npm - svf-tools - Versions diffs - 1.0.894 → 1.0.896 - Mend

svf-tools 1.0.894 → 1.0.896

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (305) hide show

package/SVF-doxygen/html/ObjTypeInference_8cpp_source.html CHANGED Viewed

@@ -266,9 +266,9 @@ $(function() {
 <div class="line"><a name="l00207"></a><span class="lineno">  207</span>&#160;        }</div>
 <div class="line"><a name="l00208"></a><span class="lineno">  208</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *gepInst = SVFUtil::dyn_cast&lt;GetElementPtrInst&gt;(curValue))</div>
 <div class="line"><a name="l00209"></a><span class="lineno">  209</span>&#160;            insertInferSite(gepInst);</div>
-<div class="line"><a name="l00210"></a><span class="lineno">  210</span>&#160;        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;it: curValue-&gt;uses())</div>
+<div class="line"><a name="l00210"></a><span class="lineno">  210</span>&#160;        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;it: curValue-&gt;users())</div>
 <div class="line"><a name="l00211"></a><span class="lineno">  211</span>&#160;        {</div>
-<div class="line"><a name="l00212"></a><span class="lineno">  212</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(it.getUser()))</div>
+<div class="line"><a name="l00212"></a><span class="lineno">  212</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(it))</div>
 <div class="line"><a name="l00213"></a><span class="lineno">  213</span>&#160;            {</div>
 <div class="line"><a name="l00214"></a><span class="lineno">  214</span>&#160;                <span class="comment">/*</span></div>
 <div class="line"><a name="l00215"></a><span class="lineno">  215</span>&#160;<span class="comment">                 * infer based on load, e.g.,</span></div>
@@ -278,7 +278,7 @@ $(function() {
 <div class="line"><a name="l00219"></a><span class="lineno">  219</span>&#160;<span class="comment">                 */</span></div>
 <div class="line"><a name="l00220"></a><span class="lineno">  220</span>&#160;                insertInferSite(loadInst);</div>
 <div class="line"><a name="l00221"></a><span class="lineno">  221</span>&#160;            }</div>
-<div class="line"><a name="l00222"></a><span class="lineno">  222</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(it.getUser()))</div>
+<div class="line"><a name="l00222"></a><span class="lineno">  222</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(it))</div>
 <div class="line"><a name="l00223"></a><span class="lineno">  223</span>&#160;            {</div>
 <div class="line"><a name="l00224"></a><span class="lineno">  224</span>&#160;                <span class="keywordflow">if</span> (storeInst-&gt;getPointerOperand() == curValue)</div>
 <div class="line"><a name="l00225"></a><span class="lineno">  225</span>&#160;                {</div>
@@ -292,7 +292,7 @@ $(function() {
 <div class="line"><a name="l00233"></a><span class="lineno">  233</span>&#160;                }</div>
 <div class="line"><a name="l00234"></a><span class="lineno">  234</span>&#160;                <span class="keywordflow">else</span></div>
 <div class="line"><a name="l00235"></a><span class="lineno">  235</span>&#160;                {</div>
-<div class="line"><a name="l00236"></a><span class="lineno">  236</span>&#160;                    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;nit: storeInst-&gt;getPointerOperand()-&gt;uses())</div>
+<div class="line"><a name="l00236"></a><span class="lineno">  236</span>&#160;                    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;nit: storeInst-&gt;getPointerOperand()-&gt;users())</div>
 <div class="line"><a name="l00237"></a><span class="lineno">  237</span>&#160;                    {</div>
 <div class="line"><a name="l00238"></a><span class="lineno">  238</span>&#160;                        <span class="comment">/*</span></div>
 <div class="line"><a name="l00239"></a><span class="lineno">  239</span>&#160;<span class="comment">                         * propagate across store (value operand) and load</span></div>
@@ -301,8 +301,8 @@ $(function() {
 <div class="line"><a name="l00242"></a><span class="lineno">  242</span>&#160;<span class="comment">                         %q = load i8*, i8** %p</span></div>
 <div class="line"><a name="l00243"></a><span class="lineno">  243</span>&#160;<span class="comment">                         ..infer based on %q..</span></div>
 <div class="line"><a name="l00244"></a><span class="lineno">  244</span>&#160;<span class="comment">                        */</span></div>
-<div class="line"><a name="l00245"></a><span class="lineno">  245</span>&#160;                        <span class="keywordflow">if</span> (SVFUtil::isa&lt;LoadInst&gt;(nit.getUser()))</div>
-<div class="line"><a name="l00246"></a><span class="lineno">  246</span>&#160;                            insertInferSitesOrPushWorklist(nit.getUser());</div>
+<div class="line"><a name="l00245"></a><span class="lineno">  245</span>&#160;                        <span class="keywordflow">if</span> (SVFUtil::isa&lt;LoadInst&gt;(nit))</div>
+<div class="line"><a name="l00246"></a><span class="lineno">  246</span>&#160;                            insertInferSitesOrPushWorklist(nit);</div>
 <div class="line"><a name="l00247"></a><span class="lineno">  247</span>&#160;                    }</div>
 <div class="line"><a name="l00248"></a><span class="lineno">  248</span>&#160;                    <span class="comment">/*</span></div>
 <div class="line"><a name="l00249"></a><span class="lineno">  249</span>&#160;<span class="comment">                     * infer based on store (value operand) &lt;- gep (result element)</span></div>
@@ -322,18 +322,18 @@ $(function() {
 <div class="line"><a name="l00263"></a><span class="lineno">  263</span>&#160;                        <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *gepBase = gepInst-&gt;getPointerOperand();</div>
 <div class="line"><a name="l00264"></a><span class="lineno">  264</span>&#160;                        <span class="keywordflow">if</span> (!SVFUtil::isa&lt;LoadInst&gt;(gepBase)) <span class="keywordflow">continue</span>;</div>
 <div class="line"><a name="l00265"></a><span class="lineno">  265</span>&#160;                        <span class="keyword">const</span> <span class="keyword">auto</span> *load = SVFUtil::dyn_cast&lt;LoadInst&gt;(gepBase);</div>
-<div class="line"><a name="l00266"></a><span class="lineno">  266</span>&#160;                        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;loadUse: load-&gt;getPointerOperand()-&gt;uses())</div>
+<div class="line"><a name="l00266"></a><span class="lineno">  266</span>&#160;                        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;loadUse: load-&gt;getPointerOperand()-&gt;users())</div>
 <div class="line"><a name="l00267"></a><span class="lineno">  267</span>&#160;                        {</div>
-<div class="line"><a name="l00268"></a><span class="lineno">  268</span>&#160;                            <span class="keywordflow">if</span> (loadUse.getUser() == load || !SVFUtil::isa&lt;LoadInst&gt;(loadUse.getUser()))</div>
+<div class="line"><a name="l00268"></a><span class="lineno">  268</span>&#160;                            <span class="keywordflow">if</span> (loadUse == load || !SVFUtil::isa&lt;LoadInst&gt;(loadUse))</div>
 <div class="line"><a name="l00269"></a><span class="lineno">  269</span>&#160;                                <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00270"></a><span class="lineno">  270</span>&#160;                            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;gepUse: loadUse.getUser()-&gt;uses())</div>
+<div class="line"><a name="l00270"></a><span class="lineno">  270</span>&#160;                            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;gepUse: loadUse-&gt;users())</div>
 <div class="line"><a name="l00271"></a><span class="lineno">  271</span>&#160;                            {</div>
-<div class="line"><a name="l00272"></a><span class="lineno">  272</span>&#160;                                <span class="keywordflow">if</span> (!SVFUtil::isa&lt;GetElementPtrInst&gt;(gepUse.getUser())) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00273"></a><span class="lineno">  273</span>&#160;                                <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;loadUse2: gepUse.getUser()-&gt;uses())</div>
+<div class="line"><a name="l00272"></a><span class="lineno">  272</span>&#160;                                <span class="keywordflow">if</span> (!SVFUtil::isa&lt;GetElementPtrInst&gt;(gepUse)) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00273"></a><span class="lineno">  273</span>&#160;                                <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;loadUse2: gepUse-&gt;users())</div>
 <div class="line"><a name="l00274"></a><span class="lineno">  274</span>&#160;                                {</div>
-<div class="line"><a name="l00275"></a><span class="lineno">  275</span>&#160;                                    <span class="keywordflow">if</span> (SVFUtil::isa&lt;LoadInst&gt;(loadUse2.getUser()))</div>
+<div class="line"><a name="l00275"></a><span class="lineno">  275</span>&#160;                                    <span class="keywordflow">if</span> (SVFUtil::isa&lt;LoadInst&gt;(loadUse2))</div>
 <div class="line"><a name="l00276"></a><span class="lineno">  276</span>&#160;                                    {</div>
-<div class="line"><a name="l00277"></a><span class="lineno">  277</span>&#160;                                        insertInferSitesOrPushWorklist(loadUse2.getUser());</div>
+<div class="line"><a name="l00277"></a><span class="lineno">  277</span>&#160;                                        insertInferSitesOrPushWorklist(loadUse2);</div>
 <div class="line"><a name="l00278"></a><span class="lineno">  278</span>&#160;                                    }</div>
 <div class="line"><a name="l00279"></a><span class="lineno">  279</span>&#160;                                }</div>
 <div class="line"><a name="l00280"></a><span class="lineno">  280</span>&#160;                            }</div>
@@ -343,7 +343,7 @@ $(function() {
 <div class="line"><a name="l00284"></a><span class="lineno">  284</span>&#160;                }</div>
 <div class="line"><a name="l00285"></a><span class="lineno">  285</span>&#160; </div>
 <div class="line"><a name="l00286"></a><span class="lineno">  286</span>&#160;            }</div>
-<div class="line"><a name="l00287"></a><span class="lineno">  287</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *gepInst = SVFUtil::dyn_cast&lt;GetElementPtrInst&gt;(it.getUser()))</div>
+<div class="line"><a name="l00287"></a><span class="lineno">  287</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *gepInst = SVFUtil::dyn_cast&lt;GetElementPtrInst&gt;(it))</div>
 <div class="line"><a name="l00288"></a><span class="lineno">  288</span>&#160;            {</div>
 <div class="line"><a name="l00289"></a><span class="lineno">  289</span>&#160;                <span class="comment">/*</span></div>
 <div class="line"><a name="l00290"></a><span class="lineno">  290</span>&#160;<span class="comment">                 * infer based on gep (pointer operand)</span></div>
@@ -354,17 +354,17 @@ $(function() {
 <div class="line"><a name="l00295"></a><span class="lineno">  295</span>&#160;                <span class="keywordflow">if</span> (gepInst-&gt;getPointerOperand() == curValue)</div>
 <div class="line"><a name="l00296"></a><span class="lineno">  296</span>&#160;                    insertInferSite(gepInst);</div>
 <div class="line"><a name="l00297"></a><span class="lineno">  297</span>&#160;            }</div>
-<div class="line"><a name="l00298"></a><span class="lineno">  298</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitcast = SVFUtil::dyn_cast&lt;BitCastInst&gt;(it.getUser()))</div>
+<div class="line"><a name="l00298"></a><span class="lineno">  298</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitcast = SVFUtil::dyn_cast&lt;BitCastInst&gt;(it))</div>
 <div class="line"><a name="l00299"></a><span class="lineno">  299</span>&#160;            {</div>
 <div class="line"><a name="l00300"></a><span class="lineno">  300</span>&#160;                <span class="comment">// continue on bitcast</span></div>
 <div class="line"><a name="l00301"></a><span class="lineno">  301</span>&#160;                insertInferSitesOrPushWorklist(bitcast);</div>
 <div class="line"><a name="l00302"></a><span class="lineno">  302</span>&#160;            }</div>
-<div class="line"><a name="l00303"></a><span class="lineno">  303</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(it.getUser()))</div>
+<div class="line"><a name="l00303"></a><span class="lineno">  303</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(it))</div>
 <div class="line"><a name="l00304"></a><span class="lineno">  304</span>&#160;            {</div>
 <div class="line"><a name="l00305"></a><span class="lineno">  305</span>&#160;                <span class="comment">// continue on bitcast</span></div>
 <div class="line"><a name="l00306"></a><span class="lineno">  306</span>&#160;                insertInferSitesOrPushWorklist(phiNode);</div>
 <div class="line"><a name="l00307"></a><span class="lineno">  307</span>&#160;            }</div>
-<div class="line"><a name="l00308"></a><span class="lineno">  308</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(it.getUser()))</div>
+<div class="line"><a name="l00308"></a><span class="lineno">  308</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(it))</div>
 <div class="line"><a name="l00309"></a><span class="lineno">  309</span>&#160;            {</div>
 <div class="line"><a name="l00310"></a><span class="lineno">  310</span>&#160;                <span class="comment">/*</span></div>
 <div class="line"><a name="l00311"></a><span class="lineno">  311</span>&#160;<span class="comment">                 * propagate from return to caller</span></div>
@@ -377,9 +377,9 @@ $(function() {
 <div class="line"><a name="l00318"></a><span class="lineno">  318</span>&#160;<span class="comment">                 %call = call i8* @malloc_wrapper()</span></div>
 <div class="line"><a name="l00319"></a><span class="lineno">  319</span>&#160;<span class="comment">                 ..infer based on %call..</span></div>
 <div class="line"><a name="l00320"></a><span class="lineno">  320</span>&#160;<span class="comment">                */</span></div>
-<div class="line"><a name="l00321"></a><span class="lineno">  321</span>&#160;                <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;callsite: retInst-&gt;getFunction()-&gt;uses())</div>
+<div class="line"><a name="l00321"></a><span class="lineno">  321</span>&#160;                <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;callsite: retInst-&gt;getFunction()-&gt;users())</div>
 <div class="line"><a name="l00322"></a><span class="lineno">  322</span>&#160;                {</div>
-<div class="line"><a name="l00323"></a><span class="lineno">  323</span>&#160;                    <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(callsite.getUser()))</div>
+<div class="line"><a name="l00323"></a><span class="lineno">  323</span>&#160;                    <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(callsite))</div>
 <div class="line"><a name="l00324"></a><span class="lineno">  324</span>&#160;                    {</div>
 <div class="line"><a name="l00325"></a><span class="lineno">  325</span>&#160;                        <span class="comment">// skip function as parameter</span></div>
 <div class="line"><a name="l00326"></a><span class="lineno">  326</span>&#160;                        <span class="comment">// e.g., call void @foo(%struct.ssl_ctx_st* %9, i32 (i8*, i32, i32, i8*)* @passwd_callback)</span></div>
@@ -388,7 +388,7 @@ $(function() {
 <div class="line"><a name="l00329"></a><span class="lineno">  329</span>&#160;                    }</div>
 <div class="line"><a name="l00330"></a><span class="lineno">  330</span>&#160;                }</div>
 <div class="line"><a name="l00331"></a><span class="lineno">  331</span>&#160;            }</div>
-<div class="line"><a name="l00332"></a><span class="lineno">  332</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(it.getUser()))</div>
+<div class="line"><a name="l00332"></a><span class="lineno">  332</span>&#160;            <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(it))</div>
 <div class="line"><a name="l00333"></a><span class="lineno">  333</span>&#160;            {</div>
 <div class="line"><a name="l00334"></a><span class="lineno">  334</span>&#160;                <span class="comment">/*</span></div>
 <div class="line"><a name="l00335"></a><span class="lineno">  335</span>&#160;<span class="comment">                 * propagate from callsite to callee</span></div>
@@ -409,507 +409,531 @@ $(function() {
 <div class="line"><a name="l00350"></a><span class="lineno">  350</span>&#160;                <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *calleeFunc = callBase-&gt;getCalledFunction())</div>
 <div class="line"><a name="l00351"></a><span class="lineno">  351</span>&#160;                {</div>
 <div class="line"><a name="l00352"></a><span class="lineno">  352</span>&#160;                    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> pos = getArgPosInCall(callBase, curValue);</div>
-<div class="line"><a name="l00353"></a><span class="lineno">  353</span>&#160;                    <span class="comment">// for variable argument, conservatively collect all params</span></div>
-<div class="line"><a name="l00354"></a><span class="lineno">  354</span>&#160;                    <span class="keywordflow">if</span> (calleeFunc-&gt;isVarArg()) pos = 0;</div>
-<div class="line"><a name="l00355"></a><span class="lineno">  355</span>&#160;                    <span class="keywordflow">if</span> (!calleeFunc-&gt;isDeclaration())</div>
-<div class="line"><a name="l00356"></a><span class="lineno">  356</span>&#160;                    {</div>
-<div class="line"><a name="l00357"></a><span class="lineno">  357</span>&#160;                        insertInferSitesOrPushWorklist(calleeFunc-&gt;getArg(pos));</div>
-<div class="line"><a name="l00358"></a><span class="lineno">  358</span>&#160;                    }</div>
-<div class="line"><a name="l00359"></a><span class="lineno">  359</span>&#160;                }</div>
-<div class="line"><a name="l00360"></a><span class="lineno">  360</span>&#160;            }</div>
-<div class="line"><a name="l00361"></a><span class="lineno">  361</span>&#160;        }</div>
-<div class="line"><a name="l00362"></a><span class="lineno">  362</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
-<div class="line"><a name="l00363"></a><span class="lineno">  363</span>&#160;        {</div>
-<div class="line"><a name="l00364"></a><span class="lineno">  364</span>&#160;            <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Type *&gt;</a> types;</div>
-<div class="line"><a name="l00365"></a><span class="lineno">  365</span>&#160;            std::transform(infersites.begin(), infersites.end(), std::inserter(types, types.begin()),</div>
-<div class="line"><a name="l00366"></a><span class="lineno">  366</span>&#160;                           <a class="code" href="ObjTypeInference_8cpp.html#a19b8626948c43f4ce19dbc69742d309e">infersiteToType</a>);</div>
-<div class="line"><a name="l00367"></a><span class="lineno">  367</span>&#160;            _valueToInferSites[curValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(infersites);</div>
-<div class="line"><a name="l00368"></a><span class="lineno">  368</span>&#160;            _valueToType[curValue] = selectLargestSizedType(types);</div>
-<div class="line"><a name="l00369"></a><span class="lineno">  369</span>&#160;        }</div>
-<div class="line"><a name="l00370"></a><span class="lineno">  370</span>&#160;    }</div>
-<div class="line"><a name="l00371"></a><span class="lineno">  371</span>&#160;    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> = _valueToType[var];</div>
-<div class="line"><a name="l00372"></a><span class="lineno">  372</span>&#160;    <span class="keywordflow">if</span> (<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> == <span class="keyword">nullptr</span>)</div>
-<div class="line"><a name="l00373"></a><span class="lineno">  373</span>&#160;    {</div>
-<div class="line"><a name="l00374"></a><span class="lineno">  374</span>&#160;        <a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> = defaultType(var);</div>
-<div class="line"><a name="l00375"></a><span class="lineno">  375</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#ac48ef12f2a6f605d6fa5d31e7623a826">WARN_MSG</a>(<span class="stringliteral">&quot;Using default type, trace ID is &quot;</span> + std::to_string(traceId) + <span class="stringliteral">&quot;:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(var));</div>
-<div class="line"><a name="l00376"></a><span class="lineno">  376</span>&#160;    }</div>
-<div class="line"><a name="l00377"></a><span class="lineno">  377</span>&#160;    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a>, <span class="stringliteral">&quot;type cannot be a null ptr&quot;</span>);</div>
-<div class="line"><a name="l00378"></a><span class="lineno">  378</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a>;</div>
-<div class="line"><a name="l00379"></a><span class="lineno">  379</span>&#160;}</div>
-<div class="line"><a name="l00380"></a><span class="lineno">  380</span>&#160; </div>
-<div class="line"><a name="l00386"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">  386</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">ObjTypeInference::bwfindAllocOfVar</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *var)</div>
-<div class="line"><a name="l00387"></a><span class="lineno">  387</span>&#160;{</div>
-<div class="line"><a name="l00388"></a><span class="lineno">  388</span>&#160; </div>
-<div class="line"><a name="l00389"></a><span class="lineno">  389</span>&#160;    <span class="comment">// consult cache</span></div>
-<div class="line"><a name="l00390"></a><span class="lineno">  390</span>&#160;    <span class="keyword">auto</span> tIt = _valueToAllocs.find(var);</div>
-<div class="line"><a name="l00391"></a><span class="lineno">  391</span>&#160;    <span class="keywordflow">if</span> (tIt != _valueToAllocs.end())</div>
-<div class="line"><a name="l00392"></a><span class="lineno">  392</span>&#160;    {</div>
-<div class="line"><a name="l00393"></a><span class="lineno">  393</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
+<div class="line"><a name="l00353"></a><span class="lineno">  353</span>&#160;                    <span class="comment">// for varargs function, we cannot directly get the value-flow between actual and formal args</span></div>
+<div class="line"><a name="l00354"></a><span class="lineno">  354</span>&#160;                    <span class="comment">// e.g., consider the following vararg function @callee</span></div>
+<div class="line"><a name="l00355"></a><span class="lineno">  355</span>&#160;                    <span class="comment">// 1: call void @callee(%arg)</span></div>
+<div class="line"><a name="l00356"></a><span class="lineno">  356</span>&#160;                    <span class="comment">// 2: define dso_local i32 @callee(...) #0 !dbg !17 {</span></div>
+<div class="line"><a name="l00357"></a><span class="lineno">  357</span>&#160;                    <span class="comment">// 3:  .......</span></div>
+<div class="line"><a name="l00358"></a><span class="lineno">  358</span>&#160;                    <span class="comment">// 4:  %5 = load i32, ptr %vaarg.addr, align 4, !dbg !55</span></div>
+<div class="line"><a name="l00359"></a><span class="lineno">  359</span>&#160;                    <span class="comment">// 5:  .......</span></div>
+<div class="line"><a name="l00360"></a><span class="lineno">  360</span>&#160;                    <span class="comment">// 6: }</span></div>
+<div class="line"><a name="l00361"></a><span class="lineno">  361</span>&#160;                    <span class="comment">// it is challenging to precisely identify the forward value-flow of %arg (Line 2)</span></div>
