svf-tools 1.0.910 → 1.0.911
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/SVF-doxygen/html/AbstractInterpretation_8cpp.html +5 -5
- package/SVF-doxygen/html/AbstractInterpretation_8cpp_source.html +1151 -1131
- package/SVF-doxygen/html/AbstractInterpretation_8h_source.html +31 -31
- package/SVF-doxygen/html/BufOverflowChecker_8cpp_source.html +457 -450
- package/SVF-doxygen/html/BufOverflowChecker_8h_source.html +2 -2
- package/SVF-doxygen/html/SVFIR2AbsState_8h_source.html +2 -2
- package/SVF-doxygen/html/classSVF_1_1AEStat.html +116 -114
- package/SVF-doxygen/html/classSVF_1_1AbstractInterpretation-members.html +1 -1
- package/SVF-doxygen/html/classSVF_1_1AbstractInterpretation.html +1009 -991
- package/SVF-doxygen/html/classSVF_1_1BufOverflowChecker-members.html +1 -1
- package/SVF-doxygen/html/classSVF_1_1BufOverflowChecker.html +118 -115
- package/SVF-doxygen/html/classSVF_1_1SVFIR2AbsState-members.html +4 -4
- package/SVF-doxygen/html/classSVF_1_1SVFIR2AbsState.html +32 -32
- package/SVF-doxygen/html/functions.html +2 -2
- package/SVF-doxygen/html/functions_func_g.html +13 -13
- package/SVF-doxygen/html/functions_g.html +9 -9
- package/SVF-doxygen/html/functions_p.html +6 -6
- package/SVF-doxygen/html/functions_s.html +7 -7
- package/SVF-doxygen/html/functions_t.html +2 -2
- package/SVF-doxygen/html/functions_v.html +6 -6
- package/SVF-doxygen/html/functions_vars.html +2 -2
- package/SVF-doxygen/html/functions_w.html +9 -17
- package/SVF-doxygen/html/search/all_0.js +1 -1
- package/SVF-doxygen/html/search/all_10.js +3 -3
- package/SVF-doxygen/html/search/all_12.js +5 -5
- package/SVF-doxygen/html/search/all_13.js +4 -4
- package/SVF-doxygen/html/search/all_15.js +3 -3
- package/SVF-doxygen/html/search/all_16.js +1 -1
- package/SVF-doxygen/html/search/all_7.js +248 -248
- package/SVF-doxygen/html/search/functions_10.js +1 -1
- package/SVF-doxygen/html/search/functions_7.js +247 -247
- package/SVF-doxygen/html/search/variables_0.js +1 -1
- package/SVF-doxygen/html/search/variables_12.js +1 -1
- package/SVF-doxygen/html/search/variables_13.js +2 -2
- package/package.json +1 -1
- package/svf/include/AE/Svfexe/AbstractInterpretation.h +1 -1
- package/svf/include/AE/Svfexe/SVFIR2AbsState.h +1 -1
- package/svf/lib/AE/Svfexe/AbstractInterpretation.cpp +88 -68
- package/svf/lib/AE/Svfexe/BufOverflowChecker.cpp +37 -30
|
@@ -137,9 +137,9 @@ $(function() {
|
|
|
137
137
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1GepStmt.html">GepStmt</a> *gep = SVFUtil::dyn_cast<GepStmt>(stmt))</div>
|
|
138
138
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  {</div>
|
|
139
139
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>  <span class="keywordflow">for</span> (<a class="code" href="namespaceSVF.html#a43a65e0d33af3c743294f7a1139d2301">NodeID</a> addrID:</div>
|
|
140
|
-
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
140
|
+
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">getAddrs</a>(gep->getLHSVarID()).<a class="code" href="structSVF_1_1AbstractValue.html#ab1fe6a57f784971b3bc603dbfda746e8">getAddrs</a>())</div>
|
|
141
141
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>  {</div>
|
|
142
|
-
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  <a class="code" href="namespaceSVF.html#a43a65e0d33af3c743294f7a1139d2301">NodeID</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
142
|
+
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  <a class="code" href="namespaceSVF.html#a43a65e0d33af3c743294f7a1139d2301">NodeID</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#ac37760566b534d89a61d789b00efb993">getInternalID</a>(addrID);</div>
|
|
143
143
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>[objId] = gep;</div>
|
|
144
144
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  }</div>
|
|
145
145
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  }</div>
|
|
@@ -209,9 +209,9 @@ $(function() {
|
|
|
209
209
|
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  {</div>
|
|
210
210
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  <span class="comment">//scanf("%d", &data);</span></div>
|
|
211
211
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  <span class="keywordflow">if</span> (cs.arg_size() < 2) <span class="keywordflow">return</span>;</div>
|
|
212
|
-
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
212
|
+
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
213
213
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> dst_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(1));</div>
|
|
214
|
-
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <span class="keywordflow">if</span> (!<a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
214
|
+
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <span class="keywordflow">if</span> (!<a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a62baa9403069a9b1e010eaeb2f6b9b34">inVarToAddrsTable</a>(dst_id))</div>
|
|
215
215
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  {</div>
|
|
216
216
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  <a class="code" href="structSVF_1_1BufOverflowException.html">BufOverflowException</a> bug(<span class="stringliteral">"scanf may cause buffer overflow.\n"</span>, 0, 0, 0, 0, cs.getArgument(1));</div>
|
|
217
217
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">addBugToRecoder</a>(bug, <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1SVFIR.html#abda052b73e869ed6d7c139ad1528da11">getICFG</a>()-><a class="code" href="classSVF_1_1ICFG.html#a5f2c0aaba07d6fdd63058da0fb60ca8b">getICFGNode</a>(cs.getInstruction()));</div>
|
|
@@ -219,11 +219,11 @@ $(function() {
|
|
|
219
219
|
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  }</div>
|
|
220
220
|
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <span class="keywordflow">else</span></div>
|
|
221
221
|
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  {</div>
|
|
222
|
-
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> Addrs = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
222
|
+
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> Addrs = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">getAddrs</a>(dst_id);</div>
|
|
223
223
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> vaddr: Addrs.<a class="code" href="structSVF_1_1AbstractValue.html#ab1fe6a57f784971b3bc603dbfda746e8">getAddrs</a>())</div>
|
|
224
224
|
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  {</div>
|
|
225
|
-
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
226
|
-
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> range = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
225
|
+
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#ac37760566b534d89a61d789b00efb993">getInternalID</a>(vaddr);</div>
|
|
226
|
+
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> range = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a4e032a5e0898f0e349927d5a86c8477c">getRangeLimitFromType</a>(<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1GenericGraph.html#a43c9c773bfa17abf481c33073e30d01b">getGNode</a>(objId)-><a class="code" href="classSVF_1_1SVFVar.html#ab6f95d3e7e099d75cfc9645ebc037047">getType</a>());</div>
|
|
227
227
|
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  es.<a class="code" href="classSVF_1_1AbstractState.html#a1f935ea8ab16b04699284bf92bbbb23c">store</a>(vaddr, range);</div>
|
|
228
228
|
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  }</div>
|
|
229
229
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  }</div>
|
|
@@ -232,9 +232,9 @@ $(function() {
|
|
|
232
232
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span>  {</div>
|
|
233
233
|
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span>  <span class="comment">//fscanf(stdin, "%d", &data);</span></div>
|
|
234
234
|
<div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  <span class="keywordflow">if</span> (cs.arg_size() < 3) <span class="keywordflow">return</span>;</div>
|
|
235
|
-
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
235
|
+
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
236
236
|
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> dst_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(2));</div>
|
|
237
|
-
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  <span class="keywordflow">if</span> (!<a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
237
|
+
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  <span class="keywordflow">if</span> (!<a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a62baa9403069a9b1e010eaeb2f6b9b34">inVarToAddrsTable</a>(dst_id))</div>
|
|
238
238
|
<div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  {</div>
|
|
239
239
|
<div class="line"><a name="l00168"></a><span class="lineno"> 168</span>  <a class="code" href="structSVF_1_1BufOverflowException.html">BufOverflowException</a> bug(<span class="stringliteral">"scanf may cause buffer overflow.\n"</span>, 0, 0, 0, 0, cs.getArgument(2));</div>
|
|
240
240
|
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">addBugToRecoder</a>(bug, <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1SVFIR.html#abda052b73e869ed6d7c139ad1528da11">getICFG</a>()-><a class="code" href="classSVF_1_1ICFG.html#a5f2c0aaba07d6fdd63058da0fb60ca8b">getICFGNode</a>(cs.getInstruction()));</div>
|
|
@@ -242,11 +242,11 @@ $(function() {
|
|
|
242
242
|
<div class="line"><a name="l00171"></a><span class="lineno"> 171</span>  }</div>
|
|
243
243
|
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  <span class="keywordflow">else</span></div>
|
|
244
244
|
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  {</div>
|
|
245
|
-
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> Addrs = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
245
|
+
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> Addrs = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">getAddrs</a>(dst_id);</div>
|
|
246
246
|
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> vaddr: Addrs.<a class="code" href="structSVF_1_1AbstractValue.html#ab1fe6a57f784971b3bc603dbfda746e8">getAddrs</a>())</div>
|
|
247
247
|
<div class="line"><a name="l00176"></a><span class="lineno"> 176</span>  {</div>
|
|
248
|
-
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
249
|
-
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> range = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
248
|
+
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#ac37760566b534d89a61d789b00efb993">getInternalID</a>(vaddr);</div>
|
|
249
|
+
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> range = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a4e032a5e0898f0e349927d5a86c8477c">getRangeLimitFromType</a>(<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1GenericGraph.html#a43c9c773bfa17abf481c33073e30d01b">getGNode</a>(objId)-><a class="code" href="classSVF_1_1SVFVar.html#ab6f95d3e7e099d75cfc9645ebc037047">getType</a>());</div>
|
|
250
250
|
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  es.<a class="code" href="classSVF_1_1AbstractState.html#a1f935ea8ab16b04699284bf92bbbb23c">store</a>(vaddr, range);</div>
|
|
251
251
|
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span>  }</div>
|
|
252
252
|
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span>  }</div>
|
|
@@ -264,7 +264,7 @@ $(function() {
|
|
|
264
264
|
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  <span class="keyword">auto</span> sse_fread = [&](<span class="keyword">const</span> <a class="code" href="classSVF_1_1CallSite.html">CallSite</a> &cs)</div>
|
|
265
265
|
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  {</div>
|
|
266
266
|
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  <span class="keywordflow">if</span> (cs.arg_size() < 3) <span class="keywordflow">return</span>;</div>
|
|
267
|
-
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
267
|
+
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
268
268
|
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> block_count_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(2));</div>
|
|
269
269
|
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> block_size_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(1));</div>
|
|
270
270
|
<div class="line"><a name="l00199"></a><span class="lineno"> 199</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> block_count = es[block_count_id];</div>
|
|
@@ -282,7 +282,7 @@ $(function() {
|
|
|
282
282
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  <span class="keyword">auto</span> sse_snprintf = [&](<span class="keyword">const</span> <a class="code" href="classSVF_1_1CallSite.html">CallSite</a> &cs)</div>
|
|
283
283
|
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  {</div>
|
|
284
284
|
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  <span class="keywordflow">if</span> (cs.arg_size() < 2) <span class="keywordflow">return</span>;</div>
|
|
285
|
-
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
285
|
+
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
286
286
|
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> size_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(1));</div>
|
|
287
287
|
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> dst_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(0));</div>
|
|
288
288
|
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  <span class="comment">// get elem size of arg2</span></div>
|
|
@@ -331,7 +331,7 @@ $(function() {
|
|
|
331
331
|
<div class="line"><a name="l00260"></a><span class="lineno"> 260</span>  <span class="comment">// itoa(num, ch, 10);</span></div>
|
|
332
332
|
<div class="line"><a name="l00261"></a><span class="lineno"> 261</span>  <span class="comment">// num: int, ch: char*, 10 is decimal</span></div>
|
|
333
333
|
<div class="line"><a name="l00262"></a><span class="lineno"> 262</span>  <span class="keywordflow">if</span> (cs.arg_size() < 3) <span class="keywordflow">return</span>;</div>
|
|
334
|
-
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
334
|
+
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
335
335
|
<div class="line"><a name="l00264"></a><span class="lineno"> 264</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> num_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(0));</div>
|
|
336
336
|
<div class="line"><a name="l00265"></a><span class="lineno"> 265</span>  </div>
|
|
337
337
|
<div class="line"><a name="l00266"></a><span class="lineno"> 266</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> num = (<a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a>) es[num_id].getInterval().getNumeral();</div>
|
|
@@ -346,7 +346,7 @@ $(function() {
|
|
|
346
346
|
<div class="line"><a name="l00275"></a><span class="lineno"> 275</span>  <span class="comment">// check the arg size</span></div>
|
|
347
347
|
<div class="line"><a name="l00276"></a><span class="lineno"> 276</span>  <span class="keywordflow">if</span> (cs.arg_size() < 1) <span class="keywordflow">return</span>;</div>
|
|
348
348
|
<div class="line"><a name="l00277"></a><span class="lineno"> 277</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a>* strValue = cs.getArgument(0);</div>
|
|
349
|
-
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
349
|
+
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
350
350
|
<div class="line"><a name="l00279"></a><span class="lineno"> 279</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> dst_size = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a5bba3c0570d73acc743742a30af1b0b4">getStrlen</a>(strValue);</div>
|
|
351
351
|
<div class="line"><a name="l00280"></a><span class="lineno"> 280</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> elemSize = 1;</div>
|
|
352
352
|
<div class="line"><a name="l00281"></a><span class="lineno"> 281</span>  <span class="keywordflow">if</span> (strValue-><a class="code" href="classSVF_1_1SVFValue.html#a11f2d9b6e969ede6fca2c204cc15b821">getType</a>()-><a class="code" href="classSVF_1_1SVFType.html#a330084f9a3deb6e5acb52a8ee3eb7fe4">isArrayTy</a>())</div>
