soot.jimple.spark.ondemand

Class DemandCSPointsTo

java.lang.Object

soot.jimple.spark.ondemand.DemandCSPointsTo

All Implemented Interfaces:

PointsToAnalysis

public final class DemandCSPointsTo
extends java.lang.Object
implements PointsToAnalysis

Tries to find imprecision in points-to sets from a previously run analysis. Requires that all sub-results of previous analysis were cached.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	DemandCSPointsTo.AllocAndContextCache
protected static class	DemandCSPointsTo.CallingContextSet
protected static class	DemandCSPointsTo.CallSiteAndContext
protected static class	DemandCSPointsTo.CallSiteToTargetsMap
protected static class	DemandCSPointsTo.IncomingEdgeHandler
protected static class	DemandCSPointsTo.VarAndContext
protected static class	DemandCSPointsTo.VarContextAndUp

Field Summary

Fields

Modifier and Type	Field and Description
protected DemandCSPointsTo.AllocAndContextCache	allocAndContextCache
protected Stack<Pair<java.lang.Integer,ImmutableStack<java.lang.Integer>>>	callGraphStack
protected DemandCSPointsTo.CallSiteToTargetsMap	callSiteToResolvedTargets
protected java.util.HashMap<java.util.List<java.lang.Object>,java.util.Set<SootMethod>>	callTargetsArgCache
protected Stack<DemandCSPointsTo.VarAndContext>	contextForAllocsStack
protected java.util.Map<DemandCSPointsTo.VarAndContext,Pair<PointsToSetInternal,AllocAndContextSet>>	contextsForAllocsCache
protected ContextSensitiveInfo	csInfo
static boolean	DEBUG
protected static int	DEBUG_NESTING
protected static int	DEBUG_PASS
protected static boolean	DEBUG_VIRT
protected static boolean	DEFAULT_LAZY
protected static int	DEFAULT_MAX_PASSES
protected static int	DEFAULT_MAX_TRAVERSAL
protected boolean	doPointsTo if true, compute full points-to set for queried variable
protected static ImmutableStack<java.lang.Integer>	EMPTY_CALLSTACK
protected FieldCheckHeuristic	fieldCheckHeuristic
protected SootUtil.FieldToEdgesMap	fieldToLoads
protected SootUtil.FieldToEdgesMap	fieldToStores
protected HeuristicType	heuristicType
protected int	maxNodesPerPass
protected int	maxPasses
protected int	nesting
protected int	numNodesTraversed
protected int	numPasses
protected PAG	pag
protected AllocAndContextSet	pointsTo
protected java.util.Set<DemandCSPointsTo.CallSiteAndContext>	queriedCallSites
protected java.util.Map<Local,PointsToSet>	reachingObjectsCache
protected java.util.Map<Local,PointsToSet>	reachingObjectsCacheNoCGRefinement
protected int	recursionDepth
protected boolean	refiningCallSite
protected OTFMethodSCCManager	sccManager
protected java.util.Map<DemandCSPointsTo.VarContextAndUp,java.util.Map<AllocAndContext,DemandCSPointsTo.CallingContextSet>>	upContextCache
protected boolean	useCache
protected ValidMatches	vMatches

Fields inherited from interface soot.PointsToAnalysis

ARRAY_ELEMENTS_NODE, CANONICAL_PATH, CANONICAL_PATH_LOCAL, CAST_NODE, DEFAULT_CLASS_LOADER, DEFAULT_CLASS_LOADER_LOCAL, EXCEPTION_NODE, FINALIZE_QUEUE, MAIN_CLASS_NAME_STRING, MAIN_CLASS_NAME_STRING_LOCAL, MAIN_THREAD_GROUP_NODE, MAIN_THREAD_GROUP_NODE_LOCAL, MAIN_THREAD_NODE, MAIN_THREAD_NODE_LOCAL, PHI_NODE, PRIVILEGED_ACTION_EXCEPTION, PRIVILEGED_ACTION_EXCEPTION_LOCAL, RETURN_NODE, RETURN_STRING_CONSTANT_NODE, STRING_ARRAY_NODE, STRING_ARRAY_NODE_LOCAL, STRING_NODE, STRING_NODE_LOCAL, THIS_NODE, THROW_NODE

