proguard.analysis.cpa.jvm.domain.taint

Class JvmTaintBamCpaRun<OuterAbstractStateT extends AbstractState>

java.lang.Object

proguard.analysis.cpa.defaults.CpaRun<BamCpa<CfaNodeT,CfaEdgeT,SignatureT>,AbstractStateT>

proguard.analysis.cpa.defaults.BamCpaRun<CpaT,OuterAbstractStateT,JvmCfaNode,JvmCfaEdge,MethodSignature>

proguard.analysis.cpa.jvm.util.JvmBamCpaRun<SimpleCpa,SetAbstractState<JvmTaintSource>,OuterAbstractStateT>

proguard.analysis.cpa.jvm.domain.taint.JvmTaintBamCpaRun<OuterAbstractStateT>

public class JvmTaintBamCpaRun<OuterAbstractStateT extends AbstractState>
extends JvmBamCpaRun<SimpleCpa,SetAbstractState<JvmTaintSource>,OuterAbstractStateT>

This run wraps the execution of BAM JvmTaintCpa.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	JvmTaintBamCpaRun.Builder A builder for JvmTaintBamCpaRun.

Field Summary

Fields inherited from class proguard.analysis.cpa.jvm.util.JvmBamCpaRun

cfa, heapModel

Fields inherited from class proguard.analysis.cpa.defaults.BamCpaRun

reduceHeap

Fields inherited from class proguard.analysis.cpa.defaults.CpaRun

abortOperator, cpa

Constructor Summary

Constructors

Modifier

Constructor and Description

protected

JvmTaintBamCpaRun(JvmCfa cfa, java.util.Set<? extends JvmTaintSource> taintSources, MethodSignature mainMethodSignature, int maxCallStackDepth, HeapModel heapModel, AbortOperator abortOperator, boolean reduceHeap, MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> staticFieldMapAbstractStateFactory, MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<Reference>>> principalHeapMapAbstractStateFactory, MapAbstractStateFactory<java.lang.String,SetAbstractState<Reference>> principalHeapNodeMapAbstractStateFactory, MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> followerHeapMapAbstractStateFactory, MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> followerHeapNodeMapAbstractStateFactory, java.util.Map<MethodSignature,JvmTaintTransformer> taintTransformers) Create a CPA run.

Method Summary

Modifier and Type	Method and Description
ExpandOperator<JvmCfaNode,JvmCfaEdge,MethodSignature>	createExpandOperator() Returns the expand operator.
SimpleCpa	createIntraproceduralCPA() Returns the intraprocedural CPA.
ReduceOperator<JvmCfaNode,JvmCfaEdge,MethodSignature>	createReduceOperator() Returns the reduce operator.
java.util.Collection<OuterAbstractStateT>	getInitialStates() Returns a collection of initial AbstractStates.
MethodSignature	getMainSignature() Returns the signature of the main procedure.

Methods inherited from class proguard.analysis.cpa.jvm.util.JvmBamCpaRun

createReachedSet, getCfa

Methods inherited from class proguard.analysis.cpa.defaults.BamCpaRun

createCache, createRebuildOperator, getAnalyzedMethods, getCpa, getMaxCallStackDepth

Methods inherited from class proguard.analysis.cpa.defaults.CpaRun

createWaitlist, execute, getAbortOperator

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JvmTaintBamCpaRun

protected JvmTaintBamCpaRun(JvmCfa cfa,
                            java.util.Set<? extends JvmTaintSource> taintSources,
                            MethodSignature mainMethodSignature,
                            int maxCallStackDepth,
                            HeapModel heapModel,
                            AbortOperator abortOperator,
                            boolean reduceHeap,
                            MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> staticFieldMapAbstractStateFactory,
                            MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<Reference>>> principalHeapMapAbstractStateFactory,
                            MapAbstractStateFactory<java.lang.String,SetAbstractState<Reference>> principalHeapNodeMapAbstractStateFactory,
                            MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> followerHeapMapAbstractStateFactory,
                            MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> followerHeapNodeMapAbstractStateFactory,
                            java.util.Map<MethodSignature,JvmTaintTransformer> taintTransformers)

Create a CPA run. If reduceHeap is set to false no reduction/expansion is applied to the heap states at call/return sites (this parameter is irrelevant for FORGETFUL heap model).

Parameters:

cfa - a CFA

taintSources - a set of taint sources

mainMethodSignature - the signature of the main method

maxCallStackDepth - the maximum depth of the call stack analyzed interprocedurally 0 means intraprocedural analysis < 0 means no maximum depth

heapModel - a heap model to be used

abortOperator - an abort operator

reduceHeap - whether reduction/expansion of the heap state is performed at call/return sites

principalHeapMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from references to objects in the principal heap model

principalHeapNodeMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from fields to values in the principal heap model

followerHeapMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from references to objects in the follower heap model

followerHeapNodeMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from fields to values in the follower heap model

taintTransformers - a mapping from method signature to a transformer object applied to the taint state when that method is invoked

Method Detail

createIntraproceduralCPA

public SimpleCpa createIntraproceduralCPA()

Description copied from class: BamCpaRun

Returns the intraprocedural CPA.

Specified by:

createIntraproceduralCPA in class BamCpaRun<SimpleCpa,OuterAbstractStateT extends AbstractState,JvmCfaNode,JvmCfaEdge,MethodSignature>

createReduceOperator

public ReduceOperator<JvmCfaNode,JvmCfaEdge,MethodSignature> createReduceOperator()

Description copied from class: BamCpaRun

Returns the reduce operator.

Overrides:

createReduceOperator in class JvmBamCpaRun<SimpleCpa,SetAbstractState<JvmTaintSource>,OuterAbstractStateT extends AbstractState>

createExpandOperator

public ExpandOperator<JvmCfaNode,JvmCfaEdge,MethodSignature> createExpandOperator()

Description copied from class: BamCpaRun

Returns the expand operator.

Specified by:

createExpandOperator in class BamCpaRun<SimpleCpa,OuterAbstractStateT extends AbstractState,JvmCfaNode,JvmCfaEdge,MethodSignature>

getMainSignature

public MethodSignature getMainSignature()

Description copied from class: BamCpaRun

Returns the signature of the main procedure.

Specified by:

getMainSignature in class BamCpaRun<SimpleCpa,OuterAbstractStateT extends AbstractState,JvmCfaNode,JvmCfaEdge,MethodSignature>

getInitialStates

public java.util.Collection<OuterAbstractStateT> getInitialStates()

Description copied from class: CpaRun

Returns a collection of initial AbstractStates.

Specified by:

getInitialStates in class CpaRun<BamCpa<JvmCfaNode,JvmCfaEdge,MethodSignature>,OuterAbstractStateT extends AbstractState>