#include <PointerAnalysis.h>

Inheritance diagram for SVF::PointerAnalysis:

Public Types
enum	PTATY { Andersen_BASE , Andersen_WPA , AndersenSCD_WPA , AndersenSFR_WPA , AndersenWaveDiff_WPA , Steensgaard_WPA , CSCallString_WPA , CSSummary_WPA , FSDATAFLOW_WPA , FSSPARSE_WPA , VFS_WPA , FSCS_WPA , CFLFICI_WPA , CFLFSCI_WPA , CFLFSCS_WPA , TypeCPP_WPA , FieldS_DDA , FlowS_DDA , PathS_DDA , Cxt_DDA , Default_PTA }
	Pointer analysis type list. More...

enum	PTAImplTy { BaseImpl , BVDataImpl , CondImpl }
	Implementation type: BVDataPTAImpl or CondPTAImpl. More...

typedef Set< const CallICFGNode * >	CallSiteSet
	Indirect call edges type, map a callsite to a set of callees.

typedef SVFIR::CallSiteToFunPtrMap	CallSiteToFunPtrMap

typedef Set< const SVFFunction * >	FunctionSet

typedef OrderedMap< const CallICFGNode *, FunctionSet >	CallEdgeMap

typedef SCCDetection< PTACallGraph * >	CallGraphSCC

typedef Set< const SVFGlobalValue * >	VTableSet

typedef Set< const SVFFunction * >	VFunSet

Public Member Functions
ICFG *	getICFG () const
	Get ICFG.

u32_t	getNumOfResolvedIndCallEdge () const
	Return number of resolved indirect call edges.

PTACallGraph *	getCallGraph () const
	Return call graph.

CallGraphSCC *	getCallGraphSCC () const
	Return call graph SCC.

	PointerAnalysis (SVFIR *pag, PTATY ty=Default_PTA, bool alias_check=true)
	Constructor.

PTATY	getAnalysisTy () const
	Type of pointer analysis.

PTAImplTy	getImplTy () const
	Return implementation type of the pointer analysis.

bool	printStat ()
	Whether print statistics.

void	disablePrintStat ()
	Whether print statistics.

CallEdgeMap &	getIndCallMap ()
	Get callees from an indirect callsite.

bool	hasIndCSCallees (const CallICFGNode *cs) const

const FunctionSet &	getIndCSCallees (const CallICFGNode *cs) const

virtual void	resolveIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges)
	Resolve indirect call edges.

void	callGraphSCCDetection ()
	PTACallGraph SCC related methods.

NodeID	getCallGraphSCCRepNode (NodeID id) const
	Get SCC rep node of a SVFG node.

bool	inSameCallGraphSCC (const SVFFunction fun1, const SVFFunction fun2)
	Return TRUE if this edge is inside a PTACallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG.

bool	isInRecursion (const SVFFunction *fun) const

bool	isLocalVarInRecursiveFun (NodeID id) const
	Whether a local variable is in function recursions.

virtual const std::string	PTAName () const
	Return PTA name.

CommonCHGraph *	getCHGraph () const
	get CHGraph

void	getVFnsFromCHA (const CallICFGNode *cs, VFunSet &vfns)

void	getVFnsFromPts (const CallICFGNode *cs, const PointsTo &target, VFunSet &vfns)

void	connectVCallToVFns (const CallICFGNode *cs, const VFunSet &vfns, CallEdgeMap &newEdges)

virtual void	resolveCPPIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges)
	Resolve cpp indirect call edges.

Static Public Attributes
static const std::string	aliasTestMayAlias = "MAYALIAS"

static const std::string	aliasTestMayAliasMangled = "_Z8MAYALIASPvS_"

static const std::string	aliasTestNoAlias = "NOALIAS"

static const std::string	aliasTestNoAliasMangled = "_Z7NOALIASPvS_"

static const std::string	aliasTestPartialAlias = "PARTIALALIAS"

static const std::string	aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_"

static const std::string	aliasTestMustAlias = "MUSTALIAS"

static const std::string	aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_"

static const std::string	aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS"

static const std::string	aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_"

static const std::string	aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS"

static const std::string	aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_"

Protected Attributes
bool	print_stat
	User input flags.

bool	alias_validation
	Flag for validating points-to/alias results.

u32_t	OnTheFlyIterBudgetForStat
	Flag for iteration budget for on-the-fly statistics.

SVFModule *	svfMod
	Module.

PTATY	ptaTy
	Pointer analysis Type.

PTAImplTy	ptaImplTy
	PTA implementation type.

PTAStat *	stat
	Statistics.

PTACallGraph *	callgraph
	Call graph used for pointer analysis.

CallGraphSCC *	callGraphSCC
	SCC for PTACallGraph.

ICFG *	icfg
	Interprocedural control-flow graph.

CommonCHGraph *	chgraph
	CHGraph.

Static Protected Attributes
static SVFIR *	pag = nullptr
	SVFIR.

Private Member Functions
void	destroy ()
	Release the memory.

SVFIR *	getPAG () const

PTAStat *	getStat () const
	Get PTA stat.

SVFModule *	getModule () const
	Module.

OrderedNodeSet &	getAllValidPtrs ()
	Get all Valid Pointers for resolution.

virtual void	initialize ()
	Initialization of a pointer analysis, including building symbol table and SVFIR etc.

virtual void	finalize ()
	Finalization of a pointer analysis, including checking alias correctness.

virtual void	analyze ()=0
	Start Analysis here (main part of pointer analysis). It needs to be implemented in child class.

virtual void	computeDDAPts (NodeID)
	Compute points-to results on-demand, overridden by derived classes.

virtual AliasResult	alias (const SVFValue V1, const SVFValue V2)=0
	Interface exposed to users of our pointer analysis, given Value infos.

virtual AliasResult	alias (NodeID node1, NodeID node2)=0
	Interface exposed to users of our pointer analysis, given PAGNodeID.

virtual const PointsTo &	getPts (NodeID ptr)=0
	Get points-to targets of a pointer. It needs to be implemented in child class.

virtual const NodeSet &	getRevPts (NodeID nodeId)=0

void	printIndCSTargets (const CallICFGNode *cs, const FunctionSet &targets)
	Print targets of a function pointer.

virtual void	dumpTopLevelPtsTo ()

virtual void	dumpAllPts ()

virtual void	dumpCPts ()

virtual void	dumpPts (NodeID ptr, const PointsTo &pts)

void	printIndCSTargets ()

void	dumpAllTypes ()

void	dumpStat ()
	Dump the statistics.

bool	containBlackHoleNode (const PointsTo &pts)
	Determine whether a points-to contains a black hole or constant node.

bool	containConstantNode (const PointsTo &pts)

virtual bool	isBlkObjOrConstantObj (NodeID ptd) const

bool	isHeapMemObj (NodeID id) const
	Whether this object is heap or array.

bool	isArrayMemObj (NodeID id) const

bool	isFIObjNode (NodeID id) const

NodeID	getBaseObjVar (NodeID id)

NodeID	getFIObjVar (NodeID id)

NodeID	getGepObjVar (NodeID id, const APOffset &ap)

virtual const NodeBS &	getAllFieldsObjVars (NodeID id)

void	setObjFieldInsensitive (NodeID id)

bool	isFieldInsensitive (NodeID id) const

const CallSiteToFunPtrMap &	getIndirectCallsites () const
	Return all indirect callsites.

