arkanalyzer 1.0.20 → 1.0.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (279) hide show
  1. package/lib/Config.d.ts +70 -70
  2. package/lib/Config.js +198 -198
  3. package/lib/Scene.d.ts +316 -316
  4. package/lib/Scene.js +1316 -1316
  5. package/lib/callgraph/algorithm/AbstractAnalysis.d.ts +28 -28
  6. package/lib/callgraph/algorithm/AbstractAnalysis.js +144 -144
  7. package/lib/callgraph/algorithm/ClassHierarchyAnalysis.d.ts +10 -10
  8. package/lib/callgraph/algorithm/ClassHierarchyAnalysis.js +69 -69
  9. package/lib/callgraph/algorithm/RapidTypeAnalysis.d.ts +15 -15
  10. package/lib/callgraph/algorithm/RapidTypeAnalysis.js +146 -146
  11. package/lib/callgraph/common/Statistics.d.ts +57 -57
  12. package/lib/callgraph/common/Statistics.js +228 -228
  13. package/lib/callgraph/model/CallGraph.d.ts +96 -96
  14. package/lib/callgraph/model/CallGraph.js +354 -354
  15. package/lib/callgraph/model/builder/CallGraphBuilder.d.ts +15 -15
  16. package/lib/callgraph/model/builder/CallGraphBuilder.js +106 -106
  17. package/lib/callgraph/pointerAnalysis/Context.d.ts +37 -37
  18. package/lib/callgraph/pointerAnalysis/Context.js +155 -155
  19. package/lib/callgraph/pointerAnalysis/DummyCallCreator.d.ts +22 -22
  20. package/lib/callgraph/pointerAnalysis/DummyCallCreator.js +104 -104
  21. package/lib/callgraph/pointerAnalysis/PTAUtils.d.ts +5 -5
  22. package/lib/callgraph/pointerAnalysis/PTAUtils.js +46 -46
  23. package/lib/callgraph/pointerAnalysis/Pag.d.ts +261 -261
  24. package/lib/callgraph/pointerAnalysis/Pag.js +930 -930
  25. package/lib/callgraph/pointerAnalysis/PagBuilder.d.ts +157 -157
  26. package/lib/callgraph/pointerAnalysis/PagBuilder.js +1399 -1399
  27. package/lib/callgraph/pointerAnalysis/PointerAnalysis.d.ts +72 -72
  28. package/lib/callgraph/pointerAnalysis/PointerAnalysis.js +573 -573
  29. package/lib/callgraph/pointerAnalysis/PointerAnalysisConfig.d.ts +15 -15
  30. package/lib/callgraph/pointerAnalysis/PointerAnalysisConfig.js +81 -81
  31. package/lib/callgraph/pointerAnalysis/PtsDS.d.ts +80 -80
  32. package/lib/callgraph/pointerAnalysis/PtsDS.js +308 -308
  33. package/lib/core/base/Constant.d.ts +48 -48
  34. package/lib/core/base/Constant.js +103 -103
  35. package/lib/core/base/Decorator.d.ts +15 -15
  36. package/lib/core/base/Decorator.js +46 -46
  37. package/lib/core/base/DefUseChain.d.ts +8 -8
  38. package/lib/core/base/DefUseChain.js +25 -25
  39. package/lib/core/base/Expr.d.ts +340 -340
  40. package/lib/core/base/Expr.js +917 -917
  41. package/lib/core/base/Local.d.ts +104 -104
  42. package/lib/core/base/Local.js +176 -176
  43. package/lib/core/base/Position.d.ts +30 -30
  44. package/lib/core/base/Position.js +147 -147
  45. package/lib/core/base/Ref.d.ts +173 -173
  46. package/lib/core/base/Ref.js +374 -374
  47. package/lib/core/base/Stmt.d.ts +237 -237
  48. package/lib/core/base/Stmt.js +525 -525
  49. package/lib/core/base/Trap.d.ts +8 -8
  50. package/lib/core/base/Trap.js +30 -30
  51. package/lib/core/base/Type.d.ts +308 -308
  52. package/lib/core/base/Type.js +639 -639
  53. package/lib/core/base/TypeExpr.d.ts +71 -71
  54. package/lib/core/base/TypeExpr.js +155 -155
  55. package/lib/core/base/Value.d.ts +32 -32
  56. package/lib/core/base/Value.js +16 -16
  57. package/lib/core/common/ArkError.d.ts +14 -14
  58. package/lib/core/common/ArkError.js +28 -28
  59. package/lib/core/common/ArkIRTransformer.d.ts +67 -67
  60. package/lib/core/common/ArkIRTransformer.js +690 -690
  61. package/lib/core/common/ArkValueTransformer.d.ts +89 -89
  62. package/lib/core/common/ArkValueTransformer.js +1478 -1478
  63. package/lib/core/common/Builtin.d.ts +36 -36
  64. package/lib/core/common/Builtin.js +81 -81
  65. package/lib/core/common/Const.d.ts +21 -21
  66. package/lib/core/common/Const.js +43 -43
  67. package/lib/core/common/DummyMainCreater.d.ts +46 -46
  68. package/lib/core/common/DummyMainCreater.js +319 -319
  69. package/lib/core/common/EtsConst.d.ts +73 -73
  70. package/lib/core/common/EtsConst.js +1021 -1021
  71. package/lib/core/common/ExprUseReplacer.d.ts +21 -21
  72. package/lib/core/common/ExprUseReplacer.js +124 -124
  73. package/lib/core/common/IRInference.d.ts +36 -36
  74. package/lib/core/common/IRInference.d.ts.map +1 -1
  75. package/lib/core/common/IRInference.js +651 -648
  76. package/lib/core/common/IRUtils.d.ts +18 -18
  77. package/lib/core/common/IRUtils.js +141 -141
  78. package/lib/core/common/ModelUtils.d.ts +70 -70
  79. package/lib/core/common/ModelUtils.js +712 -712
  80. package/lib/core/common/RefUseReplacer.d.ts +13 -13
  81. package/lib/core/common/RefUseReplacer.js +52 -52
  82. package/lib/core/common/SdkUtils.d.ts +8 -8
  83. package/lib/core/common/SdkUtils.js +105 -105
  84. package/lib/core/common/StmtDefReplacer.d.ts +12 -12
  85. package/lib/core/common/StmtDefReplacer.js +41 -41
  86. package/lib/core/common/StmtUseReplacer.d.ts +16 -16
  87. package/lib/core/common/StmtUseReplacer.js +108 -108
  88. package/lib/core/common/TSConst.d.ts +18 -18
  89. package/lib/core/common/TSConst.js +36 -36
  90. package/lib/core/common/TypeInference.d.ts +102 -102
  91. package/lib/core/common/TypeInference.js +748 -748
  92. package/lib/core/common/ValueUtil.d.ts +12 -12
  93. package/lib/core/common/ValueUtil.js +54 -54
  94. package/lib/core/common/VisibleValue.d.ts +36 -36
  95. package/lib/core/common/VisibleValue.js +212 -212
  96. package/lib/core/dataflow/DataflowProblem.d.ts +20 -20
  97. package/lib/core/dataflow/DataflowProblem.js +20 -20
  98. package/lib/core/dataflow/DataflowResult.d.ts +7 -7
  99. package/lib/core/dataflow/DataflowResult.js +26 -26
  100. package/lib/core/dataflow/DataflowSolver.d.ts +43 -43
  101. package/lib/core/dataflow/DataflowSolver.js +307 -307
  102. package/lib/core/dataflow/Edge.d.ts +11 -11
  103. package/lib/core/dataflow/Edge.js +31 -31
  104. package/lib/core/dataflow/Fact.d.ts +6 -6
  105. package/lib/core/dataflow/Fact.js +24 -24
  106. package/lib/core/dataflow/GenericDataFlow.d.ts +142 -142
  107. package/lib/core/dataflow/GenericDataFlow.js +109 -109
  108. package/lib/core/dataflow/ReachingDef.d.ts +62 -62
  109. package/lib/core/dataflow/ReachingDef.js +168 -168
  110. package/lib/core/dataflow/UndefinedVariable.d.ts +45 -45
  111. package/lib/core/dataflow/UndefinedVariable.js +288 -288
  112. package/lib/core/dataflow/Util.d.ts +9 -9
  113. package/lib/core/dataflow/Util.js +64 -64
  114. package/lib/core/graph/BaseExplicitGraph.d.ts +58 -58
  115. package/lib/core/graph/BaseExplicitGraph.js +157 -157
  116. package/lib/core/graph/BaseImplicitGraph.d.ts +77 -77
  117. package/lib/core/graph/BaseImplicitGraph.js +78 -78
  118. package/lib/core/graph/BasicBlock.d.ts +104 -104
  119. package/lib/core/graph/BasicBlock.js +280 -280
  120. package/lib/core/graph/Cfg.d.ts +59 -59
  121. package/lib/core/graph/Cfg.js +282 -282
  122. package/lib/core/graph/DependsGraph.d.ts +35 -35
  123. package/lib/core/graph/DependsGraph.js +87 -87
  124. package/lib/core/graph/DominanceFinder.d.ts +15 -15
  125. package/lib/core/graph/DominanceFinder.js +121 -121
  126. package/lib/core/graph/DominanceTree.d.ts +12 -12
  127. package/lib/core/graph/DominanceTree.js +70 -70
