Static Value-Flow Analysis
|
#include <FlowSensitive.h>
Public Member Functions | |
FlowSensitive (SVFIR *_pag, PTATY type=FSSPARSE_WPA) | |
Constructor. More... | |
~FlowSensitive () override=default | |
Destructor. More... | |
virtual bool | runOnModule (SVFModule *) |
We start from here. More... | |
void | analyze () override |
Flow sensitive analysis. More... | |
virtual void | solveAndwritePtsToFile (const std::string &filename) |
virtual void | readPtsFromFile (const std::string &filename) |
virtual void | solveConstraints () |
void | initialize () override |
Initialize analysis. More... | |
void | finalize () override |
Finalize analysis. More... | |
const std::string | PTAName () const override |
Get PTA name. More... | |
SVFG * | getSVFG () const |
Return SVFG. More... | |
Public Member Functions inherited from SVF::WPAFSSolver< GraphType > | |
WPAFSSolver () | |
Constructor. More... | |
virtual | ~WPAFSSolver () |
Destructor. More... | |
virtual NodeID | sccRepNode (NodeID id) const |
SCC methods. More... | |
Public Member Functions inherited from SVF::BVDataPTAImpl | |
BVDataPTAImpl (SVFIR *pag, PointerAnalysis::PTATY type, bool alias_check=true) | |
Constructor. More... | |
~BVDataPTAImpl () override=default | |
Destructor. More... | |
PersistentPointsToCache< PointsTo > & | getPtCache () |
const PointsTo & | getPts (NodeID id) override |
const NodeSet & | getRevPts (NodeID nodeId) override |
virtual void | clearPts (NodeID id, NodeID element) |
Remove element from the points-to set of id. More... | |
virtual void | clearFullPts (NodeID id) |
Clear points-to set of id. More... | |
virtual bool | unionPts (NodeID id, const PointsTo &target) |
virtual bool | unionPts (NodeID id, NodeID ptd) |
virtual bool | addPts (NodeID id, NodeID ptd) |
virtual void | clearAllPts () |
Clear all data. More... | |
virtual void | expandFIObjs (const PointsTo &pts, PointsTo &expandedPts) |
Expand FI objects. More... | |
virtual void | expandFIObjs (const NodeBS &pts, NodeBS &expandedPts) |
TODO: remove repetition. More... | |
void | remapPointsToSets (void) |
Remap all points-to sets to use the current mapping. More... | |
virtual void | writeToFile (const std::string &filename) |
Interface for analysis result storage on filesystem. More... | |
virtual void | writeObjVarToFile (const std::string &filename) |
virtual void | writePtsResultToFile (std::fstream &f) |
virtual void | writeGepObjVarMapToFile (std::fstream &f) |
virtual bool | readFromFile (const std::string &filename) |
virtual void | readPtsResultFromFile (std::ifstream &f) |
virtual void | readGepObjVarMapFromFile (std::ifstream &f) |
virtual void | readAndSetObjFieldSensitivity (std::ifstream &f, const std::string &delimiterStr) |
AliasResult | alias (const SVFValue *V1, const SVFValue *V2) override |
Interface expose to users of our pointer analysis, given Value infos. More... | |
AliasResult | alias (NodeID node1, NodeID node2) override |
Interface expose to users of our pointer analysis, given PAGNodeID. More... | |
virtual AliasResult | alias (const PointsTo &pts1, const PointsTo &pts2) |
Interface expose to users of our pointer analysis, given two pts. More... | |
void | dumpCPts () override |
dump and debug, print out conditional pts More... | |
void | dumpTopLevelPtsTo () override |
void | dumpAllPts () override |
Public Member Functions inherited from SVF::PointerAnalysis | |
ICFG * | getICFG () const |
Get ICFG. More... | |
u32_t | getNumOfResolvedIndCallEdge () const |
Return number of resolved indirect call edges. More... | |
PTACallGraph * | getCallGraph () const |
Return call graph. More... | |
CallGraphSCC * | getCallGraphSCC () const |
Return call graph SCC. More... | |
PointerAnalysis (SVFIR *pag, PTATY ty=Default_PTA, bool alias_check=true) | |
Constructor. More... | |
PTATY | getAnalysisTy () const |
Type of pointer analysis. More... | |
PTAImplTy | getImplTy () const |
Return implementation type of the pointer analysis. More... | |
bool | printStat () |
Whether print statistics. More... | |