NodeID	getFunPtr (const CallICFGNode *cs) const
	Return function pointer PAGNode at a callsite cs.

virtual void	validateTests ()
	Alias check functions to verify correctness of pointer analysis.

virtual void	validateSuccessTests (std::string fun)

virtual void	validateExpectedFailureTests (std::string fun)

void	resetObjFieldSensitive ()
	Reset all object node as field-sensitive.

Detailed Description

Definition at line 57 of file PointerAnalysis.h.

Member Typedef Documentation

◆ CallEdgeMap

typedef OrderedMap<const CallICFGNode*, FunctionSet> SVF::PointerAnalysis::CallEdgeMap

Definition at line 105 of file PointerAnalysis.h.

◆ CallGraphSCC

typedef SCCDetection<PTACallGraph*> SVF::PointerAnalysis::CallGraphSCC

Definition at line 106 of file PointerAnalysis.h.

◆ CallSiteSet

typedef Set<const CallICFGNode*> SVF::PointerAnalysis::CallSiteSet

Indirect call edges type, map a callsite to a set of callees.

Definition at line 102 of file PointerAnalysis.h.

◆ CallSiteToFunPtrMap

typedef SVFIR::CallSiteToFunPtrMap SVF::PointerAnalysis::CallSiteToFunPtrMap

Definition at line 103 of file PointerAnalysis.h.

◆ FunctionSet

typedef Set<const SVFFunction*> SVF::PointerAnalysis::FunctionSet

Definition at line 104 of file PointerAnalysis.h.

◆ VFunSet

typedef Set<const SVFFunction*> SVF::PointerAnalysis::VFunSet

Definition at line 108 of file PointerAnalysis.h.

◆ VTableSet

typedef Set<const SVFGlobalValue*> SVF::PointerAnalysis::VTableSet

Definition at line 107 of file PointerAnalysis.h.

Member Enumeration Documentation

◆ PTAImplTy

enum SVF::PointerAnalysis::PTAImplTy

Implementation type: BVDataPTAImpl or CondPTAImpl.

Enumerator
BaseImpl	Represents PointerAnalaysis.
BVDataImpl	Represents BVDataPTAImpl.
CondImpl	Represents CondPTAImpl.

Definition at line 93 of file PointerAnalysis.h.

    {
        BaseImpl,   
        BVDataImpl, 
        CondImpl,   
    };

◆ PTATY

enum SVF::PointerAnalysis::PTATY

Pointer analysis type list.

Enumerator
Andersen_BASE	Base Andersen PTA.
Andersen_WPA	Andersen PTA.
AndersenSCD_WPA	Selective cycle detection andersen-style WPA.
AndersenSFR_WPA	Stride-based field representation.
AndersenWaveDiff_WPA	Diff wave propagation andersen-style WPA.
Steensgaard_WPA	Steensgaard PTA.
CSCallString_WPA	Call string based context sensitive WPA.
CSSummary_WPA	Summary based context sensitive WPA.
FSDATAFLOW_WPA	Traditional Dataflow-based flow sensitive WPA.
FSSPARSE_WPA	Sparse flow sensitive WPA.
VFS_WPA	Versioned sparse flow-sensitive WPA.
FSCS_WPA	Flow-, context- sensitive WPA.
CFLFICI_WPA	Flow-, context-, insensitive CFL-reachability-based analysis.
CFLFSCI_WPA	Flow-insensitive, context-sensitive CFL-reachability-based analysis.
CFLFSCS_WPA	Flow-, context-, CFL-reachability-based analysis.
TypeCPP_WPA	Type-based analysis for C++.
FieldS_DDA	Field sensitive DDA.
FlowS_DDA	Flow sensitive DDA.
PathS_DDA	Guarded value-flow DDA.
Cxt_DDA	context sensitive DDA
Default_PTA	default pta without any analysis

Definition at line 62 of file PointerAnalysis.h.

    {
        // Whole program analysis
        Andersen_BASE,      
        Andersen_WPA,       
        AndersenSCD_WPA,    
        AndersenSFR_WPA,    
        AndersenWaveDiff_WPA,   
        Steensgaard_WPA,      
        CSCallString_WPA,   
        CSSummary_WPA,      
        FSDATAFLOW_WPA, 
        FSSPARSE_WPA,       
        VFS_WPA,        
        FSCS_WPA,           
        CFLFICI_WPA,        
        CFLFSCI_WPA,        
        CFLFSCS_WPA,    
        TypeCPP_WPA, 
 
        // Demand driven analysis
        FieldS_DDA,     
        FlowS_DDA,      
        PathS_DDA,      
        Cxt_DDA,        
 
 
        Default_PTA     
    };

Constructor & Destructor Documentation

◆ PointerAnalysis()

PointerAnalysis::PointerAnalysis	(	SVFIR *	p,
		PTATY	ty = `Default_PTA`,
		bool	alias_check = `true`
	)

Constructor.

Constructor

Definition at line 69 of file PointerAnalysis.cpp.

                                                                     :
    svfMod(nullptr),ptaTy(ty),stat(nullptr),callgraph(nullptr),callGraphSCC(nullptr),icfg(nullptr),chgraph(nullptr)
{
    pag = p;
    OnTheFlyIterBudgetForStat = Options::StatBudget();
    print_stat = Options::PStat();
    ptaImplTy = BaseImpl;
    alias_validation = (alias_check && Options::EnableAliasCheck());
}

◆ ~PointerAnalysis()

PointerAnalysis::~PointerAnalysis ( )

virtual

Destructor.

Destructor

Definition at line 82 of file PointerAnalysis.cpp.

