31 3478 37120 10.7 1.8 JOIN = self.join(cfg_node)

32 3478 1644 0.5 0.1 arrow_result = JOIN

33 3478 3123 0.9 0.1 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 3478 2053746 590.5 97.5 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 3478 2435 0.7 0.1 arrow_result.add(cfg_node)

36 3478 2762 0.8 0.1 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 178 1292 7.3 0.1 cfg_node.new_constraint = self.join(cfg_node)

Thu Aug 11 08:42:51 2016 stats.prof

1046554 function calls (1025271 primitive calls) in 0.794 seconds

Ordered by: cumulative time

List reduced from 750 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.794 0.794 {built-in method builtins.exec}

1 0.000 0.000 0.794 0.794 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 0.524 0.524 ../pyt/fixed_point.py:54(analyse)

14 0.255 0.018 0.524 0.037 ../pyt/fixed_point.py:28(fixpoint_runner)

3656 0.007 0.000 0.268 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

3478 0.177 0.000 0.249 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

14 0.000 0.000 0.131 0.009 ../pyt/cfg.py:236(__init__)

166/14 0.003 0.000 0.130 0.009 ../pyt/cfg.py:354(stmt_star_handler)

15012/55 0.014 0.000 0.130 0.002 /usr/local/lib/python3.5/ast.py:241(visit)

47/3 0.000 0.000 0.122 0.041 ../pyt/cfg.py:381(visit_Module)

##### Profiling test_projects/flaskbb_lite_3/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.008095 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 2128 1415 0.7 17.5 JOIN = set()

14 4125 2746 0.7 33.9 for ingoing in cfg_node.ingoing:

15 1997 3046 1.5 37.6 JOIN |= ingoing.old_constraint

16 2128 888 0.4 11.0 return JOIN

Total time: 0.30566 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 2000 1280 0.6 0.4 result = set()

21 206036 90598 0.4 29.6 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 204036 102302 0.5 33.5 if _id is not cfg_node.left_hand_side:

24 203570 110652 0.5 36.2 result.add(cfg_node)

25 2000 828 0.4 0.3 return result

Total time: 0.542601 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 2128 2286 1.1 0.4 if isinstance(cfg_node, AssignmentNode):

31 2000 17395 8.7 3.2 JOIN = self.join(cfg_node)

32 2000 995 0.5 0.2 arrow_result = JOIN

33 2000 1656 0.8 0.3 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 2000 516530 258.3 95.2 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 2000 1343 0.7 0.2 arrow_result.add(cfg_node)

36 2000 1452 0.7 0.3 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 128 944 7.4 0.2 cfg_node.new_constraint = self.join(cfg_node)

Thu Aug 11 08:42:55 2016 stats.prof

311837 function calls (303466 primitive calls) in 0.277 seconds

Ordered by: cumulative time

List reduced from 751 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.278 0.278 {built-in method builtins.exec}

1 0.000 0.000 0.278 0.278 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 0.165 0.165 ../pyt/fixed_point.py:54(analyse)

7 0.094 0.013 0.165 0.024 ../pyt/fixed_point.py:28(fixpoint_runner)

2128 0.004 0.000 0.071 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

2000 0.046 0.000 0.063 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

7 0.000 0.000 0.061 0.009 ../pyt/cfg.py:236(__init__)

113/7 0.002 0.000 0.061 0.009 ../pyt/cfg.py:354(stmt_star_handler)

5140/31 0.005 0.000 0.060 0.002 /usr/local/lib/python3.5/ast.py:241(visit)

30/3 0.000 0.000 0.054 0.018 ../pyt/cfg.py:381(visit_Module)

############################################### Profiling 2016-08-11 15:16:20.611658 ###############################################

##### Profiling test_projects/flaskbb_lite_1/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.199352 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 11

Line # Hits Time Per Hit % Time Line Contents

==============================================================

11 @profile

12 def join(self, cfg_node):

13 53882 41174 0.8 20.7 JOIN = set()

14 100291 74362 0.7 37.3 for ingoing in cfg_node.ingoing:

15 46409 61079 1.3 30.6 JOIN |= ingoing.old_constraint

16 53882 22737 0.4 11.4 return JOIN

Total time: 2.83935 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 18

Line # Hits Time Per Hit % Time Line Contents

==============================================================

18 @profile

19 def arrow(self, JOIN, _id):