Constructor Summary

Constructors

Constructor and Description
DemandCSPointsTo(ContextSensitiveInfo csInfo, PAG pag)
DemandCSPointsTo(ContextSensitiveInfo csInfo, PAG pag, int maxTraversal, int maxPasses, boolean lazy)

Method Summary

Modifier and Type	Method and Description
protected boolean	callEdgeInSCC(AssignEdge assignEdge)
protected DemandCSPointsTo.CallingContextSet	checkAllocAndContextCache(AllocAndContext allocAndContext, VarNode targetVar)
protected PointsToSetInternal	checkContextsForAllocsCache(DemandCSPointsTo.VarAndContext varAndContext, AllocAndContextSet ret, PointsToSetInternal locs)
protected boolean	checkP2Set(VarNode v, HeuristicType heuristic, Predicate<java.util.Set<AllocAndContext>> p2setPred) check the computed points-to set of a variable against some predicate
protected DemandCSPointsTo.CallingContextSet	checkUpContextCache(DemandCSPointsTo.VarContextAndUp varContextAndUp, AllocAndContext allocAndContext)
void	clearCache() clears the cache
protected void	clearState()
protected java.util.Set<VarNode>	computeFlowsTo(AllocNode alloc, HeuristicType heuristic) compute a flows-to set for an allocation site.
protected PointsToSet	computeReachingObjects(Local l) Computes the possibly refined set of reaching objects for l.
protected PointsToSet	computeRefinedReachingObjects(VarNode v) Computes the refined set of reaching objects for l.
protected void	debugPrint(java.lang.String str)
void	disableCache() disables caching
PointsToSet	doReachingObjects(Local l)
protected void	dumpPathForLoc(VarNode v, AllocNode badLoc, java.lang.String filePrefix)
void	enableCache() enables caching
protected java.util.Collection<AssignEdge>	filterAssigns(VarNode v, ImmutableStack<java.lang.Integer> callingContext, boolean forward, boolean refineVirtCalls)
protected AllocAndContextSet	findContextsForAllocs(DemandCSPointsTo.VarAndContext varAndContext, PointsToSetInternal locs)
protected DemandCSPointsTo.CallingContextSet	findUpContextsForVar(AllocAndContext allocAndContext, DemandCSPointsTo.VarContextAndUp varContextAndUp)
protected DemandCSPointsTo.CallingContextSet	findVarContextsFromAlloc(AllocAndContext allocAndContext, VarNode targetVar)
protected java.util.Set<SootMethod>	getCallTargets(PointsToSetInternal p2Set, NumberedString methodStr, Type receiverType, java.util.Set<SootMethod> possibleTargets)
protected java.util.Set<SootMethod>	getCallTargetsForType(Type type, NumberedString methodStr, Type receiverType, java.util.Set<SootMethod> possibleTargets)
protected java.util.Set<VarNode>	getFlowsToHelper(AllocAndContext allocAndContext)
HeuristicType	getHeuristicType()
protected int	getMaxPasses()
PAG	getPAG()
protected void	incrementNodesTraversed()
protected boolean	isRecursive(ImmutableStack<java.lang.Integer> context, AssignEdge assignEdge)
protected boolean	isRecursiveCallSite(java.lang.Integer callSite)
boolean	isRefineCallGraph()
static DemandCSPointsTo	makeDefault() Make a default analysis.
static DemandCSPointsTo	makeWithBudget(int maxTraversal, int maxPasses, boolean lazy)
protected java.util.Set<VarNode>	nodesPropagatedThrough(VarNode source, PointsToSetInternal allocs)
protected ImmutableStack<java.lang.Integer>	popRecursiveCallSites(ImmutableStack<java.lang.Integer> context)
protected void	processIncomingEdges(DemandCSPointsTo.IncomingEdgeHandler h, Stack<DemandCSPointsTo.VarAndContext> worklist)
protected ImmutableStack<java.lang.Integer>	pushWithRecursionCheck(ImmutableStack<java.lang.Integer> context, AssignEdge assignEdge)
PointsToSet	reachingObjects(Context c, Local l) Currently not implemented.
PointsToSet	reachingObjects(Context c, Local l, SootField f) Currently not implemented.
PointsToSet	reachingObjects(Local l) Returns the set of objects pointed to by variable l.
PointsToSet	reachingObjects(Local l, SootField f) Currently not implemented.
PointsToSet	reachingObjects(PointsToSet s, SootField f) Currently not implemented.
PointsToSet	reachingObjects(SootField f) Currently not implemented.
PointsToSet	reachingObjectsOfArrayElement(PointsToSet s) Currently not implemented.
protected boolean	refineAlias(VarNode v1, VarNode v2, PointsToSetInternal intersection, HeuristicType heuristic)
protected boolean	refineAliasInternal(VarNode v1, VarNode v2, PointsToSetInternal intersection, HeuristicType heuristic)
protected java.util.Set<SootMethod>	refineCallSite(java.lang.Integer callSite, ImmutableStack<java.lang.Integer> origContext)
protected boolean	refineP2Set(DemandCSPointsTo.VarAndContext varAndContext, PointsToSetInternal badLocs)
protected boolean	refineP2Set(VarNode v, PointsToSetInternal badLocs, HeuristicType heuristic)
void	setHeuristicType(HeuristicType heuristicType)
void	setRefineCallGraph(boolean refineCallGraph)
boolean	usesCache()
protected boolean	weirdCall(java.lang.Integer callSite)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEBUG

