#include <PointerAnalysis.h>

Inheritance diagram for SVF::PointerAnalysis:

Public Types
typedef Set< const CallICFGNode * >	CallSiteSet
	Indirect call edges type, map a callsite to a set of callees.

typedef SVFIR::CallSiteToFunPtrMap	CallSiteToFunPtrMap

typedef Set< const FunObjVar * >	FunctionSet

typedef OrderedMap< const CallICFGNode *, FunctionSet >	CallEdgeMap

typedef SCCDetection< CallGraph * >	CallGraphSCC

typedef Set< const GlobalObjVar * >	VTableSet

typedef Set< const FunObjVar * >	VFunSet

Public Member Functions
ICFG *	getICFG () const
	Get ICFG.

u32_t	getNumOfResolvedIndCallEdge () const
	Return number of resolved indirect call edges.

CallGraph *	getCallGraph () const
	Return call graph.

CallGraphSCC *	getCallGraphSCC () const
	Return call graph SCC.

	PointerAnalysis (SVFIR *pag, PTATY ty=PTATY::Default_PTA, bool alias_check=true)
	Constructor.

PTATY	getAnalysisTy () const
	Type of pointer analysis.

PTAImplTy	getImplTy () const
	Return implementation type of the pointer analysis.

bool	printStat ()
	Whether print statistics.

void	disablePrintStat ()
	Whether print statistics.

CallEdgeMap &	getIndCallMap ()
	Get callees from an indirect callsite.

bool	hasIndCSCallees (const CallICFGNode *cs) const

const FunctionSet &	getIndCSCallees (const CallICFGNode *cs) const

virtual void	resolveIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges)
	Resolve indirect call edges.

void	callGraphSCCDetection ()
	PTACallGraph SCC related methods.

NodeID	getCallGraphSCCRepNode (NodeID id) const
	Get SCC rep node of a SVFG node.

bool	inSameCallGraphSCC (const FunObjVar fun1, const FunObjVar fun2)
	Return TRUE if this edge is inside a PTACallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG.

bool	isInRecursion (const FunObjVar *fun) const

bool	isLocalVarInRecursiveFun (NodeID id) const
	Whether a local variable is in function recursions.

virtual const std::string	PTAName () const
	Return PTA name.

CommonCHGraph *	getCHGraph () const
	get CHGraph

void	getVFnsFromCHA (const CallICFGNode *cs, VFunSet &vfns)

void	getVFnsFromPts (const CallICFGNode *cs, const PointsTo &target, VFunSet &vfns)

void	connectVCallToVFns (const CallICFGNode *cs, const VFunSet &vfns, CallEdgeMap &newEdges)

virtual void	resolveCPPIndCalls (const CallICFGNode *cs, const PointsTo &target, CallEdgeMap &newEdges)
	Resolve cpp indirect call edges.

Static Public Attributes
static const std::string	aliasTestMayAlias = "MAYALIAS"

static const std::string	aliasTestMayAliasMangled = "_Z8MAYALIASPvS_"

static const std::string	aliasTestNoAlias = "NOALIAS"

static const std::string	aliasTestNoAliasMangled = "_Z7NOALIASPvS_"

static const std::string	aliasTestPartialAlias = "PARTIALALIAS"

static const std::string	aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_"

static const std::string	aliasTestMustAlias = "MUSTALIAS"

static const std::string	aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_"

static const std::string	aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS"

static const std::string	aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_"

static const std::string	aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS"

static const std::string	aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_"

Protected Attributes
bool	print_stat
	User input flags.

bool	alias_validation
	Flag for validating points-to/alias results.

u32_t	OnTheFlyIterBudgetForStat
	Flag for iteration budget for on-the-fly statistics.

PTATY	ptaTy
	Pointer analysis Type.

PTAImplTy	ptaImplTy
	PTA implementation type.

PTAStat *	stat
	Statistics.

CallGraph *	callgraph
	Call graph used for pointer analysis.

CallGraphSCC *	callGraphSCC
	SCC for PTACallGraph.

ICFG *	icfg
	Interprocedural control-flow graph.

CommonCHGraph *	chgraph
	CHGraph.

Static Protected Attributes
static SVFIR *	pag = nullptr
	SVFIR.

Private Member Functions
void	destroy ()
	Release the memory.

SVFIR *	getPAG () const

PTAStat *	getStat () const
	Get PTA stat.

OrderedNodeSet &	getAllValidPtrs ()
	Get all Valid Pointers for resolution.

virtual void	initialize ()
	Initialization of a pointer analysis, including building symbol table and SVFIR etc.

virtual void	finalize ()
	Finalization of a pointer analysis, including checking alias correctness.

virtual void	analyze ()=0
	Start Analysis here (main part of pointer analysis). It needs to be implemented in child class.

virtual void	computeDDAPts (NodeID)
	Compute points-to results on-demand, overridden by derived classes.

virtual AliasResult	alias (const SVFVar V1, const SVFVar V2)=0
	Interface exposed to users of our pointer analysis, given Value infos.

virtual AliasResult	alias (NodeID node1, NodeID node2)=0
	Interface exposed to users of our pointer analysis, given PAGNodeID.

virtual const PointsTo &	getPts (NodeID ptr)=0
	Get points-to targets of a pointer. It needs to be implemented in child class.

virtual const NodeSet &	getRevPts (NodeID nodeId)=0

bool	mayAlias (const SVFVar V1, const SVFVar V2)
	Convenience bool wrappers: return true if the two operands may/must/partial alias.

bool	mayAlias (NodeID node1, NodeID node2)

void	printIndCSTargets (const CallICFGNode *cs, const FunctionSet &targets)
	Print targets of a function pointer.

virtual void	dumpTopLevelPtsTo ()

virtual void	dumpAllPts ()

virtual void	dumpCPts ()

virtual void	dumpPts (NodeID ptr, const PointsTo &pts)

void	printIndCSTargets ()

void	dumpAllTypes ()

void	dumpStat ()
	Dump the statistics.

bool	containBlackHoleNode (const PointsTo &pts)
	Determine whether a points-to contains a black hole or constant node.

bool	containConstantNode (const PointsTo &pts)

virtual bool	isBlkObjOrConstantObj (NodeID ptd) const

bool	isHeapMemObj (NodeID id) const
	Whether this object is heap or array.

bool	isArrayMemObj (NodeID id) const

bool	isFIObjNode (NodeID id) const

NodeID	getBaseObjVarID (NodeID id)

NodeID	getFIObjVar (NodeID id)

NodeID	getGepObjVar (NodeID id, const APOffset &ap)

virtual const NodeBS &	getAllFieldsObjVars (NodeID id)

void	setObjFieldInsensitive (NodeID id)

bool	isFieldInsensitive (NodeID id) const

const CallSiteToFunPtrMap &	getIndirectCallsites () const
	Return all indirect callsites.

