Adopt pointer or other package to identify passing sources as interface parameters. about go-flow-levee

[mlevesquedion]

Currently this case could be handled easily by leveraging the interprocedural analysis introduced by #57, e.g. :

func OneParamSinkWrapper(a interface{}) { // want OneParamSinkWrapper:"genericFunc{ sinks: <0>, taints: <<>> }"
	core.Sink(a)
}

Upon examining a call that passes a Source to OneParamSinkWrapper, we find that it sinks its first argument and produce a report.

[mlevesquedion]

I've been experimenting with interprocedural analysis recently and I would like to record some thoughts/learnings:

• Variadic functions need special handling, e.g. if a function has 3 parameters and the last one is variadic, it is valid to ask what happens to the 4th argument in a call to this function. (This is not what #57 currently does.)
• When an argument that has a known source type is passed to a function that takes that source type as a parameter in that position, it is not necessary to query the function about whether it sinks that argument, because if it does, the standard intraprocedural analysis will detect it. (Failing to account for this can cause double reports.)