Editing Program analysis (section)

=== Data-flow analysis ===
{{main|Data-flow analysis}}
Data-flow analysis is a technique designed to gather information about the values at each point of the program and how they change over time. This technique is often used by compilers to optimize the code.
One of the most well known examples of data-flow analysis is [[taint checking]], which consists of considering all variables that contain user-supplied data{{spaced endash}} which is considered "tainted", i.e. insecure{{spaced endash}} and preventing those variables from being used until they have been sanitized. This technique is often used to prevent [[SQL injection]] attacks. Taint checking can be done statically or dynamically.