NodeID	getFunPtr (const CallICFGNode *cs) const
	Return function pointer PAGNode at a callsite cs.

virtual void	validateTests ()
	Alias check functions to verify correctness of pointer analysis.

virtual void	validateSuccessTests (std::string fun)

virtual void	validateExpectedFailureTests (std::string fun)

void	resetObjFieldSensitive ()
	Reset all object node as field-sensitive.

Detailed Description

Definition at line 52 of file PointerAnalysis.h.

Member Typedef Documentation

◆ CallEdgeMap

typedef OrderedMap<const CallICFGNode*, FunctionSet> SVF::PointerAnalysis::CallEdgeMap

Definition at line 61 of file PointerAnalysis.h.

◆ CallGraphSCC

typedef SCCDetection<CallGraph*> SVF::PointerAnalysis::CallGraphSCC

Definition at line 62 of file PointerAnalysis.h.

◆ CallSiteSet

typedef Set<const CallICFGNode*> SVF::PointerAnalysis::CallSiteSet

Indirect call edges type, map a callsite to a set of callees.

Definition at line 58 of file PointerAnalysis.h.

◆ CallSiteToFunPtrMap

typedef SVFIR::CallSiteToFunPtrMap SVF::PointerAnalysis::CallSiteToFunPtrMap

Definition at line 59 of file PointerAnalysis.h.

◆ FunctionSet

typedef Set<const FunObjVar*> SVF::PointerAnalysis::FunctionSet

Definition at line 60 of file PointerAnalysis.h.

◆ VFunSet

typedef Set<const FunObjVar*> SVF::PointerAnalysis::VFunSet

Definition at line 64 of file PointerAnalysis.h.

◆ VTableSet

typedef Set<const GlobalObjVar*> SVF::PointerAnalysis::VTableSet

Definition at line 63 of file PointerAnalysis.h.

Constructor & Destructor Documentation

◆ PointerAnalysis()

PointerAnalysis::PointerAnalysis	(	SVFIR *	p,
		PTATY	ty = `PTATY::Default_PTA`,
		bool	alias_check = `true`
	)

Constructor.

Constructor

Definition at line 69 of file PointerAnalysis.cpp.

                                                                     : ptaTy(ty), stat(nullptr), callgraph(nullptr),
    callGraphSCC(nullptr), icfg(nullptr),
    chgraph(nullptr)
{
    pag = p;
    OnTheFlyIterBudgetForStat = Options::StatBudget();
    print_stat = Options::PStat();
    ptaImplTy = PTAImplTy::BaseImpl;
    alias_validation = (alias_check && Options::EnableAliasCheck());
}

◆ ~PointerAnalysis()

PointerAnalysis::~PointerAnalysis ( )

virtual

Destructor.

Destructor

Definition at line 83 of file PointerAnalysis.cpp.

{
    destroy();
    // do not delete the SVFIR for now
    //delete pag;
}

Member Function Documentation

◆ alias() [1/2]

virtual AliasResult SVF::PointerAnalysis::alias	(	const SVFVar *	V1,
		const SVFVar *	V2
	)

pure virtual

Interface exposed to users of our pointer analysis, given Value infos.

Implemented in SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

◆ alias() [2/2]

virtual AliasResult SVF::PointerAnalysis::alias	(	NodeID	node1,
		NodeID	node2
	)

pure virtual

Interface exposed to users of our pointer analysis, given PAGNodeID.

Implemented in SVF::CFLAlias, SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

◆ analyze()

virtual void SVF::PointerAnalysis::analyze ( )

pure virtual

Start Analysis here (main part of pointer analysis). It needs to be implemented in child class.

Implemented in SVF::CFLBase, SVF::ContextDDA, SVF::FlowDDA, SVF::AndersenBase, SVF::FlowSensitive, and SVF::TypeAnalysis.

◆ callGraphSCCDetection()

void SVF::PointerAnalysis::callGraphSCCDetection ( )

inline

PTACallGraph SCC related methods.

PTACallGraph SCC detection

Definition at line 346 of file PointerAnalysis.h.

    {
        if(callGraphSCC==nullptr)
            callGraphSCC = new CallGraphSCC(callgraph);
 
        callGraphSCC->find();
    }

◆ computeDDAPts()

virtual void SVF::PointerAnalysis::computeDDAPts ( NodeID )

inlinevirtual

Compute points-to results on-demand, overridden by derived classes.

Reimplemented in SVF::ContextDDA, and SVF::FlowDDA.

Definition at line 183 of file PointerAnalysis.h.

183{}

◆ connectVCallToVFns()

void PointerAnalysis::connectVCallToVFns	(	const CallICFGNode *	cs,
		const VFunSet &	vfns,
		CallEdgeMap &	newEdges
	)

Definition at line 466 of file PointerAnalysis.cpp.

{
    for (VFunSet::const_iterator fit = vfns.begin(),
            feit = vfns.end(); fit != feit; ++fit)
    {
        const FunObjVar* callee = *fit;
        callee = callee->getDefFunForMultipleModule();
        if (getIndCallMap()[cs].count(callee) > 0)
            continue;
        if(cs->arg_size() == callee->arg_size() ||
                (cs->isVarArg() && callee->isVarArg()))
        {
            newEdges[cs].insert(callee);
            getIndCallMap()[cs].insert(callee);
            const CallICFGNode* callBlockNode = cs;
            callgraph->addIndirectCallGraphEdge(callBlockNode, cs->getCaller(),callee);
        }
    }
}

◆ containBlackHoleNode()

bool SVF::PointerAnalysis::containBlackHoleNode ( const PointsTo & pts )

inline

Determine whether a points-to contains a black hole or constant node.

Definition at line 249 of file PointerAnalysis.h.