void | disablePrintStat () |
Whether print statistics. More... | |
CallEdgeMap & | getIndCallMap () |
Get callees from an indirect callsite. More... | |
bool | hasIndCSCallees (const CallICFGNode *cs) const |
const FunctionSet & | getIndCSCallees (const CallICFGNode *cs) const |
virtual void | resolveIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges) |
Resolve indirect call edges. More... | |
void | callGraphSCCDetection () |
PTACallGraph SCC related methods. More... | |
NodeID | getCallGraphSCCRepNode (NodeID id) const |
Get SCC rep node of a SVFG node. More... | |
bool | inSameCallGraphSCC (const SVFFunction *fun1, const SVFFunction *fun2) |
Return TRUE if this edge is inside a PTACallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG. More... | |
bool | isInRecursion (const SVFFunction *fun) const |
bool | isLocalVarInRecursiveFun (NodeID id) const |
Whether a local variable is in function recursions. More... | |
CommonCHGraph * | getCHGraph () const |
get CHGraph More... | |
void | getVFnsFromCHA (const CallICFGNode *cs, VFunSet &vfns) |
void | getVFnsFromPts (const CallICFGNode *cs, const PointsTo &target, VFunSet &vfns) |
void | connectVCallToVFns (const CallICFGNode *cs, const VFunSet &vfns, CallEdgeMap &newEdges) |
virtual void | resolveCPPIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges) |
Resolve cpp indirect call edges. More... | |
SVFIR * | getPAG () const |
PTAStat * | getStat () const |
Get PTA stat. More... | |
SVFModule * | getModule () const |
Module. More... | |
OrderedNodeSet & | getAllValidPtrs () |
Get all Valid Pointers for resolution. More... | |
virtual | ~PointerAnalysis () |
Destructor. More... | |
virtual void | computeDDAPts (NodeID) |
Compute points-to results on-demand, overridden by derived classes. More... | |
void | printIndCSTargets (const CallICFGNode *cs, const FunctionSet &targets) |
Print targets of a function pointer. More... | |
virtual void | dumpPts (NodeID ptr, const PointsTo &pts) |
void | printIndCSTargets () |
void | dumpAllTypes () |
void | dumpStat () |
Dump the statistics. More... | |
bool | containBlackHoleNode (const PointsTo &pts) |
Determine whether a points-to contains a black hole or constant node. More... | |
bool | containConstantNode (const PointsTo &pts) |
virtual bool | isBlkObjOrConstantObj (NodeID ptd) const |
bool | isHeapMemObj (NodeID id) const |
Whether this object is heap or array. More... | |
bool | isArrayMemObj (NodeID id) const |
bool | isFIObjNode (NodeID id) const |
NodeID | getBaseObjVar (NodeID id) |
NodeID | getFIObjVar (NodeID id) |
NodeID | getGepObjVar (NodeID id, const APOffset &ap) |
virtual const NodeBS & | getAllFieldsObjVars (NodeID id) |
void | setObjFieldInsensitive (NodeID id) |
bool | isFieldInsensitive (NodeID id) const |
Static Public Member Functions | |
static FlowSensitive * | createFSWPA (SVFIR *_pag) |
Create single instance of flow-sensitive pointer analysis. More... | |
static void | releaseFSWPA () |
Release flow-sensitive pointer analysis. More... | |
static bool | classof (const FlowSensitive *) |
Methods for support type inquiry through isa, cast, and dyn_cast. More... | |
static bool | classof (const PointerAnalysis *pta) |
Static Public Member Functions inherited from SVF::BVDataPTAImpl | |
static bool | classof (const PointerAnalysis *pta) |
Protected Types | |
typedef SVFG::SVFGEdgeSetTy | SVFGEdgeSetTy |
Protected Member Functions | |
NodeStack & | SCCDetect () override |
SCC detection. More... | |
bool | propFromSrcToDst (SVFGEdge *edge) override |
Propagation. More... | |
virtual bool | propAlongDirectEdge (const DirectSVFGEdge *edge) |
Propagate points-to information along a DIRECT SVFG edge. More... | |
virtual bool | propAlongIndirectEdge (const IndirectSVFGEdge *edge) |
Propagate points-to information along an INDIRECT SVFG edge. More... | |
virtual bool | propVarPtsFromSrcToDst (NodeID var, const SVFGNode *src, const SVFGNode *dst) |
Propagate points-to information of a certain variable from src to dst. More... | |