{
    destroy();
    // do not delete the SVFIR for now
    //delete pag;
}

Member Function Documentation

◆ alias() [1/2]

virtual AliasResult SVF::PointerAnalysis::alias	(	const SVFValue *	V1,
		const SVFValue *	V2
	)

pure virtual

Interface exposed to users of our pointer analysis, given Value infos.

Implemented in SVF::CFLAlias, SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

◆ alias() [2/2]

virtual AliasResult SVF::PointerAnalysis::alias	(	NodeID	node1,
		NodeID	node2
	)

pure virtual

Interface exposed to users of our pointer analysis, given PAGNodeID.

Implemented in SVF::CFLAlias, SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

◆ analyze()

virtual void SVF::PointerAnalysis::analyze ( )

pure virtual

Start Analysis here (main part of pointer analysis). It needs to be implemented in child class.

Implemented in SVF::CFLBase, SVF::ContextDDA, SVF::FlowDDA, SVF::AndersenBase, SVF::FlowSensitive, and SVF::TypeAnalysis.

◆ callGraphSCCDetection()

void SVF::PointerAnalysis::callGraphSCCDetection ( )

inline

PTACallGraph SCC related methods.

PTACallGraph SCC detection

Definition at line 386 of file PointerAnalysis.h.

    {
        if(callGraphSCC==nullptr)
            callGraphSCC = new CallGraphSCC(callgraph);
 
        callGraphSCC->find();
    }

◆ computeDDAPts()

virtual void SVF::PointerAnalysis::computeDDAPts ( NodeID )

inlinevirtual

Compute points-to results on-demand, overridden by derived classes.

Reimplemented in SVF::ContextDDA, and SVF::FlowDDA.

Definition at line 233 of file PointerAnalysis.h.

233{}

◆ connectVCallToVFns()

void PointerAnalysis::connectVCallToVFns	(	const CallICFGNode *	cs,
		const VFunSet &	vfns,
		CallEdgeMap &	newEdges
	)

Definition at line 466 of file PointerAnalysis.cpp.

{
    for (VFunSet::const_iterator fit = vfns.begin(),
            feit = vfns.end(); fit != feit; ++fit)
    {
        const SVFFunction* callee = *fit;
        callee = callee->getDefFunForMultipleModule();
        if (getIndCallMap()[cs].count(callee) > 0)
            continue;
        if(cs->arg_size() == callee->arg_size() ||
                (cs->isVarArg() && callee->isVarArg()))
        {
            newEdges[cs].insert(callee);
            getIndCallMap()[cs].insert(callee);
            const CallICFGNode* callBlockNode = cs;
            callgraph->addIndirectCallGraphEdge(callBlockNode, cs->getCaller(),callee);
        }
    }
}

◆ containBlackHoleNode()

bool SVF::PointerAnalysis::containBlackHoleNode ( const PointsTo & pts )

inline

Determine whether a points-to contains a black hole or constant node.

Definition at line 289 of file PointerAnalysis.h.

    {
        return pts.test(pag->getBlackHoleNode());
    }

◆ containConstantNode()

bool SVF::PointerAnalysis::containConstantNode ( const PointsTo & pts )

inline

Definition at line 293 of file PointerAnalysis.h.

    {
        return pts.test(pag->getConstantNode());
    }

◆ destroy()

void PointerAnalysis::destroy ( )

private

Release the memory.

Definition at line 90 of file PointerAnalysis.cpp.

{
    delete callgraph;
    callgraph = nullptr;
 
    delete callGraphSCC;
    callGraphSCC = nullptr;
 
    delete stat;
    stat = nullptr;
}

◆ disablePrintStat()

void SVF::PointerAnalysis::disablePrintStat ( )

inline

Whether print statistics.

Definition at line 359 of file PointerAnalysis.h.

    {
        print_stat = false;
    }

◆ dumpAllPts()

virtual void SVF::PointerAnalysis::dumpAllPts ( )

inlinevirtual

Reimplemented in SVF::BVDataPTAImpl.

Definition at line 255 of file PointerAnalysis.h.

255{}

◆ dumpAllTypes()

void PointerAnalysis::dumpAllTypes ( )

Definition at line 233 of file PointerAnalysis.cpp.

{
    for (OrderedNodeSet::iterator nIter = this->getAllValidPtrs().begin();
            nIter != this->getAllValidPtrs().end(); ++nIter)
    {
        const PAGNode* node = getPAG()->getGNode(*nIter);
        if (SVFUtil::isa<DummyObjVar, DummyValVar>(node))
            continue;
 
        outs() << "##<" << node->getValue()->getName() << "> ";
        outs() << "Source Loc: " << node->getValue()->getSourceLoc();
        outs() << "\nNodeID " << node->getId() << "\n";
 
        const SVFType* type = node->getValue()->getType();
        pag->getSymbolInfo()->printFlattenFields(type);
    }
}

◆ dumpCPts()

virtual void SVF::PointerAnalysis::dumpCPts ( )

inlinevirtual

Reimplemented in SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

Definition at line 256 of file PointerAnalysis.h.

256{}

◆ dumpPts()

void PointerAnalysis::dumpPts	(	NodeID	ptr,
		const PointsTo &	pts
	)

virtual

Dump points-to of top-level pointers (ValVar)

print the points-to set of node which has the maximum pts size.

Definition at line 254 of file PointerAnalysis.cpp.

{
 
    const PAGNode* node = pag->getGNode(ptr);
    if (SVFUtil::isa<DummyObjVar> (node))
    {
        outs() << "##<Dummy Obj > id:" << node->getId();
    }
    else if (!SVFUtil::isa<DummyValVar>(node) && !SVFModule::pagReadFromTXT())
    {
        if (node->hasValue())
        {
            outs() << "##<" << node->getValue()->getName() << "> ";
            outs() << "Source Loc: " << node->getValue()->getSourceLoc();
        }
    }
    outs() << "\nPtr " << node->getId() << " ";
 
    if (pts.empty())
    {
        outs() << "\t\tPointsTo: {empty}\n\n";
    }
    else
    {
        outs() << "\t\tPointsTo: { ";
        for (PointsTo::iterator it = pts.begin(), eit = pts.end(); it != eit;
                ++it)
            outs() << *it << " ";
        outs() << "}\n\n";
    }
 
    outs() << "";
 
    for (PointsTo::iterator it = pts.begin(), eit = pts.end(); it != eit; ++it)
    {
        const PAGNode* node = pag->getGNode(*it);
        if(SVFUtil::isa<ObjVar>(node) == false)
            continue;
        NodeID ptd = node->getId();
        outs() << "!!Target NodeID " << ptd << "\t [";
        const PAGNode* pagNode = pag->getGNode(ptd);
        if (SVFUtil::isa<DummyValVar>(node))
            outs() << "DummyVal\n";
        else if (SVFUtil::isa<DummyObjVar>(node))
            outs() << "Dummy Obj id: " << node->getId() << "]\n";
        else
        {
            if (!SVFModule::pagReadFromTXT())
            {
                if (node->hasValue())
                {
                    outs() << "<" << pagNode->getValue()->getName() << "> ";
                    outs() << "Source Loc: "
                           << pagNode->getValue()->getSourceLoc() << "] \n";
                }
            }
        }
    }
}

◆ dumpStat()

void PointerAnalysis::dumpStat ( )

Dump the statistics.

