soot.jimple.infoflow.solver.fastSolver.flowInsensitive

类 InfoflowSolver

java.lang.Object

soot.jimple.infoflow.solver.fastSolver.flowInsensitive.FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

soot.jimple.infoflow.solver.fastSolver.flowInsensitive.InfoflowSolver

所有已实现的接口:

IMemoryBoundedSolver, IInfoflowSolver

public class InfoflowSolver
extends FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>
implements IInfoflowSolver

We are subclassing the JimpleIFDSSolver because we need the same executor for both the forward and the backward analysis Also we need to be able to insert edges containing new taint information

嵌套类概要

从接口继承的嵌套类/接口 soot.jimple.infoflow.memory.IMemoryBoundedSolver

IMemoryBoundedSolver.IMemoryBoundedSolverStatusNotification

字段概要

从类继承的字段 soot.jimple.infoflow.solver.fastSolver.flowInsensitive.FlowInsensitiveSolver

DEBUG, DEFAULT_CACHE_BUILDER, endSummary, executor, ffCache, flowFunctions, followReturnsPastSeeds, icfg, incoming, initialSeeds, jumpFunctions, logger, memoryManager, numThreads, propagationCount, shorteningMode, zeroValue

构造器概要

构造器

构造器和说明
InfoflowSolver(AbstractInfoflowProblem problem, InterruptableExecutor executor)

方法概要

限定符和类型	方法和说明
void	cleanup() Cleans up some unused memory.
protected Set<Abstraction>	computeCallFlowFunction(heros.FlowFunction<Abstraction> flowFunction, Abstraction d1, Abstraction d2) Computes the call flow function for the given call-site abstraction
protected Set<Abstraction>	computeCallToReturnFlowFunction(heros.FlowFunction<Abstraction> flowFunction, Abstraction d1, Abstraction d2) Computes the call-to-return flow function for the given call-site abstraction
protected Set<Abstraction>	computeNormalFlowFunction(heros.FlowFunction<Abstraction> flowFunction, Abstraction d1, Abstraction d2) Computes the normal flow function for the given set of start and end abstractions.
protected Set<Abstraction>	computeReturnFlowFunction(heros.FlowFunction<Abstraction> retFunction, Abstraction d1, Abstraction d2, soot.Unit callSite, Collection<Abstraction> callerSideDs) Computes the return flow function for the given set of caller-side abstractions.
Set<heros.solver.Pair<soot.Unit,Abstraction>>	endSummary(soot.SootMethod m, Abstraction d3) Gets the end summary of the given method for the given incoming abstraction
protected InterruptableExecutor	getExecutor() Factory method for this solver's thread-pool executor.
long	getPropagationCount() Gets the number of edges propagated by the solver
AbstractInfoflowProblem	getTabulationProblem() Gets the IFDS problem solved by this solver
void	injectContext(IInfoflowSolver otherSolver, soot.SootMethod callee, Abstraction d3, soot.Unit callSite, Abstraction d2, Abstraction d1)
boolean	processEdge(heros.solver.PathEdge<soot.Unit,Abstraction> edge) Schedules the given edge for processing in the solver
protected void	processExit(Abstraction d1, soot.Unit n, Abstraction d2) Lines 21-32 of the algorithm.
void	setFollowReturnsPastSeedsHandler(IFollowReturnsPastSeedsHandler handler) Sets a handler that will be called when a followReturnsPastSeeds case happens, i.e., a taint leaves a method for which we have not seen any callers
void	setPeerGroup(SolverPeerGroup solverPeerGroup) Sets the peer group in which this solver operates.
void	setSolverId(boolean solverId)
void	terminate() Notifies the solver that no further edges will be scheduled

从类继承的方法 soot.jimple.infoflow.solver.fastSolver.flowInsensitive.FlowInsensitiveSolver

addFunction, addIncoming, addStatusListener, applyEndSummaryOnCall, awaitCompletionComputeValuesAndShutdown, forceTerminate, getDebugName, getMemoryManager, getSolverId, getTerminationReason, incoming, isKilled, isTerminated, printStats, propagate, propagate, reset, scheduleEdgeProcessing, setMaxAbstractionPathLength, setMaxCalleesPerCallSite, setMaxJoinPointAbstractions, setMemoryManager, setPredecessorShorteningMode, solve, submitInitialSeeds

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 soot.jimple.infoflow.solver.IInfoflowSolver

getMemoryManager, setMaxAbstractionPathLength, setMaxCalleesPerCallSite, setMaxJoinPointAbstractions, setMemoryManager, setPredecessorShorteningMode, solve

构造器详细资料

InfoflowSolver

public InfoflowSolver(AbstractInfoflowProblem problem,
                      InterruptableExecutor executor)

方法详细资料

getExecutor

protected InterruptableExecutor getExecutor()

从类复制的说明: FlowInsensitiveSolver

Factory method for this solver's thread-pool executor.