  128. package/lib/core/graph/GraphTraits.d.ts +7 -7
  129. package/lib/core/graph/GraphTraits.js +16 -16
  130. package/lib/core/graph/Scc.d.ts +61 -61
  131. package/lib/core/graph/Scc.js +222 -222
  132. package/lib/core/graph/ViewTree.d.ts +114 -114
  133. package/lib/core/graph/ViewTree.js +16 -16
  134. package/lib/core/graph/builder/CfgBuilder.d.ts +176 -176
  135. package/lib/core/graph/builder/CfgBuilder.js +1139 -1139
  136. package/lib/core/graph/builder/ConditionBuilder.d.ts +15 -15
  137. package/lib/core/graph/builder/ConditionBuilder.js +252 -252
  138. package/lib/core/graph/builder/LoopBuilder.d.ts +20 -20
  139. package/lib/core/graph/builder/LoopBuilder.js +251 -251
  140. package/lib/core/graph/builder/SwitchBuilder.d.ts +11 -11
  141. package/lib/core/graph/builder/SwitchBuilder.js +152 -152
  142. package/lib/core/graph/builder/TrapBuilder.d.ts +16 -16
  143. package/lib/core/graph/builder/TrapBuilder.js +272 -272
  144. package/lib/core/graph/builder/ViewTreeBuilder.d.ts +203 -203
  145. package/lib/core/graph/builder/ViewTreeBuilder.js +1055 -1055
  146. package/lib/core/model/ArkBaseModel.d.ts +59 -59
  147. package/lib/core/model/ArkBaseModel.js +274 -274
  148. package/lib/core/model/ArkBody.d.ts +24 -24
  149. package/lib/core/model/ArkBody.js +65 -65
  150. package/lib/core/model/ArkClass.d.ts +206 -206
  151. package/lib/core/model/ArkClass.js +439 -439
  152. package/lib/core/model/ArkExport.d.ts +72 -72
  153. package/lib/core/model/ArkExport.js +147 -147
  154. package/lib/core/model/ArkField.d.ts +62 -62
  155. package/lib/core/model/ArkField.js +113 -113
  156. package/lib/core/model/ArkFile.d.ts +131 -131
  157. package/lib/core/model/ArkFile.js +267 -267
  158. package/lib/core/model/ArkImport.d.ts +44 -44
  159. package/lib/core/model/ArkImport.js +108 -108
  160. package/lib/core/model/ArkMetadata.d.ts +31 -31
  161. package/lib/core/model/ArkMetadata.js +55 -55
  162. package/lib/core/model/ArkMethod.d.ts +261 -261
  163. package/lib/core/model/ArkMethod.js +592 -592
  164. package/lib/core/model/ArkNamespace.d.ts +66 -66
  165. package/lib/core/model/ArkNamespace.js +209 -209
  166. package/lib/core/model/ArkSignature.d.ts +162 -162
  167. package/lib/core/model/ArkSignature.js +379 -379
  168. package/lib/core/model/builder/ArkClassBuilder.d.ts +12 -12
  169. package/lib/core/model/builder/ArkClassBuilder.js +454 -454
  170. package/lib/core/model/builder/ArkExportBuilder.d.ts +24 -24
  171. package/lib/core/model/builder/ArkExportBuilder.js +210 -210
  172. package/lib/core/model/builder/ArkFieldBuilder.d.ts +8 -8
  173. package/lib/core/model/builder/ArkFieldBuilder.js +193 -193
  174. package/lib/core/model/builder/ArkFileBuilder.d.ts +9 -9
  175. package/lib/core/model/builder/ArkFileBuilder.js +165 -165
  176. package/lib/core/model/builder/ArkImportBuilder.d.ts +4 -4
  177. package/lib/core/model/builder/ArkImportBuilder.js +128 -128
  178. package/lib/core/model/builder/ArkMethodBuilder.d.ts +63 -63
  179. package/lib/core/model/builder/ArkMethodBuilder.js +486 -486
  180. package/lib/core/model/builder/ArkNamespaceBuilder.d.ts +5 -5
  181. package/lib/core/model/builder/ArkNamespaceBuilder.js +205 -205
  182. package/lib/core/model/builder/ArkSignatureBuilder.d.ts +8 -8
  183. package/lib/core/model/builder/ArkSignatureBuilder.js +40 -40
  184. package/lib/core/model/builder/BodyBuilder.d.ts +55 -30
  185. package/lib/core/model/builder/BodyBuilder.d.ts.map +1 -1
  186. package/lib/core/model/builder/BodyBuilder.js +542 -371
  187. package/lib/core/model/builder/builderUtils.d.ts +18 -18
  188. package/lib/core/model/builder/builderUtils.js +558 -558
  189. package/lib/index.d.ts +82 -80
  190. package/lib/index.d.ts.map +1 -1
  191. package/lib/index.js +201 -196
  192. package/lib/save/ArkStream.d.ts +23 -23
  193. package/lib/save/ArkStream.js +83 -83
  194. package/lib/save/DotPrinter.d.ts +43 -43
  195. package/lib/save/DotPrinter.js +170 -170
  196. package/lib/save/GraphPrinter.d.ts +16 -16
  197. package/lib/save/GraphPrinter.js +134 -134
  198. package/lib/save/JsonPrinter.d.ts +30 -30
  199. package/lib/save/JsonPrinter.js +580 -580
  200. package/lib/save/Printer.d.ts +12 -12
  201. package/lib/save/Printer.js +27 -27
  202. package/lib/save/PrinterBuilder.d.ts +53 -53
  203. package/lib/save/PrinterBuilder.js +145 -145
  204. package/lib/save/ViewTreePrinter.d.ts +14 -14
  205. package/lib/save/ViewTreePrinter.js +123 -123
  206. package/lib/save/arkir/ArkIRClassPrinter.d.ts +13 -13
  207. package/lib/save/arkir/ArkIRClassPrinter.js +92 -92
  208. package/lib/save/arkir/ArkIRFieldPrinter.d.ts +11 -11
  209. package/lib/save/arkir/ArkIRFieldPrinter.js +64 -64
  210. package/lib/save/arkir/ArkIRFilePrinter.d.ts +12 -12
  211. package/lib/save/arkir/ArkIRFilePrinter.js +54 -54
  212. package/lib/save/arkir/ArkIRMethodPrinter.d.ts +16 -16
  213. package/lib/save/arkir/ArkIRMethodPrinter.js +159 -159
  214. package/lib/save/arkir/ArkIRNamespacePrinter.d.ts +11 -11
  215. package/lib/save/arkir/ArkIRNamespacePrinter.js +66 -66
  216. package/lib/save/base/BasePrinter.d.ts +23 -23
  217. package/lib/save/base/BasePrinter.js +70 -70
  218. package/lib/save/base/ExportPrinter.d.ts +8 -8
  219. package/lib/save/base/ExportPrinter.js +67 -67
  220. package/lib/save/base/ImportPrinter.d.ts +9 -9
  221. package/lib/save/base/ImportPrinter.js +92 -92
  222. package/lib/save/base/PrinterUtils.d.ts +24 -24
  223. package/lib/save/base/PrinterUtils.js +208 -208
  224. package/lib/save/serializeArkIR.d.ts +8 -8
  225. package/lib/save/serializeArkIR.js +294 -294
  226. package/lib/save/source/SourceBase.d.ts +22 -22
  227. package/lib/save/source/SourceBase.js +64 -64
  228. package/lib/save/source/SourceBody.d.ts +58 -58
  229. package/lib/save/source/SourceBody.js +296 -296
  230. package/lib/save/source/SourceClass.d.ts +25 -25
  231. package/lib/save/source/SourceClass.js +187 -187
  232. package/lib/save/source/SourceField.d.ts +13 -13
  233. package/lib/save/source/SourceField.js +73 -73
  234. package/lib/save/source/SourceFilePrinter.d.ts +12 -12
  235. package/lib/save/source/SourceFilePrinter.js +69 -69
  236. package/lib/save/source/SourceMethod.d.ts +22 -22
  237. package/lib/save/source/SourceMethod.d.ts.map +1 -1
  238. package/lib/save/source/SourceMethod.js +196 -193
  239. package/lib/save/source/SourceNamespace.d.ts +11 -11
  240. package/lib/save/source/SourceNamespace.js +83 -83
  241. package/lib/save/source/SourceStmt.d.ts +178 -178
  242. package/lib/save/source/SourceStmt.js +838 -838
  243. package/lib/save/source/SourceTransformer.d.ts +46 -46
  244. package/lib/save/source/SourceTransformer.js +446 -446
  245. package/lib/transformer/FunctionTransformer.d.ts +2 -2
  246. package/lib/transformer/FunctionTransformer.js +17 -17
  247. package/lib/transformer/SceneTransformer.d.ts +2 -2
  248. package/lib/transformer/SceneTransformer.js +17 -17
  249. package/lib/transformer/StaticSingleAssignmentFormer.d.ts +12 -12
  250. package/lib/transformer/StaticSingleAssignmentFormer.js +259 -259
  251. package/lib/transformer/Transformer.d.ts +6 -6
  252. package/lib/transformer/Transformer.js +22 -22
  253. package/lib/utils/AstTreeUtils.d.ts +4 -4
