arkanalyzer 1.0.20 → 1.0.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/Config.d.ts +70 -70
- package/lib/Config.js +198 -198
- package/lib/Scene.d.ts +316 -316
- package/lib/Scene.js +1316 -1316
- package/lib/callgraph/algorithm/AbstractAnalysis.d.ts +28 -28
- package/lib/callgraph/algorithm/AbstractAnalysis.js +144 -144
- package/lib/callgraph/algorithm/ClassHierarchyAnalysis.d.ts +10 -10
- package/lib/callgraph/algorithm/ClassHierarchyAnalysis.js +69 -69
- package/lib/callgraph/algorithm/RapidTypeAnalysis.d.ts +15 -15
- package/lib/callgraph/algorithm/RapidTypeAnalysis.js +146 -146
- package/lib/callgraph/common/Statistics.d.ts +57 -57
- package/lib/callgraph/common/Statistics.js +228 -228
- package/lib/callgraph/model/CallGraph.d.ts +96 -96
- package/lib/callgraph/model/CallGraph.js +354 -354
- package/lib/callgraph/model/builder/CallGraphBuilder.d.ts +15 -15
- package/lib/callgraph/model/builder/CallGraphBuilder.js +106 -106
- package/lib/callgraph/pointerAnalysis/Context.d.ts +37 -37
- package/lib/callgraph/pointerAnalysis/Context.js +155 -155
- package/lib/callgraph/pointerAnalysis/DummyCallCreator.d.ts +22 -22
- package/lib/callgraph/pointerAnalysis/DummyCallCreator.js +104 -104
- package/lib/callgraph/pointerAnalysis/PTAUtils.d.ts +5 -5
- package/lib/callgraph/pointerAnalysis/PTAUtils.js +46 -46
- package/lib/callgraph/pointerAnalysis/Pag.d.ts +261 -261
- package/lib/callgraph/pointerAnalysis/Pag.js +930 -930
- package/lib/callgraph/pointerAnalysis/PagBuilder.d.ts +157 -157
- package/lib/callgraph/pointerAnalysis/PagBuilder.js +1399 -1399
- package/lib/callgraph/pointerAnalysis/PointerAnalysis.d.ts +72 -72
- package/lib/callgraph/pointerAnalysis/PointerAnalysis.js +573 -573
- package/lib/callgraph/pointerAnalysis/PointerAnalysisConfig.d.ts +15 -15
- package/lib/callgraph/pointerAnalysis/PointerAnalysisConfig.js +81 -81
- package/lib/callgraph/pointerAnalysis/PtsDS.d.ts +80 -80
- package/lib/callgraph/pointerAnalysis/PtsDS.js +308 -308
- package/lib/core/base/Constant.d.ts +48 -48
- package/lib/core/base/Constant.js +103 -103
- package/lib/core/base/Decorator.d.ts +15 -15
- package/lib/core/base/Decorator.js +46 -46
- package/lib/core/base/DefUseChain.d.ts +8 -8
- package/lib/core/base/DefUseChain.js +25 -25
- package/lib/core/base/Expr.d.ts +340 -340
- package/lib/core/base/Expr.js +917 -917
- package/lib/core/base/Local.d.ts +104 -104
- package/lib/core/base/Local.js +176 -176
- package/lib/core/base/Position.d.ts +30 -30
- package/lib/core/base/Position.js +147 -147
- package/lib/core/base/Ref.d.ts +173 -173
- package/lib/core/base/Ref.js +374 -374
- package/lib/core/base/Stmt.d.ts +237 -237
- package/lib/core/base/Stmt.js +525 -525
- package/lib/core/base/Trap.d.ts +8 -8
- package/lib/core/base/Trap.js +30 -30
- package/lib/core/base/Type.d.ts +308 -308
- package/lib/core/base/Type.js +639 -639
- package/lib/core/base/TypeExpr.d.ts +71 -71
- package/lib/core/base/TypeExpr.js +155 -155
- package/lib/core/base/Value.d.ts +32 -32
- package/lib/core/base/Value.js +16 -16
- package/lib/core/common/ArkError.d.ts +14 -14
- package/lib/core/common/ArkError.js +28 -28
- package/lib/core/common/ArkIRTransformer.d.ts +67 -67
- package/lib/core/common/ArkIRTransformer.js +690 -690
- package/lib/core/common/ArkValueTransformer.d.ts +89 -89
- package/lib/core/common/ArkValueTransformer.js +1478 -1478
- package/lib/core/common/Builtin.d.ts +36 -36
- package/lib/core/common/Builtin.js +81 -81
- package/lib/core/common/Const.d.ts +21 -21
- package/lib/core/common/Const.js +43 -43
- package/lib/core/common/DummyMainCreater.d.ts +46 -46
- package/lib/core/common/DummyMainCreater.js +319 -319
- package/lib/core/common/EtsConst.d.ts +73 -73
- package/lib/core/common/EtsConst.js +1021 -1021
- package/lib/core/common/ExprUseReplacer.d.ts +21 -21
- package/lib/core/common/ExprUseReplacer.js +124 -124
- package/lib/core/common/IRInference.d.ts +36 -36
- package/lib/core/common/IRInference.d.ts.map +1 -1
- package/lib/core/common/IRInference.js +651 -648
- package/lib/core/common/IRUtils.d.ts +18 -18
- package/lib/core/common/IRUtils.js +141 -141
- package/lib/core/common/ModelUtils.d.ts +70 -70
- package/lib/core/common/ModelUtils.js +712 -712
- package/lib/core/common/RefUseReplacer.d.ts +13 -13
- package/lib/core/common/RefUseReplacer.js +52 -52
- package/lib/core/common/SdkUtils.d.ts +8 -8
- package/lib/core/common/SdkUtils.js +105 -105
- package/lib/core/common/StmtDefReplacer.d.ts +12 -12
- package/lib/core/common/StmtDefReplacer.js +41 -41
- package/lib/core/common/StmtUseReplacer.d.ts +16 -16
- package/lib/core/common/StmtUseReplacer.js +108 -108
- package/lib/core/common/TSConst.d.ts +18 -18
- package/lib/core/common/TSConst.js +36 -36
- package/lib/core/common/TypeInference.d.ts +102 -102
- package/lib/core/common/TypeInference.js +748 -748
- package/lib/core/common/ValueUtil.d.ts +12 -12
- package/lib/core/common/ValueUtil.js +54 -54
- package/lib/core/common/VisibleValue.d.ts +36 -36
- package/lib/core/common/VisibleValue.js +212 -212
- package/lib/core/dataflow/DataflowProblem.d.ts +20 -20
- package/lib/core/dataflow/DataflowProblem.js +20 -20
- package/lib/core/dataflow/DataflowResult.d.ts +7 -7
- package/lib/core/dataflow/DataflowResult.js +26 -26
- package/lib/core/dataflow/DataflowSolver.d.ts +43 -43
- package/lib/core/dataflow/DataflowSolver.js +307 -307
- package/lib/core/dataflow/Edge.d.ts +11 -11
- package/lib/core/dataflow/Edge.js +31 -31
- package/lib/core/dataflow/Fact.d.ts +6 -6
- package/lib/core/dataflow/Fact.js +24 -24
- package/lib/core/dataflow/GenericDataFlow.d.ts +142 -142
- package/lib/core/dataflow/GenericDataFlow.js +109 -109
- package/lib/core/dataflow/ReachingDef.d.ts +62 -62
- package/lib/core/dataflow/ReachingDef.js +168 -168
- package/lib/core/dataflow/UndefinedVariable.d.ts +45 -45
- package/lib/core/dataflow/UndefinedVariable.js +288 -288
- package/lib/core/dataflow/Util.d.ts +9 -9
- package/lib/core/dataflow/Util.js +64 -64
- package/lib/core/graph/BaseExplicitGraph.d.ts +58 -58
- package/lib/core/graph/BaseExplicitGraph.js +157 -157
- package/lib/core/graph/BaseImplicitGraph.d.ts +77 -77
- package/lib/core/graph/BaseImplicitGraph.js +78 -78
- package/lib/core/graph/BasicBlock.d.ts +104 -104
- package/lib/core/graph/BasicBlock.js +280 -280
- package/lib/core/graph/Cfg.d.ts +59 -59
- package/lib/core/graph/Cfg.js +282 -282
- package/lib/core/graph/DependsGraph.d.ts +35 -35
- package/lib/core/graph/DependsGraph.js +87 -87
- package/lib/core/graph/DominanceFinder.d.ts +15 -15
- package/lib/core/graph/DominanceFinder.js +121 -121
- package/lib/core/graph/DominanceTree.d.ts +12 -12
- package/lib/core/graph/DominanceTree.js +70 -70
- package/lib/core/graph/GraphTraits.d.ts +7 -7
- package/lib/core/graph/GraphTraits.js +16 -16
- package/lib/core/graph/Scc.d.ts +61 -61
- package/lib/core/graph/Scc.js +222 -222
- package/lib/core/graph/ViewTree.d.ts +114 -114
- package/lib/core/graph/ViewTree.js +16 -16
- package/lib/core/graph/builder/CfgBuilder.d.ts +176 -176
- package/lib/core/graph/builder/CfgBuilder.js +1139 -1139
- package/lib/core/graph/builder/ConditionBuilder.d.ts +15 -15
- package/lib/core/graph/builder/ConditionBuilder.js +252 -252
- package/lib/core/graph/builder/LoopBuilder.d.ts +20 -20
- package/lib/core/graph/builder/LoopBuilder.js +251 -251
- package/lib/core/graph/builder/SwitchBuilder.d.ts +11 -11
- package/lib/core/graph/builder/SwitchBuilder.js +152 -152
- package/lib/core/graph/builder/TrapBuilder.d.ts +16 -16
- package/lib/core/graph/builder/TrapBuilder.js +272 -272
- package/lib/core/graph/builder/ViewTreeBuilder.d.ts +203 -203
