svf-lib 1.0.848 → 1.0.852

package/SVF-linux/include/MemoryModel/SVFIR.h

@@ -292,20 +292,7 @@ public:
     //@}
 
     /// Due to constaint expression, curInst is used to distinguish different instructions (e.g., memorycpy) when creating GepValVar.
-    inline NodeID getGepValVar(const Value* curInst, NodeID base, const LocationSet& ls) const
-    {
-        GepValueVarMap::const_iterator iter = GepValObjMap.find(curInst);
-        if(iter==GepValObjMap.end()){
-            return UINT_MAX;
-        }
-        else{
-            NodeLocationSetMap::const_iterator lit = iter->second.find(std::make_pair(base, ls));
-            if(lit==iter->second.end())
-                return UINT_MAX;
-            else
-                return lit->second;
-        }
-    }
+    NodeID getGepValVar(const Value* curInst, NodeID base, const LocationSet& ls) const;
 
     /// Add/get indirect callsites
     //@{
@@ -411,27 +398,8 @@ public:
         assert(obj && "not an object node?");
         return SymbolTableInfo::isConstantObj(id) || obj->isConstDataOrConstGlobal();
     }
-    inline bool isNonPointerObj(NodeID id) const
-    {
-        SVFVar* node = getGNode(id);
-        if (FIObjVar* fiNode = SVFUtil::dyn_cast<FIObjVar>(node))
-        {
-            return (fiNode->getMemObj()->hasPtrObj() == false);
-        }
-        else if (GepObjVar* gepNode = SVFUtil::dyn_cast<GepObjVar>(node))
-        {
-            return (gepNode->getMemObj()->isNonPtrFieldObj(gepNode->getLocationSet()));
-        }
-        else if (SVFUtil::isa<DummyObjVar>(node))
-        {
-            return false;
-        }
-        else
-        {
-            assert(false && "expecting a object node");
-            return false;
-        }
-    }
+    /// Whether an object can point to any other object or any of its fields is a pointer type.
+    bool isNonPointerObj(NodeID id) const;
     //@}
 
     /// Base and Offset methods for Value and Object node
@@ -462,7 +430,7 @@ public:
     {
         return addDummyValNode(NodeIDAllocator::get()->allocateValueId());
     }
-    inline NodeID addDummyObjNode(const Type* type = nullptr)
+    inline NodeID addDummyObjNode(const Type* type)
     {
         return addDummyObjNode(NodeIDAllocator::get()->allocateObjectId(), type);
     }
@@ -553,7 +521,7 @@ private:
     }
 
     /// Add a temp field value node, this method can only invoked by getGepValVar
-    NodeID addGepValNode(const Value* curInst,const Value* val, const LocationSet& ls, NodeID i, const Type *type, u32_t fieldidx);
+    NodeID addGepValNode(const Value* curInst,const Value* val, const LocationSet& ls, NodeID i, const Type *type);
     /// Add a field obj node, this method can only invoked by getGepObjVar
     NodeID addGepObjNode(const MemObj* obj, const LocationSet& ls);
     /// Add a field-insensitive node, this method can only invoked by getFIGepObjNode

package/SVF-linux/include/MemoryModel/SVFVariables.h

@@ -81,8 +81,7 @@ protected:
     const Value* value; ///< value of this SVFIR node
     SVFStmt::KindToSVFStmtMapTy InEdgeKindToSetMap;
     SVFStmt::KindToSVFStmtMapTy OutEdgeKindToSetMap;
-    bool isTLPointer;	/// top-level pointer
-    bool isATPointer;	/// address-taken pointer
+    bool isPtr;	/// whether it is a pointer (top-level or address-taken)
 