+<div class="line"><a name="l00362"></a><span class="lineno">  362</span>&#160;                    <span class="comment">// because the function definition of callee (Line 2) does not have any formal args related to the actual arg %arg</span></div>
+<div class="line"><a name="l00363"></a><span class="lineno">  363</span>&#160;                    <span class="comment">// therefore we track all possible instructions like ``load i32, ptr %vaarg.addr&#39;&#39;</span></div>
+<div class="line"><a name="l00364"></a><span class="lineno">  364</span>&#160;                    <span class="keywordflow">if</span> (calleeFunc-&gt;isVarArg())</div>
+<div class="line"><a name="l00365"></a><span class="lineno">  365</span>&#160;                    {</div>
+<div class="line"><a name="l00366"></a><span class="lineno">  366</span>&#160;                        <span class="comment">// conservatively track all var args</span></div>
+<div class="line"><a name="l00367"></a><span class="lineno">  367</span>&#160;                        <span class="keywordflow">for</span> (<span class="keyword">auto</span> &amp;I: instructions(calleeFunc))</div>
+<div class="line"><a name="l00368"></a><span class="lineno">  368</span>&#160;                        {</div>
+<div class="line"><a name="l00369"></a><span class="lineno">  369</span>&#160;                            <span class="keywordflow">if</span> (<span class="keyword">auto</span> *load = llvm::dyn_cast&lt;llvm::LoadInst&gt;(&amp;I))</div>
+<div class="line"><a name="l00370"></a><span class="lineno">  370</span>&#160;                            {</div>
+<div class="line"><a name="l00371"></a><span class="lineno">  371</span>&#160;                                <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">llvm::Value</a>* loadPointer = load-&gt;getPointerOperand();</div>
+<div class="line"><a name="l00372"></a><span class="lineno">  372</span>&#160;                                <span class="keywordflow">if</span> (loadPointer-&gt;getName().compare(<span class="stringliteral">&quot;vaarg.addr&quot;</span>) == 0)</div>
+<div class="line"><a name="l00373"></a><span class="lineno">  373</span>&#160;                                {</div>
+<div class="line"><a name="l00374"></a><span class="lineno">  374</span>&#160;                                    insertInferSitesOrPushWorklist(load);</div>
+<div class="line"><a name="l00375"></a><span class="lineno">  375</span>&#160;                                }</div>
+<div class="line"><a name="l00376"></a><span class="lineno">  376</span>&#160;                            }</div>
+<div class="line"><a name="l00377"></a><span class="lineno">  377</span>&#160;                        }</div>
+<div class="line"><a name="l00378"></a><span class="lineno">  378</span>&#160;                    }</div>
+<div class="line"><a name="l00379"></a><span class="lineno">  379</span>&#160;                    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (!calleeFunc-&gt;isDeclaration())</div>
+<div class="line"><a name="l00380"></a><span class="lineno">  380</span>&#160;                    {</div>
+<div class="line"><a name="l00381"></a><span class="lineno">  381</span>&#160;                        insertInferSitesOrPushWorklist(calleeFunc-&gt;getArg(pos));</div>
+<div class="line"><a name="l00382"></a><span class="lineno">  382</span>&#160;                    }</div>
+<div class="line"><a name="l00383"></a><span class="lineno">  383</span>&#160;                }</div>
+<div class="line"><a name="l00384"></a><span class="lineno">  384</span>&#160;            }</div>
+<div class="line"><a name="l00385"></a><span class="lineno">  385</span>&#160;        }</div>
+<div class="line"><a name="l00386"></a><span class="lineno">  386</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
+<div class="line"><a name="l00387"></a><span class="lineno">  387</span>&#160;        {</div>
+<div class="line"><a name="l00388"></a><span class="lineno">  388</span>&#160;            <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Type *&gt;</a> types;</div>
+<div class="line"><a name="l00389"></a><span class="lineno">  389</span>&#160;            std::transform(infersites.begin(), infersites.end(), std::inserter(types, types.begin()),</div>
+<div class="line"><a name="l00390"></a><span class="lineno">  390</span>&#160;                           <a class="code" href="ObjTypeInference_8cpp.html#a19b8626948c43f4ce19dbc69742d309e">infersiteToType</a>);</div>
+<div class="line"><a name="l00391"></a><span class="lineno">  391</span>&#160;            _valueToInferSites[curValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(infersites);</div>
+<div class="line"><a name="l00392"></a><span class="lineno">  392</span>&#160;            _valueToType[curValue] = selectLargestSizedType(types);</div>
+<div class="line"><a name="l00393"></a><span class="lineno">  393</span>&#160;        }</div>
 <div class="line"><a name="l00394"></a><span class="lineno">  394</span>&#160;    }</div>
-<div class="line"><a name="l00395"></a><span class="lineno">  395</span>&#160; </div>
-<div class="line"><a name="l00396"></a><span class="lineno">  396</span>&#160;    <span class="comment">// simulate the call stack, the second element indicates whether we should update sources for current value</span></div>
-<div class="line"><a name="l00397"></a><span class="lineno">  397</span>&#160;    <a class="code" href="classSVF_1_1FILOWorkList.html">FILOWorkList&lt;ValueBoolPair&gt;</a> workList;</div>
-<div class="line"><a name="l00398"></a><span class="lineno">  398</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;ValueBoolPair&gt;</a> visited;</div>
-<div class="line"><a name="l00399"></a><span class="lineno">  399</span>&#160;    workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({var, <span class="keyword">false</span>});</div>
-<div class="line"><a name="l00400"></a><span class="lineno">  400</span>&#160;    <span class="keywordflow">while</span> (!workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">empty</a>())</div>
-<div class="line"><a name="l00401"></a><span class="lineno">  401</span>&#160;    {</div>
-<div class="line"><a name="l00402"></a><span class="lineno">  402</span>&#160;        <span class="keyword">auto</span> curPair = workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">pop</a>();</div>
-<div class="line"><a name="l00403"></a><span class="lineno">  403</span>&#160;        <span class="keywordflow">if</span> (visited.count(curPair)) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00404"></a><span class="lineno">  404</span>&#160;        visited.insert(curPair);</div>
-<div class="line"><a name="l00405"></a><span class="lineno">  405</span>&#160;        <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *curValue = curPair.first;</div>
-<div class="line"><a name="l00406"></a><span class="lineno">  406</span>&#160;        <span class="keywordtype">bool</span> canUpdate = curPair.second;</div>
-<div class="line"><a name="l00407"></a><span class="lineno">  407</span>&#160; </div>
-<div class="line"><a name="l00408"></a><span class="lineno">  408</span>&#160;        <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> sources;</div>
-<div class="line"><a name="l00409"></a><span class="lineno">  409</span>&#160;        <span class="keyword">auto</span> insertAllocs = [&amp;sources, &amp;canUpdate](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *source)</div>
-<div class="line"><a name="l00410"></a><span class="lineno">  410</span>&#160;        {</div>
-<div class="line"><a name="l00411"></a><span class="lineno">  411</span>&#160;            <span class="keywordflow">if</span> (canUpdate) sources.insert(source);</div>
-<div class="line"><a name="l00412"></a><span class="lineno">  412</span>&#160;        };</div>
-<div class="line"><a name="l00413"></a><span class="lineno">  413</span>&#160;        <span class="keyword">auto</span> insertAllocsOrPushWorklist = [<span class="keyword">this</span>, &amp;sources, &amp;workList, &amp;canUpdate](<span class="keyword">const</span> <span class="keyword">auto</span> &amp;pUser)</div>
-<div class="line"><a name="l00414"></a><span class="lineno">  414</span>&#160;        {</div>
-<div class="line"><a name="l00415"></a><span class="lineno">  415</span>&#160;            <span class="keyword">auto</span> vIt = _valueToAllocs.find(pUser);</div>
-<div class="line"><a name="l00416"></a><span class="lineno">  416</span>&#160;            <span class="keywordflow">if</span> (canUpdate)</div>
-<div class="line"><a name="l00417"></a><span class="lineno">  417</span>&#160;            {</div>
-<div class="line"><a name="l00418"></a><span class="lineno">  418</span>&#160;                <span class="keywordflow">if</span> (vIt != _valueToAllocs.end())</div>
-<div class="line"><a name="l00419"></a><span class="lineno">  419</span>&#160;                {</div>
-<div class="line"><a name="l00420"></a><span class="lineno">  420</span>&#160;                    sources.insert(vIt-&gt;second.begin(), vIt-&gt;second.end());</div>
-<div class="line"><a name="l00421"></a><span class="lineno">  421</span>&#160;                }</div>
-<div class="line"><a name="l00422"></a><span class="lineno">  422</span>&#160;            }</div>
-<div class="line"><a name="l00423"></a><span class="lineno">  423</span>&#160;            <span class="keywordflow">else</span></div>
-<div class="line"><a name="l00424"></a><span class="lineno">  424</span>&#160;            {</div>
-<div class="line"><a name="l00425"></a><span class="lineno">  425</span>&#160;                <span class="keywordflow">if</span> (vIt == _valueToAllocs.end()) workList.push({pUser, <span class="keyword">false</span>});</div>
-<div class="line"><a name="l00426"></a><span class="lineno">  426</span>&#160;            }</div>
-<div class="line"><a name="l00427"></a><span class="lineno">  427</span>&#160;        };</div>
-<div class="line"><a name="l00428"></a><span class="lineno">  428</span>&#160; </div>
-<div class="line"><a name="l00429"></a><span class="lineno">  429</span>&#160;        <span class="keywordflow">if</span> (!canUpdate &amp;&amp; !_valueToAllocs.count(curValue))</div>
-<div class="line"><a name="l00430"></a><span class="lineno">  430</span>&#160;        {</div>
-<div class="line"><a name="l00431"></a><span class="lineno">  431</span>&#160;            workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({curValue, <span class="keyword">true</span>});</div>
-<div class="line"><a name="l00432"></a><span class="lineno">  432</span>&#160;        }</div>
-<div class="line"><a name="l00433"></a><span class="lineno">  433</span>&#160; </div>
-<div class="line"><a name="l00434"></a><span class="lineno">  434</span>&#160;        <span class="keywordflow">if</span> (isAlloc(curValue))</div>
-<div class="line"><a name="l00435"></a><span class="lineno">  435</span>&#160;        {</div>
-<div class="line"><a name="l00436"></a><span class="lineno">  436</span>&#160;            insertAllocs(curValue);</div>
-<div class="line"><a name="l00437"></a><span class="lineno">  437</span>&#160;        }</div>
-<div class="line"><a name="l00438"></a><span class="lineno">  438</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitCastInst = SVFUtil::dyn_cast&lt;BitCastInst&gt;(curValue))</div>
-<div class="line"><a name="l00439"></a><span class="lineno">  439</span>&#160;        {</div>
-<div class="line"><a name="l00440"></a><span class="lineno">  440</span>&#160;            <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *prevVal = bitCastInst-&gt;getOperand(0);</div>
-<div class="line"><a name="l00441"></a><span class="lineno">  441</span>&#160;            insertAllocsOrPushWorklist(prevVal);</div>
-<div class="line"><a name="l00442"></a><span class="lineno">  442</span>&#160;        }</div>
-<div class="line"><a name="l00443"></a><span class="lineno">  443</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(curValue))</div>
-<div class="line"><a name="l00444"></a><span class="lineno">  444</span>&#160;        {</div>
-<div class="line"><a name="l00445"></a><span class="lineno">  445</span>&#160;            <span class="keywordflow">for</span> (<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> i = 0; i &lt; phiNode-&gt;getNumOperands(); ++i)</div>
-<div class="line"><a name="l00446"></a><span class="lineno">  446</span>&#160;            {</div>
-<div class="line"><a name="l00447"></a><span class="lineno">  447</span>&#160;                insertAllocsOrPushWorklist(phiNode-&gt;getOperand(i));</div>
-<div class="line"><a name="l00448"></a><span class="lineno">  448</span>&#160;            }</div>
-<div class="line"><a name="l00449"></a><span class="lineno">  449</span>&#160;        }</div>
-<div class="line"><a name="l00450"></a><span class="lineno">  450</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(curValue))</div>
-<div class="line"><a name="l00451"></a><span class="lineno">  451</span>&#160;        {</div>
-<div class="line"><a name="l00452"></a><span class="lineno">  452</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;use: loadInst-&gt;getPointerOperand()-&gt;uses())</div>
-<div class="line"><a name="l00453"></a><span class="lineno">  453</span>&#160;            {</div>
-<div class="line"><a name="l00454"></a><span class="lineno">  454</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#ab696aab940eb187dc81217efe8649af5">StoreInst</a> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(use.getUser()))</div>
-<div class="line"><a name="l00455"></a><span class="lineno">  455</span>&#160;                {</div>
-<div class="line"><a name="l00456"></a><span class="lineno">  456</span>&#160;                    <span class="keywordflow">if</span> (storeInst-&gt;getPointerOperand() == loadInst-&gt;getPointerOperand())</div>
-<div class="line"><a name="l00457"></a><span class="lineno">  457</span>&#160;                    {</div>
-<div class="line"><a name="l00458"></a><span class="lineno">  458</span>&#160;                        insertAllocsOrPushWorklist(storeInst-&gt;getValueOperand());</div>
-<div class="line"><a name="l00459"></a><span class="lineno">  459</span>&#160;                    }</div>
-<div class="line"><a name="l00460"></a><span class="lineno">  460</span>&#160;                }</div>
-<div class="line"><a name="l00461"></a><span class="lineno">  461</span>&#160;            }</div>
-<div class="line"><a name="l00462"></a><span class="lineno">  462</span>&#160;        }</div>
-<div class="line"><a name="l00463"></a><span class="lineno">  463</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *argument = SVFUtil::dyn_cast&lt;Argument&gt;(curValue))</div>
-<div class="line"><a name="l00464"></a><span class="lineno">  464</span>&#160;        {</div>
-<div class="line"><a name="l00465"></a><span class="lineno">  465</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;use: argument-&gt;getParent()-&gt;uses())</div>
-<div class="line"><a name="l00466"></a><span class="lineno">  466</span>&#160;            {</div>
-<div class="line"><a name="l00467"></a><span class="lineno">  467</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(use.getUser()))</div>
-<div class="line"><a name="l00468"></a><span class="lineno">  468</span>&#160;                {</div>
-<div class="line"><a name="l00469"></a><span class="lineno">  469</span>&#160;                    <span class="comment">// skip function as parameter</span></div>
-<div class="line"><a name="l00470"></a><span class="lineno">  470</span>&#160;                    <span class="comment">// e.g., call void @foo(%struct.ssl_ctx_st* %9, i32 (i8*, i32, i32, i8*)* @passwd_callback)</span></div>
-<div class="line"><a name="l00471"></a><span class="lineno">  471</span>&#160;                    <span class="keywordflow">if</span> (callBase-&gt;getCalledFunction() != argument-&gt;getParent()) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00472"></a><span class="lineno">  472</span>&#160;                    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> pos = argument-&gt;getParent()-&gt;isVarArg() ? 0 : argument-&gt;getArgNo();</div>
-<div class="line"><a name="l00473"></a><span class="lineno">  473</span>&#160;                    insertAllocsOrPushWorklist(callBase-&gt;getArgOperand(pos));</div>
-<div class="line"><a name="l00474"></a><span class="lineno">  474</span>&#160;                }</div>
-<div class="line"><a name="l00475"></a><span class="lineno">  475</span>&#160;            }</div>
-<div class="line"><a name="l00476"></a><span class="lineno">  476</span>&#160;        }</div>
-<div class="line"><a name="l00477"></a><span class="lineno">  477</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(curValue))</div>
-<div class="line"><a name="l00478"></a><span class="lineno">  478</span>&#160;        {</div>
-<div class="line"><a name="l00479"></a><span class="lineno">  479</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(!callBase-&gt;doesNotReturn(), <span class="stringliteral">&quot;callbase does not return:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(callBase));</div>
-<div class="line"><a name="l00480"></a><span class="lineno">  480</span>&#160;            <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *callee = callBase-&gt;getCalledFunction())</div>
-<div class="line"><a name="l00481"></a><span class="lineno">  481</span>&#160;            {</div>
-<div class="line"><a name="l00482"></a><span class="lineno">  482</span>&#160;                <span class="keywordflow">if</span> (!callee-&gt;isDeclaration())</div>
-<div class="line"><a name="l00483"></a><span class="lineno">  483</span>&#160;                {</div>
-<div class="line"><a name="l00484"></a><span class="lineno">  484</span>&#160;                    <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFFunction.html">SVFFunction</a> *svfFunc = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#a50fc24901350df9db890ba16a9b87e33">getSVFFunction</a>(callee);</div>
-<div class="line"><a name="l00485"></a><span class="lineno">  485</span>&#160;                    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *pValue = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#aaf9b679407f12b93afc53c157d37b444">getLLVMValue</a>(svfFunc-&gt;<a class="code" href="classSVF_1_1SVFFunction.html#ac4c28c8d205d354f3a982119f29f2aac">getExitBB</a>()-&gt;<a class="code" href="classSVF_1_1SVFBasicBlock.html#ad05f85ce931d4479f71d1947a25599dc">back</a>());</div>
-<div class="line"><a name="l00486"></a><span class="lineno">  486</span>&#160;                    <span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(pValue);</div>
-<div class="line"><a name="l00487"></a><span class="lineno">  487</span>&#160;                    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(retInst &amp;&amp; retInst-&gt;getReturnValue(), <span class="stringliteral">&quot;not return inst?&quot;</span>);</div>
-<div class="line"><a name="l00488"></a><span class="lineno">  488</span>&#160;                    insertAllocsOrPushWorklist(retInst-&gt;getReturnValue());</div>
-<div class="line"><a name="l00489"></a><span class="lineno">  489</span>&#160;                }</div>
-<div class="line"><a name="l00490"></a><span class="lineno">  490</span>&#160;            }</div>
-<div class="line"><a name="l00491"></a><span class="lineno">  491</span>&#160;        }</div>
-<div class="line"><a name="l00492"></a><span class="lineno">  492</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
-<div class="line"><a name="l00493"></a><span class="lineno">  493</span>&#160;        {</div>
-<div class="line"><a name="l00494"></a><span class="lineno">  494</span>&#160;            _valueToAllocs[curValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(sources);</div>
-<div class="line"><a name="l00495"></a><span class="lineno">  495</span>&#160;        }</div>
-<div class="line"><a name="l00496"></a><span class="lineno">  496</span>&#160;    }</div>
-<div class="line"><a name="l00497"></a><span class="lineno">  497</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;srcs = _valueToAllocs[var];</div>
-<div class="line"><a name="l00498"></a><span class="lineno">  498</span>&#160;    <span class="keywordflow">if</span> (srcs.empty())</div>
-<div class="line"><a name="l00499"></a><span class="lineno">  499</span>&#160;    {</div>
-<div class="line"><a name="l00500"></a><span class="lineno">  500</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#ac48ef12f2a6f605d6fa5d31e7623a826">WARN_MSG</a>(<span class="stringliteral">&quot;Cannot find allocation: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(var));</div>
-<div class="line"><a name="l00501"></a><span class="lineno">  501</span>&#160;    }</div>
-<div class="line"><a name="l00502"></a><span class="lineno">  502</span>&#160;    <span class="keywordflow">return</span> srcs;</div>
-<div class="line"><a name="l00503"></a><span class="lineno">  503</span>&#160;}</div>
-<div class="line"><a name="l00504"></a><span class="lineno">  504</span>&#160; </div>
-<div class="line"><a name="l00505"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">  505</a></span>&#160;<span class="keywordtype">bool</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">ObjTypeInference::isAlloc</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">SVF::Value</a> *val)</div>
-<div class="line"><a name="l00506"></a><span class="lineno">  506</span>&#160;{</div>
-<div class="line"><a name="l00507"></a><span class="lineno">  507</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="namespaceSVF_1_1LLVMUtil.html#aca11801ed6ef6ff8d2a1e85bc0fc5794">LLVMUtil::isObject</a>(val);</div>
-<div class="line"><a name="l00508"></a><span class="lineno">  508</span>&#160;}</div>
-<div class="line"><a name="l00509"></a><span class="lineno">  509</span>&#160; </div>
-<div class="line"><a name="l00514"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">  514</a></span>&#160;<span class="keywordtype">void</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">ObjTypeInference::validateTypeCheck</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *cs)</div>
-<div class="line"><a name="l00515"></a><span class="lineno">  515</span>&#160;{</div>
-<div class="line"><a name="l00516"></a><span class="lineno">  516</span>&#160;    <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *func = cs-&gt;getCalledFunction())</div>
-<div class="line"><a name="l00517"></a><span class="lineno">  517</span>&#160;    {</div>
-<div class="line"><a name="l00518"></a><span class="lineno">  518</span>&#160;        <span class="keywordflow">if</span> (func-&gt;getName().find(<a class="code" href="ObjTypeInference_8cpp.html#a5f334de99eb942058f27a1025c346f70">TYPEMALLOC</a>) != std::string::npos)</div>
-<div class="line"><a name="l00519"></a><span class="lineno">  519</span>&#160;        {</div>
-<div class="line"><a name="l00520"></a><span class="lineno">  520</span>&#160;            <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *objType = fwInferObjType(cs);</div>
-<div class="line"><a name="l00521"></a><span class="lineno">  521</span>&#160;            <span class="keyword">const</span> <span class="keyword">auto</span> *pInt =</div>
-<div class="line"><a name="l00522"></a><span class="lineno">  522</span>&#160;                SVFUtil::dyn_cast&lt;llvm::ConstantInt&gt;(cs-&gt;getOperand(1));</div>
-<div class="line"><a name="l00523"></a><span class="lineno">  523</span>&#160;            assert(pInt &amp;&amp; <span class="stringliteral">&quot;the second argument is a integer&quot;</span>);</div>
-<div class="line"><a name="l00524"></a><span class="lineno">  524</span>&#160;            <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> iTyNum = objTyToNumFields(objType);</div>
-<div class="line"><a name="l00525"></a><span class="lineno">  525</span>&#160;            <span class="keywordflow">if</span> (iTyNum &gt;= pInt-&gt;getZExtValue())</div>
-<div class="line"><a name="l00526"></a><span class="lineno">  526</span>&#160;                <a class="code" href="namespaceSVF_1_1SVFUtil.html#aed0b0b9f035057552a6a82154fd88e61">SVFUtil::outs</a>() &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a05dc00b2bd9a8176aae31b6cfffe725d">SVFUtil::sucMsg</a>(<span class="stringliteral">&quot;\t SUCCESS :&quot;</span>) &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(cs)</div>