- package/lib/core/graph/builder/ViewTreeBuilder.js +1055 -1055
- package/lib/core/model/ArkBaseModel.d.ts +59 -59
- package/lib/core/model/ArkBaseModel.js +274 -274
- package/lib/core/model/ArkBody.d.ts +24 -24
- package/lib/core/model/ArkBody.js +65 -65
- package/lib/core/model/ArkClass.d.ts +206 -206
- package/lib/core/model/ArkClass.js +439 -439
- package/lib/core/model/ArkExport.d.ts +72 -72
- package/lib/core/model/ArkExport.js +147 -147
- package/lib/core/model/ArkField.d.ts +62 -62
- package/lib/core/model/ArkField.js +113 -113
- package/lib/core/model/ArkFile.d.ts +131 -131
- package/lib/core/model/ArkFile.js +267 -267
- package/lib/core/model/ArkImport.d.ts +44 -44
- package/lib/core/model/ArkImport.js +108 -108
- package/lib/core/model/ArkMetadata.d.ts +31 -31
- package/lib/core/model/ArkMetadata.js +55 -55
- package/lib/core/model/ArkMethod.d.ts +261 -261
- package/lib/core/model/ArkMethod.js +592 -592
- package/lib/core/model/ArkNamespace.d.ts +66 -66
- package/lib/core/model/ArkNamespace.js +209 -209
- package/lib/core/model/ArkSignature.d.ts +162 -162
- package/lib/core/model/ArkSignature.js +379 -379
- package/lib/core/model/builder/ArkClassBuilder.d.ts +12 -12
- package/lib/core/model/builder/ArkClassBuilder.js +454 -454
- package/lib/core/model/builder/ArkExportBuilder.d.ts +24 -24
- package/lib/core/model/builder/ArkExportBuilder.js +210 -210
- package/lib/core/model/builder/ArkFieldBuilder.d.ts +8 -8
- package/lib/core/model/builder/ArkFieldBuilder.js +193 -193
- package/lib/core/model/builder/ArkFileBuilder.d.ts +9 -9
- package/lib/core/model/builder/ArkFileBuilder.js +165 -165
- package/lib/core/model/builder/ArkImportBuilder.d.ts +4 -4
- package/lib/core/model/builder/ArkImportBuilder.js +128 -128
- package/lib/core/model/builder/ArkMethodBuilder.d.ts +63 -63
- package/lib/core/model/builder/ArkMethodBuilder.js +486 -486
- package/lib/core/model/builder/ArkNamespaceBuilder.d.ts +5 -5
- package/lib/core/model/builder/ArkNamespaceBuilder.js +205 -205
- package/lib/core/model/builder/ArkSignatureBuilder.d.ts +8 -8
- package/lib/core/model/builder/ArkSignatureBuilder.js +40 -40
- package/lib/core/model/builder/BodyBuilder.d.ts +55 -30
- package/lib/core/model/builder/BodyBuilder.d.ts.map +1 -1
- package/lib/core/model/builder/BodyBuilder.js +542 -371
- package/lib/core/model/builder/builderUtils.d.ts +18 -18
- package/lib/core/model/builder/builderUtils.js +558 -558
- package/lib/index.d.ts +82 -80
- package/lib/index.d.ts.map +1 -1
- package/lib/index.js +201 -196
- package/lib/save/ArkStream.d.ts +23 -23
- package/lib/save/ArkStream.js +83 -83
- package/lib/save/DotPrinter.d.ts +43 -43
- package/lib/save/DotPrinter.js +170 -170
- package/lib/save/GraphPrinter.d.ts +16 -16
- package/lib/save/GraphPrinter.js +134 -134
- package/lib/save/JsonPrinter.d.ts +30 -30
- package/lib/save/JsonPrinter.js +580 -580
- package/lib/save/Printer.d.ts +12 -12
- package/lib/save/Printer.js +27 -27
- package/lib/save/PrinterBuilder.d.ts +53 -53
- package/lib/save/PrinterBuilder.js +145 -145
- package/lib/save/ViewTreePrinter.d.ts +14 -14
- package/lib/save/ViewTreePrinter.js +123 -123
- package/lib/save/arkir/ArkIRClassPrinter.d.ts +13 -13
- package/lib/save/arkir/ArkIRClassPrinter.js +92 -92
- package/lib/save/arkir/ArkIRFieldPrinter.d.ts +11 -11
- package/lib/save/arkir/ArkIRFieldPrinter.js +64 -64
- package/lib/save/arkir/ArkIRFilePrinter.d.ts +12 -12
- package/lib/save/arkir/ArkIRFilePrinter.js +54 -54
- package/lib/save/arkir/ArkIRMethodPrinter.d.ts +16 -16
- package/lib/save/arkir/ArkIRMethodPrinter.js +159 -159
- package/lib/save/arkir/ArkIRNamespacePrinter.d.ts +11 -11
- package/lib/save/arkir/ArkIRNamespacePrinter.js +66 -66
- package/lib/save/base/BasePrinter.d.ts +23 -23
- package/lib/save/base/BasePrinter.js +70 -70
- package/lib/save/base/ExportPrinter.d.ts +8 -8
- package/lib/save/base/ExportPrinter.js +67 -67
- package/lib/save/base/ImportPrinter.d.ts +9 -9
- package/lib/save/base/ImportPrinter.js +92 -92
- package/lib/save/base/PrinterUtils.d.ts +24 -24
- package/lib/save/base/PrinterUtils.js +208 -208
- package/lib/save/serializeArkIR.d.ts +8 -8
- package/lib/save/serializeArkIR.js +294 -294
- package/lib/save/source/SourceBase.d.ts +22 -22
- package/lib/save/source/SourceBase.js +64 -64
- package/lib/save/source/SourceBody.d.ts +58 -58
- package/lib/save/source/SourceBody.js +296 -296
- package/lib/save/source/SourceClass.d.ts +25 -25
- package/lib/save/source/SourceClass.js +187 -187
- package/lib/save/source/SourceField.d.ts +13 -13
- package/lib/save/source/SourceField.js +73 -73
- package/lib/save/source/SourceFilePrinter.d.ts +12 -12
- package/lib/save/source/SourceFilePrinter.js +69 -69
- package/lib/save/source/SourceMethod.d.ts +22 -22
- package/lib/save/source/SourceMethod.d.ts.map +1 -1
- package/lib/save/source/SourceMethod.js +196 -193
- package/lib/save/source/SourceNamespace.d.ts +11 -11
- package/lib/save/source/SourceNamespace.js +83 -83
- package/lib/save/source/SourceStmt.d.ts +178 -178
- package/lib/save/source/SourceStmt.js +838 -838
- package/lib/save/source/SourceTransformer.d.ts +46 -46
- package/lib/save/source/SourceTransformer.js +446 -446
- package/lib/transformer/FunctionTransformer.d.ts +2 -2
- package/lib/transformer/FunctionTransformer.js +17 -17
- package/lib/transformer/SceneTransformer.d.ts +2 -2
- package/lib/transformer/SceneTransformer.js +17 -17
- package/lib/transformer/StaticSingleAssignmentFormer.d.ts +12 -12
- package/lib/transformer/StaticSingleAssignmentFormer.js +259 -259
- package/lib/transformer/Transformer.d.ts +6 -6
- package/lib/transformer/Transformer.js +22 -22
- package/lib/utils/AstTreeUtils.d.ts +4 -4
- package/lib/utils/AstTreeUtils.js +26 -26
- package/lib/utils/CfgStructualAnalysis.d.ts +110 -110
- package/lib/utils/CfgStructualAnalysis.js +1277 -1277
- package/lib/utils/FileUtils.d.ts +18 -18
- package/lib/utils/FileUtils.js +135 -135
- package/lib/utils/SparseBitVector.d.ts +100 -100
- package/lib/utils/SparseBitVector.js +445 -445
- package/lib/utils/callGraphUtils.d.ts +30 -30
- package/lib/utils/callGraphUtils.js +205 -205
- package/lib/utils/crypto_utils.d.ts +5 -5
- package/lib/utils/crypto_utils.js +57 -57
- package/lib/utils/entryMethodUtils.d.ts +13 -13
- package/lib/utils/entryMethodUtils.js +110 -110
- package/lib/utils/getAllFiles.d.ts +9 -9
- package/lib/utils/getAllFiles.js +90 -90
- package/lib/utils/json5parser.d.ts +6 -6
- package/lib/utils/json5parser.js +146 -146
- package/lib/utils/logger.d.ts +18 -18
- package/lib/utils/logger.d.ts.map +1 -1
- package/lib/utils/logger.js +97 -90
- package/lib/utils/pathTransfer.d.ts +1 -1
- package/lib/utils/pathTransfer.js +25 -25
- package/node_modules/json5/lib/cli.js +0 -0
- package/node_modules/ohos-typescript/bin/tsc +0 -0
- package/node_modules/ohos-typescript/bin/tsserver +0 -0
- package/package.json +3 -3
|
@@ -1,573 +1,573 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
/*
|
|
3
|
-
* Copyright (c) 2024-2025 Huawei Device Co., Ltd.
|
|
4
|
-
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
5
|
-
* you may not use this file except in compliance with the License.
|
|
6
|
-
* You may obtain a copy of the License at
|
|
7
|
-
*
|
|
8
|
-
* http://www.apache.org/licenses/LICENSE-2.0
|
|
9
|
-
*
|
|
10
|
-
* Unless required by applicable law or agreed to in writing, software
|
|
11
|
-
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
12
|
-
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
13
|
-
* See the License for the specific language governing permissions and
|
|
14
|
-
* limitations under the License.