|
|
@@ -370,7 +370,7 @@ $(function() {
|
|
|
370
370
|
<div class="line"><a name="l00299"></a><span class="lineno"> 299</span>  {</div>
|
|
371
371
|
<div class="line"><a name="l00300"></a><span class="lineno"> 300</span>  <span class="comment">// recv(sockfd, buf, len, flags);</span></div>
|
|
372
372
|
<div class="line"><a name="l00301"></a><span class="lineno"> 301</span>  <span class="keywordflow">if</span> (cs.arg_size() < 4) <span class="keywordflow">return</span>;</div>
|
|
373
|
-
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
373
|
+
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
374
374
|
<div class="line"><a name="l00303"></a><span class="lineno"> 303</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> len_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(2));</div>
|
|
375
375
|
<div class="line"><a name="l00304"></a><span class="lineno"> 304</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> len = es[len_id] - <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(1);</div>
|
|
376
376
|
<div class="line"><a name="l00305"></a><span class="lineno"> 305</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> lhsId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getInstruction());</div>
|
|
@@ -385,7 +385,7 @@ $(function() {
|
|
|
385
385
|
<div class="line"><a name="l00314"></a><span class="lineno"> 314</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a219313e979d779221116c1bc45becc1b">_checkpoints</a>.erase(callNode);</div>
|
|
386
386
|
<div class="line"><a name="l00315"></a><span class="lineno"> 315</span>  <span class="comment">//void SAFE_BUFACCESS(void* data, int size);</span></div>
|
|
387
387
|
<div class="line"><a name="l00316"></a><span class="lineno"> 316</span>  <span class="keywordflow">if</span> (cs.arg_size() < 2) <span class="keywordflow">return</span>;</div>
|
|
388
|
-
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
388
|
+
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
389
389
|
<div class="line"><a name="l00318"></a><span class="lineno"> 318</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> size_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(1));</div>
|
|
390
390
|
<div class="line"><a name="l00319"></a><span class="lineno"> 319</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> val = es[size_id];</div>
|
|
391
391
|
<div class="line"><a name="l00320"></a><span class="lineno"> 320</span>  <span class="keywordflow">if</span> (val.<a class="code" href="structSVF_1_1AbstractValue.html#a8b1af972fa8a4e40347990d179ec1c52">isBottom</a>())</div>
|
|
@@ -415,7 +415,7 @@ $(function() {
|
|
|
415
415
|
<div class="line"><a name="l00344"></a><span class="lineno"> 344</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a219313e979d779221116c1bc45becc1b">_checkpoints</a>.erase(callNode);</div>
|
|
416
416
|
<div class="line"><a name="l00345"></a><span class="lineno"> 345</span>  <span class="comment">//void UNSAFE_BUFACCESS(void* data, int size);</span></div>
|
|
417
417
|
<div class="line"><a name="l00346"></a><span class="lineno"> 346</span>  <span class="keywordflow">if</span> (cs.arg_size() < 2) <span class="keywordflow">return</span>;</div>
|
|
418
|
-
<div class="line"><a name="l00347"></a><span class="lineno"> 347</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#
|
|
418
|
+
<div class="line"><a name="l00347"></a><span class="lineno"> 347</span>  <a class="code" href="classSVF_1_1AbstractState.html">AbstractState</a>&es = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>();</div>
|
|
419
419
|
<div class="line"><a name="l00348"></a><span class="lineno"> 348</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> size_id = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.getArgument(1));</div>
|
|
420
420
|
<div class="line"><a name="l00349"></a><span class="lineno"> 349</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> val = es[size_id];</div>
|
|
421
421
|
<div class="line"><a name="l00350"></a><span class="lineno"> 350</span>  <span class="keywordflow">if</span> (val.<a class="code" href="structSVF_1_1AbstractValue.html#a8b1af972fa8a4e40347990d179ec1c52">isBottom</a>())</div>
|
|
@@ -470,428 +470,435 @@ $(function() {
|
|
|
470
470
|
<div class="line"><a name="l00399"></a><span class="lineno"> 399</span>  <a class="code" href="classSVF_1_1CallSite.html">CallSite</a> cs = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a9815a5b31ac7dc21239d08e5b9f61106">SVFUtil::getSVFCallSite</a>(call-><a class="code" href="classSVF_1_1CallICFGNode.html#a90fd0b8e44fba1a7eb76d15bce085d66">getCallSite</a>());</div>
|
|
471
471
|
<div class="line"><a name="l00400"></a><span class="lineno"> 400</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a>* arg0Val = cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(0);</div>
|
|
472
472
|
<div class="line"><a name="l00401"></a><span class="lineno"> 401</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a>* arg2Val = cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(2);</div>
|
|
473
|
-
<div class="line"><a name="l00402"></a><span class="lineno"> 402</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> arg2Num
|
|
474
|
-
<div class="line"><a name="l00403"></a><span class="lineno"> 403</span> 
|
|
475
|
-
<div class="line"><a name="l00404"></a><span class="lineno"> 404</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a>
|
|
476
|
-
<div class="line"><a name="l00405"></a><span class="lineno"> 405</span>  <
|
|
477
|
-
<div class="line"><a name="l00406"></a><span class="lineno"> 406</span> 
|
|
478
|
-
<div class="line"><a name="l00407"></a><span class="lineno"> 407</span> 
|
|
479
|
-
<div class="line"><a name="l00408"></a><span class="lineno"> 408</span> 
|
|
480
|
-
<div class="line"><a name="l00409"></a><span class="lineno"> 409</span> 
|
|
481
|
-
<div class="line"><a name="l00410"></a><span class="lineno"> 410</span> 
|
|
482
|
-
<div class="line"><a name="l00411"></a><span class="lineno"> 411</span> 
|
|
483
|
-
<div class="line"><a name="l00412"></a><span class="lineno"> 412</span> }</div>
|
|
484
|
-
<div class="line"><a name="l00413"></a><span class="lineno"> 413</span> 
|
|
485
|
-
<div class="line"><a name="l00414"></a><span class="lineno"
|
|
486
|
-
<div class="line"><a name="l00415"></a><span class="lineno"> 415</span> 
|
|
487
|
-
<div class="line"><a name="l00416"></a><span class="lineno"> 416</span> 
|
|
488
|
-
<div class="line"><a name="l00417"></a><span class="lineno"> 417</span>  <
|
|
489
|
-
<div class="line"><a name="l00418"></a><span class="lineno"> 418</span> 
|
|
490
|
-
<div class="line"><a name="l00419"></a><span class="lineno"> 419</span> 
|
|
491
|
-
<div class="line"><a name="l00420"></a><span class="lineno"> 420</span>  <
|
|
492
|
-
<div class="line"><a name="l00421"></a><span class="lineno"> 421</span>  <span class="comment">//
|
|
493
|
-
<div class="line"><a name="l00422"></a><span class="lineno"> 422</span>  <span class="comment">//
|
|
494
|
-
<div class="line"><a name="l00423"></a><span class="lineno"> 423</span>  <span class="comment">//
|
|
495
|
-
<div class="line"><a name="l00424"></a><span class="lineno"> 424</span>  <span class="comment">//
|
|
496
|
-
<div class="line"><a name="l00425"></a><span class="lineno"> 425</span>  <span class="comment">//
|
|
497
|
-
<div class="line"><a name="l00426"></a><span class="lineno"> 426</span>  <
|
|
498
|
-
<div class="line"><a name="l00427"></a><span class="lineno"> 427</span>  <
|
|
499
|
-
<div class="line"><a name="l00428"></a><span class="lineno"> 428</span>  <span class="
|
|
500
|
-
<div class="line"><a name="l00429"></a><span class="lineno"> 429</span> 
|
|
501
|
-
<div class="line"><a name="l00430"></a><span class="lineno"> 430</span> 
|
|
502
|
-
<div class="line"><a name="l00431"></a><span class="lineno"> 431</span> 
|
|
503
|
-
<div class="line"><a name="l00432"></a><span class="lineno"> 432</span> 
|
|
504
|
-
<div class="line"><a name="l00433"></a><span class="lineno"> 433</span> 
|
|
505
|
-
<div class="line"><a name="l00434"></a><span class="lineno"> 434</span> 
|
|
506
|
-
<div class="line"><a name="l00435"></a><span class="lineno"> 435</span> 
|
|
507
|
-
<div class="line"><a name="l00436"></a><span class="lineno"> 436</span> 
|
|
508
|
-
<div class="line"><a name="l00437"></a><span class="lineno"> 437</span> 
|
|
509
|
-
<div class="line"><a name="l00438"></a><span class="lineno"> 438</span> 
|
|
510
|
-
<div class="line"><a name="l00439"></a><span class="lineno"> 439</span> 
|
|
511
|
-
<div class="line"><a name="l00440"></a><span class="lineno"> 440</span>  <span class="
|
|
512
|
-
<div class="line"><a name="l00441"></a><span class="lineno"> 441</span> 
|
|
513
|
-
<div class="line"><a name="l00442"></a><span class="lineno"> 442</span> 
|
|
514
|
-
<div class="line"><a name="l00443"></a><span class="lineno"> 443</span> 
|
|
515
|
-
<div class="line"><a name="l00444"></a><span class="lineno"> 444</span> 
|
|
516
|
-
<div class="line"><a name="l00445"></a><span class="lineno"> 445</span>  <
|
|
517
|
-
<div class="line"><a name="l00446"></a><span class="lineno"> 446</span>  <span class="
|
|
518
|
-
<div class="line"><a name="l00447"></a><span class="lineno"> 447</span> 
|
|
519
|
-
<div class="line"><a name="l00448"></a><span class="lineno"> 448</span> 
|
|
520
|
-
<div class="line"><a name="l00449"></a><span class="lineno"> 449</span> 
|
|
521
|
-
<div class="line"><a name="l00450"></a><span class="lineno"> 450</span>  <
|
|
522
|
-
<div class="line"><a name="l00451"></a><span class="lineno"> 451</span>  <span class="
|
|
523
|
-
<div class="line"><a name="l00452"></a><span class="lineno"> 452</span> 
|
|
524
|
-
<div class="line"><a name="l00453"></a><span class="lineno"> 453</span> 
|
|
525
|
-
<div class="line"><a name="l00454"></a><span class="lineno"> 454</span>  <a class="code" href="
|
|
526
|
-
<div class="line"><a name="l00455"></a><span class="lineno"> 455</span> 
|
|
527
|
-
<div class="line"><a name="l00456"></a><span class="lineno"> 456</span> 
|
|
528
|
-
<div class="line"><a name="l00457"></a><span class="lineno"> 457</span> 
|
|
529
|
-
<div class="line"><a name="l00458"></a><span class="lineno"> 458</span> 
|
|
530
|
-
<div class="line"><a name="l00459"></a><span class="lineno"> 459</span> 
|
|
531
|
-
<div class="line"><a name="l00460"></a><span class="lineno"> 460</span> 
|
|
532
|
-
<div class="line"><a name="l00461"></a><span class="lineno"> 461</span> 
|
|
533
|
-
<div class="line"><a name="l00462"></a><span class="lineno"> 462</span> 
|
|
534
|
-
<div class="line"><a name="l00463"></a><span class="lineno"> 463</span> 
|
|
535
|
-
<div class="line"><a name="l00464"></a><span class="lineno"> 464</span>  <span class="
|
|
536
|
-
<div class="line"><a name="l00465"></a><span class="lineno"> 465</span> 
|
|
537
|
-
<div class="line"><a name="l00466"></a><span class="lineno"> 466</span> 
|
|
538
|
-
<div class="line"><a name="l00467"></a><span class="lineno"> 467</span> 
|
|
539
|
-
<div class="line"><a name="l00468"></a><span class="lineno"> 468</span>  <
|
|
540
|
-
<div class="line"><a name="l00469"></a><span class="lineno"> 469</span> 
|
|
541
|
-
<div class="line"><a name="l00470"></a><span class="lineno"> 470</span> 
|
|
542
|
-
<div class="line"><a name="l00471"></a><span class="lineno"> 471</span> 
|
|
543
|
-
<div class="line"><a name="l00472"></a><span class="lineno"> 472</span> 
|
|
544
|
-
<div class="line"><a name="l00473"></a><span class="lineno"> 473</span> 
|
|
545
|
-
<div class="line"><a name="l00474"></a><span class="lineno"> 474</span> 
|
|
546
|
-
<div class="line"><a name="l00475"></a><span class="lineno"> 475</span> 
|
|
547
|
-
<div class="line"><a name="l00476"></a><span class="lineno"> 476</span> 
|
|
548
|
-
<div class="line"><a name="l00477"></a><span class="lineno"> 477</span> 
|
|
549
|
-
<div class="line"><a name="l00478"></a><span class="lineno"> 478</span> 
|
|
550
|
-
<div class="line"><a name="l00479"></a><span class="lineno"> 479</span> 
|
|
551
|
-
<div class="line"><a name="l00480"></a><span class="lineno"> 480</span> 
|
|
552
|
-
<div class="line"><a name="l00481"></a><span class="lineno"> 481</span> 
|
|
553
|
-
<div class="line"><a name="l00482"></a><span class="lineno"> 482</span> 
|
|
554
|
-
<div class="line"><a name="l00483"></a><span class="lineno"> 483</span> 
|
|
555
|
-
<div class="line"><a name="l00484"></a><span class="lineno"> 484</span> 
|
|
556
|
-
<div class="line"><a name="l00485"></a><span class="lineno"> 485</span> 
|
|
557
|
-
<div class="line"><a name="l00486"></a><span class="lineno"> 486</span> 
|
|
558
|
-
<div class="line"><a name="l00487"></a><span class="lineno"> 487</span> 
|
|
559
|
-
<div class="line"><a name="l00488"></a><span class="lineno"> 488</span> 
|
|
560
|
-
<div class="line"><a name="l00489"></a><span class="lineno"
|
|
561
|
-
<div class="line"><a name="l00490"></a><span class="lineno"> 490</span> 
|
|
562
|
-
<div class="line"><a name="l00491"></a><span class="lineno"> 491</span> 
|
|
563
|
-
<div class="line"><a name="
|
|
564
|
-
<div class="line"><a name="
|
|
565
|
-
<div class="line"><a name="
|
|
566
|
-
<div class="line"><a name="
|
|
567
|
-
<div class="line"><a name="l00503"></a><span class="lineno"> 503</span>  <a class="code" href="
|
|
568
|
-
<div class="line"><a name="l00504"></a><span class="lineno"> 504</span>  <a class="code" href="
|
|
569
|
-
<div class="line"><a name="l00505"></a><span class="lineno"> 505</span> 
|
|
570
|
-
<div class="line"><a name="l00506"></a><span class="lineno"> 506</span> 
|
|
571
|
-
<div class="line"><a name="l00507"></a><span class="lineno"> 507</span>  <
|
|
572
|
-
<div class="line"><a name="l00508"></a><span class="lineno"> 508</span> 
|
|
573
|
-
<div class="line"><a name="l00509"></a><span class="lineno"> 509</span> 
|
|
574
|
-
<div class="line"><a name="l00510"></a><span class="lineno"> 510</span> 
|
|
575
|
-
<div class="line"><a name="l00511"></a><span class="lineno"> 511</span> 
|
|
576
|
-
<div class="line"><a name="l00512"></a><span class="lineno"> 512</span> 
|
|
577
|
-
<div class="line"><a name="l00513"></a><span class="lineno"> 513</span> 
|
|
578
|
-
<div class="line"><a name="l00514"></a><span class="lineno"> 514</span> 
|
|
579
|
-
<div class="line"><a name="l00515"></a><span class="lineno"> 515</span> 
|
|
580
|
-
<div class="line"><a name="l00516"></a><span class="lineno"> 516</span> 
|
|
581
|
-
<div class="line"><a name="l00517"></a><span class="lineno"> 517</span> 
|
|
582
|
-
<div class="line"><a name="l00518"></a><span class="lineno"> 518</span> 
|
|
583
|
-
<div class="line"><a name="l00519"></a><span class="lineno"> 519</span> 
|
|
584
|
-
<div class="line"><a name="l00520"></a><span class="lineno"> 520</span> 
|
|
585
|
-
<div class="line"><a name="l00521"></a><span class="lineno"> 521</span> 
|
|
586
|
-
<div class="line"><a name="l00522"></a><span class="lineno"> 522</span> 
|
|
587
|
-
<div class="line"><a name="l00523"></a><span class="lineno"> 523</span> 
|
|
588
|
-
<div class="line"><a name="l00524"></a><span class="lineno"> 524</span> 
|
|
589
|
-
<div class="line"><a name="l00525"></a><span class="lineno"> 525</span> 
|
|
590
|
-
<div class="line"><a name="l00526"></a><span class="lineno"> 526</span> 
|
|
591
|
-
<div class="line"><a name="l00527"></a><span class="lineno"> 527</span> 
|
|
592
|
-
<div class="line"><a name="l00528"></a><span class="lineno"> 528</span> 
|
|
593
|
-
<div class="line"><a name="l00529"></a><span class="lineno"> 529</span> 
|
|
594
|
-
<div class="line"><a name="l00530"></a><span class="lineno"> 530</span> 
|
|
595
|
-
<div class="line"><a name="l00531"></a><span class="lineno"> 531</span> 
|
|
596
|
-
<div class="line"><a name="l00532"></a><span class="lineno"> 532</span>  <span class="comment">// 3
|
|
597
|
-
<div class="line"><a name="l00533"></a><span class="lineno"> 533</span>  <span class="comment">//
|
|
598
|
-
<div class="line"><a name="l00534"></a><span class="lineno"> 534</span>  <span class="comment">//
|
|
599
|
-