Definition at line 164 of file PointerAnalysis.cpp.

{
 
    if(print_stat && stat)
    {
        stat->performStat();
    }
}

◆ dumpTopLevelPtsTo()

virtual void SVF::PointerAnalysis::dumpTopLevelPtsTo ( )

inlinevirtual

Reimplemented in SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, SVF::Andersen, and SVF::BVDataPTAImpl.

Definition at line 254 of file PointerAnalysis.h.

254{}

◆ finalize()

void PointerAnalysis::finalize ( )

virtual

Finalization of a pointer analysis, including checking alias correctness.

Finalize the analysis after solving Given the alias results, verify whether it is correct or not using alias check functions

Print statistics

Dump results

Reimplemented in SVF::CFLAlias, SVF::CFLBase, SVF::CFLVF, SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, SVF::Andersen, SVF::ContextDDA, SVF::FlowDDA, SVF::BVDataPTAImpl, SVF::AndersenBase, SVF::FlowSensitive, SVF::TypeAnalysis, and SVF::VersionedFlowSensitive.

Definition at line 177 of file PointerAnalysis.cpp.

{
 
    dumpStat();
 
    if (Options::PTSPrint())
    {
        dumpTopLevelPtsTo();
        //dumpAllPts();
        //dumpCPts();
    }
 
    if (Options::TypePrint())
        dumpAllTypes();
 
    if(Options::PTSAllPrint())
        dumpAllPts();
 
    if (Options::FuncPointerPrint())
        printIndCSTargets();
 
    getCallGraph()->verifyCallGraph();
 
    if (Options::CallGraphDotGraph())
        getCallGraph()->dump("callgraph_final");
 
    if(!pag->isBuiltFromFile() && alias_validation)
        validateTests();
 
    if (!Options::UsePreCompFieldSensitive())
        resetObjFieldSensitive();
}

◆ getAllFieldsObjVars()

virtual const NodeBS & SVF::PointerAnalysis::getAllFieldsObjVars ( NodeID id )

inlinevirtual

Definition at line 336 of file PointerAnalysis.h.

    {
        return pag->getAllFieldsObjVars(id);
    }

◆ getAllValidPtrs()

OrderedNodeSet & SVF::PointerAnalysis::getAllValidPtrs ( )

inline

Get all Valid Pointers for resolution.

Definition at line 215 of file PointerAnalysis.h.

    {
        return pag->getAllValidPtrs();
    }

◆ getAnalysisTy()

PTATY SVF::PointerAnalysis::getAnalysisTy ( ) const

inline

Type of pointer analysis.

Definition at line 185 of file PointerAnalysis.h.

    {
        return ptaTy;
    }

◆ getBaseObjVar()

NodeID SVF::PointerAnalysis::getBaseObjVar ( NodeID id )

inline

Definition at line 324 of file PointerAnalysis.h.

    {
        return pag->getBaseObjVar(id);
    }

◆ getCallGraph()

PTACallGraph * SVF::PointerAnalysis::getCallGraph ( ) const

inline

Return call graph.

Definition at line 171 of file PointerAnalysis.h.

    {
        return callgraph;
    }

◆ getCallGraphSCC()

CallGraphSCC * SVF::PointerAnalysis::getCallGraphSCC ( ) const

inline

Return call graph SCC.

Definition at line 176 of file PointerAnalysis.h.

    {
        return callGraphSCC;
    }

◆ getCallGraphSCCRepNode()

NodeID SVF::PointerAnalysis::getCallGraphSCCRepNode ( NodeID id ) const

inline

Get SCC rep node of a SVFG node.

Definition at line 394 of file PointerAnalysis.h.

    {
        return callGraphSCC->repNode(id);
    }

◆ getCHGraph()

CommonCHGraph * SVF::PointerAnalysis::getCHGraph ( ) const

inline

get CHGraph

Definition at line 420 of file PointerAnalysis.h.

    {
        return chgraph;
    }

◆ getFIObjVar()

NodeID SVF::PointerAnalysis::getFIObjVar ( NodeID id )

inline

Definition at line 328 of file PointerAnalysis.h.

    {
        return pag->getFIObjVar(id);
    }

◆ getFunPtr()

NodeID SVF::PointerAnalysis::getFunPtr ( const CallICFGNode * cs ) const

inlineprotected

Return function pointer PAGNode at a callsite cs.

Definition at line 269 of file PointerAnalysis.h.

    {
        return pag->getFunPtr(cs);
    }

◆ getGepObjVar()

NodeID SVF::PointerAnalysis::getGepObjVar	(	NodeID	id,
		const APOffset &	ap
	)

inline

Definition at line 332 of file PointerAnalysis.h.

    {
        return pag->getGepObjVar(id, ap);
    }

◆ getICFG()

ICFG * SVF::PointerAnalysis::getICFG ( ) const

inline

Get ICFG.

Definition at line 161 of file PointerAnalysis.h.

    {
        return pag->getICFG();
    }

◆ getImplTy()

PTAImplTy SVF::PointerAnalysis::getImplTy ( ) const

inline

Return implementation type of the pointer analysis.

Definition at line 191 of file PointerAnalysis.h.

    {
        return ptaImplTy;
    }

◆ getIndCallMap()

CallEdgeMap & SVF::PointerAnalysis::getIndCallMap ( )

inline

Get callees from an indirect callsite.

Definition at line 366 of file PointerAnalysis.h.

    {
        return getCallGraph()->getIndCallMap();
    }

◆ getIndCSCallees()

const FunctionSet & SVF::PointerAnalysis::getIndCSCallees ( const CallICFGNode * cs ) const

inline

Definition at line 374 of file PointerAnalysis.h.

    {
        return getCallGraph()->getIndCSCallees(cs);
    }

◆ getIndirectCallsites()

const CallSiteToFunPtrMap & SVF::PointerAnalysis::getIndirectCallsites ( ) const

inlineprotected

Return all indirect callsites.

