Static Value-Flow Analysis
|
#include <FSMPTA.h>
Public Member Functions | |
FSMPTA (MHP *m, LockAnalysis *la) | |
Constructor. More... | |
~FSMPTA () | |
Destructor. More... | |
void | initialize (SVFModule *module) |
Initialize analysis. More... | |
SVFIR * | getPAG () |
MHP * | getMHP () const |
Get MHP. More... | |
![]() | |
FlowSensitive (SVFIR *_pag, PTATY type=FSSPARSE_WPA) | |
Constructor. More... | |
~FlowSensitive () override=default | |
Destructor. More... | |
virtual bool | runOnModule (SVFModule *) |
We start from here. More... | |
void | analyze () override |
Flow sensitive analysis. More... | |
virtual void | solveAndwritePtsToFile (const std::string &filename) |
virtual void | readPtsFromFile (const std::string &filename) |
virtual void | solveConstraints () |
void | finalize () override |
Finalize analysis. More... | |
const std::string | PTAName () const override |
Get PTA name. More... | |
SVFG * | getSVFG () const |
Return SVFG. More... | |
![]() | |
WPAFSSolver () | |
Constructor. More... | |
virtual | ~WPAFSSolver () |
Destructor. More... | |
virtual NodeID | sccRepNode (NodeID id) const |
SCC methods. More... | |
![]() | |
BVDataPTAImpl (SVFIR *pag, PointerAnalysis::PTATY type, bool alias_check=true) | |
Constructor. More... | |
~BVDataPTAImpl () override=default | |
Destructor. More... | |
PersistentPointsToCache< PointsTo > & | getPtCache () |
const PointsTo & | getPts (NodeID id) override |
const NodeSet & | getRevPts (NodeID nodeId) override |
virtual void | clearPts (NodeID id, NodeID element) |
Remove element from the points-to set of id. More... | |
virtual void | clearFullPts (NodeID id) |
Clear points-to set of id. More... | |
virtual bool | unionPts (NodeID id, const PointsTo &target) |
virtual bool | unionPts (NodeID id, NodeID ptd) |
virtual bool | addPts (NodeID id, NodeID ptd) |
virtual void | clearAllPts () |
Clear all data. More... | |
virtual void | expandFIObjs (const PointsTo &pts, PointsTo &expandedPts) |
Expand FI objects. More... | |
virtual void | expandFIObjs (const NodeBS &pts, NodeBS &expandedPts) |
TODO: remove repetition. More... | |
void | remapPointsToSets (void) |
Remap all points-to sets to use the current mapping. More... | |
virtual void | writeToFile (const std::string &filename) |
Interface for analysis result storage on filesystem. More... | |
virtual void | writeObjVarToFile (const std::string &filename) |
virtual void | writePtsResultToFile (std::fstream &f) |
virtual void | writeGepObjVarMapToFile (std::fstream &f) |
virtual bool | readFromFile (const std::string &filename) |
virtual void | readPtsResultFromFile (std::ifstream &f) |
virtual void | readGepObjVarMapFromFile (std::ifstream &f) |
virtual void | readAndSetObjFieldSensitivity (std::ifstream &f, const std::string &delimiterStr) |
AliasResult | alias (const SVFValue *V1, const SVFValue *V2) override |
Interface expose to users of our pointer analysis, given Value infos. More... | |
AliasResult | alias (NodeID node1, NodeID node2) override |
Interface expose to users of our pointer analysis, given PAGNodeID. More... | |
virtual AliasResult | alias (const PointsTo &pts1, const PointsTo &pts2) |
Interface expose to users of our pointer analysis, given two pts. More... | |
void | dumpCPts () override |
dump and debug, print out conditional pts More... | |
void | dumpTopLevelPtsTo () override |
void | dumpAllPts () override |
![]() | |
ICFG * | getICFG () const |
