Package proguard.analysis.cpa.jvm.domain.taint

Class JvmInvokeTaintSink

java.lang.Object

proguard.analysis.cpa.domain.taint.TaintSink

proguard.analysis.cpa.jvm.domain.taint.JvmTaintSink

proguard.analysis.cpa.jvm.domain.taint.JvmInvokeTaintSink

public class JvmInvokeTaintSink
extends JvmTaintSink

A JvmTaintSink on a method invocation. This sinks can be sensitive to the instance, the arguments, or the static fields. If a sink S is sensitive to X, then if X is tainted, we conclude that the taint has reached S.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	JvmInvokeTaintSink.Builder	Builder for JvmInvokeTaintSink.

Field Summary

Fields

Modifier and Type	Field	Description
final Predicate<Call>	callMatcher
final Set<Integer>	takesArgs
final Set<String>	takesGlobals
final boolean	takesInstance

Fields inherited from class proguard.analysis.cpa.domain.taint.TaintSink

IS_VALID_FOR_SOURCE_DEFAULT, isValidForSource, signature

Constructor Summary

Constructors

Modifier	Constructor	Description
	JvmInvokeTaintSink(Signature signature, boolean takesInstance, Set<Integer> takesArgs, Set<String> takesGlobals)	Create a taint sink.
protected	JvmInvokeTaintSink(Signature signature, Predicate<TaintSource> isValidForSource, boolean takesInstance, Set<Integer> takesArgs, Set<String> takesGlobals, Predicate<Call> callMatcher)	Create a taint sink.
	JvmInvokeTaintSink(Signature signature, Predicate<Call> callMatcher, boolean takesInstance, Set<Integer> takesArgs, Set<String> takesGlobals)	Deprecated.

Method Summary

Modifier and Type	Method	Description
boolean	equals(Object o)
Set<JvmMemoryLocation>	getMemoryLocations()	Returns memory locations which trigger this taint sink.
int	hashCode()
boolean	matchCfaEdge(JvmCfaEdge edge)	Returns true if the edge is a call to the sink method.
String	toString()

Methods inherited from class proguard.analysis.cpa.jvm.domain.taint.JvmTaintSink

convertSinksToMemoryLocations

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Details

takesInstance

public final boolean takesInstance

takesArgs

public final Set<Integer> takesArgs

takesGlobals

public final Set<String> takesGlobals

callMatcher

public final Predicate<Call> callMatcher

Constructor Details

JvmInvokeTaintSink

public JvmInvokeTaintSink(Signature signature,
 boolean takesInstance,
 Set<Integer> takesArgs,
 Set<String> takesGlobals)

Create a taint sink.

Parameters:

signature - the signature of a sink method

takesInstance - whether the sink is sensitive to the calling instance

takesArgs - a set of sensitive arguments

takesGlobals - a set of sensitive global variables

JvmInvokeTaintSink

@Deprecated
public JvmInvokeTaintSink(Signature signature,
 Predicate<Call> callMatcher,
 boolean takesInstance,
 Set<Integer> takesArgs,
 Set<String> takesGlobals)

Deprecated.

Create a taint sink.

Parameters:

signature - the signature of a sink method

callMatcher - whether the call matches this taint sink

takesInstance - whether the sink is sensitive to the calling instance

takesArgs - a set of sensitive arguments

takesGlobals - a set of sensitive global variables

JvmInvokeTaintSink

protected JvmInvokeTaintSink(Signature signature,
 Predicate<TaintSource> isValidForSource,
 boolean takesInstance,
 Set<Integer> takesArgs,
 Set<String> takesGlobals,
 Predicate<Call> callMatcher)

Create a taint sink.

Parameters:

signature - the signature of a sink method

isValidForSource - predicate on whether the sink is valid for a given source

takesInstance - whether the sink is sensitive to the calling instance

takesArgs - a set of sensitive arguments

takesGlobals - a set of sensitive global variables

callMatcher - predicate on whether a call matches this taint sink

Method Details

getMemoryLocations

public Set<JvmMemoryLocation> getMemoryLocations()

Returns memory locations which trigger this taint sink.

Specified by:

getMemoryLocations in class JvmTaintSink

matchCfaEdge

public boolean matchCfaEdge(JvmCfaEdge edge)

Returns true if the edge is a call to the sink method.

Specified by:

matchCfaEdge in class JvmTaintSink

equals

public boolean equals(Object o)

Overrides:

equals in class JvmTaintSink

hashCode

public int hashCode()

Overrides:

hashCode in class JvmTaintSink

toString

public String toString()

Specified by:

toString in class TaintSink