-<div class="line"><a name="l00527"></a><span class="lineno">  527</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a4550f2fb815882edfb666ac818792064">SVFUtil::pasMsg</a>(<span class="stringliteral">&quot; TYPE: &quot;</span>)</div>
-<div class="line"><a name="l00528"></a><span class="lineno">  528</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(objType) &lt;&lt; <span class="stringliteral">&quot;\n&quot;</span>;</div>
-<div class="line"><a name="l00529"></a><span class="lineno">  529</span>&#160;            <span class="keywordflow">else</span></div>
-<div class="line"><a name="l00530"></a><span class="lineno">  530</span>&#160;            {</div>
-<div class="line"><a name="l00531"></a><span class="lineno">  531</span>&#160;                <a class="code" href="namespaceSVF_1_1SVFUtil.html#ab65033f068bfbeb0a1c52dcec3beb6bc">SVFUtil::errs</a>() &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a7655b13bbfe720ca2b8a25e0a72528e6">SVFUtil::errMsg</a>(<span class="stringliteral">&quot;\t FAILURE :&quot;</span>) &lt;&lt; <span class="stringliteral">&quot;:&quot;</span> &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(cs) &lt;&lt; <span class="stringliteral">&quot; TYPE: &quot;</span></div>
-<div class="line"><a name="l00532"></a><span class="lineno">  532</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(objType) &lt;&lt; <span class="stringliteral">&quot;\n&quot;</span>;</div>
-<div class="line"><a name="l00533"></a><span class="lineno">  533</span>&#160;                abort();</div>
-<div class="line"><a name="l00534"></a><span class="lineno">  534</span>&#160;            }</div>
-<div class="line"><a name="l00535"></a><span class="lineno">  535</span>&#160;        }</div>
-<div class="line"><a name="l00536"></a><span class="lineno">  536</span>&#160;    }</div>
-<div class="line"><a name="l00537"></a><span class="lineno">  537</span>&#160;}</div>
-<div class="line"><a name="l00538"></a><span class="lineno">  538</span>&#160; </div>
-<div class="line"><a name="l00539"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">  539</a></span>&#160;<span class="keywordtype">void</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">ObjTypeInference::typeSizeDiffTest</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#aa962cc1d782cc46553251e96b64a754b">PointerType</a> *oPTy, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *iTy, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *val)</div>
-<div class="line"><a name="l00540"></a><span class="lineno">  540</span>&#160;{</div>
-<div class="line"><a name="l00541"></a><span class="lineno">  541</span>&#160;<span class="preprocessor">#if TYPE_DEBUG</span></div>
-<div class="line"><a name="l00542"></a><span class="lineno">  542</span>&#160;    <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *oTy = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#abba4111230f6009bbf50518ee36a9870">getPtrElementType</a>(oPTy);</div>
-<div class="line"><a name="l00543"></a><span class="lineno">  543</span>&#160;    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> iTyNum = objTyToNumFields(iTy);</div>
-<div class="line"><a name="l00544"></a><span class="lineno">  544</span>&#160;    <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(oTy) &gt; iTyNum)</div>
-<div class="line"><a name="l00545"></a><span class="lineno">  545</span>&#160;    {</div>
-<div class="line"><a name="l00546"></a><span class="lineno">  546</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;original type is:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(oTy));</div>
-<div class="line"><a name="l00547"></a><span class="lineno">  547</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;infered type is:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(iTy));</div>
-<div class="line"><a name="l00548"></a><span class="lineno">  548</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a54176d0866e198769367b0dc65e049b5">ABORT_MSG</a>(<span class="stringliteral">&quot;wrong type, trace ID is &quot;</span> + std::to_string(traceId) + <span class="stringliteral">&quot;:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
-<div class="line"><a name="l00549"></a><span class="lineno">  549</span>&#160;    }</div>
-<div class="line"><a name="l00550"></a><span class="lineno">  550</span>&#160;<span class="preprocessor">#endif</span></div>
-<div class="line"><a name="l00551"></a><span class="lineno">  551</span>&#160;}</div>
-<div class="line"><a name="l00552"></a><span class="lineno">  552</span>&#160; </div>
-<div class="line"><a name="l00553"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">  553</a></span>&#160;<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> <a class="code" href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">ObjTypeInference::getArgPosInCall</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *callBase, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *arg)</div>
-<div class="line"><a name="l00554"></a><span class="lineno">  554</span>&#160;{</div>
-<div class="line"><a name="l00555"></a><span class="lineno">  555</span>&#160;    assert(callBase-&gt;hasArgument(arg) &amp;&amp; <span class="stringliteral">&quot;callInst does not have argument arg?&quot;</span>);</div>
-<div class="line"><a name="l00556"></a><span class="lineno">  556</span>&#160;    <span class="keyword">auto</span> it = std::find(callBase-&gt;arg_begin(), callBase-&gt;arg_end(), arg);</div>
-<div class="line"><a name="l00557"></a><span class="lineno">  557</span>&#160;    assert(it != callBase-&gt;arg_end() &amp;&amp; <span class="stringliteral">&quot;Didn&#39;t find argument?&quot;</span>);</div>
-<div class="line"><a name="l00558"></a><span class="lineno">  558</span>&#160;    <span class="keywordflow">return</span> std::distance(callBase-&gt;arg_begin(), it);</div>
-<div class="line"><a name="l00559"></a><span class="lineno">  559</span>&#160;}</div>
-<div class="line"><a name="l00560"></a><span class="lineno">  560</span>&#160; </div>
-<div class="line"><a name="l00561"></a><span class="lineno">  561</span>&#160; </div>
-<div class="line"><a name="l00562"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">  562</a></span>&#160;<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *<a class="code" href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">ObjTypeInference::selectLargestSizedType</a>(<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Type *&gt;</a> &amp;objTys)</div>
-<div class="line"><a name="l00563"></a><span class="lineno">  563</span>&#160;{</div>
-<div class="line"><a name="l00564"></a><span class="lineno">  564</span>&#160;    <span class="keywordflow">if</span> (objTys.empty()) <span class="keywordflow">return</span> <span class="keyword">nullptr</span>;</div>
-<div class="line"><a name="l00565"></a><span class="lineno">  565</span>&#160;    <span class="comment">// map type size to types from with key in descending order</span></div>
-<div class="line"><a name="l00566"></a><span class="lineno">  566</span>&#160;    <a class="code" href="namespaceSVF.html#aedf0d6718ca176e0b9e17ab4b30729c6">OrderedMap&lt;u32_t, OrderedSet&lt;const Type *&gt;</a>, std::greater&lt;int&gt;&gt; typeSzToTypes;</div>
-<div class="line"><a name="l00567"></a><span class="lineno">  567</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *ty: objTys)</div>
-<div class="line"><a name="l00568"></a><span class="lineno">  568</span>&#160;    {</div>
-<div class="line"><a name="l00569"></a><span class="lineno">  569</span>&#160;        typeSzToTypes[objTyToNumFields(ty)].insert(ty);</div>
-<div class="line"><a name="l00570"></a><span class="lineno">  570</span>&#160;    }</div>
-<div class="line"><a name="l00571"></a><span class="lineno">  571</span>&#160;    assert(!typeSzToTypes.empty() &amp;&amp; <span class="stringliteral">&quot;typeSzToTypes cannot be empty&quot;</span>);</div>
-<div class="line"><a name="l00572"></a><span class="lineno">  572</span>&#160;    <a class="code" href="namespaceSVF.html#a4f21e91ff8eaea5207afe5c60dbd78d7">OrderedSet&lt;const Type *&gt;</a> largestTypes;</div>
-<div class="line"><a name="l00573"></a><span class="lineno">  573</span>&#160;    std::tie(std::ignore, largestTypes) = *typeSzToTypes.begin();</div>
-<div class="line"><a name="l00574"></a><span class="lineno">  574</span>&#160;    assert(!largestTypes.empty() &amp;&amp; <span class="stringliteral">&quot;largest element cannot be empty&quot;</span>);</div>
-<div class="line"><a name="l00575"></a><span class="lineno">  575</span>&#160;    <span class="keywordflow">return</span> *largestTypes.begin();</div>
-<div class="line"><a name="l00576"></a><span class="lineno">  576</span>&#160;}</div>
-<div class="line"><a name="l00577"></a><span class="lineno">  577</span>&#160; </div>
-<div class="line"><a name="l00578"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">  578</a></span>&#160;<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> <a class="code" href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">ObjTypeInference::objTyToNumFields</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *objTy)</div>
-<div class="line"><a name="l00579"></a><span class="lineno">  579</span>&#160;{</div>
-<div class="line"><a name="l00580"></a><span class="lineno">  580</span>&#160;    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> num = <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>();</div>
-<div class="line"><a name="l00581"></a><span class="lineno">  581</span>&#160;    <span class="keywordflow">if</span> (SVFUtil::isa&lt;ArrayType&gt;(objTy))</div>
-<div class="line"><a name="l00582"></a><span class="lineno">  582</span>&#160;        num = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(objTy);</div>
-<div class="line"><a name="l00583"></a><span class="lineno">  583</span>&#160;    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *st = SVFUtil::dyn_cast&lt;StructType&gt;(objTy))</div>
-<div class="line"><a name="l00584"></a><span class="lineno">  584</span>&#160;    {</div>
-<div class="line"><a name="l00587"></a><span class="lineno">  587</span>&#160;        <span class="keywordflow">if</span> (!<a class="code" href="namespaceSVF_1_1cppUtil.html#a4e1785295e2695fae72758d8bbe4f7ac">classTyHasVTable</a>(st))</div>
-<div class="line"><a name="l00588"></a><span class="lineno">  588</span>&#160;            num = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(st);</div>
-<div class="line"><a name="l00589"></a><span class="lineno">  589</span>&#160;    }</div>
-<div class="line"><a name="l00590"></a><span class="lineno">  590</span>&#160;    <span class="keywordflow">return</span> num;</div>
-<div class="line"><a name="l00591"></a><span class="lineno">  591</span>&#160;}</div>
-<div class="line"><a name="l00592"></a><span class="lineno">  592</span>&#160; </div>
-<div class="line"><a name="l00593"></a><span class="lineno">  593</span>&#160; </div>
-<div class="line"><a name="l00603"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">  603</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;std::string&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">ObjTypeInference::inferThisPtrClsName</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *thisPtr)</div>
-<div class="line"><a name="l00604"></a><span class="lineno">  604</span>&#160;{</div>
-<div class="line"><a name="l00605"></a><span class="lineno">  605</span>&#160;    <span class="keyword">auto</span> it = _thisPtrClassNames.find(thisPtr);</div>
-<div class="line"><a name="l00606"></a><span class="lineno">  606</span>&#160;    <span class="keywordflow">if</span> (it != _thisPtrClassNames.end()) <span class="keywordflow">return</span> it-&gt;second;</div>
-<div class="line"><a name="l00607"></a><span class="lineno">  607</span>&#160; </div>
-<div class="line"><a name="l00608"></a><span class="lineno">  608</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;std::string&gt;</a> names;</div>
-<div class="line"><a name="l00609"></a><span class="lineno">  609</span>&#160; </div>
-<div class="line"><a name="l00610"></a><span class="lineno">  610</span>&#160;    <span class="comment">// Lambda for checking a function is a valid name source &amp; extracting a class name from it</span></div>
-<div class="line"><a name="l00611"></a><span class="lineno">  611</span>&#160;    <span class="keyword">auto</span> addNamesFromFunc = [&amp;names](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *func) -&gt; <span class="keywordtype">void</span></div>
-<div class="line"><a name="l00612"></a><span class="lineno">  612</span>&#160;    {</div>
-<div class="line"><a name="l00613"></a><span class="lineno">  613</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(func), <span class="stringliteral">&quot;Func is invalid class name source: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(func));</div>
-<div class="line"><a name="l00614"></a><span class="lineno">  614</span>&#160;        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;<a class="code" href="cJSON_8h.html#a25d22ecc7e656d2c59332072684e8766">name</a> : <a class="code" href="namespaceSVF_1_1cppUtil.html#ae97bb256f20aa617f21a49c98d46177a">extractClsNamesFromFunc</a>(func)) names.insert(<a class="code" href="cJSON_8h.html#a25d22ecc7e656d2c59332072684e8766">name</a>);</div>
-<div class="line"><a name="l00615"></a><span class="lineno">  615</span>&#160;    };</div>
+<div class="line"><a name="l00395"></a><span class="lineno">  395</span>&#160;    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> = _valueToType[var];</div>
+<div class="line"><a name="l00396"></a><span class="lineno">  396</span>&#160;    <span class="keywordflow">if</span> (<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> == <span class="keyword">nullptr</span>)</div>
+<div class="line"><a name="l00397"></a><span class="lineno">  397</span>&#160;    {</div>
+<div class="line"><a name="l00398"></a><span class="lineno">  398</span>&#160;        <a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a> = defaultType(var);</div>
+<div class="line"><a name="l00399"></a><span class="lineno">  399</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#ac48ef12f2a6f605d6fa5d31e7623a826">WARN_MSG</a>(<span class="stringliteral">&quot;Using default type, trace ID is &quot;</span> + std::to_string(traceId) + <span class="stringliteral">&quot;:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(var));</div>
+<div class="line"><a name="l00400"></a><span class="lineno">  400</span>&#160;    }</div>
+<div class="line"><a name="l00401"></a><span class="lineno">  401</span>&#160;    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a>, <span class="stringliteral">&quot;type cannot be a null ptr&quot;</span>);</div>
+<div class="line"><a name="l00402"></a><span class="lineno">  402</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a>;</div>
+<div class="line"><a name="l00403"></a><span class="lineno">  403</span>&#160;}</div>
+<div class="line"><a name="l00404"></a><span class="lineno">  404</span>&#160; </div>
+<div class="line"><a name="l00410"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">  410</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">ObjTypeInference::bwfindAllocOfVar</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *var)</div>
+<div class="line"><a name="l00411"></a><span class="lineno">  411</span>&#160;{</div>
+<div class="line"><a name="l00412"></a><span class="lineno">  412</span>&#160; </div>
+<div class="line"><a name="l00413"></a><span class="lineno">  413</span>&#160;    <span class="comment">// consult cache</span></div>
+<div class="line"><a name="l00414"></a><span class="lineno">  414</span>&#160;    <span class="keyword">auto</span> tIt = _valueToAllocs.find(var);</div>
+<div class="line"><a name="l00415"></a><span class="lineno">  415</span>&#160;    <span class="keywordflow">if</span> (tIt != _valueToAllocs.end())</div>
+<div class="line"><a name="l00416"></a><span class="lineno">  416</span>&#160;    {</div>
+<div class="line"><a name="l00417"></a><span class="lineno">  417</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
+<div class="line"><a name="l00418"></a><span class="lineno">  418</span>&#160;    }</div>
+<div class="line"><a name="l00419"></a><span class="lineno">  419</span>&#160; </div>
+<div class="line"><a name="l00420"></a><span class="lineno">  420</span>&#160;    <span class="comment">// simulate the call stack, the second element indicates whether we should update sources for current value</span></div>
+<div class="line"><a name="l00421"></a><span class="lineno">  421</span>&#160;    <a class="code" href="classSVF_1_1FILOWorkList.html">FILOWorkList&lt;ValueBoolPair&gt;</a> workList;</div>
+<div class="line"><a name="l00422"></a><span class="lineno">  422</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;ValueBoolPair&gt;</a> visited;</div>
+<div class="line"><a name="l00423"></a><span class="lineno">  423</span>&#160;    workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({var, <span class="keyword">false</span>});</div>
+<div class="line"><a name="l00424"></a><span class="lineno">  424</span>&#160;    <span class="keywordflow">while</span> (!workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">empty</a>())</div>
+<div class="line"><a name="l00425"></a><span class="lineno">  425</span>&#160;    {</div>
+<div class="line"><a name="l00426"></a><span class="lineno">  426</span>&#160;        <span class="keyword">auto</span> curPair = workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">pop</a>();</div>
+<div class="line"><a name="l00427"></a><span class="lineno">  427</span>&#160;        <span class="keywordflow">if</span> (visited.count(curPair)) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00428"></a><span class="lineno">  428</span>&#160;        visited.insert(curPair);</div>
+<div class="line"><a name="l00429"></a><span class="lineno">  429</span>&#160;        <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *curValue = curPair.first;</div>
+<div class="line"><a name="l00430"></a><span class="lineno">  430</span>&#160;        <span class="keywordtype">bool</span> canUpdate = curPair.second;</div>
+<div class="line"><a name="l00431"></a><span class="lineno">  431</span>&#160; </div>
+<div class="line"><a name="l00432"></a><span class="lineno">  432</span>&#160;        <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> sources;</div>
+<div class="line"><a name="l00433"></a><span class="lineno">  433</span>&#160;        <span class="keyword">auto</span> insertAllocs = [&amp;sources, &amp;canUpdate](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *source)</div>
+<div class="line"><a name="l00434"></a><span class="lineno">  434</span>&#160;        {</div>
+<div class="line"><a name="l00435"></a><span class="lineno">  435</span>&#160;            <span class="keywordflow">if</span> (canUpdate) sources.insert(source);</div>
+<div class="line"><a name="l00436"></a><span class="lineno">  436</span>&#160;        };</div>
+<div class="line"><a name="l00437"></a><span class="lineno">  437</span>&#160;        <span class="keyword">auto</span> insertAllocsOrPushWorklist = [<span class="keyword">this</span>, &amp;sources, &amp;workList, &amp;canUpdate](<span class="keyword">const</span> <span class="keyword">auto</span> &amp;pUser)</div>
+<div class="line"><a name="l00438"></a><span class="lineno">  438</span>&#160;        {</div>
+<div class="line"><a name="l00439"></a><span class="lineno">  439</span>&#160;            <span class="keyword">auto</span> vIt = _valueToAllocs.find(pUser);</div>
+<div class="line"><a name="l00440"></a><span class="lineno">  440</span>&#160;            <span class="keywordflow">if</span> (canUpdate)</div>
+<div class="line"><a name="l00441"></a><span class="lineno">  441</span>&#160;            {</div>
+<div class="line"><a name="l00442"></a><span class="lineno">  442</span>&#160;                <span class="keywordflow">if</span> (vIt != _valueToAllocs.end())</div>
+<div class="line"><a name="l00443"></a><span class="lineno">  443</span>&#160;                {</div>
+<div class="line"><a name="l00444"></a><span class="lineno">  444</span>&#160;                    sources.insert(vIt-&gt;second.begin(), vIt-&gt;second.end());</div>
+<div class="line"><a name="l00445"></a><span class="lineno">  445</span>&#160;                }</div>
+<div class="line"><a name="l00446"></a><span class="lineno">  446</span>&#160;            }</div>
+<div class="line"><a name="l00447"></a><span class="lineno">  447</span>&#160;            <span class="keywordflow">else</span></div>
+<div class="line"><a name="l00448"></a><span class="lineno">  448</span>&#160;            {</div>
+<div class="line"><a name="l00449"></a><span class="lineno">  449</span>&#160;                <span class="keywordflow">if</span> (vIt == _valueToAllocs.end()) workList.push({pUser, <span class="keyword">false</span>});</div>
+<div class="line"><a name="l00450"></a><span class="lineno">  450</span>&#160;            }</div>
+<div class="line"><a name="l00451"></a><span class="lineno">  451</span>&#160;        };</div>
+<div class="line"><a name="l00452"></a><span class="lineno">  452</span>&#160; </div>
+<div class="line"><a name="l00453"></a><span class="lineno">  453</span>&#160;        <span class="keywordflow">if</span> (!canUpdate &amp;&amp; !_valueToAllocs.count(curValue))</div>
+<div class="line"><a name="l00454"></a><span class="lineno">  454</span>&#160;        {</div>
+<div class="line"><a name="l00455"></a><span class="lineno">  455</span>&#160;            workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({curValue, <span class="keyword">true</span>});</div>
+<div class="line"><a name="l00456"></a><span class="lineno">  456</span>&#160;        }</div>
+<div class="line"><a name="l00457"></a><span class="lineno">  457</span>&#160; </div>
+<div class="line"><a name="l00458"></a><span class="lineno">  458</span>&#160;        <span class="keywordflow">if</span> (isAlloc(curValue))</div>
+<div class="line"><a name="l00459"></a><span class="lineno">  459</span>&#160;        {</div>
+<div class="line"><a name="l00460"></a><span class="lineno">  460</span>&#160;            insertAllocs(curValue);</div>
+<div class="line"><a name="l00461"></a><span class="lineno">  461</span>&#160;        }</div>
+<div class="line"><a name="l00462"></a><span class="lineno">  462</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitCastInst = SVFUtil::dyn_cast&lt;BitCastInst&gt;(curValue))</div>
+<div class="line"><a name="l00463"></a><span class="lineno">  463</span>&#160;        {</div>
+<div class="line"><a name="l00464"></a><span class="lineno">  464</span>&#160;            <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *prevVal = bitCastInst-&gt;getOperand(0);</div>
+<div class="line"><a name="l00465"></a><span class="lineno">  465</span>&#160;            insertAllocsOrPushWorklist(prevVal);</div>
+<div class="line"><a name="l00466"></a><span class="lineno">  466</span>&#160;        }</div>
+<div class="line"><a name="l00467"></a><span class="lineno">  467</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(curValue))</div>
+<div class="line"><a name="l00468"></a><span class="lineno">  468</span>&#160;        {</div>
+<div class="line"><a name="l00469"></a><span class="lineno">  469</span>&#160;            <span class="keywordflow">for</span> (<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> i = 0; i &lt; phiNode-&gt;getNumOperands(); ++i)</div>
+<div class="line"><a name="l00470"></a><span class="lineno">  470</span>&#160;            {</div>
+<div class="line"><a name="l00471"></a><span class="lineno">  471</span>&#160;                insertAllocsOrPushWorklist(phiNode-&gt;getOperand(i));</div>
+<div class="line"><a name="l00472"></a><span class="lineno">  472</span>&#160;            }</div>
+<div class="line"><a name="l00473"></a><span class="lineno">  473</span>&#160;        }</div>
+<div class="line"><a name="l00474"></a><span class="lineno">  474</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(curValue))</div>
+<div class="line"><a name="l00475"></a><span class="lineno">  475</span>&#160;        {</div>
