svf-lib 1.0.1049 → 1.0.1052

package/SVF-linux/include/SVF-FE/BasicTypes.h

@@ -58,6 +58,7 @@ typedef llvm::ConstantExpr ConstantExpr;
 typedef llvm::ConstantDataArray ConstantDataArray;
 typedef llvm::ConstantData ConstantData;
 typedef llvm::ConstantArray ConstantArray;
+typedef llvm::Constant Constant;
 
 // LLVM Instructions
 typedef llvm::AllocaInst AllocaInst;

package/SVF-linux/include/Util/BasicTypes.h

@@ -91,7 +91,6 @@ typedef llvm::FunctionType FunctionType;
 
 /// LLVM Aliases and constants
 typedef llvm::Argument Argument;
-typedef llvm::Constant Constant;
 typedef llvm::ConstantInt ConstantInt;
 typedef llvm::ConstantPointerNull ConstantPointerNull;
 typedef llvm::GlobalAlias GlobalAlias;

package/SVF-osx/include/MTA/LockResultValidator.h

@@ -70,8 +70,7 @@ private:
 
             if (callee)
             {
-                if (ExtAPI::EFT_L_A0__A0R_A1R == ExtAPI::getExtAPI()->get_type(callee)
-                        || callee->getName().find("llvm.memset") != std::string::npos)
+                if (callee->getName().find("llvm.memset") != std::string::npos)
                     return I;
             }
             I = I->getPrevNode();

package/SVF-osx/include/MTA/MTAAnnotator.h

@@ -78,7 +78,7 @@ public:
     inline bool isMemcpy(const Instruction *I)
     {
         const SVFFunction* F =SVFUtil::getCallee(I);
-        return F && ExtAPI::EFT_L_A0__A0R_A1R == ExtAPI::getExtAPI()->get_type(F);
+        return F && F->getName().find("llvm.memcpy") != std::string::npos;
     }
 
 private:

package/SVF-osx/include/MTA/MTAResultValidator.h

@@ -416,9 +416,9 @@ private:
 
             if (const SVFFunction *callee = SVFUtil::getCallee(I))
             {
-                if (ExtAPI::EFT_L_A0__A0R_A1R == ExtAPI::getExtAPI()->get_type(callee)
-                        || callee->getName().find("llvm.memset") != std::string::npos)
+                if (callee->getName().find("llvm.memset") != std::string::npos)
                     return I;
+
             }
             I = I->getPrevNode();
         }

package/SVF-osx/include/SVF-FE/BasicTypes.h

@@ -58,6 +58,7 @@ typedef llvm::ConstantExpr ConstantExpr;
 typedef llvm::ConstantDataArray ConstantDataArray;
 typedef llvm::ConstantData ConstantData;
 typedef llvm::ConstantArray ConstantArray;
+typedef llvm::Constant Constant;
 
 // LLVM Instructions
 typedef llvm::AllocaInst AllocaInst;

package/SVF-osx/include/SVF-FE/SVFIRBuilder.h

@@ -34,6 +34,7 @@
 #include "Util/ExtAPI.h"
 #include "SVF-FE/BasicTypes.h"
 #include "SVF-FE/ICFGBuilder.h"
+#include "Util/cJSON.h"
 
 namespace SVF
 {
@@ -240,6 +241,8 @@ protected:
 
     /// Handle external call
     //@{
+    virtual u32_t getArgIndex(std::string s);
+    virtual NodeID parseNode(std::string s, CallSite cs, const Instruction *inst);
     virtual void handleExtCall(CallSite cs, const SVFFunction *F);
     void addComplexConsForExt(Value *D, Value *S, const Value* sz);
     //@}

package/SVF-osx/include/Util/BasicTypes.h

@@ -91,7 +91,6 @@ typedef llvm::FunctionType FunctionType;
 
 /// LLVM Aliases and constants
 typedef llvm::Argument Argument;
-typedef llvm::Constant Constant;
 typedef llvm::ConstantInt ConstantInt;
 typedef llvm::ConstantPointerNull ConstantPointerNull;
 typedef llvm::GlobalAlias GlobalAlias;

package/SVF-osx/include/Util/ExtAPI.h

@@ -28,218 +28,242 @@
 
 /*
  * Modified by Yulei Sui 2013
-*/
+ */
 
 #ifndef __ExtAPI_H
 #define __ExtAPI_H
 
 #include "Util/BasicTypes.h"
-#include <map>
-#include <set>
+#include "Util/cJSON.h"
+#include "Util/config.h"
 #include <string>
+#include <map>
+
+#define EXTAPI_JSON_PATH "/lib/Util/ExtAPI.json"
 
