soot.jimple.spark.geom.geomPA

Class GeomQueries

java.lang.Object

soot.jimple.spark.geom.geomPA.GeomQueries

public class GeomQueries
extends java.lang.Object

A powerful interface for querying points-to results in many ways. It is an extension for SPARK standard querying system.

Author:

xiao

Field Summary

Fields

Modifier and Type	Field and Description
protected int[]	block_num
protected CgEdge[]	call_graph
protected ContextsCollector[]	contextsForMethods
protected GeomPointsTo	geomPts
protected int[]	in_degree
protected long[]	max_context_size_block
protected int	n_func
protected int[]	rep_cg
protected int[]	top_rank
protected java.util.Queue<java.lang.Integer>	topQ
protected int[]	vis_cg

Constructor Summary

Constructors

Constructor and Description
GeomQueries(GeomPointsTo geom_pts) We copy and make a condensed version of call graph.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	contexsByAnyCallEdge(Edge sootEdge, Local l, PtSensVisitor visitor) Usually, users specify the last K paths as the context.
boolean	contextByCallChain(Edge[] callEdgeChain, Local l, SparkField field, PtSensVisitor visitor) Standard K-CFA querying for field expression.
boolean	contextsByAnyCallEdge(Edge sootEdge, Local l, SparkField field, PtSensVisitor visitor) Searching the points-to results for field expression such as p.f.
boolean	contextsByCallChain(Edge[] callEdgeChain, Local l, PtSensVisitor visitor) Standard K-CFA querying for arbitrary K.
protected boolean	dfsScanSubgraph(int s, int target) Retrieve the subgraph from s->target.
boolean	isAlias(IVarAbstraction pn1, IVarAbstraction pn2) Test if two pointers given in geomPTA form are an alias under any contexts.
boolean	isAlias(Local l1, Local l2) Decide if under any contexts, pointers @param l1 and @param l2 can be an alias.
boolean	isAliasCI(Local l1, Local l2) Are the two pointers an alias with context insensitive points-to information?
protected boolean	propagateIntervals(int start, long L, long R, int target) Compute the mapping from interval [L, R) of method start to the intervals of method target.
protected void	transferInSCC(int s, int t, long L, long R, ContextsCollector tContexts)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

geomPts

protected GeomPointsTo geomPts

n_func

protected int n_func

call_graph

protected CgEdge[] call_graph

vis_cg

protected int[] vis_cg

rep_cg

protected int[] rep_cg

top_rank

protected int[] top_rank

block_num

protected int[] block_num

max_context_size_block

protected long[] max_context_size_block

topQ

protected java.util.Queue<java.lang.Integer> topQ

in_degree

protected int[] in_degree

contextsForMethods

protected ContextsCollector[] contextsForMethods

Constructor Detail

GeomQueries

public GeomQueries(GeomPointsTo geom_pts)

We copy and make a condensed version of call graph.

Parameters:

geom_pts -

Method Detail

dfsScanSubgraph

protected boolean dfsScanSubgraph(int s,
                      int target)

Retrieve the subgraph from s->target. An edge s->t is included in the subgraph iff target is reachable from t.

Parameters:

s -

target -

Returns:

transferInSCC

protected void transferInSCC(int s,
                 int t,
                 long L,
                 long R,
                 ContextsCollector tContexts)

propagateIntervals

protected boolean propagateIntervals(int start,
                         long L,
                         long R,
                         int target)

Compute the mapping from interval [L, R) of method start to the intervals of method target. Return true if the mapping is feasible.

Parameters:

start -

L -

R -

target -

Returns:

contexsByAnyCallEdge

public boolean contexsByAnyCallEdge(Edge sootEdge,
                           Local l,
                           PtSensVisitor visitor)

Usually, users specify the last K paths as the context. We call it k-CFA context. However, k-CFA is too restrictive, users want to specify the call edges anywhere in the context path. A common usage is specifying only one edge in the context path. We implement this common usage here.

Parameters:

sootEdge: - the specified context edge in soot edge format

l: - the querying pointer

visitor: - container for querying result

Returns:

false, l does not have points-to information under the contexts induced by the given call edge

contextsByAnyCallEdge

public boolean contextsByAnyCallEdge(Edge sootEdge,
                            Local l,
                            SparkField field,
                            PtSensVisitor visitor)

Searching the points-to results for field expression such as p.f.

Parameters:

sootEdge -

l -

field -

visitor -

Returns:

contextsByCallChain

public boolean contextsByCallChain(Edge[] callEdgeChain,
                          Local l,
                          PtSensVisitor visitor)

Standard K-CFA querying for arbitrary K.

Parameters:

callEdgeChain: - last K call edges leading to the method that contains l. callEdgeChain[0] is the farthest call edge in the chain.

l: - the querying pointer

visitor: - the querying result container

Returns:

false, l does not have points-to information under the given context

contextByCallChain

public boolean contextByCallChain(Edge[] callEdgeChain,
                         Local l,
                         SparkField field,
                         PtSensVisitor visitor)

Standard K-CFA querying for field expression.

Parameters:

callEdgeChain: - callEdgeChain[0] is the farthest call edge in the chain.

l -

field -

visitor -

Returns:

isAliasCI

public boolean isAliasCI(Local l1,
                Local l2)

Are the two pointers an alias with context insensitive points-to information?

isAlias

public boolean isAlias(IVarAbstraction pn1,
              IVarAbstraction pn2)

Test if two pointers given in geomPTA form are an alias under any contexts.

Parameters:

pn1 - and @param pn2 cannot be null.

isAlias

public boolean isAlias(Local l1,
              Local l2)

Decide if under any contexts, pointers @param l1 and @param l2 can be an alias.