+<div class="line"><a name="l00476"></a><span class="lineno">  476</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;use: loadInst-&gt;getPointerOperand()-&gt;users())</div>
+<div class="line"><a name="l00477"></a><span class="lineno">  477</span>&#160;            {</div>
+<div class="line"><a name="l00478"></a><span class="lineno">  478</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#ab696aab940eb187dc81217efe8649af5">StoreInst</a> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(use))</div>
+<div class="line"><a name="l00479"></a><span class="lineno">  479</span>&#160;                {</div>
+<div class="line"><a name="l00480"></a><span class="lineno">  480</span>&#160;                    <span class="keywordflow">if</span> (storeInst-&gt;getPointerOperand() == loadInst-&gt;getPointerOperand())</div>
+<div class="line"><a name="l00481"></a><span class="lineno">  481</span>&#160;                    {</div>
+<div class="line"><a name="l00482"></a><span class="lineno">  482</span>&#160;                        insertAllocsOrPushWorklist(storeInst-&gt;getValueOperand());</div>
+<div class="line"><a name="l00483"></a><span class="lineno">  483</span>&#160;                    }</div>
+<div class="line"><a name="l00484"></a><span class="lineno">  484</span>&#160;                }</div>
+<div class="line"><a name="l00485"></a><span class="lineno">  485</span>&#160;            }</div>
+<div class="line"><a name="l00486"></a><span class="lineno">  486</span>&#160;        }</div>
+<div class="line"><a name="l00487"></a><span class="lineno">  487</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *argument = SVFUtil::dyn_cast&lt;Argument&gt;(curValue))</div>
+<div class="line"><a name="l00488"></a><span class="lineno">  488</span>&#160;        {</div>
+<div class="line"><a name="l00489"></a><span class="lineno">  489</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;use: argument-&gt;getParent()-&gt;users())</div>
+<div class="line"><a name="l00490"></a><span class="lineno">  490</span>&#160;            {</div>
+<div class="line"><a name="l00491"></a><span class="lineno">  491</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(use))</div>
+<div class="line"><a name="l00492"></a><span class="lineno">  492</span>&#160;                {</div>
+<div class="line"><a name="l00493"></a><span class="lineno">  493</span>&#160;                    <span class="comment">// skip function as parameter</span></div>
+<div class="line"><a name="l00494"></a><span class="lineno">  494</span>&#160;                    <span class="comment">// e.g., call void @foo(%struct.ssl_ctx_st* %9, i32 (i8*, i32, i32, i8*)* @passwd_callback)</span></div>
+<div class="line"><a name="l00495"></a><span class="lineno">  495</span>&#160;                    <span class="keywordflow">if</span> (callBase-&gt;getCalledFunction() != argument-&gt;getParent()) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00496"></a><span class="lineno">  496</span>&#160;                    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> pos = argument-&gt;getParent()-&gt;isVarArg() ? 0 : argument-&gt;getArgNo();</div>
+<div class="line"><a name="l00497"></a><span class="lineno">  497</span>&#160;                    insertAllocsOrPushWorklist(callBase-&gt;getArgOperand(pos));</div>
+<div class="line"><a name="l00498"></a><span class="lineno">  498</span>&#160;                }</div>
+<div class="line"><a name="l00499"></a><span class="lineno">  499</span>&#160;            }</div>
+<div class="line"><a name="l00500"></a><span class="lineno">  500</span>&#160;        }</div>
+<div class="line"><a name="l00501"></a><span class="lineno">  501</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(curValue))</div>
+<div class="line"><a name="l00502"></a><span class="lineno">  502</span>&#160;        {</div>
+<div class="line"><a name="l00503"></a><span class="lineno">  503</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(!callBase-&gt;doesNotReturn(), <span class="stringliteral">&quot;callbase does not return:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(callBase));</div>
+<div class="line"><a name="l00504"></a><span class="lineno">  504</span>&#160;            <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *callee = callBase-&gt;getCalledFunction())</div>
+<div class="line"><a name="l00505"></a><span class="lineno">  505</span>&#160;            {</div>
+<div class="line"><a name="l00506"></a><span class="lineno">  506</span>&#160;                <span class="keywordflow">if</span> (!callee-&gt;isDeclaration())</div>
+<div class="line"><a name="l00507"></a><span class="lineno">  507</span>&#160;                {</div>
+<div class="line"><a name="l00508"></a><span class="lineno">  508</span>&#160;                    <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFFunction.html">SVFFunction</a> *svfFunc = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#a50fc24901350df9db890ba16a9b87e33">getSVFFunction</a>(callee);</div>
+<div class="line"><a name="l00509"></a><span class="lineno">  509</span>&#160;                    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *pValue = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#aaf9b679407f12b93afc53c157d37b444">getLLVMValue</a>(svfFunc-&gt;<a class="code" href="classSVF_1_1SVFFunction.html#ac4c28c8d205d354f3a982119f29f2aac">getExitBB</a>()-&gt;<a class="code" href="classSVF_1_1SVFBasicBlock.html#ad05f85ce931d4479f71d1947a25599dc">back</a>());</div>
+<div class="line"><a name="l00510"></a><span class="lineno">  510</span>&#160;                    <span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(pValue);</div>
+<div class="line"><a name="l00511"></a><span class="lineno">  511</span>&#160;                    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(retInst &amp;&amp; retInst-&gt;getReturnValue(), <span class="stringliteral">&quot;not return inst?&quot;</span>);</div>
+<div class="line"><a name="l00512"></a><span class="lineno">  512</span>&#160;                    insertAllocsOrPushWorklist(retInst-&gt;getReturnValue());</div>
+<div class="line"><a name="l00513"></a><span class="lineno">  513</span>&#160;                }</div>
+<div class="line"><a name="l00514"></a><span class="lineno">  514</span>&#160;            }</div>
+<div class="line"><a name="l00515"></a><span class="lineno">  515</span>&#160;        }</div>
+<div class="line"><a name="l00516"></a><span class="lineno">  516</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
+<div class="line"><a name="l00517"></a><span class="lineno">  517</span>&#160;        {</div>
+<div class="line"><a name="l00518"></a><span class="lineno">  518</span>&#160;            _valueToAllocs[curValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(sources);</div>
+<div class="line"><a name="l00519"></a><span class="lineno">  519</span>&#160;        }</div>
+<div class="line"><a name="l00520"></a><span class="lineno">  520</span>&#160;    }</div>
+<div class="line"><a name="l00521"></a><span class="lineno">  521</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;srcs = _valueToAllocs[var];</div>
+<div class="line"><a name="l00522"></a><span class="lineno">  522</span>&#160;    <span class="keywordflow">if</span> (srcs.empty())</div>
+<div class="line"><a name="l00523"></a><span class="lineno">  523</span>&#160;    {</div>
+<div class="line"><a name="l00524"></a><span class="lineno">  524</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#ac48ef12f2a6f605d6fa5d31e7623a826">WARN_MSG</a>(<span class="stringliteral">&quot;Cannot find allocation: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(var));</div>
+<div class="line"><a name="l00525"></a><span class="lineno">  525</span>&#160;    }</div>
+<div class="line"><a name="l00526"></a><span class="lineno">  526</span>&#160;    <span class="keywordflow">return</span> srcs;</div>
+<div class="line"><a name="l00527"></a><span class="lineno">  527</span>&#160;}</div>
+<div class="line"><a name="l00528"></a><span class="lineno">  528</span>&#160; </div>
+<div class="line"><a name="l00529"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">  529</a></span>&#160;<span class="keywordtype">bool</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">ObjTypeInference::isAlloc</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">SVF::Value</a> *val)</div>
+<div class="line"><a name="l00530"></a><span class="lineno">  530</span>&#160;{</div>
+<div class="line"><a name="l00531"></a><span class="lineno">  531</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="namespaceSVF_1_1LLVMUtil.html#aca11801ed6ef6ff8d2a1e85bc0fc5794">LLVMUtil::isObject</a>(val);</div>
+<div class="line"><a name="l00532"></a><span class="lineno">  532</span>&#160;}</div>
+<div class="line"><a name="l00533"></a><span class="lineno">  533</span>&#160; </div>
+<div class="line"><a name="l00538"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">  538</a></span>&#160;<span class="keywordtype">void</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">ObjTypeInference::validateTypeCheck</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *cs)</div>
+<div class="line"><a name="l00539"></a><span class="lineno">  539</span>&#160;{</div>
+<div class="line"><a name="l00540"></a><span class="lineno">  540</span>&#160;    <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *func = cs-&gt;getCalledFunction())</div>
+<div class="line"><a name="l00541"></a><span class="lineno">  541</span>&#160;    {</div>
+<div class="line"><a name="l00542"></a><span class="lineno">  542</span>&#160;        <span class="keywordflow">if</span> (func-&gt;getName().find(<a class="code" href="ObjTypeInference_8cpp.html#a5f334de99eb942058f27a1025c346f70">TYPEMALLOC</a>) != std::string::npos)</div>
+<div class="line"><a name="l00543"></a><span class="lineno">  543</span>&#160;        {</div>
+<div class="line"><a name="l00544"></a><span class="lineno">  544</span>&#160;            <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *objType = fwInferObjType(cs);</div>
+<div class="line"><a name="l00545"></a><span class="lineno">  545</span>&#160;            <span class="keyword">const</span> <span class="keyword">auto</span> *pInt =</div>
+<div class="line"><a name="l00546"></a><span class="lineno">  546</span>&#160;                SVFUtil::dyn_cast&lt;llvm::ConstantInt&gt;(cs-&gt;getOperand(1));</div>
+<div class="line"><a name="l00547"></a><span class="lineno">  547</span>&#160;            assert(pInt &amp;&amp; <span class="stringliteral">&quot;the second argument is a integer&quot;</span>);</div>
+<div class="line"><a name="l00548"></a><span class="lineno">  548</span>&#160;            <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> iTyNum = objTyToNumFields(objType);</div>
+<div class="line"><a name="l00549"></a><span class="lineno">  549</span>&#160;            <span class="keywordflow">if</span> (iTyNum &gt;= pInt-&gt;getZExtValue())</div>
+<div class="line"><a name="l00550"></a><span class="lineno">  550</span>&#160;                <a class="code" href="namespaceSVF_1_1SVFUtil.html#aed0b0b9f035057552a6a82154fd88e61">SVFUtil::outs</a>() &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a05dc00b2bd9a8176aae31b6cfffe725d">SVFUtil::sucMsg</a>(<span class="stringliteral">&quot;\t SUCCESS :&quot;</span>) &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(cs)</div>
+<div class="line"><a name="l00551"></a><span class="lineno">  551</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a4550f2fb815882edfb666ac818792064">SVFUtil::pasMsg</a>(<span class="stringliteral">&quot; TYPE: &quot;</span>)</div>
+<div class="line"><a name="l00552"></a><span class="lineno">  552</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(objType) &lt;&lt; <span class="stringliteral">&quot;\n&quot;</span>;</div>
+<div class="line"><a name="l00553"></a><span class="lineno">  553</span>&#160;            <span class="keywordflow">else</span></div>
+<div class="line"><a name="l00554"></a><span class="lineno">  554</span>&#160;            {</div>
+<div class="line"><a name="l00555"></a><span class="lineno">  555</span>&#160;                <a class="code" href="namespaceSVF_1_1SVFUtil.html#ab65033f068bfbeb0a1c52dcec3beb6bc">SVFUtil::errs</a>() &lt;&lt; <a class="code" href="namespaceSVF_1_1SVFUtil.html#a7655b13bbfe720ca2b8a25e0a72528e6">SVFUtil::errMsg</a>(<span class="stringliteral">&quot;\t FAILURE :&quot;</span>) &lt;&lt; <span class="stringliteral">&quot;:&quot;</span> &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(cs) &lt;&lt; <span class="stringliteral">&quot; TYPE: &quot;</span></div>
+<div class="line"><a name="l00556"></a><span class="lineno">  556</span>&#160;                                &lt;&lt; <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(objType) &lt;&lt; <span class="stringliteral">&quot;\n&quot;</span>;</div>
+<div class="line"><a name="l00557"></a><span class="lineno">  557</span>&#160;                abort();</div>
+<div class="line"><a name="l00558"></a><span class="lineno">  558</span>&#160;            }</div>
+<div class="line"><a name="l00559"></a><span class="lineno">  559</span>&#160;        }</div>
+<div class="line"><a name="l00560"></a><span class="lineno">  560</span>&#160;    }</div>
+<div class="line"><a name="l00561"></a><span class="lineno">  561</span>&#160;}</div>
+<div class="line"><a name="l00562"></a><span class="lineno">  562</span>&#160; </div>
+<div class="line"><a name="l00563"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">  563</a></span>&#160;<span class="keywordtype">void</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">ObjTypeInference::typeSizeDiffTest</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#aa962cc1d782cc46553251e96b64a754b">PointerType</a> *oPTy, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *iTy, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *val)</div>
+<div class="line"><a name="l00564"></a><span class="lineno">  564</span>&#160;{</div>
+<div class="line"><a name="l00565"></a><span class="lineno">  565</span>&#160;<span class="preprocessor">#if TYPE_DEBUG</span></div>
+<div class="line"><a name="l00566"></a><span class="lineno">  566</span>&#160;    <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *oTy = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#abba4111230f6009bbf50518ee36a9870">getPtrElementType</a>(oPTy);</div>
+<div class="line"><a name="l00567"></a><span class="lineno">  567</span>&#160;    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> iTyNum = objTyToNumFields(iTy);</div>
+<div class="line"><a name="l00568"></a><span class="lineno">  568</span>&#160;    <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(oTy) &gt; iTyNum)</div>
+<div class="line"><a name="l00569"></a><span class="lineno">  569</span>&#160;    {</div>
+<div class="line"><a name="l00570"></a><span class="lineno">  570</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;original type is:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(oTy));</div>
+<div class="line"><a name="l00571"></a><span class="lineno">  571</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;infered type is:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">dumpType</a>(iTy));</div>
+<div class="line"><a name="l00572"></a><span class="lineno">  572</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a54176d0866e198769367b0dc65e049b5">ABORT_MSG</a>(<span class="stringliteral">&quot;wrong type, trace ID is &quot;</span> + std::to_string(traceId) + <span class="stringliteral">&quot;:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
+<div class="line"><a name="l00573"></a><span class="lineno">  573</span>&#160;    }</div>
+<div class="line"><a name="l00574"></a><span class="lineno">  574</span>&#160;<span class="preprocessor">#endif</span></div>
+<div class="line"><a name="l00575"></a><span class="lineno">  575</span>&#160;}</div>
+<div class="line"><a name="l00576"></a><span class="lineno">  576</span>&#160; </div>
+<div class="line"><a name="l00577"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">  577</a></span>&#160;<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> <a class="code" href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">ObjTypeInference::getArgPosInCall</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *callBase, <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *arg)</div>
+<div class="line"><a name="l00578"></a><span class="lineno">  578</span>&#160;{</div>
+<div class="line"><a name="l00579"></a><span class="lineno">  579</span>&#160;    assert(callBase-&gt;hasArgument(arg) &amp;&amp; <span class="stringliteral">&quot;callInst does not have argument arg?&quot;</span>);</div>
+<div class="line"><a name="l00580"></a><span class="lineno">  580</span>&#160;    <span class="keyword">auto</span> it = std::find(callBase-&gt;arg_begin(), callBase-&gt;arg_end(), arg);</div>
+<div class="line"><a name="l00581"></a><span class="lineno">  581</span>&#160;    assert(it != callBase-&gt;arg_end() &amp;&amp; <span class="stringliteral">&quot;Didn&#39;t find argument?&quot;</span>);</div>
+<div class="line"><a name="l00582"></a><span class="lineno">  582</span>&#160;    <span class="keywordflow">return</span> std::distance(callBase-&gt;arg_begin(), it);</div>
+<div class="line"><a name="l00583"></a><span class="lineno">  583</span>&#160;}</div>
+<div class="line"><a name="l00584"></a><span class="lineno">  584</span>&#160; </div>
+<div class="line"><a name="l00585"></a><span class="lineno">  585</span>&#160; </div>
+<div class="line"><a name="l00586"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">  586</a></span>&#160;<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *<a class="code" href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">ObjTypeInference::selectLargestSizedType</a>(<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Type *&gt;</a> &amp;objTys)</div>
+<div class="line"><a name="l00587"></a><span class="lineno">  587</span>&#160;{</div>
+<div class="line"><a name="l00588"></a><span class="lineno">  588</span>&#160;    <span class="keywordflow">if</span> (objTys.empty()) <span class="keywordflow">return</span> <span class="keyword">nullptr</span>;</div>
+<div class="line"><a name="l00589"></a><span class="lineno">  589</span>&#160;    <span class="comment">// map type size to types from with key in descending order</span></div>
+<div class="line"><a name="l00590"></a><span class="lineno">  590</span>&#160;    <a class="code" href="namespaceSVF.html#aedf0d6718ca176e0b9e17ab4b30729c6">OrderedMap&lt;u32_t, OrderedSet&lt;const Type *&gt;</a>, std::greater&lt;int&gt;&gt; typeSzToTypes;</div>
+<div class="line"><a name="l00591"></a><span class="lineno">  591</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *ty: objTys)</div>
+<div class="line"><a name="l00592"></a><span class="lineno">  592</span>&#160;    {</div>
+<div class="line"><a name="l00593"></a><span class="lineno">  593</span>&#160;        typeSzToTypes[objTyToNumFields(ty)].insert(ty);</div>
+<div class="line"><a name="l00594"></a><span class="lineno">  594</span>&#160;    }</div>
+<div class="line"><a name="l00595"></a><span class="lineno">  595</span>&#160;    assert(!typeSzToTypes.empty() &amp;&amp; <span class="stringliteral">&quot;typeSzToTypes cannot be empty&quot;</span>);</div>
+<div class="line"><a name="l00596"></a><span class="lineno">  596</span>&#160;    <a class="code" href="namespaceSVF.html#a4f21e91ff8eaea5207afe5c60dbd78d7">OrderedSet&lt;const Type *&gt;</a> largestTypes;</div>
+<div class="line"><a name="l00597"></a><span class="lineno">  597</span>&#160;    std::tie(std::ignore, largestTypes) = *typeSzToTypes.begin();</div>
+<div class="line"><a name="l00598"></a><span class="lineno">  598</span>&#160;    assert(!largestTypes.empty() &amp;&amp; <span class="stringliteral">&quot;largest element cannot be empty&quot;</span>);</div>
+<div class="line"><a name="l00599"></a><span class="lineno">  599</span>&#160;    <span class="keywordflow">return</span> *largestTypes.begin();</div>
+<div class="line"><a name="l00600"></a><span class="lineno">  600</span>&#160;}</div>
+<div class="line"><a name="l00601"></a><span class="lineno">  601</span>&#160; </div>
+<div class="line"><a name="l00602"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">  602</a></span>&#160;<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> <a class="code" href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">ObjTypeInference::objTyToNumFields</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">Type</a> *objTy)</div>
+<div class="line"><a name="l00603"></a><span class="lineno">  603</span>&#160;{</div>
+<div class="line"><a name="l00604"></a><span class="lineno">  604</span>&#160;    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> num = <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>();</div>
+<div class="line"><a name="l00605"></a><span class="lineno">  605</span>&#160;    <span class="keywordflow">if</span> (SVFUtil::isa&lt;ArrayType&gt;(objTy))</div>
+<div class="line"><a name="l00606"></a><span class="lineno">  606</span>&#160;        num = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(objTy);</div>
+<div class="line"><a name="l00607"></a><span class="lineno">  607</span>&#160;    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *st = SVFUtil::dyn_cast&lt;StructType&gt;(objTy))</div>
+<div class="line"><a name="l00608"></a><span class="lineno">  608</span>&#160;    {</div>
+<div class="line"><a name="l00611"></a><span class="lineno">  611</span>&#160;        <span class="keywordflow">if</span> (!<a class="code" href="namespaceSVF_1_1cppUtil.html#a4e1785295e2695fae72758d8bbe4f7ac">classTyHasVTable</a>(st))</div>
+<div class="line"><a name="l00612"></a><span class="lineno">  612</span>&#160;            num = <a class="code" href="namespaceSVF_1_1LLVMUtil.html#ab5b55fce942ab6d7995541f3fe0503f8">getNumOfElements</a>(st);</div>
+<div class="line"><a name="l00613"></a><span class="lineno">  613</span>&#160;    }</div>
+<div class="line"><a name="l00614"></a><span class="lineno">  614</span>&#160;    <span class="keywordflow">return</span> num;</div>
+<div class="line"><a name="l00615"></a><span class="lineno">  615</span>&#160;}</div>
 <div class="line"><a name="l00616"></a><span class="lineno">  616</span>&#160; </div>
-<div class="line"><a name="l00617"></a><span class="lineno">  617</span>&#160;    <span class="comment">// Lambda for getting callee &amp; extracting class name for calls to constructors/destructors/template funcs</span></div>
-<div class="line"><a name="l00618"></a><span class="lineno">  618</span>&#160;    <span class="keyword">auto</span> addNamesFromCall = [&amp;names, &amp;addNamesFromFunc](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *call) -&gt; <span class="keywordtype">void</span></div>
-<div class="line"><a name="l00619"></a><span class="lineno">  619</span>&#160;    {</div>
-<div class="line"><a name="l00620"></a><span class="lineno">  620</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(call), <span class="stringliteral">&quot;Call is invalid class name source: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(call));</div>
-<div class="line"><a name="l00621"></a><span class="lineno">  621</span>&#160; </div>
-<div class="line"><a name="l00622"></a><span class="lineno">  622</span>&#160;        <span class="keyword">const</span> <span class="keyword">auto</span> *func = call-&gt;getCalledFunction();</div>
-<div class="line"><a name="l00623"></a><span class="lineno">  623</span>&#160;        <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#afd5fcc8fe98df5f057ff2e04c68b49b5">isDynCast</a>(func)) names.insert(<a class="code" href="namespaceSVF_1_1cppUtil.html#a26ccd6abf127a7ccc34a973f7b13161b">extractClsNameFromDynCast</a>(call));</div>
-<div class="line"><a name="l00624"></a><span class="lineno">  624</span>&#160;        <span class="keywordflow">else</span> addNamesFromFunc(func);</div>
-<div class="line"><a name="l00625"></a><span class="lineno">  625</span>&#160;    };</div>
-<div class="line"><a name="l00626"></a><span class="lineno">  626</span>&#160; </div>
-<div class="line"><a name="l00627"></a><span class="lineno">  627</span>&#160;    <span class="comment">// Walk backwards to find all valid source sites for the pointer (e.g. stack/global/heap variables)</span></div>