 namespace SVF
 {
 
-//------------------------------------------------------------------------------
+/*
+
+    Specifications in ExtAPI.json
+
+    Specification language: The specification language of external function includes:
+    1. the name of the function,
+    2. the type of the function,
+    3. the operations of the function.
+
+    Funtion type: Funtion type represents some property of the function.
+    For example,
+    ”EFT_ALLOC“, represents if this external function allocates a new object and assigns it to one of its arguments,
+    For the selection of Function type and a more detailed explanation, please refer to enum extf_t in ExtAPI.h.
+
+    Function operations: Function operations indicates the relationship between input and output,
+    mainly the relationship between function parameters, or between parameters and return values after function is executed.
+    For example,
+    "copy": ["A2", "L"], indicates that after this external function is executed, the value of the 2th parameter is copied into the return value.
+    For the selection of Function type and a more detailed explanation, please refer to enum extType in ExtAPI.h.
+
+    For operands of function operation, e.g., "A2", "L", there are the following options:
+    "A": represents an parameter;
+    "N": represents a number;
+    "R": represents a reference;
+    "L": represents a return value;
+    "V": represents a dummy node;
+
+    Among them, parameter may have multiple forms, because there may be multiple parameters, and parameter may be a reference or complex structure,
+
+    Here we use regular expressions "(AN)(R|RN)^*" to represent parameter, for example,
+    "A0":    represents the 1th parameter;
+    "A2R":   represents that the 3th parameter is a reference;
+    "A1R2":  represents the 3th substructure of 2th parameter "A1R", where "A1R" is a complex structure;
+    "A2R3R": represents the 4th substructure of 3th parameter "A2R" is a reference, where "A2R" is a complex structure;
+
+
+    Specification format:
+    "functionName": {
+        "type": "functional type",
+        "function operation_1": [ operand_1, operand_2, ... , operand_n],
+        "function operation_2": [ operand_1, operand_2, ... , operand_n],
+        ...
+        "function operation_n": [ operand_1, operand_2, ... , operand_n]
+    }
+*/
+
+
 class ExtAPI
 {
 public:
-    //External Function types
-    //Assume a call in the form LHS= F(arg0, arg1, arg2, arg3).
     enum extf_t
     {
-        EFT_NOOP= 0,      //no effect on pointers
-        EFT_ALLOC,        //returns a ptr to a newly allocated object
-        EFT_REALLOC,      //like L_A0 if arg0 is a non-null ptr, else ALLOC
-        EFT_FREE,      	//free memory arg0 and all pointers passing into free function
-        EFT_FREE_MULTILEVEL,  //any argument with 2-level pointer passing too a free wrapper function e.g., XFree(void**) which frees memory for void* and void**
-        EFT_NOSTRUCT_ALLOC, //like ALLOC but only allocates non-struct data
-        EFT_STAT,         //retval points to an unknown static var X
-        EFT_STAT2,        //ret -> X -> Y (X, Y - external static vars)
-        EFT_L_A0,         //copies arg0, arg1, or arg2 into LHS
+        EXT_ADDR = 0,  // Handle addr edge
+        EXT_COPY,      // Handle copy edge
+        EXT_LOAD,      // Handle load edge
+        EXT_STORE,     // Handle store edge
+        EXT_LOADSTORE, // Handle load and store edges, and add a dummy node
+        EXT_COPY_N,    // Copy the character c (an unsigned char) to the first n characters of the string pointed to, by the argument str
+        EXT_COPY_MN,   // Copies n characters from memory area src to memory area dest.
+        EXT_FUNPTR,    // Handle function void *dlsym(void *handle, const char *symbol)
+        EXT_COMPLEX,   // Handle function _ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
+        EXT_OTHER
+    };
+
+    // External Function types
+    // Assume a call in the form LHS= F(arg0, arg1, arg2, arg3).
+    enum extType
+    {
+        EFT_NOOP = 0,        // no effect on pointers
+        EFT_ALLOC,           // returns a ptr to a newly allocated object
+        EFT_REALLOC,         // like L_A0 if arg0 is a non-null ptr, else ALLOC
+        EFT_FREE,            // free memory arg0 and all pointers passing into free function
+        EFT_FREE_MULTILEVEL, // any argument with 2-level pointer passing too a free wrapper function e.g., XFree(void**) which frees memory for void* and void**
+        EFT_NOSTRUCT_ALLOC,  // like ALLOC but only allocates non-struct data
+        EFT_STAT,            // retval points to an unknown static var X
+        EFT_STAT2,           // ret -> X -> Y (X, Y - external static vars)
+        EFT_L_A0,            // copies arg0, arg1, or arg2 into LHS
         EFT_L_A1,
         EFT_L_A2,
         EFT_L_A8,
-        EFT_L_A0__A0R_A1,   //stores arg1 into *arg0 and returns arg0 (currently only for memset)
-        EFT_L_A0__A0R_A1R,  //copies the data that arg1 points to into the location
-        EFT_L_A1__FunPtr,  //obtain the address of a symbol based on the arg1 (char*) and parse a function to LHS (e.g., void *dlsym(void *handle, char *funname);)
+        EFT_L_A0__A0R_A1,  // stores arg1 into *arg0 and returns arg0 (currently only for memset)
+        EFT_L_A0__A0R_A1R, // copies the data that arg1 points to into the location
+        EFT_L_A1__FunPtr,  // obtain the address of a symbol based on the arg1 (char*) and parse a function to LHS (e.g., void *dlsym(void *handle, char *funname);)
         //  arg0 points to; note that several fields may be
         //  copied at once if both point to structs.
         //  Returns arg0.
-        EFT_A1R_A0R,      //copies *arg0 into *arg1, with non-ptr return
-        EFT_A3R_A1R_NS,   //copies *arg1 into *arg3 (non-struct copy only)
-        EFT_A1R_A0,       //stores arg0 into *arg1
-        EFT_A2R_A1,       //stores arg1 into *arg2
-        EFT_A4R_A1,       //stores arg1 into *arg4
-        EFT_L_A0__A2R_A0, //stores arg0 into *arg2 and returns it
-        EFT_L_A0__A1_A0,  //store arg1 into arg0's base and returns arg0
-        EFT_A0R_NEW,      //stores a pointer to an allocated object in *arg0
-        EFT_A1R_NEW,      //as above, into *arg1, etc.
+        EFT_A1R_A0R,      // copies *arg0 into *arg1, with non-ptr return
+        EFT_A3R_A1R_NS,   // copies *arg1 into *arg3 (non-struct copy only)
+        EFT_A1R_A0,       // stores arg0 into *arg1
+        EFT_A2R_A1,       // stores arg1 into *arg2
+        EFT_A4R_A1,       // stores arg1 into *arg4
+        EFT_L_A0__A2R_A0, // stores arg0 into *arg2 and returns it
+        EFT_L_A0__A1_A0,  // store arg1 into arg0's base and returns arg0
+        EFT_A0R_NEW,      // stores a pointer to an allocated object in *arg0
+        EFT_A1R_NEW,      // as above, into *arg1, etc.
         EFT_A2R_NEW,
         EFT_A4R_NEW,
         EFT_A11R_NEW,
-        EFT_STD_RB_TREE_INSERT_AND_REBALANCE,  // Some complex effects
-        EFT_STD_RB_TREE_INCREMENT,  // Some complex effects
-        EFT_STD_LIST_HOOK,  // Some complex effects
+        EFT_STD_RB_TREE_INSERT_AND_REBALANCE, // Some complex effects
+        EFT_STD_RB_TREE_INCREMENT,            // Some complex effects
+        EFT_STD_LIST_HOOK,                    // Some complex effects
 