|
|
15
|
-
*/
|
|
16
|
-
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
17
|
-
if (k2 === undefined) k2 = k;
|
|
18
|
-
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
19
|
-
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
20
|
-
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
21
|
-
}
|
|
22
|
-
Object.defineProperty(o, k2, desc);
|
|
23
|
-
}) : (function(o, m, k, k2) {
|
|
24
|
-
if (k2 === undefined) k2 = k;
|
|
25
|
-
o[k2] = m[k];
|
|
26
|
-
}));
|
|
27
|
-
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
28
|
-
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
29
|
-
}) : function(o, v) {
|
|
30
|
-
o["default"] = v;
|
|
31
|
-
});
|
|
32
|
-
var __importStar = (this && this.__importStar) || function (mod) {
|
|
33
|
-
if (mod && mod.__esModule) return mod;
|
|
34
|
-
var result = {};
|
|
35
|
-
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
36
|
-
__setModuleDefault(result, mod);
|
|
37
|
-
return result;
|
|
38
|
-
};
|
|
39
|
-
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
40
|
-
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
41
|
-
};
|
|
42
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
43
|
-
exports.PointerAnalysis = void 0;
|
|
44
|
-
const path_1 = __importDefault(require("path"));
|
|
45
|
-
const fs = __importStar(require("fs"));
|
|
46
|
-
const CallGraph_1 = require("../model/CallGraph");
|
|
47
|
-
const AbstractAnalysis_1 = require("../algorithm/AbstractAnalysis");
|
|
48
|
-
const Type_1 = require("../../core/base/Type");
|
|
49
|
-
const CallGraphBuilder_1 = require("../model/builder/CallGraphBuilder");
|
|
50
|
-
const logger_1 = __importStar(require("../../utils/logger"));
|
|
51
|
-
const DummyMainCreater_1 = require("../../core/common/DummyMainCreater");
|
|
52
|
-
const Statistics_1 = require("../common/Statistics");
|
|
53
|
-
const Pag_1 = require("./Pag");
|
|
54
|
-
const PagBuilder_1 = require("./PagBuilder");
|
|
55
|
-
const PointerAnalysisConfig_1 = require("./PointerAnalysisConfig");
|
|
56
|
-
const PtsDS_1 = require("./PtsDS");
|
|
57
|
-
const Local_1 = require("../../core/base/Local");
|
|
58
|
-
const logger = logger_1.default.getLogger(logger_1.LOG_MODULE_TYPE.ARKANALYZER, 'PTA');
|
|
59
|
-
class PointerAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
|
|
60
|
-
constructor(p, cg, s, config) {
|
|
61
|
-
super(s);
|
|
62
|
-
this.pag = p;
|
|
63
|
-
this.cg = cg;
|
|
64
|
-
this.ptd = new PtsDS_1.DiffPTData(config.ptsCollectionCtor);
|
|
65
|
-
this.pagBuilder = new PagBuilder_1.PagBuilder(this.pag, this.cg, s, config.kLimit);
|
|
66
|
-
this.cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(this.cg, s);
|
|
67
|
-
this.ptaStat = new Statistics_1.PTAStat(this);
|
|
68
|
-
this.config = config;
|
|
69
|
-
}
|
|
70
|
-
static pointerAnalysisForWholeProject(projectScene, config) {
|
|
71
|
-
let cg = new CallGraph_1.CallGraph(projectScene);
|
|
72
|
-
let cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(cg, projectScene);
|
|
73
|
-
cgBuilder.buildDirectCallGraphForScene();
|
|
74
|
-
let pag = new Pag_1.Pag();
|
|
75
|
-
if (!config) {
|
|
76
|
-
config = PointerAnalysisConfig_1.PointerAnalysisConfig.create(1, 'out/', false, false);
|
|
77
|
-
}
|
|
78
|
-
const dummyMainCreator = new DummyMainCreater_1.DummyMainCreater(projectScene);
|
|
79
|
-
dummyMainCreator.createDummyMain();
|
|
80
|
-
const dummyMainMethod = dummyMainCreator.getDummyMain();
|
|
81
|
-
cgBuilder.buildDirectCallGraph([dummyMainMethod]);
|
|
82
|
-
let dummyMainMethodID = cg.getCallGraphNodeByMethod(dummyMainMethod.getSignature()).getID();
|
|
83
|
-
cg.setDummyMainFuncID(dummyMainMethodID);
|
|
84
|
-
let pta = new PointerAnalysis(pag, cg, projectScene, config);
|
|
85
|
-
pta.setEntries([dummyMainMethodID]);
|
|
86
|
-
pta.start();
|
|
87
|
-
return pta;
|
|
88
|
-
}
|
|
89
|
-
init() {
|
|
90
|
-
logger.warn(`========== Init Pointer Analysis ==========`);
|
|
91
|
-
// start statistics
|
|
92
|
-
this.ptaStat.startStat();
|
|
93
|
-
// build funcPag with entries
|
|
94
|
-
this.pagBuilder.buildForEntries(this.entries);
|
|
95
|
-
if (this.config.dotDump) {
|
|
96
|
-
this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaInit_pag.dot'));
|
|
97
|
-
this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cg_init.dot'));
|
|
98
|
-
}
|
|
99
|
-
}
|
|
100
|
-
start() {
|
|
101
|
-
this.init();
|
|
102
|
-
this.solveConstraint();
|
|
103
|
-
this.postProcess();
|
|
104
|
-
}
|
|
105
|
-
postProcess() {
|
|
106
|
-
this.ptaStat.endStat();
|
|
107
|
-
this.pagBuilder.doStat();
|
|
108
|
-
this.cg.printStat();
|
|
109
|
-
this.pagBuilder.printStat();
|
|
110
|
-
this.ptaStat.printStat();
|
|
111
|
-
if (this.config.dotDump) {
|
|
112
|
-
this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaEnd_pag.dot'));
|
|
113
|
-
this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cgEnd.dot'));
|
|
114
|
-
}
|
|
115
|
-
if (this.config.unhandledFuncDump) {
|
|
116
|
-
this.dumpUnhandledFunctions();
|
|
117
|
-
}
|
|
118
|
-
}
|
|
119
|
-
getPTD() {
|
|
120
|
-
return this.ptd;
|
|
121
|
-
}
|
|
122
|
-
getStat() {
|
|
123
|
-
let ret = this.cg.getStat();
|
|
124
|
-
ret += '\n' + this.pagBuilder.getStat();
|
|
125
|
-
ret += '\n' + this.ptaStat.getStat();
|
|
126
|
-
return ret;
|
|
127
|
-
}
|
|
128
|
-
preProcessMethod(funcID) {
|
|
129
|
-
// do nothing
|
|
130
|
-
return [];
|
|
131
|
-
}
|
|
132
|
-
setEntries(fIds) {
|
|
133
|
-
this.entries = fIds;
|
|
134
|
-
}
|
|
135
|
-
solveConstraint() {
|
|
136
|
-
this.worklist = [];
|
|
137
|
-
logger.warn(`========== Pointer Analysis Start ==========`);
|
|
138
|
-
this.initWorklist();
|
|
139
|
-
let reanalyzer = true;
|
|
140
|
-
while (reanalyzer) {
|
|
141
|
-
this.ptaStat.iterTimes++;
|
|
142
|
-
logger.warn(`========== Pointer Analysis Round ${this.ptaStat.iterTimes} ==========`);
|
|
143
|
-
// do pointer transfer
|
|
144
|
-
this.solveWorklist();
|
|
145
|
-
// process dynamic call
|
|
146
|
-
reanalyzer = this.onTheFlyDynamicCallSolve();
|
|
147
|
-
if (this.config.dotDump) {
|
|
148
|
-
this.pag.dump(path_1.default.join(this.config.outputDirectory, `pta_pag_itor#${this.ptaStat.iterTimes}.dot`));
|
|
149
|
-
}
|
|
150
|
-
}
|
|
151
|
-
}
|
|
152
|
-
/**
|
|
153
|
-
* get newly added Address Edge, and add them to initial WorkList
|
|
154
|
-
*/
|
|
155
|
-
initWorklist() {
|
|
156
|
-
for (let e of this.pag.getAddrEdges()) {
|
|
157
|
-
this.ptaStat.numProcessedAddr++;
|
|
158
|
-
let { src, dst } = e.getEndPoints();
|
|
159
|
-
this.ptd.addPts(dst, src);
|
|
160
|
-
if (this.pag.getNode(src) instanceof Pag_1.PagGlobalThisNode) {
|
|
161
|
-
// readd globalThis heapObj into workList
|
|
162
|
-
this.ptd.addPts(src, src);
|
|
163
|
-
this.worklist.push(src);
|
|
164
|
-
}
|
|
165
|
-
this.worklist.push(dst);
|
|
166
|
-
}
|
|
167
|
-
this.pag.resetAddrEdges();
|
|
168
|
-
}
|
|
169
|
-
solveWorklist() {
|
|
170
|
-
while (this.worklist.length > 0) {
|
|
171
|
-
let node = this.worklist.shift();
|
|
172
|
-
this.processNode(node);
|
|
173
|
-
}
|
|
174
|
-
return true;
|
|
175
|
-
}
|
|
176
|
-
processNode(nodeId) {
|
|
177
|
-
this.handleThis(nodeId);
|
|
178
|
-
this.handleLoadWrite(nodeId);
|
|
179
|
-
this.handleCopy(nodeId);
|
|
180
|
-
this.handlePt(nodeId);
|
|
181
|
-
this.detectTypeDiff(nodeId);
|
|
182
|
-
return true;
|
|
183
|
-
}
|
|
184
|
-
handleCopy(nodeID) {
|
|
185
|
-
var _a;
|
|
186
|
-
let node = this.pag.getNode(nodeID);
|
|
187
|
-
(_a = node.getOutgoingCopyEdges()) === null || _a === void 0 ? void 0 : _a.forEach(copyEdge => {
|
|
188
|
-
this.propagate(copyEdge);
|
|
189
|
-
this.ptaStat.numProcessedCopy++;
|
|
190
|
-
});
|
|
191
|
-
return true;
|
|
192
|
-
}
|
|
193
|
-
handleLoadWrite(nodeID) {
|
|
194
|
-
var _a;
|
|
195
|
-
let node = this.pag.getNode(nodeID);
|
|
196
|
-
let nodeValue = node.getValue();
|
|
197
|
-