 public:
     /// Constructor
@@ -117,17 +116,7 @@ public:
     /// Whether it is a pointer
     virtual inline bool isPointer() const
     {
-        return isTopLevelPtr() || isAddressTakenPtr();
-    }
-    /// Whether it is a top-level pointer
-    inline bool isTopLevelPtr() const
-    {
-        return isTLPointer;
-    }
-    /// Whether it is an address-taken pointer
-    inline bool isAddressTakenPtr() const
-    {
-        return isATPointer;
+        return isPtr;
     }
     /// Whether it is constant data, i.e., "0", "1.001", "str"
     /// or llvm's metadata, i.e., metadata !4087
@@ -395,7 +384,6 @@ class GepValVar: public ValVar
 private:
     LocationSet ls;	// LocationSet
     const Type *gepValType;
-    u32_t fieldIdx;
 
 public:
     /// Methods for support type inquiry through isa, cast, and dyn_cast:
@@ -419,8 +407,8 @@ public:
     //@}
 
     /// Constructor
-    GepValVar(const Value* val, NodeID i, const LocationSet& l, const Type *ty, u32_t idx) :
-        ValVar(val, i, GepValNode), ls(l), gepValType(ty), fieldIdx(idx)
+    GepValVar(const Value* val, NodeID i, const LocationSet& l, const Type *ty) :
+        ValVar(val, i, GepValNode), ls(l), gepValType(ty)
     {
     }
 
@@ -443,11 +431,6 @@ public:
         return gepValType;
     }
 
-    u32_t getFieldIdx() const
-    {
-        return fieldIdx;
-    }
-
     virtual const std::string toString() const;
 };
 

package/SVF-linux/include/MemoryModel/SymbolTableInfo.h

@@ -354,13 +354,9 @@ public:
 
     ///Get a reference to the components of struct_info.
     /// Number of flattenned elements of an array or struct
-    const u32_t getNumOfFlattenElements(const Type *T);
-    /// Number of flattenned fields of a struct
-    const u32_t getNumOfFlattenFields(const StructType *T);
+    u32_t getNumOfFlattenElements(const Type *T);
     /// Flatterned element idx of an array or struct by considering stride
-    const std::vector<u32_t>& getFlattenedElemIdxVec(const Type *T);
-    /// Flatterned field index information of a struct ignoring any array field
-    const std::vector<u32_t>& getFlattenedFieldIdxVec(const Type *T);
+    u32_t getFlattenedElemIdx(const Type *T, s64_t origId);
 
     const std::vector<FlattenedFieldInfo>& getFlattenedFieldInfoVec(const Type *T);
 
@@ -393,7 +389,7 @@ protected:
     virtual void collectSimpleTypeInfo(const Type* T);
 
     /// Create an objectInfo based on LLVM type (value is null, and type could be null, representing a dummy object)
-    ObjTypeInfo* createObjTypeInfo(const Type *type = nullptr);
+    ObjTypeInfo* createObjTypeInfo(const Type *type);
 
     /// Every type T is mapped to StInfo
     /// which contains size (fsize) , offset(foffset)
@@ -596,7 +592,7 @@ public:
  */
 class ObjTypeInfo
 {
-
+friend class SymbolTableBuilder;
 public:
     typedef enum
     {
@@ -623,30 +619,18 @@ private:
     /// maximum number of field object can be created
     /// minimum number is 0 (field insensitive analysis)
     u32_t maxOffsetLimit;
+
+    void resetTypeForHeapStaticObj(const Type* type);
 public:
 
     /// Constructors
-    ObjTypeInfo(const Value*, const Type* t, u32_t max) :
-        type(t), flags(0), maxOffsetLimit(max)
-    {
-    }
-    /// Constructor
-    ObjTypeInfo(u32_t max, const Type* t) : type(t), flags(0), maxOffsetLimit(max)
-    {
+    ObjTypeInfo(const Type* t, u32_t max);
 