virtual bool | propagateFromAPToFP (const ActualParmSVFGNode *ap, const SVFGNode *dst) |
virtual bool | propagateFromFRToAR (const FormalRetSVFGNode *fr, const SVFGNode *dst) |
virtual bool | weakUpdateOutFromIn (const SVFGNode *node) |
Handle weak updates. More... | |
virtual bool | strongUpdateOutFromIn (const SVFGNode *node, NodeID singleton) |
Handle strong updates. More... | |
bool | propVarPtsAfterCGUpdated (NodeID var, const SVFGNode *src, const SVFGNode *dst) |
virtual bool | propDFOutToIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | propDFInToIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
bool | updateOutFromIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
Update data-flow points-to data. More... | |
virtual bool | updateInFromIn (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | updateInFromOut (const SVFGNode *srcStmt, NodeID srcVar, const SVFGNode *dstStmt, NodeID dstVar) |
virtual bool | unionPtsFromIn (const SVFGNode *stmt, NodeID srcVar, NodeID dstVar) |
virtual bool | unionPtsFromTop (const SVFGNode *stmt, NodeID srcVar, NodeID dstVar) |
void | clearAllDFOutVarFlag (const SVFGNode *stmt) |
void | processNode (NodeID nodeId) override |
Handle various constraints. More... | |
bool | processSVFGNode (SVFGNode *node) |
virtual bool | processAddr (const AddrSVFGNode *addr) |
virtual bool | processCopy (const CopySVFGNode *copy) |
virtual bool | processPhi (const PHISVFGNode *phi) |
virtual bool | processGep (const GepSVFGNode *edge) |
virtual bool | processLoad (const LoadSVFGNode *load) |
virtual bool | processStore (const StoreSVFGNode *store) |
bool | updateCallGraph (const CallSiteToFunPtrMap &callsites) override |
Update call graph. More... | |
void | connectCallerAndCallee (const CallEdgeMap &newEdges, SVFGEdgeSetTy &edges) |
Connect nodes in SVFG. More... | |
virtual void | updateConnectedNodes (const SVFGEdgeSetTy &edges) |
Update nodes connected during updating call graph. More... | |
bool | isStrongUpdate (const SVFGNode *node, NodeID &singleton) |
Return TRUE if this is a strong update STORE statement. More... | |
virtual void | countAliases (Set< std::pair< NodeID, NodeID >> cmp, unsigned *mayAliases, unsigned *noAliases) |
Fills may/noAliases for the location/pointer pairs in cmp. More... | |
const PointsTo & | getDFInPtsSet (const SVFGNode *stmt, const NodeID node) |
Get points-to set for a node from data flow IN/OUT set at a statement. More... | |
const PointsTo & | getDFOutPtsSet (const SVFGNode *stmt, const NodeID node) |
virtual void | cluster (void) |
virtual void | plainMap (void) const |
Sets the global best mapping as a plain mapping, i.e. n -> n. More... | |
void | svfgStat () |
const DFInOutMap & | getDFInputMap () const |
const DFInOutMap & | getDFOutputMap () const |
Protected Member Functions inherited from SVF::WPASolver< GraphType > | |
WPASolver () | |
Constructor. More... | |
virtual | ~WPASolver ()=default |
Destructor. More... | |
SCC * | getSCCDetector () const |
Get SCC detector. More... | |
const GraphType | graph () |
Get/Set graph methods. More... | |
void | setGraph (GraphType g) |
virtual NodeStack & | SCCDetect (NodeSet &candidates) |
virtual void | initWorklist () |
virtual void | solveWorklist () |
virtual void | collapseFields () |
collapse positive weight cycles of a graph More... | |
virtual void | propagate (GNODE *v) |
virtual bool | propFromSrcToDst (GEDGE *) |
Propagate information from source to destination node, to be implemented in the child class. More... | |
NodeID | popFromWorklist () |
Worklist operations. More... | |
virtual void | pushIntoWorklist (NodeID id) |
bool | isWorklistEmpty () |
bool | isInWorklist (NodeID id) |
GNODE * | Node (NodeID id) |
Get node on the graph. More... | |
NodeID | Node_Index (GNODE node) |
Get node ID. More... | |
Protected Member Functions inherited from SVF::BVDataPTAImpl | |
PTDataTy * | getPTDataTy () const |
Get points-to data structure. More... | |
DiffPTDataTy * | getDiffPTDataTy () const |
DFPTDataTy * | getDFPTDataTy () const |