20 47426 34092 0.7 1.2 result = set()

21 1966577 811851 0.4 28.6 for cfg_node in JOIN:

22 # if _id is not found in the LHS of cfg_node, the node will not be deleted

23 1919151 901967 0.5 31.8 if _id is not cfg_node.left_hand_side:

24 1910922 1072742 0.6 37.8 result.add(cfg_node)

25 47426 18697 0.4 0.7 return result

Total time: 5.77989 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 27

Line # Hits Time Per Hit % Time Line Contents

==============================================================

27 @profile

28 def fixpointmethod(self, cfg_node):

29 # Assignment: JOIN(v) arrow(id) join(v)

30 53882 64655 1.2 1.1 if isinstance(cfg_node, AssignmentNode):

31 47426 426010 9.0 7.4 JOIN = self.join(cfg_node)

32 47426 22625 0.5 0.4 arrow_result = JOIN

33 47426 38035 0.8 0.7 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

34 47426 5082041 107.2 87.9 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

35 47426 33748 0.7 0.6 arrow_result.add(cfg_node)

36 47426 63677 1.3 1.1 cfg_node.new_constraint = arrow_result

37

38 else:

39 # Default case join(v)

40 6456 49096 7.6 0.8 cfg_node.new_constraint = self.join(cfg_node)

Thu Aug 11 15:16:25 2016 stats.prof

2337803 function calls (2331559 primitive calls) in 4.504 seconds

Ordered by: cumulative time

List reduced from 734 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.005 0.000 4.505 4.505 {built-in method builtins.exec}

1 0.000 0.000 4.505 4.505 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 4.419 4.419 ../pyt/fixed_point.py:57(analyse)

7 3.615 0.516 4.419 0.631 ../pyt/fixed_point.py:32(fixpoint_runner)

53882 0.123 0.000 0.796 0.000 ../pyt/reaching_definitions_taint.py:25(fixpointmethod)

47426 0.430 0.000 0.580 0.000 ../pyt/reaching_definitions_taint.py:17(arrow)

1958383 0.154 0.000 0.154 0.000 {method 'add' of 'set' objects}

53882 0.079 0.000 0.079 0.000 ../pyt/reaching_definitions_taint.py:11(join)

44/9 0.000 0.000 0.045 0.005 <frozen importlib._bootstrap>:966(_find_and_load)

44/9 0.000 0.000 0.045 0.005 <frozen importlib._bootstrap>:939(_find_and_load_unlocked)

##### Profiling test_projects/flaskbb_lite_2/flaskbb/app.py #####

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Rest could not be run took over 30 minutes <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

############################################### Profiling 2016-08-12 10:44:38.439564 ###############################################

##### Profiling test_projects/flaskbb_lite_1/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.002 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 10

Line # Hits Time Per Hit % Time Line Contents

==============================================================

10 @profile

11 def join(self, cfg_node):

12 652 385 0.6 19.2 JOIN = set()

13 1262 758 0.6 37.9 for ingoing in cfg_node.ingoing:

14 610 610 1.0 30.5 JOIN |= ingoing.old_constraint

15 652 247 0.4 12.3 return JOIN

Total time: 0.027763 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 17

Line # Hits Time Per Hit % Time Line Contents

==============================================================

17 @profile

18 def arrow(self, JOIN, _id):

19 540 318 0.6 1.1 result = set()

20 18969 7851 0.4 28.3 for cfg_node in JOIN:

21 # if _id is not found in the LHS of cfg_node, the node will not be deleted

22 18429 8910 0.5 32.1 if _id is not cfg_node.left_hand_side:

23 18351 10458 0.6 37.7 result.add(cfg_node)

24 540 226 0.4 0.8 return result

Total time: 0.053986 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 26

Line # Hits Time Per Hit % Time Line Contents

==============================================================

26 @profile

27 def fixpointmethod(self, cfg_node):

28 # Assignment: JOIN(v) arrow(id) join(v)

29 652 537 0.8 1.0 if isinstance(cfg_node, AssignmentNode):

30 540 4140 7.7 7.7 JOIN = self.join(cfg_node)