Get ICFG. More... | |
u32_t | getNumOfResolvedIndCallEdge () const |
Return number of resolved indirect call edges. More... | |
PTACallGraph * | getPTACallGraph () const |
Return call graph. More... | |
CallGraphSCC * | getCallGraphSCC () const |
Return call graph SCC. More... | |
PointerAnalysis (SVFIR *pag, PTATY ty=Default_PTA, bool alias_check=true) | |
Constructor. More... | |
PTATY | getAnalysisTy () const |
Type of pointer analysis. More... | |
PTAImplTy | getImplTy () const |
Return implementation type of the pointer analysis. More... | |
bool | printStat () |
Whether print statistics. More... | |
void | disablePrintStat () |
Whether print statistics. More... | |
CallEdgeMap & | getIndCallMap () |
Get callees from an indirect callsite. More... | |
bool | hasIndCSCallees (const CallICFGNode *cs) const |
const FunctionSet & | getIndCSCallees (const CallICFGNode *cs) const |
virtual void | resolveIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges) |
Resolve indirect call edges. More... | |
void | callGraphSCCDetection () |
CallGraph SCC related methods. More... | |
NodeID | getCallGraphSCCRepNode (NodeID id) const |
Get SCC rep node of a SVFG node. More... | |
bool | inSameCallGraphSCC (const SVFFunction *fun1, const SVFFunction *fun2) |
Return TRUE if this edge is inside a CallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG. More... | |
bool | isInRecursion (const SVFFunction *fun) const |
bool | isLocalVarInRecursiveFun (NodeID id) const |
Whether a local variable is in function recursions. More... | |
CommonCHGraph * | getCHGraph () const |
get CHGraph More... | |
void | getVFnsFromCHA (const CallICFGNode *cs, VFunSet &vfns) |
void | getVFnsFromPts (const CallICFGNode *cs, const PointsTo &target, VFunSet &vfns) |
void | connectVCallToVFns (const CallICFGNode *cs, const VFunSet &vfns, CallEdgeMap &newEdges) |
virtual void | resolveCPPIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges) |
Resolve cpp indirect call edges. More... | |
SVFIR * | getPAG () const |
PTAStat * | getStat () const |
Get PTA stat. More... | |
SVFModule * | getModule () const |
Module. More... | |
OrderedNodeSet & | getAllValidPtrs () |
Get all Valid Pointers for resolution. More... | |
virtual | ~PointerAnalysis () |
Destructor. More... | |
virtual void | computeDDAPts (NodeID) |
Compute points-to results on-demand, overridden by derived classes. More... | |
void | printIndCSTargets (const CallICFGNode *cs, const FunctionSet &targets) |
Print targets of a function pointer. More... | |
virtual void | dumpPts (NodeID ptr, const PointsTo &pts) |
void | printIndCSTargets () |
void | dumpAllTypes () |
void | dumpStat () |
Dump the statistics. More... | |
bool | containBlackHoleNode (const PointsTo &pts) |
Determine whether a points-to contains a black hole or constant node. More... | |
bool | containConstantNode (const PointsTo &pts) |
virtual bool | isBlkObjOrConstantObj (NodeID ptd) const |
bool | isHeapMemObj (NodeID id) const |
Whether this object is heap or array. More... | |
bool | isArrayMemObj (NodeID id) const |
bool | isFIObjNode (NodeID id) const |
NodeID | getBaseObjVar (NodeID id) |
NodeID | getFIObjVar (NodeID id) |
NodeID | getGepObjVar (NodeID id, const APOffset &ap) |
virtual const NodeBS & | getAllFieldsObjVars (NodeID id) |
void | setObjFieldInsensitive (NodeID id) |
bool | isFieldInsensitive (NodeID id) const |
Static Public Member Functions | |