Definition at line 264 of file PointerAnalysis.h.

    {
        return pag->getIndirectCallsites();
    }

◆ getModule()

SVFModule * SVF::PointerAnalysis::getModule ( ) const

inline

Module.

Definition at line 210 of file PointerAnalysis.h.

    {
        return svfMod;
    }

◆ getNumOfResolvedIndCallEdge()

u32_t SVF::PointerAnalysis::getNumOfResolvedIndCallEdge ( ) const

inline

Return number of resolved indirect call edges.

Definition at line 166 of file PointerAnalysis.h.

    {
        return getCallGraph()->getNumOfResolvedIndCallEdge();
    }

◆ getPAG()

SVFIR * SVF::PointerAnalysis::getPAG ( ) const

inline

Get/set SVFIR

Definition at line 198 of file PointerAnalysis.h.

    {
        return pag;
    }

◆ getPts()

virtual const PointsTo & SVF::PointerAnalysis::getPts ( NodeID ptr )

pure virtual

Get points-to targets of a pointer. It needs to be implemented in child class.

Implemented in SVF::Andersen, SVF::BVDataPTAImpl, SVF::Steensgaard, SVF::CondPTAImpl< Cond >, and SVF::CondPTAImpl< ContextCond >.

◆ getRevPts()

virtual const NodeSet & SVF::PointerAnalysis::getRevPts ( NodeID nodeId )

pure virtual

Given an object, get all the nodes having whose pointsto contains the object. Similar to getPts, this also needs to be implemented in child classes.

Implemented in SVF::CFLAlias, SVF::BVDataPTAImpl, SVF::CondPTAImpl< Cond >, and SVF::CondPTAImpl< ContextCond >.

◆ getStat()

PTAStat * SVF::PointerAnalysis::getStat ( ) const

inline

Get PTA stat.

Definition at line 205 of file PointerAnalysis.h.

    {
        return stat;
    }

◆ getVFnsFromCHA()

void PointerAnalysis::getVFnsFromCHA	(	const CallICFGNode *	cs,
		VFunSet &	vfns
	)

Definition at line 428 of file PointerAnalysis.cpp.

{
    if (chgraph->csHasVFnsBasedonCHA(cs))
        vfns = chgraph->getCSVFsBasedonCHA(cs);
}

◆ getVFnsFromPts()

void PointerAnalysis::getVFnsFromPts	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		VFunSet &	vfns
	)

Definition at line 437 of file PointerAnalysis.cpp.

{
 
    if (chgraph->csHasVtblsBasedonCHA(cs))
    {
        Set<const SVFGlobalValue*> vtbls;
        const VTableSet &chaVtbls = chgraph->getCSVtblsBasedonCHA(cs);
        for (PointsTo::iterator it = target.begin(), eit = target.end(); it != eit; ++it)
        {
            const PAGNode *ptdnode = pag->getGNode(*it);
            if (ptdnode->hasValue())
            {
                if ((isa<ObjVar>(ptdnode) && isa<GlobalObjVar>(pag->getBaseObject(ptdnode->getId())))
                        || (isa<ValVar>(ptdnode) && isa<GlobalValVar>(pag->getBaseValVar(ptdnode->getId()))))
                {
                    const SVFGlobalValue* globalValue = SVFUtil::dyn_cast<SVFGlobalValue>(ptdnode->getValue());
                    if (chaVtbls.find(globalValue) != chaVtbls.end())
                        vtbls.insert(globalValue);
                }
 
            }
        }
        chgraph->getVFnsFromVtbls(cs, vtbls, vfns);
    }
}

◆ hasIndCSCallees()

bool SVF::PointerAnalysis::hasIndCSCallees ( const CallICFGNode * cs ) const

inline

Definition at line 370 of file PointerAnalysis.h.

    {
        return getCallGraph()->hasIndCSCallees(cs);
    }

◆ initialize()

void PointerAnalysis::initialize ( )

virtual

Initialization of a pointer analysis, including building symbol table and SVFIR etc.

Initialization of pointer analysis

initialise pta call graph for every pointer analysis instance

Reimplemented in SVF::CFLAlias, SVF::CFLVF, SVF::Andersen, SVF::AndersenWaveDiff, SVF::AndersenSFR, SVF::ContextDDA, SVF::FlowDDA, SVF::AndersenBase, SVF::FlowSensitive, SVF::TypeAnalysis, and SVF::VersionedFlowSensitive.

Definition at line 105 of file PointerAnalysis.cpp.

{
    assert(pag && "SVFIR has not been built!");
 
    svfMod = pag->getModule();
    chgraph = pag->getCHG();
 
    if(Options::EnableThreadCallGraph())
    {
        CallGraphBuilder bd;
        callgraph = bd.buildThreadCallGraph();
    }
    else
    {
        CallGraphBuilder bd;
        callgraph = bd.buildPTACallGraph();
    }
    callGraphSCCDetection();
 
    // dump callgraph
    if (Options::CallGraphDotGraph())
        getCallGraph()->dump("callgraph_initial");
}

◆ inSameCallGraphSCC()

bool SVF::PointerAnalysis::inSameCallGraphSCC	(	const SVFFunction *	fun1,
		const SVFFunction *	fun2
	)

inline

Return TRUE if this edge is inside a PTACallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG.

Definition at line 399 of file PointerAnalysis.h.

    {
        const PTACallGraphNode* src = callgraph->getCallGraphNode(fun1);
        const PTACallGraphNode* dst = callgraph->getCallGraphNode(fun2);
        return (getCallGraphSCCRepNode(src->getId()) == getCallGraphSCCRepNode(dst->getId()));
    }

◆ isArrayMemObj()

bool SVF::PointerAnalysis::isArrayMemObj ( NodeID id ) const

inline

Definition at line 310 of file PointerAnalysis.h.

    {
        const MemObj* mem = pag->getObject(id);
        assert(mem && "memory object is null??");
        return mem->isArray();
    }

◆ isBlkObjOrConstantObj()

virtual bool SVF::PointerAnalysis::isBlkObjOrConstantObj ( NodeID ptd ) const

inlinevirtual

Definition at line 297 of file PointerAnalysis.h.

    {
        return pag->isBlkObjOrConstantObj(ptd);
    }

◆ isFieldInsensitive()

bool SVF::PointerAnalysis::isFieldInsensitive ( NodeID id ) const

inline

Definition at line 345 of file PointerAnalysis.h.