31 540 270 0.5 0.5 arrow_result = JOIN

32 540 413 0.8 0.8 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

33 540 47147 87.3 87.3 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

34 540 326 0.6 0.6 arrow_result.add(cfg_node)

35 540 362 0.7 0.7 cfg_node.new_constraint = arrow_result

36

37 else:

38 # Default case join(v)

39 112 791 7.1 1.5 cfg_node.new_constraint = self.join(cfg_node)

Fri Aug 12 10:44:38 2016 stats.prof

85065 function calls (78821 primitive calls) in 0.104 seconds

Ordered by: cumulative time

List reduced from 734 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.005 0.000 0.104 0.104 {built-in method builtins.exec}

1 0.000 0.000 0.104 0.104 ../pyt/pyt.py:1(<module>)

44/9 0.000 0.000 0.051 0.006 <frozen importlib._bootstrap>:966(_find_and_load)

44/9 0.000 0.000 0.051 0.006 <frozen importlib._bootstrap>:939(_find_and_load_unlocked)

44/9 0.000 0.000 0.050 0.006 <frozen importlib._bootstrap>:659(_load_unlocked)

38/9 0.000 0.000 0.049 0.005 <frozen importlib._bootstrap_external>:656(exec_module)

53/9 0.000 0.000 0.047 0.005 <frozen importlib._bootstrap>:214(_call_with_frames_removed)

7 0.000 0.000 0.032 0.005 ../pyt/cfg.py:236(__init__)

63/7 0.001 0.000 0.032 0.005 ../pyt/cfg.py:354(stmt_star_handler)

3524/31 0.004 0.000 0.031 0.001 /usr/local/lib/python3.5/ast.py:241(visit)

##### Profiling test_projects/flaskbb_lite_2/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.018728 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 10

Line # Hits Time Per Hit % Time Line Contents

==============================================================

10 @profile

11 def join(self, cfg_node):

12 3614 2501 0.7 13.4 JOIN = set()

13 7096 4799 0.7 25.6 for ingoing in cfg_node.ingoing:

14 3482 9925 2.9 53.0 JOIN |= ingoing.old_constraint

15 3614 1503 0.4 8.0 return JOIN

Total time: 1.13656 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 17

Line # Hits Time Per Hit % Time Line Contents

==============================================================

17 @profile

18 def arrow(self, JOIN, _id):

19 3373 2237 0.7 0.2 result = set()

20 804260 331135 0.4 29.1 for cfg_node in JOIN:

21 # if _id is not found in the LHS of cfg_node, the node will not be deleted

22 800887 385626 0.5 33.9 if _id is not cfg_node.left_hand_side:

23 800067 416192 0.5 36.6 result.add(cfg_node)

24 3373 1370 0.4 0.1 return result

Total time: 2.04951 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 26

Line # Hits Time Per Hit % Time Line Contents

==============================================================

26 @profile

27 def fixpointmethod(self, cfg_node):

28 # Assignment: JOIN(v) arrow(id) join(v)

29 3614 3641 1.0 0.2 if isinstance(cfg_node, AssignmentNode):

30 3373 35163 10.4 1.7 JOIN = self.join(cfg_node)

31 3373 1505 0.4 0.1 arrow_result = JOIN

32 3373 2933 0.9 0.1 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

33 3373 1999637 592.8 97.6 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

34 3373 2197 0.7 0.1 arrow_result.add(cfg_node)

35 3373 2614 0.8 0.1 cfg_node.new_constraint = arrow_result

36

37 else:

38 # Default case join(v)

39 241 1820 7.6 0.1 cfg_node.new_constraint = self.join(cfg_node)

Fri Aug 12 10:44:39 2016 stats.prof

1048103 function calls (1026820 primitive calls) in 0.538 seconds

Ordered by: cumulative time

List reduced from 751 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.539 0.539 {built-in method builtins.exec}

1 0.000 0.000 0.539 0.539 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 0.313 0.313 ../pyt/fixed_point.py:53(analyse)

14 0.032 0.002 0.313 0.022 ../pyt/fixed_point.py:32(fixpoint_runner)

3614 0.007 0.000 0.279 0.000 ../pyt/reaching_definitions_taint.py:24(fixpointmethod)

3373 0.185 0.000 0.259 0.000 ../pyt/reaching_definitions_taint.py:16(arrow)

