Implemented annotation soaap_create_sandbox() and updated checking of shared variable writes after sandbox creation (data consistency). Previously, we assumed sandbox creation was at the start of main(), but now SOAAP checks whether the write in privileged code to a shared variable is preceded by a call to soaap_create_sandbox() for the SAME sandbox as is allowed to read the shared variable.
Added ability to associate sandbox names with the __soaap_var_read annotation. Fixed bug in findSandboxCreationPoints whereby the creation point instruction wasn't being stored. Finally, updated detection of privileged writes to shared variables after sandbox is created.
Committing past vulnerability demo with bug fixes to SOAAP's checking of non-sandboxed methods that are annotated as having past vulnerabilities.
callgates demo and updated support for callgates-per-sandbox
Fixed bug whereby SOAAP was incorrectly warning that sandbox-private data would leak through a callgate without even checking the arguments to the callgate call.
Fixed more bugs in sandbox-private analysis.