MutDFPTDataTy * | getMutDFPTDataTy () const |
VersionedPTDataTy * | getVersionedPTDataTy () const |
virtual void | onTheFlyCallGraphSolve (const CallSiteToFunPtrMap &callsites, CallEdgeMap &newEdges) |
On the fly call graph construction. More... | |
virtual void | onTheFlyThreadCallGraphSolve (const CallSiteToFunPtrMap &callsites, CallEdgeMap &newForkEdges) |
On the fly thread call graph construction respecting forksite. More... | |
virtual void | normalizePointsTo () |
Protected Member Functions inherited from SVF::PointerAnalysis | |
const CallSiteToFunPtrMap & | getIndirectCallsites () const |
Return all indirect callsites. More... | |
NodeID | getFunPtr (const CallICFGNode *cs) const |
Return function pointer PAGNode at a callsite cs. More... | |
virtual void | validateTests () |
Alias check functions to verify correctness of pointer analysis. More... | |
virtual void | validateSuccessTests (std::string fun) |
virtual void | validateExpectedFailureTests (std::string fun) |
void | resetObjFieldSensitive () |
Reset all object node as field-sensitive. More... | |
Protected Attributes | |
SVFG * | svfg |
SVFGBuilder | memSSA |
AndersenWaveDiff * | ander |
std::vector< std::pair< hclust_fast_methods, std::vector< NodeID > > > | candidateMappings |
Save candidate mappings for evaluation's sake. More... | |
u32_t | numOfProcessedAddr |
Statistics. More... | |
u32_t | numOfProcessedCopy |
Number of processed Addr node. More... | |
u32_t | numOfProcessedGep |
Number of processed Copy node. More... | |
u32_t | numOfProcessedPhi |
Number of processed Gep node. More... | |
u32_t | numOfProcessedLoad |
Number of processed Phi node. More... | |
u32_t | numOfProcessedStore |
Number of processed Load node. More... | |
u32_t | numOfProcessedActualParam |
Number of processed Store node. More... | |
u32_t | numOfProcessedFormalRet |
Number of processed actual param node. More... | |
u32_t | numOfProcessedMSSANode |
Number of processed formal ret node. More... | |
u32_t | maxSCCSize |
Number of processed mssa node. More... | |
u32_t | numOfSCC |
u32_t | numOfNodesInSCC |
double | solveTime |
time of solve. More... | |
double | sccTime |
time of SCC detection. More... | |
double | processTime |
time of processNode. More... | |
double | propagationTime |
time of points-to propagation. More... | |
double | directPropaTime |
time of points-to propagation of address-taken objects More... | |
double | indirectPropaTime |
time of points-to propagation of top-level pointers More... | |
double | updateTime |
time of strong/weak updates. More... | |
double | addrTime |
time of handling address edges More... | |
double | copyTime |
time of handling copy edges More... | |
double | gepTime |
time of handling gep edges More... | |
double | loadTime |
time of load edges More... | |
double | storeTime |
time of store edges More... | |
double | phiTime |
time of phi nodes. More... | |
double | updateCallGraphTime |
time of updating call graph More... | |
NodeBS | svfgHasSU |
Protected Attributes inherited from SVF::WPAFSSolver< GraphType > | |
NodeStack | nodeStack |
stack used for processing nodes. More... | |
Protected Attributes inherited from SVF::WPASolver< GraphType > | |
bool | reanalyze |
Reanalyze if any constraint value changed. More... | |
u32_t | iterationForPrintStat |
print out statistics for i-th iteration More... | |
GraphType | _graph |
Graph. More... | |
std::unique_ptr< SCC > | scc |
SCC. More... | |
WorkList | worklist |
Worklist for resolution. More... | |
Protected Attributes inherited from SVF::PointerAnalysis | |
bool | print_stat |
User input flags. More... | |
bool | alias_validation |
Flag for validating points-to/alias results. More... | |
u32_t | OnTheFlyIterBudgetForStat |
Flag for iteration budget for on-the-fly statistics. More... | |
SVFModule * | svfMod |
Module. More... | |
PTATY | ptaTy |
Pointer analysis Type. More... | |
PTAImplTy | ptaImplTy |
PTA implementation type. More... | |
PTAStat * | stat |
Statistics. More... | |
PTACallGraph * | callgraph |