  254. package/lib/utils/AstTreeUtils.js +26 -26
  255. package/lib/utils/CfgStructualAnalysis.d.ts +110 -110
  256. package/lib/utils/CfgStructualAnalysis.js +1277 -1277
  257. package/lib/utils/FileUtils.d.ts +18 -18
  258. package/lib/utils/FileUtils.js +135 -135
  259. package/lib/utils/SparseBitVector.d.ts +100 -100
  260. package/lib/utils/SparseBitVector.js +445 -445
  261. package/lib/utils/callGraphUtils.d.ts +30 -30
  262. package/lib/utils/callGraphUtils.js +205 -205
  263. package/lib/utils/crypto_utils.d.ts +5 -5
  264. package/lib/utils/crypto_utils.js +57 -57
  265. package/lib/utils/entryMethodUtils.d.ts +13 -13
  266. package/lib/utils/entryMethodUtils.js +110 -110
  267. package/lib/utils/getAllFiles.d.ts +9 -9
  268. package/lib/utils/getAllFiles.js +90 -90
  269. package/lib/utils/json5parser.d.ts +6 -6
  270. package/lib/utils/json5parser.js +146 -146
  271. package/lib/utils/logger.d.ts +18 -18
  272. package/lib/utils/logger.d.ts.map +1 -1
  273. package/lib/utils/logger.js +97 -90
  274. package/lib/utils/pathTransfer.d.ts +1 -1
  275. package/lib/utils/pathTransfer.js +25 -25
  276. package/node_modules/json5/lib/cli.js +0 -0
  277. package/node_modules/ohos-typescript/bin/tsc +0 -0
  278. package/node_modules/ohos-typescript/bin/tsserver +0 -0
  279. package/package.json +3 -3
@@ -1,573 +1,573 @@
1
- "use strict";
2
- /*
3
- * Copyright (c) 2024-2025 Huawei Device Co., Ltd.
4
- * Licensed under the Apache License, Version 2.0 (the "License");
5
- * you may not use this file except in compliance with the License.
6
- * You may obtain a copy of the License at
7
- *
8
- * http://www.apache.org/licenses/LICENSE-2.0
9
- *
10
- * Unless required by applicable law or agreed to in writing, software
11
- * distributed under the License is distributed on an "AS IS" BASIS,
12
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
- * See the License for the specific language governing permissions and
14
- * limitations under the License.
15
- */
16
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
17
- if (k2 === undefined) k2 = k;
18
- var desc = Object.getOwnPropertyDescriptor(m, k);
19
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
20
- desc = { enumerable: true, get: function() { return m[k]; } };
21
- }
22
- Object.defineProperty(o, k2, desc);
23
- }) : (function(o, m, k, k2) {
24
- if (k2 === undefined) k2 = k;
25
- o[k2] = m[k];
26
- }));
27
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
28
- Object.defineProperty(o, "default", { enumerable: true, value: v });
29
- }) : function(o, v) {
30
- o["default"] = v;
31
- });
32
- var __importStar = (this && this.__importStar) || function (mod) {
33
- if (mod && mod.__esModule) return mod;
34
- var result = {};
35
- if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
36
- __setModuleDefault(result, mod);
37
- return result;
38
- };
39
- var __importDefault = (this && this.__importDefault) || function (mod) {
40
- return (mod && mod.__esModule) ? mod : { "default": mod };
41
- };
42
- Object.defineProperty(exports, "__esModule", { value: true });
43
- exports.PointerAnalysis = void 0;
44
- const path_1 = __importDefault(require("path"));
45
- const fs = __importStar(require("fs"));
46
- const CallGraph_1 = require("../model/CallGraph");
47
- const AbstractAnalysis_1 = require("../algorithm/AbstractAnalysis");
48
- const Type_1 = require("../../core/base/Type");
49
- const CallGraphBuilder_1 = require("../model/builder/CallGraphBuilder");
50
- const logger_1 = __importStar(require("../../utils/logger"));
51
- const DummyMainCreater_1 = require("../../core/common/DummyMainCreater");
52
- const Statistics_1 = require("../common/Statistics");
53
- const Pag_1 = require("./Pag");
54
- const PagBuilder_1 = require("./PagBuilder");
55
- const PointerAnalysisConfig_1 = require("./PointerAnalysisConfig");
56
- const PtsDS_1 = require("./PtsDS");
57
- const Local_1 = require("../../core/base/Local");
58
- const logger = logger_1.default.getLogger(logger_1.LOG_MODULE_TYPE.ARKANALYZER, 'PTA');
59
- class PointerAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
60
- constructor(p, cg, s, config) {
61
- super(s);
62
- this.pag = p;
63
- this.cg = cg;
64
- this.ptd = new PtsDS_1.DiffPTData(config.ptsCollectionCtor);
65
- this.pagBuilder = new PagBuilder_1.PagBuilder(this.pag, this.cg, s, config.kLimit);
66
- this.cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(this.cg, s);
67
- this.ptaStat = new Statistics_1.PTAStat(this);
68
- this.config = config;
69
- }
70
- static pointerAnalysisForWholeProject(projectScene, config) {
71
- let cg = new CallGraph_1.CallGraph(projectScene);
72
- let cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(cg, projectScene);
73
- cgBuilder.buildDirectCallGraphForScene();
74
- let pag = new Pag_1.Pag();
75
- if (!config) {
76
- config = PointerAnalysisConfig_1.PointerAnalysisConfig.create(1, 'out/', false, false);
77
- }
78
- const dummyMainCreator = new DummyMainCreater_1.DummyMainCreater(projectScene);
79
- dummyMainCreator.createDummyMain();
80
- const dummyMainMethod = dummyMainCreator.getDummyMain();
81
- cgBuilder.buildDirectCallGraph([dummyMainMethod]);
82
- let dummyMainMethodID = cg.getCallGraphNodeByMethod(dummyMainMethod.getSignature()).getID();
83
- cg.setDummyMainFuncID(dummyMainMethodID);
84
- let pta = new PointerAnalysis(pag, cg, projectScene, config);
85
- pta.setEntries([dummyMainMethodID]);
86
- pta.start();
87
- return pta;
88
- }
89
- init() {
90
- logger.warn(`========== Init Pointer Analysis ==========`);
91
- // start statistics
92
- this.ptaStat.startStat();
93
- // build funcPag with entries
94
- this.pagBuilder.buildForEntries(this.entries);
95
- if (this.config.dotDump) {
96
- this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaInit_pag.dot'));
97
- this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cg_init.dot'));
98
- }
99
- }
100
- start() {
101
- this.init();
102
- this.solveConstraint();
103
- this.postProcess();
104
- }
105
- postProcess() {
106
- this.ptaStat.endStat();
107
- this.pagBuilder.doStat();
108
- this.cg.printStat();
109
- this.pagBuilder.printStat();
110
- this.ptaStat.printStat();
111
- if (this.config.dotDump) {
112
- this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaEnd_pag.dot'));
113
- this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cgEnd.dot'));
114
- }
115
- if (this.config.unhandledFuncDump) {
116
- this.dumpUnhandledFunctions();
117
- }
118
- }
119
- getPTD() {
120
- return this.ptd;
121
- }
122
- getStat() {
123
- let ret = this.cg.getStat();
124
- ret += '\n' + this.pagBuilder.getStat();
125
- ret += '\n' + this.ptaStat.getStat();
126
- return ret;
127
- }
128
- preProcessMethod(funcID) {
129
- // do nothing
130
- return [];
131
- }
132
- setEntries(fIds) {
133
- this.entries = fIds;
134
- }
135
- solveConstraint() {
136
- this.worklist = [];
137
- logger.warn(`========== Pointer Analysis Start ==========`);
138
- this.initWorklist();
139
- let reanalyzer = true;
140
- while (reanalyzer) {
141
- this.ptaStat.iterTimes++;
142
- logger.warn(`========== Pointer Analysis Round ${this.ptaStat.iterTimes} ==========`);
143
- // do pointer transfer
144
- this.solveWorklist();
145