-        CPP_EFT_A0R_A1,   //stores arg1 into *arg0
-        CPP_EFT_A0R_A1R,  //copies *arg1 into *arg0
-        CPP_EFT_A1R,      //load arg1
+        CPP_EFT_A0R_A1,       // stores arg1 into *arg0
+        CPP_EFT_A0R_A1R,      // copies *arg1 into *arg0
+        CPP_EFT_A1R,          // load arg1
         EFT_CXA_BEGIN_CATCH,  //__cxa_begin_catch
         CPP_EFT_DYNAMIC_CAST, // dynamic_cast
-        EFT_OTHER         //not found in the list
+        EFT_NULL              // not found in the list
     };
-private:
 
-    //Each Function name is mapped to its extf_t
-    Map<std::string, extf_t> info;
-    //A cache of is_ext results for all SVFFunction*'s (hash_map is fastest).
-    Map<const SVFFunction*, bool> isext_cache;
-
-    void init();                          //fill in the map (see ExtAPI.cpp)
+private:
+    std::map<std::string, extf_t> op_pair =
+    {
+        {"addr", EXT_ADDR},
+        {"copy", EXT_COPY},
+        {"load", EXT_LOAD},
+        {"store", EXT_STORE},
+        {"load_store", EXT_LOADSTORE},
+        {"copy_n", EXT_COPY_N},
+        {"copy_mn", EXT_COPY_MN},
+        {"complex", EXT_COMPLEX},
+        {"funptr", EXT_FUNPTR}
+    };
 
-    ExtAPI()
+    std::map<std::string, extType> type_pair =
     {
-        init();
-        isext_cache.clear();
-    }
+        {"EFT_NOOP", EFT_NOOP},
+        {"EFT_ALLOC", EFT_ALLOC},
+        {"EFT_REALLOC", EFT_REALLOC},
+        {"EFT_FREE", EFT_FREE},
+        {"EFT_FREE_MULTILEVEL", EFT_FREE_MULTILEVEL},
+        {"EFT_NOSTRUCT_ALLOC", EFT_NOSTRUCT_ALLOC},
+        {"EFT_STAT", EFT_STAT},
+        {"EFT_STAT2", EFT_STAT2},
+        {"EFT_L_A0", EFT_L_A0},
+        {"EFT_L_A1", EFT_L_A1},
+        {"EFT_L_A2", EFT_L_A2},
+        {"EFT_L_A8", EFT_L_A8},
+        {"EFT_L_A0__A0R_A1", EFT_L_A0__A0R_A1},
+        {"EFT_L_A0__A0R_A1R", EFT_L_A0__A0R_A1R},
+        {"EFT_L_A1__FunPtr", EFT_L_A1__FunPtr},
+        {"EFT_A1R_A0R", EFT_A1R_A0R},
+        {"EFT_A3R_A1R_NS", EFT_A3R_A1R_NS},
+        {"EFT_A1R_A0", EFT_A1R_A0},
+        {"EFT_A2R_A1", EFT_A2R_A1},
+        {"EFT_A4R_A1", EFT_A4R_A1},
+        {"EFT_L_A0__A2R_A0", EFT_L_A0__A2R_A0},
+        {"EFT_L_A0__A1_A0", EFT_L_A0__A1_A0},
+        {"EFT_A0R_NEW", EFT_A0R_NEW},
+        {"EFT_A1R_NEW", EFT_A1R_NEW},
+        {"EFT_A2R_NEW", EFT_A2R_NEW},
+        {"EFT_A4R_NEW", EFT_A4R_NEW},
+        {"EFT_A11R_NEW", EFT_A11R_NEW},
+        {"EFT_STD_RB_TREE_INSERT_AND_REBALANCE", EFT_STD_RB_TREE_INSERT_AND_REBALANCE},
+        {"EFT_STD_RB_TREE_INCREMENT", EFT_STD_RB_TREE_INCREMENT},
+        {"EFT_STD_LIST_HOOK", EFT_STD_LIST_HOOK},
+        {"CPP_EFT_A0R_A1R", CPP_EFT_A0R_A1R},
+        {"CPP_EFT_A1R", CPP_EFT_A1R},
+        {"EFT_CXA_BEGIN_CATCH", EFT_CXA_BEGIN_CATCH},
+        {"CPP_EFT_DYNAMIC_CAST", CPP_EFT_DYNAMIC_CAST},
+        {"", EFT_NULL}
+    };
 