static FSMPTA * | createFSMPTA (SVFModule *module, MHP *m, LockAnalysis *la) |
Create single instance of flow-sensitive pointer analysis. More... | |
static void | releaseFSMPTA () |
Release flow-sensitive pointer analysis. More... | |
![]() | |
static FlowSensitive * | createFSWPA (SVFIR *_pag) |
Create single instance of flow-sensitive pointer analysis. More... | |
static void | releaseFSWPA () |
Release flow-sensitive pointer analysis. More... | |
static bool | classof (const FlowSensitive *) |
Methods for support type inquiry through isa, cast, and dyn_cast. More... | |
static bool | classof (const PointerAnalysis *pta) |
![]() | |
static bool | classof (const PointerAnalysis *pta) |
Private Member Functions | |
void | initialize () override |
Initialize analysis. More... | |
Private Attributes | |
MHP * | mhp |
LockAnalysis * | lockana |
Static Private Attributes | |
static FSMPTA * | mfspta = nullptr |
Additional Inherited Members | |
![]() | |
typedef BVDataPTAImpl::MutDFPTDataTy | MutDFPTDataTy |
typedef BVDataPTAImpl::MutDFPTDataTy::DFPtsMap | DFInOutMap |
typedef BVDataPTAImpl::MutDFPTDataTy::PtsMap | PtsMap |
![]() | |
typedef SVF::GenericGraphTraits< GraphType > | GTraits |
Define the GTraits and node iterator for printing. More... | |
typedef GTraits::NodeRef | GNODE |
typedef GTraits::EdgeType | GEDGE |
typedef GTraits::ChildIteratorType | child_iterator |
typedef SCCDetection< GraphType > | SCC |
typedef FIFOWorkList< NodeID > | WorkList |
![]() | |
enum | PTBackingType { Mutable , Persistent } |
How the PTData used is implemented. More... | |
typedef PTData< NodeID, NodeSet, NodeID, PointsTo > | PTDataTy |
typedef DiffPTData< NodeID, NodeSet, NodeID, PointsTo > | DiffPTDataTy |
typedef DFPTData< NodeID, NodeSet, NodeID, PointsTo > | DFPTDataTy |
typedef VersionedPTData< NodeID, NodeSet, NodeID, PointsTo, VersionedVar, Set< VersionedVar > > | VersionedPTDataTy |
typedef MutablePTData< NodeID, NodeSet, NodeID, PointsTo > | MutPTDataTy |
typedef MutableDiffPTData< NodeID, NodeSet, NodeID, PointsTo > | MutDiffPTDataTy |
typedef MutableDFPTData< NodeID, NodeSet, NodeID, PointsTo > | MutDFPTDataTy |
typedef MutableIncDFPTData< NodeID, NodeSet, NodeID, PointsTo > | MutIncDFPTDataTy |
typedef MutableVersionedPTData< NodeID, NodeSet, NodeID, PointsTo, VersionedVar, Set< VersionedVar > > | MutVersionedPTDataTy |
typedef PersistentPTData< NodeID, NodeSet, NodeID, PointsTo > | PersPTDataTy |
typedef PersistentDiffPTData< NodeID, NodeSet, NodeID, PointsTo > | PersDiffPTDataTy |
typedef PersistentDFPTData< NodeID, NodeSet, NodeID, PointsTo > | PersDFPTDataTy |
typedef PersistentIncDFPTData< NodeID, NodeSet, NodeID, PointsTo > | PersIncDFPTDataTy |
typedef PersistentVersionedPTData< NodeID, NodeSet, NodeID, PointsTo, VersionedVar, Set< VersionedVar > > | PersVersionedPTDataTy |
![]() | |
enum | PTATY { Andersen_BASE , Andersen_WPA , AndersenSCD_WPA , AndersenSFR_WPA , AndersenWaveDiff_WPA , Steensgaard_WPA , CSCallString_WPA , CSSummary_WPA , FSDATAFLOW_WPA , FSSPARSE_WPA , VFS_WPA , FSCS_WPA , CFLFICI_WPA , CFLFSCI_WPA , CFLFSCS_WPA , TypeCPP_WPA , FieldS_DDA , FlowS_DDA , PathS_DDA , Cxt_DDA , Default_PTA } |
Pointer analysis type list. More... | |
enum | PTAImplTy { BaseImpl , BVDataImpl , CondImpl } |
Implementation type: BVDataPTAImpl or CondPTAImpl. More... | |
typedef Set< const CallICFGNode * > | CallSiteSet |
Indirect call edges type, map a callsite to a set of callees. More... | |