- // process dynamic call
146
- reanalyzer = this.onTheFlyDynamicCallSolve();
147
- if (this.config.dotDump) {
148
- this.pag.dump(path_1.default.join(this.config.outputDirectory, `pta_pag_itor#${this.ptaStat.iterTimes}.dot`));
149
- }
150
- }
151
- }
152
- /**
153
- * get newly added Address Edge, and add them to initial WorkList
154
- */
155
- initWorklist() {
156
- for (let e of this.pag.getAddrEdges()) {
157
- this.ptaStat.numProcessedAddr++;
158
- let { src, dst } = e.getEndPoints();
159
- this.ptd.addPts(dst, src);
160
- if (this.pag.getNode(src) instanceof Pag_1.PagGlobalThisNode) {
161
- // readd globalThis heapObj into workList
162
- this.ptd.addPts(src, src);
163
- this.worklist.push(src);
164
- }
165
- this.worklist.push(dst);
166
- }
167
- this.pag.resetAddrEdges();
168
- }
169
- solveWorklist() {
170
- while (this.worklist.length > 0) {
171
- let node = this.worklist.shift();
172
- this.processNode(node);
173
- }
174
- return true;
175
- }
176
- processNode(nodeId) {
177
- this.handleThis(nodeId);
178
- this.handleLoadWrite(nodeId);
179
- this.handleCopy(nodeId);
180
- this.handlePt(nodeId);
181
- this.detectTypeDiff(nodeId);
182
- return true;
183
- }
184
- handleCopy(nodeID) {
185
- var _a;
186
- let node = this.pag.getNode(nodeID);
187
- (_a = node.getOutgoingCopyEdges()) === null || _a === void 0 ? void 0 : _a.forEach(copyEdge => {
188
- this.propagate(copyEdge);
189
- this.ptaStat.numProcessedCopy++;
190
- });
191
- return true;
192
- }
193
- handleLoadWrite(nodeID) {
194
- var _a;
195
- let node = this.pag.getNode(nodeID);
196
- let nodeValue = node.getValue();
197
- let diffPts = this.ptd.getDiffPts(nodeID);
198
- if (!diffPts || diffPts.count() === 0) {
199
- return false;
200
- }
201
- // get related field node with current node's value
202
- let instanceFieldNodeMap = (_a = this.pag.getNodesByBaseValue(nodeValue)) !== null && _a !== void 0 ? _a : new Map();
203
- // get intra procedural field node by exportMap
204
- let intraProceduralFieldNodeMap = new Map();
205
- if (nodeValue instanceof Local_1.Local) {
206
- this.pagBuilder.getExportVariableMap(nodeValue).forEach((dst) => {
207
- var _a;
208
- let temp = (_a = this.pag.getNodesByBaseValue(dst)) !== null && _a !== void 0 ? _a : new Map();
209
- intraProceduralFieldNodeMap = this.mergeInstanceFieldMap(instanceFieldNodeMap, temp);
210
- });
211
- }
212
- instanceFieldNodeMap.forEach((nodeIDs, cid) => {
213
- // TODO: check cid
214
- // cid === -1 will escape the check, mainly for globalThis
215
- let baseCid = node.getCid();
216
- if (baseCid !== -1 && cid !== baseCid) {
217
- return;
218
- }
219
- nodeIDs.forEach((nodeID) => {
220
- // get abstract field node
221
- let fieldNode = this.pag.getNode(nodeID);
222
- this.handleFieldInEdges(fieldNode, diffPts);
223
- this.handleFieldOutEdges(fieldNode, diffPts);
224
- });
225
- });
226
- // without cid check, because closure and export is under different cid
227
- intraProceduralFieldNodeMap.forEach((nodeIDs) => {
228
- nodeIDs.forEach((nodeID) => {
229
- // get abstract field node
230
- let fieldNode = this.pag.getNode(nodeID);
231
- this.handleFieldInEdges(fieldNode, diffPts);
232
- this.handleFieldOutEdges(fieldNode, diffPts);
233
- });
234
- });
235
- return true;
236
- }
237
- handleFieldInEdges(fieldNode, diffPts) {
238
- fieldNode.getIncomingEdge().forEach((edge) => {
239
- if (edge.getKind() !== Pag_1.PagEdgeKind.Write) {
240
- return;
241
- }
242
- let srcNode = edge.getSrcNode();
243
- this.ptaStat.numProcessedWrite++;
244
- for (let pt of diffPts) {
245
- // filter pt
246
- // clone the real field node with abstract field node
247
- let dstNode;
248
- if (fieldNode instanceof Pag_1.PagArrayNode) {
249
- dstNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
250
- }
251
- else {
252
- dstNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
253
- }
254
- if (dstNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
255
- this.ptaStat.numRealWrite++;
256
- if (this.ptd.resetElem(srcNode.getID())) {
257
- this.worklist.push(srcNode.getID());
258
- }
259
- }
260
- }
261
- });
262
- }
263
- handleFieldOutEdges(fieldNode, diffPts) {
264
- fieldNode.getOutgoingEdges().forEach((edge) => {
265
- if (edge.getKind() !== Pag_1.PagEdgeKind.Load) {
266
- return;
267
- }
268
- let dstNode = edge.getDstNode();
269
- this.ptaStat.numProcessedLoad++;
270
- for (let pt of diffPts) {
271
- let srcNode;
272
- if (fieldNode instanceof Pag_1.PagArrayNode) {
273
- srcNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
274
- }
275
- else {
276
- srcNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
277
- }
278
- if (srcNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
279
- this.ptaStat.numRealLoad++;
280
- // TODO: if field is used before initialzed, newSrc node has no diff pts
281
- if (this.ptd.resetElem(srcNode.getID())) {
282
- this.worklist.push(srcNode.getID());
283
- }
284
- }
285
- }
286
- });
287
- }
288
- /**
289
- * If current node is a base of a called method, pointer in this node will be transfered into `this` Local in method
290
- */
291
- handleThis(nodeID) {
292
- var _a;
293
- let node = this.pag.getNode(nodeID);
294
- (_a = node.getOutgoingThisEdges()) === null || _a === void 0 ? void 0 : _a.forEach(thisEdge => {
295
- this.propagate(thisEdge);
296
- this.ptaStat.numProcessedThis++;
297
- });
298
- return true;
299
- }
300
- handlePt(nodeID) {
301
- let realDiff = this.ptd.calculateDiff(nodeID, nodeID);
302
- if (realDiff.count() !== 0) {
303
- // record the updated nodes
304
- this.pagBuilder.addUpdatedNode(nodeID, realDiff);
305
- }
306
- this.ptd.flush(nodeID);
307
- this.pagBuilder.setPtForNode(nodeID, this.ptd.getPropaPts(nodeID));
308
- }
309
- propagate(edge) {
310
- let changed = false;
311
- let { src, dst } = edge.getEndPoints();
312
- let diffPts = this.ptd.getDiffPts(src);
313
- if (!diffPts) {
314
- return changed;
315
- }
316
- let realDiffPts = this.ptd.calculateDiff(src, dst);
317
- for (let pt of realDiffPts) {
318
- changed = this.ptd.addPts(dst, pt) || changed;
319
- }
320
- if (changed) {
321
- this.worklist.push(dst);
322
- }
323
- return changed;
324
- }
325
- /**
326
- * 1. 记录被更新的节点(记录cid, nodeid)
327
- * 2. ( PAGLocalNode记录callsite(cid, value唯一)),通过1种的nodeID查询Node,拿到Callsite
328
- * 3. 在addDynamicCall里对传入指针过滤(已处理指针和未处理指针)
329
- */
330
- onTheFlyDynamicCallSolve() {
331
- let changed = false;
332
- let processedCallSites = new Set();
333
- this.pagBuilder.getUpdatedNodes().forEach((pts, nodeID) => {
334
- let node = this.pag.getNode(nodeID);
335
- if (!(node instanceof Pag_1.PagLocalNode)) {
336
- logger.warn(`node ${nodeID} is not local node, value: ${node.getValue()}`);
337
- return;
338
- }
339
- changed = this.processDynCallSite(node, pts, processedCallSites) || changed;
340
- changed = this.processUnknownCallSite(node, pts) || changed;
341
- });
342
- this.pagBuilder.resetUpdatedNodes();
343
- let srcNodes = this.pagBuilder.handleUnprocessedCallSites(processedCallSites);
344
- changed = this.addToReanalyze(srcNodes) || changed;
345
- changed = this.pagBuilder.handleReachable() || changed;
346
- this.initWorklist();
347
- return changed;
348
- }
349
- processDynCallSite(node, pts, processedCallSites) {
350
- let changed = false;
