svf-tools 1.0.1205 → 1.0.1207

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svf-tools",
-  "version": "1.0.1205",
+  "version": "1.0.1207",
   "description": "* <b>[TypeClone](https://github.com/SVF-tools/SVF/wiki/TypeClone) published in our [ECOOP paper](https://yuleisui.github.io/publications/ecoop20.pdf) is now available in SVF </b> * <b>SVF now uses a single script for its build. Just type [`source ./build.sh`](https://github.com/SVF-tools/SVF/blob/master/build.sh) in your terminal, that's it!</b> * <b>SVF now supports LLVM-10.0.0! </b> * <b>We thank [bsauce](https://github.com/bsauce) for writing a user manual of SVF ([link1](https://www.jianshu.com/p/068a08ec749c) and [link2](https://www.jianshu.com/p/777c30d4240e)) in Chinese </b> * <b>SVF now supports LLVM-9.0.0 (Thank [Byoungyoung Lee](https://github.com/SVF-tools/SVF/issues/142) for his help!). </b> * <b>SVF now supports a set of [field-sensitive pointer analyses](https://yuleisui.github.io/publications/sas2019a.pdf). </b> * <b>[Use SVF as an external lib](https://github.com/SVF-tools/SVF/wiki/Using-SVF-as-a-lib-in-your-own-tool) for your own project (Contributed by [Hongxu Chen](https://github.com/HongxuChen)). </b> * <b>SVF now supports LLVM-7.0.0. </b> * <b>SVF now supports Docker. [Try SVF in Docker](https://github.com/SVF-tools/SVF/wiki/Try-SVF-in-Docker)! </b> * <b>SVF now supports [LLVM-6.0.0](https://github.com/svf-tools/SVF/pull/38) (Contributed by [Jack Anthony](https://github.com/jackanth)). </b> * <b>SVF now supports [LLVM-4.0.0](https://github.com/svf-tools/SVF/pull/23) (Contributed by Jared Carlson. Thank [Jared](https://github.com/jcarlson23) and [Will](https://github.com/dtzWill) for their in-depth [discussions](https://github.com/svf-tools/SVF/pull/18) about updating SVF!) </b> * <b>SVF now supports analysis for C++ programs.</b> <br />",
   "main": "index.js",
   "scripts": {

package/svf/include/AE/Svfexe/AEStat.h

@@ -0,0 +1,88 @@
+//===- AEStat.h -- Statistics for Abstract Execution----------//
+//
+//                     SVF: Static Value-Flow Analysis
+//
+// Copyright (C) <2013->  <Yulei Sui>
+//
+
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+//===----------------------------------------------------------------------===//
+
+#pragma once
+#include "SVFIR/SVFType.h"
+#include "Util/SVFUtil.h"
+#include "Util/SVFStat.h"
+#include <string>
+
+namespace SVF
+{
+
+class AbstractInterpretation;
+
+/// AEStat: Statistic for AE
+class AEStat : public SVFStat
+{
+public:
+    void countStateSize();
+    AEStat(AbstractInterpretation* ae) : _ae(ae)
+    {
+        startTime = getClk(true);
+    }
+    ~AEStat()
+    {
+    }
+    inline std::string getMemUsage()
+    {
+        u32_t vmrss, vmsize;
+        return SVFUtil::getMemoryUsageKB(&vmrss, &vmsize) ? std::to_string(vmsize) + "KB" : "cannot read memory usage";
+    }
+
+    void finializeStat();
+    void performStat() override;
+
+public:
+    AbstractInterpretation* _ae;
+    s32_t count{0};
+    std::string memory_usage;
+    std::string memUsage;
+
+
+    u32_t& getFunctionTrace()
+    {
+        if (generalNumMap.count("Function_Trace") == 0)
+        {
+            generalNumMap["Function_Trace"] = 0;
+        }
+        return generalNumMap["Function_Trace"];
+    }
+    u32_t& getBlockTrace()
+    {
+        if (generalNumMap.count("Block_Trace") == 0)
+        {
+            generalNumMap["Block_Trace"] = 0;
+        }
+        return generalNumMap["Block_Trace"];
+    }
+    u32_t& getICFGNodeTrace()
+    {
+        if (generalNumMap.count("ICFG_Node_Trace") == 0)
+        {
+            generalNumMap["ICFG_Node_Trace"] = 0;
+        }
+        return generalNumMap["ICFG_Node_Trace"];
+    }
+};
+
+} // namespace SVF

