arkanalyzer 1.0.92 → 1.0.93

package/lib/callgraph/algorithm/AbstractAnalysis.d.ts

@@ -28,8 +28,14 @@ export declare abstract class AbstractAnalysis {
     resolveInvokeExpr(invokeExpr: AbstractInvokeExpr): ArkMethod | undefined;
     getClassHierarchy(arkClass: ArkClass): ArkClass[];
     start(displayGeneratedMethod: boolean): void;
+    /**
+     * Whole-project CG: scan every non-SDK method once (`isProject=true`, no call-edge enqueue).
+     * `processedMethod` is initialized so RTA late callback edges (`emitCallbackEdge`) can query it
+     * without going through `init()`, which would seed the entry worklist.
+     */
     projectStart(displayGeneratedMethod: boolean): void;
     protected processCallSite(method: FuncID, cs: CallSite, displayGeneratedMethod: boolean, isProject?: boolean): void;
+    protected initProcessedMethod(): void;
     protected init(): void;
     protected processMethod(methodID: FuncID, displayGeneratedMethod: boolean, isProject?: boolean): void;
     protected getParamAnonymousMethod(invokeExpr: AbstractInvokeExpr): MethodSignature[];

package/lib/callgraph/algorithm/AbstractAnalysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AbstractAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/AbstractAnalysis.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAgC,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAkB,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAiB,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAA2B,cAAc,EAAqB,MAAM,0BAA0B,CAAC;AAItG,8BAAsB,gBAAgB;IAClC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC;IACxB,SAAS,CAAC,SAAS,EAAG,gBAAgB,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAqB;IACpD,SAAS,CAAC,eAAe,EAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,CAAC,mBAAmB,CAA8C;IACzE,sEAAsE;IACtE,OAAO,CAAC,iBAAiB,CAAkB;IAC3C,OAAO,CAAC,gBAAgB,CAAkB;IAC1C,OAAO,CAAC,gBAAgB,CAA4B;gBAExC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS;IAK5B,QAAQ,IAAI,KAAK;IAIjB,YAAY,IAAI,SAAS;IAIhC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IAClF,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAExD,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,SAAS;IAQxE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,EAAE;IAoCjD,KAAK,CAAC,sBAAsB,EAAE,OAAO,GAAG,IAAI;IAqB5C,YAAY,CAAC,sBAAsB,EAAE,OAAO,GAAG,IAAI;IAoB1D,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,GAAE,OAAe,GAAG,IAAI;IAqB1H,SAAS,CAAC,IAAI,IAAI,IAAI;IAOtB,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,GAAE,OAAe,GAAG,IAAI;IA2B5G,SAAS,CAAC,uBAAuB,CAAC,UAAU,EAAE,kBAAkB,GAAG,eAAe,EAAE;IAapF,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,GAAG,IAAI;CAU5H"}
+{"version":3,"file":"AbstractAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/AbstractAnalysis.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAgC,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAkB,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAiB,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAA2B,cAAc,EAAqB,MAAM,0BAA0B,CAAC;AAItG,8BAAsB,gBAAgB;IAClC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC;IACxB,SAAS,CAAC,SAAS,EAAG,gBAAgB,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAqB;IACpD,SAAS,CAAC,eAAe,EAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,CAAC,mBAAmB,CAA8C;IACzE,sEAAsE;IACtE,OAAO,CAAC,iBAAiB,CAAkB;IAC3C,OAAO,CAAC,gBAAgB,CAAkB;IAC1C,OAAO,CAAC,gBAAgB,CAA4B;gBAExC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS;IAK5B,QAAQ,IAAI,KAAK;IAIjB,YAAY,IAAI,SAAS;IAIhC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IAClF,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAExD,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,SAAS;IAQxE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,EAAE;IAoCjD,KAAK,CAAC,sBAAsB,EAAE,OAAO,GAAG,IAAI;IAqBnD;;;;OAIG;IACI,YAAY,CAAC,sBAAsB,EAAE,OAAO,GAAG,IAAI;IAqB1D,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,GAAE,OAAe,GAAG,IAAI;IAqB1H,SAAS,CAAC,mBAAmB,IAAI,IAAI;IAIrC,SAAS,CAAC,IAAI,IAAI,IAAI;IAOtB,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,SAAS,GAAE,OAAe,GAAG,IAAI;IAyB5G,SAAS,CAAC,uBAAuB,CAAC,UAAU,EAAE,kBAAkB,GAAG,eAAe,EAAE;IAapF,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,GAAG,IAAI;CAU5H"}