-    // Singleton pattern here to enable instance of SVFIR can only be created once.
-    static ExtAPI* extAPI;
+    static ExtAPI *extOp;
+
+    // Store specifications of external functions in ExtAPI.json file
+    static cJSON *root;
 
 public:
+    static ExtAPI *getExtAPI();
 
-    /// Singleton design here to make sure we only have one instance during whole analysis
-    static ExtAPI* getExtAPI()
-    {
-        if (extAPI == nullptr)
-        {
-            extAPI = new ExtAPI();
-        }
-        return extAPI;
-    }
+    static void destory();
 
-    static void destory()
-    {
-        if (extAPI != nullptr)
-        {
-            delete extAPI;
-            extAPI = nullptr;
-        }
-    }
+    // Get the corresponding name in ext_t, e.g. "EXT_ADDR" in {"addr", EXT_ADDR},
+    extf_t get_opName(std::string s);
 
-    //Return the extf_t of (F).
-    extf_t get_type(const SVFFunction* F) const
-    {
-        assert(F);
-        std::string funName = F->getName();
-        if(F->isIntrinsic())
-        {
-            unsigned start = funName.find('.');
-            unsigned end = funName.substr(start + 1).find('.');
-            funName = "llvm." + funName.substr(start + 1, end);
-        }
-        Map<std::string, extf_t>::const_iterator it= info.find(funName);
-        if(it == info.end())
-            return EFT_OTHER;
-        else
-            return it->second;
-    }
+    // Return the extf_t of (F).
+    // Get external function name, e.g "memcpy"
+    std::string get_name(const SVFFunction *F);
 
-    //Does (F) have a static var X (unavailable to us) that its return points to?
-    bool has_static(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t==EFT_STAT || t==EFT_STAT2;
-    }
-    //Assuming hasStatic(F), does (F) have a second static Y where X -> Y?
-    bool has_static2(const SVFFunction* F) const
-    {
-        return get_type(F) == EFT_STAT2;
-    }
-    //Does (F) allocate a new object and return it?
-    bool is_alloc(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t==EFT_ALLOC || t==EFT_NOSTRUCT_ALLOC;
-    }
-    //Does (F) allocate a new object and assign it to one of its arguments?
-    bool is_arg_alloc(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t>=EFT_A0R_NEW && t<=EFT_A11R_NEW;
-    }
-    //Get the position of argument which holds the new object
-    int get_alloc_arg_pos(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        switch(t)
-        {
-        case EFT_A0R_NEW:
-            return 0;
-        case EFT_A1R_NEW:
-            return 1;
-        case EFT_A2R_NEW:
-            return 2;
-        case EFT_A4R_NEW:
-            return 4;
-        case EFT_A11R_NEW:
-            return 11;
-        default:
-            assert(false && "Not an alloc call via argument.");
-            return -1;
-        }
-    }
-    //Does (F) allocate only non-struct objects?
-    bool no_struct_alloc(const SVFFunction* F) const
-    {
-        return get_type(F) == EFT_NOSTRUCT_ALLOC;
-    }
-    //Does (F) not free/release any memory?
-    bool is_dealloc(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t == EFT_FREE;
-    }
-    //Does (F) not do anything with the known pointers?
-    bool is_noop(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t == EFT_NOOP || t == EFT_FREE;
-    }
-    //Does (F) reallocate a new object?
-    bool is_realloc(const SVFFunction* F) const
-    {
-        extf_t t= get_type(F);
-        return t==EFT_REALLOC;
-    }
-    //Should (F) be considered "external" (either not defined in the program
-    //  or a user-defined version of a known alloc or no-op)?
-    bool is_ext(const SVFFunction* F)
-    {
-        assert(F);
-        //Check the cache first; everything below is slower.
-        Map<const SVFFunction*, bool>::iterator i_iec= isext_cache.find(F);
-        if(i_iec != isext_cache.end())
-            return i_iec->second;
-
-        bool res;
-        if(F->isDeclaration() || F->isIntrinsic())
-        {
-            res= 1;
-        }
-        else
-        {
-            extf_t t= get_type(F);
-            res= t==EFT_ALLOC || t==EFT_REALLOC || t==EFT_NOSTRUCT_ALLOC
-                 || t==EFT_NOOP || t==EFT_FREE;
-        }
-        isext_cache[F]= res;
-        return res;
-    }
-};
+    // Get arguments of the operation, e.g. ["A1R", "A0", "A2"]
+    std::vector<std::string> get_opArgs(const cJSON *value);
+
+    // Get specifications of external functions in ExtAPI.json file
+    cJSON *get_FunJson(const std::string funName);
+
+    // Get property of the operation, e.g. "EFT_A1R_A0R"
+    extType get_type(const SVF::SVFFunction *callee);
+
+    // Does (F) have a static var X (unavailable to us) that its return points to?
+    bool has_static(const SVFFunction *F);
+
+    // Assuming hasStatic(F), does (F) have a second static Y where X -> Y?
+    bool has_static2(const SVFFunction *F);
 
+    // Does (F) allocate a new object and return it?
+    bool is_alloc(const SVFFunction *F);
+
+    // Does (F) allocate a new object and assign it to one of its arguments?
+    bool is_arg_alloc(const SVFFunction *F);
+
+    // Get the position of argument which holds the new object
+    s32_t get_alloc_arg_pos(const SVFFunction *F);
+
+    // Does (F) allocate only non-struct objects?
+    bool no_struct_alloc(const SVFFunction *F);
+
+    // Does (F) not free/release any memory?
+    bool is_dealloc(const SVFFunction *F);
+
+    // Does (F) not do anything with the known pointers?
+    bool is_noop(const SVFFunction *F);
+
+    // Does (F) reallocate a new object?
+    bool is_realloc(const SVFFunction *F);
+
+    // Should (F) be considered "external" (either not defined in the program
+    //   or a user-defined version of a known alloc or no-op)?
+    bool is_ext(const SVFFunction *F);
+};
 } // End namespace SVF
 