package/svf/include/AE/Svfexe/AbsExtAPI.h

@@ -108,6 +108,11 @@ public:
      */
     AbstractState& getAbsStateFromTrace(const ICFGNode* node);
 
+    void collectCheckPoint();
+    void checkPointAllSet();
+
+    Set<const CallICFGNode*> checkpoints; // for CI check
+
 protected:
     SVFIR* svfir; ///< Pointer to the SVF intermediate representation.
     ICFG* icfg; ///< Pointer to the interprocedural control flow graph.

package/svf/include/AE/Svfexe/AbstractInterpretation.h

@@ -34,8 +34,8 @@
 #include "AE/Svfexe/AEDetector.h"
 #include "AE/Svfexe/PreAnalysis.h"
 #include "AE/Svfexe/AbsExtAPI.h"
+#include "AE/Svfexe/AEStat.h"
 #include "Util/SVFBugReport.h"
-#include "Util/SVFStat.h"
 #include "Graphs/SCC.h"
 #include "Graphs/CallGraph.h"
 #include <deque>
@@ -49,60 +49,6 @@ class AEAPI;
 
 template<typename T> class FILOWorkList;
 
-/// AEStat: Statistic for AE
-class AEStat : public SVFStat
-{
-public:
-    void countStateSize();
-    AEStat(AbstractInterpretation* ae) : _ae(ae)
-    {
-        startTime = getClk(true);
-    }
-    ~AEStat()
-    {
-    }
-    inline std::string getMemUsage()
-    {
-        u32_t vmrss, vmsize;
-        return SVFUtil::getMemoryUsageKB(&vmrss, &vmsize) ? std::to_string(vmsize) + "KB" : "cannot read memory usage";
-    }
-
-    void finializeStat();
-    void performStat() override;
-
-public:
-    AbstractInterpretation* _ae;
-    s32_t count{0};
-    std::string memory_usage;
-    std::string memUsage;
-
-
-    u32_t& getFunctionTrace()
-    {
-        if (generalNumMap.count("Function_Trace") == 0)
-        {
-            generalNumMap["Function_Trace"] = 0;
-        }
-        return generalNumMap["Function_Trace"];
-    }
-    u32_t& getBlockTrace()
-    {
-        if (generalNumMap.count("Block_Trace") == 0)
-        {
-            generalNumMap["Block_Trace"] = 0;
-        }
-        return generalNumMap["Block_Trace"];
-    }
-    u32_t& getICFGNodeTrace()
-    {
-        if (generalNumMap.count("ICFG_Node_Trace") == 0)
-        {
-            generalNumMap["ICFG_Node_Trace"] = 0;
-        }
-        return generalNumMap["ICFG_Node_Trace"];
-    }
-};
-
 /// AbstractInterpretation is same as Abstract Execution
 class AbstractInterpretation
 {
@@ -163,7 +109,7 @@ public:
         detectors.push_back(std::move(detector));
     }
 
-    Set<const CallICFGNode*> checkpoints; // for CI check
+
 
     /**
      * @brief Retrieves the abstract state from the trace for a given ICFG node.
@@ -286,10 +232,6 @@ private:
     bool isSwitchBranchFeasible(const SVFVar* var, s64_t succ,
                                 AbstractState& as);
 