let diffPts = this.ptd.getDiffPts(nodeID);
|
|
198
|
-
if (!diffPts || diffPts.count() === 0) {
|
|
199
|
-
return false;
|
|
200
|
-
}
|
|
201
|
-
// get related field node with current node's value
|
|
202
|
-
let instanceFieldNodeMap = (_a = this.pag.getNodesByBaseValue(nodeValue)) !== null && _a !== void 0 ? _a : new Map();
|
|
203
|
-
// get intra procedural field node by exportMap
|
|
204
|
-
let intraProceduralFieldNodeMap = new Map();
|
|
205
|
-
if (nodeValue instanceof Local_1.Local) {
|
|
206
|
-
this.pagBuilder.getExportVariableMap(nodeValue).forEach((dst) => {
|
|
207
|
-
var _a;
|
|
208
|
-
let temp = (_a = this.pag.getNodesByBaseValue(dst)) !== null && _a !== void 0 ? _a : new Map();
|
|
209
|
-
intraProceduralFieldNodeMap = this.mergeInstanceFieldMap(instanceFieldNodeMap, temp);
|
|
210
|
-
});
|
|
211
|
-
}
|
|
212
|
-
instanceFieldNodeMap.forEach((nodeIDs, cid) => {
|
|
213
|
-
// TODO: check cid
|
|
214
|
-
// cid === -1 will escape the check, mainly for globalThis
|
|
215
|
-
let baseCid = node.getCid();
|
|
216
|
-
if (baseCid !== -1 && cid !== baseCid) {
|
|
217
|
-
return;
|
|
218
|
-
}
|
|
219
|
-
nodeIDs.forEach((nodeID) => {
|
|
220
|
-
// get abstract field node
|
|
221
|
-
let fieldNode = this.pag.getNode(nodeID);
|
|
222
|
-
this.handleFieldInEdges(fieldNode, diffPts);
|
|
223
|
-
this.handleFieldOutEdges(fieldNode, diffPts);
|
|
224
|
-
});
|
|
225
|
-
});
|
|
226
|
-
// without cid check, because closure and export is under different cid
|
|
227
|
-
intraProceduralFieldNodeMap.forEach((nodeIDs) => {
|
|
228
|
-
nodeIDs.forEach((nodeID) => {
|
|
229
|
-
// get abstract field node
|
|
230
|
-
let fieldNode = this.pag.getNode(nodeID);
|
|
231
|
-
this.handleFieldInEdges(fieldNode, diffPts);
|
|
232
|
-
this.handleFieldOutEdges(fieldNode, diffPts);
|
|
233
|
-
});
|
|
234
|
-
});
|
|
235
|
-
return true;
|
|
236
|
-
}
|
|
237
|
-
handleFieldInEdges(fieldNode, diffPts) {
|
|
238
|
-
fieldNode.getIncomingEdge().forEach((edge) => {
|
|
239
|
-
if (edge.getKind() !== Pag_1.PagEdgeKind.Write) {
|
|
240
|
-
return;
|
|
241
|
-
}
|
|
242
|
-
let srcNode = edge.getSrcNode();
|
|
243
|
-
this.ptaStat.numProcessedWrite++;
|
|
244
|
-
for (let pt of diffPts) {
|
|
245
|
-
// filter pt
|
|
246
|
-
// clone the real field node with abstract field node
|
|
247
|
-
let dstNode;
|
|
248
|
-
if (fieldNode instanceof Pag_1.PagArrayNode) {
|
|
249
|
-
dstNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
|
|
250
|
-
}
|
|
251
|
-
else {
|
|
252
|
-
dstNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
|
|
253
|
-
}
|
|
254
|
-
if (dstNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
|
|
255
|
-
this.ptaStat.numRealWrite++;
|
|
256
|
-
if (this.ptd.resetElem(srcNode.getID())) {
|
|
257
|
-
this.worklist.push(srcNode.getID());
|
|
258
|
-
}
|
|
259
|
-
}
|
|
260
|
-
}
|
|
261
|
-
});
|
|
262
|
-
}
|
|
263
|
-
handleFieldOutEdges(fieldNode, diffPts) {
|
|
264
|
-
fieldNode.getOutgoingEdges().forEach((edge) => {
|
|
265
|
-
if (edge.getKind() !== Pag_1.PagEdgeKind.Load) {
|
|
266
|
-
return;
|
|
267
|
-
}
|
|
268
|
-
let dstNode = edge.getDstNode();
|
|
269
|
-
this.ptaStat.numProcessedLoad++;
|
|
270
|
-
for (let pt of diffPts) {
|
|
271
|
-
let srcNode;
|
|
272
|
-
if (fieldNode instanceof Pag_1.PagArrayNode) {
|
|
273
|
-
srcNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
|
|
274
|
-
}
|
|
275
|
-
else {
|
|
276
|
-
srcNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
|
|
277
|
-
}
|
|
278
|
-
if (srcNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
|
|
279
|
-
this.ptaStat.numRealLoad++;
|
|
280
|
-
// TODO: if field is used before initialzed, newSrc node has no diff pts
|
|
281
|
-
if (this.ptd.resetElem(srcNode.getID())) {
|
|
282
|
-
this.worklist.push(srcNode.getID());
|
|
283
|
-
}
|
|
284
|
-
}
|
|
285
|
-
}
|
|
286
|
-
});
|
|
287
|
-
}
|
|
288
|
-
/**
|
|
289
|
-
* If current node is a base of a called method, pointer in this node will be transfered into `this` Local in method
|
|
290
|
-
*/
|
|
291
|
-
handleThis(nodeID) {
|
|
292
|
-
var _a;
|
|
293
|
-
let node = this.pag.getNode(nodeID);
|
|
294
|
-
(_a = node.getOutgoingThisEdges()) === null || _a === void 0 ? void 0 : _a.forEach(thisEdge => {
|
|
295
|
-
this.propagate(thisEdge);
|
|
296
|
-
this.ptaStat.numProcessedThis++;
|
|
297
|
-
});
|
|
298
|
-
return true;
|
|
299
|
-
}
|
|
300
|
-
handlePt(nodeID) {
|
|
301
|
-
let realDiff = this.ptd.calculateDiff(nodeID, nodeID);
|
|
302
|
-
if (realDiff.count() !== 0) {
|
|
303
|
-
// record the updated nodes
|
|
304
|
-
this.pagBuilder.addUpdatedNode(nodeID, realDiff);
|
|
305
|
-
}
|
|
306
|
-
this.ptd.flush(nodeID);
|
|
307
|
-
this.pagBuilder.setPtForNode(nodeID, this.ptd.getPropaPts(nodeID));
|
|
308
|
-
}
|
|
309
|
-
propagate(edge) {
|
|
310
|
-
let changed = false;
|
|
311
|
-
let { src, dst } = edge.getEndPoints();
|
|
312
|
-
let diffPts = this.ptd.getDiffPts(src);
|
|
313
|
-
if (!diffPts) {
|
|
314
|
-
return changed;
|
|
315
|
-
}
|
|
316
|
-
let realDiffPts = this.ptd.calculateDiff(src, dst);
|
|
317
|
-
for (let pt of realDiffPts) {
|
|
318
|
-
changed = this.ptd.addPts(dst, pt) || changed;
|
|
319
|
-
}
|
|
320
|
-
if (changed) {
|
|
321
|
-
this.worklist.push(dst);
|
|
322
|
-
}
|
|
323
|
-
return changed;
|
|
324
|
-
}
|
|
325
|
-
/**
|
|
326
|
-
* 1. 记录被更新的节点(记录cid, nodeid)
|
|
327
|
-
* 2. ( PAGLocalNode记录callsite(cid, value唯一)),通过1种的nodeID查询Node,拿到Callsite
|
|
328
|
-
* 3. 在addDynamicCall里对传入指针过滤(已处理指针和未处理指针)
|
|
329
|
-
*/
|
|
330
|
-
onTheFlyDynamicCallSolve() {
|
|
331
|
-
let changed = false;
|
|
332
|
-
let processedCallSites = new Set();
|
|
333
|
-
this.pagBuilder.getUpdatedNodes().forEach((pts, nodeID) => {
|
|
334
|
-
let node = this.pag.getNode(nodeID);
|
|
335
|
-
if (!(node instanceof Pag_1.PagLocalNode)) {
|
|
336
|
-
logger.warn(`node ${nodeID} is not local node, value: ${node.getValue()}`);
|
|
337
|
-
return;
|
|
338
|
-
}
|
|
339
|
-
changed = this.processDynCallSite(node, pts, processedCallSites) || changed;
|
|
340
|
-
changed = this.processUnknownCallSite(node, pts) || changed;
|
|
341
|
-
});
|
|
342
|
-
this.pagBuilder.resetUpdatedNodes();
|
|
343
|
-
let srcNodes = this.pagBuilder.handleUnprocessedCallSites(processedCallSites);
|
|
344
|
-
changed = this.addToReanalyze(srcNodes) || changed;
|
|
345
|
-
changed = this.pagBuilder.handleReachable() || changed;
|
|
346
|
-
this.initWorklist();
|
|
347
|
-
return changed;
|
|
348
|
-
}
|
|
349
|
-
processDynCallSite(node, pts, processedCallSites) {
|
|
350
|
-
let changed = false;
|
|
351
|
-
let dynCallSites = node.getRelatedDynCallSites();
|
|
352
|
-
if (!dynCallSites && !node.isSdkParam()) {
|
|
353
|
-
logger.warn(`node ${node.getID()} has no related dynamic call site`);
|
|
354
|
-
return changed;
|
|
355
|
-
}
|
|
356
|
-
logger.info(`[process dynamic callsite] node ${node.getID()}`);
|
|
357
|
-
dynCallSites.forEach((dynCallsite) => {
|
|
358
|
-
for (let pt of pts) {
|
|
359
|
-
let srcNodes = this.pagBuilder.addDynamicCallEdge(dynCallsite, pt, node.getCid());
|
|
360
|
-
changed = this.addToReanalyze(srcNodes) || changed;
|
|
361
|
-
}
|
|
362
|
-
processedCallSites.add(dynCallsite);
|
|
363
|
-
});
|
|
364
|
-
return changed;
|
|
365
|
-
}
|
|
366
|
-
processUnknownCallSite(node, pts) {
|
|
367
|
-
let changed = false;
|
|
368
|
-
let unknownCallSites = node.getRelatedUnknownCallSites();
|
|
369
|
-
if (!unknownCallSites) {
|
|
370
|
-
logger.warn(`node ${node.getID()} has no related unknown call site`);
|
|
371
|
-
return changed;
|
|
372
|
-
}
|
|
373
|
-
logger.info(`[process unknown callsite] node ${node.getID()}`);
|
|
374
|
-
unknownCallSites.forEach((unknownCallSite) => {
|
|
375
|
-
for (let pt of pts) {
|
|
376
|
-
let srcNodes = this.pagBuilder.addDynamicCallEdge(unknownCallSite, pt, node.getCid());
|
|
377
|
-
changed = this.addToReanalyze(srcNodes) || changed;
|