-#endif
+#endif

package/SVF-osx/include/Util/SVFUtil.h

@@ -405,12 +405,6 @@ inline bool isStaticExtFun(const SVFFunction* fun)
     return fun && ExtAPI::getExtAPI()->has_static(fun);
 }
 
-/// Return external call type
-inline ExtAPI::extf_t extCallTy(const SVFFunction* fun)
-{
-    return ExtAPI::getExtAPI()->get_type(fun);
-}
-
 /// Program entry function e.g. main
 //@{
 /// Return true if this is a program entry function (e.g. main)

package/SVF-osx/include/Util/SymState.h

@@ -0,0 +1,118 @@
+//===- SymState.h -- Symbolic State----------------------------//
+//
+//                     SVF: Static Value-Flow Analysis
+//
+// Copyright (C) <2013-2017>  <Yulei Sui>
+//
+
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+
+// You should have received a copy of the GNU General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+//===----------------------------------------------------------------------===//
+
+/*
+ * SymState.h
+ *
+ *  Created on: 2022/6/21
+ *      Author: Xiao Cheng
+ */
+
+#ifndef SVF_SYMSTATE_H
+#define SVF_SYMSTATE_H
+
+#include "ExeState.h"
+
+namespace SVF
+{
+class SymState
+{
+public:
+    typedef std::string AbstractState;
+
+    SymState(const ExeState &_es, const AbstractState &_as) : exeState(_es), absState(_as)
+    {
+
+    }
+
+    virtual ~SymState()
+    {
+
+    }
+
+    SymState(const SymState &symState) : absState(symState.getAbstractState()),
+        exeState(symState.getExecutionState())
+    {
+    }
+
+
+    const AbstractState& getAbstractState() const
+    {
+        return absState;
+    }
+
+    const ExeState& getExecutionState() const
+    {
+        return exeState;
+    }
+
+    SymState &operator=(const SymState &rhs)
+    {
+        if (*this != rhs)
+        {
+            exeState = rhs.getExecutionState();
+            absState = rhs.getAbstractState();
+        }
+        return *this;
+    }
+
+    /// Overloading Operator==
+    inline bool operator==(const SymState &rhs) const
+    {
+        return absState == rhs.getAbstractState() && exeState = rhs.getExecutionState();
+    }
+
+    /// Overloading Operator!=
+    inline bool operator!=(const SymState &rhs) const
+    {
+        return !(*this == rhs);
+    }
+
+    /// Overloading Operator==
+    inline bool operator<(const SymState &rhs) const
+    {
+        if (absState != rhs.getAbstractState())
+            return absState < rhs.getAbstractState();
+        if (exeState != rhs.getExecutionState())
+            return exeState < rhs.getExecutionState();
+        return false;
+    }
+
+private:
+    ExeState exeState;
+    AbstractState absState;
+};
+}
+
+template<>
+struct std::hash<SVF::SymState>
+{
+    size_t operator()(const SVF::SymState &symState) const
+    {
+
+        SVF::Hash<std::pair<SVF::AbstractState, SVF::ExeState>> pairH;
+
+        return pairH(make_pair(symState.getAbstractState(), symState.getExecutionState()));
+    }
+};
+
+#endif //SVF_SYMSTATE_H