public static boolean DEBUG

DEBUG_NESTING

protected static final int DEBUG_NESTING

See Also:

Constant Field Values

DEBUG_PASS

protected static final int DEBUG_PASS

See Also:

Constant Field Values

DEBUG_VIRT

protected static final boolean DEBUG_VIRT

DEFAULT_MAX_PASSES

protected static final int DEFAULT_MAX_PASSES

See Also:

Constant Field Values

DEFAULT_MAX_TRAVERSAL

protected static final int DEFAULT_MAX_TRAVERSAL

See Also:

Constant Field Values

DEFAULT_LAZY

protected static final boolean DEFAULT_LAZY

See Also:

Constant Field Values

EMPTY_CALLSTACK

protected static final ImmutableStack<java.lang.Integer> EMPTY_CALLSTACK

allocAndContextCache

protected final DemandCSPointsTo.AllocAndContextCache allocAndContextCache

callGraphStack

protected Stack<Pair<java.lang.Integer,ImmutableStack<java.lang.Integer>>> callGraphStack

callSiteToResolvedTargets

protected final DemandCSPointsTo.CallSiteToTargetsMap callSiteToResolvedTargets

callTargetsArgCache

protected java.util.HashMap<java.util.List<java.lang.Object>,java.util.Set<SootMethod>> callTargetsArgCache

contextForAllocsStack

protected final Stack<DemandCSPointsTo.VarAndContext> contextForAllocsStack

contextsForAllocsCache

protected java.util.Map<DemandCSPointsTo.VarAndContext,Pair<PointsToSetInternal,AllocAndContextSet>> contextsForAllocsCache

csInfo

protected final ContextSensitiveInfo csInfo

doPointsTo

protected boolean doPointsTo

if true, compute full points-to set for queried variable

fieldCheckHeuristic

protected FieldCheckHeuristic fieldCheckHeuristic

heuristicType

protected HeuristicType heuristicType

fieldToLoads

protected SootUtil.FieldToEdgesMap fieldToLoads

fieldToStores

protected SootUtil.FieldToEdgesMap fieldToStores

maxNodesPerPass

protected final int maxNodesPerPass

maxPasses

protected final int maxPasses

nesting

protected int nesting

numNodesTraversed

protected int numNodesTraversed

numPasses

protected int numPasses

pag

protected final PAG pag

pointsTo

protected AllocAndContextSet pointsTo

queriedCallSites

protected final java.util.Set<DemandCSPointsTo.CallSiteAndContext> queriedCallSites

recursionDepth

protected int recursionDepth

refiningCallSite

protected boolean refiningCallSite

sccManager

protected OTFMethodSCCManager sccManager

upContextCache

protected java.util.Map<DemandCSPointsTo.VarContextAndUp,java.util.Map<AllocAndContext,DemandCSPointsTo.CallingContextSet>> upContextCache

vMatches

protected ValidMatches vMatches

reachingObjectsCache

protected java.util.Map<Local,PointsToSet> reachingObjectsCache

reachingObjectsCacheNoCGRefinement

protected java.util.Map<Local,PointsToSet> reachingObjectsCacheNoCGRefinement

useCache

protected boolean useCache

Constructor Detail

DemandCSPointsTo

public DemandCSPointsTo(ContextSensitiveInfo csInfo,
                        PAG pag)