    {
        return pts.test(pag->getBlackHoleNode());
    }

◆ containConstantNode()

bool SVF::PointerAnalysis::containConstantNode ( const PointsTo & pts )

inline

Definition at line 253 of file PointerAnalysis.h.

    {
        return pts.test(pag->getConstantNode());
    }

◆ destroy()

void PointerAnalysis::destroy ( )

private

Release the memory.

Definition at line 91 of file PointerAnalysis.cpp.

{
    delete callgraph;
    callgraph = nullptr;
 
    delete callGraphSCC;
    callGraphSCC = nullptr;
 
    delete stat;
    stat = nullptr;
}

◆ disablePrintStat()

void SVF::PointerAnalysis::disablePrintStat ( )

inline

Whether print statistics.

Definition at line 319 of file PointerAnalysis.h.

    {
        print_stat = false;
    }

◆ dumpAllPts()

virtual void SVF::PointerAnalysis::dumpAllPts ( )

inlinevirtual

Reimplemented in SVF::BVDataPTAImpl.

Definition at line 215 of file PointerAnalysis.h.

215{}

◆ dumpAllTypes()

void PointerAnalysis::dumpAllTypes ( )

Definition at line 233 of file PointerAnalysis.cpp.

{
    for (OrderedNodeSet::iterator nIter = this->getAllValidPtrs().begin();
            nIter != this->getAllValidPtrs().end(); ++nIter)
    {
        const SVFVar* node = getPAG()->getSVFVar(*nIter);
        if (SVFUtil::isa<DummyObjVar, DummyValVar>(node))
            continue;
 
        outs() << "##<" << node->getName() << "> ";
        outs() << "Source Loc: " << node->getSourceLoc();
        outs() << "\nNodeID " << node->getId() << "\n";
 
        const SVFType* type = node->getType();
        pag->printFlattenFields(type);
    }
}

◆ dumpCPts()

virtual void SVF::PointerAnalysis::dumpCPts ( )

inlinevirtual

Reimplemented in SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, and SVF::BVDataPTAImpl.

Definition at line 216 of file PointerAnalysis.h.

216{}

◆ dumpPts()

void PointerAnalysis::dumpPts	(	NodeID	ptr,
		const PointsTo &	pts
	)

virtual

Dump points-to of top-level pointers (ValVar)

print the points-to set of node which has the maximum pts size.

Definition at line 254 of file PointerAnalysis.cpp.

{
 
    const SVFVar* node = pag->getSVFVar(ptr);
    if (SVFUtil::isa<DummyObjVar> (node))
    {
        outs() << "##<Dummy Obj > id:" << node->getId();
    }
    else if (!SVFUtil::isa<DummyValVar>(node) && !SVFIR::pagReadFromTXT())
    {
        outs() << "##<" << node->getName() << "> ";
        outs() << "Source Loc: " << node->getSourceLoc();
    }
    outs() << "\nPtr " << node->getId() << " ";
 
    if (pts.empty())
    {
        outs() << "\t\tPointsTo: {empty}\n\n";
    }
    else
    {
        outs() << "\t\tPointsTo: { ";
        for (PointsTo::iterator it = pts.begin(), eit = pts.end(); it != eit;
                ++it)
            outs() << *it << " ";
        outs() << "}\n\n";
    }
 
    outs() << "";
 
    for (PointsTo::iterator it = pts.begin(), eit = pts.end(); it != eit; ++it)
    {
        const SVFVar* node = pag->getSVFVar(*it);
        if(SVFUtil::isa<ObjVar>(node) == false)
            continue;
        NodeID ptd = node->getId();
        outs() << "!!Target NodeID " << ptd << "\t [";
        const SVFVar* pagNode = pag->getSVFVar(ptd);
        if (SVFUtil::isa<DummyValVar>(node))
            outs() << "DummyVal\n";
        else if (SVFUtil::isa<DummyObjVar>(node))
            outs() << "Dummy Obj id: " << node->getId() << "]\n";
        else
        {
            if (!SVFIR::pagReadFromTXT())
            {
                outs() << "<" << pagNode->getName() << "> ";
                outs() << "Source Loc: "
                       << pagNode->getSourceLoc() << "] \n";
            }
        }
    }
}

◆ dumpStat()

void PointerAnalysis::dumpStat ( )

Dump the statistics.

Definition at line 164 of file PointerAnalysis.cpp.

{
 
    if(print_stat && stat)
    {
        stat->performStat();
    }
}

◆ dumpTopLevelPtsTo()

virtual void SVF::PointerAnalysis::dumpTopLevelPtsTo ( )

inlinevirtual

Reimplemented in SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, SVF::Andersen, and SVF::BVDataPTAImpl.

Definition at line 214 of file PointerAnalysis.h.

214{}

◆ finalize()

void PointerAnalysis::finalize ( )

virtual

Finalization of a pointer analysis, including checking alias correctness.

Finalize the analysis after solving Given the alias results, verify whether it is correct or not using alias check functions

Print statistics

Dump results

Reimplemented in SVF::CFLAlias, SVF::CFLBase, SVF::CFLVF, SVF::CondPTAImpl< Cond >, SVF::CondPTAImpl< ContextCond >, SVF::Andersen, SVF::ContextDDA, SVF::FlowDDA, SVF::BVDataPTAImpl, SVF::AndersenBase, SVF::FlowSensitive, SVF::TypeAnalysis, and SVF::VersionedFlowSensitive.

Definition at line 177 of file PointerAnalysis.cpp.

{
 
    dumpStat();
 
    if (Options::PTSPrint())
    {
        dumpTopLevelPtsTo();
        //dumpAllPts();
        //dumpCPts();
    }
 
    if (Options::TypePrint())
        dumpAllTypes();
 
    if(Options::PTSAllPrint())
        dumpAllPts();
 
    if (Options::FuncPointerPrint())
        printIndCSTargets();
 
    getCallGraph()->verifyCallGraph();
 
    if (Options::CallGraphDotGraph())
        getCallGraph()->dump("callgraph_final");
 
    if(!pag->isBuiltFromFile() && alias_validation)
        validateTests();
 
    if (!Options::UsePreCompFieldSensitive())
        resetObjFieldSensitive();
}

◆ getAllFieldsObjVars()

virtual const NodeBS & SVF::PointerAnalysis::getAllFieldsObjVars ( NodeID id )

inlinevirtual

Definition at line 296 of file PointerAnalysis.h.