-
-    void collectCheckPoint();
-    void checkPointAllSet();
-
     void updateStateOnAddr(const AddrStmt *addr);
 
     void updateStateOnBinary(const BinaryOPStmt *binary);

package/svf/lib/AE/Svfexe/AEDetector.cpp

@@ -119,7 +119,7 @@ void BufOverflowDetector::handleStubFunctions(const SVF::CallICFGNode* callNode)
     if (funcName == "SAFE_BUFACCESS")
     {
         // void SAFE_BUFACCESS(void* data, int size);
-        AbstractInterpretation::getAEInstance().checkpoints.erase(callNode);
+        AbstractInterpretation::getAEInstance().getUtils()->checkpoints.erase(callNode);
         if (callNode->arg_size() < 2)
             return;
         AbstractState& as =
@@ -150,7 +150,7 @@ void BufOverflowDetector::handleStubFunctions(const SVF::CallICFGNode* callNode)
     else if (funcName == "UNSAFE_BUFACCESS")
     {
         // void UNSAFE_BUFACCESS(void* data, int size);
-        AbstractInterpretation::getAEInstance().checkpoints.erase(callNode);
+        AbstractInterpretation::getAEInstance().getUtils()->checkpoints.erase(callNode);
         if (callNode->arg_size() < 2) return;
         AbstractState&as = AbstractInterpretation::getAEInstance().getAbsStateFromTrace(callNode);
         u32_t size_id = callNode->getArgument(1)->getId();
@@ -588,7 +588,7 @@ void NullptrDerefDetector::handleStubFunctions(const CallICFGNode* callNode)
     if (funcName == "UNSAFE_LOAD")
     {
         // void UNSAFE_LOAD(void* ptr);
-        AbstractInterpretation::getAEInstance().checkpoints.erase(callNode);
+        AbstractInterpretation::getAEInstance().getUtils()->checkpoints.erase(callNode);
         if (callNode->arg_size() < 1)
             return;
         AbstractState& as = AbstractInterpretation::getAEInstance().getAbsStateFromTrace(callNode);
@@ -612,7 +612,7 @@ void NullptrDerefDetector::handleStubFunctions(const CallICFGNode* callNode)
     else if (funcName == "SAFE_LOAD")
     {
         // void SAFE_LOAD(void* ptr);
-        AbstractInterpretation::getAEInstance().checkpoints.erase(callNode);
+        AbstractInterpretation::getAEInstance().getUtils()->checkpoints.erase(callNode);
         if (callNode->arg_size() < 1) return;
         AbstractState&as = AbstractInterpretation::getAEInstance().getAbsStateFromTrace(callNode);
         const SVFVar* arg0Val = callNode->getArgument(0);

