flow_pass
Run the interprocedural flow pass to obtain per-function census: sink-flow signatures, pointer lifetimes, taint sources, and guarded paths. Scope to one function or paginate results.
Instructions
Run the interprocedural flow pass (the 3rd pass) over the whole graph and return its per-function SUMMARY census -- the layer beneath the skeletons. For each function: its taxonomy, whether it is a taint source, the ordered sink-flow signatures (which value reaches which sink, guarded or not, and the callee it flows through), and the pointer lifetime signatures (alloc->use->free->escape). This is the composed, interprocedural summary the shape matcher runs on -- one call materializes and caches the pass. The response returns counts and a bounded lead page, never the whole semantic graph. Use function to scope to one function; paginate with offset/limit.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| format | No | text (compact, default) | json (structured result page) | |
| offset | No | ||
| function | No | scope the census to one function |