<div class="line"><a name="l00535"></a><span class="lineno"> 535</span>  <span class="comment">//
|
|
600
|
-
<div class="line"><a name="l00536"></a><span class="lineno"> 536</span>  <span class="comment">//
|
|
601
|
-
<div class="line"><a name="l00537"></a><span class="lineno"> 537</span>  <span class="comment">//
|
|
602
|
-
<div class="line"><a name="l00538"></a><span class="lineno"> 538</span>  <span class="comment">//
|
|
603
|
-
<div class="line"><a name="l00539"></a><span class="lineno"> 539</span>  <span class="comment">//
|
|
604
|
-
<div class="line"><a name="l00540"></a><span class="lineno"> 540</span>  <span class="comment">//
|
|
605
|
-
<div class="line"><a name="l00541"></a><span class="lineno"> 541</span>  </div>
|
|
606
|
-
<div class="line"><a name="l00542"></a><span class="lineno"> 542</span>  <span class="comment">//
|
|
607
|
-
<div class="line"><a name="l00543"></a><span class="lineno"> 543</span>  <span class="comment">//
|
|
608
|
-
<div class="line"><a name="l00544"></a><span class="lineno"> 544</span> 
|
|
609
|
-
<div class="line"><a name="l00545"></a><span class="lineno"> 545</span>  <span class="comment">//
|
|
610
|
-
<div class="line"><a name="l00546"></a><span class="lineno"> 546</span> 
|
|
611
|
-
<div class="line"><a name="l00547"></a><span class="lineno"> 547</span>  <span class="comment">//
|
|
612
|
-
<div class="line"><a name="l00548"></a><span class="lineno"> 548</span>  <span class="comment">//
|
|
613
|
-
<div class="line"><a name="l00549"></a><span class="lineno"> 549</span> 
|
|
614
|
-
<div class="line"><a name="l00550"></a><span class="lineno"> 550</span>  <span class="comment">//
|
|
615
|
-
<div class="line"><a name="l00551"></a><span class="lineno"> 551</span>  <
|
|
616
|
-
<div class="line"><a name="l00552"></a><span class="lineno"> 552</span>  <span class="
|
|
617
|
-
<div class="line"><a name="l00553"></a><span class="lineno"> 553</span> 
|
|
618
|
-
<div class="line"><a name="l00554"></a><span class="lineno"> 554</span> 
|
|
619
|
-
<div class="line"><a name="l00555"></a><span class="lineno"> 555</span> 
|
|
620
|
-
<div class="line"><a name="l00556"></a><span class="lineno"> 556</span> 
|
|
621
|
-
<div class="line"><a name="l00557"></a><span class="lineno"> 557</span> 
|
|
622
|
-
<div class="line"><a name="l00558"></a><span class="lineno"> 558</span> 
|
|
623
|
-
<div class="line"><a name="l00559"></a><span class="lineno"> 559</span> 
|
|
624
|
-
<div class="line"><a name="l00560"></a><span class="lineno"> 560</span> 
|
|
625
|
-
<div class="line"><a name="l00561"></a><span class="lineno"> 561</span> 
|
|
626
|
-
<div class="line"><a name="l00562"></a><span class="lineno"> 562</span> 
|
|
627
|
-
<div class="line"><a name="l00563"></a><span class="lineno"> 563</span> 
|
|
628
|
-
<div class="line"><a name="l00564"></a><span class="lineno"> 564</span> 
|
|
629
|
-
<div class="line"><a name="l00565"></a><span class="lineno"> 565</span> 
|
|
630
|
-
<div class="line"><a name="l00566"></a><span class="lineno"> 566</span>  </div>
|
|
631
|
-
<div class="line"><a name="l00567"></a><span class="lineno"> 567</span> 
|
|
632
|
-
<div class="line"><a name="l00568"></a><span class="lineno"> 568</span> 
|
|
633
|
-
<div class="line"><a name="l00569"></a><span class="lineno"> 569</span> 
|
|
634
|
-
<div class="line"><a name="l00570"></a><span class="lineno"> 570</span> 
|
|
635
|
-
<div class="line"><a name="l00571"></a><span class="lineno"> 571</span>  </div>
|
|
636
|
-
<div class="line"><a name="l00572"></a><span class="lineno"> 572</span> 
|
|
637
|
-
<div class="line"><a name="l00573"></a><span class="lineno"> 573</span> 
|
|
638
|
-
<div class="line"><a name="l00574"></a><span class="lineno"> 574</span> 
|
|
639
|
-
<div class="line"><a name="l00575"></a><span class="lineno"> 575</span> 
|
|
640
|
-
<div class="line"><a name="l00576"></a><span class="lineno"> 576</span> 
|
|
641
|
-
<div class="line"><a name="l00577"></a><span class="lineno"> 577</span> 
|
|
642
|
-
<div class="line"><a name="l00578"></a><span class="lineno"> 578</span>  <span class="
|
|
643
|
-
<div class="line"><a name="l00579"></a><span class="lineno"> 579</span> 
|
|
644
|
-
<div class="line"><a name="l00580"></a><span class="lineno"> 580</span> 
|
|
645
|
-
<div class="line"><a name="l00581"></a><span class="lineno"> 581</span> 
|
|
646
|
-
<div class="line"><a name="l00582"></a><span class="lineno"> 582</span> 
|
|
647
|
-
<div class="line"><a name="l00583"></a><span class="lineno"> 583</span> 
|
|
648
|
-
<div class="line"><a name="l00584"></a><span class="lineno"> 584</span> 
|
|
649
|
-
<div class="line"><a name="l00585"></a><span class="lineno"> 585</span> 
|
|
650
|
-
<div class="line"><a name="l00586"></a><span class="lineno"> 586</span> 
|
|
651
|
-
<div class="line"><a name="l00587"></a><span class="lineno"> 587</span> 
|
|
652
|
-
<div class="line"><a name="l00588"></a><span class="lineno"> 588</span> 
|
|
653
|
-
<div class="line"><a name="l00589"></a><span class="lineno"> 589</span> 
|
|
654
|
-
<div class="line"><a name="l00590"></a><span class="lineno"> 590</span> 
|
|
655
|
-
<div class="line"><a name="l00591"></a><span class="lineno"> 591</span> 
|
|
656
|
-
<div class="line"><a name="l00592"></a><span class="lineno"> 592</span> 
|
|
657
|
-
<div class="line"><a name="l00593"></a><span class="lineno"> 593</span> 
|
|
658
|
-
<div class="line"><a name="l00594"></a><span class="lineno"> 594</span> 
|
|
659
|
-
<div class="line"><a name="l00595"></a><span class="lineno"> 595</span> 
|
|
660
|
-
<div class="line"><a name="l00596"></a><span class="lineno"> 596</span> 
|
|
661
|
-
<div class="line"><a name="l00597"></a><span class="lineno"> 597</span> 
|
|
662
|
-
<div class="line"><a name="l00598"></a><span class="lineno"> 598</span> 
|
|
663
|
-
<div class="line"><a name="l00599"></a><span class="lineno"> 599</span> 
|
|
664
|
-
<div class="line"><a name="l00600"></a><span class="lineno"> 600</span> 
|
|
665
|
-
<div class="line"><a name="l00601"></a><span class="lineno"> 601</span> 
|
|
666
|
-
<div class="line"><a name="l00602"></a><span class="lineno"> 602</span> 
|
|
667
|
-
<div class="line"><a name="l00603"></a><span class="lineno"> 603</span> 
|
|
668
|
-
<div class="line"><a name="l00604"></a><span class="lineno"> 604</span> 
|
|
669
|
-
<div class="line"><a name="l00605"></a><span class="lineno"> 605</span> 
|
|
670
|
-
<div class="line"><a name="l00606"></a><span class="lineno"> 606</span> 
|
|
671
|
-
<div class="line"><a name="l00607"></a><span class="lineno"> 607</span> 
|
|
672
|
-
<div class="line"><a name="l00608"></a><span class="lineno"> 608</span> 
|
|
673
|
-
<div class="line"><a name="l00609"></a><span class="lineno"> 609</span> 
|
|
674
|
-
<div class="line"><a name="l00610"></a><span class="lineno"> 610</span> 
|
|
675
|
-
<div class="line"><a name="l00611"></a><span class="lineno"> 611</span> 
|
|
676
|
-
<div class="line"><a name="l00612"></a><span class="lineno"> 612</span> 
|
|
677
|
-
<div class="line"><a name="l00613"></a><span class="lineno"> 613</span> 
|
|
678
|
-
<div class="line"><a name="l00614"></a><span class="lineno"> 614</span> 
|
|
679
|
-
<div class="line"><a name="l00615"></a><span class="lineno"> 615</span> 
|
|
680
|
-
<div class="line"><a name="l00616"></a><span class="lineno"> 616</span> 
|
|
681
|
-
<div class="line"><a name="l00617"></a><span class="lineno"> 617</span> 
|
|
682
|
-
<div class="line"><a name="l00618"></a><span class="lineno"> 618</span> 
|
|
683
|
-
<div class="line"><a name="l00619"></a><span class="lineno"> 619</span> 
|
|
684
|
-
<div class="line"><a name="l00620"></a><span class="lineno"> 620</span> 
|
|
685
|
-
<div class="line"><a name="l00621"></a><span class="lineno"> 621</span> 
|
|
686
|
-
<div class="line"><a name="l00622"></a><span class="lineno"> 622</span> 
|
|
687
|
-
<div class="line"><a name="l00623"></a><span class="lineno"> 623</span> 
|
|
688
|
-
<div class="line"><a name="l00624"></a><span class="lineno"> 624</span> 
|
|
689
|
-
<div class="line"><a name="l00625"></a><span class="lineno"> 625</span> 
|
|
690
|
-
<div class="line"><a name="l00626"></a><span class="lineno"> 626</span> 
|
|
691
|
-
<div class="line"><a name="l00627"></a><span class="lineno"> 627</span>  <
|
|
692
|
-
<div class="line"><a name="l00628"></a><span class="lineno"> 628</span> 
|
|
693
|
-
<div class="line"><a name="l00629"></a><span class="lineno"> 629</span> 
|
|
694
|
-
<div class="line"><a name="l00630"></a><span class="lineno"> 630</span> 
|
|
695
|
-
<div class="line"><a name="l00631"></a><span class="lineno"> 631</span>  <
|
|
696
|
-
<div class="line"><a name="l00632"></a><span class="lineno"> 632</span>  <span class="keywordflow">return</span> <span class="keyword">
|
|
473
|
+
<div class="line"><a name="l00402"></a><span class="lineno"> 402</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> arg2Num =</div>
|
|
474
|
+
<div class="line"><a name="l00403"></a><span class="lineno"> 403</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>()[<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(arg2Val)];</div>
|
|
475
|
+
<div class="line"><a name="l00404"></a><span class="lineno"> 404</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> strLen0 = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a5bba3c0570d73acc743742a30af1b0b4">getStrlen</a>(arg0Val);</div>
|
|
476
|
+
<div class="line"><a name="l00405"></a><span class="lineno"> 405</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> totalLen = strLen0 + arg2Num;</div>
|
|
477
|
+
<div class="line"><a name="l00406"></a><span class="lineno"> 406</span>  <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(arg0Val, totalLen, call);</div>
|
|
478
|
+
<div class="line"><a name="l00407"></a><span class="lineno"> 407</span>  }</div>
|
|
479
|
+
<div class="line"><a name="l00408"></a><span class="lineno"> 408</span>  <span class="keywordflow">else</span></div>
|
|
480
|
+
<div class="line"><a name="l00409"></a><span class="lineno"> 409</span>  {</div>
|
|
481
|
+
<div class="line"><a name="l00410"></a><span class="lineno"> 410</span>  assert(<span class="keyword">false</span> && <span class="stringliteral">"unknown strcat function, please add it to strcatGroup or strncatGroup"</span>);</div>
|
|
482
|
+
<div class="line"><a name="l00411"></a><span class="lineno"> 411</span>  abort();</div>
|
|
483
|
+
<div class="line"><a name="l00412"></a><span class="lineno"> 412</span>  }</div>
|
|
484
|
+
<div class="line"><a name="l00413"></a><span class="lineno"> 413</span> }</div>
|
|
485
|
+
<div class="line"><a name="l00414"></a><span class="lineno"> 414</span>  </div>
|
|
486
|
+
<div class="line"><a name="l00415"></a><span class="lineno"><a class="line" href="classSVF_1_1BufOverflowChecker.html#a1ed3cb0a1a118d9e505b192841a58dde"> 415</a></span> <span class="keywordtype">void</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#a1ed3cb0a1a118d9e505b192841a58dde">BufOverflowChecker::handleExtAPI</a>(<span class="keyword">const</span> <a class="code" href="classSVF_1_1CallICFGNode.html">CallICFGNode</a> *call)</div>
|
|
487
|
+
<div class="line"><a name="l00416"></a><span class="lineno"> 416</span> {</div>
|
|
488
|
+
<div class="line"><a name="l00417"></a><span class="lineno"> 417</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a6cac9b69d85111a5a26373ec848a3282">AbstractInterpretation::handleExtAPI</a>(call);</div>
|
|
489
|
+
<div class="line"><a name="l00418"></a><span class="lineno"> 418</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFFunction.html">SVFFunction</a> *fun = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a145abbd2958629718fbca41d25c3124d">SVFUtil::getCallee</a>(call-><a class="code" href="classSVF_1_1CallICFGNode.html#a90fd0b8e44fba1a7eb76d15bce085d66">getCallSite</a>());</div>
|
|
490
|
+
<div class="line"><a name="l00419"></a><span class="lineno"> 419</span>  assert(fun && <span class="stringliteral">"SVFFunction* is nullptr"</span>);</div>
|
|
491
|
+
<div class="line"><a name="l00420"></a><span class="lineno"> 420</span>  <a class="code" href="classSVF_1_1CallSite.html">CallSite</a> cs = <a class="code" href="namespaceSVF_1_1SVFUtil.html#a9815a5b31ac7dc21239d08e5b9f61106">SVFUtil::getSVFCallSite</a>(call-><a class="code" href="classSVF_1_1CallICFGNode.html#a90fd0b8e44fba1a7eb76d15bce085d66">getCallSite</a>());</div>
|
|
492
|
+
<div class="line"><a name="l00421"></a><span class="lineno"> 421</span>  <span class="comment">// check the type of mem api,</span></div>
|
|
493
|
+
<div class="line"><a name="l00422"></a><span class="lineno"> 422</span>  <span class="comment">// MEMCPY: like memcpy, memcpy_chk, llvm.memcpy etc.</span></div>
|
|
494
|
+
<div class="line"><a name="l00423"></a><span class="lineno"> 423</span>  <span class="comment">// MEMSET: like memset, memset_chk, llvm.memset etc.</span></div>
|
|
495
|
+
<div class="line"><a name="l00424"></a><span class="lineno"> 424</span>  <span class="comment">// STRCPY: like strcpy, strcpy_chk, wcscpy etc.</span></div>
|
|
496
|
+
<div class="line"><a name="l00425"></a><span class="lineno"> 425</span>  <span class="comment">// STRCAT: like strcat, strcat_chk, wcscat etc.</span></div>
|
|
497
|
+
<div class="line"><a name="l00426"></a><span class="lineno"> 426</span>  <span class="comment">// for other ext api like printf, scanf, etc., they have their own handlers</span></div>
|
|
498
|
+
<div class="line"><a name="l00427"></a><span class="lineno"> 427</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616da">ExtAPIType</a> extType = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daad20658cd0f68b92583461b0b1f68d543">UNCLASSIFIED</a>;</div>
|
|
499
|
+
<div class="line"><a name="l00428"></a><span class="lineno"> 428</span>  <span class="comment">// get type of mem api</span></div>
|
|
500
|
+
<div class="line"><a name="l00429"></a><span class="lineno"> 429</span>  <span class="keywordflow">for</span> (<span class="keyword">const</span> <a class="code" href="cJSON_8h.html#ad4c68ea99a26b0a98ad9a79982960458">std::string</a> &annotation: fun-><a class="code" href="classSVF_1_1SVFFunction.html#a067bd6dbaf74a028d546fa56b095791b">getAnnotations</a>())</div>
|
|
501
|
+
<div class="line"><a name="l00430"></a><span class="lineno"> 430</span>  {</div>
|
|
502
|
+
<div class="line"><a name="l00431"></a><span class="lineno"> 431</span>  <span class="keywordflow">if</span> (annotation.find(<span class="stringliteral">"MEMCPY"</span>) != std::string::npos)</div>
|
|
503
|
+
<div class="line"><a name="l00432"></a><span class="lineno"> 432</span>  extType = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa9cc269dadf9cff7d399c54d9570a6614">MEMCPY</a>;</div>
|
|
504
|
+
<div class="line"><a name="l00433"></a><span class="lineno"> 433</span>  <span class="keywordflow">if</span> (annotation.find(<span class="stringliteral">"MEMSET"</span>) != std::string::npos)</div>
|
|
505
|
+
<div class="line"><a name="l00434"></a><span class="lineno"> 434</span>  extType = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa5aec33226dc590ec951d0f12bf35f15f">MEMSET</a>;</div>
|
|
506
|
+
<div class="line"><a name="l00435"></a><span class="lineno"> 435</span>  <span class="keywordflow">if</span> (annotation.find(<span class="stringliteral">"STRCPY"</span>) != std::string::npos)</div>
|
|
507
|
+
<div class="line"><a name="l00436"></a><span class="lineno"> 436</span>  extType = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa93c9b2a9dc4bdfba5a7b23cfa5f80ccb">STRCPY</a>;</div>
|
|
508
|
+
<div class="line"><a name="l00437"></a><span class="lineno"> 437</span>  <span class="keywordflow">if</span> (annotation.find(<span class="stringliteral">"STRCAT"</span>) != std::string::npos)</div>
|
|
509
|
+
<div class="line"><a name="l00438"></a><span class="lineno"> 438</span>  extType = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daae8dad405c06383859d8db715fd455317">STRCAT</a>;</div>
|
|
510
|
+
<div class="line"><a name="l00439"></a><span class="lineno"> 439</span>  }</div>
|
|
511
|
+