package/SVF-osx/include/Util/cJSON.h

@@ -0,0 +1,300 @@
+/*
+  Copyright (c) 2009-2017 Dave Gamble and cJSON contributors
+
+  Permission is hereby granted, free of charge, to any person obtaining a copy
+  of this software and associated documentation files (the "Software"), to deal
+  in the Software without restriction, including without limitation the rights
+  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+  copies of the Software, and to permit persons to whom the Software is
+  furnished to do so, subject to the following conditions:
+
+  The above copyright notice and this permission notice shall be included in
+  all copies or substantial portions of the Software.
+
+  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+  THE SOFTWARE.
+*/
+
+#ifndef cJSON__h
+#define cJSON__h
+
+#ifdef __cplusplus
+extern "C"
+{
+#endif
+
+#if !defined(__WINDOWS__) && (defined(WIN32) || defined(WIN64) || defined(_MSC_VER) || defined(_WIN32))
+#define __WINDOWS__
+#endif
+
+#ifdef __WINDOWS__
+
+/* When compiling for windows, we specify a specific calling convention to avoid issues where we are being called from a project with a different default calling convention.  For windows you have 3 define options:
+
+CJSON_HIDE_SYMBOLS - Define this in the case where you don't want to ever dllexport symbols
+CJSON_EXPORT_SYMBOLS - Define this on library build when you want to dllexport symbols (default)
+CJSON_IMPORT_SYMBOLS - Define this if you want to dllimport symbol
+
+For *nix builds that support visibility attribute, you can define similar behavior by
+
+setting default visibility to hidden by adding
+-fvisibility=hidden (for gcc)
+or
+-xldscope=hidden (for sun cc)
+to CFLAGS
+
+then using the CJSON_API_VISIBILITY flag to "export" the same symbols the way CJSON_EXPORT_SYMBOLS does
+
+*/
+
+#define CJSON_CDECL __cdecl
+#define CJSON_STDCALL __stdcall
+
+/* export symbols by default, this is necessary for copy pasting the C and header file */
+#if !defined(CJSON_HIDE_SYMBOLS) && !defined(CJSON_IMPORT_SYMBOLS) && !defined(CJSON_EXPORT_SYMBOLS)
+#define CJSON_EXPORT_SYMBOLS
+#endif
+
+#if defined(CJSON_HIDE_SYMBOLS)
+#define CJSON_PUBLIC(type)   type CJSON_STDCALL
+#elif defined(CJSON_EXPORT_SYMBOLS)
+#define CJSON_PUBLIC(type)   __declspec(dllexport) type CJSON_STDCALL
+#elif defined(CJSON_IMPORT_SYMBOLS)
+#define CJSON_PUBLIC(type)   __declspec(dllimport) type CJSON_STDCALL
+#endif
+#else /* !__WINDOWS__ */
+#define CJSON_CDECL
+#define CJSON_STDCALL
+
+#if (defined(__GNUC__) || defined(__SUNPRO_CC) || defined (__SUNPRO_C)) && defined(CJSON_API_VISIBILITY)
+#define CJSON_PUBLIC(type)   __attribute__((visibility("default"))) type
+#else
+#define CJSON_PUBLIC(type) type
+#endif
+#endif
+
+/* project version */
+#define CJSON_VERSION_MAJOR 1
+#define CJSON_VERSION_MINOR 7
+#define CJSON_VERSION_PATCH 15
+
+#include <stddef.h>
+
+/* cJSON Types: */
+#define cJSON_Invalid (0)
+#define cJSON_False  (1 << 0)
+#define cJSON_True   (1 << 1)
+#define cJSON_NULL   (1 << 2)
+#define cJSON_Number (1 << 3)
+#define cJSON_String (1 << 4)
+#define cJSON_Array  (1 << 5)
+#define cJSON_Object (1 << 6)
+#define cJSON_Raw    (1 << 7) /* raw json */
+
+#define cJSON_IsReference 256
+#define cJSON_StringIsConst 512
+
+/* The cJSON structure: */
+typedef struct cJSON
+{
+    /* next/prev allow you to walk array/object chains. Alternatively, use GetArraySize/GetArrayItem/GetObjectItem */
+    struct cJSON *next;
+    struct cJSON *prev;
+    /* An array or object item will have a child pointer pointing to a chain of the items in the array/object. */
+    struct cJSON *child;
+
+    /* The type of the item, as above. */
+    int type;
+
+    /* The item's string, if type==cJSON_String  and type == cJSON_Raw */
+    char *valuestring;
+    /* writing to valueint is DEPRECATED, use cJSON_SetNumberValue instead */
+    int valueint;
+    /* The item's number, if type==cJSON_Number */
+    double valuedouble;
+
+    /* The item's name string, if this item is the child of, or is in the list of subitems of an object. */
+    char *string;
+} cJSON;
+
+typedef struct cJSON_Hooks
+{
+    /* malloc/free are CDECL on Windows regardless of the default calling convention of the compiler, so ensure the hooks allow passing those functions directly. */
+    void *(CJSON_CDECL *malloc_fn)(size_t sz);
+    void (CJSON_CDECL *free_fn)(void *ptr);
+} cJSON_Hooks;
+
+typedef int cJSON_bool;
+
+/* Limits how deeply nested arrays/objects can be before cJSON rejects to parse them.
+ * This is to prevent stack overflows. */
+#ifndef CJSON_NESTING_LIMIT
+#define CJSON_NESTING_LIMIT 1000
+#endif
+
+/* returns the version of cJSON as a string */
+CJSON_PUBLIC(const char*) cJSON_Version(void);
+
+/* Supply malloc, realloc and free functions to cJSON */
+CJSON_PUBLIC(void) cJSON_InitHooks(cJSON_Hooks* hooks);
+
+/* Memory Management: the caller is always responsible to free the results from all variants of cJSON_Parse (with cJSON_Delete) and cJSON_Print (with stdlib free, cJSON_Hooks.free_fn, or cJSON_free as appropriate). The exception is cJSON_PrintPreallocated, where the caller has full responsibility of the buffer. */
+/* Supply a block of JSON, and this returns a cJSON object you can interrogate. */
+CJSON_PUBLIC(cJSON *) cJSON_Parse(const char *value);
+CJSON_PUBLIC(cJSON *) cJSON_ParseWithLength(const char *value, size_t buffer_length);
+/* ParseWithOpts allows you to require (and check) that the JSON is null terminated, and to retrieve the pointer to the final byte parsed. */