Call graph used for pointer analysis. More... | |
CallGraphSCC * | callGraphSCC |
SCC for PTACallGraph. More... | |
ICFG * | icfg |
Interprocedural control-flow graph. More... | |
CommonCHGraph * | chgraph |
CHGraph. More... | |
Static Protected Attributes | |
static std::unique_ptr< FlowSensitive > | fspta |
Static Protected Attributes inherited from SVF::PointerAnalysis | |
static SVFIR * | pag = nullptr |
SVFIR. More... | |
Friends | |
class | FlowSensitiveStat |
Additional Inherited Members | |
Public Attributes inherited from SVF::WPASolver< GraphType > | |
u32_t | numOfIteration |
num of iterations during constraint solving More... | |
Static Public Attributes inherited from SVF::PointerAnalysis | |
static const std::string | aliasTestMayAlias = "MAYALIAS" |
static const std::string | aliasTestMayAliasMangled = "_Z8MAYALIASPvS_" |
static const std::string | aliasTestNoAlias = "NOALIAS" |
static const std::string | aliasTestNoAliasMangled = "_Z7NOALIASPvS_" |
static const std::string | aliasTestPartialAlias = "PARTIALALIAS" |
static const std::string | aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_" |
static const std::string | aliasTestMustAlias = "MUSTALIAS" |
static const std::string | aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_" |
static const std::string | aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS" |
static const std::string | aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_" |
static const std::string | aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS" |
static const std::string | aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_" |
Definition at line 49 of file FlowSensitive.h.
Definition at line 57 of file FlowSensitive.h.
Definition at line 56 of file FlowSensitive.h.
Definition at line 58 of file FlowSensitive.h.
|
protected |
Definition at line 53 of file FlowSensitive.h.
|
inlineexplicit |
Constructor.
Definition at line 61 of file FlowSensitive.h.
|
overridedefault |
Destructor.
|
overridevirtual |
Flow sensitive analysis.
Start analysis
Implements SVF::PointerAnalysis.
Definition at line 128 of file FlowSensitive.cpp.
|
inlinestatic |
Methods for support type inquiry through isa, cast, and dyn_cast.
Definition at line 124 of file FlowSensitive.h.
|
inlinestatic |
Definition at line 128 of file FlowSensitive.h.
|
inlineprotected |
Definition at line 211 of file FlowSensitive.h.
|
protectedvirtual |
Performs clustering based on ander, setting the global best mapping accordingly.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 825 of file FlowSensitive.cpp.
|
protected |
Connect nodes in SVFG.
Handle parameter passing in SVFG
Definition at line 740 of file FlowSensitive.cpp.
|
protectedvirtual |
Fills may/noAliases for the location/pointer pairs in cmp.
Definition at line 856 of file FlowSensitive.cpp.
|
inlinestatic |
Create single instance of flow-sensitive pointer analysis.
Definition at line 79 of file FlowSensitive.h.
|
overridevirtual |
Finalize analysis.
Finalize analysis
Reimplemented from SVF::BVDataPTAImpl.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 163 of file FlowSensitive.cpp.
|
inlineprotected |
Get points-to set for a node from data flow IN/OUT set at a statement.
Definition at line 248 of file FlowSensitive.h.
|
inlineprotected |
Get IN/OUT data flow map. May only be called when the backing is MUTABLE.
Definition at line 261 of file FlowSensitive.h.
|
inlineprotected |
Definition at line 252 of file FlowSensitive.h.
|
inlineprotected |
Definition at line 265 of file FlowSensitive.h.
|
inline |
|
overridevirtual |
Initialize analysis.
Initialize analysis
Reimplemented from SVF::PointerAnalysis.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 45 of file FlowSensitive.cpp.
Return TRUE if this is a strong update STORE statement.
Return TRUE if this is a strong update STORE statement.
Find the unique element in cpts
Definition at line 660 of file FlowSensitive.cpp.
|
protectedvirtual |
Sets the global best mapping as a plain mapping, i.e. n -> n.