-    }
     /// Destructor
     virtual ~ObjTypeInfo()
     {
-
     }
-
-    /// Analyse types of heap and static objects
-    void analyzeHeapObjType(const Type* type);
-
-    /// Analyse types of heap and static objects
-    void analyzeStaticObjType(const Type* type);
-
+    
     /// Get LLVM type
     inline const Type* getType() const
     {

package/SVF-linux/include/SVF-FE/SVFIRBuilder.h

@@ -109,41 +109,9 @@ public:
         return pag->getVarargNode(func);
     }
     //@}
-
-    /// Handle globals including (global variable and functions)
-    //@{
-    void visitGlobal(SVFModule* svfModule);
-    void InitialGlobal(const GlobalVariable *gvar, Constant *C,
-                       u32_t offset);
-    NodeID getGlobalVarField(const GlobalVariable *gvar, u32_t offset);
-    //@}
-
-    /// Process constant expression
-    void processCE(const Value *val);
-
-    /// Infer field index from byteoffset.
-    u32_t inferFieldIdxFromByteOffset(const llvm::GEPOperator* gepOp, DataLayout *dl, LocationSet& ls, s64_t idx);
-
-    /// Compute offset of a gep instruction or gep constant expression
-    bool computeGepOffset(const User *V, LocationSet& ls);
-
-    /// Get the base type and max offset
-    const Type *getBaseTypeAndFlattenedFields(const Value *V, std::vector<LocationSet> &fields, const Value* sz);
-
-    /// Handle direct call
-    void handleDirectCall(CallSite cs, const SVFFunction *F);
-
-    /// Handle indirect call
-    void handleIndCall(CallSite cs);
-
     /// Update SVFIR given a call graph (creating new CallPE and RetPE for resolved indirect calls)
     void updateCallGraph(PTACallGraph* callgraph);
 
-    /// Handle external call
-    //@{
-    virtual void handleExtCall(CallSite cs, const SVFFunction *F);
-    void addComplexConsForExt(Value *D, Value *S, const Value* sz);
-    //@}
 
     /// Our visit overrides.
     //@{
@@ -238,6 +206,39 @@ public:
     }
     //}@
 
+protected:
+    /// Handle globals including (global variable and functions)
+    //@{
+    void visitGlobal(SVFModule* svfModule);
+    void InitialGlobal(const GlobalVariable *gvar, Constant *C,
+                       u32_t offset);
+    NodeID getGlobalVarField(const GlobalVariable *gvar, u32_t offset);
+    //@}
+
+    /// Process constant expression
+    void processCE(const Value *val);
+
+    /// Infer field index from byteoffset.
+    u32_t inferFieldIdxFromByteOffset(const llvm::GEPOperator* gepOp, DataLayout *dl, LocationSet& ls, s64_t idx);
+
+    /// Compute offset of a gep instruction or gep constant expression
+    bool computeGepOffset(const User *V, LocationSet& ls);
+
+    /// Get the base type and max offset
+    const Type *getBaseTypeAndFlattenedFields(const Value *V, std::vector<LocationSet> &fields, const Value* sz);
+
+    /// Handle direct call
+    void handleDirectCall(CallSite cs, const SVFFunction *F);
+
+    /// Handle indirect call
+    void handleIndCall(CallSite cs);
+
+    /// Handle external call
+    //@{
+    virtual void handleExtCall(CallSite cs, const SVFFunction *F);
+    void addComplexConsForExt(Value *D, Value *S, const Value* sz);
+    //@}
+
     /// Set current basic block in order to keep track of control flow information
     inline void setCurrentLocation(const Value* val, const BasicBlock* bb)
     {
@@ -275,9 +276,7 @@ public:
         return nullPtr;
     }
 
-public:
-
-    NodeID getGepValVar(const Value* val, const LocationSet& ls, const Type *baseType, u32_t fieldidx);
+    NodeID getGepValVar(const Value* val, const LocationSet& ls, const Type *baseType);
 
     void setCurrentBBAndValueForPAGEdge(PAGEdge* edge);
 

package/SVF-linux/include/SVF-FE/SymbolTableBuilder.h

@@ -69,7 +69,7 @@ public:
     /// Handle constant expression
     // @{
     void handleGlobalCE(const GlobalVariable *G);
-    void handleGlobalInitializerCE(const Constant *C, u32_t offset);
+    void handleGlobalInitializerCE(const Constant *C);
     void handleCE(const Value *val);
     // @}
 