package/svf/lib/AE/Svfexe/AEStat.cpp

@@ -0,0 +1,163 @@
+//===- AEStat.cpp -- Statistics for Abstract Execution----------//
+//
+//                     SVF: Static Value-Flow Analysis
+//
+// Copyright (C) <2013->  <Yulei Sui>
+//
+
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+//===----------------------------------------------------------------------===//
+
+#include "AE/Svfexe/AEStat.h"
+#include "AE/Svfexe/AbstractInterpretation.h"
+#include "SVFIR/SVFIR.h"
+
+using namespace SVF;
+using namespace SVFUtil;
+
+// count the size of memory map
+void AEStat::countStateSize()
+{
+    if (count == 0)
+    {
+        generalNumMap["ES_Var_AVG_Num"] = 0;
+        generalNumMap["ES_Loc_AVG_Num"] = 0;
+        generalNumMap["ES_Var_Addr_AVG_Num"] = 0;
+        generalNumMap["ES_Loc_Addr_AVG_Num"] = 0;
+    }
+    ++count;
+}
+
+void AEStat::finializeStat()
+{
+    memUsage = getMemUsage();
+    if (count > 0)
+    {
+        generalNumMap["ES_Var_AVG_Num"] /= count;
+        generalNumMap["ES_Loc_AVG_Num"] /= count;
+        generalNumMap["ES_Var_Addr_AVG_Num"] /= count;
+        generalNumMap["ES_Loc_Addr_AVG_Num"] /= count;
+    }
+    generalNumMap["SVF_STMT_NUM"] = count;
+
+    u32_t totalICFGNodes = _ae->svfir->getICFG()->nodeNum;
+    generalNumMap["ICFG_Node_Num"] = totalICFGNodes;
+
+    // Calculate coverage: use allAnalyzedNodes which tracks all nodes across all entry points
+    u32_t analyzedNodes = _ae->allAnalyzedNodes.size();
+    generalNumMap["Analyzed_ICFG_Node_Num"] = analyzedNodes;
+
+    // Coverage percentage (stored as integer percentage * 100 for precision)
+    if (totalICFGNodes > 0)
+    {
+        double coveragePercent = (double)analyzedNodes / (double)totalICFGNodes * 100.0;
+        generalNumMap["ICFG_Coverage_Percent"] = (u32_t)(coveragePercent * 100); // Store as percentage * 100
+    }
+    else
+    {
+        generalNumMap["ICFG_Coverage_Percent"] = 0;
+    }
+
+    u32_t callSiteNum = 0;
+    u32_t extCallSiteNum = 0;
+    Set<const FunObjVar *> funs;
+    Set<const FunObjVar *> analyzedFuns;
+    for (const auto &it: *_ae->svfir->getICFG())
+    {
+        if (it.second->getFun())
+        {
+            funs.insert(it.second->getFun());
+            // Check if this node was analyzed (across all entry points)
+            if (_ae->allAnalyzedNodes.find(it.second) != _ae->allAnalyzedNodes.end())
+            {
+                analyzedFuns.insert(it.second->getFun());
+            }
+        }
+        if (const CallICFGNode *callNode = dyn_cast<CallICFGNode>(it.second))
+        {
+            if (!isExtCall(callNode))
+            {
+                callSiteNum++;
+            }
+            else
+            {
+                extCallSiteNum++;
+            }
+        }
+    }
+    generalNumMap["Func_Num"] = funs.size();
+    generalNumMap["Analyzed_Func_Num"] = analyzedFuns.size();
+
+    // Function coverage percentage
+    if (funs.size() > 0)
+    {
+        double funcCoveragePercent = (double)analyzedFuns.size() / (double)funs.size() * 100.0;
+        generalNumMap["Func_Coverage_Percent"] = (u32_t)(funcCoveragePercent * 100); // Store as percentage * 100
+    }
+    else
+    {
+        generalNumMap["Func_Coverage_Percent"] = 0;
+    }
+
+    generalNumMap["EXT_CallSite_Num"] = extCallSiteNum;
+    generalNumMap["NonEXT_CallSite_Num"] = callSiteNum;
+    timeStatMap["Total_Time(sec)"] = (double)(endTime - startTime) / TIMEINTERVAL;
+
+}
+
+void AEStat::performStat()
+{
+    std::string fullName(_ae->moduleName);
+    std::string name;
+    std::string moduleName;
+    if (fullName.find('/') == std::string::npos)
+    {
+        std::string name = fullName;
+        moduleName = name.substr(0, fullName.find('.'));
+    }
+    else
+    {
+        std::string name = fullName.substr(fullName.find('/'), fullName.size());
+        moduleName = name.substr(0, fullName.find('.'));
+    }
+
+    SVFUtil::outs() << "\n************************\n";
+    SVFUtil::outs() << "################ (program : " << moduleName << ")###############\n";
+    SVFUtil::outs().flags(std::ios::left);
+    unsigned field_width = 30;
+    for (NUMStatMap::iterator it = generalNumMap.begin(), eit = generalNumMap.end(); it != eit; ++it)
+    {
+        // Special handling for percentage fields (stored as percentage * 100)
+        if (it->first == "ICFG_Coverage_Percent" || it->first == "Func_Coverage_Percent")
+        {
+            double percent = (double)it->second / 100.0;
+            std::cout << std::setw(field_width) << it->first << std::fixed << std::setprecision(2) << percent << "%\n";
+        }
+        else
+        {
+            std::cout << std::setw(field_width) << it->first << it->second << "\n";
+        }
+    }
+    SVFUtil::outs() << "-------------------------------------------------------\n";
+    for (TIMEStatMap::iterator it = timeStatMap.begin(), eit = timeStatMap.end(); it != eit; ++it)
+    {
+        // format out put with width 20 space
+        SVFUtil::outs() << std::setw(field_width) << it->first << it->second << "\n";
+    }
+    SVFUtil::outs() << "Memory usage: " << memUsage << "\n";
+
+    SVFUtil::outs() << "#######################################################" << std::endl;
+    SVFUtil::outs().flush();
+}