Definition at line 839 of file FlowSensitive.cpp.
|
protectedvirtual |
Process address node
TODO: If this object has been set as field-insensitive, just add the insensitive object node into dst pointer's pts.
Definition at line 450 of file FlowSensitive.cpp.
|
protectedvirtual |
Process copy node
Definition at line 467 of file FlowSensitive.cpp.
|
protectedvirtual |
Process gep node
Definition at line 500 of file FlowSensitive.cpp.
|
protectedvirtual |
Process load node
Foreach node \in src pts(dst) = union pts(node)
If the ptd is a field-insensitive node, we should also get all field nodes' points-to sets and pass them to pagDst.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 552 of file FlowSensitive.cpp.
|
overrideprotectedvirtual |
Handle various constraints.
Process each SVFG node
Reimplemented from SVF::WPASolver< GraphType >.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 221 of file FlowSensitive.cpp.
|
protectedvirtual |
Process mssa phi node
Definition at line 479 of file FlowSensitive.cpp.
|
protectedvirtual |
Process store node
foreach node \in dst pts(node) = union pts(src)
STORE statement can only be processed if the pointer on the LHS points to something. If we handle STORE with an empty points-to set, the OUT set will be updated from IN set. Then if LHS pointer points-to one target and it has been identified as a strong update, we can't remove those points-to information computed before this strong update from the OUT set.
check if this is a strong updates store
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 599 of file FlowSensitive.cpp.
|
protected |
Process each SVFG node
Definition at line 233 of file FlowSensitive.cpp.
|
protectedvirtual |
Propagate points-to information from an actual-param to a formal-param. Not necessary if SVFGOPT is used instead of original SVFG.
Propagate points-to information from actual-param to formal-param. Not necessary if SVFGOPT is used instead of original SVFG.
Definition at line 360 of file FlowSensitive.cpp.
|
protectedvirtual |
Propagate points-to information from a formal-ret to an actual-ret. Not necessary if SVFGOPT is used instead of original SVFG.
Propagate points-to information from formal-ret to actual-ret. Not necessary if SVFGOPT is used instead of original SVFG.
Definition at line 376 of file FlowSensitive.cpp.
|
protectedvirtual |
Propagate points-to information along a DIRECT SVFG edge.
Propagate points-to information along DIRECT SVFG edge.
Definition at line 329 of file FlowSensitive.cpp.
|
protectedvirtual |
Propagate points-to information along an INDIRECT SVFG edge.
Propagate points-to information along INDIRECT SVFG edge.
If this is a field-insensitive obj, propagate all field node's pts
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 391 of file FlowSensitive.cpp.
|
inlineprotectedvirtual |
Definition at line 181 of file FlowSensitive.h.
|
inlineprotectedvirtual |
Definition at line 177 of file FlowSensitive.h.
|
overrideprotected |
Propagation.
Propagate points-to information from an edge's src node to its dst node.
Propagate points-to information from source to destination node Union dfOutput of src to dfInput of dst. Only propagate points-to set of node which exists on the SVFG edge.
Definition at line 309 of file FlowSensitive.cpp.
|
protected |
Propagation between newly connected SVFG nodes during updateCallGraph. Can only be used during updateCallGraph.
Propagate points-to information of a certain variable from src to dst.
Definition at line 810 of file FlowSensitive.cpp.
|
protectedvirtual |
Propagate points-to information of a certain variable from src to dst.
Propagate points-to information of a certain variable from src to dst.
Definition at line 431 of file FlowSensitive.cpp.
|
inlineoverridevirtual |
Get PTA name.
Reimplemented from SVF::PointerAnalysis.
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 117 of file FlowSensitive.h.
|
virtual |
Initialization for the Solver
Load the pts from file
finalize the analysis
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 149 of file FlowSensitive.cpp.
|
inlinestatic |
Release flow-sensitive pointer analysis.
Definition at line 90 of file FlowSensitive.h.
|
inlinevirtual |
|
overrideprotectedvirtual |
SCC detection.
SCC detection
Reimplemented from SVF::WPAFSSolver< GraphType >.
Definition at line 209 of file FlowSensitive.cpp.
|
virtual |
Start analysis
Initialization for the Solver
finalize the analysis
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 112 of file FlowSensitive.cpp.
|
virtual |
Start solving constraints
Definition at line 77 of file FlowSensitive.cpp.
|
inlineprotectedvirtual |
Handle strong updates.
