mango seems unable to identify stack overflow vulnerabilities

[lin-3-start]

I don't know where the error lies. According to your paper, this part should be able to identify stack overflow vulnerabilities. I don't understand why the mango isn't able to detect it.

[Cl4sm]

Hi @lin-3-start, by default mango only looks for command injections, if you want to look for other types of sinks you'll need to specify the --category option. If it's missing a sink that you want to implement, you can add sinks to this list: https://github.com/sefcom/operation-mango-public/blob/master/package/argument_resolver/external_function/sink/sink_lists.py
or implement a new category https://github.com/sefcom/operation-mango-public/blob/master/package/argument_resolver/external_function/sink/__init__.py