    {
        return pag->getAllFieldsObjVars(id);
    }

◆ getAllValidPtrs()

OrderedNodeSet & SVF::PointerAnalysis::getAllValidPtrs ( )

inline

Get all Valid Pointers for resolution.

Definition at line 165 of file PointerAnalysis.h.

    {
        return pag->getAllValidPtrs();
    }

◆ getAnalysisTy()

PTATY SVF::PointerAnalysis::getAnalysisTy ( ) const

inline

Type of pointer analysis.

Definition at line 139 of file PointerAnalysis.h.

    {
        return ptaTy;
    }

◆ getBaseObjVarID()

NodeID SVF::PointerAnalysis::getBaseObjVarID ( NodeID id )

inline

Definition at line 284 of file PointerAnalysis.h.

    {
        return pag->getBaseObjVarID(id);
    }

◆ getCallGraph()

CallGraph * SVF::PointerAnalysis::getCallGraph ( ) const

inline

Return call graph.

Definition at line 125 of file PointerAnalysis.h.

    {
        return callgraph;
    }

◆ getCallGraphSCC()

CallGraphSCC * SVF::PointerAnalysis::getCallGraphSCC ( ) const

inline

Return call graph SCC.

Definition at line 130 of file PointerAnalysis.h.

    {
        return callGraphSCC;
    }

◆ getCallGraphSCCRepNode()

NodeID SVF::PointerAnalysis::getCallGraphSCCRepNode ( NodeID id ) const

inline

Get SCC rep node of a SVFG node.

Definition at line 354 of file PointerAnalysis.h.

    {
        return callGraphSCC->repNode(id);
    }

◆ getCHGraph()

CommonCHGraph * SVF::PointerAnalysis::getCHGraph ( ) const

inline

get CHGraph

Definition at line 380 of file PointerAnalysis.h.

    {
        return chgraph;
    }

◆ getFIObjVar()

NodeID SVF::PointerAnalysis::getFIObjVar ( NodeID id )

inline

Definition at line 288 of file PointerAnalysis.h.

    {
        return pag->getFIObjVar(id);
    }

◆ getFunPtr()

NodeID SVF::PointerAnalysis::getFunPtr ( const CallICFGNode * cs ) const

inlineprotected

Return function pointer PAGNode at a callsite cs.

Definition at line 229 of file PointerAnalysis.h.

    {
        return pag->getFunPtr(cs);
    }

◆ getGepObjVar()

NodeID SVF::PointerAnalysis::getGepObjVar	(	NodeID	id,
		const APOffset &	ap
	)

inline

Definition at line 292 of file PointerAnalysis.h.

    {
        return pag->getGepObjVar(id, ap);
    }

◆ getICFG()

ICFG * SVF::PointerAnalysis::getICFG ( ) const

inline

Get ICFG.

Definition at line 115 of file PointerAnalysis.h.

    {
        return pag->getICFG();
    }

◆ getImplTy()

PTAImplTy SVF::PointerAnalysis::getImplTy ( ) const

inline

Return implementation type of the pointer analysis.

Definition at line 145 of file PointerAnalysis.h.

    {
        return ptaImplTy;
    }

◆ getIndCallMap()

CallEdgeMap & SVF::PointerAnalysis::getIndCallMap ( )

inline

Get callees from an indirect callsite.

Definition at line 326 of file PointerAnalysis.h.

    {
        return getCallGraph()->getIndCallMap();
    }

◆ getIndCSCallees()

const FunctionSet & SVF::PointerAnalysis::getIndCSCallees ( const CallICFGNode * cs ) const

inline

Definition at line 334 of file PointerAnalysis.h.

    {
        return getCallGraph()->getIndCSCallees(cs);
    }

◆ getIndirectCallsites()

const CallSiteToFunPtrMap & SVF::PointerAnalysis::getIndirectCallsites ( ) const

inlineprotected

Return all indirect callsites.

Definition at line 224 of file PointerAnalysis.h.

    {
        return pag->getIndirectCallsites();
    }

◆ getNumOfResolvedIndCallEdge()

u32_t SVF::PointerAnalysis::getNumOfResolvedIndCallEdge ( ) const

inline

Return number of resolved indirect call edges.

Definition at line 120 of file PointerAnalysis.h.

    {
        return getCallGraph()->getNumOfResolvedIndCallEdge();
    }

◆ getPAG()

SVFIR * SVF::PointerAnalysis::getPAG ( ) const

inline

Get/set SVFIR

Definition at line 152 of file PointerAnalysis.h.

    {
        return pag;
    }

◆ getPts()

virtual const PointsTo & SVF::PointerAnalysis::getPts ( NodeID ptr )

pure virtual

Get points-to targets of a pointer. It needs to be implemented in child class.

Implemented in SVF::Andersen, SVF::BVDataPTAImpl, SVF::Steensgaard, SVF::CondPTAImpl< Cond >, and SVF::CondPTAImpl< ContextCond >.

◆ getRevPts()

virtual const NodeSet & SVF::PointerAnalysis::getRevPts ( NodeID nodeId )

pure virtual

Given an object, get all the nodes having whose pointsto contains the object. Similar to getPts, this also needs to be implemented in child classes.

Implemented in SVF::CFLAlias, SVF::BVDataPTAImpl, SVF::CondPTAImpl< Cond >, and SVF::CondPTAImpl< ContextCond >.

◆ getStat()

PTAStat * SVF::PointerAnalysis::getStat ( ) const

inline

Get PTA stat.

Definition at line 159 of file PointerAnalysis.h.

    {
        return stat;
    }

◆ getVFnsFromCHA()

void PointerAnalysis::getVFnsFromCHA	(	const CallICFGNode *	cs,
		VFunSet &	vfns
	)

Definition at line 422 of file PointerAnalysis.cpp.

{
    if (chgraph->csHasVFnsBasedonCHA(cs))
        vfns = chgraph->getCSVFsBasedonCHA(cs);
}

◆ getVFnsFromPts()

void PointerAnalysis::getVFnsFromPts	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		VFunSet &	vfns
	)

Definition at line 431 of file PointerAnalysis.cpp.