+/* If you supply a ptr in return_parse_end and parsing fails, then return_parse_end will contain a pointer to the error so will match cJSON_GetErrorPtr(). */
+CJSON_PUBLIC(cJSON *) cJSON_ParseWithOpts(const char *value, const char **return_parse_end, cJSON_bool require_null_terminated);
+CJSON_PUBLIC(cJSON *) cJSON_ParseWithLengthOpts(const char *value, size_t buffer_length, const char **return_parse_end, cJSON_bool require_null_terminated);
+
+/* Render a cJSON entity to text for transfer/storage. */
+CJSON_PUBLIC(char *) cJSON_Print(const cJSON *item);
+/* Render a cJSON entity to text for transfer/storage without any formatting. */
+CJSON_PUBLIC(char *) cJSON_PrintUnformatted(const cJSON *item);
+/* Render a cJSON entity to text using a buffered strategy. prebuffer is a guess at the final size. guessing well reduces reallocation. fmt=0 gives unformatted, =1 gives formatted */
+CJSON_PUBLIC(char *) cJSON_PrintBuffered(const cJSON *item, int prebuffer, cJSON_bool fmt);
+/* Render a cJSON entity to text using a buffer already allocated in memory with given length. Returns 1 on success and 0 on failure. */
+/* NOTE: cJSON is not always 100% accurate in estimating how much memory it will use, so to be safe allocate 5 bytes more than you actually need */
+CJSON_PUBLIC(cJSON_bool) cJSON_PrintPreallocated(cJSON *item, char *buffer, const int length, const cJSON_bool format);
+/* Delete a cJSON entity and all subentities. */
+CJSON_PUBLIC(void) cJSON_Delete(cJSON *item);
+
+/* Returns the number of items in an array (or object). */
+CJSON_PUBLIC(int) cJSON_GetArraySize(const cJSON *array);
+/* Retrieve item number "index" from array "array". Returns NULL if unsuccessful. */
+CJSON_PUBLIC(cJSON *) cJSON_GetArrayItem(const cJSON *array, int index);
+/* Get item "string" from object. Case insensitive. */
+CJSON_PUBLIC(cJSON *) cJSON_GetObjectItem(const cJSON * const object, const char * const string);
+CJSON_PUBLIC(cJSON *) cJSON_GetObjectItemCaseSensitive(const cJSON * const object, const char * const string);
+CJSON_PUBLIC(cJSON_bool) cJSON_HasObjectItem(const cJSON *object, const char *string);
+/* For analysing failed parses. This returns a pointer to the parse error. You'll probably need to look a few chars back to make sense of it. Defined when cJSON_Parse() returns 0. 0 when cJSON_Parse() succeeds. */
+CJSON_PUBLIC(const char *) cJSON_GetErrorPtr(void);
+
+/* Check item type and return its value */
+CJSON_PUBLIC(char *) cJSON_GetStringValue(const cJSON * const item);
+CJSON_PUBLIC(double) cJSON_GetNumberValue(const cJSON * const item);
+
+/* These functions check the type of an item */
+CJSON_PUBLIC(cJSON_bool) cJSON_IsInvalid(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsFalse(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsTrue(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsBool(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsNull(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsNumber(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsString(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsArray(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsObject(const cJSON * const item);
+CJSON_PUBLIC(cJSON_bool) cJSON_IsRaw(const cJSON * const item);
+
+/* These calls create a cJSON item of the appropriate type. */
+CJSON_PUBLIC(cJSON *) cJSON_CreateNull(void);
+CJSON_PUBLIC(cJSON *) cJSON_CreateTrue(void);
+CJSON_PUBLIC(cJSON *) cJSON_CreateFalse(void);
+CJSON_PUBLIC(cJSON *) cJSON_CreateBool(cJSON_bool boolean);
+CJSON_PUBLIC(cJSON *) cJSON_CreateNumber(double num);
+CJSON_PUBLIC(cJSON *) cJSON_CreateString(const char *string);
+/* raw json */
+CJSON_PUBLIC(cJSON *) cJSON_CreateRaw(const char *raw);
+CJSON_PUBLIC(cJSON *) cJSON_CreateArray(void);
+CJSON_PUBLIC(cJSON *) cJSON_CreateObject(void);
+
+/* Create a string where valuestring references a string so
+ * it will not be freed by cJSON_Delete */
+CJSON_PUBLIC(cJSON *) cJSON_CreateStringReference(const char *string);
+/* Create an object/array that only references it's elements so
+ * they will not be freed by cJSON_Delete */
+CJSON_PUBLIC(cJSON *) cJSON_CreateObjectReference(const cJSON *child);
+CJSON_PUBLIC(cJSON *) cJSON_CreateArrayReference(const cJSON *child);
+
+/* These utilities create an Array of count items.
+ * The parameter count cannot be greater than the number of elements in the number array, otherwise array access will be out of bounds.*/
+CJSON_PUBLIC(cJSON *) cJSON_CreateIntArray(const int *numbers, int count);
+CJSON_PUBLIC(cJSON *) cJSON_CreateFloatArray(const float *numbers, int count);
+CJSON_PUBLIC(cJSON *) cJSON_CreateDoubleArray(const double *numbers, int count);
+CJSON_PUBLIC(cJSON *) cJSON_CreateStringArray(const char *const *strings, int count);
+
+/* Append item to the specified array/object. */
+CJSON_PUBLIC(cJSON_bool) cJSON_AddItemToArray(cJSON *array, cJSON *item);
+CJSON_PUBLIC(cJSON_bool) cJSON_AddItemToObject(cJSON *object, const char *string, cJSON *item);
+/* Use this when string is definitely const (i.e. a literal, or as good as), and will definitely survive the cJSON object.
+ * WARNING: When this function was used, make sure to always check that (item->type & cJSON_StringIsConst) is zero before
+ * writing to `item->string` */
+CJSON_PUBLIC(cJSON_bool) cJSON_AddItemToObjectCS(cJSON *object, const char *string, cJSON *item);