14 0.000 0.000 0.135 0.010 ../pyt/cfg.py:236(__init__)

166/14 0.003 0.000 0.134 0.010 ../pyt/cfg.py:354(stmt_star_handler)

15012/55 0.014 0.000 0.134 0.002 /usr/local/lib/python3.5/ast.py:241(visit)

47/3 0.000 0.000 0.125 0.042 ../pyt/cfg.py:381(visit_Module)

##### Profiling test_projects/flaskbb_lite_3/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_3/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.009342 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 10

Line # Hits Time Per Hit % Time Line Contents

==============================================================

10 @profile

11 def join(self, cfg_node):

12 2214 1576 0.7 16.9 JOIN = set()

13 4370 3591 0.8 38.4 for ingoing in cfg_node.ingoing:

14 2156 3332 1.5 35.7 JOIN |= ingoing.old_constraint

15 2214 843 0.4 9.0 return JOIN

Total time: 0.308219 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 17

Line # Hits Time Per Hit % Time Line Contents

==============================================================

17 @profile

18 def arrow(self, JOIN, _id):

19 2026 1299 0.6 0.4 result = set()

20 216582 88340 0.4 28.7 for cfg_node in JOIN:

21 # if _id is not found in the LHS of cfg_node, the node will not be deleted

22 214556 106752 0.5 34.6 if _id is not cfg_node.left_hand_side:

23 214050 110978 0.5 36.0 result.add(cfg_node)

24 2026 850 0.4 0.3 return result

Total time: 0.552934 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 26

Line # Hits Time Per Hit % Time Line Contents

==============================================================

26 @profile

27 def fixpointmethod(self, cfg_node):

28 # Assignment: JOIN(v) arrow(id) join(v)

29 2214 2364 1.1 0.4 if isinstance(cfg_node, AssignmentNode):

30 2026 18966 9.4 3.4 JOIN = self.join(cfg_node)

31 2026 867 0.4 0.2 arrow_result = JOIN

32 2026 1802 0.9 0.3 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

33 2026 524454 258.9 94.8 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

34 2026 1287 0.6 0.2 arrow_result.add(cfg_node)

35 2026 1626 0.8 0.3 cfg_node.new_constraint = arrow_result

36

37 else:

38 # Default case join(v)

39 188 1568 8.3 0.3 cfg_node.new_constraint = self.join(cfg_node)

Fri Aug 12 10:44:42 2016 stats.prof

323905 function calls (315534 primitive calls) in 0.194 seconds

Ordered by: cumulative time

List reduced from 752 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.004 0.000 0.194 0.194 {built-in method builtins.exec}

1 0.000 0.000 0.194 0.194 ../pyt/pyt.py:1(<module>)

1 0.000 0.000 0.083 0.083 ../pyt/fixed_point.py:53(analyse)

7 0.011 0.002 0.083 0.012 ../pyt/fixed_point.py:32(fixpoint_runner)

2214 0.004 0.000 0.069 0.000 ../pyt/reaching_definitions_taint.py:24(fixpointmethod)

2026 0.045 0.000 0.062 0.000 ../pyt/reaching_definitions_taint.py:16(arrow)

7 0.000 0.000 0.060 0.009 ../pyt/cfg.py:236(__init__)

113/7 0.002 0.000 0.060 0.009 ../pyt/cfg.py:354(stmt_star_handler)

5140/31 0.005 0.000 0.059 0.002 /usr/local/lib/python3.5/ast.py:241(visit)

30/3 0.000 0.000 0.052 0.017 ../pyt/cfg.py:381(visit_Module)

############################################### Profiling 2016-08-18 10:23:59.655422 ###############################################

##### Profiling test_projects/flaskbb_lite_1/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_1/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.002118 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 10

Line # Hits Time Per Hit % Time Line Contents

==============================================================

10 @profile

11 def join(self, cfg_node):

12 652 423 0.6 20.0 JOIN = set()

13 1262 786 0.6 37.1 for ingoing in cfg_node.ingoing:

14 610 633 1.0 29.9 JOIN |= ingoing.old_constraint

15 652 276 0.4 13.0 return JOIN

Total time: 0.029002 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 17

Line # Hits Time Per Hit % Time Line Contents

==============================================================

17 @profile

18 def arrow(self, JOIN, _id):