DemandCSPointsTo

public DemandCSPointsTo(ContextSensitiveInfo csInfo,
                        PAG pag,
                        int maxTraversal,
                        int maxPasses,
                        boolean lazy)

Method Detail

makeDefault

public static DemandCSPointsTo makeDefault()

Make a default analysis. Assumes Spark has already run.

Returns:

makeWithBudget

public static DemandCSPointsTo makeWithBudget(int maxTraversal,
                                              int maxPasses,
                                              boolean lazy)

reachingObjects

public PointsToSet reachingObjects(Local l)

Description copied from interface: PointsToAnalysis

Returns the set of objects pointed to by variable l.

Specified by:

reachingObjects in interface PointsToAnalysis

doReachingObjects

public PointsToSet doReachingObjects(Local l)

computeReachingObjects

protected PointsToSet computeReachingObjects(Local l)

Computes the possibly refined set of reaching objects for l.

computeRefinedReachingObjects

protected PointsToSet computeRefinedReachingObjects(VarNode v)

Computes the refined set of reaching objects for l. Returns null if refinement failed.

callEdgeInSCC

protected boolean callEdgeInSCC(AssignEdge assignEdge)

checkAllocAndContextCache

protected DemandCSPointsTo.CallingContextSet checkAllocAndContextCache(AllocAndContext allocAndContext,
                                                                       VarNode targetVar)

checkContextsForAllocsCache

protected PointsToSetInternal checkContextsForAllocsCache(DemandCSPointsTo.VarAndContext varAndContext,
                                                          AllocAndContextSet ret,
                                                          PointsToSetInternal locs)

checkP2Set

protected boolean checkP2Set(VarNode v,
                             HeuristicType heuristic,
                             Predicate<java.util.Set<AllocAndContext>> p2setPred)

check the computed points-to set of a variable against some predicate

Parameters:

v - the variable

heuristic - how to refine match edges

p2setPred - the predicate on the points-to set

Returns:

true if the p2setPred holds for the computed points-to set, or if a points-to set cannot be computed in the budget; false otherwise

checkUpContextCache

protected DemandCSPointsTo.CallingContextSet checkUpContextCache(DemandCSPointsTo.VarContextAndUp varContextAndUp,
                                                                 AllocAndContext allocAndContext)

clearState

protected void clearState()

computeFlowsTo

protected java.util.Set<VarNode> computeFlowsTo(AllocNode alloc,
                                                HeuristicType heuristic)

compute a flows-to set for an allocation site. for now, we use a simple refinement strategy; just refine as much as possible, maintaining the smallest set of flows-to vars

Parameters:

alloc -

heuristic -

Returns:

debugPrint

protected void debugPrint(java.lang.String str)

dumpPathForLoc

protected void dumpPathForLoc(VarNode v,
                              AllocNode badLoc,
                              java.lang.String filePrefix)

filterAssigns

protected java.util.Collection<AssignEdge> filterAssigns(VarNode v,
                                                         ImmutableStack<java.lang.Integer> callingContext,
                                                         boolean forward,
                                                         boolean refineVirtCalls)

findContextsForAllocs

protected AllocAndContextSet findContextsForAllocs(DemandCSPointsTo.VarAndContext varAndContext,
                                                   PointsToSetInternal locs)

findUpContextsForVar

protected DemandCSPointsTo.CallingContextSet findUpContextsForVar(AllocAndContext allocAndContext,
                                                                  DemandCSPointsTo.VarContextAndUp varContextAndUp)

findVarContextsFromAlloc

protected DemandCSPointsTo.CallingContextSet findVarContextsFromAlloc(AllocAndContext allocAndContext,
                                                                      VarNode targetVar)

