svf-tools 1.0.1087 → 1.0.1088

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svf-tools",
-  "version": "1.0.1087",
+  "version": "1.0.1088",
   "description": "* <b>[TypeClone](https://github.com/SVF-tools/SVF/wiki/TypeClone) published in our [ECOOP paper](https://yuleisui.github.io/publications/ecoop20.pdf) is now available in SVF </b> * <b>SVF now uses a single script for its build. Just type [`source ./build.sh`](https://github.com/SVF-tools/SVF/blob/master/build.sh) in your terminal, that's it!</b> * <b>SVF now supports LLVM-10.0.0! </b> * <b>We thank [bsauce](https://github.com/bsauce) for writing a user manual of SVF ([link1](https://www.jianshu.com/p/068a08ec749c) and [link2](https://www.jianshu.com/p/777c30d4240e)) in Chinese </b> * <b>SVF now supports LLVM-9.0.0 (Thank [Byoungyoung Lee](https://github.com/SVF-tools/SVF/issues/142) for his help!). </b> * <b>SVF now supports a set of [field-sensitive pointer analyses](https://yuleisui.github.io/publications/sas2019a.pdf). </b> * <b>[Use SVF as an external lib](https://github.com/SVF-tools/SVF/wiki/Using-SVF-as-a-lib-in-your-own-tool) for your own project (Contributed by [Hongxu Chen](https://github.com/HongxuChen)). </b> * <b>SVF now supports LLVM-7.0.0. </b> * <b>SVF now supports Docker. [Try SVF in Docker](https://github.com/SVF-tools/SVF/wiki/Try-SVF-in-Docker)! </b> * <b>SVF now supports [LLVM-6.0.0](https://github.com/svf-tools/SVF/pull/38) (Contributed by [Jack Anthony](https://github.com/jackanth)). </b> * <b>SVF now supports [LLVM-4.0.0](https://github.com/svf-tools/SVF/pull/23) (Contributed by Jared Carlson. Thank [Jared](https://github.com/jcarlson23) and [Will](https://github.com/dtzWill) for their in-depth [discussions](https://github.com/svf-tools/SVF/pull/18) about updating SVF!) </b> * <b>SVF now supports analysis for C++ programs.</b> <br />",
   "main": "index.js",
   "scripts": {

package/svf/lib/AE/Svfexe/AEDetector.cpp

@@ -133,15 +133,14 @@ void BufOverflowDetector::handleStubFunctions(const SVF::CallICFGNode* callNode)
         bool isSafe = canSafelyAccessMemory(as, arg0Val, val);
         if (isSafe)
         {
-            std::cout << "safe buffer access success: " << callNode->toString()
-                      << std::endl;
+            SVFUtil::outs() << SVFUtil::sucMsg("success: expected safe buffer access at SAFE_BUFACCESS")
+                            << " — " << callNode->toString() << "\n";
             return;
         }
         else
         {
-            std::string err_msg = "this SAFE_BUFACCESS should be a safe access but detected buffer overflow. Pos: ";
-            err_msg += callNode->getSourceLoc();
-            std::cerr << err_msg << std::endl;
+            SVFUtil::outs() << SVFUtil::errMsg("failure: unexpected buffer overflow at SAFE_BUFACCESS")
+                            << " — Position: " << callNode->getSourceLoc() << "\n";
             assert(false);
         }
     }
@@ -162,14 +161,14 @@ void BufOverflowDetector::handleStubFunctions(const SVF::CallICFGNode* callNode)
         bool isSafe = canSafelyAccessMemory(as, arg0Val, val);
         if (!isSafe)
         {
-            std::cout << "detect buffer overflow success: " << callNode->toString() << std::endl;
+            SVFUtil::outs() << SVFUtil::sucMsg("success: expected buffer overflow at UNSAFE_BUFACCESS")
+                            << " — " << callNode->toString() << "\n";
             return;
         }
         else
         {
-            std::string err_msg = "this UNSAFE_BUFACCESS should be a buffer overflow but not detected. Pos: ";
-            err_msg += callNode->getSourceLoc();
-            std::cerr << err_msg << std::endl;
+            SVFUtil::outs() << SVFUtil::errMsg("failure: buffer overflow expected at UNSAFE_BUFACCESS, but none detected")
+                            << " — Position: " << callNode->getSourceLoc() << "\n";
             assert(false);
         }
     }
@@ -568,14 +567,14 @@ void NullptrDerefDetector::handleStubFunctions(const CallICFGNode* callNode)
         bool isSafe = canSafelyDerefPtr(as, arg0Val) && arg0Val->getId() != 0;
         if (!isSafe)
         {
-            std::cout << "detect null pointer deference success: " << callNode->toString() << std::endl;
+            SVFUtil::outs() << SVFUtil::sucMsg("success: expected null dereference at UNSAFE_LOAD")
+                            << " — " << callNode->toString() << "\n";
             return;
         }
         else
         {
-            std::string err_msg = "this UNSAFE_LOAD should be a null pointer dereference but not detected. Pos: ";
-            err_msg += callNode->getSourceLoc();
-            std::cerr << err_msg << std::endl;
+            SVFUtil::outs() << SVFUtil::errMsg("failure: null dereference expected at UNSAFE_LOAD, but none detected")
+                            << " — Position: " << callNode->getSourceLoc() << "\n";
             assert(false);
         }
     }
@@ -590,14 +589,14 @@ void NullptrDerefDetector::handleStubFunctions(const CallICFGNode* callNode)
         bool isSafe = canSafelyDerefPtr(as, arg0Val) && arg0Val->getId() != 0;
         if (isSafe)
         {
-            std::cout << "safe load pointer success: " << callNode->toString() << std::endl;
+            SVFUtil::outs() << SVFUtil::sucMsg("success: expected safe dereference at SAFE_LOAD")
+                            << " — " << callNode->toString() << "\n";
             return;
         }
         else
         {
-            std::string err_msg = "this SAFE_LOAD should be a safe but a null pointer dereference detected. Pos: ";
-            err_msg += callNode->getSourceLoc();
-            std::cerr << err_msg << std::endl;
+            SVFUtil::outs() << SVFUtil::errMsg("failure: unexpected null dereference at SAFE_LOAD")
+                            << " — Position: " << callNode->getSourceLoc() << "\n";
             assert(false);
         }
     }

package/svf/lib/AE/Svfexe/AbsExtAPI.cpp

@@ -350,7 +350,8 @@ void AbsExtAPI::initExtFunMap()
         {
             if (AbstractState::isInvalidMem(addr))
             {
-                // double free here.
+                // Detected a double free — the address has already been freed.
+                // No action is taken at this point.
             }
             else
             {