|
378
|
-
}
|
|
379
|
-
});
|
|
380
|
-
return changed;
|
|
381
|
-
}
|
|
382
|
-
addToReanalyze(startNodes) {
|
|
383
|
-
let flag = false;
|
|
384
|
-
for (let node of startNodes) {
|
|
385
|
-
if (!this.worklist.includes(node) && this.ptd.resetElem(node)) {
|
|
386
|
-
this.worklist.push(node);
|
|
387
|
-
flag = true;
|
|
388
|
-
}
|
|
389
|
-
}
|
|
390
|
-
return flag;
|
|
391
|
-
}
|
|
392
|
-
/**
|
|
393
|
-
* compare interface
|
|
394
|
-
*/
|
|
395
|
-
noAlias(leftValue, rightValue) {
|
|
396
|
-
var _a, _b;
|
|
397
|
-
let leftValueNodes = (_a = this.pag.getNodesByValue(leftValue)) === null || _a === void 0 ? void 0 : _a.values();
|
|
398
|
-
let rightValueNodes = (_b = this.pag.getNodesByValue(rightValue)) === null || _b === void 0 ? void 0 : _b.values();
|
|
399
|
-
let leftValuePts = new Set();
|
|
400
|
-
let rightValuePts = new Set();
|
|
401
|
-
for (let nodeID of leftValueNodes) {
|
|
402
|
-
let node = this.pag.getNode(nodeID);
|
|
403
|
-
for (let pt of node.getPointTo()) {
|
|
404
|
-
leftValuePts.add(pt);
|
|
405
|
-
}
|
|
406
|
-
}
|
|
407
|
-
for (let nodeID of rightValueNodes) {
|
|
408
|
-
let node = this.pag.getNode(nodeID);
|
|
409
|
-
for (let pt of node.getPointTo()) {
|
|
410
|
-
rightValuePts.add(pt);
|
|
411
|
-
}
|
|
412
|
-
}
|
|
413
|
-
if (leftValuePts.size > rightValuePts.size) {
|
|
414
|
-
[leftValuePts, rightValuePts] = [rightValuePts, leftValuePts];
|
|
415
|
-
}
|
|
416
|
-
for (const elem of leftValuePts) {
|
|
417
|
-
if (rightValuePts.has(elem)) {
|
|
418
|
-
return false;
|
|
419
|
-
}
|
|
420
|
-
}
|
|
421
|
-
// no alias
|
|
422
|
-
return true;
|
|
423
|
-
}
|
|
424
|
-
mayAlias(leftValue, rightValue) {
|
|
425
|
-
return !this.noAlias(leftValue, rightValue);
|
|
426
|
-
}
|
|
427
|
-
getRelatedNodes(value) {
|
|
428
|
-
let valueNodes = this.pag.getNodesByValue(value);
|
|
429
|
-
let relatedAllNodes = new Set();
|
|
430
|
-
let workListNodes = [];
|
|
431
|
-
let processedNodes = new Set();
|
|
432
|
-
if (valueNodes) {
|
|
433
|
-
for (const nodeID of valueNodes.values()) {
|
|
434
|
-
workListNodes.push(nodeID);
|
|
435
|
-
}
|
|
436
|
-
}
|
|
437
|
-
while (workListNodes.length !== 0) {
|
|
438
|
-
let valueNodeID = workListNodes.shift();
|
|
439
|
-
if (processedNodes.has(valueNodeID)) {
|
|
440
|
-
continue;
|
|
441
|
-
}
|
|
442
|
-
this.processRelatedNode(valueNodeID, workListNodes, processedNodes);
|
|
443
|
-
}
|
|
444
|
-
processedNodes.forEach(nodeID => {
|
|
445
|
-
let valueNode = this.pag.getNode(nodeID);
|
|
446
|
-
relatedAllNodes.add(valueNode.getValue());
|
|
447
|
-
});
|
|
448
|
-
return relatedAllNodes;
|
|
449
|
-
}
|
|
450
|
-
processRelatedNode(valueNodeID, workListNodes, processedNodes) {
|
|
451
|
-
let valueNode = this.pag.getNode(valueNodeID);
|
|
452
|
-
this.addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes);
|
|
453
|
-
this.addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes);
|
|
454
|
-
processedNodes.add(valueNodeID);
|
|
455
|
-
}
|
|
456
|
-
addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
|
|
457
|
-
let inCopyEdges = valueNode.getIncomingCopyEdges();
|
|
458
|
-
if (inCopyEdges) {
|
|
459
|
-
inCopyEdges.forEach(edge => {
|
|
460
|
-
let srcID = edge.getSrcID();
|
|
461
|
-
if (!processedNodes.has(srcID)) {
|
|
462
|
-
workListNodes.push(srcID);
|
|
463
|
-
}
|
|
464
|
-
});
|
|
465
|
-
}
|
|
466
|
-
}
|
|
467
|
-
addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
|
|
468
|
-
let outCopyEdges = valueNode.getOutgoingCopyEdges();
|
|
469
|
-
if (outCopyEdges) {
|
|
470
|
-
outCopyEdges.forEach(edge => {
|
|
471
|
-
let dstID = edge.getDstID();
|
|
472
|
-
if (!processedNodes.has(dstID)) {
|
|
473
|
-
workListNodes.push(dstID);
|
|
474
|
-
}
|
|
475
|
-
});
|
|
476
|
-
}
|
|
477
|
-
}
|
|
478
|
-
detectTypeDiff(nodeId) {
|
|
479
|
-
var _a, _b;
|
|
480
|
-
if (this.config.detectTypeDiff === false) {
|
|
481
|
-
return;
|
|
482
|
-
}
|
|
483
|
-
this.typeDiffMap = (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
|
|
484
|
-
let node = this.pag.getNode(nodeId);
|
|
485
|
-
let value = node.getValue();
|
|
486
|
-
let origType = node.getValue().getType();
|
|
487
|
-
// TODO: union type
|
|
488
|
-
if (!(origType instanceof Type_1.ClassType || origType instanceof Type_1.UnknownType)) {
|
|
489
|
-
return;
|
|
490
|
-
}
|
|
491
|
-
let findSameType = false;
|
|
492
|
-
let pts = node.getPointTo();
|
|
493
|
-
if (pts.count() === 0) {
|
|
494
|
-
return;
|
|
495
|
-
}
|
|
496
|
-
for (let pt of pts) {
|
|
497
|
-
let ptNode = this.pag.getNode(pt);
|
|
498
|
-
let type = ptNode.getValue().getType();
|
|
499
|
-
if (type.toString() !== origType.toString()) {
|
|
500
|
-
let diffSet = (_b = this.typeDiffMap.get(value)) !== null && _b !== void 0 ? _b : new Set();
|
|
501
|
-
this.typeDiffMap.set(value, diffSet);
|
|
502
|
-
if (!diffSet.has(type)) {
|
|
503
|
-
diffSet.add(type);
|
|
504
|
-
}
|
|
505
|
-
}
|
|
506
|
-
else {
|
|
507
|
-
findSameType = true;
|
|
508
|
-
}
|
|
509
|
-
}
|
|
510
|
-
// If find pts to original type,
|
|
511
|
-
// need add original type back since it is a correct type
|
|
512
|
-
let diffSet = this.typeDiffMap.get(value);
|
|
513
|
-
if (diffSet && findSameType) {
|
|
514
|
-
diffSet.add(origType);
|
|
515
|
-
}
|
|
516
|
-
}
|
|
517
|
-
getTypeDiffMap() {
|
|
518
|
-
var _a;
|
|
519
|
-
return (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
|
|
520
|
-
}
|
|
521
|
-
resolveCall(sourceMethod, invokeStmt) {
|
|
522
|
-
return [];
|
|
523
|
-
}
|
|
524
|
-
getUnhandledFuncs() {
|
|
525
|
-
return this.pagBuilder.getUnhandledFuncs();
|
|
526
|
-
}
|
|
527
|
-
getHandledFuncs() {
|
|
528
|
-
return this.pagBuilder.getHandledFuncs();
|
|
529
|
-
}
|
|
530
|
-
getPTAConfig() {
|
|
531
|
-
return this.config;
|
|
532
|
-
}
|
|
533
|
-
dumpUnhandledFunctions() {
|
|
534
|
-
const filePath = path_1.default.join(this.config.outputDirectory, 'PtaUnhandledFunctionList.txt');
|
|
535
|
-
fs.access(filePath, fs.constants.F_OK, (err) => {
|
|
536
|
-
if (!err) {
|
|
537
|
-
fs.truncate(filePath, 0, (err) => {
|
|
538
|
-
if (err) {
|
|
539
|
-
logger.error('Error to truncate file ', err);
|
|
540
|
-
}
|
|
541
|
-
});
|
|
542
|
-
}
|
|
543
|
-
let updatedContent = '';
|
|
544
|
-
this.getUnhandledFuncs().forEach(funcID => {
|
|
545
|
-
let cgNode = this.cg.getNode(funcID);
|
|
546
|
-
if (cgNode.isSdkMethod()) {
|
|
547
|
-
return;
|
|
548
|
-
}
|
|
549
|
-
let f = this.cg.getArkMethodByFuncID(funcID);
|
|
550
|
-
if (f) {
|
|
551
|
-
updatedContent += f.getSignature().toString() + '\n';
|
|
552
|
-
}
|
|
553
|
-
});
|
|
554
|
-
fs.writeFile(filePath, updatedContent, 'utf8', (err) => {
|
|
555
|
-
if (err) {
|
|
556
|
-
logger.error('Error to write file', err);
|
|
557
|
-
}
|
|
558
|
-
});
|
|
559
|
-
});
|
|
560
|
-
}
|
|
561
|
-
mergeInstanceFieldMap(src, dst) {
|
|
562
|
-
dst.forEach((value, key) => {
|
|
563
|
-
if (src.has(key)) {
|
|
564
|
-
src.set(key, [...src.get(key), ...value]);
|
|
565
|
-
}
|
|
566
|
-
else {
|
|
567
|
-
src.set(key, value);
|
|
568
|
-
}
|
|
569
|
-
});
|
|
570
|
-
return src;
|
|
571
|
-
}
|
|
572
|
-
}
|
|
573
|
-
exports.PointerAnalysis = PointerAnalysis;
|
|
1
|
+
"use strict";
|
|
2
|
+
/*
|
|
3
|
+
* Copyright (c) 2024-2025 Huawei Device Co., Ltd.
|
|
4
|
+
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
5
|
+
* you may not use this file except in compliance with the License.
|
|
6
|
+
* You may obtain a copy of the License at
|
|
7
|
+
*
|
|
8
|
+
* http://www.apache.org/licenses/LICENSE-2.0
|
|
9
|
+
*
|
|
10
|
+
* Unless required by applicable law or agreed to in writing, software
|
|
11
|
+
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
12
|
+
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
13
|
+
* See the License for the specific language governing permissions and
|
|
14
|
+
* limitations under the License.