-<div class="line"><a name="l00628"></a><span class="lineno">  628</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;val: bwFindAllocOrClsNameSources(thisPtr))</div>
-<div class="line"><a name="l00629"></a><span class="lineno">  629</span>&#160;    {</div>
-<div class="line"><a name="l00630"></a><span class="lineno">  630</span>&#160;        <span class="comment">// A source site is either a constructor/destructor/template function from which the class name can be</span></div>
-<div class="line"><a name="l00631"></a><span class="lineno">  631</span>&#160;        <span class="comment">// extracted; a call to a C++ constructor/destructor/template function from which the class name can be</span></div>
-<div class="line"><a name="l00632"></a><span class="lineno">  632</span>&#160;        <span class="comment">// extracted; or an allocation site of an object (i.e. a stack/global/heap variable), from which a</span></div>
-<div class="line"><a name="l00633"></a><span class="lineno">  633</span>&#160;        <span class="comment">// forward walk can be performed to find calls to C++ constructor/destructor/template functions from</span></div>
-<div class="line"><a name="l00634"></a><span class="lineno">  634</span>&#160;        <span class="comment">// which the class&#39; name can then be extracted; skip starting pointer</span></div>
-<div class="line"><a name="l00635"></a><span class="lineno">  635</span>&#160;        <span class="keywordflow">if</span> (val == thisPtr) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00636"></a><span class="lineno">  636</span>&#160; </div>
-<div class="line"><a name="l00637"></a><span class="lineno">  637</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *func = SVFUtil::dyn_cast&lt;Function&gt;(val))</div>
-<div class="line"><a name="l00638"></a><span class="lineno">  638</span>&#160;        {</div>
-<div class="line"><a name="l00639"></a><span class="lineno">  639</span>&#160;            <span class="comment">// Constructor/destructor/template func; extract name from func directly</span></div>
-<div class="line"><a name="l00640"></a><span class="lineno">  640</span>&#160;            addNamesFromFunc(func);</div>
-<div class="line"><a name="l00641"></a><span class="lineno">  641</span>&#160;        }</div>
-<div class="line"><a name="l00642"></a><span class="lineno">  642</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(val))</div>
-<div class="line"><a name="l00643"></a><span class="lineno">  643</span>&#160;        {</div>
-<div class="line"><a name="l00644"></a><span class="lineno">  644</span>&#160;            <span class="comment">// Call to constructor/destructor/template func; get callee; extract name from callee</span></div>
-<div class="line"><a name="l00645"></a><span class="lineno">  645</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(SVFUtil::isa&lt;CallBase&gt;(val), <span class="stringliteral">&quot;Call source site is not a callbase: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
-<div class="line"><a name="l00646"></a><span class="lineno">  646</span>&#160;            addNamesFromCall(SVFUtil::cast&lt;CallBase&gt;(val));</div>
-<div class="line"><a name="l00647"></a><span class="lineno">  647</span>&#160;        }</div>
-<div class="line"><a name="l00648"></a><span class="lineno">  648</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (isAlloc(val))</div>
-<div class="line"><a name="l00649"></a><span class="lineno">  649</span>&#160;        {</div>
-<div class="line"><a name="l00650"></a><span class="lineno">  650</span>&#160;            <span class="comment">// Stack/global/heap allocation site; walk forward; find constructor/destructor/template calls</span></div>
-<div class="line"><a name="l00651"></a><span class="lineno">  651</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>((SVFUtil::isa&lt;AllocaInst, CallBase, GlobalVariable&gt;(val)),</div>
-<div class="line"><a name="l00652"></a><span class="lineno">  652</span>&#160;                        <span class="stringliteral">&quot;Alloc site source is not a stack/heap/global variable: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
-<div class="line"><a name="l00653"></a><span class="lineno">  653</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *src : fwFindClsNameSources(val))</div>
-<div class="line"><a name="l00654"></a><span class="lineno">  654</span>&#160;            {</div>
-<div class="line"><a name="l00655"></a><span class="lineno">  655</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *func = SVFUtil::dyn_cast&lt;Function&gt;(src)) addNamesFromFunc(func);</div>
-<div class="line"><a name="l00656"></a><span class="lineno">  656</span>&#160;                <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *call = SVFUtil::dyn_cast&lt;CallBase&gt;(src)) addNamesFromCall(call);</div>
-<div class="line"><a name="l00657"></a><span class="lineno">  657</span>&#160;                <span class="keywordflow">else</span> <a class="code" href="ObjTypeInference_8cpp.html#a54176d0866e198769367b0dc65e049b5">ABORT_MSG</a>(<span class="stringliteral">&quot;Source site from forward walk is invalid: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(src));</div>
-<div class="line"><a name="l00658"></a><span class="lineno">  658</span>&#160;            }</div>
-<div class="line"><a name="l00659"></a><span class="lineno">  659</span>&#160;        }</div>
-<div class="line"><a name="l00660"></a><span class="lineno">  660</span>&#160;        <span class="keywordflow">else</span></div>
-<div class="line"><a name="l00661"></a><span class="lineno">  661</span>&#160;        {</div>
-<div class="line"><a name="l00662"></a><span class="lineno">  662</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;Unsupported source type found:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
-<div class="line"><a name="l00663"></a><span class="lineno">  663</span>&#160;        }</div>
-<div class="line"><a name="l00664"></a><span class="lineno">  664</span>&#160;    }</div>
-<div class="line"><a name="l00665"></a><span class="lineno">  665</span>&#160; </div>
-<div class="line"><a name="l00666"></a><span class="lineno">  666</span>&#160;    <span class="keywordflow">return</span> _thisPtrClassNames[thisPtr] = names;</div>
-<div class="line"><a name="l00667"></a><span class="lineno">  667</span>&#160;}</div>
-<div class="line"><a name="l00668"></a><span class="lineno">  668</span>&#160; </div>
-<div class="line"><a name="l00676"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">  676</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">ObjTypeInference::bwFindAllocOrClsNameSources</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *startValue)</div>
-<div class="line"><a name="l00677"></a><span class="lineno">  677</span>&#160;{</div>
-<div class="line"><a name="l00678"></a><span class="lineno">  678</span>&#160; </div>
-<div class="line"><a name="l00679"></a><span class="lineno">  679</span>&#160;    <span class="comment">// consult cache</span></div>
-<div class="line"><a name="l00680"></a><span class="lineno">  680</span>&#160;    <span class="keyword">auto</span> tIt = _valueToAllocOrClsNameSources.find(startValue);</div>
-<div class="line"><a name="l00681"></a><span class="lineno">  681</span>&#160;    <span class="keywordflow">if</span> (tIt != _valueToAllocOrClsNameSources.end())</div>
-<div class="line"><a name="l00682"></a><span class="lineno">  682</span>&#160;    {</div>
-<div class="line"><a name="l00683"></a><span class="lineno">  683</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
-<div class="line"><a name="l00684"></a><span class="lineno">  684</span>&#160;    }</div>
-<div class="line"><a name="l00685"></a><span class="lineno">  685</span>&#160; </div>
-<div class="line"><a name="l00686"></a><span class="lineno">  686</span>&#160;    <span class="comment">// simulate the call stack, the second element indicates whether we should update sources for current value</span></div>
-<div class="line"><a name="l00687"></a><span class="lineno">  687</span>&#160;    <a class="code" href="classSVF_1_1FILOWorkList.html">FILOWorkList&lt;ValueBoolPair&gt;</a> workList;</div>
-<div class="line"><a name="l00688"></a><span class="lineno">  688</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;ValueBoolPair&gt;</a> visited;</div>
-<div class="line"><a name="l00689"></a><span class="lineno">  689</span>&#160;    workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({startValue, <span class="keyword">false</span>});</div>
-<div class="line"><a name="l00690"></a><span class="lineno">  690</span>&#160;    <span class="keywordflow">while</span> (!workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">empty</a>())</div>
-<div class="line"><a name="l00691"></a><span class="lineno">  691</span>&#160;    {</div>
-<div class="line"><a name="l00692"></a><span class="lineno">  692</span>&#160;        <span class="keyword">auto</span> curPair = workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">pop</a>();</div>
-<div class="line"><a name="l00693"></a><span class="lineno">  693</span>&#160;        <span class="keywordflow">if</span> (visited.count(curPair)) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00694"></a><span class="lineno">  694</span>&#160;        visited.insert(curPair);</div>
-<div class="line"><a name="l00695"></a><span class="lineno">  695</span>&#160;        <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *curValue = curPair.first;</div>
-<div class="line"><a name="l00696"></a><span class="lineno">  696</span>&#160;        <span class="keywordtype">bool</span> canUpdate = curPair.second;</div>
-<div class="line"><a name="l00697"></a><span class="lineno">  697</span>&#160; </div>
-<div class="line"><a name="l00698"></a><span class="lineno">  698</span>&#160;        <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> sources;</div>
-<div class="line"><a name="l00699"></a><span class="lineno">  699</span>&#160;        <span class="keyword">auto</span> insertSource = [&amp;sources, &amp;canUpdate](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *source)</div>
-<div class="line"><a name="l00700"></a><span class="lineno">  700</span>&#160;        {</div>
-<div class="line"><a name="l00701"></a><span class="lineno">  701</span>&#160;            <span class="keywordflow">if</span> (canUpdate) sources.insert(source);</div>
-<div class="line"><a name="l00702"></a><span class="lineno">  702</span>&#160;        };</div>
-<div class="line"><a name="l00703"></a><span class="lineno">  703</span>&#160;        <span class="keyword">auto</span> insertSourcesOrPushWorklist = [<span class="keyword">this</span>, &amp;sources, &amp;workList, &amp;canUpdate](<span class="keyword">const</span> <span class="keyword">auto</span> &amp;pUser)</div>
-<div class="line"><a name="l00704"></a><span class="lineno">  704</span>&#160;        {</div>
-<div class="line"><a name="l00705"></a><span class="lineno">  705</span>&#160;            <span class="keyword">auto</span> vIt = _valueToAllocOrClsNameSources.find(pUser);</div>
-<div class="line"><a name="l00706"></a><span class="lineno">  706</span>&#160;            <span class="keywordflow">if</span> (canUpdate)</div>
-<div class="line"><a name="l00707"></a><span class="lineno">  707</span>&#160;            {</div>
-<div class="line"><a name="l00708"></a><span class="lineno">  708</span>&#160;                <span class="keywordflow">if</span> (vIt != _valueToAllocOrClsNameSources.end() &amp;&amp; !vIt-&gt;second.empty())</div>
-<div class="line"><a name="l00709"></a><span class="lineno">  709</span>&#160;                {</div>
-<div class="line"><a name="l00710"></a><span class="lineno">  710</span>&#160;                    sources.insert(vIt-&gt;second.begin(), vIt-&gt;second.end());</div>
-<div class="line"><a name="l00711"></a><span class="lineno">  711</span>&#160;                }</div>
-<div class="line"><a name="l00712"></a><span class="lineno">  712</span>&#160;            }</div>
-<div class="line"><a name="l00713"></a><span class="lineno">  713</span>&#160;            <span class="keywordflow">else</span></div>
-<div class="line"><a name="l00714"></a><span class="lineno">  714</span>&#160;            {</div>
-<div class="line"><a name="l00715"></a><span class="lineno">  715</span>&#160;                <span class="keywordflow">if</span> (vIt == _valueToAllocOrClsNameSources.end()) workList.push({pUser, <span class="keyword">false</span>});</div>
-<div class="line"><a name="l00716"></a><span class="lineno">  716</span>&#160;            }</div>
-<div class="line"><a name="l00717"></a><span class="lineno">  717</span>&#160;        };</div>
-<div class="line"><a name="l00718"></a><span class="lineno">  718</span>&#160; </div>
-<div class="line"><a name="l00719"></a><span class="lineno">  719</span>&#160;        <span class="keywordflow">if</span> (!canUpdate &amp;&amp; !_valueToAllocOrClsNameSources.count(curValue))</div>
-<div class="line"><a name="l00720"></a><span class="lineno">  720</span>&#160;        {</div>
-<div class="line"><a name="l00721"></a><span class="lineno">  721</span>&#160;            workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({curValue, <span class="keyword">true</span>});</div>
-<div class="line"><a name="l00722"></a><span class="lineno">  722</span>&#160;        }</div>
-<div class="line"><a name="l00723"></a><span class="lineno">  723</span>&#160; </div>
-<div class="line"><a name="l00724"></a><span class="lineno">  724</span>&#160;        <span class="comment">// If current value is an instruction inside a constructor/destructor/template, use it as a source</span></div>
-<div class="line"><a name="l00725"></a><span class="lineno">  725</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *inst = SVFUtil::dyn_cast&lt;Instruction&gt;(curValue))</div>
-<div class="line"><a name="l00726"></a><span class="lineno">  726</span>&#160;        {</div>
-<div class="line"><a name="l00727"></a><span class="lineno">  727</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *parent = inst-&gt;getFunction())</div>
-<div class="line"><a name="l00728"></a><span class="lineno">  728</span>&#160;            {</div>
-<div class="line"><a name="l00729"></a><span class="lineno">  729</span>&#160;                <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(parent)) insertSource(parent);</div>
-<div class="line"><a name="l00730"></a><span class="lineno">  730</span>&#160;            }</div>
-<div class="line"><a name="l00731"></a><span class="lineno">  731</span>&#160;        }</div>
-<div class="line"><a name="l00732"></a><span class="lineno">  732</span>&#160; </div>
-<div class="line"><a name="l00733"></a><span class="lineno">  733</span>&#160;        <span class="comment">// If the current value is an object (global, heap, stack, etc) or name source (constructor/destructor,</span></div>
-<div class="line"><a name="l00734"></a><span class="lineno">  734</span>&#160;        <span class="comment">// a C++ dynamic cast, or a template function), use it as a source</span></div>
-<div class="line"><a name="l00735"></a><span class="lineno">  735</span>&#160;        <span class="keywordflow">if</span> (isAlloc(curValue) || <a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(curValue))</div>
-<div class="line"><a name="l00736"></a><span class="lineno">  736</span>&#160;        {</div>
-<div class="line"><a name="l00737"></a><span class="lineno">  737</span>&#160;            insertSource(curValue);</div>
-<div class="line"><a name="l00738"></a><span class="lineno">  738</span>&#160;        }</div>
-<div class="line"><a name="l00739"></a><span class="lineno">  739</span>&#160; </div>
-<div class="line"><a name="l00740"></a><span class="lineno">  740</span>&#160;        <span class="comment">// Explore the current value further depending on the type of the value; use cached values if possible</span></div>
-<div class="line"><a name="l00741"></a><span class="lineno">  741</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *getElementPtrInst = SVFUtil::dyn_cast&lt;GetElementPtrInst&gt;(curValue))</div>
-<div class="line"><a name="l00742"></a><span class="lineno">  742</span>&#160;        {</div>
-<div class="line"><a name="l00743"></a><span class="lineno">  743</span>&#160;            insertSourcesOrPushWorklist(getElementPtrInst-&gt;getPointerOperand());</div>
-<div class="line"><a name="l00744"></a><span class="lineno">  744</span>&#160;        }</div>
-<div class="line"><a name="l00745"></a><span class="lineno">  745</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitCastInst = SVFUtil::dyn_cast&lt;BitCastInst&gt;(curValue))</div>
-<div class="line"><a name="l00746"></a><span class="lineno">  746</span>&#160;        {</div>
-<div class="line"><a name="l00747"></a><span class="lineno">  747</span>&#160;            insertSourcesOrPushWorklist(bitCastInst-&gt;getOperand(0));</div>
-<div class="line"><a name="l00748"></a><span class="lineno">  748</span>&#160;        }</div>
-<div class="line"><a name="l00749"></a><span class="lineno">  749</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(curValue))</div>
+<div class="line"><a name="l00617"></a><span class="lineno">  617</span>&#160; </div>
+<div class="line"><a name="l00627"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">  627</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;std::string&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">ObjTypeInference::inferThisPtrClsName</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *thisPtr)</div>
+<div class="line"><a name="l00628"></a><span class="lineno">  628</span>&#160;{</div>
+<div class="line"><a name="l00629"></a><span class="lineno">  629</span>&#160;    <span class="keyword">auto</span> it = _thisPtrClassNames.find(thisPtr);</div>
+<div class="line"><a name="l00630"></a><span class="lineno">  630</span>&#160;    <span class="keywordflow">if</span> (it != _thisPtrClassNames.end()) <span class="keywordflow">return</span> it-&gt;second;</div>
+<div class="line"><a name="l00631"></a><span class="lineno">  631</span>&#160; </div>
+<div class="line"><a name="l00632"></a><span class="lineno">  632</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;std::string&gt;</a> names;</div>
+<div class="line"><a name="l00633"></a><span class="lineno">  633</span>&#160; </div>
+<div class="line"><a name="l00634"></a><span class="lineno">  634</span>&#160;    <span class="comment">// Lambda for checking a function is a valid name source &amp; extracting a class name from it</span></div>
+<div class="line"><a name="l00635"></a><span class="lineno">  635</span>&#160;    <span class="keyword">auto</span> addNamesFromFunc = [&amp;names](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">Function</a> *func) -&gt; <span class="keywordtype">void</span></div>
+<div class="line"><a name="l00636"></a><span class="lineno">  636</span>&#160;    {</div>
+<div class="line"><a name="l00637"></a><span class="lineno">  637</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(func), <span class="stringliteral">&quot;Func is invalid class name source: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(func));</div>
+<div class="line"><a name="l00638"></a><span class="lineno">  638</span>&#160;        <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;<a class="code" href="cJSON_8h.html#a25d22ecc7e656d2c59332072684e8766">name</a> : <a class="code" href="namespaceSVF_1_1cppUtil.html#ae97bb256f20aa617f21a49c98d46177a">extractClsNamesFromFunc</a>(func)) names.insert(<a class="code" href="cJSON_8h.html#a25d22ecc7e656d2c59332072684e8766">name</a>);</div>
+<div class="line"><a name="l00639"></a><span class="lineno">  639</span>&#160;    };</div>
+<div class="line"><a name="l00640"></a><span class="lineno">  640</span>&#160; </div>
+<div class="line"><a name="l00641"></a><span class="lineno">  641</span>&#160;    <span class="comment">// Lambda for getting callee &amp; extracting class name for calls to constructors/destructors/template funcs</span></div>
+<div class="line"><a name="l00642"></a><span class="lineno">  642</span>&#160;    <span class="keyword">auto</span> addNamesFromCall = [&amp;names, &amp;addNamesFromFunc](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *call) -&gt; <span class="keywordtype">void</span></div>
+<div class="line"><a name="l00643"></a><span class="lineno">  643</span>&#160;    {</div>
+<div class="line"><a name="l00644"></a><span class="lineno">  644</span>&#160;        <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(call), <span class="stringliteral">&quot;Call is invalid class name source: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(call));</div>
+<div class="line"><a name="l00645"></a><span class="lineno">  645</span>&#160; </div>
+<div class="line"><a name="l00646"></a><span class="lineno">  646</span>&#160;        <span class="keyword">const</span> <span class="keyword">auto</span> *func = call-&gt;getCalledFunction();</div>
+<div class="line"><a name="l00647"></a><span class="lineno">  647</span>&#160;        <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#afd5fcc8fe98df5f057ff2e04c68b49b5">isDynCast</a>(func)) names.insert(<a class="code" href="namespaceSVF_1_1cppUtil.html#a26ccd6abf127a7ccc34a973f7b13161b">extractClsNameFromDynCast</a>(call));</div>
+<div class="line"><a name="l00648"></a><span class="lineno">  648</span>&#160;        <span class="keywordflow">else</span> addNamesFromFunc(func);</div>
+<div class="line"><a name="l00649"></a><span class="lineno">  649</span>&#160;    };</div>
+<div class="line"><a name="l00650"></a><span class="lineno">  650</span>&#160; </div>
+<div class="line"><a name="l00651"></a><span class="lineno">  651</span>&#160;    <span class="comment">// Walk backwards to find all valid source sites for the pointer (e.g. stack/global/heap variables)</span></div>
+<div class="line"><a name="l00652"></a><span class="lineno">  652</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &amp;val: bwFindAllocOrClsNameSources(thisPtr))</div>
+<div class="line"><a name="l00653"></a><span class="lineno">  653</span>&#160;    {</div>
+<div class="line"><a name="l00654"></a><span class="lineno">  654</span>&#160;        <span class="comment">// A source site is either a constructor/destructor/template function from which the class name can be</span></div>
+<div class="line"><a name="l00655"></a><span class="lineno">  655</span>&#160;        <span class="comment">// extracted; a call to a C++ constructor/destructor/template function from which the class name can be</span></div>
+<div class="line"><a name="l00656"></a><span class="lineno">  656</span>&#160;        <span class="comment">// extracted; or an allocation site of an object (i.e. a stack/global/heap variable), from which a</span></div>
+<div class="line"><a name="l00657"></a><span class="lineno">  657</span>&#160;        <span class="comment">// forward walk can be performed to find calls to C++ constructor/destructor/template functions from</span></div>
+<div class="line"><a name="l00658"></a><span class="lineno">  658</span>&#160;        <span class="comment">// which the class&#39; name can then be extracted; skip starting pointer</span></div>
+<div class="line"><a name="l00659"></a><span class="lineno">  659</span>&#160;        <span class="keywordflow">if</span> (val == thisPtr) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00660"></a><span class="lineno">  660</span>&#160; </div>
+<div class="line"><a name="l00661"></a><span class="lineno">  661</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *func = SVFUtil::dyn_cast&lt;Function&gt;(val))</div>
+<div class="line"><a name="l00662"></a><span class="lineno">  662</span>&#160;        {</div>
+<div class="line"><a name="l00663"></a><span class="lineno">  663</span>&#160;            <span class="comment">// Constructor/destructor/template func; extract name from func directly</span></div>
+<div class="line"><a name="l00664"></a><span class="lineno">  664</span>&#160;            addNamesFromFunc(func);</div>
+<div class="line"><a name="l00665"></a><span class="lineno">  665</span>&#160;        }</div>
+<div class="line"><a name="l00666"></a><span class="lineno">  666</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(val))</div>