351
- let dynCallSites = node.getRelatedDynCallSites();
352
- if (!dynCallSites && !node.isSdkParam()) {
353
- logger.warn(`node ${node.getID()} has no related dynamic call site`);
354
- return changed;
355
- }
356
- logger.info(`[process dynamic callsite] node ${node.getID()}`);
357
- dynCallSites.forEach((dynCallsite) => {
358
- for (let pt of pts) {
359
- let srcNodes = this.pagBuilder.addDynamicCallEdge(dynCallsite, pt, node.getCid());
360
- changed = this.addToReanalyze(srcNodes) || changed;
361
- }
362
- processedCallSites.add(dynCallsite);
363
- });
364
- return changed;
365
- }
366
- processUnknownCallSite(node, pts) {
367
- let changed = false;
368
- let unknownCallSites = node.getRelatedUnknownCallSites();
369
- if (!unknownCallSites) {
370
- logger.warn(`node ${node.getID()} has no related unknown call site`);
371
- return changed;
372
- }
373
- logger.info(`[process unknown callsite] node ${node.getID()}`);
374
- unknownCallSites.forEach((unknownCallSite) => {
375
- for (let pt of pts) {
376
- let srcNodes = this.pagBuilder.addDynamicCallEdge(unknownCallSite, pt, node.getCid());
377
- changed = this.addToReanalyze(srcNodes) || changed;
378
- }
379
- });
380
- return changed;
381
- }
382
- addToReanalyze(startNodes) {
383
- let flag = false;
384
- for (let node of startNodes) {
385
- if (!this.worklist.includes(node) && this.ptd.resetElem(node)) {
386
- this.worklist.push(node);
387
- flag = true;
388
- }
389
- }
390
- return flag;
391
- }
392
- /**
393
- * compare interface
394
- */
395
- noAlias(leftValue, rightValue) {
396
- var _a, _b;
397
- let leftValueNodes = (_a = this.pag.getNodesByValue(leftValue)) === null || _a === void 0 ? void 0 : _a.values();
398
- let rightValueNodes = (_b = this.pag.getNodesByValue(rightValue)) === null || _b === void 0 ? void 0 : _b.values();
399
- let leftValuePts = new Set();
400
- let rightValuePts = new Set();
401
- for (let nodeID of leftValueNodes) {
402
- let node = this.pag.getNode(nodeID);
403
- for (let pt of node.getPointTo()) {
404
- leftValuePts.add(pt);
405
- }
406
- }
407
- for (let nodeID of rightValueNodes) {
408
- let node = this.pag.getNode(nodeID);
409
- for (let pt of node.getPointTo()) {
410
- rightValuePts.add(pt);
411
- }
412
- }
413
- if (leftValuePts.size > rightValuePts.size) {
414
- [leftValuePts, rightValuePts] = [rightValuePts, leftValuePts];
415
- }
416
- for (const elem of leftValuePts) {
417
- if (rightValuePts.has(elem)) {
418
- return false;
419
- }
420
- }
421
- // no alias
422
- return true;
423
- }
424
- mayAlias(leftValue, rightValue) {
425
- return !this.noAlias(leftValue, rightValue);
426
- }
427
- getRelatedNodes(value) {
428
- let valueNodes = this.pag.getNodesByValue(value);
429
- let relatedAllNodes = new Set();
430
- let workListNodes = [];
431
- let processedNodes = new Set();
432
- if (valueNodes) {
433
- for (const nodeID of valueNodes.values()) {
434
- workListNodes.push(nodeID);
435
- }
436
- }
437
- while (workListNodes.length !== 0) {
438
- let valueNodeID = workListNodes.shift();
439
- if (processedNodes.has(valueNodeID)) {
440
- continue;
441
- }
442
- this.processRelatedNode(valueNodeID, workListNodes, processedNodes);
443
- }
444
- processedNodes.forEach(nodeID => {
445
- let valueNode = this.pag.getNode(nodeID);
446
- relatedAllNodes.add(valueNode.getValue());
447
- });
448
- return relatedAllNodes;
449
- }
450
- processRelatedNode(valueNodeID, workListNodes, processedNodes) {
451
- let valueNode = this.pag.getNode(valueNodeID);
452
- this.addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes);
453
- this.addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes);
454
- processedNodes.add(valueNodeID);
455
- }
456
- addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
457
- let inCopyEdges = valueNode.getIncomingCopyEdges();
458
- if (inCopyEdges) {
459
- inCopyEdges.forEach(edge => {
460
- let srcID = edge.getSrcID();
461
- if (!processedNodes.has(srcID)) {
462
- workListNodes.push(srcID);
463
- }
464
- });
465
- }
466
- }
467
- addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
468
- let outCopyEdges = valueNode.getOutgoingCopyEdges();
469
- if (outCopyEdges) {
470
- outCopyEdges.forEach(edge => {
471
- let dstID = edge.getDstID();
472
- if (!processedNodes.has(dstID)) {
473
- workListNodes.push(dstID);
474
- }
475
- });
476
- }
477
- }
478
- detectTypeDiff(nodeId) {
479
- var _a, _b;
480
- if (this.config.detectTypeDiff === false) {
481
- return;
482
- }
483
- this.typeDiffMap = (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
484
- let node = this.pag.getNode(nodeId);
485
- let value = node.getValue();
486
- let origType = node.getValue().getType();
487
- // TODO: union type
488
- if (!(origType instanceof Type_1.ClassType || origType instanceof Type_1.UnknownType)) {
489
- return;
490
- }
491
- let findSameType = false;
492
- let pts = node.getPointTo();
493
- if (pts.count() === 0) {
494
- return;
495
- }
496
- for (let pt of pts) {
497
- let ptNode = this.pag.getNode(pt);
498
- let type = ptNode.getValue().getType();
499
- if (type.toString() !== origType.toString()) {
500
- let diffSet = (_b = this.typeDiffMap.get(value)) !== null && _b !== void 0 ? _b : new Set();
501
- this.typeDiffMap.set(value, diffSet);
502
- if (!diffSet.has(type)) {
503
- diffSet.add(type);
504
- }
505
- }
506
- else {
507
- findSameType = true;
508
- }
509
- }
510
- // If find pts to original type,
511
- // need add original type back since it is a correct type
512
- let diffSet = this.typeDiffMap.get(value);
513
- if (diffSet && findSameType) {
514
- diffSet.add(origType);
515
- }
516
- }
517
- getTypeDiffMap() {
518
- var _a;
519
- return (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
520
- }
521
- resolveCall(sourceMethod, invokeStmt) {
522
- return [];
523
- }
524
- getUnhandledFuncs() {
525
- return this.pagBuilder.getUnhandledFuncs();
526
- }
527
- getHandledFuncs() {
528
- return this.pagBuilder.getHandledFuncs();
529
- }
530
- getPTAConfig() {
531
- return this.config;
532
- }
533
- dumpUnhandledFunctions() {
534
- const filePath = path_1.default.join(this.config.outputDirectory, 'PtaUnhandledFunctionList.txt');
535
- fs.access(filePath, fs.constants.F_OK, (err) => {
536
- if (!err) {
537
- fs.truncate(filePath, 0, (err) => {
538
- if (err) {
539
- logger.error('Error to truncate file ', err);
540
- }
541
- });
542
- }
543
- let updatedContent = '';
544
- this.getUnhandledFuncs().forEach(funcID => {
545
- let cgNode = this.cg.getNode(funcID);
546
- if (cgNode.isSdkMethod()) {
547
- return;
548
- }
549
- let f = this.cg.getArkMethodByFuncID(funcID);
550
- if (f) {
551
- updatedContent += f.getSignature().toString() + '\n';
552
- }
553
- });
554
- fs.writeFile(filePath, updatedContent, 'utf8', (err) => {
555
- if (err) {
556
- logger.error('Error to write file', err);
557
- }
558
- });
559
- });
560
- }
561
- mergeInstanceFieldMap(src, dst) {
562
- dst.forEach((value, key) => {
563
- if (src.has(key)) {
564
- src.set(key, [...src.get(key), ...value]);
565
- }
566
- else {
567
- src.set(key, value);
568
- }
569
- });
570
- return src;
571
- }
572
- }
573
- exports.PointerAnalysis = PointerAnalysis;
1
+ "use strict";
2
+ /*
3
+ * Copyright (c) 2024-2025 Huawei Device Co., Ltd.