|
|
15
|
+
*/
|
|
16
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
17
|
+
if (k2 === undefined) k2 = k;
|
|
18
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
19
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
20
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
21
|
+
}
|
|
22
|
+
Object.defineProperty(o, k2, desc);
|
|
23
|
+
}) : (function(o, m, k, k2) {
|
|
24
|
+
if (k2 === undefined) k2 = k;
|
|
25
|
+
o[k2] = m[k];
|
|
26
|
+
}));
|
|
27
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
28
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
29
|
+
}) : function(o, v) {
|
|
30
|
+
o["default"] = v;
|
|
31
|
+
});
|
|
32
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
33
|
+
if (mod && mod.__esModule) return mod;
|
|
34
|
+
var result = {};
|
|
35
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
36
|
+
__setModuleDefault(result, mod);
|
|
37
|
+
return result;
|
|
38
|
+
};
|
|
39
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
40
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
41
|
+
};
|
|
42
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
43
|
+
exports.PointerAnalysis = void 0;
|
|
44
|
+
const path_1 = __importDefault(require("path"));
|
|
45
|
+
const fs = __importStar(require("fs"));
|
|
46
|
+
const CallGraph_1 = require("../model/CallGraph");
|
|
47
|
+
const AbstractAnalysis_1 = require("../algorithm/AbstractAnalysis");
|
|
48
|
+
const Type_1 = require("../../core/base/Type");
|
|
49
|
+
const CallGraphBuilder_1 = require("../model/builder/CallGraphBuilder");
|
|
50
|
+
const logger_1 = __importStar(require("../../utils/logger"));
|
|
51
|
+
const DummyMainCreater_1 = require("../../core/common/DummyMainCreater");
|
|
52
|
+
const Statistics_1 = require("../common/Statistics");
|
|
53
|
+
const Pag_1 = require("./Pag");
|
|
54
|
+
const PagBuilder_1 = require("./PagBuilder");
|
|
55
|
+
const PointerAnalysisConfig_1 = require("./PointerAnalysisConfig");
|
|
56
|
+
const PtsDS_1 = require("./PtsDS");
|
|
57
|
+
const Local_1 = require("../../core/base/Local");
|
|
58
|
+
const logger = logger_1.default.getLogger(logger_1.LOG_MODULE_TYPE.ARKANALYZER, 'PTA');
|
|
59
|
+
class PointerAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
|
|
60
|
+
constructor(p, cg, s, config) {
|
|
61
|
+
super(s);
|
|
62
|
+
this.pag = p;
|
|
63
|
+
this.cg = cg;
|
|
64
|
+
this.ptd = new PtsDS_1.DiffPTData(config.ptsCollectionCtor);
|
|
65
|
+
this.pagBuilder = new PagBuilder_1.PagBuilder(this.pag, this.cg, s, config.kLimit);
|
|
66
|
+
this.cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(this.cg, s);
|
|
67
|
+
this.ptaStat = new Statistics_1.PTAStat(this);
|
|
68
|
+
this.config = config;
|
|
69
|
+
}
|
|
70
|
+
static pointerAnalysisForWholeProject(projectScene, config) {
|
|
71
|
+
let cg = new CallGraph_1.CallGraph(projectScene);
|
|
72
|
+
let cgBuilder = new CallGraphBuilder_1.CallGraphBuilder(cg, projectScene);
|
|
73
|
+
cgBuilder.buildDirectCallGraphForScene();
|
|
74
|
+
let pag = new Pag_1.Pag();
|
|
75
|
+
if (!config) {
|
|
76
|
+
config = PointerAnalysisConfig_1.PointerAnalysisConfig.create(1, 'out/', false, false);
|
|
77
|
+
}
|
|
78
|
+
const dummyMainCreator = new DummyMainCreater_1.DummyMainCreater(projectScene);
|
|
79
|
+
dummyMainCreator.createDummyMain();
|
|
80
|
+
const dummyMainMethod = dummyMainCreator.getDummyMain();
|
|
81
|
+
cgBuilder.buildDirectCallGraph([dummyMainMethod]);
|
|
82
|
+
let dummyMainMethodID = cg.getCallGraphNodeByMethod(dummyMainMethod.getSignature()).getID();
|
|
83
|
+
cg.setDummyMainFuncID(dummyMainMethodID);
|
|
84
|
+
let pta = new PointerAnalysis(pag, cg, projectScene, config);
|
|
85
|
+
pta.setEntries([dummyMainMethodID]);
|
|
86
|
+
pta.start();
|
|
87
|
+
return pta;
|
|
88
|
+
}
|
|
89
|
+
init() {
|
|
90
|
+
logger.warn(`========== Init Pointer Analysis ==========`);
|
|
91
|
+
// start statistics
|
|
92
|
+
this.ptaStat.startStat();
|
|
93
|
+
// build funcPag with entries
|
|
94
|
+
this.pagBuilder.buildForEntries(this.entries);
|
|
95
|
+
if (this.config.dotDump) {
|
|
96
|
+
this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaInit_pag.dot'));
|
|
97
|
+
this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cg_init.dot'));
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
start() {
|
|
101
|
+
this.init();
|
|
102
|
+
this.solveConstraint();
|
|
103
|
+
this.postProcess();
|
|
104
|
+
}
|
|
105
|
+
postProcess() {
|
|
106
|
+
this.ptaStat.endStat();
|
|
107
|
+
this.pagBuilder.doStat();
|
|
108
|
+
this.cg.printStat();
|
|
109
|
+
this.pagBuilder.printStat();
|
|
110
|
+
this.ptaStat.printStat();
|
|
111
|
+
if (this.config.dotDump) {
|
|
112
|
+
this.pag.dump(path_1.default.join(this.config.outputDirectory, 'ptaEnd_pag.dot'));
|
|
113
|
+
this.cg.dump(path_1.default.join(this.config.outputDirectory, 'cgEnd.dot'));
|
|
114
|
+
}
|
|
115
|
+
if (this.config.unhandledFuncDump) {
|
|
116
|
+
this.dumpUnhandledFunctions();
|
|
117
|
+
}
|
|
118
|
+
}
|
|
119
|
+
getPTD() {
|
|
120
|
+
return this.ptd;
|
|
121
|
+
}
|
|
122
|
+
getStat() {
|
|
123
|
+
let ret = this.cg.getStat();
|
|
124
|
+
ret += '\n' + this.pagBuilder.getStat();
|
|
125
|
+
ret += '\n' + this.ptaStat.getStat();
|
|
126
|
+
return ret;
|
|
127
|
+
}
|
|
128
|
+
preProcessMethod(funcID) {
|
|
129
|
+
// do nothing
|
|
130
|
+
return [];
|
|
131
|
+
}
|
|
132
|
+
setEntries(fIds) {
|
|
133
|
+
this.entries = fIds;
|
|
134
|
+
}
|
|
135
|
+
solveConstraint() {
|
|
136
|
+
this.worklist = [];
|
|
137
|
+
logger.warn(`========== Pointer Analysis Start ==========`);
|
|
138
|
+
this.initWorklist();
|
|
139
|
+
let reanalyzer = true;
|
|
140
|
+
while (reanalyzer) {
|
|
141
|
+
this.ptaStat.iterTimes++;
|
|
142
|
+
logger.warn(`========== Pointer Analysis Round ${this.ptaStat.iterTimes} ==========`);
|
|
143
|
+
// do pointer transfer
|
|
144
|
+
this.solveWorklist();
|
|
145
|
+
// process dynamic call
|
|
146
|
+
reanalyzer = this.onTheFlyDynamicCallSolve();
|
|
147
|
+
if (this.config.dotDump) {
|
|
148
|
+
this.pag.dump(path_1.default.join(this.config.outputDirectory, `pta_pag_itor#${this.ptaStat.iterTimes}.dot`));
|
|
149
|
+
}
|
|
150
|
+
}
|
|
151
|
+
}
|
|
152
|
+
/**
|
|
153
|
+
* get newly added Address Edge, and add them to initial WorkList
|
|
154
|
+
*/
|
|
155
|
+
initWorklist() {
|
|
156
|
+
for (let e of this.pag.getAddrEdges()) {
|
|
157
|
+
this.ptaStat.numProcessedAddr++;
|
|
158
|
+
let { src, dst } = e.getEndPoints();
|
|
159
|
+
this.ptd.addPts(dst, src);
|
|
160
|
+
if (this.pag.getNode(src) instanceof Pag_1.PagGlobalThisNode) {
|
|
161
|
+
// readd globalThis heapObj into workList
|
|
162
|
+
this.ptd.addPts(src, src);
|
|
163
|
+
this.worklist.push(src);
|
|
164
|
+
}
|
|
165
|
+
this.worklist.push(dst);
|
|
166
|
+
}
|
|
167
|
+
this.pag.resetAddrEdges();
|
|
168
|
+
}
|
|
169
|
+
solveWorklist() {
|
|
170
|
+
while (this.worklist.length > 0) {
|
|
171
|
+
let node = this.worklist.shift();
|
|
172
|
+
this.processNode(node);
|
|
173
|
+
}
|
|
174
|
+
return true;
|
|
175
|
+
}
|
|
176
|
+
processNode(nodeId) {
|
|
177
|
+
this.handleThis(nodeId);
|
|
178
|
+
this.handleLoadWrite(nodeId);
|
|
179
|
+
this.handleCopy(nodeId);
|
|
180
|
+
this.handlePt(nodeId);
|
|
181
|
+
this.detectTypeDiff(nodeId);
|
|
182
|
+
return true;
|
|
183
|
+
}
|
|
184
|
+
handleCopy(nodeID) {
|
|
185
|
+
var _a;
|
|
186
|
+
let node = this.pag.getNode(nodeID);
|
|
187
|
+
(_a = node.getOutgoingCopyEdges()) === null || _a === void 0 ? void 0 : _a.forEach(copyEdge => {
|
|
188
|
+
this.propagate(copyEdge);
|
|
189
|
+
this.ptaStat.numProcessedCopy++;
|
|
190
|
+
});
|
|
191
|
+
return true;
|
|
192