+<div class="line"><a name="l00667"></a><span class="lineno">  667</span>&#160;        {</div>
+<div class="line"><a name="l00668"></a><span class="lineno">  668</span>&#160;            <span class="comment">// Call to constructor/destructor/template func; get callee; extract name from callee</span></div>
+<div class="line"><a name="l00669"></a><span class="lineno">  669</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(SVFUtil::isa&lt;CallBase&gt;(val), <span class="stringliteral">&quot;Call source site is not a callbase: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
+<div class="line"><a name="l00670"></a><span class="lineno">  670</span>&#160;            addNamesFromCall(SVFUtil::cast&lt;CallBase&gt;(val));</div>
+<div class="line"><a name="l00671"></a><span class="lineno">  671</span>&#160;        }</div>
+<div class="line"><a name="l00672"></a><span class="lineno">  672</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (isAlloc(val))</div>
+<div class="line"><a name="l00673"></a><span class="lineno">  673</span>&#160;        {</div>
+<div class="line"><a name="l00674"></a><span class="lineno">  674</span>&#160;            <span class="comment">// Stack/global/heap allocation site; walk forward; find constructor/destructor/template calls</span></div>
+<div class="line"><a name="l00675"></a><span class="lineno">  675</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>((SVFUtil::isa&lt;AllocaInst, CallBase, GlobalVariable&gt;(val)),</div>
+<div class="line"><a name="l00676"></a><span class="lineno">  676</span>&#160;                        <span class="stringliteral">&quot;Alloc site source is not a stack/heap/global variable: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
+<div class="line"><a name="l00677"></a><span class="lineno">  677</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *src : fwFindClsNameSources(val))</div>
+<div class="line"><a name="l00678"></a><span class="lineno">  678</span>&#160;            {</div>
+<div class="line"><a name="l00679"></a><span class="lineno">  679</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *func = SVFUtil::dyn_cast&lt;Function&gt;(src)) addNamesFromFunc(func);</div>
+<div class="line"><a name="l00680"></a><span class="lineno">  680</span>&#160;                <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *call = SVFUtil::dyn_cast&lt;CallBase&gt;(src)) addNamesFromCall(call);</div>
+<div class="line"><a name="l00681"></a><span class="lineno">  681</span>&#160;                <span class="keywordflow">else</span> <a class="code" href="ObjTypeInference_8cpp.html#a54176d0866e198769367b0dc65e049b5">ABORT_MSG</a>(<span class="stringliteral">&quot;Source site from forward walk is invalid: &quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(src));</div>
+<div class="line"><a name="l00682"></a><span class="lineno">  682</span>&#160;            }</div>
+<div class="line"><a name="l00683"></a><span class="lineno">  683</span>&#160;        }</div>
+<div class="line"><a name="l00684"></a><span class="lineno">  684</span>&#160;        <span class="keywordflow">else</span></div>
+<div class="line"><a name="l00685"></a><span class="lineno">  685</span>&#160;        {</div>
+<div class="line"><a name="l00686"></a><span class="lineno">  686</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#aa73dde570491da218d3ef11359f16955">ERR_MSG</a>(<span class="stringliteral">&quot;Unsupported source type found:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(val));</div>
+<div class="line"><a name="l00687"></a><span class="lineno">  687</span>&#160;        }</div>
+<div class="line"><a name="l00688"></a><span class="lineno">  688</span>&#160;    }</div>
+<div class="line"><a name="l00689"></a><span class="lineno">  689</span>&#160; </div>
+<div class="line"><a name="l00690"></a><span class="lineno">  690</span>&#160;    <span class="keywordflow">return</span> _thisPtrClassNames[thisPtr] = names;</div>
+<div class="line"><a name="l00691"></a><span class="lineno">  691</span>&#160;}</div>
+<div class="line"><a name="l00692"></a><span class="lineno">  692</span>&#160; </div>
+<div class="line"><a name="l00700"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">  700</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">ObjTypeInference::bwFindAllocOrClsNameSources</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *startValue)</div>
+<div class="line"><a name="l00701"></a><span class="lineno">  701</span>&#160;{</div>
+<div class="line"><a name="l00702"></a><span class="lineno">  702</span>&#160; </div>
+<div class="line"><a name="l00703"></a><span class="lineno">  703</span>&#160;    <span class="comment">// consult cache</span></div>
+<div class="line"><a name="l00704"></a><span class="lineno">  704</span>&#160;    <span class="keyword">auto</span> tIt = _valueToAllocOrClsNameSources.find(startValue);</div>
+<div class="line"><a name="l00705"></a><span class="lineno">  705</span>&#160;    <span class="keywordflow">if</span> (tIt != _valueToAllocOrClsNameSources.end())</div>
+<div class="line"><a name="l00706"></a><span class="lineno">  706</span>&#160;    {</div>
+<div class="line"><a name="l00707"></a><span class="lineno">  707</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
+<div class="line"><a name="l00708"></a><span class="lineno">  708</span>&#160;    }</div>
+<div class="line"><a name="l00709"></a><span class="lineno">  709</span>&#160; </div>
+<div class="line"><a name="l00710"></a><span class="lineno">  710</span>&#160;    <span class="comment">// simulate the call stack, the second element indicates whether we should update sources for current value</span></div>
+<div class="line"><a name="l00711"></a><span class="lineno">  711</span>&#160;    <a class="code" href="classSVF_1_1FILOWorkList.html">FILOWorkList&lt;ValueBoolPair&gt;</a> workList;</div>
+<div class="line"><a name="l00712"></a><span class="lineno">  712</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;ValueBoolPair&gt;</a> visited;</div>
+<div class="line"><a name="l00713"></a><span class="lineno">  713</span>&#160;    workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({startValue, <span class="keyword">false</span>});</div>
+<div class="line"><a name="l00714"></a><span class="lineno">  714</span>&#160;    <span class="keywordflow">while</span> (!workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">empty</a>())</div>
+<div class="line"><a name="l00715"></a><span class="lineno">  715</span>&#160;    {</div>
+<div class="line"><a name="l00716"></a><span class="lineno">  716</span>&#160;        <span class="keyword">auto</span> curPair = workList.<a class="code" href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">pop</a>();</div>
+<div class="line"><a name="l00717"></a><span class="lineno">  717</span>&#160;        <span class="keywordflow">if</span> (visited.count(curPair)) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00718"></a><span class="lineno">  718</span>&#160;        visited.insert(curPair);</div>
+<div class="line"><a name="l00719"></a><span class="lineno">  719</span>&#160;        <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *curValue = curPair.first;</div>
+<div class="line"><a name="l00720"></a><span class="lineno">  720</span>&#160;        <span class="keywordtype">bool</span> canUpdate = curPair.second;</div>
+<div class="line"><a name="l00721"></a><span class="lineno">  721</span>&#160; </div>
+<div class="line"><a name="l00722"></a><span class="lineno">  722</span>&#160;        <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const Value *&gt;</a> sources;</div>
+<div class="line"><a name="l00723"></a><span class="lineno">  723</span>&#160;        <span class="keyword">auto</span> insertSource = [&amp;sources, &amp;canUpdate](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *source)</div>
+<div class="line"><a name="l00724"></a><span class="lineno">  724</span>&#160;        {</div>
+<div class="line"><a name="l00725"></a><span class="lineno">  725</span>&#160;            <span class="keywordflow">if</span> (canUpdate) sources.insert(source);</div>
+<div class="line"><a name="l00726"></a><span class="lineno">  726</span>&#160;        };</div>
+<div class="line"><a name="l00727"></a><span class="lineno">  727</span>&#160;        <span class="keyword">auto</span> insertSourcesOrPushWorklist = [<span class="keyword">this</span>, &amp;sources, &amp;workList, &amp;canUpdate](<span class="keyword">const</span> <span class="keyword">auto</span> &amp;pUser)</div>
+<div class="line"><a name="l00728"></a><span class="lineno">  728</span>&#160;        {</div>
+<div class="line"><a name="l00729"></a><span class="lineno">  729</span>&#160;            <span class="keyword">auto</span> vIt = _valueToAllocOrClsNameSources.find(pUser);</div>
+<div class="line"><a name="l00730"></a><span class="lineno">  730</span>&#160;            <span class="keywordflow">if</span> (canUpdate)</div>
+<div class="line"><a name="l00731"></a><span class="lineno">  731</span>&#160;            {</div>
+<div class="line"><a name="l00732"></a><span class="lineno">  732</span>&#160;                <span class="keywordflow">if</span> (vIt != _valueToAllocOrClsNameSources.end() &amp;&amp; !vIt-&gt;second.empty())</div>
+<div class="line"><a name="l00733"></a><span class="lineno">  733</span>&#160;                {</div>
+<div class="line"><a name="l00734"></a><span class="lineno">  734</span>&#160;                    sources.insert(vIt-&gt;second.begin(), vIt-&gt;second.end());</div>
+<div class="line"><a name="l00735"></a><span class="lineno">  735</span>&#160;                }</div>
+<div class="line"><a name="l00736"></a><span class="lineno">  736</span>&#160;            }</div>
+<div class="line"><a name="l00737"></a><span class="lineno">  737</span>&#160;            <span class="keywordflow">else</span></div>
+<div class="line"><a name="l00738"></a><span class="lineno">  738</span>&#160;            {</div>
+<div class="line"><a name="l00739"></a><span class="lineno">  739</span>&#160;                <span class="keywordflow">if</span> (vIt == _valueToAllocOrClsNameSources.end()) workList.push({pUser, <span class="keyword">false</span>});</div>
+<div class="line"><a name="l00740"></a><span class="lineno">  740</span>&#160;            }</div>
+<div class="line"><a name="l00741"></a><span class="lineno">  741</span>&#160;        };</div>
+<div class="line"><a name="l00742"></a><span class="lineno">  742</span>&#160; </div>
+<div class="line"><a name="l00743"></a><span class="lineno">  743</span>&#160;        <span class="keywordflow">if</span> (!canUpdate &amp;&amp; !_valueToAllocOrClsNameSources.count(curValue))</div>
+<div class="line"><a name="l00744"></a><span class="lineno">  744</span>&#160;        {</div>
+<div class="line"><a name="l00745"></a><span class="lineno">  745</span>&#160;            workList.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>({curValue, <span class="keyword">true</span>});</div>
+<div class="line"><a name="l00746"></a><span class="lineno">  746</span>&#160;        }</div>
+<div class="line"><a name="l00747"></a><span class="lineno">  747</span>&#160; </div>
+<div class="line"><a name="l00748"></a><span class="lineno">  748</span>&#160;        <span class="comment">// If current value is an instruction inside a constructor/destructor/template, use it as a source</span></div>
+<div class="line"><a name="l00749"></a><span class="lineno">  749</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *inst = SVFUtil::dyn_cast&lt;Instruction&gt;(curValue))</div>
 <div class="line"><a name="l00750"></a><span class="lineno">  750</span>&#160;        {</div>
-<div class="line"><a name="l00751"></a><span class="lineno">  751</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *op : phiNode-&gt;operand_values())</div>
+<div class="line"><a name="l00751"></a><span class="lineno">  751</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *parent = inst-&gt;getFunction())</div>
 <div class="line"><a name="l00752"></a><span class="lineno">  752</span>&#160;            {</div>
-<div class="line"><a name="l00753"></a><span class="lineno">  753</span>&#160;                insertSourcesOrPushWorklist(op);</div>
+<div class="line"><a name="l00753"></a><span class="lineno">  753</span>&#160;                <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(parent)) insertSource(parent);</div>
 <div class="line"><a name="l00754"></a><span class="lineno">  754</span>&#160;            }</div>
 <div class="line"><a name="l00755"></a><span class="lineno">  755</span>&#160;        }</div>
-<div class="line"><a name="l00756"></a><span class="lineno">  756</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(curValue))</div>
-<div class="line"><a name="l00757"></a><span class="lineno">  757</span>&#160;        {</div>
-<div class="line"><a name="l00758"></a><span class="lineno">  758</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user : loadInst-&gt;getPointerOperand()-&gt;users())</div>
-<div class="line"><a name="l00759"></a><span class="lineno">  759</span>&#160;            {</div>
-<div class="line"><a name="l00760"></a><span class="lineno">  760</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(user))</div>
-<div class="line"><a name="l00761"></a><span class="lineno">  761</span>&#160;                {</div>
-<div class="line"><a name="l00762"></a><span class="lineno">  762</span>&#160;                    <span class="keywordflow">if</span> (storeInst-&gt;getPointerOperand() == loadInst-&gt;getPointerOperand())</div>
-<div class="line"><a name="l00763"></a><span class="lineno">  763</span>&#160;                    {</div>
-<div class="line"><a name="l00764"></a><span class="lineno">  764</span>&#160;                        insertSourcesOrPushWorklist(storeInst-&gt;getValueOperand());</div>
-<div class="line"><a name="l00765"></a><span class="lineno">  765</span>&#160;                    }</div>
-<div class="line"><a name="l00766"></a><span class="lineno">  766</span>&#160;                }</div>
-<div class="line"><a name="l00767"></a><span class="lineno">  767</span>&#160;            }</div>
+<div class="line"><a name="l00756"></a><span class="lineno">  756</span>&#160; </div>
+<div class="line"><a name="l00757"></a><span class="lineno">  757</span>&#160;        <span class="comment">// If the current value is an object (global, heap, stack, etc) or name source (constructor/destructor,</span></div>
+<div class="line"><a name="l00758"></a><span class="lineno">  758</span>&#160;        <span class="comment">// a C++ dynamic cast, or a template function), use it as a source</span></div>
+<div class="line"><a name="l00759"></a><span class="lineno">  759</span>&#160;        <span class="keywordflow">if</span> (isAlloc(curValue) || <a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(curValue))</div>
+<div class="line"><a name="l00760"></a><span class="lineno">  760</span>&#160;        {</div>
+<div class="line"><a name="l00761"></a><span class="lineno">  761</span>&#160;            insertSource(curValue);</div>
+<div class="line"><a name="l00762"></a><span class="lineno">  762</span>&#160;        }</div>
+<div class="line"><a name="l00763"></a><span class="lineno">  763</span>&#160; </div>
+<div class="line"><a name="l00764"></a><span class="lineno">  764</span>&#160;        <span class="comment">// Explore the current value further depending on the type of the value; use cached values if possible</span></div>
+<div class="line"><a name="l00765"></a><span class="lineno">  765</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *getElementPtrInst = SVFUtil::dyn_cast&lt;GetElementPtrInst&gt;(curValue))</div>
+<div class="line"><a name="l00766"></a><span class="lineno">  766</span>&#160;        {</div>
+<div class="line"><a name="l00767"></a><span class="lineno">  767</span>&#160;            insertSourcesOrPushWorklist(getElementPtrInst-&gt;getPointerOperand());</div>
 <div class="line"><a name="l00768"></a><span class="lineno">  768</span>&#160;        }</div>
-<div class="line"><a name="l00769"></a><span class="lineno">  769</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *argument = SVFUtil::dyn_cast&lt;Argument&gt;(curValue))</div>
+<div class="line"><a name="l00769"></a><span class="lineno">  769</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitCastInst = SVFUtil::dyn_cast&lt;BitCastInst&gt;(curValue))</div>
 <div class="line"><a name="l00770"></a><span class="lineno">  770</span>&#160;        {</div>
-<div class="line"><a name="l00771"></a><span class="lineno">  771</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user: argument-&gt;getParent()-&gt;users())</div>
-<div class="line"><a name="l00772"></a><span class="lineno">  772</span>&#160;            {</div>
-<div class="line"><a name="l00773"></a><span class="lineno">  773</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(user))</div>
-<div class="line"><a name="l00774"></a><span class="lineno">  774</span>&#160;                {</div>
-<div class="line"><a name="l00775"></a><span class="lineno">  775</span>&#160;                    <span class="comment">// skip function as parameter</span></div>
-<div class="line"><a name="l00776"></a><span class="lineno">  776</span>&#160;                    <span class="comment">// e.g., call void @foo(%struct.ssl_ctx_st* %9, i32 (i8*, i32, i32, i8*)* @passwd_callback)</span></div>
-<div class="line"><a name="l00777"></a><span class="lineno">  777</span>&#160;                    <span class="keywordflow">if</span> (callBase-&gt;getCalledFunction() != argument-&gt;getParent()) <span class="keywordflow">continue</span>;</div>
-<div class="line"><a name="l00778"></a><span class="lineno">  778</span>&#160;                    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> pos = argument-&gt;getParent()-&gt;isVarArg() ? 0 : argument-&gt;getArgNo();</div>
-<div class="line"><a name="l00779"></a><span class="lineno">  779</span>&#160;                    insertSourcesOrPushWorklist(callBase-&gt;getArgOperand(pos));</div>
-<div class="line"><a name="l00780"></a><span class="lineno">  780</span>&#160;                }</div>
-<div class="line"><a name="l00781"></a><span class="lineno">  781</span>&#160;            }</div>
-<div class="line"><a name="l00782"></a><span class="lineno">  782</span>&#160;        }</div>
-<div class="line"><a name="l00783"></a><span class="lineno">  783</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(curValue))</div>
-<div class="line"><a name="l00784"></a><span class="lineno">  784</span>&#160;        {</div>
-<div class="line"><a name="l00785"></a><span class="lineno">  785</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(!callBase-&gt;doesNotReturn(), <span class="stringliteral">&quot;callbase does not return:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(callBase));</div>
-<div class="line"><a name="l00786"></a><span class="lineno">  786</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callee = callBase-&gt;getCalledFunction())</div>
-<div class="line"><a name="l00787"></a><span class="lineno">  787</span>&#160;            {</div>
-<div class="line"><a name="l00788"></a><span class="lineno">  788</span>&#160;                <span class="keywordflow">if</span> (!callee-&gt;isDeclaration())</div>
-<div class="line"><a name="l00789"></a><span class="lineno">  789</span>&#160;                {</div>
-<div class="line"><a name="l00790"></a><span class="lineno">  790</span>&#160;                    <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFFunction.html">SVFFunction</a> *svfFunc = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#a50fc24901350df9db890ba16a9b87e33">getSVFFunction</a>(callee);</div>
-<div class="line"><a name="l00791"></a><span class="lineno">  791</span>&#160;                    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *pValue = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#aaf9b679407f12b93afc53c157d37b444">getLLVMValue</a>(svfFunc-&gt;<a class="code" href="classSVF_1_1SVFFunction.html#ac4c28c8d205d354f3a982119f29f2aac">getExitBB</a>()-&gt;<a class="code" href="classSVF_1_1SVFBasicBlock.html#ad05f85ce931d4479f71d1947a25599dc">back</a>());</div>
-<div class="line"><a name="l00792"></a><span class="lineno">  792</span>&#160;                    <span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(pValue);</div>
-<div class="line"><a name="l00793"></a><span class="lineno">  793</span>&#160;                    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(retInst &amp;&amp; retInst-&gt;getReturnValue(), <span class="stringliteral">&quot;not return inst?&quot;</span>);</div>
-<div class="line"><a name="l00794"></a><span class="lineno">  794</span>&#160;                    insertSourcesOrPushWorklist(retInst-&gt;getReturnValue());</div>
-<div class="line"><a name="l00795"></a><span class="lineno">  795</span>&#160;                }</div>
-<div class="line"><a name="l00796"></a><span class="lineno">  796</span>&#160;            }</div>
-<div class="line"><a name="l00797"></a><span class="lineno">  797</span>&#160;        }</div>
-<div class="line"><a name="l00798"></a><span class="lineno">  798</span>&#160; </div>
-<div class="line"><a name="l00799"></a><span class="lineno">  799</span>&#160;        <span class="comment">// If updating is allowed; store the gathered sources as sources for the current value in the cache</span></div>
-<div class="line"><a name="l00800"></a><span class="lineno">  800</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
-<div class="line"><a name="l00801"></a><span class="lineno">  801</span>&#160;        {</div>
-<div class="line"><a name="l00802"></a><span class="lineno">  802</span>&#160;            _valueToAllocOrClsNameSources[curValue] = sources;</div>
-<div class="line"><a name="l00803"></a><span class="lineno">  803</span>&#160;        }</div>
-<div class="line"><a name="l00804"></a><span class="lineno">  804</span>&#160;    }</div>
-<div class="line"><a name="l00805"></a><span class="lineno">  805</span>&#160; </div>
-<div class="line"><a name="l00806"></a><span class="lineno">  806</span>&#160;    <span class="keywordflow">return</span> _valueToAllocOrClsNameSources[startValue];</div>
-<div class="line"><a name="l00807"></a><span class="lineno">  807</span>&#160;}</div>
-<div class="line"><a name="l00808"></a><span class="lineno">  808</span>&#160; </div>
-<div class="line"><a name="l00809"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">  809</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const CallBase *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">ObjTypeInference::fwFindClsNameSources</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *startValue)</div>
-<div class="line"><a name="l00810"></a><span class="lineno">  810</span>&#160;{</div>
-<div class="line"><a name="l00811"></a><span class="lineno">  811</span>&#160;    assert(startValue &amp;&amp; <span class="stringliteral">&quot;startValue was null?&quot;</span>);</div>
-<div class="line"><a name="l00812"></a><span class="lineno">  812</span>&#160; </div>
-<div class="line"><a name="l00813"></a><span class="lineno">  813</span>&#160;    <span class="comment">// consult cache</span></div>
-<div class="line"><a name="l00814"></a><span class="lineno">  814</span>&#160;    <span class="keyword">auto</span> tIt = <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>.find(startValue);</div>
-<div class="line"><a name="l00815"></a><span class="lineno">  815</span>&#160;    <span class="keywordflow">if</span> (tIt != <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>.end())</div>
-<div class="line"><a name="l00816"></a><span class="lineno">  816</span>&#160;    {</div>
-<div class="line"><a name="l00817"></a><span class="lineno">  817</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
-<div class="line"><a name="l00818"></a><span class="lineno">  818</span>&#160;    }</div>
-<div class="line"><a name="l00819"></a><span class="lineno">  819</span>&#160; </div>
-<div class="line"><a name="l00820"></a><span class="lineno">  820</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const CallBase *&gt;</a> sources;</div>
-<div class="line"><a name="l00821"></a><span class="lineno">  821</span>&#160; </div>