typedef SVFIR::CallSiteToFunPtrMap | CallSiteToFunPtrMap |
typedef Set< const SVFFunction * > | FunctionSet |
typedef OrderedMap< const CallICFGNode *, FunctionSet > | CallEdgeMap |
typedef SCCDetection< PTACallGraph * > | CallGraphSCC |
typedef Set< const SVFGlobalValue * > | VTableSet |
typedef Set< const SVFFunction * > | VFunSet |
![]() | |
u32_t | numOfIteration |
num of iterations during constraint solving More... | |
![]() | |
static const std::string | aliasTestMayAlias = "MAYALIAS" |
static const std::string | aliasTestMayAliasMangled = "_Z8MAYALIASPvS_" |
static const std::string | aliasTestNoAlias = "NOALIAS" |
static const std::string | aliasTestNoAliasMangled = "_Z7NOALIASPvS_" |
static const std::string | aliasTestPartialAlias = "PARTIALALIAS" |
static const std::string | aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_" |
static const std::string | aliasTestMustAlias = "MUSTALIAS" |
static const std::string | aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_" |
static const std::string | aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS" |
static const std::string | aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_" |
static const std::string | aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS" |
static const std::string | aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_" |
![]() | |
typedef SVFG::SVFGEdgeSetTy | SVFGEdgeSetTy |
![]() | |
NodeStack & | SCCDetect () override |
SCC detection. More... | |
bool | propFromSrcToDst (SVFGEdge *edge) override |
Propagation. More... | |
virtual bool | propAlongDirectEdge (const DirectSVFGEdge *edge) |
Propagate points-to information along a DIRECT SVFG edge. More... | |
virtual bool | propAlongIndirectEdge (const IndirectSVFGEdge *edge) |
Propagate points-to information along an INDIRECT SVFG edge. More... | |
virtual bool | propVarPtsFromSrcToDst (NodeID var, const SVFGNode *src, const SVFGNode *dst) |
Propagate points-to information of a certain variable from src to dst. More... | |
virtual bool | propagateFromAPToFP (const ActualParmSVFGNode *ap, const SVFGNode *dst) |
virtual bool | propagateFromFRToAR (const FormalRetSVFGNode *fr, const SVFGNode *dst) |
virtual bool | weakUpdateOutFromIn (const SVFGNode *node) |
Handle weak updates. More... | |
virtual bool | strongUpdateOutFromIn (const SVFGNode *node, NodeID singleton) |
Handle strong updates. More... | |
bool | propVarPtsAfterCGUpdated (NodeID var, const SVFGNode *src, const SVFGNode *dst) |
virtual bool | propDFOutToIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | propDFInToIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
bool | updateOutFromIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
Update data-flow points-to data. More... | |
virtual bool | updateInFromIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | updateInFromOut (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | unionPtsFromIn (const SVFGNode *stmt, NodeID srcVar, NodeID dstVar) |
virtual bool | unionPtsFromTop (const SVFGNode *stmt, NodeID srcVar, NodeID dstVar) |
void | clearAllDFOutVarFlag (const SVFGNode *stmt) |
void | processNode (NodeID nodeId) override |
Handle various constraints. More... | |
bool | processSVFGNode (SVFGNode *node) |
virtual bool | processAddr (const AddrSVFGNode *addr) |
virtual bool | processCopy (const CopySVFGNode *copy) |
virtual bool | processPhi (const PHISVFGNode *phi) |
virtual bool | processGep (const GepSVFGNode *edge) |