|
+
}
|
|
193
|
+
handleLoadWrite(nodeID) {
|
|
194
|
+
var _a;
|
|
195
|
+
let node = this.pag.getNode(nodeID);
|
|
196
|
+
let nodeValue = node.getValue();
|
|
197
|
+
let diffPts = this.ptd.getDiffPts(nodeID);
|
|
198
|
+
if (!diffPts || diffPts.count() === 0) {
|
|
199
|
+
return false;
|
|
200
|
+
}
|
|
201
|
+
// get related field node with current node's value
|
|
202
|
+
let instanceFieldNodeMap = (_a = this.pag.getNodesByBaseValue(nodeValue)) !== null && _a !== void 0 ? _a : new Map();
|
|
203
|
+
// get intra procedural field node by exportMap
|
|
204
|
+
let intraProceduralFieldNodeMap = new Map();
|
|
205
|
+
if (nodeValue instanceof Local_1.Local) {
|
|
206
|
+
this.pagBuilder.getExportVariableMap(nodeValue).forEach((dst) => {
|
|
207
|
+
var _a;
|
|
208
|
+
let temp = (_a = this.pag.getNodesByBaseValue(dst)) !== null && _a !== void 0 ? _a : new Map();
|
|
209
|
+
intraProceduralFieldNodeMap = this.mergeInstanceFieldMap(instanceFieldNodeMap, temp);
|
|
210
|
+
});
|
|
211
|
+
}
|
|
212
|
+
instanceFieldNodeMap.forEach((nodeIDs, cid) => {
|
|
213
|
+
// TODO: check cid
|
|
214
|
+
// cid === -1 will escape the check, mainly for globalThis
|
|
215
|
+
let baseCid = node.getCid();
|
|
216
|
+
if (baseCid !== -1 && cid !== baseCid) {
|
|
217
|
+
return;
|
|
218
|
+
}
|
|
219
|
+
nodeIDs.forEach((nodeID) => {
|
|
220
|
+
// get abstract field node
|
|
221
|
+
let fieldNode = this.pag.getNode(nodeID);
|
|
222
|
+
this.handleFieldInEdges(fieldNode, diffPts);
|
|
223
|
+
this.handleFieldOutEdges(fieldNode, diffPts);
|
|
224
|
+
});
|
|
225
|
+
});
|
|
226
|
+
// without cid check, because closure and export is under different cid
|
|
227
|
+
intraProceduralFieldNodeMap.forEach((nodeIDs) => {
|
|
228
|
+
nodeIDs.forEach((nodeID) => {
|
|
229
|
+
// get abstract field node
|
|
230
|
+
let fieldNode = this.pag.getNode(nodeID);
|
|
231
|
+
this.handleFieldInEdges(fieldNode, diffPts);
|
|
232
|
+
this.handleFieldOutEdges(fieldNode, diffPts);
|
|
233
|
+
});
|
|
234
|
+
});
|
|
235
|
+
return true;
|
|
236
|
+
}
|
|
237
|
+
handleFieldInEdges(fieldNode, diffPts) {
|
|
238
|
+
fieldNode.getIncomingEdge().forEach((edge) => {
|
|
239
|
+
if (edge.getKind() !== Pag_1.PagEdgeKind.Write) {
|
|
240
|
+
return;
|
|
241
|
+
}
|
|
242
|
+
let srcNode = edge.getSrcNode();
|
|
243
|
+
this.ptaStat.numProcessedWrite++;
|
|
244
|
+
for (let pt of diffPts) {
|
|
245
|
+
// filter pt
|
|
246
|
+
// clone the real field node with abstract field node
|
|
247
|
+
let dstNode;
|
|
248
|
+
if (fieldNode instanceof Pag_1.PagArrayNode) {
|
|
249
|
+
dstNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
|
|
250
|
+
}
|
|
251
|
+
else {
|
|
252
|
+
dstNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
|
|
253
|
+
}
|
|
254
|
+
if (dstNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
|
|
255
|
+
this.ptaStat.numRealWrite++;
|
|
256
|
+
if (this.ptd.resetElem(srcNode.getID())) {
|
|
257
|
+
this.worklist.push(srcNode.getID());
|
|
258
|
+
}
|
|
259
|
+
}
|
|
260
|
+
}
|
|
261
|
+
});
|
|
262
|
+
}
|
|
263
|
+
handleFieldOutEdges(fieldNode, diffPts) {
|
|
264
|
+
fieldNode.getOutgoingEdges().forEach((edge) => {
|
|
265
|
+
if (edge.getKind() !== Pag_1.PagEdgeKind.Load) {
|
|
266
|
+
return;
|
|
267
|
+
}
|
|
268
|
+
let dstNode = edge.getDstNode();
|
|
269
|
+
this.ptaStat.numProcessedLoad++;
|
|
270
|
+
for (let pt of diffPts) {
|
|
271
|
+
let srcNode;
|
|
272
|
+
if (fieldNode instanceof Pag_1.PagArrayNode) {
|
|
273
|
+
srcNode = this.pag.getOrClonePagContainerFieldNode(pt, fieldNode);
|
|
274
|
+
}
|
|
275
|
+
else {
|
|
276
|
+
srcNode = this.pag.getOrClonePagFieldNode(fieldNode, pt);
|
|
277
|
+
}
|
|
278
|
+
if (srcNode && this.pag.addPagEdge(srcNode, dstNode, Pag_1.PagEdgeKind.Copy)) {
|
|
279
|
+
this.ptaStat.numRealLoad++;
|
|
280
|
+
// TODO: if field is used before initialzed, newSrc node has no diff pts
|
|
281
|
+
if (this.ptd.resetElem(srcNode.getID())) {
|
|
282
|
+
this.worklist.push(srcNode.getID());
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
}
|
|
286
|
+
});
|
|
287
|
+
}
|
|
288
|
+
/**
|
|
289
|
+
* If current node is a base of a called method, pointer in this node will be transfered into `this` Local in method
|
|
290
|
+
*/
|
|
291
|
+
handleThis(nodeID) {
|
|
292
|
+
var _a;
|
|
293
|
+
let node = this.pag.getNode(nodeID);
|
|
294
|
+
(_a = node.getOutgoingThisEdges()) === null || _a === void 0 ? void 0 : _a.forEach(thisEdge => {
|
|
295
|
+
this.propagate(thisEdge);
|
|
296
|
+
this.ptaStat.numProcessedThis++;
|
|
297
|
+
});
|
|
298
|
+
return true;
|
|
299
|
+
}
|
|
300
|
+
handlePt(nodeID) {
|
|
301
|
+
let realDiff = this.ptd.calculateDiff(nodeID, nodeID);
|
|
302
|
+
if (realDiff.count() !== 0) {
|
|
303
|
+
// record the updated nodes
|
|
304
|
+
this.pagBuilder.addUpdatedNode(nodeID, realDiff);
|
|
305
|
+
}
|
|
306
|
+
this.ptd.flush(nodeID);
|
|
307
|
+
this.pagBuilder.setPtForNode(nodeID, this.ptd.getPropaPts(nodeID));
|
|
308
|
+
}
|
|
309
|
+
propagate(edge) {
|
|
310
|
+
let changed = false;
|
|
311
|
+
let { src, dst } = edge.getEndPoints();
|
|
312
|
+
let diffPts = this.ptd.getDiffPts(src);
|
|
313
|
+
if (!diffPts) {
|
|
314
|
+
return changed;
|
|
315
|
+
}
|
|
316
|
+
let realDiffPts = this.ptd.calculateDiff(src, dst);
|
|
317
|
+
for (let pt of realDiffPts) {
|
|
318
|
+
changed = this.ptd.addPts(dst, pt) || changed;
|
|
319
|
+
}
|
|
320
|
+
if (changed) {
|
|
321
|
+
this.worklist.push(dst);
|
|
322
|
+
}
|
|
323
|
+
return changed;
|
|
324
|
+
}
|
|
325
|
+
/**
|
|
326
|
+
* 1. 记录被更新的节点(记录cid, nodeid)
|
|
327
|
+
* 2. ( PAGLocalNode记录callsite(cid, value唯一)),通过1种的nodeID查询Node,拿到Callsite
|
|
328
|
+
* 3. 在addDynamicCall里对传入指针过滤(已处理指针和未处理指针)
|
|
329
|
+
*/
|
|
330
|
+
onTheFlyDynamicCallSolve() {
|
|
331
|
+
let changed = false;
|
|
332
|
+
let processedCallSites = new Set();
|
|
333
|
+
this.pagBuilder.getUpdatedNodes().forEach((pts, nodeID) => {
|
|
334
|
+
let node = this.pag.getNode(nodeID);
|
|
335
|
+
if (!(node instanceof Pag_1.PagLocalNode)) {
|
|
336
|
+
logger.warn(`node ${nodeID} is not local node, value: ${node.getValue()}`);
|
|
337
|
+
return;
|
|
338
|
+
}
|
|
339
|
+
changed = this.processDynCallSite(node, pts, processedCallSites) || changed;
|
|
340
|
+
changed = this.processUnknownCallSite(node, pts) || changed;
|
|
341
|
+
});
|
|
342
|
+
this.pagBuilder.resetUpdatedNodes();
|
|
343
|
+
let srcNodes = this.pagBuilder.handleUnprocessedCallSites(processedCallSites);
|
|
344
|
+
changed = this.addToReanalyze(srcNodes) || changed;
|
|
345
|
+
changed = this.pagBuilder.handleReachable() || changed;
|
|
346
|
+
this.initWorklist();
|
|
347
|
+
return changed;
|
|
348
|
+
}
|
|
349
|
+
processDynCallSite(node, pts, processedCallSites) {
|
|
350
|
+
let changed = false;
|
|
351
|
+
let dynCallSites = node.getRelatedDynCallSites();
|
|
352
|
+
if (!dynCallSites && !node.isSdkParam()) {
|
|
353
|
+
logger.warn(`node ${node.getID()} has no related dynamic call site`);
|
|
354
|
+
return changed;
|
|
355
|
+
}
|
|
356
|
+
logger.info(`[process dynamic callsite] node ${node.getID()}`);
|
|
357
|
+
dynCallSites.forEach((dynCallsite) => {
|
|
358
|
+
for (let pt of pts) {
|
|
359
|
+
let srcNodes = this.pagBuilder.addDynamicCallEdge(dynCallsite, pt, node.getCid());
|
|
360
|
+
changed = this.addToReanalyze(srcNodes) || changed;
|
|
361
|
+
}
|
|
362
|
+
processedCallSites.add(dynCallsite);
|
|
363
|
+
});
|
|
364
|
+
return changed;
|
|
365
|
+
}
|
|
366
|
+
processUnknownCallSite(node, pts) {
|
|
367
|
+
let changed = false;
|
|
368
|
+
let unknownCallSites = node.getRelatedUnknownCallSites();
|
|
369
|
+
if (!unknownCallSites) {
|
|
370
|
+