{
 
    if (chgraph->csHasVtblsBasedonCHA(cs))
    {
        Set<const GlobalObjVar*> vtbls;
        const VTableSet &chaVtbls = chgraph->getCSVtblsBasedonCHA(cs);
        for (PointsTo::iterator it = target.begin(), eit = target.end(); it != eit; ++it)
        {
            const SVFVar* ptdnode = pag->getSVFVar(*it);
            const GlobalObjVar* pVar = nullptr;
            if (isa<ObjVar>(ptdnode) && isa<GlobalObjVar>(pag->getBaseObject(ptdnode->getId())))
            {
                pVar = cast<GlobalObjVar>(pag->getBaseObject(ptdnode->getId()));
 
            }
            else if (isa<ValVar>(ptdnode) &&
                     isa<GlobalValVar>(
                         pag->getBaseValVar(ptdnode->getId())))
            {
                pVar = cast<GlobalObjVar>(
                           SVFUtil::getObjVarOfValVar(cast<GlobalValVar>(
                                   pag->getBaseValVar(ptdnode->getId()))));
            }
 
            if (pVar && chaVtbls.find(pVar) != chaVtbls.end())
                vtbls.insert(pVar);
        }
        chgraph->getVFnsFromVtbls(cs, vtbls, vfns);
    }
}

◆ hasIndCSCallees()

bool SVF::PointerAnalysis::hasIndCSCallees ( const CallICFGNode * cs ) const

inline

Definition at line 330 of file PointerAnalysis.h.

    {
        return getCallGraph()->hasIndCSCallees(cs);
    }

◆ initialize()

void PointerAnalysis::initialize ( )

virtual

Initialization of a pointer analysis, including building symbol table and SVFIR etc.

Initialization of pointer analysis

initialise pta call graph for every pointer analysis instance

Reimplemented in SVF::CFLAlias, SVF::CFLVF, SVF::Andersen, SVF::AndersenWaveDiff, SVF::AndersenSFR, SVF::ContextDDA, SVF::FlowDDA, SVF::FSMPTA< SVFGGraph >, SVF::AndersenBase, SVF::FlowSensitive, SVF::TypeAnalysis, and SVF::VersionedFlowSensitive.

Definition at line 106 of file PointerAnalysis.cpp.

{
    assert(pag && "SVFIR has not been built!");
 
    chgraph = pag->getCHG();
 
    if(Options::EnableThreadCallGraph())
    {
        CallGraphBuilder bd;
        callgraph = bd.buildThreadCallGraph();
    }
    else
    {
        CallGraphBuilder bd;
        callgraph = bd.buildPTACallGraph();
    }
    callGraphSCCDetection();
 
    // dump callgraph
    if (Options::CallGraphDotGraph())
        getCallGraph()->dump("callgraph_initial");
}

◆ inSameCallGraphSCC()

bool SVF::PointerAnalysis::inSameCallGraphSCC	(	const FunObjVar *	fun1,
		const FunObjVar *	fun2
	)

inline

Return TRUE if this edge is inside a PTACallGraph SCC, i.e., src node and dst node are in the same SCC on the SVFG.

Definition at line 359 of file PointerAnalysis.h.

    {
        const CallGraphNode* src = callgraph->getCallGraphNode(fun1);
        const CallGraphNode* dst = callgraph->getCallGraphNode(fun2);
        return (getCallGraphSCCRepNode(src->getId()) == getCallGraphSCCRepNode(dst->getId()));
    }

◆ isArrayMemObj()

bool SVF::PointerAnalysis::isArrayMemObj ( NodeID id ) const

inline

Definition at line 270 of file PointerAnalysis.h.

    {
        const BaseObjVar* obj = pag->getBaseObject(id);
        assert(obj && "base object is null??");
        return obj->isArray();
    }

◆ isBlkObjOrConstantObj()

virtual bool SVF::PointerAnalysis::isBlkObjOrConstantObj ( NodeID ptd ) const

inlinevirtual

Definition at line 257 of file PointerAnalysis.h.

    {
        return pag->isBlkObjOrConstantObj(ptd);
    }

◆ isFieldInsensitive()

bool SVF::PointerAnalysis::isFieldInsensitive ( NodeID id ) const

inline

Definition at line 305 of file PointerAnalysis.h.

    {
        const BaseObjVar* baseObj = pag->getBaseObject(id);
        return baseObj->isFieldInsensitive();
    }

◆ isFIObjNode()

bool SVF::PointerAnalysis::isFIObjNode ( NodeID id ) const

inline

For field-sensitivity

Definition at line 280 of file PointerAnalysis.h.

    {
        return (SVFUtil::isa<BaseObjVar>(pag->getSVFVar(id)));
    }

◆ isHeapMemObj()

bool SVF::PointerAnalysis::isHeapMemObj ( NodeID id ) const

inline

Whether this object is heap or array.

Definition at line 265 of file PointerAnalysis.h.

    {
        return pag->getBaseObject(id) && SVFUtil::isa<HeapObjVar, DummyObjVar>(pag->getBaseObject(id));
    }

◆ isInRecursion()

bool SVF::PointerAnalysis::isInRecursion ( const FunObjVar * fun ) const

inline

Definition at line 365 of file PointerAnalysis.h.

    {
        return callGraphSCC->isInCycle(callgraph->getCallGraphNode(fun)->getId());
    }

◆ isLocalVarInRecursiveFun()

bool PointerAnalysis::isLocalVarInRecursiveFun ( NodeID id ) const

Whether a local variable is in function recursions.

Return TRUE if this node is a local variable of recursive function.

Definition at line 134 of file PointerAnalysis.cpp.

{
    const BaseObjVar* baseObjVar = pag->getBaseObject(id);
    assert(baseObjVar && "base object not found!!");
    if(SVFUtil::isa<StackObjVar>(baseObjVar))
    {
        if(const FunObjVar* svffun = pag->getSVFVar(id)->getFunction())
        {
            return callGraphSCC->isInCycle(getCallGraph()->getCallGraphNode(svffun)->getId());
        }
    }
    return false;
}

◆ mayAlias() [1/2]

bool SVF::PointerAnalysis::mayAlias	(	const SVFVar *	V1,
		const SVFVar *	V2
	)

inline

Convenience bool wrappers: return true if the two operands may/must/partial alias.

Definition at line 200 of file PointerAnalysis.h.

