flow_pass
Generate the interprocedural flow summary census for functions, revealing taxonomy, taint-source status, ordered sink-flow and pointer-lifetime signatures. Scope to one function or paginate the whole graph.
Instructions
Run the interprocedural flow pass (the 3rd pass) over the whole graph and return its per-function SUMMARY census -- the layer beneath the skeletons. For each function: its taxonomy, whether it is a taint source, the ordered sink-flow signatures (which value reaches which sink, guarded or not, and the callee it flows through), and the pointer lifetime signatures (alloc->use->free->escape). This is the composed, interprocedural summary the shape matcher runs on -- one call materializes and caches the pass. Use function to scope to one function; paginate with offset/limit.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| format | No | text (compact, default) | json (structured result page) | |
| offset | No | ||
| function | No | scope the census to one function |