logger.warn(`node ${node.getID()} has no related unknown call site`);
|
|
371
|
+
return changed;
|
|
372
|
+
}
|
|
373
|
+
logger.info(`[process unknown callsite] node ${node.getID()}`);
|
|
374
|
+
unknownCallSites.forEach((unknownCallSite) => {
|
|
375
|
+
for (let pt of pts) {
|
|
376
|
+
let srcNodes = this.pagBuilder.addDynamicCallEdge(unknownCallSite, pt, node.getCid());
|
|
377
|
+
changed = this.addToReanalyze(srcNodes) || changed;
|
|
378
|
+
}
|
|
379
|
+
});
|
|
380
|
+
return changed;
|
|
381
|
+
}
|
|
382
|
+
addToReanalyze(startNodes) {
|
|
383
|
+
let flag = false;
|
|
384
|
+
for (let node of startNodes) {
|
|
385
|
+
if (!this.worklist.includes(node) && this.ptd.resetElem(node)) {
|
|
386
|
+
this.worklist.push(node);
|
|
387
|
+
flag = true;
|
|
388
|
+
}
|
|
389
|
+
}
|
|
390
|
+
return flag;
|
|
391
|
+
}
|
|
392
|
+
/**
|
|
393
|
+
* compare interface
|
|
394
|
+
*/
|
|
395
|
+
noAlias(leftValue, rightValue) {
|
|
396
|
+
var _a, _b;
|
|
397
|
+
let leftValueNodes = (_a = this.pag.getNodesByValue(leftValue)) === null || _a === void 0 ? void 0 : _a.values();
|
|
398
|
+
let rightValueNodes = (_b = this.pag.getNodesByValue(rightValue)) === null || _b === void 0 ? void 0 : _b.values();
|
|
399
|
+
let leftValuePts = new Set();
|
|
400
|
+
let rightValuePts = new Set();
|
|
401
|
+
for (let nodeID of leftValueNodes) {
|
|
402
|
+
let node = this.pag.getNode(nodeID);
|
|
403
|
+
for (let pt of node.getPointTo()) {
|
|
404
|
+
leftValuePts.add(pt);
|
|
405
|
+
}
|
|
406
|
+
}
|
|
407
|
+
for (let nodeID of rightValueNodes) {
|
|
408
|
+
let node = this.pag.getNode(nodeID);
|
|
409
|
+
for (let pt of node.getPointTo()) {
|
|
410
|
+
rightValuePts.add(pt);
|
|
411
|
+
}
|
|
412
|
+
}
|
|
413
|
+
if (leftValuePts.size > rightValuePts.size) {
|
|
414
|
+
[leftValuePts, rightValuePts] = [rightValuePts, leftValuePts];
|
|
415
|
+
}
|
|
416
|
+
for (const elem of leftValuePts) {
|
|
417
|
+
if (rightValuePts.has(elem)) {
|
|
418
|
+
return false;
|
|
419
|
+
}
|
|
420
|
+
}
|
|
421
|
+
// no alias
|
|
422
|
+
return true;
|
|
423
|
+
}
|
|
424
|
+
mayAlias(leftValue, rightValue) {
|
|
425
|
+
return !this.noAlias(leftValue, rightValue);
|
|
426
|
+
}
|
|
427
|
+
getRelatedNodes(value) {
|
|
428
|
+
let valueNodes = this.pag.getNodesByValue(value);
|
|
429
|
+
let relatedAllNodes = new Set();
|
|
430
|
+
let workListNodes = [];
|
|
431
|
+
let processedNodes = new Set();
|
|
432
|
+
if (valueNodes) {
|
|
433
|
+
for (const nodeID of valueNodes.values()) {
|
|
434
|
+
workListNodes.push(nodeID);
|
|
435
|
+
}
|
|
436
|
+
}
|
|
437
|
+
while (workListNodes.length !== 0) {
|
|
438
|
+
let valueNodeID = workListNodes.shift();
|
|
439
|
+
if (processedNodes.has(valueNodeID)) {
|
|
440
|
+
continue;
|
|
441
|
+
}
|
|
442
|
+
this.processRelatedNode(valueNodeID, workListNodes, processedNodes);
|
|
443
|
+
}
|
|
444
|
+
processedNodes.forEach(nodeID => {
|
|
445
|
+
let valueNode = this.pag.getNode(nodeID);
|
|
446
|
+
relatedAllNodes.add(valueNode.getValue());
|
|
447
|
+
});
|
|
448
|
+
return relatedAllNodes;
|
|
449
|
+
}
|
|
450
|
+
processRelatedNode(valueNodeID, workListNodes, processedNodes) {
|
|
451
|
+
let valueNode = this.pag.getNode(valueNodeID);
|
|
452
|
+
this.addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes);
|
|
453
|
+
this.addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes);
|
|
454
|
+
processedNodes.add(valueNodeID);
|
|
455
|
+
}
|
|
456
|
+
addIncomingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
|
|
457
|
+
let inCopyEdges = valueNode.getIncomingCopyEdges();
|
|
458
|
+
if (inCopyEdges) {
|
|
459
|
+
inCopyEdges.forEach(edge => {
|
|
460
|
+
let srcID = edge.getSrcID();
|
|
461
|
+
if (!processedNodes.has(srcID)) {
|
|
462
|
+
workListNodes.push(srcID);
|
|
463
|
+
}
|
|
464
|
+
});
|
|
465
|
+
}
|
|
466
|
+
}
|
|
467
|
+
addOutgoingEdgesToWorkList(valueNode, workListNodes, processedNodes) {
|
|
468
|
+
let outCopyEdges = valueNode.getOutgoingCopyEdges();
|
|
469
|
+
if (outCopyEdges) {
|
|
470
|
+
outCopyEdges.forEach(edge => {
|
|
471
|
+
let dstID = edge.getDstID();
|
|
472
|
+
if (!processedNodes.has(dstID)) {
|
|
473
|
+
workListNodes.push(dstID);
|
|
474
|
+
}
|
|
475
|
+
});
|
|
476
|
+
}
|
|
477
|
+
}
|
|
478
|
+
detectTypeDiff(nodeId) {
|
|
479
|
+
var _a, _b;
|
|
480
|
+
if (this.config.detectTypeDiff === false) {
|
|
481
|
+
return;
|
|
482
|
+
}
|
|
483
|
+
this.typeDiffMap = (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
|
|
484
|
+
let node = this.pag.getNode(nodeId);
|
|
485
|
+
let value = node.getValue();
|
|
486
|
+
let origType = node.getValue().getType();
|
|
487
|
+
// TODO: union type
|
|
488
|
+
if (!(origType instanceof Type_1.ClassType || origType instanceof Type_1.UnknownType)) {
|
|
489
|
+
return;
|
|
490
|
+
}
|
|
491
|
+
let findSameType = false;
|
|
492
|
+
let pts = node.getPointTo();
|
|
493
|
+
if (pts.count() === 0) {
|
|
494
|
+
return;
|
|
495
|
+
}
|
|
496
|
+
for (let pt of pts) {
|
|
497
|
+
let ptNode = this.pag.getNode(pt);
|
|
498
|
+
let type = ptNode.getValue().getType();
|
|
499
|
+
if (type.toString() !== origType.toString()) {
|
|
500
|
+
let diffSet = (_b = this.typeDiffMap.get(value)) !== null && _b !== void 0 ? _b : new Set();
|
|
501
|
+
this.typeDiffMap.set(value, diffSet);
|
|
502
|
+
if (!diffSet.has(type)) {
|
|
503
|
+
diffSet.add(type);
|
|
504
|
+
}
|
|
505
|
+
}
|
|
506
|
+
else {
|
|
507
|
+
findSameType = true;
|
|
508
|
+
}
|
|
509
|
+
}
|
|
510
|
+
// If find pts to original type,
|
|
511
|
+
// need add original type back since it is a correct type
|
|
512
|
+
let diffSet = this.typeDiffMap.get(value);
|
|
513
|
+
if (diffSet && findSameType) {
|
|
514
|
+
diffSet.add(origType);
|
|
515
|
+
}
|
|
516
|
+
}
|
|
517
|
+
getTypeDiffMap() {
|
|
518
|
+
var _a;
|
|
519
|
+
return (_a = this.typeDiffMap) !== null && _a !== void 0 ? _a : new Map();
|
|
520
|
+
}
|
|
521
|
+
resolveCall(sourceMethod, invokeStmt) {
|
|
522
|
+
return [];
|
|
523
|
+
}
|
|
524
|
+
getUnhandledFuncs() {
|
|
525
|
+
return this.pagBuilder.getUnhandledFuncs();
|
|
526
|
+
}
|
|
527
|
+
getHandledFuncs() {
|
|
528
|
+
return this.pagBuilder.getHandledFuncs();
|
|
529
|
+
}
|
|
530
|
+
getPTAConfig() {
|
|
531
|
+
return this.config;
|
|
532
|
+
}
|
|
533
|
+
dumpUnhandledFunctions() {
|
|
534
|
+
const filePath = path_1.default.join(this.config.outputDirectory, 'PtaUnhandledFunctionList.txt');
|
|
535
|
+
fs.access(filePath, fs.constants.F_OK, (err) => {
|
|
536
|
+
if (!err) {
|
|
537
|
+
fs.truncate(filePath, 0, (err) => {
|
|
538
|
+
if (err) {
|
|
539
|
+
logger.error('Error to truncate file ', err);
|
|
540
|
+
}
|
|
541
|
+
});
|
|
542
|
+
}
|
|
543
|
+
let updatedContent = '';
|
|
544
|
+
this.getUnhandledFuncs().forEach(funcID => {
|
|
545
|
+
let cgNode = this.cg.getNode(funcID);
|
|
546
|
+
if (cgNode.isSdkMethod()) {
|
|
547
|
+
return;
|
|
548
|
+
}
|
|
549
|
+
let f = this.cg.getArkMethodByFuncID(funcID);
|
|
550
|
+
if (f) {
|
|
551
|
+
updatedContent += f.getSignature().toString() + '\n';
|
|
552
|
+
}
|
|
553
|
+
});
|
|
554
|
+
fs.writeFile(filePath, updatedContent, 'utf8', (err) => {
|
|
555
|
+
if (err) {
|
|
556
|
+
logger.error('Error to write file', err);
|
|
557
|
+
}
|
|
558
|
+
});
|
|
559
|
+
});
|
|
560
|
+
}
|
|
561
|
+
mergeInstanceFieldMap(src, dst) {
|
|
562
|
+
dst.forEach((value, key) => {
|
|
563
|
+
if (src.has(key)) {
|
|
564
|
+
src.set(key, [...src.get(key), ...value]);
|
|
565
|
+
}
|
|
566
|
+
else {
|
|
567
|
+
src.set(key, value);
|
|
568
|
+
}
|
|
569
|
+
});
|
|
570
|
+
return src;
|
|
571
|
+
}
|
|
572
|
+
}
|
|
573
|
+
exports.PointerAnalysis = PointerAnalysis;
|