Moved some code around and fixed a bug in the propagation logic where data flow values were only propagated to callee functions if they contained (either directly or transitively) a system call
Started refactoring of information flow analysis framework into sensible classes
Extracted the sandbox-private analysis into its own classes and also added a utility class for sandbox-related utility functions.
Delete sandbox-private analysis code from SoaapPass.cpp
Extracted the classified/clearances information flow analysis and added a utility class for class-related functions/state
Extracted capability analysis that checks whether a sandbox has the correct capabilities when performing system calls.
Removed valgrind instrumentation code and remaining redundant analysis code from SoaapPass.cpp