4
+ * Licensed under the Apache License, Version 2.0 (the "License");
5
+ * you may not use this file except in compliance with the License.
6
+ * You may obtain a copy of the License at
7
+ *
8
+ * http://www.apache.org/licenses/LICENSE-2.0
9
+ *
10
+ * Unless required by applicable law or agreed to in writing, software
11
+ * distributed under the License is distributed on an "AS IS" BASIS,
12
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13
+ * See the License for the specific language governing permissions and
14
+ * limitations under the License.
15
+ */
16
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
17
+ if (k2 === undefined) k2 = k;
18
+ var desc = Object.getOwnPropertyDescriptor(m, k);
19
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
20
+ desc = { enumerable: true, get: function() { return m[k]; } };
21
+ }
22
+ Object.defineProperty(o, k2, desc);
23
+ }) : (function(o, m, k, k2) {
24
+ if (k2 === undefined) k2 = k;
25
+ o[k2] = m[k];
26
+ }));
27
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
28
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
29
+ }) : function(o, v) {
30
+ o["default"] = v;
31
+ });
32
+ var __importStar = (this && this.__importStar) || function (mod) {
33
+ if (mod && mod.__esModule) return mod;
34
+ var result = {};
35
+ if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
36
+ __setModuleDefault(result, mod);
37
+ return result;
38
+ };
39
+ var __importDefault = (this && this.__importDefault) || function (mod) {
40
+ return (mod && mod.__esModule) ? mod : { "default": mod };
41
+ };
42
+ Object.defineProperty(exports, "__esModule", { value: true });
43
+ exports.PointerAnalysis = void 0;
44
+ const path_1 = __importDefault(require("path"));
45
+ const fs = __importStar(require("fs"));
46
+ const CallGraph_1 = require("../model/CallGraph");
47
+ const AbstractAnalysis_1 = require("../algorithm/AbstractAnalysis");
48
+ const Type_1 = require("../../core/base/Type");
49
+ const CallGraphBuilder_1 = require("../model/builder/CallGraphBuilder");
50
+ const logger_1 = __importStar(require("../../utils/logger"));
51
+ const DummyMainCreater_1 = require("../../core/common/DummyMainCreater");
52
+ const Statistics_1 = require("../common/Statistics");
53
+ const Pag_1 = require("./Pag");
54
+ const PagBuilder_1 = require("./PagBuilder");
55
+ const PointerAnalysisConfig_1 = require("./PointerAnalysisConfig");
56
+ const PtsDS_1 = require("./PtsDS");
57
+ const Local_1 = require("../../core/base/Local");
58
+ const logger = logger_1.default.getLogger(logger_1.LOG_MODULE_TYPE.ARKANALYZER, 'PTA');
59
+ class PointerAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
60
+ constructor(p, cg, s, config) {
61
+ super(s);
62
+ this.pag = p;
63
+ this.cg = cg;
64
+ this.ptd = new PtsDS_1.DiffPTData(config.ptsCollectionCtor);
65
+ this.pagBuilder = new PagBuilder_1.PagBuilder(this.pag, this.cg, s, config.kLimit);
66
+ this.cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(this.cg, s);
67
+ this.ptaStat = new Statistics_1.PTAStat(this);
68
+ this.config = config;
69
+ }
70
+ static pointerAnalysisForWholeProject(projectScene, config) {
71
+ let cg = new CallGraph_1.CallGraph(projectScene);
72
+ let cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(cg, projectScene);
73
+ cgBuilder.buildDirectCallGraphForScene();
74
+ let pag = new Pag_1.Pag();
75
+ if (!config) {
76
+ config = PointerAnalysisConfig_1.PointerAnalysisConfig.create(1, 'out/', false, false);
77
+ }
78
+ const dummyMainCreator = new DummyMainCreater_1.DummyMainCreater(projectScene);
79
+ dummyMainCreator.createDummyMain();
80
+ const dummyMainMethod = dummyMainCreator.getDummyMain();
81
+ cgBuilder.buildDirectCallGraph([dummyMainMethod]);
82
+ let dummyMainMethodID = cg.getCallGraphNodeByMethod(dummyMainMethod.getSignature()).getID();
83
+ cg.setDummyMainFuncID(dummyMainMethodID);
84
+ let pta = new PointerAnalysis(pag, cg, projectScene, config);
85
+ pta.setEntries([dummyMainMethodID]);
86
+ pta.start();
87
+ return pta;
88
+ }
89
+ init() {
90
+ logger.warn(`========== Init Pointer Analysis ==========`);
91
+ // start statistics
92
+ this.ptaStat.startStat();
93
+ // build funcPag with entries
94
+ this.pagBuilder.buildForEntries(this.entries);
95
+ if (this.config.dotDump) {
96
+ this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaInit_pag.dot'));
97
+ this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cg_init.dot'));
98
+ }
99
+ }
100
+ start() {
101
+ this.init();
102
+ this.solveConstraint();
103
+ this.postProcess();
104
+ }
105
+ postProcess() {
106
+ this.ptaStat.endStat();
107
+ this.pagBuilder.doStat();
108
+ this.cg.printStat();
109
+ this.pagBuilder.printStat();
110
+ this.ptaStat.printStat();
111
+ if (this.config.dotDump) {
112
+ this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaEnd_pag.dot'));
113
+ this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cgEnd.dot'));
114
+ }
115
+ if (this.config.unhandledFuncDump) {
116
+ this.dumpUnhandledFunctions();
117
+ }
118
+ }
119
+ getPTD() {
120
+ return this.ptd;
121
+ }
122
+ getStat() {
123
+ let ret = this.cg.getStat();
124
+ ret += '\n' + this.pagBuilder.getStat();
125
+ ret += '\n' + this.ptaStat.getStat();
126
+ return ret;
127
+ }
128
+ preProcessMethod(funcID) {
129
+ // do nothing
130
+ return [];
131
+ }
132
+ setEntries(fIds) {
133
+ this.entries = fIds;
134
+ }
135
+ solveConstraint() {
136
+ this.worklist = [];
137
+ logger.warn(`========== Pointer Analysis Start ==========`);
138
+ this.initWorklist();
139
+ let reanalyzer = true;
140
+ while (reanalyzer) {
141
+ this.ptaStat.iterTimes++;
142
+ logger.warn(`========== Pointer Analysis Round ${this.ptaStat.iterTimes} ==========`);
143
+ // do pointer transfer
144
+ this.solveWorklist();
145
+ // process dynamic call
146
+ reanalyzer = this.onTheFlyDynamicCallSolve();
147
+ if (this.config.dotDump) {
148
+ this.pag.dump(path_1.default.join(this.config.outputDirectory, `pta_pag_itor#${this.ptaStat.iterTimes}.dot`));
149
+ }
150
+ }
151
+ }
152
+ /**
153
+ * get newly added Address Edge, and add them to initial WorkList
154
+ */
155
+ initWorklist() {
156
+ for (let e of this.pag.getAddrEdges()) {
157
+ this.ptaStat.numProcessedAddr++;
158
+ let { src, dst } = e.getEndPoints();
159
+ this.ptd.addPts(dst, src);
160
+ if (this.pag.getNode(src) instanceof Pag_1.PagGlobalThisNode) {
161
+ // readd globalThis heapObj into workList
162
+ this.ptd.addPts(src, src);
163
+ this.worklist.push(src);
164
+ }
165
+ this.worklist.push(dst);
166
+ }
167
+ this.pag.resetAddrEdges();
168
+ }
169
+ solveWorklist() {
170
+ while (this.worklist.length > 0) {
171
+ let node = this.worklist.shift();
172
+ this.processNode(node);
173
+ }
174