getCallTargets

protected java.util.Set<SootMethod> getCallTargets(PointsToSetInternal p2Set,
                                                   NumberedString methodStr,
                                                   Type receiverType,
                                                   java.util.Set<SootMethod> possibleTargets)

getCallTargetsForType

protected java.util.Set<SootMethod> getCallTargetsForType(Type type,
                                                          NumberedString methodStr,
                                                          Type receiverType,
                                                          java.util.Set<SootMethod> possibleTargets)

getFlowsToHelper

protected java.util.Set<VarNode> getFlowsToHelper(AllocAndContext allocAndContext)

getMaxPasses

protected int getMaxPasses()

incrementNodesTraversed

protected void incrementNodesTraversed()

isRecursive

protected boolean isRecursive(ImmutableStack<java.lang.Integer> context,
                              AssignEdge assignEdge)

isRecursiveCallSite

protected boolean isRecursiveCallSite(java.lang.Integer callSite)

nodesPropagatedThrough

protected java.util.Set<VarNode> nodesPropagatedThrough(VarNode source,
                                                        PointsToSetInternal allocs)

popRecursiveCallSites

protected ImmutableStack<java.lang.Integer> popRecursiveCallSites(ImmutableStack<java.lang.Integer> context)

processIncomingEdges

protected void processIncomingEdges(DemandCSPointsTo.IncomingEdgeHandler h,
                                    Stack<DemandCSPointsTo.VarAndContext> worklist)

pushWithRecursionCheck

protected ImmutableStack<java.lang.Integer> pushWithRecursionCheck(ImmutableStack<java.lang.Integer> context,
                                                                   AssignEdge assignEdge)

refineAlias

protected boolean refineAlias(VarNode v1,
                              VarNode v2,
                              PointsToSetInternal intersection,
                              HeuristicType heuristic)

refineAliasInternal

protected boolean refineAliasInternal(VarNode v1,
                                      VarNode v2,
                                      PointsToSetInternal intersection,
                                      HeuristicType heuristic)

refineCallSite

protected java.util.Set<SootMethod> refineCallSite(java.lang.Integer callSite,
                                                   ImmutableStack<java.lang.Integer> origContext)

refineP2Set

protected boolean refineP2Set(DemandCSPointsTo.VarAndContext varAndContext,
                              PointsToSetInternal badLocs)

refineP2Set

protected boolean refineP2Set(VarNode v,
                              PointsToSetInternal badLocs,
                              HeuristicType heuristic)

weirdCall

protected boolean weirdCall(java.lang.Integer callSite)

reachingObjects

public PointsToSet reachingObjects(Context c,
                                   Local l)

Currently not implemented.

Specified by:

reachingObjects in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

reachingObjects

public PointsToSet reachingObjects(Context c,
                                   Local l,
                                   SootField f)

Currently not implemented.

Specified by:

reachingObjects in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

reachingObjects

public PointsToSet reachingObjects(Local l,
                                   SootField f)

Currently not implemented.

Specified by:

reachingObjects in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

reachingObjects

public PointsToSet reachingObjects(PointsToSet s,
                                   SootField f)

Currently not implemented.

Specified by:

reachingObjects in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

reachingObjects

public PointsToSet reachingObjects(SootField f)

Currently not implemented.

Specified by:

reachingObjects in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

reachingObjectsOfArrayElement

public PointsToSet reachingObjectsOfArrayElement(PointsToSet s)

Currently not implemented.

Specified by:

reachingObjectsOfArrayElement in interface PointsToAnalysis

Throws:

java.lang.UnsupportedOperationException - always

getPAG

public PAG getPAG()

Returns:

returns the (SPARK) pointer assignment graph

usesCache

public boolean usesCache()

Returns:

true is caching is enabled

enableCache

public void enableCache()

enables caching

disableCache

public void disableCache()

disables caching

clearCache

public void clearCache()

clears the cache

isRefineCallGraph

public boolean isRefineCallGraph()

setRefineCallGraph

public void setRefineCallGraph(boolean refineCallGraph)

getHeuristicType

public HeuristicType getHeuristicType()

setHeuristicType

public void setHeuristicType(HeuristicType heuristicType)