package/svf/lib/AE/Svfexe/AbsExtAPI.cpp

@@ -76,7 +76,7 @@ void AbsExtAPI::initExtFunMap()
 
     auto sse_svf_assert = [this](const CallICFGNode* callNode)
     {
-        AbstractInterpretation::getAEInstance().checkpoints.erase(callNode);
+        checkpoints.erase(callNode);
         u32_t arg0 = callNode->getArgument(0)->getId();
         AbstractState&as = getAbsStateFromTrace(callNode);
         if (as[arg0].getInterval().equals(IntervalValue(1, 1)))
@@ -348,6 +348,61 @@ AbstractState& AbsExtAPI::getAbsStateFromTrace(const SVF::ICFGNode* node)
     }
 }
 
+void AbsExtAPI::collectCheckPoint()
+{
+    // traverse every ICFGNode
+    Set<std::string> ae_checkpoint_names = {"svf_assert"};
+    Set<std::string> buf_checkpoint_names = {"UNSAFE_BUFACCESS", "SAFE_BUFACCESS"};
+    Set<std::string> nullptr_checkpoint_names = {"UNSAFE_LOAD", "SAFE_LOAD"};
+
+    for (auto it = svfir->getICFG()->begin(); it != svfir->getICFG()->end(); ++it)
+    {
+        const ICFGNode* node = it->second;
+        if (const CallICFGNode *call = SVFUtil::dyn_cast<CallICFGNode>(node))
+        {
+            if (const FunObjVar *fun = call->getCalledFunction())
+            {
+                if (ae_checkpoint_names.find(fun->getName()) !=
+                        ae_checkpoint_names.end())
+                {
+                    checkpoints.insert(call);
+                }
+                if (Options::BufferOverflowCheck())
+                {
+                    if (buf_checkpoint_names.find(fun->getName()) !=
+                            buf_checkpoint_names.end())
+                    {
+                        checkpoints.insert(call);
+                    }
+                }
+                if (Options::NullDerefCheck())
+                {
+                    if (nullptr_checkpoint_names.find(fun->getName()) !=
+                            nullptr_checkpoint_names.end())
+                    {
+                        checkpoints.insert(call);
+                    }
+                }
+            }
+        }
+    }
+}
+
+void AbsExtAPI::checkPointAllSet()
+{
+    if (checkpoints.size() == 0)
+    {
+        return;
+    }
+    else
+    {
+        SVFUtil::errs() << SVFUtil::errMsg("At least one svf_assert has not been checked!!") << "\n";
+        for (const CallICFGNode* call: checkpoints)
+            SVFUtil::errs() << call->toString() + "\n";
+        assert(false);
+    }
+}
+
 std::string AbsExtAPI::strRead(AbstractState& as, const SVFVar* rhs)
 {
     // sse read string nodeID->string

package/svf/lib/AE/Svfexe/AbstractInterpretation.cpp

@@ -55,10 +55,10 @@ void AbstractInterpretation::runOnModule(ICFG *_icfg)
     preAnalysis->initWTO();
 