<div class="line"><a name="l00440"></a><span class="lineno"> 440</span>  <span class="comment">// 1. memcpy functions like memcpy_chk, strncpy, annotate("MEMCPY"), annotate("BUF_CHECK:Arg0, Arg2"), annotate("BUF_CHECK:Arg1, Arg2")</span></div>
|
|
512
|
+
<div class="line"><a name="l00441"></a><span class="lineno"> 441</span>  <span class="keywordflow">if</span> (extType == <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa9cc269dadf9cff7d399c54d9570a6614">MEMCPY</a>)</div>
|
|
513
|
+
<div class="line"><a name="l00442"></a><span class="lineno"> 442</span>  {</div>
|
|
514
|
+
<div class="line"><a name="l00443"></a><span class="lineno"> 443</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1BufOverflowChecker.html#af83b65ed98cd4e0f6cd92962e7392d4d">_extAPIBufOverflowCheckRules</a>.count(fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>()) == 0)</div>
|
|
515
|
+
<div class="line"><a name="l00444"></a><span class="lineno"> 444</span>  {</div>
|
|
516
|
+
<div class="line"><a name="l00445"></a><span class="lineno"> 445</span>  <span class="comment">// if it is not in the rules, we do not check it</span></div>
|
|
517
|
+
<div class="line"><a name="l00446"></a><span class="lineno"> 446</span>  <a class="code" href="namespaceSVF_1_1SVFUtil.html#ab65033f068bfbeb0a1c52dcec3beb6bc">SVFUtil::errs</a>() << <span class="stringliteral">"Warning: "</span> << fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>() << <span class="stringliteral">" is not in the rules, please implement it\n"</span>;</div>
|
|
518
|
+
<div class="line"><a name="l00447"></a><span class="lineno"> 447</span>  <span class="keywordflow">return</span>;</div>
|
|
519
|
+
<div class="line"><a name="l00448"></a><span class="lineno"> 448</span>  }</div>
|
|
520
|
+
<div class="line"><a name="l00449"></a><span class="lineno"> 449</span>  <span class="comment">// call parseMemcpyBufferCheckArgs to parse the BUF_CHECK annotation</span></div>
|
|
521
|
+
<div class="line"><a name="l00450"></a><span class="lineno"> 450</span>  std::vector<std::pair<u32_t, u32_t>> args = <a class="code" href="classSVF_1_1BufOverflowChecker.html#af83b65ed98cd4e0f6cd92962e7392d4d">_extAPIBufOverflowCheckRules</a>.at(fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>());</div>
|
|
522
|
+
<div class="line"><a name="l00451"></a><span class="lineno"> 451</span>  <span class="comment">// loop the args and check the offset</span></div>
|
|
523
|
+
<div class="line"><a name="l00452"></a><span class="lineno"> 452</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> arg: args)</div>
|
|
524
|
+
<div class="line"><a name="l00453"></a><span class="lineno"> 453</span>  {</div>
|
|
525
|
+
<div class="line"><a name="l00454"></a><span class="lineno"> 454</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> <a class="code" href="cJSON_8cpp.html#a95bf816579e97b6f33bdb5e25ed6d5de">offset</a> =</div>
|
|
526
|
+
<div class="line"><a name="l00455"></a><span class="lineno"> 455</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>()[<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(arg.second))] - <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(1);</div>
|
|
527
|
+
<div class="line"><a name="l00456"></a><span class="lineno"> 456</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(arg.first), <a class="code" href="cJSON_8cpp.html#a95bf816579e97b6f33bdb5e25ed6d5de">offset</a>, call);</div>
|
|
528
|
+
<div class="line"><a name="l00457"></a><span class="lineno"> 457</span>  }</div>
|
|
529
|
+
<div class="line"><a name="l00458"></a><span class="lineno"> 458</span>  }</div>
|
|
530
|
+
<div class="line"><a name="l00459"></a><span class="lineno"> 459</span>  <span class="comment">// 2. memset functions like memset, memset_chk, annotate("MEMSET"), annotate("BUF_CHECK:Arg0, Arg2")</span></div>
|
|
531
|
+
<div class="line"><a name="l00460"></a><span class="lineno"> 460</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (extType == <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa5aec33226dc590ec951d0f12bf35f15f">MEMSET</a>)</div>
|
|
532
|
+
<div class="line"><a name="l00461"></a><span class="lineno"> 461</span>  {</div>
|
|
533
|
+
<div class="line"><a name="l00462"></a><span class="lineno"> 462</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1BufOverflowChecker.html#af83b65ed98cd4e0f6cd92962e7392d4d">_extAPIBufOverflowCheckRules</a>.count(fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>()) == 0)</div>
|
|
534
|
+
<div class="line"><a name="l00463"></a><span class="lineno"> 463</span>  {</div>
|
|
535
|
+
<div class="line"><a name="l00464"></a><span class="lineno"> 464</span>  <span class="comment">// if it is not in the rules, we do not check it</span></div>
|
|
536
|
+
<div class="line"><a name="l00465"></a><span class="lineno"> 465</span>  <a class="code" href="namespaceSVF_1_1SVFUtil.html#ab65033f068bfbeb0a1c52dcec3beb6bc">SVFUtil::errs</a>() << <span class="stringliteral">"Warning: "</span> << fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>() << <span class="stringliteral">" is not in the rules, please implement it\n"</span>;</div>
|
|
537
|
+
<div class="line"><a name="l00466"></a><span class="lineno"> 466</span>  <span class="keywordflow">return</span>;</div>
|
|
538
|
+
<div class="line"><a name="l00467"></a><span class="lineno"> 467</span>  }</div>
|
|
539
|
+
<div class="line"><a name="l00468"></a><span class="lineno"> 468</span>  std::vector<std::pair<u32_t, u32_t>> args = <a class="code" href="classSVF_1_1BufOverflowChecker.html#af83b65ed98cd4e0f6cd92962e7392d4d">_extAPIBufOverflowCheckRules</a>.at(fun-><a class="code" href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">getName</a>());</div>
|
|
540
|
+
<div class="line"><a name="l00469"></a><span class="lineno"> 469</span>  <span class="comment">// loop the args and check the offset</span></div>
|
|
541
|
+
<div class="line"><a name="l00470"></a><span class="lineno"> 470</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> arg: args)</div>
|
|
542
|
+
<div class="line"><a name="l00471"></a><span class="lineno"> 471</span>  {</div>
|
|
543
|
+
<div class="line"><a name="l00472"></a><span class="lineno"> 472</span>  <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> <a class="code" href="cJSON_8cpp.html#a95bf816579e97b6f33bdb5e25ed6d5de">offset</a> =</div>
|
|
544
|
+
<div class="line"><a name="l00473"></a><span class="lineno"> 473</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>()[<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(arg.second))] - <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(1);</div>
|
|
545
|
+
<div class="line"><a name="l00474"></a><span class="lineno"> 474</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(cs.<a class="code" href="classSVF_1_1CallSite.html#a9e7c94ee7f689466111487e03b2cebcc">getArgument</a>(arg.first), <a class="code" href="cJSON_8cpp.html#a95bf816579e97b6f33bdb5e25ed6d5de">offset</a>, call);</div>
|
|
546
|
+
<div class="line"><a name="l00475"></a><span class="lineno"> 475</span>  }</div>
|
|
547
|
+
<div class="line"><a name="l00476"></a><span class="lineno"> 476</span>  }</div>
|
|
548
|
+
<div class="line"><a name="l00477"></a><span class="lineno"> 477</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (extType == <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa93c9b2a9dc4bdfba5a7b23cfa5f80ccb">STRCPY</a>)</div>
|
|
549
|
+
<div class="line"><a name="l00478"></a><span class="lineno"> 478</span>  {</div>
|
|
550
|
+
<div class="line"><a name="l00479"></a><span class="lineno"> 479</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad8b2f2fa6f22b9d1655135c819cbad8a">detectStrcpy</a>(call);</div>
|
|
551
|
+
<div class="line"><a name="l00480"></a><span class="lineno"> 480</span>  }</div>
|
|
552
|
+
<div class="line"><a name="l00481"></a><span class="lineno"> 481</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (extType == <a class="code" href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daae8dad405c06383859d8db715fd455317">STRCAT</a>)</div>
|
|
553
|
+
<div class="line"><a name="l00482"></a><span class="lineno"> 482</span>  {</div>
|
|
554
|
+
<div class="line"><a name="l00483"></a><span class="lineno"> 483</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#aa68f8aef09481d7c07dc59d7dfb83822">detectStrcat</a>(call);</div>
|
|
555
|
+
<div class="line"><a name="l00484"></a><span class="lineno"> 484</span>  }</div>
|
|
556
|
+
<div class="line"><a name="l00485"></a><span class="lineno"> 485</span>  <span class="keywordflow">else</span></div>
|
|
557
|
+
<div class="line"><a name="l00486"></a><span class="lineno"> 486</span>  {</div>
|
|
558
|
+
<div class="line"><a name="l00487"></a><span class="lineno"> 487</span>  </div>
|
|
559
|
+
<div class="line"><a name="l00488"></a><span class="lineno"> 488</span>  }</div>
|
|
560
|
+
<div class="line"><a name="l00489"></a><span class="lineno"> 489</span>  <span class="keywordflow">return</span>;</div>
|
|
561
|
+
<div class="line"><a name="l00490"></a><span class="lineno"> 490</span> }</div>
|
|
562
|
+
<div class="line"><a name="l00491"></a><span class="lineno"> 491</span>  </div>
|
|
563
|
+
<div class="line"><a name="l00492"></a><span class="lineno"><a class="line" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf"> 492</a></span> <span class="keywordtype">bool</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">BufOverflowChecker::canSafelyAccessMemory</a>(<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a> *value, <span class="keyword">const</span> <a class="code" href="structSVF_1_1AbstractValue.html">AbstractValue</a> &len, <span class="keyword">const</span> <a class="code" href="classSVF_1_1ICFGNode.html">ICFGNode</a> *curNode)</div>
|
|
564
|
+
<div class="line"><a name="l00493"></a><span class="lineno"> 493</span> {</div>
|
|
565
|
+
<div class="line"><a name="l00494"></a><span class="lineno"> 494</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a> *firstValue = value;</div>
|
|
566
|
+
<div class="line"><a name="l00500"></a><span class="lineno"> 500</span>  </div>
|
|
567
|
+
<div class="line"><a name="l00503"></a><span class="lineno"> 503</span>  <a class="code" href="classSVF_1_1FILOWorkList.html">SVF::FILOWorkList<const SVFValue *></a> worklist;</div>
|
|
568
|
+
<div class="line"><a name="l00504"></a><span class="lineno"> 504</span>  <a class="code" href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">Set<const SVFValue *></a> visited;</div>
|
|
569
|
+
<div class="line"><a name="l00505"></a><span class="lineno"> 505</span>  visited.insert(value);</div>
|
|
570
|
+
<div class="line"><a name="l00506"></a><span class="lineno"> 506</span>  <a class="code" href="namespaceSVF.html#a8234d4b959abc9123993bcff4eee34c1">Map<const ICFGNode *, IntervalValue></a> gep_offsets;</div>
|
|
571
|
+
<div class="line"><a name="l00507"></a><span class="lineno"> 507</span>  <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a> total_bytes = len.<a class="code" href="structSVF_1_1AbstractValue.html#acbcec6f55d23e6cd278fe8572a68f393">getInterval</a>();</div>
|
|
572
|
+
<div class="line"><a name="l00508"></a><span class="lineno"> 508</span>  worklist.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>(value);</div>
|
|
573
|
+
<div class="line"><a name="l00509"></a><span class="lineno"> 509</span>  std::vector<const CallICFGNode *> callstack = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9885b50cf28b65bebb488442085fab26">_callSiteStack</a>;</div>
|
|
574
|
+
<div class="line"><a name="l00510"></a><span class="lineno"> 510</span>  <span class="keywordflow">while</span> (!worklist.<a class="code" href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">empty</a>())</div>
|
|
575
|
+
<div class="line"><a name="l00511"></a><span class="lineno"> 511</span>  {</div>
|
|
576
|
+
<div class="line"><a name="l00512"></a><span class="lineno"> 512</span>  value = worklist.<a class="code" href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">pop</a>();</div>
|
|
577
|
+
<div class="line"><a name="l00513"></a><span class="lineno"> 513</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFInstruction.html">SVFInstruction</a> *ins = SVFUtil::dyn_cast<SVFInstruction>(value))</div>
|
|
578
|
+
<div class="line"><a name="l00514"></a><span class="lineno"> 514</span>  {</div>
|
|
579
|
+
<div class="line"><a name="l00515"></a><span class="lineno"> 515</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1ICFGNode.html">ICFGNode</a> *node = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1SVFIR.html#abda052b73e869ed6d7c139ad1528da11">getICFG</a>()-><a class="code" href="classSVF_1_1ICFG.html#a5f2c0aaba07d6fdd63058da0fb60ca8b">getICFGNode</a>(ins);</div>
|
|
580
|
+
<div class="line"><a name="l00516"></a><span class="lineno"> 516</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1CallICFGNode.html">CallICFGNode</a> *callnode = SVFUtil::dyn_cast<CallICFGNode>(node))</div>
|
|
581
|
+
<div class="line"><a name="l00517"></a><span class="lineno"> 517</span>  {</div>
|
|
582
|
+
<div class="line"><a name="l00518"></a><span class="lineno"> 518</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a29fe7c63c61a7aec8ae1477a061f5bf2">AccessMemoryViaRetNode</a>(callnode, worklist, visited);</div>
|
|
583
|
+
<div class="line"><a name="l00519"></a><span class="lineno"> 519</span>  }</div>
|
|
584
|
+
<div class="line"><a name="l00520"></a><span class="lineno"> 520</span>  <span class="keywordflow">for</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFStmt.html">SVFStmt</a> *stmt: node-><a class="code" href="classSVF_1_1ICFGNode.html#a6c68f52dd90728073fb79141df9b0661">getSVFStmts</a>())</div>
|
|
585
|
+
<div class="line"><a name="l00521"></a><span class="lineno"> 521</span>  {</div>
|
|
586
|
+
<div class="line"><a name="l00522"></a><span class="lineno"> 522</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1CopyStmt.html">CopyStmt</a> *<a class="code" href="cJSON_8cpp.html#a7669ee67a0563250c1efaa24d130e1ac">copy</a> = SVFUtil::dyn_cast<CopyStmt>(stmt))</div>
|
|
587
|
+
<div class="line"><a name="l00523"></a><span class="lineno"> 523</span>  {</div>
|
|
588
|
+
<div class="line"><a name="l00524"></a><span class="lineno"> 524</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a550c12360c2149ba0e55bdf4cf7b8dd0">AccessMemoryViaCopyStmt</a>(<a class="code" href="cJSON_8cpp.html#a7669ee67a0563250c1efaa24d130e1ac">copy</a>, worklist, visited);</div>
|
|
589
|
+
<div class="line"><a name="l00525"></a><span class="lineno"> 525</span>  }</div>
|
|
590
|
+
<div class="line"><a name="l00526"></a><span class="lineno"> 526</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1LoadStmt.html">LoadStmt</a> *load = SVFUtil::dyn_cast<LoadStmt>(stmt))</div>
|
|
591
|
+
<div class="line"><a name="l00527"></a><span class="lineno"> 527</span>  {</div>
|
|
592
|
+
<div class="line"><a name="l00528"></a><span class="lineno"> 528</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#ac60581a57407fa4c65b1975f5be687b8">AccessMemoryViaLoadStmt</a>(load, worklist, visited);</div>
|
|
593
|
+
<div class="line"><a name="l00529"></a><span class="lineno"> 529</span>  }</div>
|
|
594
|
+
<div class="line"><a name="l00530"></a><span class="lineno"> 530</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1GepStmt.html">GepStmt</a> *gep = SVFUtil::dyn_cast<GepStmt>(stmt))</div>
|
|
595
|
+
<div class="line"><a name="l00531"></a><span class="lineno"> 531</span>  {</div>
|
|
596
|
+
<div class="line"><a name="l00532"></a><span class="lineno"> 532</span>  <span class="comment">// there are 3 type of gepStmt</span></div>
|
|
597
|
+
<div class="line"><a name="l00533"></a><span class="lineno"> 533</span>  <span class="comment">// 1. ptr get offset</span></div>
|
|
598
|
+
<div class="line"><a name="l00534"></a><span class="lineno"> 534</span>  <span class="comment">// 2. struct get field</span></div>
|
|
599
|
+
<div class="line"><a name="l00535"></a><span class="lineno"> 535</span>  <span class="comment">// 3. array get element</span></div>
|
|
600
|
+
<div class="line"><a name="l00536"></a><span class="lineno"> 536</span>  <span class="comment">// for array gep, there are two kind of overflow checking</span></div>