    {
        return alias(V1, V2)!= AliasResult::NoAlias;
    }

◆ mayAlias() [2/2]

bool SVF::PointerAnalysis::mayAlias	(	NodeID	node1,
		NodeID	node2
	)

inline

Definition at line 204 of file PointerAnalysis.h.

    {
        return alias(node1, node2)!= AliasResult::NoAlias;
    }

◆ printIndCSTargets() [1/2]

void PointerAnalysis::printIndCSTargets ( )

Print all indirect callsites

Definition at line 341 of file PointerAnalysis.cpp.

{
    outs() << "==================Function Pointer Targets==================\n";
    const CallEdgeMap& callEdges = getIndCallMap();
    CallEdgeMap::const_iterator it = callEdges.begin();
    CallEdgeMap::const_iterator eit = callEdges.end();
    for (; it != eit; ++it)
    {
        const CallICFGNode* cs = it->first;
        const FunctionSet& targets = it->second;
        printIndCSTargets(cs, targets);
    }
 
    const CallSiteToFunPtrMap& indCS = getIndirectCallsites();
    CallSiteToFunPtrMap::const_iterator csIt = indCS.begin();
    CallSiteToFunPtrMap::const_iterator csEit = indCS.end();
    for (; csIt != csEit; ++csIt)
    {
        const CallICFGNode* cs = csIt->first;
        if (hasIndCSCallees(cs) == false)
        {
            outs() << "\nNodeID: " << csIt->second;
            outs() << "\nCallSite: ";
            outs() << cs->toString();
            outs() << "\tLocation: " << cs->getSourceLoc();
            outs() << "\n\t!!!has no targets!!!\n";
        }
    }
}

◆ printIndCSTargets() [2/2]

void PointerAnalysis::printIndCSTargets	(	const CallICFGNode *	cs,
		const FunctionSet &	targets
	)

Print targets of a function pointer.

Print indirect call targets at an indirect callsite

Definition at line 312 of file PointerAnalysis.cpp.

{
    outs() << "\nNodeID: " << getFunPtr(cs);
    outs() << "\nCallSite: ";
    outs() << cs->toString();
    outs() << "\tLocation: " << cs->getSourceLoc();
    outs() << "\t with Targets: ";
 
    if (!targets.empty())
    {
        FunctionSet::const_iterator fit = targets.begin();
        FunctionSet::const_iterator feit = targets.end();
        for (; fit != feit; ++fit)
        {
            const FunObjVar* callee = *fit;
            outs() << "\n\t" << callee->getName();
        }
    }
    else
    {
        outs() << "\n\tNo Targets!";
    }
 
    outs() << "\n";
}

◆ printStat()

bool SVF::PointerAnalysis::printStat ( )

inline

Whether print statistics.

Definition at line 313 of file PointerAnalysis.h.

    {
        return print_stat;
    }

◆ PTAName()

virtual const std::string SVF::PointerAnalysis::PTAName ( ) const

inlinevirtual

Return PTA name.

Reimplemented in SVF::Andersen, SVF::ContextDDA, SVF::FlowDDA, SVF::FlowSensitive, and SVF::VersionedFlowSensitive.

Definition at line 374 of file PointerAnalysis.h.

    {
        return "Pointer Analysis";
    }

◆ resetObjFieldSensitive()

void PointerAnalysis::resetObjFieldSensitive ( )

protected

Reset all object node as field-sensitive.

Reset field sensitivity

Definition at line 151 of file PointerAnalysis.cpp.

{
    for (SVFIR::iterator nIter = pag->begin(); nIter != pag->end(); ++nIter)
    {
        if(ObjVar* node = SVFUtil::dyn_cast<ObjVar>(nIter->second))
            const_cast<BaseObjVar*>(pag->getBaseObject(node->getId()))->setFieldSensitive();
    }
}

◆ resolveCPPIndCalls()

void PointerAnalysis::resolveCPPIndCalls	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		CallEdgeMap &	newEdges
	)

virtual

Resolve cpp indirect call edges.

Definition at line 488 of file PointerAnalysis.cpp.

{
    assert(cs->isVirtualCall() && "not cpp virtual call");
 
    VFunSet vfns;
    if (Options::ConnectVCallOnCHA())
        getVFnsFromCHA(cs, vfns);
    else
        getVFnsFromPts(cs, target, vfns);
    connectVCallToVFns(cs, vfns, newEdges);
}

◆ resolveIndCalls()

void PointerAnalysis::resolveIndCalls	(	const CallICFGNode *	cs,
		const PointsTo &	target,
		CallEdgeMap &	newEdges
	)

virtual

Resolve indirect call edges.

Resolve indirect calls

discover indirect pointer target

Definition at line 376 of file PointerAnalysis.cpp.

{
 
    assert(pag->isIndirectCallSites(cs) && "not an indirect callsite?");
    for (PointsTo::iterator ii = target.begin(), ie = target.end();
            ii != ie; ii++)
    {
 
        if(getNumOfResolvedIndCallEdge() >= Options::IndirectCallLimit())
        {
            writeWrnMsg("Resolved Indirect Call Edges are Out-Of-Budget, please increase the limit");
            return;
        }
 
        if(const ObjVar* objPN = pag->getObjVar(*ii))
        {
            const BaseObjVar* obj = pag->getBaseObject(objPN->getId());
 
            if(obj->isFunction())
            {
                const FunObjVar* calleefun = SVFUtil::cast<FunObjVar>(obj)->getFunction();
                const FunObjVar* callee = calleefun->getDefFunForMultipleModule();
 
                if(SVFUtil::matchArgs(cs, callee) == false)
                    continue;
 
                if(0 == getIndCallMap()[cs].count(callee))
                {
                    newEdges[cs].insert(callee);
                    getIndCallMap()[cs].insert(callee);
 
                    callgraph->addIndirectCallGraphEdge(cs, cs->getCaller(), callee);
                    // FIXME: do we need to update llvm call graph here?
                    // The indirect call is maintained by ourself, We may update llvm's when we need to
                    //PTACallGraphNode* callgraphNode = callgraph->getOrInsertFunction(cs.getCaller());
                    //callgraphNode->addCalledFunction(cs,callgraph->getOrInsertFunction(callee));
                }
            }
        }
    }
}

◆ setObjFieldInsensitive()

void SVF::PointerAnalysis::setObjFieldInsensitive ( NodeID id )

inline

Definition at line 300 of file PointerAnalysis.h.