virtual bool | processLoad (const LoadSVFGNode *load) |
virtual bool | processStore (const StoreSVFGNode *store) |
bool | updateCallGraph (const CallSiteToFunPtrMap &callsites) override |
Update call graph. More... | |
void | connectCallerAndCallee (const CallEdgeMap &newEdges, SVFGEdgeSetTy &edges) |
Connect nodes in SVFG. More... | |
virtual void | updateConnectedNodes (const SVFGEdgeSetTy &edges) |
Update nodes connected during updating call graph. More... | |
bool | isStrongUpdate (const SVFGNode *node, NodeID &singleton) |
Return TRUE if this is a strong update STORE statement. More... | |
virtual void | countAliases (Set< std::pair< NodeID, NodeID >> cmp, unsigned *mayAliases, unsigned *noAliases) |
Fills may/noAliases for the location/pointer pairs in cmp. More... | |
const PointsTo & | getDFInPtsSet (const SVFGNode *stmt, const NodeID node) |
Get points-to set for a node from data flow IN/OUT set at a statement. More... | |
const PointsTo & | getDFOutPtsSet (const SVFGNode *stmt, const NodeID node) |
virtual void | cluster (void) |
virtual void | plainMap (void) const |
Sets the global best mapping as a plain mapping, i.e. n -> n. More... | |
void | svfgStat () |
const DFInOutMap & | getDFInputMap () const |
const DFInOutMap & | getDFOutputMap () const |
![]() | |
WPASolver () | |
Constructor. More... | |
virtual | ~WPASolver ()=default |
Destructor. More... | |
SCC * | getSCCDetector () const |
Get SCC detector. More... | |
const GraphType | graph () |
Get/Set graph methods. More... | |
void | setGraph (GraphType g) |
virtual NodeStack & | SCCDetect (NodeSet &candidates) |
virtual void | initWorklist () |
virtual void | solveWorklist () |
virtual void | collapseFields () |
collapse positive weight cycles of a graph More... | |
virtual void | propagate (GNODE *v) |
virtual bool | propFromSrcToDst (GEDGE *) |
Propagate information from source to destination node, to be implemented in the child class. More... | |
NodeID | popFromWorklist () |
Worklist operations. More... | |
virtual void | pushIntoWorklist (NodeID id) |
bool | isWorklistEmpty () |
bool | isInWorklist (NodeID id) |
GNODE * | Node (NodeID id) |
Get node on the graph. More... | |
NodeID | Node_Index (GNODE node) |
Get node ID. More... | |
![]() | |
PTDataTy * | getPTDataTy () const |
Get points-to data structure. More... | |
DiffPTDataTy * | getDiffPTDataTy () const |
DFPTDataTy * | getDFPTDataTy () const |
MutDFPTDataTy * | getMutDFPTDataTy () const |
VersionedPTDataTy * | getVersionedPTDataTy () const |
virtual void | onTheFlyCallGraphSolve (const CallSiteToFunPtrMap &callsites, CallEdgeMap &newEdges) |
On the fly call graph construction. More... | |
virtual void | normalizePointsTo () |
![]() | |
const CallSiteToFunPtrMap & | getIndirectCallsites () const |
Return all indirect callsites. More... | |
NodeID | getFunPtr (const CallICFGNode *cs) const |
Return function pointer PAGNode at a callsite cs. More... | |
virtual void | validateTests () |
Alias check functions to verify correctness of pointer analysis. More... | |
virtual void | validateSuccessTests (std::string fun) |
virtual void | validateExpectedFailureTests (std::string fun) |
void | resetObjFieldSensitive () |
Reset all object node as field-sensitive. More... | |
![]() | |
SVFG * | svfg |
SVFGBuilder | memSSA |
AndersenWaveDiff * | ander |
std::vector< std::pair< hclust_fast_methods, std::vector< NodeID > > > | candidateMappings |