|
|
601
|
+
<div class="line"><a name="l00537"></a><span class="lineno"> 537</span>  <span class="comment">// Arr [Struct.C * 10] arr, Struct.C {i32 a, i32 b}</span></div>
|
|
602
|
+
<div class="line"><a name="l00538"></a><span class="lineno"> 538</span>  <span class="comment">// arr[11].a = **, it is "lhs = gep *arr, 0 (ptr), 11 (arrIdx), 0 (ptr), 0(struct field)"</span></div>
|
|
603
|
+
<div class="line"><a name="l00539"></a><span class="lineno"> 539</span>  <span class="comment">// 1) in this case arrIdx 11 is overflow.</span></div>
|
|
604
|
+
<div class="line"><a name="l00540"></a><span class="lineno"> 540</span>  <span class="comment">// Other case,</span></div>
|
|
605
|
+
<div class="line"><a name="l00541"></a><span class="lineno"> 541</span>  <span class="comment">// Struct.C {i32 a, [i32*10] b, i32 c}, C.b[11] = 1</span></div>
|
|
606
|
+
<div class="line"><a name="l00542"></a><span class="lineno"> 542</span>  <span class="comment">// it is "lhs - gep *C, 0(ptr), 1(struct field), 0(ptr), 11(arrIdx)"</span></div>
|
|
607
|
+
<div class="line"><a name="l00543"></a><span class="lineno"> 543</span>  <span class="comment">// 2) in this case arrIdx 11 is larger than its getOffsetVar.Type Array([i32*10])</span></div>
|
|
608
|
+
<div class="line"><a name="l00544"></a><span class="lineno"> 544</span>  </div>
|
|
609
|
+
<div class="line"><a name="l00545"></a><span class="lineno"> 545</span>  <span class="comment">// therefore, if last getOffsetVar.Type is not the Array, just check the overall offset and its</span></div>
|
|
610
|
+
<div class="line"><a name="l00546"></a><span class="lineno"> 546</span>  <span class="comment">// gep source type size (together with totalOffset along the value flow).</span></div>
|
|
611
|
+
<div class="line"><a name="l00547"></a><span class="lineno"> 547</span>  <span class="comment">// so if curgepOffset + totalOffset >= gepSrc (overflow)</span></div>
|
|
612
|
+
<div class="line"><a name="l00548"></a><span class="lineno"> 548</span>  <span class="comment">// else totalOffset += curgepOffset</span></div>
|
|
613
|
+
<div class="line"><a name="l00549"></a><span class="lineno"> 549</span>  </div>
|
|
614
|
+
<div class="line"><a name="l00550"></a><span class="lineno"> 550</span>  <span class="comment">// otherwise, if last getOffsetVar.Type is the Array, check the last idx and array. (just offset,</span></div>
|
|
615
|
+
<div class="line"><a name="l00551"></a><span class="lineno"> 551</span>  <span class="comment">// not with totalOffset during check)</span></div>
|
|
616
|
+
<div class="line"><a name="l00552"></a><span class="lineno"> 552</span>  <span class="comment">// so if getOffsetVarVal > getOffsetVar.TypeSize (overflow)</span></div>
|
|
617
|
+
<div class="line"><a name="l00553"></a><span class="lineno"> 553</span>  <span class="comment">// else safe and return.</span></div>
|
|
618
|
+
<div class="line"><a name="l00554"></a><span class="lineno"> 554</span>  <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a> byteOffset;</div>
|
|
619
|
+
<div class="line"><a name="l00555"></a><span class="lineno"> 555</span>  <span class="keywordflow">if</span> (gep->isConstantOffset())</div>
|
|
620
|
+
<div class="line"><a name="l00556"></a><span class="lineno"> 556</span>  {</div>
|
|
621
|
+
<div class="line"><a name="l00557"></a><span class="lineno"> 557</span>  byteOffset = <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(gep->accumulateConstantByteOffset());</div>
|
|
622
|
+
<div class="line"><a name="l00558"></a><span class="lineno"> 558</span>  }</div>
|
|
623
|
+
<div class="line"><a name="l00559"></a><span class="lineno"> 559</span>  <span class="keywordflow">else</span></div>
|
|
624
|
+
<div class="line"><a name="l00560"></a><span class="lineno"> 560</span>  {</div>
|
|
625
|
+
<div class="line"><a name="l00561"></a><span class="lineno"> 561</span>  byteOffset =</div>
|
|
626
|
+
<div class="line"><a name="l00562"></a><span class="lineno"> 562</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a21e927af79c73460ff5629cbd4961163">getByteOffset</a>(gep).<a class="code" href="structSVF_1_1AbstractValue.html#acbcec6f55d23e6cd278fe8572a68f393">getInterval</a>();</div>
|
|
627
|
+
<div class="line"><a name="l00563"></a><span class="lineno"> 563</span>  }</div>
|
|
628
|
+
<div class="line"><a name="l00564"></a><span class="lineno"> 564</span>  <span class="comment">// for variable offset, join with accumulate gep offset</span></div>
|
|
629
|
+
<div class="line"><a name="l00565"></a><span class="lineno"> 565</span>  gep_offsets[gep->getICFGNode()] = byteOffset;</div>
|
|
630
|
+
<div class="line"><a name="l00566"></a><span class="lineno"> 566</span>  <span class="keywordflow">if</span> (byteOffset.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() >= <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>() && <a class="code" href="classSVF_1_1Options.html#a6450b984f67d3cfa3f44892e8eea555e">Options::GepUnknownIdx</a>())</div>
|
|
631
|
+
<div class="line"><a name="l00567"></a><span class="lineno"> 567</span>  {</div>
|
|
632
|
+
<div class="line"><a name="l00568"></a><span class="lineno"> 568</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
633
|
+
<div class="line"><a name="l00569"></a><span class="lineno"> 569</span>  }</div>
|
|
634
|
+
<div class="line"><a name="l00570"></a><span class="lineno"> 570</span>  </div>
|
|
635
|
+
<div class="line"><a name="l00571"></a><span class="lineno"> 571</span>  <span class="keywordflow">if</span> (gep->getOffsetVarAndGepTypePairVec().size() > 0)</div>
|
|
636
|
+
<div class="line"><a name="l00572"></a><span class="lineno"> 572</span>  {</div>
|
|
637
|
+
<div class="line"><a name="l00573"></a><span class="lineno"> 573</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFVar.html">SVFVar</a> *gepVal = gep->getOffsetVarAndGepTypePairVec().back().first;</div>
|
|
638
|
+
<div class="line"><a name="l00574"></a><span class="lineno"> 574</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFType.html">SVFType</a> *gepType = gep->getOffsetVarAndGepTypePairVec().back().second;</div>
|
|
639
|
+
<div class="line"><a name="l00575"></a><span class="lineno"> 575</span>  </div>
|
|
640
|
+
<div class="line"><a name="l00576"></a><span class="lineno"> 576</span>  <span class="keywordflow">if</span> (gepType-><a class="code" href="classSVF_1_1SVFType.html#a330084f9a3deb6e5acb52a8ee3eb7fe4">isArrayTy</a>())</div>
|
|
641
|
+
<div class="line"><a name="l00577"></a><span class="lineno"> 577</span>  {</div>
|
|
642
|
+
<div class="line"><a name="l00578"></a><span class="lineno"> 578</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFArrayType.html">SVFArrayType</a> *gepArrType = SVFUtil::dyn_cast<SVFArrayType>(gepType);</div>
|
|
643
|
+
<div class="line"><a name="l00579"></a><span class="lineno"> 579</span>  <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a> gepArrTotalByte(0);</div>
|
|
644
|
+
<div class="line"><a name="l00580"></a><span class="lineno"> 580</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFValue.html">SVFValue</a> *idxValue = gepVal-><a class="code" href="classSVF_1_1SVFVar.html#ac2db6304ea5526fb446ae882983beeb0">getValue</a>();</div>
|
|
645
|
+
<div class="line"><a name="l00581"></a><span class="lineno"> 581</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> arrElemSize = gepArrType-><a class="code" href="classSVF_1_1SVFArrayType.html#a28da1169748e38b891133b76568a2759">getTypeOfElement</a>()-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>();</div>
|
|
646
|
+
<div class="line"><a name="l00582"></a><span class="lineno"> 582</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFConstantInt.html">SVFConstantInt</a> *op = SVFUtil::dyn_cast<SVFConstantInt>(idxValue))</div>
|
|
647
|
+
<div class="line"><a name="l00583"></a><span class="lineno"> 583</span>  {</div>
|
|
648
|
+
<div class="line"><a name="l00584"></a><span class="lineno"> 584</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> lb = (double) <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>() / arrElemSize >= op->getSExtValue() ?</div>
|
|
649
|
+
<div class="line"><a name="l00585"></a><span class="lineno"> 585</span>  op->getSExtValue() * arrElemSize : <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>();</div>
|
|
650
|
+
<div class="line"><a name="l00586"></a><span class="lineno"> 586</span>  gepArrTotalByte = gepArrTotalByte + <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(lb, lb);</div>
|
|
651
|
+
<div class="line"><a name="l00587"></a><span class="lineno"> 587</span>  }</div>
|
|
652
|
+
<div class="line"><a name="l00588"></a><span class="lineno"> 588</span>  <span class="keywordflow">else</span></div>
|
|
653
|
+
<div class="line"><a name="l00589"></a><span class="lineno"> 589</span>  {</div>
|
|
654
|
+
<div class="line"><a name="l00590"></a><span class="lineno"> 590</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> idx = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(idxValue);</div>
|
|
655
|
+
<div class="line"><a name="l00591"></a><span class="lineno"> 591</span>  <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a> idxVal =</div>
|
|
656
|
+
<div class="line"><a name="l00592"></a><span class="lineno"> 592</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">getAbsState</a>()[idx].getInterval();</div>
|
|
657
|
+
<div class="line"><a name="l00593"></a><span class="lineno"> 593</span>  <span class="keywordflow">if</span> (idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#a674f9bb98053f8658e246863d6561072">isBottom</a>())</div>
|
|
658
|
+
<div class="line"><a name="l00594"></a><span class="lineno"> 594</span>  {</div>
|
|
659
|
+
<div class="line"><a name="l00595"></a><span class="lineno"> 595</span>  gepArrTotalByte = gepArrTotalByte + <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(0, 0);</div>
|
|
660
|
+
<div class="line"><a name="l00596"></a><span class="lineno"> 596</span>  }</div>
|
|
661
|
+
<div class="line"><a name="l00597"></a><span class="lineno"> 597</span>  <span class="keywordflow">else</span></div>
|
|
662
|
+
<div class="line"><a name="l00598"></a><span class="lineno"> 598</span>  {</div>
|
|
663
|
+
<div class="line"><a name="l00599"></a><span class="lineno"> 599</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> ub = (idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() < 0) ? 0 :</div>
|
|
664
|
+
<div class="line"><a name="l00600"></a><span class="lineno"> 600</span>  (<span class="keywordtype">double</span>) <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>() / arrElemSize >=</div>
|
|
665
|
+
<div class="line"><a name="l00601"></a><span class="lineno"> 601</span>  idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() ?</div>
|
|
666
|
+
<div class="line"><a name="l00602"></a><span class="lineno"> 602</span>  arrElemSize * idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() : <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>();</div>
|
|
667
|
+
<div class="line"><a name="l00603"></a><span class="lineno"> 603</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> lb = (idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() < 0) ? 0 :</div>
|
|
668
|
+
<div class="line"><a name="l00604"></a><span class="lineno"> 604</span>  ((<span class="keywordtype">double</span>) <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>() / arrElemSize >=</div>
|
|
669
|
+
<div class="line"><a name="l00605"></a><span class="lineno"> 605</span>  idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>()) ?</div>
|
|
670
|
+
<div class="line"><a name="l00606"></a><span class="lineno"> 606</span>  arrElemSize * idxVal.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() : <a class="code" href="classSVF_1_1Options.html#aaab923c093730b1670a54f09340b1bd5">Options::MaxFieldLimit</a>();</div>
|
|
671
|
+
<div class="line"><a name="l00607"></a><span class="lineno"> 607</span>  gepArrTotalByte = gepArrTotalByte + <a class="code" href="classSVF_1_1IntervalValue.html">IntervalValue</a>(lb, ub);</div>
|
|
672
|
+
<div class="line"><a name="l00608"></a><span class="lineno"> 608</span>  }</div>
|
|
673
|
+
<div class="line"><a name="l00609"></a><span class="lineno"> 609</span>  }</div>
|
|
674
|
+
<div class="line"><a name="l00610"></a><span class="lineno"> 610</span>  total_bytes = total_bytes + gepArrTotalByte;</div>
|
|
675
|
+
<div class="line"><a name="l00611"></a><span class="lineno"> 611</span>  <span class="keywordflow">if</span> (total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() >= gepArrType-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>())</div>
|
|
676
|
+
<div class="line"><a name="l00612"></a><span class="lineno"> 612</span>  {</div>
|
|
677
|
+
<div class="line"><a name="l00613"></a><span class="lineno"> 613</span>  <a class="code" href="cJSON_8h.html#ad4c68ea99a26b0a98ad9a79982960458">std::string</a> msg =</div>
|
|
678
|
+
<div class="line"><a name="l00614"></a><span class="lineno"> 614</span>  <span class="stringliteral">"Buffer overflow!! Accessing buffer range: "</span> +</div>
|
|
679
|
+
<div class="line"><a name="l00615"></a><span class="lineno"> 615</span>  <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(total_bytes) +</div>
|
|
680
|
+
<div class="line"><a name="l00616"></a><span class="lineno"> 616</span>  <span class="stringliteral">"\nAllocated Gep buffer size: "</span> +</div>
|
|
681
|
+
<div class="line"><a name="l00617"></a><span class="lineno"> 617</span>  std::to_string(gepArrType-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>()) + <span class="stringliteral">"\n"</span>;</div>
|
|
682
|
+
<div class="line"><a name="l00618"></a><span class="lineno"> 618</span>  msg += <span class="stringliteral">"Position: "</span> + firstValue-><a class="code" href="classSVF_1_1SVFValue.html#a4a0cfe3a8f37d33ffcdca3d66026dcc3">toString</a>() + <span class="stringliteral">"\n"</span>;</div>
|
|
683
|
+
<div class="line"><a name="l00619"></a><span class="lineno"> 619</span>  msg += <span class="stringliteral">" The following is the value flow. [[\n"</span>;</div>
|
|
684
|
+
<div class="line"><a name="l00620"></a><span class="lineno"> 620</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> it = gep_offsets.begin(); it != gep_offsets.end(); ++it)</div>
|
|
685
|
+
<div class="line"><a name="l00621"></a><span class="lineno"> 621</span>  {</div>
|
|
686
|
+
<div class="line"><a name="l00622"></a><span class="lineno"> 622</span>  msg += it->first->toString() + <span class="stringliteral">", Offset: "</span> + <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(it->second) +</div>
|
|
687
|
+
<div class="line"><a name="l00623"></a><span class="lineno"> 623</span>  <span class="stringliteral">"\n"</span>;</div>
|
|
688
|
+
<div class="line"><a name="l00624"></a><span class="lineno"> 624</span>  }</div>
|
|
689
|
+
<div class="line"><a name="l00625"></a><span class="lineno"> 625</span>  msg += <span class="stringliteral">"]].\nAlloc Site: "</span> + gep->toString() + <span class="stringliteral">"\n"</span>;</div>
|
|
690
|
+
<div class="line"><a name="l00626"></a><span class="lineno"> 626</span>  </div>
|
|
691
|
+
<div class="line"><a name="l00627"></a><span class="lineno"> 627</span>  <a class="code" href="structSVF_1_1BufOverflowException.html">BufOverflowException</a> bug(<a class="code" href="namespaceSVF_1_1SVFUtil.html#a7655b13bbfe720ca2b8a25e0a72528e6">SVFUtil::errMsg</a>(msg), gepArrType-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>(),</div>
|
|
692
|
+
<div class="line"><a name="l00628"></a><span class="lineno"> 628</span>  gepArrType-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>(),</div>
|
|
693
|
+
<div class="line"><a name="l00629"></a><span class="lineno"> 629</span>  total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(), total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(),</div>
|
|
694
|
+
<div class="line"><a name="l00630"></a><span class="lineno"> 630</span>  firstValue);</div>
|
|
695
|
+
