soot.jimple.infoflow.sourcesSinks.manager

类 DefaultSourceSinkManager

java.lang.Object

soot.jimple.infoflow.sourcesSinks.manager.DefaultSourceSinkManager

所有已实现的接口:

ISourceSinkManager

public class DefaultSourceSinkManager
extends Object
implements ISourceSinkManager

A ISourceSinkManager working on lists of source and sink methods

作者:

Steven Arzt

字段概要

字段

限定符和类型	字段和说明
protected com.google.common.cache.LoadingCache<soot.SootClass,Collection<soot.SootClass>>	interfacesOf
protected Collection<String>	sinkDefs
protected Collection<String>	sourceDefs

构造器概要

构造器

构造器和说明
DefaultSourceSinkManager(Collection<String> sources, Collection<String> sinks) Creates a new instance of the DefaultSourceSinkManager class
DefaultSourceSinkManager(Collection<String> sources, Collection<String> sinks, Collection<String> parameterTaintMethods, Collection<String> returnTaintMethods) Creates a new instance of the DefaultSourceSinkManager class
DefaultSourceSinkManager(ISourceSinkDefinitionProvider sourceSinkProvider) Creates a new instance of the DefaultSourceSinkManager class

方法概要

限定符和类型	方法和说明
SinkInfo	getSinkInfo(soot.jimple.Stmt sCallSite, InfoflowManager manager, AccessPath ap) Checks if the given access path at this statement will leak.
SourceInfo	getSourceInfo(soot.jimple.Stmt sCallSite, InfoflowManager manager) Determines if a method called by the Stmt is a source method or not.
void	initialize() Initialization method that is called after the Soot instance has been created and before the actual data flow tracking is started.
protected SootMethodAndClass	isSinkMethod(InfoflowManager manager, soot.jimple.Stmt sCallSite) Checks whether the given call sites invokes a sink method
protected boolean	isSourceMethod(InfoflowManager manager, soot.jimple.Stmt sCallSite) Checks whether the given call sites invokes a source method
void	setParameterTaintMethods(List<String> parameterTaintMethods) Sets the list of methods whose parameters shall be regarded as taint sources
void	setReturnTaintMethods(List<String> returnTaintMethods) Sets the list of methods whose return values shall be regarded as taint sinks
void	setSinks(List<String> sinks) Sets the list of methods to be treated as sinks
void	setSources(List<String> sources) Sets the list of methods to be treated as sources

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

sourceDefs

protected Collection<String> sourceDefs

sinkDefs

protected Collection<String> sinkDefs

interfacesOf

protected final com.google.common.cache.LoadingCache<soot.SootClass,Collection<soot.SootClass>> interfacesOf

构造器详细资料

DefaultSourceSinkManager

public DefaultSourceSinkManager(Collection<String> sources,
                                Collection<String> sinks)

Creates a new instance of the DefaultSourceSinkManager class

参数:

sources - The list of methods to be treated as sources

sinks - The list of methods to be treated as sins

DefaultSourceSinkManager

public DefaultSourceSinkManager(Collection<String> sources,
                                Collection<String> sinks,
                                Collection<String> parameterTaintMethods,
                                Collection<String> returnTaintMethods)

Creates a new instance of the DefaultSourceSinkManager class

参数:

sources - The list of methods to be treated as sources

sinks - The list of methods to be treated as sinks

parameterTaintMethods - The list of methods whose parameters shall be regarded as sources

returnTaintMethods - The list of methods whose return values shall be regarded as sinks

DefaultSourceSinkManager

public DefaultSourceSinkManager(ISourceSinkDefinitionProvider sourceSinkProvider)

Creates a new instance of the DefaultSourceSinkManager class

参数:

sourceSinkProvider - The provider that defines source and sink methods

方法详细资料

setSources

public void setSources(List<String> sources)

Sets the list of methods to be treated as sources

参数:

sources - The list of methods to be treated as sources

setSinks

public void setSinks(List<String> sinks)

Sets the list of methods to be treated as sinks

参数:

sinks - The list of methods to be treated as sinks

getSourceInfo

public SourceInfo getSourceInfo(soot.jimple.Stmt sCallSite,
                                InfoflowManager manager)

从接口复制的说明: ISourceSinkManager

Determines if a method called by the Stmt is a source method or not. If so, additional information is returned

指定者:

getSourceInfo 在接口中 ISourceSinkManager

参数:

sCallSite - a Stmt which should include an invokeExrp calling a method

manager - The manager object for interacting with the solver

返回:

A SourceInfo object containing additional information if this call is a source, otherwise null

isSourceMethod

protected boolean isSourceMethod(InfoflowManager manager,
                                 soot.jimple.Stmt sCallSite)

Checks whether the given call sites invokes a source method

参数:

manager - The manager object providing access to the configuration and the interprocedural control flow graph

sCallSite - The call site to check

返回:

True if the given call site invoked a source method, otherwise false

getSinkInfo

public SinkInfo getSinkInfo(soot.jimple.Stmt sCallSite,
                            InfoflowManager manager,
                            AccessPath ap)

从接口复制的说明: ISourceSinkManager

Checks if the given access path at this statement will leak.

指定者:

getSinkInfo 在接口中 ISourceSinkManager

参数:

sCallSite - The call site to check

manager - The manager object for interacting with the solver

ap - The access path to check. Pass null to check whether the given statement can be a sink for any given access path.

返回:

A SinkInfo object containing additional information if this call is a sink, otherwise null

isSinkMethod

protected SootMethodAndClass isSinkMethod(InfoflowManager manager,
                                          soot.jimple.Stmt sCallSite)

Checks whether the given call sites invokes a sink method

参数:

manager - The manager object providing access to the configuration and the interprocedural control flow graph

sCallSite - The call site to check

返回:

The method that was discovered as a sink, or null if no sink could be found

setParameterTaintMethods

public void setParameterTaintMethods(List<String> parameterTaintMethods)

Sets the list of methods whose parameters shall be regarded as taint sources

参数:

parameterTaintMethods - The list of methods whose parameters shall be regarded as taint sources

setReturnTaintMethods

public void setReturnTaintMethods(List<String> returnTaintMethods)

Sets the list of methods whose return values shall be regarded as taint sinks

参数:

returnTaintMethods - The list of methods whose return values shall be regarded as taint sinks

initialize

public void initialize()

从接口复制的说明: ISourceSinkManager

Initialization method that is called after the Soot instance has been created and before the actual data flow tracking is started.

指定者:

initialize 在接口中 ISourceSinkManager