proguard.analysis.cpa.jvm.domain.taint

Class JvmTaintTreeHeapFollowerAbstractState

java.lang.Object

proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapAbstractState<StateT>

proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>

proguard.analysis.cpa.jvm.domain.taint.JvmTaintTreeHeapFollowerAbstractState

All Implemented Interfaces:

LatticeAbstractState<JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>>, AbstractState, JvmTaintHeapAbstractState, JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>

public class JvmTaintTreeHeapFollowerAbstractState
extends JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>
implements JvmTaintHeapAbstractState

This is a JvmTreeHeapFollowerAbstractState with the possibility of object tainting.

Field Summary

Fields inherited from class proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapFollowerAbstractState

principal

Fields inherited from class proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapAbstractState

defaultValue, heapMapAbstractStateFactory, heapNodeMapAbstractStateFactory, referenceToObject

Constructor Summary

Constructors

Constructor and Description

JvmTaintTreeHeapFollowerAbstractState(JvmReferenceAbstractState principal, SetAbstractState<JvmTaintSource> defaultValue, MapAbstractState<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> referenceToNode, MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> heapMapAbstractStateFactory, MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> heapNodeMapAbstractStateFactory) Create a taint follower heap abstract state.

Method Summary

Modifier and Type	Method and Description
protected void	assignField(SetAbstractState<Reference> object, java.lang.String descriptor, SetAbstractState<JvmTaintSource> value) Assigns the field value to the given one if the reference is unambiguous, joins otherwise.
JvmTaintTreeHeapFollowerAbstractState	copy() Creates a copy of itself.
<T> SetAbstractState<JvmTaintSource>	getArrayElementOrDefault(T array, SetAbstractState<JvmTaintSource> index, SetAbstractState<JvmTaintSource> defaultValue) Returns an array element at the specified index or the defaultValue, if the element is unset.
<T> SetAbstractState<JvmTaintSource>	getFieldOrDefault(T object, java.lang.String fqn, SetAbstractState<JvmTaintSource> defaultValue) Returns a field fqn from a reference object.
JvmTaintTreeHeapFollowerAbstractState	join(JvmHeapAbstractState<SetAbstractState<JvmTaintSource>> abstractState) Computes a join over itself and the abstractState.
<T> void	taintObject(T object, SetAbstractState<JvmTaintSource> value) Transitively applies the taint value to the object.

Methods inherited from class proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapFollowerAbstractState

getReferenceAbstractState, newArray, newObject, reduce, setArrayElement, setField, setPrincipalState

Methods inherited from class proguard.analysis.cpa.jvm.state.heap.tree.JvmTreeHeapAbstractState

equals, expand, getArrayElementOrDefault, getField, getHeapNode, hashCode, isLessOrEqual, mergeField, setArrayElement, setField

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface proguard.analysis.cpa.jvm.state.heap.JvmHeapAbstractState

newObject

Methods inherited from interface proguard.analysis.cpa.defaults.LatticeAbstractState

isLess

Methods inherited from interface proguard.analysis.cpa.interfaces.AbstractState

getPrecision, getStateByName

Constructor Detail

JvmTaintTreeHeapFollowerAbstractState

public JvmTaintTreeHeapFollowerAbstractState(JvmReferenceAbstractState principal,
                                             SetAbstractState<JvmTaintSource> defaultValue,
                                             MapAbstractState<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> referenceToNode,
                                             MapAbstractStateFactory<Reference,HeapNode<SetAbstractState<JvmTaintSource>>> heapMapAbstractStateFactory,
                                             MapAbstractStateFactory<java.lang.String,SetAbstractState<JvmTaintSource>> heapNodeMapAbstractStateFactory)

Create a taint follower heap abstract state.

Parameters:

principal - the principal heap abstract state containing reference abstract states

defaultValue - the default value representing unknown values

referenceToNode - the mapping from references to heap nodes

heapMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from references to objects

heapNodeMapAbstractStateFactory - a map abstract state factory used for constructing the mapping from fields to values

Method Detail

taintObject

public <T> void taintObject(T object,
                            SetAbstractState<JvmTaintSource> value)

Description copied from interface: JvmTaintHeapAbstractState

Transitively applies the taint value to the object.

Specified by:

taintObject in interface JvmTaintHeapAbstractState

getFieldOrDefault

public <T> SetAbstractState<JvmTaintSource> getFieldOrDefault(T object,
                                                              java.lang.String fqn,
                                                              SetAbstractState<JvmTaintSource> defaultValue)

Description copied from interface: JvmHeapAbstractState

Returns a field fqn from a reference object. If there is no abstract state representing the field, returns the defaultValue

Specified by:

getFieldOrDefault in interface JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>

Overrides:

getFieldOrDefault in class JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>

getArrayElementOrDefault

public <T> SetAbstractState<JvmTaintSource> getArrayElementOrDefault(T array,
                                                                     SetAbstractState<JvmTaintSource> index,
                                                                     SetAbstractState<JvmTaintSource> defaultValue)

Description copied from interface: JvmHeapAbstractState

Returns an array element at the specified index or the defaultValue, if the element is unset.

Specified by:

getArrayElementOrDefault in interface JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>

Overrides:

getArrayElementOrDefault in class JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>

assignField

protected void assignField(SetAbstractState<Reference> object,
                           java.lang.String descriptor,
                           SetAbstractState<JvmTaintSource> value)

Description copied from class: JvmTreeHeapAbstractState

Assigns the field value to the given one if the reference is unambiguous, joins otherwise.

Overrides:

assignField in class JvmTreeHeapAbstractState<SetAbstractState<JvmTaintSource>>

join

public JvmTaintTreeHeapFollowerAbstractState join(JvmHeapAbstractState<SetAbstractState<JvmTaintSource>> abstractState)

Description copied from interface: LatticeAbstractState

Computes a join over itself and the abstractState.

Specified by:

join in interface LatticeAbstractState<JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>>

Overrides:

join in class JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>

copy

public JvmTaintTreeHeapFollowerAbstractState copy()

Description copied from interface: AbstractState

Creates a copy of itself.

Specified by:

copy in interface AbstractState

Specified by:

copy in interface JvmHeapAbstractState<SetAbstractState<JvmTaintSource>>

Overrides:

copy in class JvmTreeHeapFollowerAbstractState<SetAbstractState<JvmTaintSource>>