<div class="line"><a name="l00631"></a><span class="lineno"> 631</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">addBugToRecoder</a>(bug, curNode);</div>
|
|
696
|
+
<div class="line"><a name="l00632"></a><span class="lineno"> 632</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
697
697
|
<div class="line"><a name="l00633"></a><span class="lineno"> 633</span>  }</div>
|
|
698
|
-
<div class="line"><a name="l00634"></a><span class="lineno"> 634</span> 
|
|
699
|
-
<div class="line"><a name="l00635"></a><span class="lineno"> 635</span> 
|
|
700
|
-
<div class="line"><a name="l00636"></a><span class="lineno"> 636</span> 
|
|
701
|
-
<div class="line"><a name="l00637"></a><span class="lineno"> 637</span> 
|
|
702
|
-
<div class="line"><a name="l00638"></a><span class="lineno"> 638</span> 
|
|
703
|
-
<div class="line"><a name="l00639"></a><span class="lineno"> 639</span> 
|
|
704
|
-
<div class="line"><a name="l00640"></a><span class="lineno"> 640</span> 
|
|
705
|
-
<div class="line"><a name="l00641"></a><span class="lineno"> 641</span> 
|
|
706
|
-
<div class="line"><a name="l00642"></a><span class="lineno"> 642</span> 
|
|
707
|
-
<div class="line"><a name="l00643"></a><span class="lineno"> 643</span> 
|
|
708
|
-
<div class="line"><a name="l00644"></a><span class="lineno"> 644</span> 
|
|
698
|
+
<div class="line"><a name="l00634"></a><span class="lineno"> 634</span>  <span class="keywordflow">else</span></div>
|
|
699
|
+
<div class="line"><a name="l00635"></a><span class="lineno"> 635</span>  {</div>
|
|
700
|
+
<div class="line"><a name="l00636"></a><span class="lineno"> 636</span>  <span class="comment">// for gep last index's type is arr, stop here.</span></div>
|
|
701
|
+
<div class="line"><a name="l00637"></a><span class="lineno"> 637</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
702
|
+
<div class="line"><a name="l00638"></a><span class="lineno"> 638</span>  }</div>
|
|
703
|
+
<div class="line"><a name="l00639"></a><span class="lineno"> 639</span>  }</div>
|
|
704
|
+
<div class="line"><a name="l00640"></a><span class="lineno"> 640</span>  <span class="keywordflow">else</span></div>
|
|
705
|
+
<div class="line"><a name="l00641"></a><span class="lineno"> 641</span>  {</div>
|
|
706
|
+
<div class="line"><a name="l00642"></a><span class="lineno"> 642</span>  total_bytes = total_bytes + byteOffset;</div>
|
|
707
|
+
<div class="line"><a name="l00643"></a><span class="lineno"> 643</span>  }</div>
|
|
708
|
+
<div class="line"><a name="l00644"></a><span class="lineno"> 644</span>  </div>
|
|
709
709
|
<div class="line"><a name="l00645"></a><span class="lineno"> 645</span>  }</div>
|
|
710
|
-
<div class="line"><a name="l00646"></a><span class="lineno"> 646</span> 
|
|
711
|
-
<div class="line"><a name="l00647"></a><span class="lineno"> 647</span> 
|
|
712
|
-
<div class="line"><a name="l00648"></a><span class="lineno"> 648</span> 
|
|
713
|
-
<div class="line"><a name="l00649"></a><span class="lineno"> 649</span> 
|
|
714
|
-
<div class="line"><a name="l00650"></a><span class="lineno"> 650</span> 
|
|
715
|
-
<div class="line"><a name="l00651"></a><span class="lineno"> 651</span> 
|
|
716
|
-
<div class="line"><a name="l00652"></a><span class="lineno"> 652</span> 
|
|
717
|
-
<div class="line"><a name="l00653"></a><span class="lineno"> 653</span> 
|
|
718
|
-
<div class="line"><a name="l00654"></a><span class="lineno"> 654</span> 
|
|
719
|
-
<div class="line"><a name="l00655"></a><span class="lineno"> 655</span> 
|
|
720
|
-
<div class="line"><a name="l00656"></a><span class="lineno"> 656</span> 
|
|
721
|
-
<div class="line"><a name="l00657"></a><span class="lineno"> 657</span> 
|
|
722
|
-
<div class="line"><a name="l00658"></a><span class="lineno"> 658</span> 
|
|
723
|
-
<div class="line"><a name="l00659"></a><span class="lineno"> 659</span>  <
|
|
724
|
-
<div class="line"><a name="l00660"></a><span class="lineno"> 660</span> 
|
|
725
|
-
<div class="line"><a name="l00661"></a><span class="lineno"> 661</span> 
|
|
726
|
-
<div class="line"><a name="l00662"></a><span class="lineno"> 662</span> 
|
|
727
|
-
<div class="line"><a name="l00663"></a><span class="lineno"> 663</span>  msg += <span class="stringliteral">"
|
|
728
|
-
<div class="line"><a name="l00664"></a><span class="lineno"> 664</span>  <
|
|
729
|
-
<div class="line"><a name="l00665"></a><span class="lineno"> 665</span> 
|
|
730
|
-
<div class="line"><a name="l00666"></a><span class="lineno"> 666</span> 
|
|
731
|
-
<div class="line"><a name="l00667"></a><span class="lineno"> 667</span> 
|
|
732
|
-
<div class="line"><a name="l00668"></a><span class="lineno"> 668</span>  <span class="
|
|
733
|
-
<div class="line"><a name="l00669"></a><span class="lineno"> 669</span> 
|
|
734
|
-
<div class="line"><a name="l00670"></a><span class="lineno"> 670</span> 
|
|
735
|
-
<div class="line"><a name="l00671"></a><span class="lineno"> 671</span> 
|
|
736
|
-
<div class="line"><a name="l00672"></a><span class="lineno"> 672</span>  </div>
|
|
737
|
-
<div class="line"><a name="l00673"></a><span class="lineno"> 673</span>  <span class="keywordflow">return</span> <span class="keyword">
|
|
710
|
+
<div class="line"><a name="l00646"></a><span class="lineno"> 646</span>  <span class="keywordflow">if</span> (!visited.count(gep->getRHSVar()->getValue()))</div>
|
|
711
|
+
<div class="line"><a name="l00647"></a><span class="lineno"> 647</span>  {</div>
|
|
712
|
+
<div class="line"><a name="l00648"></a><span class="lineno"> 648</span>  visited.insert(gep->getRHSVar()->getValue());</div>
|
|
713
|
+
<div class="line"><a name="l00649"></a><span class="lineno"> 649</span>  worklist.<a class="code" href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">push</a>(gep->getRHSVar()->getValue());</div>
|
|
714
|
+
<div class="line"><a name="l00650"></a><span class="lineno"> 650</span>  }</div>
|
|
715
|
+
<div class="line"><a name="l00651"></a><span class="lineno"> 651</span>  }</div>
|
|
716
|
+
<div class="line"><a name="l00652"></a><span class="lineno"> 652</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1AddrStmt.html">AddrStmt</a> *addr = SVFUtil::dyn_cast<AddrStmt>(stmt))</div>
|
|
717
|
+
<div class="line"><a name="l00653"></a><span class="lineno"> 653</span>  {</div>
|
|
718
|
+
<div class="line"><a name="l00654"></a><span class="lineno"> 654</span>  <span class="comment">// addrStmt is source node.</span></div>
|
|
719
|
+
<div class="line"><a name="l00655"></a><span class="lineno"> 655</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> arr_type_size = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a0e8b546f608417e218c2fab5a5893135">getAllocaInstByteSize</a>(addr);</div>
|
|
720
|
+
<div class="line"><a name="l00656"></a><span class="lineno"> 656</span>  <span class="keywordflow">if</span> (total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() >= arr_type_size ||</div>
|
|
721
|
+
<div class="line"><a name="l00657"></a><span class="lineno"> 657</span>  total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() < 0)</div>
|
|
722
|
+
<div class="line"><a name="l00658"></a><span class="lineno"> 658</span>  {</div>
|
|
723
|
+
<div class="line"><a name="l00659"></a><span class="lineno"> 659</span>  <a class="code" href="cJSON_8h.html#ad4c68ea99a26b0a98ad9a79982960458">std::string</a> msg =</div>
|
|
724
|
+
<div class="line"><a name="l00660"></a><span class="lineno"> 660</span>  <span class="stringliteral">"Buffer overflow!! Accessing buffer range: "</span> + <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(total_bytes) +</div>
|
|
725
|
+
<div class="line"><a name="l00661"></a><span class="lineno"> 661</span>  <span class="stringliteral">"\nAllocated buffer size: "</span> + std::to_string(arr_type_size) + <span class="stringliteral">"\n"</span>;</div>
|
|
726
|
+
<div class="line"><a name="l00662"></a><span class="lineno"> 662</span>  msg += <span class="stringliteral">"Position: "</span> + firstValue-><a class="code" href="classSVF_1_1SVFValue.html#a4a0cfe3a8f37d33ffcdca3d66026dcc3">toString</a>() + <span class="stringliteral">"\n"</span>;</div>
|
|
727
|
+
<div class="line"><a name="l00663"></a><span class="lineno"> 663</span>  msg += <span class="stringliteral">" The following is the value flow. [[\n"</span>;</div>
|
|
728
|
+
<div class="line"><a name="l00664"></a><span class="lineno"> 664</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> it = gep_offsets.begin(); it != gep_offsets.end(); ++it)</div>
|
|
729
|
+
<div class="line"><a name="l00665"></a><span class="lineno"> 665</span>  {</div>
|
|
730
|
+
<div class="line"><a name="l00666"></a><span class="lineno"> 666</span>  msg += it->first->toString() + <span class="stringliteral">", Offset: "</span> + <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(it->second) + <span class="stringliteral">"\n"</span>;</div>
|
|
731
|
+
<div class="line"><a name="l00667"></a><span class="lineno"> 667</span>  }</div>
|
|
732
|
+
<div class="line"><a name="l00668"></a><span class="lineno"> 668</span>  msg += <span class="stringliteral">"]].\n Alloc Site: "</span> + addr->toString() + <span class="stringliteral">"\n"</span>;</div>
|
|
733
|
+
<div class="line"><a name="l00669"></a><span class="lineno"> 669</span>  <a class="code" href="structSVF_1_1BufOverflowException.html">BufOverflowException</a> bug(<a class="code" href="namespaceSVF_1_1SVFUtil.html#ac71522e8c55f84cfc6c13a0ddff18436">SVFUtil::wrnMsg</a>(msg), arr_type_size, arr_type_size,</div>
|
|
734
|
+
<div class="line"><a name="l00670"></a><span class="lineno"> 670</span>  total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(), total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(),</div>
|
|
735
|
+
<div class="line"><a name="l00671"></a><span class="lineno"> 671</span>  firstValue);</div>
|
|
736
|
+
<div class="line"><a name="l00672"></a><span class="lineno"> 672</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">addBugToRecoder</a>(bug, curNode);</div>
|
|
737
|
+
<div class="line"><a name="l00673"></a><span class="lineno"> 673</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
738
738
|
<div class="line"><a name="l00674"></a><span class="lineno"> 674</span>  }</div>
|
|
739
|
-
<div class="line"><a name="l00675"></a><span class="lineno"> 675</span> 
|
|
740
|
-
<div class="line"><a name="l00676"></a><span class="lineno"> 676</span> 
|
|
741
|
-
<div class="line"><a name="l00677"></a><span class="lineno"> 677</span> 
|
|
742
|
-
<div class="line"><a name="l00678"></a><span class="lineno"> 678</span> 
|
|
743
|
-
<div class="line"><a name="l00679"></a><span class="lineno"> 679</span> 
|
|
744
|
-
<div class="line"><a name="l00680"></a><span class="lineno"> 680</span> 
|
|
745
|
-
<div class="line"><a name="l00681"></a><span class="lineno"> 681</span> 
|
|
746
|
-
<div class="line"><a name="l00682"></a><span class="lineno"> 682</span> 
|
|
747
|
-
<div class="line"><a name="l00683"></a><span class="lineno"> 683</span> 
|
|
748
|
-
<div class="line"><a name="l00684"></a><span class="lineno"> 684</span> 
|
|
749
|
-
<div class="line"><a name="l00685"></a><span class="lineno"> 685</span> 
|
|
750
|
-
<div class="line"><a name="l00686"></a><span class="lineno"> 686</span> 
|
|
751
|
-
<div class="line"><a name="l00687"></a><span class="lineno"> 687</span> 
|
|
752
|
-
<div class="line"><a name="l00688"></a><span class="lineno"> 688</span> 
|
|
753
|
-
<div class="line"><a name="l00689"></a><span class="lineno"> 689</span> 
|
|
754
|
-
<div class="line"><a name="l00690"></a><span class="lineno"> 690</span> 
|
|
755
|
-
<div class="line"><a name="l00691"></a><span class="lineno"> 691</span> 
|
|
756
|
-
<div class="line"><a name="l00692"></a><span class="lineno"> 692</span>  </div>
|
|
757
|
-
<div class="line"><a name="l00693"></a><span class="lineno"> 693</span> 
|
|
758
|
-
<div class="line"><a name="l00694"></a><span class="lineno"> 694</span> 
|
|
759
|
-
<div class="line"><a name="l00695"></a><span class="lineno"> 695</span> 
|
|
760
|
-
<div class="line"><a name="l00696"></a><span class="lineno"> 696</span> 
|
|
761
|
-
<div class="line"><a name="l00697"></a><span class="lineno"> 697</span> 
|
|
762
|
-
<div class="line"><a name="l00698"></a><span class="lineno"> 698</span> 
|
|
763
|
-
<div class="line"><a name="l00699"></a><span class="lineno"> 699</span> 
|
|
764
|
-
<div class="line"><a name="l00700"></a><span class="lineno"> 700</span> 
|
|
765
|
-
<div class="line"><a name="l00701"></a><span class="lineno"> 701</span> 
|
|
766
|
-
<div class="line"><a name="l00702"></a><span class="lineno"> 702</span> 
|
|
767
|
-
<div class="line"><a name="l00703"></a><span class="lineno"> 703</span>  msg += <span class="stringliteral">"
|
|
768
|
-
<div class="line"><a name="l00704"></a><span class="lineno"> 704</span>  </div>
|
|
769
|
-
<div class="line"><a name="l00705"></a><span class="lineno"> 705</span> 
|
|
770
|
-
<div class="line"><a name="l00706"></a><span class="lineno"> 706</span> 
|
|
771
|
-
<div class="line"><a name="l00707"></a><span class="lineno"> 707</span> 
|
|
772
|
-
<div class="line"><a name="l00708"></a><span class="lineno"> 708</span>  <span class="
|
|
773
|
-
<div class="line"><a name="l00709"></a><span class="lineno"> 709</span> 
|
|
774
|
-
<div class="line"><a name="l00710"></a><span class="lineno"> 710</span> 
|
|
775
|
-
<div class="line"><a name="l00711"></a><span class="lineno"> 711</span> 
|
|
776
|
-
<div class="line"><a name="l00712"></a><span class="lineno"> 712</span>  <
|
|
777
|
-
<div class="line"><a name="l00713"></a><span class="lineno"> 713</span> 
|
|
778
|
-
<div class="line"><a name="l00714"></a><span class="lineno"> 714</span> 
|
|
779
|
-
<div class="line"><a name="l00715"></a><span class="lineno"> 715</span> 
|
|
780
|
-
<div class="line"><a name="l00716"></a><span class="lineno"> 716</span> 
|
|
781
|
-
<div class="line"><a name="l00717"></a><span class="lineno"> 717</span> 
|
|
782
|
-
<div class="line"><a name="l00718"></a><span class="lineno"> 718</span> 
|
|
783
|
-
<div class="line"><a name="l00719"></a><span class="lineno"> 719</span> 
|
|
784
|
-
<div class="line"><a name="l00720"></a><span class="lineno"> 720</span> 
|
|
785
|
-
<div class="line"><a name="l00721"></a><span class="lineno"> 721</span> 
|
|
786
|
-
<div class="line"><a name="l00722"></a><span class="lineno"> 722</span>  <
|
|
787
|
-
<div class="line"><a name="l00723"></a><span class="lineno"> 723</span> 
|
|
788
|
-
<div class="line"><a name="l00724"></a><span class="lineno"> 724</span> 
|
|
789
|
-
<div class="line"><a name="l00725"></a><span class="lineno"> 725</span> 
|
|
790
|
-
<div class="line"><a name="l00726"></a><span class="lineno"> 726</span> 
|
|
791
|
-
<div class="line"><a name="l00727"></a><span class="lineno"> 727</span> 
|
|
792
|
-
<div class="line"><a name="l00728"></a><span class="lineno"> 728</span> 
|
|
793
|
-
<div class="line"><a name="l00729"></a><span class="lineno"> 729</span> 
|
|
794
|
-
<div class="line"><a name="l00730"></a><span class="lineno"> 730</span> }</div>
|
|
795
|
-
<div class="line"><a name="l00731"></a><span class="lineno"> 731</span> 
|
|
796
|
-
<div class="line"><a name="l00732"></a><span class="lineno"> 732</span> 
|
|
797
|
-
<div class="line"><a name="l00733"></a><span class="lineno"> 733</span>  </div>
|
|
798
|
-
<div class="line"><a name="l00734"></a><span class="lineno"> 734</span> 
|
|
799
|
-
<div class="line"><a name="l00735"></a><span class="lineno"> 735</span> 
|
|
800
|
-
<div class="line"><a name="l00736"></a><span class="lineno"> 736</span> 
|
|
801
|
-
<div class="line"><a name="l00737"></a><span class="lineno"> 737</span> 
|
|
802
|
-
<div class="line"><a name="l00738"></a><span class="lineno"> 738</span> 
|
|
803
|
-
<div class="line"><a name="l00739"></a><span class="lineno"> 739</span> 
|
|
804
|
-
<div class="line"><a name="l00740"></a><span class="lineno"> 740</span> 
|
|
805
|
-
<div class="line"><a name="l00741"></a><span class="lineno"> 741</span> 
|
|
806
|
-
<div class="line"><a name="l00742"></a><span class="lineno"> 742</span> 
|
|
807
|
-