    {
        const MemObj* mem =  pag->getBaseObj(id);
        return mem->isFieldInsensitive();
    }

◆ isFIObjNode()

bool SVF::PointerAnalysis::isFIObjNode ( NodeID id ) const

inline

For field-sensitivity

Definition at line 320 of file PointerAnalysis.h.

    {
        return (SVFUtil::isa<BaseObjVar>(pag->getGNode(id)));
    }

◆ isHeapMemObj()

bool SVF::PointerAnalysis::isHeapMemObj ( NodeID id ) const

inline

Whether this object is heap or array.

Definition at line 305 of file PointerAnalysis.h.

    {
        return pag->getBaseObject(id) && SVFUtil::isa<HeapObjVar, DummyObjVar>(pag->getBaseObject(id));
    }

◆ isInRecursion()

bool SVF::PointerAnalysis::isInRecursion ( const SVFFunction * fun ) const

inline

Definition at line 405 of file PointerAnalysis.h.

    {
        return callGraphSCC->isInCycle(callgraph->getCallGraphNode(fun)->getId());
    }

◆ isLocalVarInRecursiveFun()

bool PointerAnalysis::isLocalVarInRecursiveFun ( NodeID id ) const

Whether a local variable is in function recursions.

Return TRUE if this node is a local variable of recursive function.

Definition at line 134 of file PointerAnalysis.cpp.

{
    const BaseObjVar* baseObjVar = pag->getBaseObject(id);
    assert(baseObjVar && "base object not found!!");
    if(SVFUtil::isa<StackObjVar>(baseObjVar))
    {
        if(const SVFFunction* svffun = pag->getGNode(id)->getFunction())
        {
            return callGraphSCC->isInCycle(getCallGraph()->getCallGraphNode(svffun)->getId());
        }
    }
    return false;
}

◆ printIndCSTargets() [1/2]

void PointerAnalysis::printIndCSTargets ( )

Print all indirect callsites

Definition at line 347 of file PointerAnalysis.cpp.

{
    outs() << "==================Function Pointer Targets==================\n";
    const CallEdgeMap& callEdges = getIndCallMap();
    CallEdgeMap::const_iterator it = callEdges.begin();
    CallEdgeMap::const_iterator eit = callEdges.end();
    for (; it != eit; ++it)
    {
        const CallICFGNode* cs = it->first;
        const FunctionSet& targets = it->second;
        printIndCSTargets(cs, targets);
    }
 
    const CallSiteToFunPtrMap& indCS = getIndirectCallsites();
    CallSiteToFunPtrMap::const_iterator csIt = indCS.begin();
    CallSiteToFunPtrMap::const_iterator csEit = indCS.end();
    for (; csIt != csEit; ++csIt)
    {
        const CallICFGNode* cs = csIt->first;
        if (hasIndCSCallees(cs) == false)
        {
            outs() << "\nNodeID: " << csIt->second;
            outs() << "\nCallSite: ";
            outs() << cs->toString();
            outs() << "\tLocation: " << cs->getSourceLoc();
            outs() << "\n\t!!!has no targets!!!\n";
        }
    }
}

◆ printIndCSTargets() [2/2]

void PointerAnalysis::printIndCSTargets	(	const CallICFGNode *	cs,
		const FunctionSet &	targets
	)

Print targets of a function pointer.

Print indirect call targets at an indirect callsite

Definition at line 318 of file PointerAnalysis.cpp.

{
    outs() << "\nNodeID: " << getFunPtr(cs);
    outs() << "\nCallSite: ";
    outs() << cs->toString();
    outs() << "\tLocation: " << cs->getSourceLoc();
    outs() << "\t with Targets: ";
 
    if (!targets.empty())
    {
        FunctionSet::const_iterator fit = targets.begin();
        FunctionSet::const_iterator feit = targets.end();
        for (; fit != feit; ++fit)
        {
            const SVFFunction* callee = *fit;
            outs() << "\n\t" << callee->getName();
        }
    }
    else
    {
        outs() << "\n\tNo Targets!";
    }
 
    outs() << "\n";
}

◆ printStat()

bool SVF::PointerAnalysis::printStat ( )

inline

Whether print statistics.

Definition at line 353 of file PointerAnalysis.h.

    {
        return print_stat;
    }

◆ PTAName()

virtual const std::string SVF::PointerAnalysis::PTAName ( ) const

inlinevirtual

Return PTA name.

Reimplemented in SVF::Andersen, SVF::ContextDDA, SVF::FlowDDA, SVF::FlowSensitive, and SVF::VersionedFlowSensitive.

Definition at line 414 of file PointerAnalysis.h.

    {
        return "Pointer Analysis";
    }

◆ resetObjFieldSensitive()

void PointerAnalysis::resetObjFieldSensitive ( )

protected

Reset all object node as field-sensitive.

Reset field sensitivity

Definition at line 151 of file PointerAnalysis.cpp.

{
    for (SVFIR::iterator nIter = pag->begin(); nIter != pag->end(); ++nIter)
    {
        if(ObjVar* node = SVFUtil::dyn_cast<ObjVar>(nIter->second))
            const_cast<MemObj*>(node->getMemObj())->setFieldSensitive();
    }
}

◆ resolveCPPIndCalls()

void PointerAnalysis::resolveCPPIndCalls	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		CallEdgeMap &	newEdges
	)

virtual

Resolve cpp indirect call edges.

Definition at line 488 of file PointerAnalysis.cpp.

{
    assert(cs->isVirtualCall() && "not cpp virtual call");
 
    VFunSet vfns;
    if (Options::ConnectVCallOnCHA())
        getVFnsFromCHA(cs, vfns);
    else
        getVFnsFromPts(cs, target, vfns);
    connectVCallToVFns(cs, vfns, newEdges);
}

◆ resolveIndCalls()

void PointerAnalysis::resolveIndCalls	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		CallEdgeMap &	newEdges
	)

virtual

Resolve indirect call edges.

Resolve indirect calls

discover indirect pointer target

Definition at line 382 of file PointerAnalysis.cpp.