package/lib/callgraph/algorithm/AbstractAnalysis.js

@@ -117,16 +117,24 @@ class AbstractAnalysis {
         }
         this.cg.endStat();
     }
+    /**
+     * Whole-project CG: scan every non-SDK method once (`isProject=true`, no call-edge enqueue).
+     * `processedMethod` is initialized so RTA late callback edges (`emitCallbackEdge`) can query it
+     * without going through `init()`, which would seed the entry worklist.
+     */
     projectStart(displayGeneratedMethod) {
         this.cg.startStat();
         this.cgBuilder.buildCGNodes(this.scene.getMethods());
-        for (let n of this.cg.getNodesIter()) {
-            let cgNode = n;
-            if (cgNode.isSdkMethod()) {
+        this.initProcessedMethod();
+        for (const n of this.cg.getNodesIter()) {
+            const cgNode = n;
+            const id = cgNode.getID();
+            if (cgNode.isSdkMethod() || this.processedMethod.contains(id)) {
                 continue;
             }
-            this.preProcessMethod(cgNode.getID());
-            this.processMethod(cgNode.getID(), displayGeneratedMethod, true);
+            this.processedMethod.insert(id);
+            this.preProcessMethod(id);
+            this.processMethod(id, displayGeneratedMethod, true);
         }
         this.cgBuilder.setEntries();
         this.cg.endStat();
@@ -148,8 +156,11 @@ class AbstractAnalysis {
             logger.trace(`New workList item ${cs.calleeFuncID}: ${(_a = this.cg.getArkMethodByFuncID(cs.calleeFuncID)) === null || _a === void 0 ? void 0 : _a.getSignature().toString()}`);
         }
     }
-    init() {
+    initProcessedMethod() {
         this.processedMethod = new ((0, PtsDS_1.createPtsCollectionCtor)(PtsDS_1.PtsCollectionType.BitVector))();
+    }
+    init() {
+        this.initProcessedMethod();
         this.cg.getEntries().forEach(entryFunc => {
             this.workList.push(entryFunc);
         });
@@ -170,8 +181,6 @@ class AbstractAnalysis {
                     return;
                 }
                 this.resolveCall(cgNode.getID(), stmt).forEach(callSite => {
-                    this.cg.addStmtToCallSiteMap(stmt, callSite);
-                    this.cg.addMethodToCallSiteMap(callSite.calleeFuncID, callSite);
                     this.processCallSite(methodID, callSite, displayGeneratedMethod, isProject);
                 });
             });

package/lib/callgraph/algorithm/ClassHierarchyAnalysis.d.ts

@@ -7,6 +7,7 @@ import { CallGraphBuilder } from '../model/builder/CallGraphBuilder';
 export declare class ClassHierarchyAnalysis extends AbstractAnalysis {
     constructor(scene: Scene, cg: CallGraph, cb: CallGraphBuilder);
     resolveCall(callerMethod: NodeID, invokeStmt: Stmt): CallSite[];
+    private newRecordedCallSite;
     protected preProcessMethod(): CallSite[];
     private checkSuperInvoke;
 }

package/lib/callgraph/algorithm/ClassHierarchyAnalysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ClassHierarchyAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/ClassHierarchyAnalysis.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIrE,qBAAa,sBAAuB,SAAQ,gBAAgB;gBAC5C,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB;IAKtD,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IA8DtE,SAAS,CAAC,gBAAgB,IAAI,QAAQ,EAAE;IAKxC,OAAO,CAAC,gBAAgB;CAU3B"}
+{"version":3,"file":"ClassHierarchyAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/ClassHierarchyAnalysis.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIrE,qBAAa,sBAAuB,SAAQ,gBAAgB;gBAC5C,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB;IAKtD,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IAuDtE,OAAO,CAAC,mBAAmB;IAM3B,SAAS,CAAC,gBAAgB,IAAI,QAAQ,EAAE;IAKxC,OAAO,CAAC,gBAAgB;CAU3B"}