<div class="line"><a name="l00743"></a><span class="lineno"> 743</span> 
|
|
808
|
-
<div class="line"><a name="l00744"></a><span class="lineno"> 744</span> 
|
|
809
|
-
<div class="line"><a name="l00745"></a><span class="lineno"> 745</span> 
|
|
810
|
-
<div class="line"><a name="l00746"></a><span class="lineno"> 746</span> 
|
|
811
|
-
<div class="line"><a name="l00747"></a><span class="lineno"> 747</span> 
|
|
812
|
-
<div class="line"><a name="l00748"></a><span class="lineno"> 748</span> 
|
|
813
|
-
<div class="line"><a name="l00749"></a><span class="lineno"> 749</span> 
|
|
814
|
-
<div class="line"><a name="l00750"></a><span class="lineno"> 750</span> 
|
|
815
|
-
<div class="line"><a name="l00751"></a><span class="lineno"> 751</span> 
|
|
816
|
-
<div class="line"><a name="l00752"></a><span class="lineno"> 752</span> 
|
|
817
|
-
<div class="line"><a name="l00753"></a><span class="lineno"> 753</span> 
|
|
818
|
-
<div class="line"><a name="l00754"></a><span class="lineno"> 754</span> 
|
|
819
|
-
<div class="line"><a name="l00755"></a><span class="lineno"> 755</span> 
|
|
820
|
-
<div class="line"><a name="l00756"></a><span class="lineno"> 756</span> 
|
|
821
|
-
<div class="line"><a name="l00757"></a><span class="lineno"> 757</span> 
|
|
822
|
-
<div class="line"><a name="l00758"></a><span class="lineno"> 758</span> 
|
|
823
|
-
<div class="line"><a name="l00759"></a><span class="lineno"> 759</span> 
|
|
824
|
-
<div class="line"><a name="l00760"></a><span class="lineno"> 760</span> 
|
|
825
|
-
<div class="line"><a name="l00761"></a><span class="lineno"> 761</span> 
|
|
826
|
-
<div class="line"><a name="l00762"></a><span class="lineno"> 762</span> 
|
|
827
|
-
<div class="line"><a name="l00763"></a><span class="lineno"> 763</span> 
|
|
828
|
-
<div class="line"><a name="l00764"></a><span class="lineno"> 764</span> 
|
|
829
|
-
<div class="line"><a name="l00765"></a><span class="lineno"> 765</span> 
|
|
830
|
-
<div class="line"><a name="l00766"></a><span class="lineno"> 766</span> 
|
|
831
|
-
<div class="line"><a name="l00767"></a><span class="lineno"> 767</span> 
|
|
832
|
-
<div class="line"><a name="l00768"></a><span class="lineno"> 768</span> 
|
|
833
|
-
<div class="line"><a name="l00769"></a><span class="lineno"> 769</span> 
|
|
834
|
-
<div class="line"><a name="l00770"></a><span class="lineno"> 770</span> 
|
|
835
|
-
<div class="line"><a name="l00771"></a><span class="lineno"> 771</span> 
|
|
836
|
-
<div class="line"><a name="l00772"></a><span class="lineno"> 772</span> 
|
|
837
|
-
<div class="line"><a name="l00773"></a><span class="lineno"> 773</span> 
|
|
838
|
-
<div class="line"><a name="l00774"></a><span class="lineno"> 774</span> 
|
|
839
|
-
<div class="line"><a name="l00775"></a><span class="lineno"> 775</span> 
|
|
840
|
-
<div class="line"><a name="l00776"></a><span class="lineno"> 776</span> 
|
|
841
|
-
<div class="line"><a name="l00777"></a><span class="lineno"> 777</span> 
|
|
842
|
-
<div class="line"><a name="l00778"></a><span class="lineno"> 778</span> 
|
|
843
|
-
<div class="line"><a name="l00779"></a><span class="lineno"> 779</span> 
|
|
844
|
-
<div class="line"><a name="l00780"></a><span class="lineno"> 780</span> 
|
|
845
|
-
<div class="line"><a name="l00781"></a><span class="lineno"> 781</span> 
|
|
846
|
-
<div class="line"><a name="l00782"></a><span class="lineno"> 782</span> 
|
|
847
|
-
<div class="line"><a name="l00783"></a><span class="lineno"> 783</span> 
|
|
848
|
-
<div class="line"><a name="l00784"></a><span class="lineno"> 784</span> 
|
|
849
|
-
<div class="line"><a name="l00785"></a><span class="lineno"> 785</span> 
|
|
850
|
-
<div class="line"><a name="l00786"></a><span class="lineno"> 786</span> 
|
|
851
|
-
<div class="line"><a name="l00787"></a><span class="lineno"> 787</span> 
|
|
852
|
-
<div class="line"><a name="l00788"></a><span class="lineno"> 788</span> 
|
|
853
|
-
<div class="line"><a name="l00789"></a><span class="lineno"> 789</span> 
|
|
854
|
-
<div class="line"><a name="l00790"></a><span class="lineno"> 790</span> 
|
|
855
|
-
<div class="line"><a name="l00791"></a><span class="lineno"> 791</span> 
|
|
856
|
-
<div class="line"><a name="l00792"></a><span class="lineno"> 792</span> 
|
|
857
|
-
<div class="line"><a name="l00793"></a><span class="lineno"> 793</span> 
|
|
858
|
-
<div class="line"><a name="l00794"></a><span class="lineno"> 794</span> 
|
|
859
|
-
<div class="line"><a name="l00795"></a><span class="lineno"> 795</span> 
|
|
860
|
-
<div class="line"><a name="l00796"></a><span class="lineno"> 796</span> 
|
|
861
|
-
<div class="line"><a name="l00797"></a><span class="lineno"> 797</span> 
|
|
862
|
-
<div class="line"><a name="l00798"></a><span class="lineno"> 798</span> 
|
|
863
|
-
<div class="line"><a name="l00799"></a><span class="lineno"> 799</span> 
|
|
864
|
-
<div class="line"><a name="l00800"></a><span class="lineno"> 800</span> 
|
|
865
|
-
<div class="line"><a name="l00801"></a><span class="lineno"> 801</span> 
|
|
866
|
-
<div class="line"><a name="l00802"></a><span class="lineno"> 802</span> 
|
|
867
|
-
<div class="line"><a name="l00803"></a><span class="lineno"> 803</span> 
|
|
868
|
-
<div class="line"><a name="l00804"></a><span class="lineno"> 804</span> 
|
|
869
|
-
<div class="line"><a name="l00805"></a><span class="lineno"> 805</span> 
|
|
870
|
-
<div class="line"><a name="l00806"></a><span class="lineno"> 806</span> 
|
|
871
|
-
<div class="line"><a name="l00807"></a><span class="lineno"> 807</span> 
|
|
872
|
-
<div class="line"><a name="l00808"></a><span class="lineno"> 808</span> 
|
|
873
|
-
<div class="line"><a name="l00809"></a><span class="lineno"> 809</span> 
|
|
874
|
-
<div class="line"><a name="l00810"></a><span class="lineno"> 810</span> 
|
|
875
|
-
<div class="line"><a name="l00811"></a><span class="lineno"> 811</span> 
|
|
876
|
-
<div class="line"><a name="l00812"></a><span class="lineno"> 812</span> 
|
|
739
|
+
<div class="line"><a name="l00675"></a><span class="lineno"> 675</span>  <span class="keywordflow">else</span></div>
|
|
740
|
+
<div class="line"><a name="l00676"></a><span class="lineno"> 676</span>  {</div>
|
|
741
|
+
<div class="line"><a name="l00677"></a><span class="lineno"> 677</span>  </div>
|
|
742
|
+
<div class="line"><a name="l00678"></a><span class="lineno"> 678</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
743
|
+
<div class="line"><a name="l00679"></a><span class="lineno"> 679</span>  }</div>
|
|
744
|
+
<div class="line"><a name="l00680"></a><span class="lineno"> 680</span>  }</div>
|
|
745
|
+
<div class="line"><a name="l00681"></a><span class="lineno"> 681</span>  }</div>
|
|
746
|
+
<div class="line"><a name="l00682"></a><span class="lineno"> 682</span>  }</div>
|
|
747
|
+
<div class="line"><a name="l00683"></a><span class="lineno"> 683</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFGlobalValue.html">SVF::SVFGlobalValue</a> *gvalue = SVFUtil::dyn_cast<SVF::SVFGlobalValue>(value))</div>
|
|
748
|
+
<div class="line"><a name="l00684"></a><span class="lineno"> 684</span>  {</div>
|
|
749
|
+
<div class="line"><a name="l00685"></a><span class="lineno"> 685</span>  <a class="code" href="namespaceSVF.html#ad42bff8d0a7d60a085aa32d10f4955af">u32_t</a> arr_type_size = 0;</div>
|
|
750
|
+
<div class="line"><a name="l00686"></a><span class="lineno"> 686</span>  <span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFType.html">SVFType</a> *svftype = gvalue->getType();</div>
|
|
751
|
+
<div class="line"><a name="l00687"></a><span class="lineno"> 687</span>  <span class="keywordflow">if</span> (SVFUtil::isa<SVFPointerType>(svftype))</div>
|
|
752
|
+
<div class="line"><a name="l00688"></a><span class="lineno"> 688</span>  {</div>
|
|
753
|
+
<div class="line"><a name="l00689"></a><span class="lineno"> 689</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFArrayType.html">SVFArrayType</a> *ptrArrType = SVFUtil::dyn_cast<SVFArrayType>(</div>
|
|
754
|
+
<div class="line"><a name="l00690"></a><span class="lineno"> 690</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a2057e8e1c0aaf39e74f0a8fb2a1b580c">getPointeeElement</a>(<a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">getValueNode</a>(gvalue))))</div>
|
|
755
|
+
<div class="line"><a name="l00691"></a><span class="lineno"> 691</span>  arr_type_size = ptrArrType-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>();</div>
|
|
756
|
+
<div class="line"><a name="l00692"></a><span class="lineno"> 692</span>  <span class="keywordflow">else</span></div>
|
|
757
|
+
<div class="line"><a name="l00693"></a><span class="lineno"> 693</span>  arr_type_size = svftype-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>();</div>
|
|
758
|
+
<div class="line"><a name="l00694"></a><span class="lineno"> 694</span>  }</div>
|
|
759
|
+
<div class="line"><a name="l00695"></a><span class="lineno"> 695</span>  <span class="keywordflow">else</span></div>
|
|
760
|
+
<div class="line"><a name="l00696"></a><span class="lineno"> 696</span>  arr_type_size = svftype-><a class="code" href="classSVF_1_1SVFType.html#a95b8031f1e15d49c7d68628be1d05aae">getByteSize</a>();</div>
|
|
761
|
+
<div class="line"><a name="l00697"></a><span class="lineno"> 697</span>  </div>
|
|
762
|
+
<div class="line"><a name="l00698"></a><span class="lineno"> 698</span>  <span class="keywordflow">if</span> (total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() >= arr_type_size || total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>() < 0)</div>
|
|
763
|
+
<div class="line"><a name="l00699"></a><span class="lineno"> 699</span>  {</div>
|
|
764
|
+
<div class="line"><a name="l00700"></a><span class="lineno"> 700</span>  <a class="code" href="cJSON_8h.html#ad4c68ea99a26b0a98ad9a79982960458">std::string</a> msg = <span class="stringliteral">"Buffer overflow!! Accessing buffer range: "</span> + <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(total_bytes) +</div>
|
|
765
|
+
<div class="line"><a name="l00701"></a><span class="lineno"> 701</span>  <span class="stringliteral">"\nAllocated buffer size: "</span> + std::to_string(arr_type_size) + <span class="stringliteral">"\n"</span>;</div>
|
|
766
|
+
<div class="line"><a name="l00702"></a><span class="lineno"> 702</span>  msg += <span class="stringliteral">"Position: "</span> + firstValue-><a class="code" href="classSVF_1_1SVFValue.html#a4a0cfe3a8f37d33ffcdca3d66026dcc3">toString</a>() + <span class="stringliteral">"\n"</span>;</div>
|
|
767
|
+
<div class="line"><a name="l00703"></a><span class="lineno"> 703</span>  msg += <span class="stringliteral">" The following is the value flow.\n[["</span>;</div>
|
|
768
|
+
<div class="line"><a name="l00704"></a><span class="lineno"> 704</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> it = gep_offsets.begin(); it != gep_offsets.end(); ++it)</div>
|
|
769
|
+
<div class="line"><a name="l00705"></a><span class="lineno"> 705</span>  {</div>
|
|
770
|
+
<div class="line"><a name="l00706"></a><span class="lineno"> 706</span>  msg += it->first->toString() + <span class="stringliteral">", Offset: "</span> + <a class="code" href="namespaceSVF.html#a5d28d0818391747924478e86b9033431">IntervalToIntStr</a>(it->second) + <span class="stringliteral">"\n"</span>;</div>
|
|
771
|
+
<div class="line"><a name="l00707"></a><span class="lineno"> 707</span>  }</div>
|
|
772
|
+
<div class="line"><a name="l00708"></a><span class="lineno"> 708</span>  msg += <span class="stringliteral">"]]. \nAlloc Site: "</span> + gvalue->toString() + <span class="stringliteral">"\n"</span>;</div>
|
|
773
|
+
<div class="line"><a name="l00709"></a><span class="lineno"> 709</span>  </div>
|
|
774
|
+
<div class="line"><a name="l00710"></a><span class="lineno"> 710</span>  <a class="code" href="structSVF_1_1BufOverflowException.html">BufOverflowException</a> bug(<a class="code" href="namespaceSVF_1_1SVFUtil.html#ac71522e8c55f84cfc6c13a0ddff18436">SVFUtil::wrnMsg</a>(msg), arr_type_size, arr_type_size,</div>
|
|
775
|
+
<div class="line"><a name="l00711"></a><span class="lineno"> 711</span>  total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">lb</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(), total_bytes.<a class="code" href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">ub</a>().<a class="code" href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">getNumeral</a>(), firstValue);</div>
|
|
776
|
+
<div class="line"><a name="l00712"></a><span class="lineno"> 712</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">addBugToRecoder</a>(bug, curNode);</div>
|
|
777
|
+
<div class="line"><a name="l00713"></a><span class="lineno"> 713</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
778
|
+
<div class="line"><a name="l00714"></a><span class="lineno"> 714</span>  }</div>
|
|
779
|
+
<div class="line"><a name="l00715"></a><span class="lineno"> 715</span>  <span class="keywordflow">else</span></div>
|
|
780
|
+
<div class="line"><a name="l00716"></a><span class="lineno"> 716</span>  {</div>
|
|
781
|
+
<div class="line"><a name="l00717"></a><span class="lineno"> 717</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
782
|
+
<div class="line"><a name="l00718"></a><span class="lineno"> 718</span>  }</div>
|
|
783
|
+
<div class="line"><a name="l00719"></a><span class="lineno"> 719</span>  }</div>
|
|
784
|
+
<div class="line"><a name="l00720"></a><span class="lineno"> 720</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> <a class="code" href="classSVF_1_1SVFArgument.html">SVF::SVFArgument</a> *arg = SVFUtil::dyn_cast<SVF::SVFArgument>(value))</div>
|
|
785
|
+
<div class="line"><a name="l00721"></a><span class="lineno"> 721</span>  {</div>
|
|
786
|
+
<div class="line"><a name="l00722"></a><span class="lineno"> 722</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a048e203517ac727e6fe0653e1f24052c">AccessMemoryViaCallArgs</a>(arg, worklist, visited);</div>
|
|
787
|
+
<div class="line"><a name="l00723"></a><span class="lineno"> 723</span>  }</div>
|
|
788
|
+
<div class="line"><a name="l00724"></a><span class="lineno"> 724</span>  <span class="keywordflow">else</span></div>
|
|
789
|
+
<div class="line"><a name="l00725"></a><span class="lineno"> 725</span>  {</div>
|
|
790
|
+
<div class="line"><a name="l00726"></a><span class="lineno"> 726</span>  <span class="comment">// maybe SVFConstant</span></div>
|
|
791
|
+
<div class="line"><a name="l00727"></a><span class="lineno"> 727</span>  <span class="comment">// it may be cannot find the source, maybe we start from non-main function,</span></div>
|
|
792
|
+
<div class="line"><a name="l00728"></a><span class="lineno"> 728</span>  <span class="comment">// therefore it loses the value flow track</span></div>
|
|
793
|
+
<div class="line"><a name="l00729"></a><span class="lineno"> 729</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
794
|
+
<div class="line"><a name="l00730"></a><span class="lineno"> 730</span>  }</div>
|
|
795
|
+
<div class="line"><a name="l00731"></a><span class="lineno"> 731</span>  }</div>
|
|
796
|
+
<div class="line"><a name="l00732"></a><span class="lineno"> 732</span>  <span class="comment">// it may be cannot find the source, maybe we start from non-main function,</span></div>
|
|
797
|
+
<div class="line"><a name="l00733"></a><span class="lineno"> 733</span>  <span class="comment">// therefore it loses the value flow track</span></div>
|
|
798
|
+
<div class="line"><a name="l00734"></a><span class="lineno"> 734</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
799
|
+
<div class="line"><a name="l00735"></a><span class="lineno"> 735</span> }</div>
|
|
800
|
+
<div class="line"><a name="l00736"></a><span class="lineno"> 736</span>  </div>
|
|
801
|
+
<div class="line"><a name="l00737"></a><span class="lineno"> 737</span>  </div>
|
|
802
|
+
<div class="line"><a name="l00738"></a><span class="lineno"> 738</span>  </div>
|
|
803
|
+
<div class="line"><a name="l00739"></a><span class="lineno"> 739</span> <span class="keywordtype">void</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#afa6b30220b0b3261205a909def9ca44e">BufOverflowChecker::handleICFGNode</a>(<span class="keyword">const</span> <a class="code" href="classSVF_1_1ICFGNode.html">SVF::ICFGNode</a> *node)</div>