{
 
    assert(pag->isIndirectCallSites(cs) && "not an indirect callsite?");
    for (PointsTo::iterator ii = target.begin(), ie = target.end();
            ii != ie; ii++)
    {
 
        if(getNumOfResolvedIndCallEdge() >= Options::IndirectCallLimit())
        {
            wrnMsg("Resolved Indirect Call Edges are Out-Of-Budget, please increase the limit");
            return;
        }
 
        if(ObjVar* objPN = SVFUtil::dyn_cast<ObjVar>(pag->getGNode(*ii)))
        {
            const MemObj* obj = pag->getObject(objPN);
 
            if(obj->isFunction())
            {
                const SVFFunction* calleefun = SVFUtil::cast<CallGraphNode>(obj->getGNode())->getFunction();
                const SVFFunction* callee = calleefun->getDefFunForMultipleModule();
 
                if(SVFUtil::matchArgs(cs, callee) == false)
                    continue;
 
                if(0 == getIndCallMap()[cs].count(callee))
                {
                    newEdges[cs].insert(callee);
                    getIndCallMap()[cs].insert(callee);
 
                    callgraph->addIndirectCallGraphEdge(cs, cs->getCaller(), callee);
                    // FIXME: do we need to update llvm call graph here?
                    // The indirect call is maintained by ourself, We may update llvm's when we need to
                    //PTACallGraphNode* callgraphNode = callgraph->getOrInsertFunction(cs.getCaller());
                    //callgraphNode->addCalledFunction(cs,callgraph->getOrInsertFunction(callee));
                }
            }
        }
    }
}

◆ setObjFieldInsensitive()

void SVF::PointerAnalysis::setObjFieldInsensitive ( NodeID id )

inline

Definition at line 340 of file PointerAnalysis.h.

    {
        MemObj* mem =  const_cast<MemObj*>(pag->getBaseObj(id));
        mem->setFieldInsensitive();
    }

◆ validateExpectedFailureTests()

void PointerAnalysis::validateExpectedFailureTests ( std::string fun )

protectedvirtual

Pointer analysis validator

Definition at line 569 of file PointerAnalysis.cpp.

{
 
    if (const SVFFunction* checkFun = svfMod->getSVFFunction(fun))
    {
        if(!checkFun->isUncalledFunction())
            outs() << "[" << this->PTAName() << "] Checking " << fun << "\n";
 
        for(const CallICFGNode* callNode : pag->getCallSiteSet())
        {
            if (callNode->getCalledFunction() == checkFun)
            {
                assert(callNode->arg_size() == 2
                       && "arguments should be two pointers!!");
                const SVFVar* V1 = callNode->getArgument(0);
                const SVFVar* V2 = callNode->getArgument(1);
                AliasResult aliasRes = alias(V1->getId(), V2->getId());
 
                bool expectedFailure = false;
                if (fun == aliasTestFailMayAlias || fun == aliasTestFailMayAliasMangled)
                {
                    // change to must alias when our analysis support it
                    if (aliasRes == AliasResult::NoAlias)
                        expectedFailure = true;
                }
                else if (fun == aliasTestFailNoAlias || fun == aliasTestFailNoAliasMangled)
                {
                    // change to partial alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::PartialAlias || aliasRes == AliasResult::MustAlias)
                        expectedFailure = true;
                }
                else
                    assert(false && "not supported alias check!!");
 
                NodeID id1 = V1->getId();
                NodeID id2 = V2->getId();
 
                if (expectedFailure)
                    outs() << sucMsg("\t EXPECTED-FAILURE :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                           << callNode->getSourceLoc() << ")\n";
                else
                {
                    SVFUtil::errs() << errMsg("\t UNEXPECTED FAILURE :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                                    << callNode->getSourceLoc() << ")\n";
                    assert(false && "test case failed!");
                }
            }
        }
    }
}

◆ validateSuccessTests()

void PointerAnalysis::validateSuccessTests ( std::string fun )

protectedvirtual

Find the alias check functions annotated in the C files check whether the alias analysis results consistent with the alias check function itself

Definition at line 504 of file PointerAnalysis.cpp.

{
    // check for must alias cases, whether our alias analysis produce the correct results
    if (const SVFFunction* checkFun = svfMod->getSVFFunction(fun))
    {
        if(!checkFun->isUncalledFunction())
            outs() << "[" << this->PTAName() << "] Checking " << fun << "\n";
 
        for(const CallICFGNode* callNode : pag->getCallSiteSet())
        {
            if (callNode->getCalledFunction() == checkFun)
            {
                assert(callNode->getNumArgOperands() == 2
                       && "arguments should be two pointers!!");
                const SVFVar* V1 = callNode->getArgument(0);
                const SVFVar* V2 = callNode->getArgument(1);
                AliasResult aliasRes = alias(V1->getId(), V2->getId());
 
                bool checkSuccessful = false;
                if (fun == aliasTestMayAlias || fun == aliasTestMayAliasMangled)
                {
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::MustAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestNoAlias || fun == aliasTestNoAliasMangled)
                {
                    if (aliasRes == AliasResult::NoAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestMustAlias || fun == aliasTestMustAliasMangled)
                {
                    // change to must alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::MustAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestPartialAlias || fun == aliasTestPartialAliasMangled)
                {
                    // change to partial alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias)
                        checkSuccessful = true;
                }
                else
                    assert(false && "not supported alias check!!");
 
                NodeID id1 = V1->getId();
                NodeID id2 = V2->getId();
 
                if (checkSuccessful)
                    outs() << sucMsg("\t SUCCESS :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                           << callNode->getSourceLoc() << ")\n";
                else
                {
                    SVFUtil::errs() << errMsg("\t FAILURE :") << fun
                                    << " check <id:" << id1 << ", id:" << id2
                                    << "> at (" << callNode->getSourceLoc() << ")\n";
                    assert(false && "test case failed!");
                }
            }
        }
    }
}

◆ validateTests()

void PointerAnalysis::validateTests ( )

protectedvirtual

Alias check functions to verify correctness of pointer analysis.

Validate test cases

Definition at line 215 of file PointerAnalysis.cpp.

{
    validateSuccessTests(aliasTestMayAlias);
    validateSuccessTests(aliasTestNoAlias);
    validateSuccessTests(aliasTestMustAlias);
    validateSuccessTests(aliasTestPartialAlias);
    validateExpectedFailureTests(aliasTestFailMayAlias);
    validateExpectedFailureTests(aliasTestFailNoAlias);
 
    validateSuccessTests(aliasTestMayAliasMangled);
    validateSuccessTests(aliasTestNoAliasMangled);
    validateSuccessTests(aliasTestMustAliasMangled);
    validateSuccessTests(aliasTestPartialAliasMangled);
    validateExpectedFailureTests(aliasTestFailMayAliasMangled);
    validateExpectedFailureTests(aliasTestFailNoAliasMangled);
}

Member Data Documentation

◆ alias_validation

bool SVF::PointerAnalysis::alias_validation

protected

Flag for validating points-to/alias results.

Definition at line 135 of file PointerAnalysis.h.

◆ aliasTestFailMayAlias

const std::string PointerAnalysis::aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS"

static

Definition at line 119 of file PointerAnalysis.h.