package/lib/callgraph/algorithm/ClassHierarchyAnalysis.js

@@ -33,7 +33,7 @@ class ClassHierarchyAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
         // process anonymous method call
         this.getParamAnonymousMethod(invokeExpr).forEach(method => {
             const nodeID = this.cg.getCallGraphNodeByMethod(method).getID();
-            resolveResult.push(this.cg.getCallSiteManager().newCallSite(invokeStmt, undefined, nodeID, callerMethod));
+            resolveResult.push(this.newRecordedCallSite(invokeStmt, nodeID, callerMethod));
         });
         let calleeMethod = this.resolveInvokeExpr(invokeExpr);
         if (!calleeMethod) {
@@ -46,7 +46,7 @@ class ClassHierarchyAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
             this.checkSuperInvoke(invokeStmt, declareClass, stmtDeclareClass)) {
             // get specific method
             const nodeID = this.cg.getCallGraphNodeByMethod(calleeMethod.getSignature()).getID();
-            resolveResult.push(this.cg.getCallSiteManager().newCallSite(invokeStmt, undefined, nodeID, callerMethod));
+            resolveResult.push(this.newRecordedCallSite(invokeStmt, nodeID, callerMethod));
         }
         else {
             const classHierarchy = this.getClassHierarchy(declareClass);
@@ -61,12 +61,18 @@ class ClassHierarchyAnalysis extends AbstractAnalysis_1.AbstractAnalysis {
                     continue;
                 }
                 if (possibleCalleeMethod && !possibleCalleeMethod.isAbstract()) {
-                    resolveResult.push(this.cg.getCallSiteManager().newCallSite(invokeStmt, undefined, this.cg.getCallGraphNodeByMethod(possibleCalleeMethod.getSignature()).getID(), callerMethod));
+                    const nodeID = this.cg.getCallGraphNodeByMethod(possibleCalleeMethod.getSignature()).getID();
+                    resolveResult.push(this.newRecordedCallSite(invokeStmt, nodeID, callerMethod));
                 }
             }
         }
         return resolveResult;
     }
+    newRecordedCallSite(invokeStmt, calleeFuncID, callerMethod) {
+        const cs = this.cg.getCallSiteManager().newCallSite(invokeStmt, undefined, calleeFuncID, callerMethod);
+        this.cg.recordCallSite(invokeStmt, cs);
+        return cs;
+    }
     preProcessMethod() {
         // do nothing
         return [];