覆盖:

getExecutor 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

processEdge

public boolean processEdge(heros.solver.PathEdge<soot.Unit,Abstraction> edge)

从接口复制的说明: IInfoflowSolver

Schedules the given edge for processing in the solver

指定者:

processEdge 在接口中 IInfoflowSolver

参数:

edge - The edge to schedule for processing

返回:

True if the edge was scheduled, otherwise (e.g., if the edge has already been processed earlier) false

injectContext

public void injectContext(IInfoflowSolver otherSolver,
                          soot.SootMethod callee,
                          Abstraction d3,
                          soot.Unit callSite,
                          Abstraction d2,
                          Abstraction d1)

指定者:

injectContext 在接口中 IInfoflowSolver

computeReturnFlowFunction

protected Set<Abstraction> computeReturnFlowFunction(heros.FlowFunction<Abstraction> retFunction,
                                                     Abstraction d1,
                                                     Abstraction d2,
                                                     soot.Unit callSite,
                                                     Collection<Abstraction> callerSideDs)

从类复制的说明: FlowInsensitiveSolver

Computes the return flow function for the given set of caller-side abstractions.

覆盖:

computeReturnFlowFunction 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

参数:

retFunction - The return flow function to compute

d1 - The abstraction at the beginning of the callee

d2 - The abstraction at the exit node in the callee

callSite - The call site

callerSideDs - The abstractions at the call site

返回:

The set of caller-side abstractions at the return site

computeNormalFlowFunction

protected Set<Abstraction> computeNormalFlowFunction(heros.FlowFunction<Abstraction> flowFunction,
                                                     Abstraction d1,
                                                     Abstraction d2)

从类复制的说明: FlowInsensitiveSolver

Computes the normal flow function for the given set of start and end abstractions.

覆盖:

computeNormalFlowFunction 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

参数:

flowFunction - The normal flow function to compute

d1 - The abstraction at the method's start node

d2 - The abstraction at the current node

返回:

The set of abstractions at the successor node

computeCallToReturnFlowFunction

protected Set<Abstraction> computeCallToReturnFlowFunction(heros.FlowFunction<Abstraction> flowFunction,
                                                           Abstraction d1,
                                                           Abstraction d2)

从类复制的说明: FlowInsensitiveSolver

Computes the call-to-return flow function for the given call-site abstraction

覆盖:

computeCallToReturnFlowFunction 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

参数:

flowFunction - The call-to-return flow function to compute

d1 - The abstraction at the current method's start node.

d2 - The abstraction at the call site

返回:

The set of caller-side abstractions at the return site

computeCallFlowFunction

protected Set<Abstraction> computeCallFlowFunction(heros.FlowFunction<Abstraction> flowFunction,
                                                   Abstraction d1,
                                                   Abstraction d2)

从类复制的说明: FlowInsensitiveSolver

Computes the call flow function for the given call-site abstraction

覆盖:

computeCallFlowFunction 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

参数:

flowFunction - The call flow function to compute

d1 - The abstraction at the current method's start node.

d2 - The abstraction at the call site

返回:

The set of caller-side abstractions at the callee's start node

cleanup

public void cleanup()

从接口复制的说明: IInfoflowSolver

Cleans up some unused memory. Results will still be available afterwards, but no intermediate computation values.

指定者:

cleanup 在接口中 IInfoflowSolver

endSummary

public Set<heros.solver.Pair<soot.Unit,Abstraction>> endSummary(soot.SootMethod m,
                                                                Abstraction d3)

从接口复制的说明: IInfoflowSolver

Gets the end summary of the given method for the given incoming abstraction

指定者:

endSummary 在接口中 IInfoflowSolver

覆盖:

endSummary 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

参数:

m - The method for which to get the end summary

d3 - The incoming fact (context) for which to get the end summary

返回:

The end summary of the given method for the given incoming abstraction

processExit

protected void processExit(Abstraction d1,
                           soot.Unit n,
                           Abstraction d2)

从类复制的说明: FlowInsensitiveSolver

Lines 21-32 of the algorithm. Stores callee-side summaries. Also, at the side of the caller, propagates intra-procedural flows to return sites using those newly computed summaries.

覆盖:

processExit 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

setFollowReturnsPastSeedsHandler

public void setFollowReturnsPastSeedsHandler(IFollowReturnsPastSeedsHandler handler)

从接口复制的说明: IInfoflowSolver

Sets a handler that will be called when a followReturnsPastSeeds case happens, i.e., a taint leaves a method for which we have not seen any callers

指定者:

setFollowReturnsPastSeedsHandler 在接口中 IInfoflowSolver

参数:

handler - The handler to be called when a followReturnsPastSeeds case happens

getPropagationCount

public long getPropagationCount()

从接口复制的说明: IInfoflowSolver

Gets the number of edges propagated by the solver

指定者:

getPropagationCount 在接口中 IInfoflowSolver

返回:

The number of edges propagated by the solver

setSolverId

public void setSolverId(boolean solverId)

指定者:

setSolverId 在接口中 IInfoflowSolver

覆盖:

setSolverId 在类中 FlowInsensitiveSolver<soot.Unit,Abstraction,soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG<soot.Unit,soot.SootMethod>>

getTabulationProblem

public AbstractInfoflowProblem getTabulationProblem()

从接口复制的说明: IInfoflowSolver

Gets the IFDS problem solved by this solver

指定者:

getTabulationProblem 在接口中 IInfoflowSolver

返回:

The IFDS problem solved by this solver

setPeerGroup

public void setPeerGroup(SolverPeerGroup solverPeerGroup)

从接口复制的说明: IInfoflowSolver

Sets the peer group in which this solver operates. Peer groups allow for synchronization between solvers

指定者:

setPeerGroup 在接口中 IInfoflowSolver

参数:

solverPeerGroup - The solver peer group

terminate

public void terminate()

从接口复制的说明: IInfoflowSolver

Notifies the solver that no further edges will be scheduled

指定者:

terminate 在接口中 IInfoflowSolver