+ return true;
175
+ }
176
+ processNode(nodeId) {
177
+ this.handleThis(nodeId);
178
+ this.handleLoadWrite(nodeId);
179
+ this.handleCopy(nodeId);
180
+ this.handlePt(nodeId);
181
+ this.detectTypeDiff(nodeId);
182
+ return true;
183
+ }
184
+ handleCopy(nodeID) {
185
+ var _a;
186
+ let node = this.pag.getNode(nodeID);
187
+ (_a = node.getOutgoingCopyEdges()) === null || _a === void 0 ? void 0 : _a.forEach(copyEdge => {
188
+ this.propagate(copyEdge);
189
+ this.ptaStat.numProcessedCopy++;
190
+ });
191
+ return true;
192
+ }
193
+ handleLoadWrite(nodeID) {
194
+ var _a;
195
+ let node = this.pag.getNode(nodeID);
196
+ let nodeValue = node.getValue();
197
+ let diffPts = this.ptd.getDiffPts(nodeID);
198
+ if (!diffPts || diffPts.count() === 0) {
199
+ return false;
200
+ }
201
+ // get related field node with current node's value
202
+ let instanceFieldNodeMap = (_a = this.pag.getNodesByBaseValue(nodeValue)) !== null && _a !== void 0 ? _a : new Map();
203
+ // get intra procedural field node by exportMap
204
+ let intraProceduralFieldNodeMap = new Map();
205
+ if (nodeValue instanceof Local_1.Local) {
206
+ this.pagBuilder.getExportVariableMap(nodeValue).forEach((dst) => {
207
+ var _a;
208
+ let temp = (_a = this.pag.getNodesByBaseValue(dst)) !== null && _a !== void 0 ? _a : new Map();
209
+ intraProceduralFieldNodeMap = this.mergeInstanceFieldMap(instanceFieldNodeMap, temp);
210
+ });
211
+ }
212
+ instanceFieldNodeMap.forEach((nodeIDs, cid) => {
213
+ // TODO: check cid
214
+ // cid === -1 will escape the check, mainly for globalThis
215
+ let baseCid = node.getCid();
216
+ if (baseCid !== -1 && cid !== baseCid) {
217
+ return;
218
+ }
219
+ nodeIDs.forEach((nodeID) => {
220
+ // get abstract field node
221
+ let fieldNode = this.pag.getNode(nodeID);
222
+ this.handleFieldInEdges(fieldNode, diffPts);
223
+ this.handleFieldOutEdges(fieldNode, diffPts);
224
+ });
225
+ });
226
+ // without cid check, because closure and export is under different cid
227
+ intraProceduralFieldNodeMap.forEach((nodeIDs) => {
228
+ nodeIDs.forEach((nodeID) => {
229
+ // get abstract field node
230
+ let fieldNode = this.pag.getNode(nodeID);
231
+ this.handleFieldInEdges(fieldNode, diffPts);
232
+ this.handleFieldOutEdges(fieldNode, diffPts);
233
+ });
234
+ });
235
+ return true;
236
+ }
237
+ handleFieldInEdges(fieldNode, diffPts) {
238
+ fieldNode.getIncomingEdge().forEach((edge) => {
239
+ if (edge.getKind() !== Pag_1.PagEdgeKind.Write) {
240
+ return;
241
+ }
242
+ let srcNode = edge.getSrcNode();
243
+ this.ptaStat.numProcessedWrite++;
244
+ for (let pt of diffPts) {
245
+ // filter pt
246
+ // clone the real field node with abstract field node
247
+ let dstNode;
248
+ if (fieldNode instanceof Pag_1.PagArrayNode) {
249
+ dstNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
250
+ }
251
+ else {
252
+ dstNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
253
+ }
254
+ if (dstNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
255
+ this.ptaStat.numRealWrite++;
256
+ if (this.ptd.resetElem(srcNode.getID())) {
257
+ this.worklist.push(srcNode.getID());
258
+ }
259
+ }
260
+ }
261
+ });
262
+ }
263
+ handleFieldOutEdges(fieldNode, diffPts) {
264
+ fieldNode.getOutgoingEdges().forEach((edge) => {
265
+ if (edge.getKind() !== Pag_1.PagEdgeKind.Load) {
266
+ return;
267
+ }
268
+ let dstNode = edge.getDstNode();
269
+ this.ptaStat.numProcessedLoad++;
270
+ for (let pt of diffPts) {
271
+ let srcNode;
272
+ if (fieldNode instanceof Pag_1.PagArrayNode) {
273
+ srcNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
274
+ }
275
+ else {
276
+ srcNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
277
+ }
278
+ if (srcNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
279
+ this.ptaStat.numRealLoad++;
280
+ // TODO: if field is used before initialzed, newSrc node has no diff pts
281
+ if (this.ptd.resetElem(srcNode.getID())) {
282
+ this.worklist.push(srcNode.getID());
283
+ }
284
+ }
285
+ }
286
+ });
287
+ }
288
+ /**
289
+ * If current node is a base of a called method, pointer in this node will be transfered into `this` Local in method
290
+ */
291
+ handleThis(nodeID) {
292
+ var _a;
293
+ let node = this.pag.getNode(nodeID);
294
+ (_a = node.getOutgoingThisEdges()) === null || _a === void 0 ? void 0 : _a.forEach(thisEdge => {
295
+ this.propagate(thisEdge);
296
+ this.ptaStat.numProcessedThis++;
297
+ });
298
+ return true;
299
+ }
300
+ handlePt(nodeID) {
301
+ let realDiff = this.ptd.calculateDiff(nodeID, nodeID);
302
+ if (realDiff.count() !== 0) {
303
+ // record the updated nodes
304
+ this.pagBuilder.addUpdatedNode(nodeID, realDiff);
305
+ }
306
+ this.ptd.flush(nodeID);
307
+ this.pagBuilder.setPtForNode(nodeID, this.ptd.getPropaPts(nodeID));
308
+ }
309
+ propagate(edge) {
310
+ let changed = false;
311
+ let { src, dst } = edge.getEndPoints();
312
+ let diffPts = this.ptd.getDiffPts(src);
313
+ if (!diffPts) {
314
+ return changed;
315
+ }
316
+ let realDiffPts = this.ptd.calculateDiff(src, dst);
317
+ for (let pt of realDiffPts) {
318
+ changed = this.ptd.addPts(dst, pt) || changed;
319
+ }
320
+ if (changed) {
321
+ this.worklist.push(dst);
322
+ }
323
+ return changed;
324
+ }
325
+ /**
326
+ * 1. 记录被更新的节点(记录cid, nodeid)
327
+ * 2. ( PAGLocalNode记录callsite(cid, value唯一)),通过1种的nodeID查询Node,拿到Callsite
328
+ * 3. 在addDynamicCall里对传入指针过滤(已处理指针和未处理指针)
329
+ */
330
+ onTheFlyDynamicCallSolve() {
331
+ let changed = false;
332
+ let processedCallSites = new Set();
333
+ this.pagBuilder.getUpdatedNodes().forEach((pts, nodeID) => {
334
+ let node = this.pag.getNode(nodeID);
335
+ if (!(node instanceof Pag_1.PagLocalNode)) {
336
+ logger.warn(`node ${nodeID} is not local node, value: ${node.getValue()}`);
337
+ return;
338
+ }
339
+ changed = this.processDynCallSite(node, pts, processedCallSites) || changed;
340
+ changed = this.processUnknownCallSite(node, pts) || changed;
341
+ });
342
+ this.pagBuilder.resetUpdatedNodes();
343
+ let srcNodes = this.pagBuilder.handleUnprocessedCallSites(processedCallSites);
344
+ changed = this.addToReanalyze(srcNodes) || changed;
345
+ changed = this.pagBuilder.handleReachable() || changed;
346
+ this.initWorklist();
347
+ return changed;
348
+ }
349
+ processDynCallSite(node, pts, processedCallSites) {
350
+ let changed = false;
351
+ let dynCallSites = node.getRelatedDynCallSites();
352
+ if (!dynCallSites && !node.isSdkParam()) {
353
+ logger.warn(`node ${node.getID()} has no related dynamic call site`);
354
+ return changed;
355
+ }
356
+ logger.info(`[process dynamic callsite] node ${node.getID()}`);
357
+ dynCallSites.forEach((dynCallsite) => {
358
+ for (let pt of pts) {
359
+ let srcNodes = this.pagBuilder.addDynamicCallEdge(dynCallsite, pt, node.getCid());