package/lib/callgraph/algorithm/RapidTypeAnalysis.d.ts

@@ -10,14 +10,161 @@ export declare class RapidTypeAnalysis extends AbstractAnalysis {
     private ignoredCalls;
     private virtualDispatchIndex;
     private enableThisPrune;
+    private callbackBindings;
+    private callbackFieldBindings;
+    private closureTraceVisited;
+    private aliasTypeUnwrapVisited;
+    private executableCalleeScratch;
+    private builtinArrayClassSignature;
+    private builtinArrayClassResolved;
+    private static readonly CALLBACK_CLASS_SIG_KEY;
     constructor(scene: Scene, cg: CallGraph, cb: CallGraphBuilder, enableThisPrune?: boolean);
     protected init(): void;
     resolveCall(callerMethod: NodeID, invokeStmt: Stmt): CallSite[];
+    private resolveDirectOrVirtual;
+    /**
+     * Single args scan:
+     * - if any executable real callee exists (or declared callee has CFG), record callback bindings
+     *   (concrete FunctionType) or forward parameter bindings into callee slots;
+     * - otherwise, for no-CFG SDK / built-in / unresolved (`%unk`) callees, append virtual
+     *   callback CallSites for concrete FunctionType args, parameter bindings, and callback
+     *   fields.
+     */
+    private processCallbackArguments;
+    /**
+     * Bind a FunctionType callback argument to the callee's parameter binding slot.
+     * Extracted from processCallbackArguments for readability.
+     */
+    private bindFunctionTypeCallback;
+    /**
+     * Bind a ClassType callback (Callback<T>, AsyncCallback<T>, ...) argument to the
+     * callee's parameter binding slot via field binding state.
+     * Extracted from processCallbackArguments for readability.
+     */
+    private bindClassTypeCallback;
+    private scanExecutableCallees;
+    private handleNoExecutableCalleePath;
+    /**
+     * Unresolved declaring file (`@%unk/%unk:...`) — common when type inference fails for
+     * built-ins such as Promise.constructor in large apps.
+     */
+    private isUnresolvedProjectName;
+    /**
+     * Built-in container APIs that accept FunctionType values without invoking them
+     * (writes such as push/set, and lookups such as indexOf/has). Caller must already
+     * know the method is a `@built-in` SDK method.
+     */
+    private isBuiltInContainerNonInvokingMethod;
+    private isBuiltInContainerNonInvokingMethodByMethodName;
+    /**
+     * Whether a no-CFG callee should synthesize virtual edges into callback args.
+     * OH SDK and unresolved (`%unk`) APIs always qualify. Built-ins qualify by default
+     * except container non-invoking APIs (Array.push / Array.indexOf / Map.set / ...).
+     * Resolves the CG node and declaring projectName once.
+     */
+    private shouldSynthesizeVirtualCallback;
+    /**
+     * Invoke-site gate when {@link resolveInvokeExpr} cannot produce a usable declared method
+     * (e.g. `@%unk/%unk: Promise.constructor` with no Scene body).
+     */
+    private shouldSynthesizeVirtualCallbackFromInvoke;
+    /**
+     * No-CFG callee that invokes callbacks: emit virtual edges into every callback-shaped argument.
+     * Caller must have already gated on {@link shouldSynthesizeVirtualCallback}. Built-in container
+     * non-invoking APIs (Array.push / Array.indexOf / Map.set / ...) remain excluded by that gate.
+     */
+    private appendVirtualCallbackCallSites;
+    private resolvePtrInvoke;
+    /**
+     * Resolve a callback value through all supported representations.
+     * A value may have both a concrete static target and a field/binding origin;
+     * both paths are retained so later field targets cannot be hidden by the
+     * concrete FunctionType fast path.
+     */
+    private appendCallbackValueCallSites;
+    private appendCallbackCallSite;
+    private subscribeToCallbackField;
+    /**
+     * Subscribe invokeStmt to bindingState and collect already-known targets as CallSites.
+     * Late-arriving targets are delivered via addCallbackTarget → emitCallbackEdge.
+     */
+    private subscribeAndCollectBoundTargets;
+    private getTypeFromAliasType;
+    /**
+     * Whether a type can serve as a callback — FunctionType (direct or aliased)
+     * or a ClassType callback wrapper (Callback<T>, AsyncCallback<T>, ...).
+     *
+     * Unlike {@link unwrapFunctionType}, this accepts ClassType callbacks whose real
+     * FunctionType is only discoverable at the assignment site (right-hand side),
+     * not from the ClassType itself. This lets the field-subscription and field-store
+     * pipelines accept `private cb: Callback<X> = (...) => {...}` fields.
+     */
+    private isCallbackType;
+    /**
+     * Peel AliasType layers until a FunctionType is found.
+     * Fast-path: FunctionType returns immediately; non-alias types return undefined
+     * without touching the visited scratch set.
+     */
+    private unwrapFunctionType;
+    private resolveFuncPtrToBindingState;
+    private resolveFuncPtrToBindingKey;
+    /**
+     * Resolve a function-pointer local to an instance callback field.
+     * The short-term field model follows one local alias at most; it does not
+     * perform receiver points-to analysis.
+     */
+    private resolveFuncPtrToFieldRef;
+    private resolveFuncPtrValueToBindingKey;
+    /**
+     * AliasType-typed ptr locals on invoke exprs may lack declaringStmt even when the
+     * method body has a same-named local that carries the real definition.
+     */
+    private recoverLocalWithDeclaringStmt;
+    /**
+     * Recursively trace a Local back to a parameter binding key.
+     * Follows local aliases and unique closure captures until an ArkParameterRef is
+     * found; returns the packed (ownerFuncID, logicalArgIndex) key, or undefined if
+     * the value does not originate from a parameter slot.
+     */
+    private resolveFuncPtrToBindingKeyRec;
+    private toLogicalArgIndex;
+    private encodeCallbackBindingKey;
+    private decodeOwnerFuncID;
+    private decodeLogicalArgIndex;
+    private getOrCreateBindingState;
+    private getCallbackFieldKey;
+    private getOrCreateCallbackFieldState;
+    private linkCallbackField;
+    private addCallbackFieldTarget;
+    /**
+     * Link a callback field to a callee parameter binding slot. When the field's
+     * targets are populated later (e.g. field initializer processed after the
+     * call site due to RTA workList ordering), targets propagate to the binding
+     * slot via {@link addCallbackFieldTarget} → bindingForwards → addCallbackTarget.
+     */
+    private linkFieldToBinding;
+    private subscribeAndCollectFieldTargets;
+    private recordCallbackFieldStore;
+    /**
+     * Link source parameter binding to a callee parameter slot and copy existing targets.
+     * Future addCallbackTarget calls on the source also propagate through forwards.
+     */
+    private linkCallbackBinding;
+    private addCallbackTarget;
+    /**
+     * Create a CallbackCallSite, register it via CallSiteManager (for ID allocation
+     * and getCallSiteById lookup) and via CallGraph maps (for getCallSiteByStmt and
+     * getCallSitesByMethod lookup). The argIndex is set for callback virtual edges
+     * and left undefined for regular (direct/virtual/constructor) call sites.
+     */
+    private newRTACallSite;
+    private emitCallbackEdge;
     private getOrBuildVirtualDispatchRows;
     private tryResolveAggressiveThisPruneCall;
     private resolveConstructorClassFromNew;
     protected preProcessMethod(funcID: FuncID): CallSite[];
     private collectInstancedClassesInMethod;
+    private getBuiltinArrayClassSignature;
     addIgnoredCalls(arkClass: ClassSignature, callerID: FuncID, calleeID: FuncID, invokeStmt: Stmt): void;
 }
 //# sourceMappingURL=RapidTypeAnalysis.d.ts.map