Save candidate mappings for evaluation's sake. More... | |
u32_t | numOfProcessedAddr |
Statistics. More... | |
u32_t | numOfProcessedCopy |
Number of processed Addr node. More... | |
u32_t | numOfProcessedGep |
Number of processed Copy node. More... | |
u32_t | numOfProcessedPhi |
Number of processed Gep node. More... | |
u32_t | numOfProcessedLoad |
Number of processed Phi node. More... | |
u32_t | numOfProcessedStore |
Number of processed Load node. More... | |
u32_t | numOfProcessedActualParam |
Number of processed Store node. More... | |
u32_t | numOfProcessedFormalRet |
Number of processed actual param node. More... | |
u32_t | numOfProcessedMSSANode |
Number of processed formal ret node. More... | |
u32_t | maxSCCSize |
Number of processed mssa node. More... | |
u32_t | numOfSCC |
u32_t | numOfNodesInSCC |
double | solveTime |
time of solve. More... | |
double | sccTime |
time of SCC detection. More... | |
double | processTime |
time of processNode. More... | |
double | propagationTime |
time of points-to propagation. More... | |
double | directPropaTime |
time of points-to propagation of address-taken objects More... | |
double | indirectPropaTime |
time of points-to propagation of top-level pointers More... | |
double | updateTime |
time of strong/weak updates. More... | |
double | addrTime |
time of handling address edges More... | |
double | copyTime |
time of handling copy edges More... | |
double | gepTime |
time of handling gep edges More... | |
double | loadTime |
time of load edges More... | |
double | storeTime |
time of store edges More... | |
double | phiTime |
time of phi nodes. More... | |
double | updateCallGraphTime |
time of updating call graph More... | |
NodeBS | svfgHasSU |
![]() | |
NodeStack | nodeStack |
stack used for processing nodes. More... | |
![]() | |
bool | reanalyze |
Reanalyze if any constraint value changed. More... | |
u32_t | iterationForPrintStat |
print out statistics for i-th iteration More... | |
GraphType | _graph |
Graph. More... | |
std::unique_ptr< SCC > | scc |
SCC. More... | |
WorkList | worklist |
Worklist for resolution. More... | |
![]() | |
bool | print_stat |
User input flags. More... | |
bool | alias_validation |
Flag for validating points-to/alias results. More... | |
u32_t | OnTheFlyIterBudgetForStat |
Flag for iteration budget for on-the-fly statistics. More... | |
SVFModule * | svfMod |
Module. More... | |
PTATY | ptaTy |
Pointer analysis Type. More... | |
PTAImplTy | ptaImplTy |
PTA implementation type. More... | |
PTAStat * | stat |
Statistics. More... | |
PTACallGraph * | ptaCallGraph |
Call graph used for pointer analysis. More... | |
CallGraphSCC * | callGraphSCC |
SCC for CallGraph. More... | |
ICFG * | icfg |
Interprocedural control-flow graph. More... | |
CommonCHGraph * | chgraph |
CHGraph. More... | |
![]() | |
static std::unique_ptr< FlowSensitive > | fspta |
![]() | |
static SVFIR * | pag = nullptr |
SVFIR. More... | |
|
inline |
Constructor.
Definition at line 209 of file FSMPTA.h.
|
inlinestatic |
Create single instance of flow-sensitive pointer analysis.
Definition at line 227 of file FSMPTA.h.
|
inline |
|
overrideprivatevirtual |
Initialize analysis.
Initialize analysis
Reimplemented from SVF::FlowSensitive.
Definition at line 111 of file FlowSensitive.cpp.
void FSMPTA::initialize | ( | SVFModule * | module | ) |
Initialize analysis.
Initialize analysis
Definition at line 780 of file FSMPTA.cpp.
|
inlinestatic |
|
private |