     /// collect checkpoint
-    collectCheckPoint();
+    utils->collectCheckPoint();
 
     analyse();
-    checkPointAllSet();
+    utils->checkPointAllSet();
     stat->endClk();
     stat->finializeStat();
     if (Options::PStat())
@@ -1168,197 +1168,6 @@ void AbstractInterpretation::setTopToObjInRecursion(const CallICFGNode *callNode
     }
 }
 
-// count the size of memory map
-void AEStat::countStateSize()
-{
-    if (count == 0)
-    {
-        generalNumMap["ES_Var_AVG_Num"] = 0;
-        generalNumMap["ES_Loc_AVG_Num"] = 0;
-        generalNumMap["ES_Var_Addr_AVG_Num"] = 0;
-        generalNumMap["ES_Loc_Addr_AVG_Num"] = 0;
-    }
-    ++count;
-}
-
-void AEStat::finializeStat()
-{
-    memUsage = getMemUsage();
-    if (count > 0)
-    {
-        generalNumMap["ES_Var_AVG_Num"] /= count;
-        generalNumMap["ES_Loc_AVG_Num"] /= count;
-        generalNumMap["ES_Var_Addr_AVG_Num"] /= count;
-        generalNumMap["ES_Loc_Addr_AVG_Num"] /= count;
-    }
-    generalNumMap["SVF_STMT_NUM"] = count;
-
-    u32_t totalICFGNodes = _ae->svfir->getICFG()->nodeNum;
-    generalNumMap["ICFG_Node_Num"] = totalICFGNodes;
-
-    // Calculate coverage: use allAnalyzedNodes which tracks all nodes across all entry points
-    u32_t analyzedNodes = _ae->allAnalyzedNodes.size();
-    generalNumMap["Analyzed_ICFG_Node_Num"] = analyzedNodes;
-
-    // Coverage percentage (stored as integer percentage * 100 for precision)
-    if (totalICFGNodes > 0)
-    {
-        double coveragePercent = (double)analyzedNodes / (double)totalICFGNodes * 100.0;
-        generalNumMap["ICFG_Coverage_Percent"] = (u32_t)(coveragePercent * 100); // Store as percentage * 100
-    }
-    else
-    {
-        generalNumMap["ICFG_Coverage_Percent"] = 0;
-    }
-
-    u32_t callSiteNum = 0;
-    u32_t extCallSiteNum = 0;
-    Set<const FunObjVar *> funs;
-    Set<const FunObjVar *> analyzedFuns;
-    for (const auto &it: *_ae->svfir->getICFG())
-    {
-        if (it.second->getFun())
-        {
-            funs.insert(it.second->getFun());
-            // Check if this node was analyzed (across all entry points)
-            if (_ae->allAnalyzedNodes.find(it.second) != _ae->allAnalyzedNodes.end())
-            {
-                analyzedFuns.insert(it.second->getFun());
-            }
-        }
-        if (const CallICFGNode *callNode = dyn_cast<CallICFGNode>(it.second))
-        {
-            if (!isExtCall(callNode))
-            {
-                callSiteNum++;
-            }
-            else
-            {
-                extCallSiteNum++;
-            }
-        }
-    }
-    generalNumMap["Func_Num"] = funs.size();
-    generalNumMap["Analyzed_Func_Num"] = analyzedFuns.size();
-
-    // Function coverage percentage
-    if (funs.size() > 0)
-    {
-        double funcCoveragePercent = (double)analyzedFuns.size() / (double)funs.size() * 100.0;
-        generalNumMap["Func_Coverage_Percent"] = (u32_t)(funcCoveragePercent * 100); // Store as percentage * 100
-    }
-    else
-    {
-        generalNumMap["Func_Coverage_Percent"] = 0;
-    }
-
-    generalNumMap["EXT_CallSite_Num"] = extCallSiteNum;
-    generalNumMap["NonEXT_CallSite_Num"] = callSiteNum;
-    timeStatMap["Total_Time(sec)"] = (double)(endTime - startTime) / TIMEINTERVAL;
-
-}
-
-void AEStat::performStat()
-{
-    std::string fullName(_ae->moduleName);
-    std::string name;
-    std::string moduleName;
-    if (fullName.find('/') == std::string::npos)
-    {
-        std::string name = fullName;
-        moduleName = name.substr(0, fullName.find('.'));