360
+ changed = this.addToReanalyze(srcNodes) || changed;
361
+ }
362
+ processedCallSites.add(dynCallsite);
363
+ });
364
+ return changed;
365
+ }
366
+ processUnknownCallSite(node, pts) {
367
+ let changed = false;
368
+ let unknownCallSites = node.getRelatedUnknownCallSites();
369
+ if (!unknownCallSites) {
370
+ logger.warn(`node ${node.getID()} has no related unknown call site`);
371
+ return changed;
372
+ }
373
+ logger.info(`[process unknown callsite] node ${node.getID()}`);
374
+ unknownCallSites.forEach((unknownCallSite) => {
375
+ for (let pt of pts) {
376
+ let srcNodes = this.pagBuilder.addDynamicCallEdge(unknownCallSite, pt, node.getCid());
377
+ changed = this.addToReanalyze(srcNodes) || changed;
378
+ }
379
+ });
380
+ return changed;
381
+ }
382
+ addToReanalyze(startNodes) {
383
+ let flag = false;
384
+ for (let node of startNodes) {
385
+ if (!this.worklist.includes(node) && this.ptd.resetElem(node)) {
386
+ this.worklist.push(node);
387
+ flag = true;
388
+ }
389
+ }
390
+ return flag;
391
+ }
392
+ /**
393
+ * compare interface
394
+ */
395
+ noAlias(leftValue, rightValue) {
396
+ var _a, _b;
397
+ let leftValueNodes = (_a = this.pag.getNodesByValue(leftValue)) === null || _a === void 0 ? void 0 : _a.values();
398
+ let rightValueNodes = (_b = this.pag.getNodesByValue(rightValue)) === null || _b === void 0 ? void 0 : _b.values();
399
+ let leftValuePts = new Set();
400
+ let rightValuePts = new Set();
401
+ for (let nodeID of leftValueNodes) {
402
+ let node = this.pag.getNode(nodeID);
403
+ for (let pt of node.getPointTo()) {
404
+ leftValuePts.add(pt);
405
+ }
406
+ }
407
+ for (let nodeID of rightValueNodes) {
408
+ let node = this.pag.getNode(nodeID);
409
+ for (let pt of node.getPointTo()) {
410
+ rightValuePts.add(pt);
411
+ }
412
+ }
413
+ if (leftValuePts.size > rightValuePts.size) {
414
+ [leftValuePts, rightValuePts] = [rightValuePts, leftValuePts];
415
+ }
416
+ for (const elem of leftValuePts) {
417
+ if (rightValuePts.has(elem)) {
418
+ return false;
419
+ }
420
+ }
421
+ // no alias
422
+ return true;
423
+ }
424
+ mayAlias(leftValue, rightValue) {
425
+ return !this.noAlias(leftValue, rightValue);
426
+ }
427
+ getRelatedNodes(value) {
428
+ let valueNodes = this.pag.getNodesByValue(value);
429
+ let relatedAllNodes = new Set();
430
+ let workListNodes = [];
431
+ let processedNodes = new Set();
432
+ if (valueNodes) {
433
+ for (const nodeID of valueNodes.values()) {
434
+ workListNodes.push(nodeID);
435
+ }
436
+ }
437
+ while (workListNodes.length !== 0) {
438
+ let valueNodeID = workListNodes.shift();
439
+ if (processedNodes.has(valueNodeID)) {
440
+ continue;
441
+ }
442
+ this.processRelatedNode(valueNodeID, workListNodes, processedNodes);
443
+ }
444
+ processedNodes.forEach(nodeID => {
445
+ let valueNode = this.pag.getNode(nodeID);
446
+ relatedAllNodes.add(valueNode.getValue());
447
+ });
448
+ return relatedAllNodes;
449
+ }
450
+ processRelatedNode(valueNodeID, workListNodes, processedNodes) {
451
+ let valueNode = this.pag.getNode(valueNodeID);
452
+ this.addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes);
453
+ this.addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes);
454
+ processedNodes.add(valueNodeID);
455
+ }
456
+ addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
457
+ let inCopyEdges = valueNode.getIncomingCopyEdges();
458
+ if (inCopyEdges) {
459
+ inCopyEdges.forEach(edge => {
460
+ let srcID = edge.getSrcID();
461
+ if (!processedNodes.has(srcID)) {
462
+ workListNodes.push(srcID);
463
+ }
464
+ });
465
+ }
466
+ }
467
+ addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
468
+ let outCopyEdges = valueNode.getOutgoingCopyEdges();
469
+ if (outCopyEdges) {
470
+ outCopyEdges.forEach(edge => {
471
+ let dstID = edge.getDstID();
472
+ if (!processedNodes.has(dstID)) {
473
+ workListNodes.push(dstID);
474
+ }
475
+ });
476
+ }
477
+ }
478
+ detectTypeDiff(nodeId) {
479
+ var _a, _b;
480
+ if (this.config.detectTypeDiff === false) {
481
+ return;
482
+ }
483
+ this.typeDiffMap = (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
484
+ let node = this.pag.getNode(nodeId);
485
+ let value = node.getValue();
486
+ let origType = node.getValue().getType();
487
+ // TODO: union type
488
+ if (!(origType instanceof Type_1.ClassType || origType instanceof Type_1.UnknownType)) {
489
+ return;
490
+ }
491
+ let findSameType = false;
492
+ let pts = node.getPointTo();
493
+ if (pts.count() === 0) {
494
+ return;
495
+ }
496
+ for (let pt of pts) {
497
+ let ptNode = this.pag.getNode(pt);
498
+ let type = ptNode.getValue().getType();
499
+ if (type.toString() !== origType.toString()) {
500
+ let diffSet = (_b = this.typeDiffMap.get(value)) !== null && _b !== void 0 ? _b : new Set();
501
+ this.typeDiffMap.set(value, diffSet);
502
+ if (!diffSet.has(type)) {
503
+ diffSet.add(type);
504
+ }
505
+ }
506
+ else {
507
+ findSameType = true;
508
+ }
509
+ }
510
+ // If find pts to original type,
511
+ // need add original type back since it is a correct type
512
+ let diffSet = this.typeDiffMap.get(value);
513
+ if (diffSet && findSameType) {
514
+ diffSet.add(origType);
515
+ }
516
+ }
517
+ getTypeDiffMap() {
518
+ var _a;
519
+ return (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
520
+ }
521
+ resolveCall(sourceMethod, invokeStmt) {
522
+ return [];
523
+ }
524
+ getUnhandledFuncs() {
525
+ return this.pagBuilder.getUnhandledFuncs();
526
+ }
527
+ getHandledFuncs() {
528
+ return this.pagBuilder.getHandledFuncs();
529
+ }
530
+ getPTAConfig() {
531
+ return this.config;
532
+ }
533
+ dumpUnhandledFunctions() {
534
+ const filePath = path_1.default.join(this.config.outputDirectory, 'PtaUnhandledFunctionList.txt');
535
+ fs.access(filePath, fs.constants.F_OK, (err) => {
536
+ if (!err) {
537
+ fs.truncate(filePath, 0, (err) => {
538
+ if (err) {
539
+ logger.error('Error to truncate file ', err);
540
+ }
541
+ });
542
+ }
543
+ let updatedContent = '';
544
+ this.getUnhandledFuncs().forEach(funcID => {
545
+ let cgNode = this.cg.getNode(funcID);
546
+ if (cgNode.isSdkMethod()) {
547
+ return;
548
+ }
549
+ let f = this.cg.getArkMethodByFuncID(funcID);
550
+ if (f) {
551
+ updatedContent += f.getSignature().toString() + '\n';
552
+ }
553
+ });
554
+ fs.writeFile(filePath, updatedContent, 'utf8', (err) => {
555
+ if (err) {
556
+ logger.error('Error to write file', err);
557
+ }
558
+ });
559
+ });
560
+ }
561
+ mergeInstanceFieldMap(src, dst) {
562
+ dst.forEach((value, key) => {
563
+ if (src.has(key)) {
564
+ src.set(key, [...src.get(key), ...value]);
565
+ }
566
+ else {
567
+ src.set(key, value);
568
+ }
569
+ });
570
+ return src;
571
+ }
572
+ }
573
+ exports.PointerAnalysis = PointerAnalysis;