@@ -79,7 +79,14 @@ public:
     /// Initialize TypeInfo based on LLVM Value
     void initTypeInfo(ObjTypeInfo* typeinfo, const Value* value);
     /// Analyse types of all flattened fields of this object
-    void analyzeGlobalStackObjType(ObjTypeInfo* typeinfo, const Value* val);
+    void analyzeObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Analyse types of heap and static objects
+    void analyzeHeapObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Analyse types of heap and static objects
+    void analyzeStaticObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Return the bitcast instruction which is val's only use site, otherwise return nullptr
+    const Value* getUniqueUseViaCastInst(const Value* val);
+
     /// Return size of this object based on LLVM value
     u32_t getObjSize(const Value* val);
 };

package/SVF-linux/include/Util/Options.h

@@ -211,6 +211,7 @@ public:
     // SymbolTableInfo.cpp
     static const llvm::cl::opt<bool> LocMemModel;
     static const llvm::cl::opt<bool> ModelConsts;
+    static const llvm::cl::opt<bool> ModelArrays;
     static const llvm::cl::opt<bool> SymTabPrint;
 
     // Conditions.cpp

package/SVF-osx/include/MemoryModel/SVFIR.h

@@ -292,20 +292,7 @@ public:
     //@}
 
     /// Due to constaint expression, curInst is used to distinguish different instructions (e.g., memorycpy) when creating GepValVar.
-    inline NodeID getGepValVar(const Value* curInst, NodeID base, const LocationSet& ls) const
-    {
-        GepValueVarMap::const_iterator iter = GepValObjMap.find(curInst);
-        if(iter==GepValObjMap.end()){
-            return UINT_MAX;
-        }
-        else{
-            NodeLocationSetMap::const_iterator lit = iter->second.find(std::make_pair(base, ls));
-            if(lit==iter->second.end())
-                return UINT_MAX;
-            else
-                return lit->second;
-        }
-    }
+    NodeID getGepValVar(const Value* curInst, NodeID base, const LocationSet& ls) const;
 
     /// Add/get indirect callsites
     //@{
@@ -411,27 +398,8 @@ public:
         assert(obj && "not an object node?");
         return SymbolTableInfo::isConstantObj(id) || obj->isConstDataOrConstGlobal();
     }
-    inline bool isNonPointerObj(NodeID id) const
-    {
-        SVFVar* node = getGNode(id);
-        if (FIObjVar* fiNode = SVFUtil::dyn_cast<FIObjVar>(node))
-        {
-            return (fiNode->getMemObj()->hasPtrObj() == false);
-        }
-        else if (GepObjVar* gepNode = SVFUtil::dyn_cast<GepObjVar>(node))
-        {
-            return (gepNode->getMemObj()->isNonPtrFieldObj(gepNode->getLocationSet()));
-        }
-        else if (SVFUtil::isa<DummyObjVar>(node))
-        {
-            return false;
-        }
-        else
-        {
-            assert(false && "expecting a object node");
-            return false;
-        }
-    }
+    /// Whether an object can point to any other object or any of its fields is a pointer type.
+    bool isNonPointerObj(NodeID id) const;
     //@}
 
