soot.jimple.toolkits.callgraph

Class OnFlyCallGraphBuilder

java.lang.Object

soot.jimple.toolkits.callgraph.OnFlyCallGraphBuilder

public class OnFlyCallGraphBuilder
extends Object

Models the call graph.

Author:

Ondrej Lhotak

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
class	OnFlyCallGraphBuilder.DefaultReflectionModel
class	OnFlyCallGraphBuilder.TraceBasedReflectionModel
class	OnFlyCallGraphBuilder.TypeBasedReflectionModel

Field Summary

Fields

Modifier and Type	Field and Description
protected MultiMap<AllocDotField,Local>	allocDotFieldToLocal
protected SootMethod	analysisKey
protected HashSet<SootMethod>	analyzedMethods
protected boolean	appOnly
protected ConstantArrayAnalysis	arrayCache
protected MultiMap<Local,InvokeCallSite>	baseToInvokeSite
protected RefType	clAsyncTask
protected RefType	clHandler
protected RefType	clRunnable
protected ContextManager	cm
protected FastHierarchy	fh
protected MultiMap<Local,InvokeCallSite>	invokeArgsToInvokeSite
protected Map<Local,BitSet>	invokeArgsToSize
protected LargeNumberedMap<SootMethod,List<Local>>	methodToInvokeArgs
protected LargeNumberedMap<SootMethod,List<Local>>	methodToInvokeBases
protected LargeNumberedMap<SootMethod,List<Local>>	methodToReceivers
protected LargeNumberedMap<SootMethod,List<Local>>	methodToStringConstants
protected NullnessAnalysis	nullnessCache
protected CGOptions	options
protected MultiMap<Local,Type>	reachingArgTypes
protected MultiMap<Local,Type>	reachingBaseTypes
protected LargeNumberedMap<Local,List<VirtualCallSite>>	receiverToSites
protected ReflectionModel	reflectionModel
protected ReachableMethods	rm context-sensitive stuff
protected NumberedString	sigDoInBackground
protected NumberedString	sigExecute
protected NumberedString	sigExecutorExecute
protected NumberedString	sigFinalize
protected NumberedString	sigForName
protected NumberedString	sigHandlerHandleMessage
protected NumberedString	sigHandlerPost
protected NumberedString	sigHandlerPostAtFrontOfQueue
protected NumberedString	sigHandlerPostAtTime
protected NumberedString	sigHandlerPostAtTimeWithToken
protected NumberedString	sigHandlerPostDelayed
protected NumberedString	sigHandlerSendEmptyMessage
protected NumberedString	sigHandlerSendEmptyMessageAtTime
protected NumberedString	sigHandlerSendEmptyMessageDelayed
protected NumberedString	sigHandlerSendMessage
protected NumberedString	sigHandlerSendMessageAtFrontOfQueue
protected NumberedString	sigHandlerSendMessageAtTime
protected NumberedString	sigHandlerSendMessageDelayed
protected NumberedString	sigInit
protected NumberedString	sigObjRun
protected NumberedString	sigRun
protected NumberedString	sigRunOnUiThread
protected NumberedString	sigStart
protected SmallNumberedMap<List<VirtualCallSite>>	stringConstToSites
protected QueueReader<SootMethod>	targets
protected ChunkedQueue<SootMethod>	targetsQueue
protected VirtualCalls	virtualCalls
protected QueueReader<MethodOrMethodContext>	worklist

Constructor Summary

Constructors

Constructor and Description
OnFlyCallGraphBuilder(ContextManager cm, ReachableMethods rm)
OnFlyCallGraphBuilder(ContextManager cm, ReachableMethods rm, boolean appOnly)

Method Summary

Modifier and Type	Method and Description
void	addBaseType(Local base, Context context, Type ty)
void	addInvokeArgDotField(Local receiver, AllocDotField dot)
void	addInvokeArgType(AllocDotField df, Context context, Type type)
void	addInvokeArgType(Local argArray, Context context, Type t)
void	addPossibleArgArraySize(Local argArray, int value, Context context)
void	addStringConstant(Local l, Context srcContext, String constant)
void	addType(Local receiver, Context srcContext, Type type, Context typeContext)
ContextManager	getContextManager()
LargeNumberedMap<SootMethod,List<Local>>	methodToInvokeArgs()
LargeNumberedMap<SootMethod,List<Local>>	methodToInvokeBases()
LargeNumberedMap<SootMethod,List<Local>>	methodToReceivers()
LargeNumberedMap<SootMethod,List<Local>>	methodToStringConstants()
protected void	processNewMethodContext(MethodOrMethodContext momc)
void	processReachables()
void	setArgArrayNonDetSize(Local argArray, Context context)
protected boolean	skipSite(VirtualCallSite site, FastHierarchy fh, Type type)
boolean	wantArrayField(AllocDotField df)
boolean	wantInvokeArg(Local receiver)
boolean	wantStringConstants(Local stringConst)
boolean	wantTypes(Local receiver)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

