Package proguard.analysis.cpa.util
Class TaintAnalyzerResult.TaintAnalysisResult
- java.lang.Object
-
- proguard.analysis.cpa.util.TaintAnalyzerResult.TaintAnalysisResult
-
- Enclosing class:
- TaintAnalyzerResult
public static class TaintAnalyzerResult.TaintAnalysisResult extends java.lang.Object
Results for taint analysis. Provides the reached states and which sinks were triggered, but no witness trace on how the sink was reached from a source (useTaintAnalyzerResult.getTraceReconstructionResult()
for that).
-
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description java.util.Collection<BamLocationDependentJvmMemoryLocation<JvmAbstractState<SetAbstractState<TaintSource>>>>
getEndpoints()
Get locations where sinks have been triggered by a valid source.java.util.Map<BamLocationDependentJvmMemoryLocation<JvmAbstractState<SetAbstractState<TaintSource>>>,java.util.List<JvmTaintSink>>
getEndpointToTriggeredSinks()
Maps locations where sinks have been triggered by valid sources to the triggered sink.ProgramLocationDependentReachedSet<JvmCfaNode,JvmCfaEdge,JvmAbstractState<SetAbstractState<TaintSource>>,MethodSignature>
getMainMethodReachedSet()
BamCache<MethodSignature>
getTaintResultCache()
-
-
-
Method Detail
-
getTaintResultCache
public BamCache<MethodSignature> getTaintResultCache()
-
getMainMethodReachedSet
public ProgramLocationDependentReachedSet<JvmCfaNode,JvmCfaEdge,JvmAbstractState<SetAbstractState<TaintSource>>,MethodSignature> getMainMethodReachedSet()
-
getEndpoints
public java.util.Collection<BamLocationDependentJvmMemoryLocation<JvmAbstractState<SetAbstractState<TaintSource>>>> getEndpoints()
Get locations where sinks have been triggered by a valid source.The endpoints are computed lazily, since it can be an expensive operation, and multiple runs of
TaintAnalyzer.analyze(MethodSignature)
just update the same cache. So, if the sameTaintAnalyzer
performs several runs, it's better to get the endpoints only after all runs have been executed.
-
getEndpointToTriggeredSinks
public java.util.Map<BamLocationDependentJvmMemoryLocation<JvmAbstractState<SetAbstractState<TaintSource>>>,java.util.List<JvmTaintSink>> getEndpointToTriggeredSinks()
Maps locations where sinks have been triggered by valid sources to the triggered sink.The endpoints are computed lazily, since it can be an expensive operation, and multiple runs of
TaintAnalyzer.analyze(MethodSignature)
just update the same cache. So, if the sameTaintAnalyzer
performs several runs, it's better to get the endpoints only after all runs have been executed.
-
-