+/* Append reference to item to the specified array/object. Use this when you want to add an existing cJSON to a new cJSON, but don't want to corrupt your existing cJSON. */
+CJSON_PUBLIC(cJSON_bool) cJSON_AddItemReferenceToArray(cJSON *array, cJSON *item);
+CJSON_PUBLIC(cJSON_bool) cJSON_AddItemReferenceToObject(cJSON *object, const char *string, cJSON *item);
+
+/* Remove/Detach items from Arrays/Objects. */
+CJSON_PUBLIC(cJSON *) cJSON_DetachItemViaPointer(cJSON *parent, cJSON * const item);
+CJSON_PUBLIC(cJSON *) cJSON_DetachItemFromArray(cJSON *array, int which);
+CJSON_PUBLIC(void) cJSON_DeleteItemFromArray(cJSON *array, int which);
+CJSON_PUBLIC(cJSON *) cJSON_DetachItemFromObject(cJSON *object, const char *string);
+CJSON_PUBLIC(cJSON *) cJSON_DetachItemFromObjectCaseSensitive(cJSON *object, const char *string);
+CJSON_PUBLIC(void) cJSON_DeleteItemFromObject(cJSON *object, const char *string);
+CJSON_PUBLIC(void) cJSON_DeleteItemFromObjectCaseSensitive(cJSON *object, const char *string);
+
+/* Update array items. */
+CJSON_PUBLIC(cJSON_bool) cJSON_InsertItemInArray(cJSON *array, int which, cJSON *newitem); /* Shifts pre-existing items to the right. */
+CJSON_PUBLIC(cJSON_bool) cJSON_ReplaceItemViaPointer(cJSON * const parent, cJSON * const item, cJSON * replacement);
+CJSON_PUBLIC(cJSON_bool) cJSON_ReplaceItemInArray(cJSON *array, int which, cJSON *newitem);
+CJSON_PUBLIC(cJSON_bool) cJSON_ReplaceItemInObject(cJSON *object,const char *string,cJSON *newitem);
+CJSON_PUBLIC(cJSON_bool) cJSON_ReplaceItemInObjectCaseSensitive(cJSON *object,const char *string,cJSON *newitem);
+
+/* Duplicate a cJSON item */
+CJSON_PUBLIC(cJSON *) cJSON_Duplicate(const cJSON *item, cJSON_bool recurse);
+/* Duplicate will create a new, identical cJSON item to the one you pass, in new memory that will
+ * need to be released. With recurse!=0, it will duplicate any children connected to the item.
+ * The item->next and ->prev pointers are always zero on return from Duplicate. */
+/* Recursively compare two cJSON items for equality. If either a or b is NULL or invalid, they will be considered unequal.
+ * case_sensitive determines if object keys are treated case sensitive (1) or case insensitive (0) */
+CJSON_PUBLIC(cJSON_bool) cJSON_Compare(const cJSON * const a, const cJSON * const b, const cJSON_bool case_sensitive);
+
+/* Minify a strings, remove blank characters(such as ' ', '\t', '\r', '\n') from strings.
+ * The input pointer json cannot point to a read-only address area, such as a string constant,
+ * but should point to a readable and writable address area. */
+CJSON_PUBLIC(void) cJSON_Minify(char *json);
+
+/* Helper functions for creating and adding items to an object at the same time.
+ * They return the added item or NULL on failure. */
+CJSON_PUBLIC(cJSON*) cJSON_AddNullToObject(cJSON * const object, const char * const name);
+CJSON_PUBLIC(cJSON*) cJSON_AddTrueToObject(cJSON * const object, const char * const name);
+CJSON_PUBLIC(cJSON*) cJSON_AddFalseToObject(cJSON * const object, const char * const name);
+CJSON_PUBLIC(cJSON*) cJSON_AddBoolToObject(cJSON * const object, const char * const name, const cJSON_bool boolean);
+CJSON_PUBLIC(cJSON*) cJSON_AddNumberToObject(cJSON * const object, const char * const name, const double number);
+CJSON_PUBLIC(cJSON*) cJSON_AddStringToObject(cJSON * const object, const char * const name, const char * const string);
+CJSON_PUBLIC(cJSON*) cJSON_AddRawToObject(cJSON * const object, const char * const name, const char * const raw);
+CJSON_PUBLIC(cJSON*) cJSON_AddObjectToObject(cJSON * const object, const char * const name);
+CJSON_PUBLIC(cJSON*) cJSON_AddArrayToObject(cJSON * const object, const char * const name);
+
+/* When assigning an integer value, it needs to be propagated to valuedouble too. */
+#define cJSON_SetIntValue(object, number) ((object) ? (object)->valueint = (object)->valuedouble = (number) : (number))
+/* helper for the cJSON_SetNumberValue macro */
+CJSON_PUBLIC(double) cJSON_SetNumberHelper(cJSON *object, double number);
+#define cJSON_SetNumberValue(object, number) ((object != NULL) ? cJSON_SetNumberHelper(object, (double)number) : (number))
+/* Change the valuestring of a cJSON_String object, only takes effect when type of object is cJSON_String */
+CJSON_PUBLIC(char*) cJSON_SetValuestring(cJSON *object, const char *valuestring);
+
+/* If the object is not a boolean type this does nothing and returns cJSON_Invalid else it returns the new type*/
+#define cJSON_SetBoolValue(object, boolValue) ( \
+    (object != NULL && ((object)->type & (cJSON_False|cJSON_True))) ? \
+    (object)->type=((object)->type &(~(cJSON_False|cJSON_True)))|((boolValue)?cJSON_True:cJSON_False) : \
+    cJSON_Invalid\
+)
+
+/* Macro for iterating over an array or object */
+#define cJSON_ArrayForEach(element, array) for(element = (array != NULL) ? (array)->child : NULL; element != NULL; element = element->next)
+
+/* malloc/free objects using the malloc/free functions that have been set with cJSON_InitHooks */
+CJSON_PUBLIC(void *) cJSON_malloc(size_t size);
+CJSON_PUBLIC(void) cJSON_free(void *object);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif

package/SVF-osx/include/Util/config.h

@@ -0,0 +1,6 @@
+#ifndef CONFIG_H_IN
+#define CONFIG_H_IN
+
+#define PROJECT_PATH "/Users/runner/work/SVF/SVF"
+
+#endif

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svf-lib",
-  "version": "1.0.1049",
+  "version": "1.0.1052",
   "description": "SVF's npm support",
   "main": "index.js",
   "scripts": {