    {
        BaseObjVar* baseObj = const_cast<BaseObjVar*>(pag->getBaseObject(id));
        baseObj->setFieldInsensitive();
    }

◆ validateExpectedFailureTests()

void PointerAnalysis::validateExpectedFailureTests ( std::string fun )

protectedvirtual

Pointer analysis validator

Definition at line 569 of file PointerAnalysis.cpp.

{
 
    if (const FunObjVar* checkFun = pag->getFunObjVar(fun))
    {
        if(!checkFun->isUncalledFunction())
            outs() << "[" << this->PTAName() << "] Checking " << fun << "\n";
 
        for(const CallICFGNode* callNode : pag->getCallSiteSet())
        {
            if (callNode->getCalledFunction() == checkFun)
            {
                assert(callNode->arg_size() == 2
                       && "arguments should be two pointers!!");
                const SVFVar* V1 = callNode->getArgument(0);
                const SVFVar* V2 = callNode->getArgument(1);
                AliasResult aliasRes = alias(V1->getId(), V2->getId());
 
                bool expectedFailure = false;
                if (fun == aliasTestFailMayAlias || fun == aliasTestFailMayAliasMangled)
                {
                    // change to must alias when our analysis support it
                    if (aliasRes == AliasResult::NoAlias)
                        expectedFailure = true;
                }
                else if (fun == aliasTestFailNoAlias || fun == aliasTestFailNoAliasMangled)
                {
                    // change to partial alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::PartialAlias || aliasRes == AliasResult::MustAlias)
                        expectedFailure = true;
                }
                else
                    assert(false && "not supported alias check!!");
 
                NodeID id1 = V1->getId();
                NodeID id2 = V2->getId();
 
                if (expectedFailure)
                    outs() << sucMsg("\t EXPECTED-FAILURE :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                           << callNode->getSourceLoc() << ")\n";
                else
                {
                    SVFUtil::errs() << errMsg("\t UNEXPECTED FAILURE :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                                    << callNode->getSourceLoc() << ")\n";
                    assert(false && "test case failed!");
                }
            }
        }
    }
}

◆ validateSuccessTests()

void PointerAnalysis::validateSuccessTests ( std::string fun )

protectedvirtual

Find the alias check functions annotated in the C files check whether the alias analysis results consistent with the alias check function itself

Definition at line 504 of file PointerAnalysis.cpp.

{
    // check for must alias cases, whether our alias analysis produce the correct results
    if (const FunObjVar* checkFun = pag->getFunObjVar(fun))
    {
        if(!checkFun->isUncalledFunction())
            outs() << "[" << this->PTAName() << "] Checking " << fun << "\n";
 
        for(const CallICFGNode* callNode : pag->getCallSiteSet())
        {
            if (callNode->getCalledFunction() == checkFun)
            {
                assert(callNode->getNumArgOperands() == 2
                       && "arguments should be two pointers!!");
                const SVFVar* V1 = callNode->getArgument(0);
                const SVFVar* V2 = callNode->getArgument(1);
                AliasResult aliasRes = alias(V1->getId(), V2->getId());
 
                bool checkSuccessful = false;
                if (fun == aliasTestMayAlias || fun == aliasTestMayAliasMangled)
                {
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::MustAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestNoAlias || fun == aliasTestNoAliasMangled)
                {
                    if (aliasRes == AliasResult::NoAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestMustAlias || fun == aliasTestMustAliasMangled)
                {
                    // change to must alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias || aliasRes == AliasResult::MustAlias)
                        checkSuccessful = true;
                }
                else if (fun == aliasTestPartialAlias || fun == aliasTestPartialAliasMangled)
                {
                    // change to partial alias when our analysis support it
                    if (aliasRes == AliasResult::MayAlias)
                        checkSuccessful = true;
                }
                else
                    assert(false && "not supported alias check!!");
 
                NodeID id1 = V1->getId();
                NodeID id2 = V2->getId();
 
                if (checkSuccessful)
                    outs() << sucMsg("\t SUCCESS :") << fun << " check <id:" << id1 << ", id:" << id2 << "> at ("
                           << callNode->getSourceLoc() << ")\n";
                else
                {
                    SVFUtil::errs() << errMsg("\t FAILURE :") << fun
                                    << " check <id:" << id1 << ", id:" << id2
                                    << "> at (" << callNode->getSourceLoc() << ")\n";
                    assert(false && "test case failed!");
                }
            }
        }
    }
}

◆ validateTests()

void PointerAnalysis::validateTests ( )

protectedvirtual

Alias check functions to verify correctness of pointer analysis.

Validate test cases

Definition at line 215 of file PointerAnalysis.cpp.

{
    validateSuccessTests(aliasTestMayAlias);
    validateSuccessTests(aliasTestNoAlias);
    validateSuccessTests(aliasTestMustAlias);
    validateSuccessTests(aliasTestPartialAlias);
    validateExpectedFailureTests(aliasTestFailMayAlias);
    validateExpectedFailureTests(aliasTestFailNoAlias);
 
    validateSuccessTests(aliasTestMayAliasMangled);
    validateSuccessTests(aliasTestNoAliasMangled);
    validateSuccessTests(aliasTestMustAliasMangled);
    validateSuccessTests(aliasTestPartialAliasMangled);
    validateExpectedFailureTests(aliasTestFailMayAliasMangled);
    validateExpectedFailureTests(aliasTestFailNoAliasMangled);
}

Member Data Documentation

◆ alias_validation

bool SVF::PointerAnalysis::alias_validation

protected

Flag for validating points-to/alias results.

Definition at line 91 of file PointerAnalysis.h.

◆ aliasTestFailMayAlias

const std::string PointerAnalysis::aliasTestFailMayAlias = "EXPECTEDFAIL_MAYALIAS"

static

Definition at line 75 of file PointerAnalysis.h.

◆ aliasTestFailMayAliasMangled

const std::string PointerAnalysis::aliasTestFailMayAliasMangled = "_Z21EXPECTEDFAIL_MAYALIASPvS_"

static

Definition at line 76 of file PointerAnalysis.h.

◆ aliasTestFailNoAlias

const std::string PointerAnalysis::aliasTestFailNoAlias = "EXPECTEDFAIL_NOALIAS"

static

Definition at line 77 of file PointerAnalysis.h.