◆ aliasTestFailMayAliasMangled

const std::string PointerAnalysis::aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_"

static

Definition at line 120 of file PointerAnalysis.h.

◆ aliasTestFailNoAlias

const std::string PointerAnalysis::aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS"

static

Definition at line 121 of file PointerAnalysis.h.

◆ aliasTestFailNoAliasMangled

const std::string PointerAnalysis::aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_"

static

Definition at line 122 of file PointerAnalysis.h.

◆ aliasTestMayAlias

const std::string PointerAnalysis::aliasTestMayAlias = "MAYALIAS"

static

Definition at line 111 of file PointerAnalysis.h.

◆ aliasTestMayAliasMangled

const std::string PointerAnalysis::aliasTestMayAliasMangled = "_Z8MAYALIASPvS_"

static

Definition at line 112 of file PointerAnalysis.h.

◆ aliasTestMustAlias

const std::string PointerAnalysis::aliasTestMustAlias = "MUSTALIAS"

static

Definition at line 117 of file PointerAnalysis.h.

◆ aliasTestMustAliasMangled

const std::string PointerAnalysis::aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_"

static

Definition at line 118 of file PointerAnalysis.h.

◆ aliasTestNoAlias

const std::string PointerAnalysis::aliasTestNoAlias = "NOALIAS"

static

Definition at line 113 of file PointerAnalysis.h.

◆ aliasTestNoAliasMangled

const std::string PointerAnalysis::aliasTestNoAliasMangled = "_Z7NOALIASPvS_"

static

Definition at line 114 of file PointerAnalysis.h.

◆ aliasTestPartialAlias

const std::string PointerAnalysis::aliasTestPartialAlias = "PARTIALALIAS"

static

Definition at line 115 of file PointerAnalysis.h.

◆ aliasTestPartialAliasMangled

const std::string PointerAnalysis::aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_"

static

Definition at line 116 of file PointerAnalysis.h.

◆ callgraph

PTACallGraph* SVF::PointerAnalysis::callgraph

protected

Call graph used for pointer analysis.

Definition at line 151 of file PointerAnalysis.h.

◆ callGraphSCC

CallGraphSCC* SVF::PointerAnalysis::callGraphSCC

protected

SCC for PTACallGraph.

Definition at line 153 of file PointerAnalysis.h.

◆ chgraph

CommonCHGraph* SVF::PointerAnalysis::chgraph

protected

CHGraph.

Definition at line 157 of file PointerAnalysis.h.

◆ icfg

ICFG* SVF::PointerAnalysis::icfg

protected

Interprocedural control-flow graph.

Definition at line 155 of file PointerAnalysis.h.

◆ OnTheFlyIterBudgetForStat

u32_t SVF::PointerAnalysis::OnTheFlyIterBudgetForStat

protected

Flag for iteration budget for on-the-fly statistics.

Definition at line 137 of file PointerAnalysis.h.

◆ pag

SVFIR * PointerAnalysis::pag = nullptr

staticprotected

SVFIR.

Definition at line 141 of file PointerAnalysis.h.

◆ print_stat

bool SVF::PointerAnalysis::print_stat

protected

User input flags.

Flag for printing the statistic results

Definition at line 133 of file PointerAnalysis.h.

◆ ptaImplTy

PTAImplTy SVF::PointerAnalysis::ptaImplTy

protected

PTA implementation type.

Definition at line 147 of file PointerAnalysis.h.

◆ ptaTy

PTATY SVF::PointerAnalysis::ptaTy

protected

Pointer analysis Type.

Definition at line 145 of file PointerAnalysis.h.

◆ stat

PTAStat* SVF::PointerAnalysis::stat

protected

Statistics.

Definition at line 149 of file PointerAnalysis.h.

◆ svfMod

SVFModule* SVF::PointerAnalysis::svfMod

protected

Module.

Definition at line 143 of file PointerAnalysis.h.

The documentation for this class was generated from the following files:

/home/runner/work/SVF/SVF/svf/include/MemoryModel/PointerAnalysis.h
/home/runner/work/SVF/SVF/svf/lib/MemoryModel/PointerAnalysis.cpp

Public Types

Public Member Functions

Static Public Attributes

Protected Attributes

Static Protected Attributes

Private Member Functions

Detailed Description

Member Typedef Documentation

◆ CallEdgeMap

◆ CallGraphSCC

◆ CallSiteSet

◆ CallSiteToFunPtrMap

◆ FunctionSet

◆ VFunSet

◆ VTableSet

Member Enumeration Documentation

◆ PTAImplTy

◆ PTATY

Constructor & Destructor Documentation

◆ PointerAnalysis()

◆ ~PointerAnalysis()

Member Function Documentation

◆ alias() [1/2]

◆ alias() [2/2]

◆ analyze()

◆ callGraphSCCDetection()

◆ computeDDAPts()

◆ connectVCallToVFns()

◆ containBlackHoleNode()

◆ containConstantNode()

◆ destroy()

◆ disablePrintStat()

◆ dumpAllPts()

◆ dumpAllTypes()

◆ dumpCPts()

◆ dumpPts()

◆ dumpStat()

◆ dumpTopLevelPtsTo()

◆ finalize()

◆ getAllFieldsObjVars()

◆ getAllValidPtrs()

◆ getAnalysisTy()

◆ getBaseObjVar()

◆ getCallGraph()

◆ getCallGraphSCC()

◆ getCallGraphSCCRepNode()

◆ getCHGraph()

◆ getFIObjVar()

◆ getFunPtr()

◆ getGepObjVar()

◆ getICFG()

◆ getImplTy()

◆ getIndCallMap()

◆ getIndCSCallees()

◆ getIndirectCallsites()

◆ getModule()

◆ getNumOfResolvedIndCallEdge()

◆ getPAG()

◆ getPts()

◆ getRevPts()

◆ getStat()

◆ getVFnsFromCHA()

◆ getVFnsFromPts()

◆ hasIndCSCallees()

◆ initialize()

◆ inSameCallGraphSCC()

◆ isArrayMemObj()

◆ isBlkObjOrConstantObj()

◆ isFieldInsensitive()

◆ isFIObjNode()

◆ isHeapMemObj()

◆ isInRecursion()

◆ isLocalVarInRecursiveFun()

◆ printIndCSTargets() [1/2]

◆ printIndCSTargets() [2/2]

◆ printStat()

◆ PTAName()

◆ resetObjFieldSensitive()

◆ resolveCPPIndCalls()

◆ resolveIndCalls()