-    }
-    else
-    {
-        std::string name = fullName.substr(fullName.find('/'), fullName.size());
-        moduleName = name.substr(0, fullName.find('.'));
-    }
-
-    SVFUtil::outs() << "\n************************\n";
-    SVFUtil::outs() << "################ (program : " << moduleName << ")###############\n";
-    SVFUtil::outs().flags(std::ios::left);
-    unsigned field_width = 30;
-    for (NUMStatMap::iterator it = generalNumMap.begin(), eit = generalNumMap.end(); it != eit; ++it)
-    {
-        // Special handling for percentage fields (stored as percentage * 100)
-        if (it->first == "ICFG_Coverage_Percent" || it->first == "Func_Coverage_Percent")
-        {
-            double percent = (double)it->second / 100.0;
-            std::cout << std::setw(field_width) << it->first << std::fixed << std::setprecision(2) << percent << "%\n";
-        }
-        else
-        {
-            std::cout << std::setw(field_width) << it->first << it->second << "\n";
-        }
-    }
-    SVFUtil::outs() << "-------------------------------------------------------\n";
-    for (TIMEStatMap::iterator it = timeStatMap.begin(), eit = timeStatMap.end(); it != eit; ++it)
-    {
-        // format out put with width 20 space
-        SVFUtil::outs() << std::setw(field_width) << it->first << it->second << "\n";
-    }
-    SVFUtil::outs() << "Memory usage: " << memUsage << "\n";
-
-    SVFUtil::outs() << "#######################################################" << std::endl;
-    SVFUtil::outs().flush();
-}
-
-void AbstractInterpretation::collectCheckPoint()
-{
-    // traverse every ICFGNode
-    Set<std::string> ae_checkpoint_names = {"svf_assert"};
-    Set<std::string> buf_checkpoint_names = {"UNSAFE_BUFACCESS", "SAFE_BUFACCESS"};
-    Set<std::string> nullptr_checkpoint_names = {"UNSAFE_LOAD", "SAFE_LOAD"};
-
-    for (auto it = svfir->getICFG()->begin(); it != svfir->getICFG()->end(); ++it)
-    {
-        const ICFGNode* node = it->second;
-        if (const CallICFGNode *call = SVFUtil::dyn_cast<CallICFGNode>(node))
-        {
-            if (const FunObjVar *fun = call->getCalledFunction())
-            {
-                if (ae_checkpoint_names.find(fun->getName()) !=
-                        ae_checkpoint_names.end())
-                {
-                    checkpoints.insert(call);
-                }
-                if (Options::BufferOverflowCheck())
-                {
-                    if (buf_checkpoint_names.find(fun->getName()) !=
-                            buf_checkpoint_names.end())
-                    {
-                        checkpoints.insert(call);
-                    }
-                }
-                if (Options::NullDerefCheck())
-                {
-                    if (nullptr_checkpoint_names.find(fun->getName()) !=
-                            nullptr_checkpoint_names.end())
-                    {
-                        checkpoints.insert(call);
-                    }
-                }
-            }
-        }
-    }
-}
-
-void AbstractInterpretation::checkPointAllSet()
-{
-    if (checkpoints.size() == 0)
-    {
-        return;
-    }
-    else
-    {
-        SVFUtil::errs() << SVFUtil::errMsg("At least one svf_assert has not been checked!!") << "\n";
-        for (const CallICFGNode* call: checkpoints)
-            SVFUtil::errs() << call->toString() + "\n";
-        assert(false);
-    }
-
-}
-
 void AbstractInterpretation::updateStateOnGep(const GepStmt *gep)
 {
     AbstractState& as = getAbsStateFromTrace(gep->getICFGNode());