package/lib/callgraph/algorithm/RapidTypeAnalysis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RapidTypeAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/RapidTypeAnalysis.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAiB,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAarE,qBAAa,iBAAkB,SAAQ,gBAAgB;IAEnD,OAAO,CAAC,gBAAgB,CAAkC;IAE1D,OAAO,CAAC,YAAY,CAA2F;IAC/G,OAAO,CAAC,oBAAoB,CAAoE;IAChG,OAAO,CAAC,eAAe,CAAU;gBAErB,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,eAAe,GAAE,OAAe;IAM/F,SAAS,CAAC,IAAI,IAAI,IAAI;IAYf,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IAgFtE,OAAO,CAAC,6BAA6B;IA6CrC,OAAO,CAAC,iCAAiC;IAkCzC,OAAO,CAAC,8BAA8B;IAqCtC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IA2BtD,OAAO,CAAC,+BAA+B;IA+BhC,eAAe,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI;CAK/G"}
+{"version":3,"file":"RapidTypeAnalysis.d.ts","sourceRoot":"","sources":["../../../src/callgraph/algorithm/RapidTypeAnalysis.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAiB,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAiB,QAAQ,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AA4ErE,qBAAa,iBAAkB,SAAQ,gBAAgB;IAEnD,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAAoD;IACxE,OAAO,CAAC,oBAAoB,CAAoE;IAChG,OAAO,CAAC,eAAe,CAAU;IAGjC,OAAO,CAAC,gBAAgB,CAAmE;IAG3F,OAAO,CAAC,qBAAqB,CAAwD;IAErF,OAAO,CAAC,mBAAmB,CAAyB;IAEpD,OAAO,CAAC,sBAAsB,CAAwB;IAEtD,OAAO,CAAC,uBAAuB,CAAgB;IAE/C,OAAO,CAAC,0BAA0B,CAA6B;IAE/D,OAAO,CAAC,yBAAyB,CAAkB;IAEnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAM5C;gBAEU,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,eAAe,GAAE,OAAe;IAM/F,SAAS,CAAC,IAAI,IAAI,IAAI;IAYf,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,QAAQ,EAAE;IAiBtE,OAAO,CAAC,sBAAsB;IA8D9B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAsDhC;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAmBhC;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,qBAAqB;IAkB7B,OAAO,CAAC,4BAA4B;IA2BpC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAI/B;;;;OAIG;IACH,OAAO,CAAC,mCAAmC;IAW3C,OAAO,CAAC,+CAA+C;IAIvD;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAmBvC;;;OAGG;IACH,OAAO,CAAC,yCAAyC;IAQjD;;;;OAIG;IACH,OAAO,CAAC,8BAA8B;IAWtC,OAAO,CAAC,gBAAgB;IAOxB;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;IAkDpC,OAAO,CAAC,sBAAsB;IAkB9B,OAAO,CAAC,wBAAwB;IAchC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAgBvC,OAAO,CAAC,oBAAoB;IAc5B;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAiBtB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,4BAA4B;IAWpC,OAAO,CAAC,0BAA0B;IASlC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAwBhC,OAAO,CAAC,+BAA+B;IAevC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAerC;;;;;OAKG;IACH,OAAO,CAAC,6BAA6B;IAsDrC,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,wBAAwB;IAIhC,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,uBAAuB;IAsB/B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,6BAA6B;IAarC,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;IAoB9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,+BAA+B;IAqBvC,OAAO,CAAC,wBAAwB;IAwBhC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,iBAAiB;IAqBzB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,6BAA6B;IAiDrC,OAAO,CAAC,iCAAiC;IAiCzC,OAAO,CAAC,8BAA8B;IAoCtC,SAAS,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAqBtD,OAAO,CAAC,+BAA+B;IAwCvC,OAAO,CAAC,6BAA6B;IAiB9B,eAAe,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI;CAiB/G"}