-<div class="line"><a name="l00822"></a><span class="lineno">  822</span>&#160;    <span class="comment">// Lambda for adding a callee to the sources iff it is a constructor/destructor/template/dyncast</span></div>
-<div class="line"><a name="l00823"></a><span class="lineno">  823</span>&#160;    <span class="keyword">auto</span> inferViaCppCall = [&amp;sources](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *caller)</div>
-<div class="line"><a name="l00824"></a><span class="lineno">  824</span>&#160;    {</div>
-<div class="line"><a name="l00825"></a><span class="lineno">  825</span>&#160;        <span class="keywordflow">if</span> (!caller) <span class="keywordflow">return</span>;</div>
-<div class="line"><a name="l00826"></a><span class="lineno">  826</span>&#160;        <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(caller)) sources.insert(caller);</div>
-<div class="line"><a name="l00827"></a><span class="lineno">  827</span>&#160;    };</div>
-<div class="line"><a name="l00828"></a><span class="lineno">  828</span>&#160; </div>
-<div class="line"><a name="l00829"></a><span class="lineno">  829</span>&#160;    <span class="comment">// Find all calls of starting val (or through cast); add as potential source iff applicable</span></div>
-<div class="line"><a name="l00830"></a><span class="lineno">  830</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user : startValue-&gt;users())</div>
-<div class="line"><a name="l00831"></a><span class="lineno">  831</span>&#160;    {</div>
-<div class="line"><a name="l00832"></a><span class="lineno">  832</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *caller = SVFUtil::dyn_cast&lt;CallBase&gt;(user))</div>
-<div class="line"><a name="l00833"></a><span class="lineno">  833</span>&#160;        {</div>
-<div class="line"><a name="l00834"></a><span class="lineno">  834</span>&#160;            inferViaCppCall(caller);</div>
-<div class="line"><a name="l00835"></a><span class="lineno">  835</span>&#160;        }</div>
-<div class="line"><a name="l00836"></a><span class="lineno">  836</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitcast = SVFUtil::dyn_cast&lt;BitCastInst&gt;(user))</div>
-<div class="line"><a name="l00837"></a><span class="lineno">  837</span>&#160;        {</div>
-<div class="line"><a name="l00838"></a><span class="lineno">  838</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *cast_user : bitcast-&gt;users())</div>
-<div class="line"><a name="l00839"></a><span class="lineno">  839</span>&#160;            {</div>
-<div class="line"><a name="l00840"></a><span class="lineno">  840</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *caller = SVFUtil::dyn_cast&lt;CallBase&gt;(cast_user))</div>
-<div class="line"><a name="l00841"></a><span class="lineno">  841</span>&#160;                {</div>
-<div class="line"><a name="l00842"></a><span class="lineno">  842</span>&#160;                    inferViaCppCall(caller);</div>
-<div class="line"><a name="l00843"></a><span class="lineno">  843</span>&#160;                }</div>
-<div class="line"><a name="l00844"></a><span class="lineno">  844</span>&#160;            }</div>
-<div class="line"><a name="l00845"></a><span class="lineno">  845</span>&#160;        }</div>
-<div class="line"><a name="l00846"></a><span class="lineno">  846</span>&#160;    }</div>
-<div class="line"><a name="l00847"></a><span class="lineno">  847</span>&#160; </div>
-<div class="line"><a name="l00848"></a><span class="lineno">  848</span>&#160;    <span class="comment">// Store sources in cache for starting value &amp; return the found sources</span></div>
-<div class="line"><a name="l00849"></a><span class="lineno">  849</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>[startValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(sources);</div>
-<div class="line"><a name="l00850"></a><span class="lineno">  850</span>&#160;}</div>
+<div class="line"><a name="l00771"></a><span class="lineno">  771</span>&#160;            insertSourcesOrPushWorklist(bitCastInst-&gt;getOperand(0));</div>
+<div class="line"><a name="l00772"></a><span class="lineno">  772</span>&#160;        }</div>
+<div class="line"><a name="l00773"></a><span class="lineno">  773</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *phiNode = SVFUtil::dyn_cast&lt;PHINode&gt;(curValue))</div>
+<div class="line"><a name="l00774"></a><span class="lineno">  774</span>&#160;        {</div>
+<div class="line"><a name="l00775"></a><span class="lineno">  775</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *op : phiNode-&gt;operand_values())</div>
+<div class="line"><a name="l00776"></a><span class="lineno">  776</span>&#160;            {</div>
+<div class="line"><a name="l00777"></a><span class="lineno">  777</span>&#160;                insertSourcesOrPushWorklist(op);</div>
+<div class="line"><a name="l00778"></a><span class="lineno">  778</span>&#160;            }</div>
+<div class="line"><a name="l00779"></a><span class="lineno">  779</span>&#160;        }</div>
+<div class="line"><a name="l00780"></a><span class="lineno">  780</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *loadInst = SVFUtil::dyn_cast&lt;LoadInst&gt;(curValue))</div>
+<div class="line"><a name="l00781"></a><span class="lineno">  781</span>&#160;        {</div>
+<div class="line"><a name="l00782"></a><span class="lineno">  782</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user : loadInst-&gt;getPointerOperand()-&gt;users())</div>
+<div class="line"><a name="l00783"></a><span class="lineno">  783</span>&#160;            {</div>
+<div class="line"><a name="l00784"></a><span class="lineno">  784</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *storeInst = SVFUtil::dyn_cast&lt;StoreInst&gt;(user))</div>
+<div class="line"><a name="l00785"></a><span class="lineno">  785</span>&#160;                {</div>
+<div class="line"><a name="l00786"></a><span class="lineno">  786</span>&#160;                    <span class="keywordflow">if</span> (storeInst-&gt;getPointerOperand() == loadInst-&gt;getPointerOperand())</div>
+<div class="line"><a name="l00787"></a><span class="lineno">  787</span>&#160;                    {</div>
+<div class="line"><a name="l00788"></a><span class="lineno">  788</span>&#160;                        insertSourcesOrPushWorklist(storeInst-&gt;getValueOperand());</div>
+<div class="line"><a name="l00789"></a><span class="lineno">  789</span>&#160;                    }</div>
+<div class="line"><a name="l00790"></a><span class="lineno">  790</span>&#160;                }</div>
+<div class="line"><a name="l00791"></a><span class="lineno">  791</span>&#160;            }</div>
+<div class="line"><a name="l00792"></a><span class="lineno">  792</span>&#160;        }</div>
+<div class="line"><a name="l00793"></a><span class="lineno">  793</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *argument = SVFUtil::dyn_cast&lt;Argument&gt;(curValue))</div>
+<div class="line"><a name="l00794"></a><span class="lineno">  794</span>&#160;        {</div>
+<div class="line"><a name="l00795"></a><span class="lineno">  795</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user: argument-&gt;getParent()-&gt;users())</div>
+<div class="line"><a name="l00796"></a><span class="lineno">  796</span>&#160;            {</div>
+<div class="line"><a name="l00797"></a><span class="lineno">  797</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(user))</div>
+<div class="line"><a name="l00798"></a><span class="lineno">  798</span>&#160;                {</div>
+<div class="line"><a name="l00799"></a><span class="lineno">  799</span>&#160;                    <span class="comment">// skip function as parameter</span></div>
+<div class="line"><a name="l00800"></a><span class="lineno">  800</span>&#160;                    <span class="comment">// e.g., call void @foo(%struct.ssl_ctx_st* %9, i32 (i8*, i32, i32, i8*)* @passwd_callback)</span></div>
+<div class="line"><a name="l00801"></a><span class="lineno">  801</span>&#160;                    <span class="keywordflow">if</span> (callBase-&gt;getCalledFunction() != argument-&gt;getParent()) <span class="keywordflow">continue</span>;</div>
+<div class="line"><a name="l00802"></a><span class="lineno">  802</span>&#160;                    <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> pos = argument-&gt;getParent()-&gt;isVarArg() ? 0 : argument-&gt;getArgNo();</div>
+<div class="line"><a name="l00803"></a><span class="lineno">  803</span>&#160;                    insertSourcesOrPushWorklist(callBase-&gt;getArgOperand(pos));</div>
+<div class="line"><a name="l00804"></a><span class="lineno">  804</span>&#160;                }</div>
+<div class="line"><a name="l00805"></a><span class="lineno">  805</span>&#160;            }</div>
+<div class="line"><a name="l00806"></a><span class="lineno">  806</span>&#160;        }</div>
+<div class="line"><a name="l00807"></a><span class="lineno">  807</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callBase = SVFUtil::dyn_cast&lt;CallBase&gt;(curValue))</div>
+<div class="line"><a name="l00808"></a><span class="lineno">  808</span>&#160;        {</div>
+<div class="line"><a name="l00809"></a><span class="lineno">  809</span>&#160;            <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(!callBase-&gt;doesNotReturn(), <span class="stringliteral">&quot;callbase does not return:&quot;</span> + <a class="code" href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">dumpValueAndDbgInfo</a>(callBase));</div>
+<div class="line"><a name="l00810"></a><span class="lineno">  810</span>&#160;            <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *callee = callBase-&gt;getCalledFunction())</div>
+<div class="line"><a name="l00811"></a><span class="lineno">  811</span>&#160;            {</div>
+<div class="line"><a name="l00812"></a><span class="lineno">  812</span>&#160;                <span class="keywordflow">if</span> (!callee-&gt;isDeclaration())</div>
+<div class="line"><a name="l00813"></a><span class="lineno">  813</span>&#160;                {</div>
+<div class="line"><a name="l00814"></a><span class="lineno">  814</span>&#160;                    <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFFunction.html">SVFFunction</a> *svfFunc = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#a50fc24901350df9db890ba16a9b87e33">getSVFFunction</a>(callee);</div>
+<div class="line"><a name="l00815"></a><span class="lineno">  815</span>&#160;                    <span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *pValue = <a class="code" href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">LLVMModuleSet::getLLVMModuleSet</a>()-&gt;<a class="code" href="classSVF_1_1LLVMModuleSet.html#aaf9b679407f12b93afc53c157d37b444">getLLVMValue</a>(svfFunc-&gt;<a class="code" href="classSVF_1_1SVFFunction.html#ac4c28c8d205d354f3a982119f29f2aac">getExitBB</a>()-&gt;<a class="code" href="classSVF_1_1SVFBasicBlock.html#ad05f85ce931d4479f71d1947a25599dc">back</a>());</div>
+<div class="line"><a name="l00816"></a><span class="lineno">  816</span>&#160;                    <span class="keyword">const</span> <span class="keyword">auto</span> *retInst = SVFUtil::dyn_cast&lt;ReturnInst&gt;(pValue);</div>
+<div class="line"><a name="l00817"></a><span class="lineno">  817</span>&#160;                    <a class="code" href="ObjTypeInference_8cpp.html#a7165377d2fbd76a86ed0ec5218712c78">ABORT_IFNOT</a>(retInst &amp;&amp; retInst-&gt;getReturnValue(), <span class="stringliteral">&quot;not return inst?&quot;</span>);</div>
+<div class="line"><a name="l00818"></a><span class="lineno">  818</span>&#160;                    insertSourcesOrPushWorklist(retInst-&gt;getReturnValue());</div>
+<div class="line"><a name="l00819"></a><span class="lineno">  819</span>&#160;                }</div>
+<div class="line"><a name="l00820"></a><span class="lineno">  820</span>&#160;            }</div>
+<div class="line"><a name="l00821"></a><span class="lineno">  821</span>&#160;        }</div>
+<div class="line"><a name="l00822"></a><span class="lineno">  822</span>&#160; </div>
+<div class="line"><a name="l00823"></a><span class="lineno">  823</span>&#160;        <span class="comment">// If updating is allowed; store the gathered sources as sources for the current value in the cache</span></div>
+<div class="line"><a name="l00824"></a><span class="lineno">  824</span>&#160;        <span class="keywordflow">if</span> (canUpdate)</div>
+<div class="line"><a name="l00825"></a><span class="lineno">  825</span>&#160;        {</div>
+<div class="line"><a name="l00826"></a><span class="lineno">  826</span>&#160;            _valueToAllocOrClsNameSources[curValue] = sources;</div>
+<div class="line"><a name="l00827"></a><span class="lineno">  827</span>&#160;        }</div>
+<div class="line"><a name="l00828"></a><span class="lineno">  828</span>&#160;    }</div>
+<div class="line"><a name="l00829"></a><span class="lineno">  829</span>&#160; </div>
+<div class="line"><a name="l00830"></a><span class="lineno">  830</span>&#160;    <span class="keywordflow">return</span> _valueToAllocOrClsNameSources[startValue];</div>
+<div class="line"><a name="l00831"></a><span class="lineno">  831</span>&#160;}</div>
+<div class="line"><a name="l00832"></a><span class="lineno">  832</span>&#160; </div>
+<div class="line"><a name="l00833"></a><span class="lineno"><a class="line" href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">  833</a></span>&#160;<a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const CallBase *&gt;</a> &amp;<a class="code" href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">ObjTypeInference::fwFindClsNameSources</a>(<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">Value</a> *startValue)</div>
+<div class="line"><a name="l00834"></a><span class="lineno">  834</span>&#160;{</div>
+<div class="line"><a name="l00835"></a><span class="lineno">  835</span>&#160;    assert(startValue &amp;&amp; <span class="stringliteral">&quot;startValue was null?&quot;</span>);</div>
+<div class="line"><a name="l00836"></a><span class="lineno">  836</span>&#160; </div>
+<div class="line"><a name="l00837"></a><span class="lineno">  837</span>&#160;    <span class="comment">// consult cache</span></div>
+<div class="line"><a name="l00838"></a><span class="lineno">  838</span>&#160;    <span class="keyword">auto</span> tIt = <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>.find(startValue);</div>
+<div class="line"><a name="l00839"></a><span class="lineno">  839</span>&#160;    <span class="keywordflow">if</span> (tIt != <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>.end())</div>
+<div class="line"><a name="l00840"></a><span class="lineno">  840</span>&#160;    {</div>
+<div class="line"><a name="l00841"></a><span class="lineno">  841</span>&#160;        <span class="keywordflow">return</span> tIt-&gt;second;</div>
+<div class="line"><a name="l00842"></a><span class="lineno">  842</span>&#160;    }</div>
+<div class="line"><a name="l00843"></a><span class="lineno">  843</span>&#160; </div>
+<div class="line"><a name="l00844"></a><span class="lineno">  844</span>&#160;    <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set&lt;const CallBase *&gt;</a> sources;</div>
+<div class="line"><a name="l00845"></a><span class="lineno">  845</span>&#160; </div>
+<div class="line"><a name="l00846"></a><span class="lineno">  846</span>&#160;    <span class="comment">// Lambda for adding a callee to the sources iff it is a constructor/destructor/template/dyncast</span></div>
+<div class="line"><a name="l00847"></a><span class="lineno">  847</span>&#160;    <span class="keyword">auto</span> inferViaCppCall = [&amp;sources](<span class="keyword">const</span> <a class="code" href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">CallBase</a> *caller)</div>
+<div class="line"><a name="l00848"></a><span class="lineno">  848</span>&#160;    {</div>
+<div class="line"><a name="l00849"></a><span class="lineno">  849</span>&#160;        <span class="keywordflow">if</span> (!caller) <span class="keywordflow">return</span>;</div>
+<div class="line"><a name="l00850"></a><span class="lineno">  850</span>&#160;        <span class="keywordflow">if</span> (<a class="code" href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">isClsNameSource</a>(caller)) sources.insert(caller);</div>
+<div class="line"><a name="l00851"></a><span class="lineno">  851</span>&#160;    };</div>
+<div class="line"><a name="l00852"></a><span class="lineno">  852</span>&#160; </div>
+<div class="line"><a name="l00853"></a><span class="lineno">  853</span>&#160;    <span class="comment">// Find all calls of starting val (or through cast); add as potential source iff applicable</span></div>
+<div class="line"><a name="l00854"></a><span class="lineno">  854</span>&#160;    <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *user : startValue-&gt;users())</div>
+<div class="line"><a name="l00855"></a><span class="lineno">  855</span>&#160;    {</div>
+<div class="line"><a name="l00856"></a><span class="lineno">  856</span>&#160;        <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *caller = SVFUtil::dyn_cast&lt;CallBase&gt;(user))</div>
+<div class="line"><a name="l00857"></a><span class="lineno">  857</span>&#160;        {</div>
+<div class="line"><a name="l00858"></a><span class="lineno">  858</span>&#160;            inferViaCppCall(caller);</div>
+<div class="line"><a name="l00859"></a><span class="lineno">  859</span>&#160;        }</div>
+<div class="line"><a name="l00860"></a><span class="lineno">  860</span>&#160;        <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *bitcast = SVFUtil::dyn_cast&lt;BitCastInst&gt;(user))</div>
+<div class="line"><a name="l00861"></a><span class="lineno">  861</span>&#160;        {</div>
+<div class="line"><a name="l00862"></a><span class="lineno">  862</span>&#160;            <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *cast_user : bitcast-&gt;users())</div>
+<div class="line"><a name="l00863"></a><span class="lineno">  863</span>&#160;            {</div>
+<div class="line"><a name="l00864"></a><span class="lineno">  864</span>&#160;                <span class="keywordflow">if</span> (<span class="keyword">const</span> <span class="keyword">auto</span> *caller = SVFUtil::dyn_cast&lt;CallBase&gt;(cast_user))</div>
+<div class="line"><a name="l00865"></a><span class="lineno">  865</span>&#160;                {</div>
+<div class="line"><a name="l00866"></a><span class="lineno">  866</span>&#160;                    inferViaCppCall(caller);</div>
+<div class="line"><a name="l00867"></a><span class="lineno">  867</span>&#160;                }</div>
+<div class="line"><a name="l00868"></a><span class="lineno">  868</span>&#160;            }</div>
+<div class="line"><a name="l00869"></a><span class="lineno">  869</span>&#160;        }</div>
+<div class="line"><a name="l00870"></a><span class="lineno">  870</span>&#160;    }</div>
+<div class="line"><a name="l00871"></a><span class="lineno">  871</span>&#160; </div>
+<div class="line"><a name="l00872"></a><span class="lineno">  872</span>&#160;    <span class="comment">// Store sources in cache for starting value &amp; return the found sources</span></div>
+<div class="line"><a name="l00873"></a><span class="lineno">  873</span>&#160;    <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">_objToClsNameSources</a>[startValue] = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVFUtil::move</a>(sources);</div>
+<div class="line"><a name="l00874"></a><span class="lineno">  874</span>&#160;}</div>
 </div><!-- fragment --></div><!-- contents -->
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a744de27c13a045108c834c9484d7271c"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">SVF::ObjTypeInference::bwFindAllocOrClsNameSources</a></div><div class="ttdeci">Set&lt; const Value * &gt; &amp; bwFindAllocOrClsNameSources(const Value *startValue)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00676">ObjTypeInference.cpp:676</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a744de27c13a045108c834c9484d7271c"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a744de27c13a045108c834c9484d7271c">SVF::ObjTypeInference::bwFindAllocOrClsNameSources</a></div><div class="ttdeci">Set&lt; const Value * &gt; &amp; bwFindAllocOrClsNameSources(const Value *startValue)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00700">ObjTypeInference.cpp:700</a></div></div>
 <div class="ttc" id="aclassSVF_1_1LLVMModuleSet_html_acf40310917909e4234282c0695a43160"><div class="ttname"><a href="classSVF_1_1LLVMModuleSet.html#acf40310917909e4234282c0695a43160">SVF::LLVMModuleSet::getLLVMModuleSet</a></div><div class="ttdeci">static LLVMModuleSet * getLLVMModuleSet()</div><div class="ttdef"><b>Definition:</b> <a href="LLVMModule_8h_source.html#l00105">LLVMModule.h:105</a></div></div>
 <div class="ttc" id="aObjTypeInference_8cpp_html_ac48ef12f2a6f605d6fa5d31e7623a826"><div class="ttname"><a href="ObjTypeInference_8cpp.html#ac48ef12f2a6f605d6fa5d31e7623a826">WARN_MSG</a></div><div class="ttdeci">#define WARN_MSG(msg)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00071">ObjTypeInference.cpp:71</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_a7655b13bbfe720ca2b8a25e0a72528e6"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#a7655b13bbfe720ca2b8a25e0a72528e6">SVF::SVFUtil::errMsg</a></div><div class="ttdeci">std::string errMsg(const std::string &amp;msg)</div><div class="ttdoc">Print error message by converting a string into red string output.</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8cpp_source.html#l00076">SVFUtil.cpp:76</a></div></div>
 <div class="ttc" id="anamespaceSVF_html_aedf0d6718ca176e0b9e17ab4b30729c6"><div class="ttname"><a href="namespaceSVF.html#aedf0d6718ca176e0b9e17ab4b30729c6">SVF::OrderedMap</a></div><div class="ttdeci">std::map&lt; Key, Value, Compare, Allocator &gt; OrderedMap</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00105">GeneralType.h:105</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_af44dd44401384a8e50b0cbe288152ab5"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">SVF::ObjTypeInference::fwFindClsNameSources</a></div><div class="ttdeci">Set&lt; const CallBase * &gt; &amp; fwFindClsNameSources(const Value *startValue)</div><div class="ttdoc">forward find class name sources starting from an allocation</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00809">ObjTypeInference.cpp:809</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_ab696aab940eb187dc81217efe8649af5"><div class="ttname"><a href="namespaceSVF.html#ab696aab940eb187dc81217efe8649af5">SVF::StoreInst</a></div><div class="ttdeci">llvm::StoreInst StoreInst</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00147">BasicTypes.h:147</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_af44dd44401384a8e50b0cbe288152ab5"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#af44dd44401384a8e50b0cbe288152ab5">SVF::ObjTypeInference::fwFindClsNameSources</a></div><div class="ttdeci">Set&lt; const CallBase * &gt; &amp; fwFindClsNameSources(const Value *startValue)</div><div class="ttdoc">forward find class name sources starting from an allocation</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00833">ObjTypeInference.cpp:833</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_ab696aab940eb187dc81217efe8649af5"><div class="ttname"><a href="namespaceSVF.html#ab696aab940eb187dc81217efe8649af5">SVF::StoreInst</a></div><div class="ttdeci">llvm::StoreInst StoreInst</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00148">BasicTypes.h:148</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1LLVMUtil_html_aca11801ed6ef6ff8d2a1e85bc0fc5794"><div class="ttname"><a href="namespaceSVF_1_1LLVMUtil.html#aca11801ed6ef6ff8d2a1e85bc0fc5794">SVF::LLVMUtil::isObject</a></div><div class="ttdeci">bool isObject(const Value *ref)</div><div class="ttdoc">Return true if this value refers to a object.</div><div class="ttdef"><b>Definition:</b> <a href="LLVMUtil_8cpp_source.html#l00069">LLVMUtil.cpp:69</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1LLVMUtil_html_a86c0a0cb4ada72bd4f42c77558e6a350"><div class="ttname"><a href="namespaceSVF_1_1LLVMUtil.html#a86c0a0cb4ada72bd4f42c77558e6a350">SVF::LLVMUtil::dumpValueAndDbgInfo</a></div><div class="ttdeci">std::string dumpValueAndDbgInfo(const Value *val)</div><div class="ttdef"><b>Definition:</b> <a href="LLVMUtil_8cpp_source.html#l00917">LLVMUtil.cpp:917</a></div></div>