◆ aliasTestFailNoAliasMangled

const std::string PointerAnalysis::aliasTestFailNoAliasMangled = "_Z20EXPECTEDFAIL_NOALIASPvS_"

static

Definition at line 78 of file PointerAnalysis.h.

◆ aliasTestMayAlias

const std::string PointerAnalysis::aliasTestMayAlias = "MAYALIAS"

static

Definition at line 67 of file PointerAnalysis.h.

◆ aliasTestMayAliasMangled

const std::string PointerAnalysis::aliasTestMayAliasMangled = "_Z8MAYALIASPvS_"

static

Definition at line 68 of file PointerAnalysis.h.

◆ aliasTestMustAlias

const std::string PointerAnalysis::aliasTestMustAlias = "MUSTALIAS"

static

Definition at line 73 of file PointerAnalysis.h.

◆ aliasTestMustAliasMangled

const std::string PointerAnalysis::aliasTestMustAliasMangled = "_Z9MUSTALIASPvS_"

static

Definition at line 74 of file PointerAnalysis.h.

◆ aliasTestNoAlias

const std::string PointerAnalysis::aliasTestNoAlias = "NOALIAS"

static

Definition at line 69 of file PointerAnalysis.h.

◆ aliasTestNoAliasMangled

const std::string PointerAnalysis::aliasTestNoAliasMangled = "_Z7NOALIASPvS_"

static

Definition at line 70 of file PointerAnalysis.h.

◆ aliasTestPartialAlias

const std::string PointerAnalysis::aliasTestPartialAlias = "PARTIALALIAS"

static

Definition at line 71 of file PointerAnalysis.h.

◆ aliasTestPartialAliasMangled

const std::string PointerAnalysis::aliasTestPartialAliasMangled = "_Z12PARTIALALIASPvS_"

static

Definition at line 72 of file PointerAnalysis.h.

◆ callgraph

CallGraph* SVF::PointerAnalysis::callgraph

protected

Call graph used for pointer analysis.

Definition at line 105 of file PointerAnalysis.h.

◆ callGraphSCC

CallGraphSCC* SVF::PointerAnalysis::callGraphSCC

protected

SCC for PTACallGraph.

Definition at line 107 of file PointerAnalysis.h.

◆ chgraph

CommonCHGraph* SVF::PointerAnalysis::chgraph

protected

CHGraph.

Definition at line 111 of file PointerAnalysis.h.

◆ icfg

ICFG* SVF::PointerAnalysis::icfg

protected

Interprocedural control-flow graph.

Definition at line 109 of file PointerAnalysis.h.

◆ OnTheFlyIterBudgetForStat

u32_t SVF::PointerAnalysis::OnTheFlyIterBudgetForStat

protected

Flag for iteration budget for on-the-fly statistics.

Definition at line 93 of file PointerAnalysis.h.

◆ pag

SVFIR * PointerAnalysis::pag = nullptr

staticprotected

SVFIR.

Definition at line 97 of file PointerAnalysis.h.

◆ print_stat

bool SVF::PointerAnalysis::print_stat

protected

User input flags.

Flag for printing the statistic results

Definition at line 89 of file PointerAnalysis.h.

◆ ptaImplTy

PTAImplTy SVF::PointerAnalysis::ptaImplTy

protected

PTA implementation type.

Definition at line 101 of file PointerAnalysis.h.

◆ ptaTy

PTATY SVF::PointerAnalysis::ptaTy

protected

Pointer analysis Type.

Definition at line 99 of file PointerAnalysis.h.

◆ stat

PTAStat* SVF::PointerAnalysis::stat

protected

Statistics.

Definition at line 103 of file PointerAnalysis.h.

The documentation for this class was generated from the following files:

/home/runner/work/SVF/SVF/svf/include/MemoryModel/PointerAnalysis.h
/home/runner/work/SVF/SVF/svf/lib/MemoryModel/PointerAnalysis.cpp

Public Types

Public Member Functions

Static Public Attributes

Protected Attributes

Static Protected Attributes

Private Member Functions

Detailed Description

Member Typedef Documentation

◆ CallEdgeMap

◆ CallGraphSCC

◆ CallSiteSet

◆ CallSiteToFunPtrMap

◆ FunctionSet

◆ VFunSet

◆ VTableSet

Constructor & Destructor Documentation

◆ PointerAnalysis()

◆ ~PointerAnalysis()

Member Function Documentation

◆ alias() [1/2]

◆ alias() [2/2]

◆ analyze()

◆ callGraphSCCDetection()

◆ computeDDAPts()

◆ connectVCallToVFns()

◆ containBlackHoleNode()

◆ containConstantNode()

◆ destroy()

◆ disablePrintStat()

◆ dumpAllPts()

◆ dumpAllTypes()

◆ dumpCPts()

◆ dumpPts()

◆ dumpStat()

◆ dumpTopLevelPtsTo()

◆ finalize()

◆ getAllFieldsObjVars()

◆ getAllValidPtrs()

◆ getAnalysisTy()

◆ getBaseObjVarID()

◆ getCallGraph()

◆ getCallGraphSCC()

◆ getCallGraphSCCRepNode()

◆ getCHGraph()

◆ getFIObjVar()

◆ getFunPtr()

◆ getGepObjVar()

◆ getICFG()

◆ getImplTy()

◆ getIndCallMap()

◆ getIndCSCallees()

◆ getIndirectCallsites()

◆ getNumOfResolvedIndCallEdge()

◆ getPAG()

◆ getPts()

◆ getRevPts()

◆ getStat()

◆ getVFnsFromCHA()

◆ getVFnsFromPts()

◆ hasIndCSCallees()

◆ initialize()

◆ inSameCallGraphSCC()

◆ isArrayMemObj()

◆ isBlkObjOrConstantObj()

◆ isFieldInsensitive()

◆ isFIObjNode()

◆ isHeapMemObj()

◆ isInRecursion()

◆ isLocalVarInRecursiveFun()

◆ mayAlias() [1/2]

◆ mayAlias() [2/2]

◆ printIndCSTargets() [1/2]

◆ printIndCSTargets() [2/2]

◆ printStat()

◆ PTAName()

◆ resetObjFieldSensitive()

◆ resolveCPPIndCalls()

◆ resolveIndCalls()

◆ setObjFieldInsensitive()

◆ validateExpectedFailureTests()