sigFinalize

protected final NumberedString sigFinalize

sigInit

protected final NumberedString sigInit

sigStart

protected final NumberedString sigStart

sigRun

protected final NumberedString sigRun

sigExecute

protected final NumberedString sigExecute

sigExecutorExecute

protected final NumberedString sigExecutorExecute

sigHandlerPost

protected final NumberedString sigHandlerPost

sigHandlerPostAtFrontOfQueue

protected final NumberedString sigHandlerPostAtFrontOfQueue

sigRunOnUiThread

protected final NumberedString sigRunOnUiThread

sigHandlerPostAtTime

protected final NumberedString sigHandlerPostAtTime

sigHandlerPostAtTimeWithToken

protected final NumberedString sigHandlerPostAtTimeWithToken

sigHandlerPostDelayed

protected final NumberedString sigHandlerPostDelayed

sigHandlerSendEmptyMessage

protected final NumberedString sigHandlerSendEmptyMessage

sigHandlerSendEmptyMessageAtTime

protected final NumberedString sigHandlerSendEmptyMessageAtTime

sigHandlerSendEmptyMessageDelayed

protected final NumberedString sigHandlerSendEmptyMessageDelayed

sigHandlerSendMessage

protected final NumberedString sigHandlerSendMessage

sigHandlerSendMessageAtFrontOfQueue

protected final NumberedString sigHandlerSendMessageAtFrontOfQueue

sigHandlerSendMessageAtTime

protected final NumberedString sigHandlerSendMessageAtTime

sigHandlerSendMessageDelayed

protected final NumberedString sigHandlerSendMessageDelayed

sigHandlerHandleMessage

protected final NumberedString sigHandlerHandleMessage

sigObjRun

protected final NumberedString sigObjRun

sigDoInBackground

protected final NumberedString sigDoInBackground

sigForName

protected final NumberedString sigForName

clRunnable

protected final RefType clRunnable

clAsyncTask

protected final RefType clAsyncTask

clHandler

protected final RefType clHandler

analyzedMethods

protected final HashSet<SootMethod> analyzedMethods

receiverToSites

protected final LargeNumberedMap<Local,List<VirtualCallSite>> receiverToSites

methodToReceivers

protected final LargeNumberedMap<SootMethod,List<Local>> methodToReceivers

methodToInvokeBases

protected final LargeNumberedMap<SootMethod,List<Local>> methodToInvokeBases

methodToInvokeArgs

protected final LargeNumberedMap<SootMethod,List<Local>> methodToInvokeArgs

baseToInvokeSite

protected final MultiMap<Local,InvokeCallSite> baseToInvokeSite

invokeArgsToInvokeSite

protected final MultiMap<Local,InvokeCallSite> invokeArgsToInvokeSite

invokeArgsToSize

protected final Map<Local,BitSet> invokeArgsToSize

allocDotFieldToLocal

protected final MultiMap<AllocDotField,Local> allocDotFieldToLocal

reachingArgTypes

protected final MultiMap<Local,Type> reachingArgTypes

reachingBaseTypes

protected final MultiMap<Local,Type> reachingBaseTypes

stringConstToSites

protected final SmallNumberedMap<List<VirtualCallSite>> stringConstToSites

methodToStringConstants

protected final LargeNumberedMap<SootMethod,List<Local>> methodToStringConstants

targetsQueue

protected final ChunkedQueue<SootMethod> targetsQueue

targets

protected final QueueReader<SootMethod> targets

reflectionModel

protected ReflectionModel reflectionModel

options

protected CGOptions options

appOnly

protected boolean appOnly

rm

protected ReachableMethods rm

context-sensitive stuff

worklist

protected QueueReader<MethodOrMethodContext> worklist

cm

protected ContextManager cm

fh

protected FastHierarchy fh

nullnessCache

protected NullnessAnalysis nullnessCache

arrayCache

protected ConstantArrayAnalysis arrayCache

analysisKey

protected SootMethod analysisKey

virtualCalls

protected VirtualCalls virtualCalls

Constructor Detail

OnFlyCallGraphBuilder

public OnFlyCallGraphBuilder(ContextManager cm,
                             ReachableMethods rm)

OnFlyCallGraphBuilder

public OnFlyCallGraphBuilder(ContextManager cm,
                             ReachableMethods rm,
                             boolean appOnly)

Method Detail

getContextManager

public ContextManager getContextManager()

methodToReceivers

public LargeNumberedMap<SootMethod,List<Local>> methodToReceivers()

methodToInvokeArgs

public LargeNumberedMap<SootMethod,List<Local>> methodToInvokeArgs()

methodToInvokeBases

public LargeNumberedMap<SootMethod,List<Local>> methodToInvokeBases()

methodToStringConstants

public LargeNumberedMap<SootMethod,List<Local>> methodToStringConstants()

processReachables

public void processReachables()

wantTypes

public boolean wantTypes(Local receiver)

addBaseType

public void addBaseType(Local base,
                        Context context,
                        Type ty)

addInvokeArgType

public void addInvokeArgType(Local argArray,
                             Context context,
                             Type t)

setArgArrayNonDetSize

public void setArgArrayNonDetSize(Local argArray,
                                  Context context)

addPossibleArgArraySize

public void addPossibleArgArraySize(Local argArray,
                                    int value,
                                    Context context)

addType

public void addType(Local receiver,
                    Context srcContext,
                    Type type,
                    Context typeContext)

skipSite

protected boolean skipSite(VirtualCallSite site,
                           FastHierarchy fh,
                           Type type)

wantStringConstants

public boolean wantStringConstants(Local stringConst)

addStringConstant

public void addStringConstant(Local l,
                              Context srcContext,
                              String constant)

wantArrayField

public boolean wantArrayField(AllocDotField df)

addInvokeArgType

public void addInvokeArgType(AllocDotField df,
                             Context context,
                             Type type)

wantInvokeArg

public boolean wantInvokeArg(Local receiver)

addInvokeArgDotField

public void addInvokeArgDotField(Local receiver,
                                 AllocDotField dot)

processNewMethodContext

protected void processNewMethodContext(MethodOrMethodContext momc)