 <div class="ttc" id="aclassSVF_1_1LLVMModuleSet_html_aaf9b679407f12b93afc53c157d37b444"><div class="ttname"><a href="classSVF_1_1LLVMModuleSet.html#aaf9b679407f12b93afc53c157d37b444">SVF::LLVMModuleSet::getLLVMValue</a></div><div class="ttdeci">const Value * getLLVMValue(const SVFValue *value) const</div><div class="ttdef"><b>Definition:</b> <a href="LLVMModule_8h_source.html#l00198">LLVMModule.h:198</a></div></div>
 <div class="ttc" id="aLLVMUtil_8h_html"><div class="ttname"><a href="LLVMUtil_8h.html">LLVMUtil.h</a></div></div>
 <div class="ttc" id="anamespaceSVF_html_af739db846e47ba6b2fd15eaad31ab7fb"><div class="ttname"><a href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">SVF::Set</a></div><div class="ttdeci">std::unordered_set&lt; Key, Hash, KeyEqual, Allocator &gt; Set</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00092">GeneralType.h:92</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1cppUtil_html_a4e1785295e2695fae72758d8bbe4f7ac"><div class="ttname"><a href="namespaceSVF_1_1cppUtil.html#a4e1785295e2695fae72758d8bbe4f7ac">SVF::cppUtil::classTyHasVTable</a></div><div class="ttdeci">bool classTyHasVTable(const StructType *ty)</div><div class="ttdef"><b>Definition:</b> <a href="CppUtil_8cpp_source.html#l00504">CppUtil.cpp:504</a></div></div>
-<div class="ttc" id="anamespaceSVF_html"><div class="ttname"><a href="namespaceSVF.html">SVF</a></div><div class="ttdoc">for isBitcode</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00066">BasicTypes.h:66</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_aa962cc1d782cc46553251e96b64a754b"><div class="ttname"><a href="namespaceSVF.html#aa962cc1d782cc46553251e96b64a754b">SVF::PointerType</a></div><div class="ttdeci">llvm::PointerType PointerType</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00095">BasicTypes.h:95</a></div></div>
+<div class="ttc" id="anamespaceSVF_html"><div class="ttname"><a href="namespaceSVF.html">SVF</a></div><div class="ttdoc">for isBitcode</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00067">BasicTypes.h:67</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_aa962cc1d782cc46553251e96b64a754b"><div class="ttname"><a href="namespaceSVF.html#aa962cc1d782cc46553251e96b64a754b">SVF::PointerType</a></div><div class="ttdeci">llvm::PointerType PointerType</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00096">BasicTypes.h:96</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1cppUtil_html_a26ccd6abf127a7ccc34a973f7b13161b"><div class="ttname"><a href="namespaceSVF_1_1cppUtil.html#a26ccd6abf127a7ccc34a973f7b13161b">SVF::cppUtil::extractClsNameFromDynCast</a></div><div class="ttdeci">std::string extractClsNameFromDynCast(const CallBase *callBase)</div><div class="ttdoc">extract class name from cpp dyncast function</div><div class="ttdef"><b>Definition:</b> <a href="CppUtil_8cpp_source.html#l00853">CppUtil.cpp:853</a></div></div>
 <div class="ttc" id="aclassSVF_1_1LLVMModuleSet_html_a50fc24901350df9db890ba16a9b87e33"><div class="ttname"><a href="classSVF_1_1LLVMModuleSet.html#a50fc24901350df9db890ba16a9b87e33">SVF::LLVMModuleSet::getSVFFunction</a></div><div class="ttdeci">SVFFunction * getSVFFunction(const Function *fun) const</div><div class="ttdef"><b>Definition:</b> <a href="LLVMModule_8h_source.html#l00205">LLVMModule.h:205</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_a90b263fd2f541eca78135078114cabda"><div class="ttname"><a href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">SVF::Value</a></div><div class="ttdeci">llvm::Value Value</div><div class="ttdoc">LLVM Basic classes.</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00081">BasicTypes.h:81</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_a90b263fd2f541eca78135078114cabda"><div class="ttname"><a href="namespaceSVF.html#a90b263fd2f541eca78135078114cabda">SVF::Value</a></div><div class="ttdeci">llvm::Value Value</div><div class="ttdoc">LLVM Basic classes.</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00082">BasicTypes.h:82</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_ab2064cb70c76f399ce115f2621adea35"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#ab2064cb70c76f399ce115f2621adea35">SVF::SVFUtil::isHeapAllocExtCallViaRet</a></div><div class="ttdeci">bool isHeapAllocExtCallViaRet(const CallSite cs)</div><div class="ttdoc">interfaces to be used externally</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00442">SVFUtil.h:442</a></div></div>
 <div class="ttc" id="acJSON_8h_html_a25d22ecc7e656d2c59332072684e8766"><div class="ttname"><a href="cJSON_8h.html#a25d22ecc7e656d2c59332072684e8766">name</a></div><div class="ttdeci">const char *const name</div><div class="ttdef"><b>Definition:</b> <a href="cJSON_8h_source.html#l00264">cJSON.h:264</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a205fa59a7250270b216f47df78ef2319"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">SVF::ObjTypeInference::selectLargestSizedType</a></div><div class="ttdeci">const Type * selectLargestSizedType(Set&lt; const Type * &gt; &amp;objTys)</div><div class="ttdoc">select the largest (conservative) type from all types</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00562">ObjTypeInference.cpp:562</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_a5faee14fa1dd41447bc73ac365fe33c1"><div class="ttname"><a href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">SVF::Function</a></div><div class="ttdeci">llvm::Function Function</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00084">BasicTypes.h:84</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_affba423b674a0aba723e33101826e297"><div class="ttname"><a href="namespaceSVF.html#affba423b674a0aba723e33101826e297">SVF::LLVMContext</a></div><div class="ttdeci">llvm::LLVMContext LLVMContext</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00069">BasicTypes.h:69</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_a1f4624771922dc8c2447ad7433588c73"><div class="ttname"><a href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">SVF::CallBase</a></div><div class="ttdeci">llvm::CallBase CallBase</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00145">BasicTypes.h:145</a></div></div>
-<div class="ttc" id="anamespaceSVF_html_a1d008c0666c145622b81d427be64c52d"><div class="ttname"><a href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">SVF::Type</a></div><div class="ttdeci">llvm::Type Type</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00082">BasicTypes.h:82</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a205fa59a7250270b216f47df78ef2319"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a205fa59a7250270b216f47df78ef2319">SVF::ObjTypeInference::selectLargestSizedType</a></div><div class="ttdeci">const Type * selectLargestSizedType(Set&lt; const Type * &gt; &amp;objTys)</div><div class="ttdoc">select the largest (conservative) type from all types</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00586">ObjTypeInference.cpp:586</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_a5faee14fa1dd41447bc73ac365fe33c1"><div class="ttname"><a href="namespaceSVF.html#a5faee14fa1dd41447bc73ac365fe33c1">SVF::Function</a></div><div class="ttdeci">llvm::Function Function</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00085">BasicTypes.h:85</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_affba423b674a0aba723e33101826e297"><div class="ttname"><a href="namespaceSVF.html#affba423b674a0aba723e33101826e297">SVF::LLVMContext</a></div><div class="ttdeci">llvm::LLVMContext LLVMContext</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00070">BasicTypes.h:70</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_a1f4624771922dc8c2447ad7433588c73"><div class="ttname"><a href="namespaceSVF.html#a1f4624771922dc8c2447ad7433588c73">SVF::CallBase</a></div><div class="ttdeci">llvm::CallBase CallBase</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00146">BasicTypes.h:146</a></div></div>
+<div class="ttc" id="anamespaceSVF_html_a1d008c0666c145622b81d427be64c52d"><div class="ttname"><a href="namespaceSVF.html#a1d008c0666c145622b81d427be64c52d">SVF::Type</a></div><div class="ttdeci">llvm::Type Type</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00083">BasicTypes.h:83</a></div></div>
 <div class="ttc" id="aObjTypeInference_8h_html"><div class="ttname"><a href="ObjTypeInference_8h.html">ObjTypeInference.h</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1LLVMUtil_html_a6e8682537cf5bed808df439bd7e1add9"><div class="ttname"><a href="namespaceSVF_1_1LLVMUtil.html#a6e8682537cf5bed808df439bd7e1add9">SVF::LLVMUtil::dumpType</a></div><div class="ttdeci">std::string dumpType(const Type *type)</div><div class="ttdef"><b>Definition:</b> <a href="LLVMUtil_8cpp_source.html#l00906">LLVMUtil.cpp:906</a></div></div>
 <div class="ttc" id="aclassSVF_1_1SVFBasicBlock_html_ad05f85ce931d4479f71d1947a25599dc"><div class="ttname"><a href="classSVF_1_1SVFBasicBlock.html#ad05f85ce931d4479f71d1947a25599dc">SVF::SVFBasicBlock::back</a></div><div class="ttdeci">const SVFInstruction * back() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00603">SVFValue.h:603</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a99eaaef89f214fc8587349361600b44d"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">SVF::ObjTypeInference::typeSizeDiffTest</a></div><div class="ttdeci">void typeSizeDiffTest(const PointerType *oPTy, const Type *iTy, const Value *val)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00539">ObjTypeInference.cpp:539</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a99eaaef89f214fc8587349361600b44d"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a99eaaef89f214fc8587349361600b44d">SVF::ObjTypeInference::typeSizeDiffTest</a></div><div class="ttdeci">void typeSizeDiffTest(const PointerType *oPTy, const Type *iTy, const Value *val)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00563">ObjTypeInference.cpp:563</a></div></div>
 <div class="ttc" id="aclassSVF_1_1LLVMModuleSet_html_ac1a9d20d62066ec4e181fad223669e32"><div class="ttname"><a href="classSVF_1_1LLVMModuleSet.html#ac1a9d20d62066ec4e181fad223669e32">SVF::LLVMModuleSet::getContext</a></div><div class="ttdeci">LLVMContext &amp; getContext() const</div><div class="ttdef"><b>Definition:</b> <a href="LLVMModule_8h_source.html#l00344">LLVMModule.h:344</a></div></div>
 <div class="ttc" id="aCppUtil_8h_html"><div class="ttname"><a href="CppUtil_8h.html">CppUtil.h</a></div></div>
 <div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a9d99aa95a862bc1434c6fbc3dec67a64"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a9d99aa95a862bc1434c6fbc3dec67a64">SVF::ObjTypeInference::fwInferObjType</a></div><div class="ttdeci">const Type * fwInferObjType(const Value *var)</div><div class="ttdoc">forward infer the type of the object pointed by var</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00162">ObjTypeInference.cpp:162</a></div></div>
@@ -917,19 +941,19 @@ $(function() {
 <div class="ttc" id="anamespaceSVF_1_1cppUtil_html_a985a32c8324d559a87e4ee6e5a1e1efd"><div class="ttname"><a href="namespaceSVF_1_1cppUtil.html#a985a32c8324d559a87e4ee6e5a1e1efd">SVF::cppUtil::isClsNameSource</a></div><div class="ttdeci">bool isClsNameSource(const Value *val)</div><div class="ttdef"><b>Definition:</b> <a href="CppUtil_8cpp_source.html#l00793">CppUtil.cpp:793</a></div></div>
 <div class="ttc" id="acJSON_8cpp_html_a3f9a0d3265a6254722587175dac3e4dc"><div class="ttname"><a href="cJSON_8cpp.html#a3f9a0d3265a6254722587175dac3e4dc">type</a></div><div class="ttdeci">newitem type</div><div class="ttdef"><b>Definition:</b> <a href="cJSON_8cpp_source.html#l02739">cJSON.cpp:2739</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1cppUtil_html_ae97bb256f20aa617f21a49c98d46177a"><div class="ttname"><a href="namespaceSVF_1_1cppUtil.html#ae97bb256f20aa617f21a49c98d46177a">SVF::cppUtil::extractClsNamesFromFunc</a></div><div class="ttdeci">Set&lt; std::string &gt; extractClsNamesFromFunc(const Function *foo)</div><div class="ttdoc">extract class name from the c++ function name, e.g., constructor/destructors</div><div class="ttdef"><b>Definition:</b> <a href="CppUtil_8cpp_source.html#l00641">CppUtil.cpp:641</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a5eae038a7bffb0549ca75cd9c850ff1e"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">SVF::ObjTypeInference::objTyToNumFields</a></div><div class="ttdeci">u32_t objTyToNumFields(const Type *objTy)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00578">ObjTypeInference.cpp:578</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a5eae038a7bffb0549ca75cd9c850ff1e"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a5eae038a7bffb0549ca75cd9c850ff1e">SVF::ObjTypeInference::objTyToNumFields</a></div><div class="ttdeci">u32_t objTyToNumFields(const Type *objTy)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00602">ObjTypeInference.cpp:602</a></div></div>
 <div class="ttc" id="aclassSVF_1_1SVFFunction_html"><div class="ttname"><a href="classSVF_1_1SVFFunction.html">SVF::SVFFunction</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00297">SVFValue.h:297</a></div></div>
 <div class="ttc" id="aclassSVF_1_1FILOWorkList_html_afcf3fcda18e8d3e2bad70a51376c0ce1"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">SVF::FILOWorkList::push</a></div><div class="ttdeci">bool push(const Data &amp;data)</div><div class="ttdef"><b>Definition:</b> <a href="WorkList_8h_source.html#l00257">WorkList.h:257</a></div></div>
 <div class="ttc" id="aBasicTypes_8h_html"><div class="ttname"><a href="BasicTypes_8h.html">BasicTypes.h</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a42149ece87a178241ef1ef0cce7ec554"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">SVF::ObjTypeInference::bwfindAllocOfVar</a></div><div class="ttdeci">Set&lt; const Value * &gt; &amp; bwfindAllocOfVar(const Value *var)</div><div class="ttdoc">backward collect all possible allocation sites (stack, static, heap) of var</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00386">ObjTypeInference.cpp:386</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a62020ece25ac660f1adb41bd0cf40be7"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">SVF::ObjTypeInference::isAlloc</a></div><div class="ttdeci">bool isAlloc(const SVF::Value *val)</div><div class="ttdoc">is allocation (stack, static, heap)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00505">ObjTypeInference.cpp:505</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a42149ece87a178241ef1ef0cce7ec554"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a42149ece87a178241ef1ef0cce7ec554">SVF::ObjTypeInference::bwfindAllocOfVar</a></div><div class="ttdeci">Set&lt; const Value * &gt; &amp; bwfindAllocOfVar(const Value *var)</div><div class="ttdoc">backward collect all possible allocation sites (stack, static, heap) of var</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00410">ObjTypeInference.cpp:410</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a62020ece25ac660f1adb41bd0cf40be7"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a62020ece25ac660f1adb41bd0cf40be7">SVF::ObjTypeInference::isAlloc</a></div><div class="ttdeci">bool isAlloc(const SVF::Value *val)</div><div class="ttdoc">is allocation (stack, static, heap)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00529">ObjTypeInference.cpp:529</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_a72502f7f536418621485e90ab98c2016"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#a72502f7f536418621485e90ab98c2016">SVF::SVFUtil::move</a></div><div class="ttdeci">constexpr std::remove_reference&lt; T &gt;::type &amp;&amp; move(T &amp;&amp;t) noexcept</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00621">SVFUtil.h:621</a></div></div>
 <div class="ttc" id="aclassSVF_1_1SVFFunction_html_ac4c28c8d205d354f3a982119f29f2aac"><div class="ttname"><a href="classSVF_1_1SVFFunction.html#ac4c28c8d205d354f3a982119f29f2aac">SVF::SVFFunction::getExitBB</a></div><div class="ttdeci">const SVFBasicBlock * getExitBB() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8cpp_source.html#l00192">SVFValue.cpp:192</a></div></div>
 <div class="ttc" id="aLLVMModule_8h_html"><div class="ttname"><a href="LLVMModule_8h.html">LLVMModule.h</a></div></div>
 <div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_aee4383a13cda421acb034ea147e33a6d"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#aee4383a13cda421acb034ea147e33a6d">SVF::ObjTypeInference::defaultType</a></div><div class="ttdeci">const Type * defaultType(const Value *val)</div><div class="ttdoc">default type</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00114">ObjTypeInference.cpp:114</a></div></div>
 <div class="ttc" id="anamespaceSVF_html_a4f21e91ff8eaea5207afe5c60dbd78d7"><div class="ttname"><a href="namespaceSVF.html#a4f21e91ff8eaea5207afe5c60dbd78d7">SVF::OrderedSet</a></div><div class="ttdeci">std::set&lt; Key, Compare, Allocator &gt; OrderedSet</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00101">GeneralType.h:101</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_aed0b0b9f035057552a6a82154fd88e61"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#aed0b0b9f035057552a6a82154fd88e61">SVF::SVFUtil::outs</a></div><div class="ttdeci">std::ostream &amp; outs()</div><div class="ttdoc">Overwrite llvm::outs()</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00050">SVFUtil.h:50</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_afe926ee3427bb329d189e0c40bb1cd60"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">SVF::ObjTypeInference::validateTypeCheck</a></div><div class="ttdeci">void validateTypeCheck(const CallBase *cs)</div><div class="ttdoc">validate type inference</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00514">ObjTypeInference.cpp:514</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_afe926ee3427bb329d189e0c40bb1cd60"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#afe926ee3427bb329d189e0c40bb1cd60">SVF::ObjTypeInference::validateTypeCheck</a></div><div class="ttdeci">void validateTypeCheck(const CallBase *cs)</div><div class="ttdoc">validate type inference</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00538">ObjTypeInference.cpp:538</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_a05dc00b2bd9a8176aae31b6cfffe725d"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#a05dc00b2bd9a8176aae31b6cfffe725d">SVF::SVFUtil::sucMsg</a></div><div class="ttdeci">std::string sucMsg(const std::string &amp;msg)</div><div class="ttdoc">Returns successful message by converting a string into green string output.</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8cpp_source.html#l00053">SVFUtil.cpp:53</a></div></div>
 <div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_af1bd0b800558eb5e3bcc6fae9c86a874"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#af1bd0b800558eb5e3bcc6fae9c86a874">SVF::ObjTypeInference::_objToClsNameSources</a></div><div class="ttdeci">ObjToClsNameSources _objToClsNameSources</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8h_source.html#l00060">ObjTypeInference.h:60</a></div></div>
 <div class="ttc" id="aObjTypeInference_8cpp_html_a5f334de99eb942058f27a1025c346f70"><div class="ttname"><a href="ObjTypeInference_8cpp.html#a5f334de99eb942058f27a1025c346f70">TYPEMALLOC</a></div><div class="ttdeci">const std::string TYPEMALLOC</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00081">ObjTypeInference.cpp:81</a></div></div>
@@ -943,10 +967,10 @@ $(function() {
 <div class="ttc" id="aclassSVF_1_1FILOWorkList_html_a3fd9acb6d09fd142bfd402fdf8cac93b"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">SVF::FILOWorkList::pop</a></div><div class="ttdeci">Data pop()</div><div class="ttdef"><b>Definition:</b> <a href="WorkList_8h_source.html#l00272">WorkList.h:272</a></div></div>
 <div class="ttc" id="aclassSVF_1_1FILOWorkList_html"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html">SVF::FILOWorkList</a></div><div class="ttdef"><b>Definition:</b> <a href="AbstractExecution_8h_source.html#l00044">AbstractExecution.h:44</a></div></div>
 <div class="ttc" id="aclassSVF_1_1Options_html_aaab923c093730b1670a54f09340b1bd5"><div class="ttname"><a href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">SVF::Options::MaxFieldLimit</a></div><div class="ttdeci">static const Option&lt; u32_t &gt; MaxFieldLimit</div><div class="ttdoc">Maximum number of field derivations for an object.</div><div class="ttdef"><b>Definition:</b> <a href="Options_8h_source.html#l00038">Options.h:38</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a72da2d7f06e8fee67dc5b3c451fa5dee"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">SVF::ObjTypeInference::getArgPosInCall</a></div><div class="ttdeci">u32_t getArgPosInCall(const CallBase *callBase, const Value *arg)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00553">ObjTypeInference.cpp:553</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a72da2d7f06e8fee67dc5b3c451fa5dee"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a72da2d7f06e8fee67dc5b3c451fa5dee">SVF::ObjTypeInference::getArgPosInCall</a></div><div class="ttdeci">u32_t getArgPosInCall(const CallBase *callBase, const Value *arg)</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00577">ObjTypeInference.cpp:577</a></div></div>
 <div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_ae905a7d3f1b211fbaaf9e703b1f44482"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#ae905a7d3f1b211fbaaf9e703b1f44482">SVF::ObjTypeInference::inferObjType</a></div><div class="ttdeci">const Type * inferObjType(const Value *var)</div><div class="ttdoc">get or infer the type of the object pointed by the value</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00136">ObjTypeInference.cpp:136</a></div></div>
 <div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a172f97ff9c9a7c90dbec6329c89775ad"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a172f97ff9c9a7c90dbec6329c89775ad">SVF::ObjTypeInference::getLLVMCtx</a></div><div class="ttdeci">LLVMContext &amp; getLLVMCtx()</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00125">ObjTypeInference.cpp:125</a></div></div>
-<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a8b5f65818c69c70e07ffbc2bbe1c7c91"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">SVF::ObjTypeInference::inferThisPtrClsName</a></div><div class="ttdeci">Set&lt; std::string &gt; &amp; inferThisPtrClsName(const Value *thisPtr)</div><div class="ttdoc">get or infer the class names of thisptr</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00603">ObjTypeInference.cpp:603</a></div></div>
+<div class="ttc" id="aclassSVF_1_1ObjTypeInference_html_a8b5f65818c69c70e07ffbc2bbe1c7c91"><div class="ttname"><a href="classSVF_1_1ObjTypeInference.html#a8b5f65818c69c70e07ffbc2bbe1c7c91">SVF::ObjTypeInference::inferThisPtrClsName</a></div><div class="ttdeci">Set&lt; std::string &gt; &amp; inferThisPtrClsName(const Value *thisPtr)</div><div class="ttdoc">get or infer the class names of thisptr</div><div class="ttdef"><b>Definition:</b> <a href="ObjTypeInference_8cpp_source.html#l00627">ObjTypeInference.cpp:627</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1LLVMUtil_html_abba4111230f6009bbf50518ee36a9870"><div class="ttname"><a href="namespaceSVF_1_1LLVMUtil.html#abba4111230f6009bbf50518ee36a9870">SVF::LLVMUtil::getPtrElementType</a></div><div class="ttdeci">static Type * getPtrElementType(const PointerType *pty)</div><div class="ttdef"><b>Definition:</b> <a href="LLVMUtil_8h_source.html#l00099">LLVMUtil.h:99</a></div></div>
 <div class="ttc" id="anamespaceSVF_html_ad42bff8d0a7d60a085aa32d10f4955af"><div class="ttname"><a href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">SVF::u32_t</a></div><div class="ttdeci">unsigned u32_t</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00046">GeneralType.h:46</a></div></div>
 <div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_ab65033f068bfbeb0a1c52dcec3beb6bc"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#ab65033f068bfbeb0a1c52dcec3beb6bc">SVF::SVFUtil::errs</a></div><div class="ttdeci">std::ostream &amp; errs()</div><div class="ttdoc">Overwrite llvm::errs()</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00056">SVFUtil.h:56</a></div></div>