Definition at line 166 of file FlowSensitive.h.
|
protected |
|
inlineprotectedvirtual |
Definition at line 202 of file FlowSensitive.h.
|
inlineprotectedvirtual |
Definition at line 206 of file FlowSensitive.h.
|
overrideprotectedvirtual |
Update call graph.
Update call graph.
Update call graph
Reimplemented from SVF::BVDataPTAImpl.
Definition at line 687 of file FlowSensitive.cpp.
|
protectedvirtual |
Update nodes connected during updating call graph.
Push nodes connected during update call graph into worklist so they will be solved during next iteration.
If this is a formal-param or actual-ret node, we need to solve this phi node in next iteration
If this is a formal-in or actual-out node, we need to propagate points-to information from its predecessor node.
If this is a field-insensitive obj, propagate all field node's pts
Reimplemented in SVF::VersionedFlowSensitive.
Definition at line 760 of file FlowSensitive.cpp.
|
inlineprotectedvirtual |
Definition at line 193 of file FlowSensitive.h.
|
inlineprotectedvirtual |
Definition at line 197 of file FlowSensitive.h.
|
inlineprotected |
Update data-flow points-to data.
Definition at line 189 of file FlowSensitive.h.
|
inlineprotectedvirtual |
Handle weak updates.
Definition at line 161 of file FlowSensitive.h.
|
friend |
Definition at line 51 of file FlowSensitive.h.
|
protected |
time of handling address edges
Definition at line 307 of file FlowSensitive.h.
|
protected |
Definition at line 279 of file FlowSensitive.h.
|
protected |
Save candidate mappings for evaluation's sake.
Definition at line 282 of file FlowSensitive.h.
|
protected |
time of handling copy edges
Definition at line 308 of file FlowSensitive.h.
|
protected |
time of points-to propagation of address-taken objects
Definition at line 304 of file FlowSensitive.h.
|
staticprotected |
Definition at line 277 of file FlowSensitive.h.
|
protected |
time of handling gep edges
Definition at line 309 of file FlowSensitive.h.
|
protected |
time of points-to propagation of top-level pointers
Definition at line 305 of file FlowSensitive.h.
|
protected |
time of load edges
Definition at line 310 of file FlowSensitive.h.
|
protected |
Number of processed mssa node.
Definition at line 296 of file FlowSensitive.h.
|
protected |
Definition at line 278 of file FlowSensitive.h.
|
protected |
Definition at line 298 of file FlowSensitive.h.
|
protected |
Number of processed Store node.
Definition at line 292 of file FlowSensitive.h.
|
protected |
Statistics.
Definition at line 286 of file FlowSensitive.h.
|
protected |
Number of processed Addr node.
Definition at line 287 of file FlowSensitive.h.
|
protected |
Number of processed actual param node.
Definition at line 293 of file FlowSensitive.h.
|
protected |
Number of processed Copy node.
Definition at line 288 of file FlowSensitive.h.
|
protected |
Number of processed Phi node.
Definition at line 290 of file FlowSensitive.h.
|
protected |
Number of processed formal ret node.
Definition at line 294 of file FlowSensitive.h.
|
protected |
Number of processed Gep node.
Definition at line 289 of file FlowSensitive.h.
|
protected |
Number of processed Load node.
Definition at line 291 of file FlowSensitive.h.
|
protected |
Definition at line 297 of file FlowSensitive.h.
|
protected |
time of phi nodes.
Definition at line 312 of file FlowSensitive.h.
|
protected |
time of processNode.
Definition at line 302 of file FlowSensitive.h.
|
protected |
time of points-to propagation.
Definition at line 303 of file FlowSensitive.h.
|
protected |
time of SCC detection.
Definition at line 301 of file FlowSensitive.h.
|
protected |
time of solve.
Definition at line 300 of file FlowSensitive.h.
|
protected |
time of store edges
Definition at line 311 of file FlowSensitive.h.
|
protected |
Definition at line 245 of file FlowSensitive.h.
|
protected |
Definition at line 315 of file FlowSensitive.h.
|
protected |
time of updating call graph
Definition at line 313 of file FlowSensitive.h.
|
protected |
time of strong/weak updates.
Definition at line 306 of file FlowSensitive.h.