proguard.analysis.cpa.jvm.domain.taint

Class JvmTaintMemoryLocationBamCpaRun

java.lang.Object

proguard.analysis.cpa.defaults.CpaRun<CpaT,AbstractStateT>

proguard.analysis.cpa.defaults.SequentialCpaRun<JvmMemoryLocationCpa<AbstractStateT>,JvmMemoryLocationAbstractState,ArgBamCpaRun<CpaT,? extends ProgramLocationDependent<JvmCfaNode,JvmCfaEdge,MethodSignature>,JvmCfaNode,JvmCfaEdge,MethodSignature>>

proguard.analysis.cpa.jvm.domain.memory.JvmMemoryLocationBamCpaRun<SimpleCpa,TaintAbstractState>

proguard.analysis.cpa.jvm.domain.taint.JvmTaintMemoryLocationBamCpaRun

All Implemented Interfaces:

TraceExtractor<TaintAbstractState>

public class JvmTaintMemoryLocationBamCpaRun
extends JvmMemoryLocationBamCpaRun<SimpleCpa,TaintAbstractState>

This run wraps the execution of BAM JvmMemoryLocationCpa.

Field Summary

Fields inherited from class proguard.analysis.cpa.jvm.domain.memory.JvmMemoryLocationBamCpaRun

threshold

Fields inherited from class proguard.analysis.cpa.defaults.SequentialCpaRun

inputCpaRun, inputReachedSet, outputReachedSet

Fields inherited from class proguard.analysis.cpa.defaults.CpaRun

abortOperator, cpa

Constructor Summary

Constructors

Constructor and Description
JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa, java.util.Set<? extends TaintSource> taintSources, MethodSignature mainSignature, int maxCallStackDepth, HeapModel heapModel, TaintAbstractState threshold, java.util.Collection<? extends JvmTaintSink> taintSinks) Create a traced taint CPA run without premature termination.
JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa, java.util.Set<? extends TaintSource> taintSources, MethodSignature mainSignature, int maxCallStackDepth, HeapModel heapModel, TaintAbstractState threshold, java.util.Collection<? extends JvmTaintSink> taintSinks, AbortOperator abortOperator) Create a traced taint CPA run.
JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa, java.util.Set<? extends TaintSource> taintSources, MethodSignature mainSignature, int maxCallStackDepth, TaintAbstractState threshold, java.util.Collection<? extends JvmTaintSink> taintSinks) Create a traced taint CPA run with a simple heap and no premature termination.
JvmTaintMemoryLocationBamCpaRun(JvmTaintBamCpaRun jvmTaintCpaRun, TaintAbstractState threshold, java.util.Collection<? extends JvmTaintSink> taintSinks) Create a traced taint CPA run.

Method Summary

Modifier and Type	Method and Description
java.util.Set<JvmMemoryLocation>	getEndPoints() Returns endpoints or the extracted traces.
java.util.List<JvmMemoryLocationAbstractState>	getInitialStates() Returns a collection of initial AbstractStates.

Methods inherited from class proguard.analysis.cpa.jvm.domain.memory.JvmMemoryLocationBamCpaRun

createReachedSet, getOutputReachedSet

Methods inherited from class proguard.analysis.cpa.defaults.SequentialCpaRun

execute

Methods inherited from class proguard.analysis.cpa.defaults.CpaRun

createWaitlist, getAbortOperator, getCpa

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface proguard.analysis.cpa.jvm.domain.memory.TraceExtractor

extractLinearTraces, removeDuplicateProgramLocations, traceExtractionIteration

Constructor Detail

JvmTaintMemoryLocationBamCpaRun

public JvmTaintMemoryLocationBamCpaRun(JvmTaintBamCpaRun jvmTaintCpaRun,
                                       TaintAbstractState threshold,
                                       java.util.Collection<? extends JvmTaintSink> taintSinks)

Create a traced taint CPA run.

Parameters:

jvmTaintCpaRun - an intraprocedural taint CPA run

threshold - a cut-off threshold

taintSinks - a collection of taint sinks

JvmTaintMemoryLocationBamCpaRun

public JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa,
                                       java.util.Set<? extends TaintSource> taintSources,
                                       MethodSignature mainSignature,
                                       int maxCallStackDepth,
                                       HeapModel heapModel,
                                       TaintAbstractState threshold,
                                       java.util.Collection<? extends JvmTaintSink> taintSinks,
                                       AbortOperator abortOperator)

Create a traced taint CPA run.

Parameters:

cfa - a CFA

taintSources - a set of taint sources

mainSignature - the main signature of the main method

maxCallStackDepth - the maximum depth of the call stack analyzed interprocedurally. 0 means intraprocedural analysis. < 0 means no maximum depth.

threshold - a cut-off threshold

taintSinks - a collection of taint sinks

abortOperator - an abort operator

JvmTaintMemoryLocationBamCpaRun

public JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa,
                                       java.util.Set<? extends TaintSource> taintSources,
                                       MethodSignature mainSignature,
                                       int maxCallStackDepth,
                                       HeapModel heapModel,
                                       TaintAbstractState threshold,
                                       java.util.Collection<? extends JvmTaintSink> taintSinks)

Create a traced taint CPA run without premature termination.

Parameters:

cfa - a CFA

taintSources - a set of taint sources

mainSignature - the main signature of the main method

maxCallStackDepth - the maximum depth of the call stack analyzed interprocedurally. 0 means intraprocedural analysis. < 0 means no maximum depth.

threshold - a cut-off threshold

taintSinks - a collection of taint sinks

JvmTaintMemoryLocationBamCpaRun

public JvmTaintMemoryLocationBamCpaRun(JvmCfa cfa,
                                       java.util.Set<? extends TaintSource> taintSources,
                                       MethodSignature mainSignature,
                                       int maxCallStackDepth,
                                       TaintAbstractState threshold,
                                       java.util.Collection<? extends JvmTaintSink> taintSinks)

Create a traced taint CPA run with a simple heap and no premature termination.

Parameters:

cfa - a CFA

taintSources - a set of taint sources

mainSignature - the main signature of the main method

maxCallStackDepth - maximum depth of the call stack analyzed inter-procedurally. 0 means intra-procedural analysis. < 0 means no maximum depth.

threshold - a cut-off threshold

taintSinks - a collection of taint sinks

Method Detail

getInitialStates

public java.util.List<JvmMemoryLocationAbstractState> getInitialStates()

Description copied from class: CpaRun

Returns a collection of initial AbstractStates.

Specified by:

getInitialStates in class CpaRun<JvmMemoryLocationCpa<TaintAbstractState>,JvmMemoryLocationAbstractState>

getEndPoints

public java.util.Set<JvmMemoryLocation> getEndPoints()

Description copied from interface: TraceExtractor

Returns endpoints or the extracted traces. Its output should be used for constructing initial states for memory location CPAs.