19 540 363 0.7 1.3 result = set()

20 18969 8526 0.4 29.4 for cfg_node in JOIN:

21 # if _id is not found in the LHS of cfg_node, the node will not be deleted

22 18429 9398 0.5 32.4 if _id is not cfg_node.left_hand_side:

23 18351 10494 0.6 36.2 result.add(cfg_node)

24 540 221 0.4 0.8 return result

Total time: 0.05723 s

File: ../pyt/reaching_definitions_taint.py

Function: fixpointmethod at line 26

Line # Hits Time Per Hit % Time Line Contents

==============================================================

26 @profile

27 def fixpointmethod(self, cfg_node):

28 # Assignment: JOIN(v) arrow(id) join(v)

29 652 598 0.9 1.0 if isinstance(cfg_node, AssignmentNode):

30 540 4381 8.1 7.7 JOIN = self.join(cfg_node)

31 540 287 0.5 0.5 arrow_result = JOIN

32 540 410 0.8 0.7 if not cfg_node.left_hand_side in cfg_node.right_hand_side_variables:

33 540 49912 92.4 87.2 arrow_result = self.arrow(JOIN, cfg_node.left_hand_side)

34 540 392 0.7 0.7 arrow_result.add(cfg_node)

35 540 418 0.8 0.7 cfg_node.new_constraint = arrow_result

36

37 else:

38 # Default case join(v)

39 112 832 7.4 1.5 cfg_node.new_constraint = self.join(cfg_node)

Thu Aug 18 10:23:59 2016 stats.prof

85308 function calls (79064 primitive calls) in 0.101 seconds

Ordered by: cumulative time

List reduced from 734 to 10 due to restriction <10>

ncalls tottime percall cumtime percall filename:lineno(function)

48/1 0.005 0.000 0.101 0.101 {built-in method builtins.exec}

1 0.000 0.000 0.101 0.101 ../pyt/pyt.py:1(<module>)

44/9 0.000 0.000 0.048 0.005 <frozen importlib._bootstrap>:966(_find_and_load)

44/9 0.000 0.000 0.048 0.005 <frozen importlib._bootstrap>:939(_find_and_load_unlocked)

44/9 0.000 0.000 0.047 0.005 <frozen importlib._bootstrap>:659(_load_unlocked)

38/9 0.000 0.000 0.046 0.005 <frozen importlib._bootstrap_external>:656(exec_module)

53/9 0.000 0.000 0.044 0.005 <frozen importlib._bootstrap>:214(_call_with_frames_removed)

7 0.000 0.000 0.031 0.004 ../pyt/cfg.py:236(__init__)

63/7 0.002 0.000 0.031 0.004 ../pyt/cfg.py:354(stmt_star_handler)

3524/31 0.004 0.000 0.031 0.001 /usr/local/lib/python3.5/ast.py:241(visit)

##### Profiling test_projects/flaskbb_lite_2/flaskbb/app.py #####

1 vulnerability found:

Vulnerability 1:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> User input at line 249, trigger word "get(":

param = request.args.get('param', 'not set')

Reassigned in:

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> Line 253: ret_make_response = resp

File: test_projects/flaskbb_lite_2/flaskbb/app.py

> reaches line 252, trigger word "replace(":

resp = make_response(html.replace('{{ param }}', param))

Wrote profile results to pyt.py.lprof

Timer unit: 1e-06 s

Total time: 0.019442 s

File: ../pyt/reaching_definitions_taint.py

Function: join at line 10

Line # Hits Time Per Hit % Time Line Contents

==============================================================

10 @profile

11 def join(self, cfg_node):

12 3614 2857 0.8 14.7 JOIN = set()

13 7096 5094 0.7 26.2 for ingoing in cfg_node.ingoing:

14 3482 9924 2.9 51.0 JOIN |= ingoing.old_constraint

15 3614 1567 0.4 8.1 return JOIN

Total time: 1.27334 s

File: ../pyt/reaching_definitions_taint.py

Function: arrow at line 17

Line # Hits Time Per Hit % Time Line Contents

==============================================================

17 @profile

18 def arrow(self, JOIN, _id):

19 3373 2596 0.8 0.2 result = set()