     /// Base and Offset methods for Value and Object node
@@ -462,7 +430,7 @@ public:
     {
         return addDummyValNode(NodeIDAllocator::get()->allocateValueId());
     }
-    inline NodeID addDummyObjNode(const Type* type = nullptr)
+    inline NodeID addDummyObjNode(const Type* type)
     {
         return addDummyObjNode(NodeIDAllocator::get()->allocateObjectId(), type);
     }

package/SVF-osx/include/MemoryModel/SVFVariables.h

@@ -81,8 +81,7 @@ protected:
     const Value* value; ///< value of this SVFIR node
     SVFStmt::KindToSVFStmtMapTy InEdgeKindToSetMap;
     SVFStmt::KindToSVFStmtMapTy OutEdgeKindToSetMap;
-    bool isTLPointer;	/// top-level pointer
-    bool isATPointer;	/// address-taken pointer
+    bool isPtr;	/// whether it is a pointer (top-level or address-taken)
 
 public:
     /// Constructor
@@ -117,17 +116,7 @@ public:
     /// Whether it is a pointer
     virtual inline bool isPointer() const
     {
-        return isTopLevelPtr() || isAddressTakenPtr();
-    }
-    /// Whether it is a top-level pointer
-    inline bool isTopLevelPtr() const
-    {
-        return isTLPointer;
-    }
-    /// Whether it is an address-taken pointer
-    inline bool isAddressTakenPtr() const
-    {
-        return isATPointer;
+        return isPtr;
     }
     /// Whether it is constant data, i.e., "0", "1.001", "str"
     /// or llvm's metadata, i.e., metadata !4087

package/SVF-osx/include/MemoryModel/SymbolTableInfo.h

@@ -389,7 +389,7 @@ protected:
     virtual void collectSimpleTypeInfo(const Type* T);
 
     /// Create an objectInfo based on LLVM type (value is null, and type could be null, representing a dummy object)
-    ObjTypeInfo* createObjTypeInfo(const Type *type = nullptr);
+    ObjTypeInfo* createObjTypeInfo(const Type *type);
 
     /// Every type T is mapped to StInfo
     /// which contains size (fsize) , offset(foffset)
@@ -592,7 +592,7 @@ public:
  */
 class ObjTypeInfo
 {
-
+friend class SymbolTableBuilder;
 public:
     typedef enum
     {
@@ -619,30 +619,18 @@ private:
     /// maximum number of field object can be created
     /// minimum number is 0 (field insensitive analysis)
     u32_t maxOffsetLimit;
+
+    void resetTypeForHeapStaticObj(const Type* type);
 public:
 
     /// Constructors
-    ObjTypeInfo(const Value*, const Type* t, u32_t max) :
-        type(t), flags(0), maxOffsetLimit(max)
-    {
-    }
-    /// Constructor
-    ObjTypeInfo(u32_t max, const Type* t) : type(t), flags(0), maxOffsetLimit(max)
-    {
+    ObjTypeInfo(const Type* t, u32_t max);
 
-    }
     /// Destructor
     virtual ~ObjTypeInfo()
     {
-
     }
-
-    /// Analyse types of heap and static objects
-    void analyzeHeapObjType(const Type* type);
-
-    /// Analyse types of heap and static objects
-    void analyzeStaticObjType(const Type* type);
-
+    
     /// Get LLVM type
     inline const Type* getType() const
     {

package/SVF-osx/include/SVF-FE/SymbolTableBuilder.h

@@ -79,7 +79,14 @@ public:
     /// Initialize TypeInfo based on LLVM Value
     void initTypeInfo(ObjTypeInfo* typeinfo, const Value* value);
     /// Analyse types of all flattened fields of this object
-    void analyzeGlobalStackObjType(ObjTypeInfo* typeinfo, const Value* val);
+    void analyzeObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Analyse types of heap and static objects
+    void analyzeHeapObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Analyse types of heap and static objects
+    void analyzeStaticObjType(ObjTypeInfo* typeinfo, const Value* val);
+    /// Return the bitcast instruction which is val's only use site, otherwise return nullptr
+    const Value* getUniqueUseViaCastInst(const Value* val);
+
     /// Return size of this object based on LLVM value
     u32_t getObjSize(const Value* val);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svf-lib",
-  "version": "1.0.848",
+  "version": "1.0.852",
   "description": "SVF's npm support",
   "main": "index.js",
   "scripts": {