Handle Implicit Edges, ie Callbacks / Indirect Edges

[moshethebeadle]

Does Joern handle implicit edges, ie. callbacks?

A full example of what I'm talking about is found in the SootUp discussion Call Graph with Edges for Callbacks from Libraries #1149

Callbacks are very common in the code I deal with, and so not being able to track data flows through those is problematic.

I have done some work in handling adding call-graph edges for these cases and may be able to help in Joern.

related work

I think this may be related to the Lambda Support project.

[DavidBakerEffendi]

In terms of data-flow support, not handled very well. The lambda support project was never commenced and dropped instead for other issues. There is some overtainting to some degree in the backwards data-flow analysis, but if there is a forward flow with a captured variable, it is not tracked.