proguard.analysis.cpa.jvm.domain.taint

Class JvmTaintExpandOperator

java.lang.Object

proguard.analysis.cpa.jvm.operators.JvmDefaultExpandOperator<TaintAbstractState>

proguard.analysis.cpa.jvm.domain.taint.JvmTaintExpandOperator

All Implemented Interfaces:

ExpandOperator<JvmCfaNode,JvmCfaEdge,MethodSignature>, JvmAbstractStateFactory<TaintAbstractState>

public class JvmTaintExpandOperator
extends JvmDefaultExpandOperator<TaintAbstractState>

This ExpandOperator inherits all the functionalities of a JvmDefaultExpandOperator and in addition taints the return values if the called function is a source.

Constructor Summary

Constructors

Constructor and Description
JvmTaintExpandOperator(JvmCfa cfa, java.util.Map<java.lang.String,TaintSource> fqnToSources) Create the operator specifying the taint sources.

Method Summary

Modifier and Type	Method and Description
protected java.util.List<TaintAbstractState>	calculateReturnValues(AbstractState reducedExitState, Instruction returnInstruction, Call call)
JvmAbstractState<TaintAbstractState>	expand(AbstractState expandedInitialState, AbstractState reducedExitState, JvmCfaNode blockEntryNode, Call call) Reconstructs the state of the caller of a procedure using the information of the expanded initial state, the reduced exit state, the block entry node (that can be used to retrieve the CFA subgraph of the function), and the call to the procedure.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface proguard.analysis.cpa.jvm.state.JvmAbstractStateFactory

createJvmAbstractState

Constructor Detail

JvmTaintExpandOperator

public JvmTaintExpandOperator(JvmCfa cfa,
                              java.util.Map<java.lang.String,TaintSource> fqnToSources)

Create the operator specifying the taint sources.

Parameters:

cfa - the control flow automaton of the analyzed program.

fqnToSources - a mapping from fully qualified names of methods to their TaintSource

Method Detail

expand

public JvmAbstractState<TaintAbstractState> expand(AbstractState expandedInitialState,
                                                   AbstractState reducedExitState,
                                                   JvmCfaNode blockEntryNode,
                                                   Call call)

Description copied from interface: ExpandOperator

Reconstructs the state of the caller of a procedure using the information of the expanded initial state, the reduced exit state, the block entry node (that can be used to retrieve the CFA subgraph of the function), and the call to the procedure.

Specified by:

expand in interface ExpandOperator<JvmCfaNode,JvmCfaEdge,MethodSignature>

Overrides:

expand in class JvmDefaultExpandOperator<TaintAbstractState>

Parameters:

expandedInitialState - the entry state of the called procedure before any reduction

reducedExitState - the state of the called procedure in its exit node

blockEntryNode - the entry node of the called procedure

call - the information of the call to the procedure

Returns:

The state of the caller after the procedure call, eventually with some collisions of identifiers that need the RebuildOperator to be solved

calculateReturnValues

protected java.util.List<TaintAbstractState> calculateReturnValues(AbstractState reducedExitState,
                                                                   Instruction returnInstruction,
                                                                   Call call)

Overrides:

calculateReturnValues in class JvmDefaultExpandOperator<TaintAbstractState>