|
|
804
|
+
<div class="line"><a name="l00740"></a><span class="lineno"> 740</span> {</div>
|
|
805
|
+
<div class="line"><a name="l00741"></a><span class="lineno"> 741</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9b179466955023f275b6692b59048846">AbstractInterpretation::handleICFGNode</a>(node);</div>
|
|
806
|
+
<div class="line"><a name="l00742"></a><span class="lineno"> 742</span>  <a class="code" href="classSVF_1_1BufOverflowChecker.html#a52de7d619e8746a70718719306d7c5a1">detectBufOverflow</a>(node);</div>
|
|
807
|
+
<div class="line"><a name="l00743"></a><span class="lineno"> 743</span> }</div>
|
|
808
|
+
<div class="line"><a name="l00744"></a><span class="lineno"> 744</span>  </div>
|
|
809
|
+
<div class="line"><a name="l00745"></a><span class="lineno"> 745</span> <span class="comment">//</span></div>
|
|
810
|
+
<div class="line"><a name="l00746"></a><span class="lineno"> 746</span> <span class="keywordtype">bool</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#a52de7d619e8746a70718719306d7c5a1">BufOverflowChecker::detectBufOverflow</a>(<span class="keyword">const</span> ICFGNode *node)</div>
|
|
811
|
+
<div class="line"><a name="l00747"></a><span class="lineno"> 747</span> {</div>
|
|
812
|
+
<div class="line"><a name="l00748"></a><span class="lineno"> 748</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span>* stmt: node->getSVFStmts())</div>
|
|
813
|
+
<div class="line"><a name="l00749"></a><span class="lineno"> 749</span>  {</div>
|
|
814
|
+
<div class="line"><a name="l00750"></a><span class="lineno"> 750</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> GepStmt *gep = SVFUtil::dyn_cast<GepStmt>(stmt))</div>
|
|
815
|
+
<div class="line"><a name="l00751"></a><span class="lineno"> 751</span>  {</div>
|
|
816
|
+
<div class="line"><a name="l00752"></a><span class="lineno"> 752</span>  <span class="keyword">const</span> SVFVar* gepRhs = gep->getRHSVar();</div>
|
|
817
|
+
<div class="line"><a name="l00753"></a><span class="lineno"> 753</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> SVFInstruction* inst = SVFUtil::dyn_cast<SVFInstruction>(gepRhs->getValue()))</div>
|
|
818
|
+
<div class="line"><a name="l00754"></a><span class="lineno"> 754</span>  {</div>
|
|
819
|
+
<div class="line"><a name="l00755"></a><span class="lineno"> 755</span>  <span class="keyword">const</span> ICFGNode* icfgNode = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a618fc324a6c205d7e1b471bd850377a9">_svfir</a>-><a class="code" href="classSVF_1_1SVFIR.html#abda052b73e869ed6d7c139ad1528da11">getICFG</a>()-><a class="code" href="classSVF_1_1ICFG.html#a5f2c0aaba07d6fdd63058da0fb60ca8b">getICFGNode</a>(inst);</div>
|
|
820
|
+
<div class="line"><a name="l00756"></a><span class="lineno"> 756</span>  <span class="keywordflow">for</span> (<span class="keyword">const</span> SVFStmt* stmt2: icfgNode->getSVFStmts())</div>
|
|
821
|
+
<div class="line"><a name="l00757"></a><span class="lineno"> 757</span>  {</div>
|
|
822
|
+
<div class="line"><a name="l00758"></a><span class="lineno"> 758</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> GepStmt *gep2 = SVFUtil::dyn_cast<GepStmt>(stmt2))</div>
|
|
823
|
+
<div class="line"><a name="l00759"></a><span class="lineno"> 759</span>  {</div>
|
|
824
|
+
<div class="line"><a name="l00760"></a><span class="lineno"> 760</span>  <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(gep2->getLHSVar()->getValue(), IntervalValue(0, 0), node);</div>
|
|
825
|
+
<div class="line"><a name="l00761"></a><span class="lineno"> 761</span>  }</div>
|
|
826
|
+
<div class="line"><a name="l00762"></a><span class="lineno"> 762</span>  }</div>
|
|
827
|
+
<div class="line"><a name="l00763"></a><span class="lineno"> 763</span>  }</div>
|
|
828
|
+
<div class="line"><a name="l00764"></a><span class="lineno"> 764</span>  }</div>
|
|
829
|
+
<div class="line"><a name="l00765"></a><span class="lineno"> 765</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> LoadStmt* load = SVFUtil::dyn_cast<LoadStmt>(stmt))</div>
|
|
830
|
+
<div class="line"><a name="l00766"></a><span class="lineno"> 766</span>  {</div>
|
|
831
|
+
<div class="line"><a name="l00767"></a><span class="lineno"> 767</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a62baa9403069a9b1e010eaeb2f6b9b34">inVarToAddrsTable</a>(load->getRHSVarID()))</div>
|
|
832
|
+
<div class="line"><a name="l00768"></a><span class="lineno"> 768</span>  {</div>
|
|
833
|
+
<div class="line"><a name="l00769"></a><span class="lineno"> 769</span>  AbstractValue Addrs =</div>
|
|
834
|
+
<div class="line"><a name="l00770"></a><span class="lineno"> 770</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">getAddrs</a>(load->getRHSVarID());</div>
|
|
835
|
+
<div class="line"><a name="l00771"></a><span class="lineno"> 771</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> vaddr: Addrs.getAddrs())</div>
|
|
836
|
+
<div class="line"><a name="l00772"></a><span class="lineno"> 772</span>  {</div>
|
|
837
|
+
<div class="line"><a name="l00773"></a><span class="lineno"> 773</span>  <a class="code" href="CommandLine_8h.html#a2429346d37bd4c40889bd7c6d319d9da">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#ac37760566b534d89a61d789b00efb993">getInternalID</a>(vaddr);</div>
|
|
838
|
+
<div class="line"><a name="l00774"></a><span class="lineno"> 774</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.find(objId) != <a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.end())</div>
|
|
839
|
+
<div class="line"><a name="l00775"></a><span class="lineno"> 775</span>  {</div>
|
|
840
|
+
<div class="line"><a name="l00776"></a><span class="lineno"> 776</span>  <span class="keyword">const</span> GepStmt* gep = <a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.at(objId);</div>
|
|
841
|
+
<div class="line"><a name="l00777"></a><span class="lineno"> 777</span>  <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(gep->getLHSVar()->getValue(), IntervalValue(0, 0), node);</div>
|
|
842
|
+
<div class="line"><a name="l00778"></a><span class="lineno"> 778</span>  }</div>
|
|
843
|
+
<div class="line"><a name="l00779"></a><span class="lineno"> 779</span>  }</div>
|
|
844
|
+
<div class="line"><a name="l00780"></a><span class="lineno"> 780</span>  }</div>
|
|
845
|
+
<div class="line"><a name="l00781"></a><span class="lineno"> 781</span>  }</div>
|
|
846
|
+
<div class="line"><a name="l00782"></a><span class="lineno"> 782</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (<span class="keyword">const</span> StoreStmt* store = SVFUtil::dyn_cast<StoreStmt>(stmt))</div>
|
|
847
|
+
<div class="line"><a name="l00783"></a><span class="lineno"> 783</span>  {</div>
|
|
848
|
+
<div class="line"><a name="l00784"></a><span class="lineno"> 784</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#a62baa9403069a9b1e010eaeb2f6b9b34">inVarToAddrsTable</a>(store->getLHSVarID()))</div>
|
|
849
|
+
<div class="line"><a name="l00785"></a><span class="lineno"> 785</span>  {</div>
|
|
850
|
+
<div class="line"><a name="l00786"></a><span class="lineno"> 786</span>  AbstractValue Addrs =</div>
|
|
851
|
+
<div class="line"><a name="l00787"></a><span class="lineno"> 787</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">getAddrs</a>(store->getLHSVarID());</div>
|
|
852
|
+
<div class="line"><a name="l00788"></a><span class="lineno"> 788</span>  <span class="keywordflow">for</span> (<span class="keyword">auto</span> vaddr: Addrs.getAddrs())</div>
|
|
853
|
+
<div class="line"><a name="l00789"></a><span class="lineno"> 789</span>  {</div>
|
|
854
|
+
<div class="line"><a name="l00790"></a><span class="lineno"> 790</span>  <a class="code" href="CommandLine_8h.html#a2429346d37bd4c40889bd7c6d319d9da">u32_t</a> objId = <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">_svfir2AbsState</a>-><a class="code" href="classSVF_1_1SVFIR2AbsState.html#ac37760566b534d89a61d789b00efb993">getInternalID</a>(vaddr);</div>
|
|
855
|
+
<div class="line"><a name="l00791"></a><span class="lineno"> 791</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.find(objId) != <a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.end())</div>
|
|
856
|
+
<div class="line"><a name="l00792"></a><span class="lineno"> 792</span>  {</div>
|
|
857
|
+
<div class="line"><a name="l00793"></a><span class="lineno"> 793</span>  <span class="keyword">const</span> GepStmt* gep = <a class="code" href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">_addrToGep</a>.at(objId);</div>
|
|
858
|
+
<div class="line"><a name="l00794"></a><span class="lineno"> 794</span>  <span class="keywordflow">return</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">canSafelyAccessMemory</a>(gep->getLHSVar()->getValue(), IntervalValue(0, 0), node);</div>
|
|
859
|
+
<div class="line"><a name="l00795"></a><span class="lineno"> 795</span>  }</div>
|
|
860
|
+
<div class="line"><a name="l00796"></a><span class="lineno"> 796</span>  }</div>
|
|
861
|
+
<div class="line"><a name="l00797"></a><span class="lineno"> 797</span>  }</div>
|
|
862
|
+
<div class="line"><a name="l00798"></a><span class="lineno"> 798</span>  }</div>
|
|
863
|
+
<div class="line"><a name="l00799"></a><span class="lineno"> 799</span>  }</div>
|
|
864
|
+
<div class="line"><a name="l00800"></a><span class="lineno"> 800</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
865
|
+
<div class="line"><a name="l00801"></a><span class="lineno"> 801</span> }</div>
|
|
866
|
+
<div class="line"><a name="l00802"></a><span class="lineno"> 802</span>  </div>
|
|
867
|
+
<div class="line"><a name="l00803"></a><span class="lineno"> 803</span> <span class="keywordtype">void</span> <a class="code" href="classSVF_1_1BufOverflowChecker.html#a7c11b81809cb087317cbea654a589f75">BufOverflowChecker::addBugToRecoder</a>(<span class="keyword">const</span> BufOverflowException& e, <span class="keyword">const</span> ICFGNode* node)</div>
|
|
868
|
+
<div class="line"><a name="l00804"></a><span class="lineno"> 804</span> {</div>
|
|
869
|
+
<div class="line"><a name="l00805"></a><span class="lineno"> 805</span>  <span class="keyword">const</span> SVFInstruction* inst = <span class="keyword">nullptr</span>;</div>
|
|
870
|
+
<div class="line"><a name="l00806"></a><span class="lineno"> 806</span>  <span class="keywordflow">if</span> (<span class="keyword">const</span> CallICFGNode* call = SVFUtil::dyn_cast<CallICFGNode>(node))</div>
|
|
871
|
+
<div class="line"><a name="l00807"></a><span class="lineno"> 807</span>  {</div>
|
|
872
|
+
<div class="line"><a name="l00808"></a><span class="lineno"> 808</span>  inst = call->getCallSite();</div>
|
|
873
|
+
<div class="line"><a name="l00809"></a><span class="lineno"> 809</span>  }</div>
|
|
874
|
+
<div class="line"><a name="l00810"></a><span class="lineno"> 810</span>  <span class="keywordflow">else</span></div>
|
|
875
|
+
<div class="line"><a name="l00811"></a><span class="lineno"> 811</span>  {</div>
|
|
876
|
+
<div class="line"><a name="l00812"></a><span class="lineno"> 812</span>  inst = node->getSVFStmts().back()->getInst();</div>
|
|
877
877
|
<div class="line"><a name="l00813"></a><span class="lineno"> 813</span>  }</div>
|
|
878
|
-
<div class="line"><a name="l00814"></a><span class="lineno"> 814</span>  eventStack
|
|
879
|
-
<div class="line"><a name="l00815"></a><span class="lineno"> 815</span> 
|
|
880
|
-
<div class="line"><a name="l00816"></a><span class="lineno"> 816</span>  <a class="code" href="
|
|
881
|
-
<div class="line"><a name="l00817"></a><span class="lineno"> 817</span> 
|
|
882
|
-
<div class="line"><a name="l00818"></a><span class="lineno"> 818</span> 
|
|
883
|
-
<div class="line"><a name="l00819"></a><span class="lineno"> 819</span> 
|
|
878
|
+
<div class="line"><a name="l00814"></a><span class="lineno"> 814</span>  <a class="code" href="classSVF_1_1GenericBug.html#acc65b033bfd61257d5b6fdbf932dfafe">GenericBug::EventStack</a> eventStack;</div>
|
|
879
|
+
<div class="line"><a name="l00815"></a><span class="lineno"> 815</span>  SVFBugEvent sourceInstEvent(SVFBugEvent::EventType::SourceInst, inst);</div>
|
|
880
|
+
<div class="line"><a name="l00816"></a><span class="lineno"> 816</span>  <span class="keywordflow">for</span> (<span class="keyword">const</span> <span class="keyword">auto</span> &callsite: <a class="code" href="classSVF_1_1AbstractInterpretation.html#a9885b50cf28b65bebb488442085fab26">_callSiteStack</a>)</div>
|
|
881
|
+
<div class="line"><a name="l00817"></a><span class="lineno"> 817</span>  {</div>
|
|
882
|
+
<div class="line"><a name="l00818"></a><span class="lineno"> 818</span>  SVFBugEvent callSiteEvent(SVFBugEvent::EventType::CallSite, callsite->getCallSite());</div>
|
|
883
|
+
<div class="line"><a name="l00819"></a><span class="lineno"> 819</span>  eventStack.push_back(callSiteEvent);</div>
|
|
884
884
|
<div class="line"><a name="l00820"></a><span class="lineno"> 820</span>  }</div>
|
|
885
|
-
<div class="line"><a name="l00821"></a><span class="lineno"> 821</span> 
|
|
886
|
-
<div class="line"><a name="l00822"></a><span class="lineno"> 822</span> 
|
|
887
|
-
<div class="line"><a name="l00823"></a><span class="lineno"> 823</span> 
|
|
888
|
-
<div class="line"><a name="l00824"></a><span class="lineno"> 824</span> 
|
|
889
|
-
<div class="line"><a name="l00825"></a><span class="lineno"> 825</span> 
|
|
890
|
-
<div class="line"><a name="l00826"></a><span class="lineno"> 826</span> 
|
|
891
|
-
<div class="line"><a name="l00827"></a><span class="lineno"> 827</span> 
|
|
892
|
-
<div class="line"><a name="l00828"></a><span class="lineno"> 828</span> 
|
|
893
|
-
<div class="line"><a name="l00829"></a><span class="lineno"> 829</span> 
|
|
894
|
-
<div class="line"><a name="l00830"></a><span class="lineno"> 830</span> 
|
|
885
|
+
<div class="line"><a name="l00821"></a><span class="lineno"> 821</span>  eventStack.push_back(sourceInstEvent);</div>
|
|
886
|
+
<div class="line"><a name="l00822"></a><span class="lineno"> 822</span>  <span class="keywordflow">if</span> (eventStack.size() == 0) <span class="keywordflow">return</span>;</div>
|
|
887
|
+
<div class="line"><a name="l00823"></a><span class="lineno"> 823</span>  <a class="code" href="cJSON_8h.html#ad4c68ea99a26b0a98ad9a79982960458">std::string</a> loc = eventStack.back().getEventLoc();</div>
|
|
888
|
+
<div class="line"><a name="l00824"></a><span class="lineno"> 824</span>  <span class="keywordflow">if</span> (<a class="code" href="classSVF_1_1AbstractInterpretation.html#a2a5e0a88ebef4ae740983726e7f1b5eb">_bugLoc</a>.find(loc) != <a class="code" href="classSVF_1_1AbstractInterpretation.html#a2a5e0a88ebef4ae740983726e7f1b5eb">_bugLoc</a>.end())</div>
|
|
889
|
+
<div class="line"><a name="l00825"></a><span class="lineno"> 825</span>  {</div>
|
|
890
|
+
<div class="line"><a name="l00826"></a><span class="lineno"> 826</span>  <span class="keywordflow">return</span>;</div>
|
|
891
|
+
<div class="line"><a name="l00827"></a><span class="lineno"> 827</span>  }</div>
|
|
892
|
+
<div class="line"><a name="l00828"></a><span class="lineno"> 828</span>  <span class="keywordflow">else</span></div>
|
|
893
|
+
<div class="line"><a name="l00829"></a><span class="lineno"> 829</span>  {</div>
|
|
894
|
+
<div class="line"><a name="l00830"></a><span class="lineno"> 830</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a2a5e0a88ebef4ae740983726e7f1b5eb">_bugLoc</a>.insert(loc);</div>
|
|
895
|
+
<div class="line"><a name="l00831"></a><span class="lineno"> 831</span>  }</div>
|
|
896
|
+
<div class="line"><a name="l00832"></a><span class="lineno"> 832</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a8e4f0c5f527e321369a19a0b37124079">_recoder</a>.<a class="code" href="classSVF_1_1SVFBugReport.html#a05f395eff23619ed10c31c0acda949e2">addAbsExecBug</a>(<a class="code" href="classSVF_1_1GenericBug.html#a7aeeb33097bca5f7fe6747f90f5cecacac88ddac03bb8ae09a72058e4ad7af747">GenericBug::FULLBUFOVERFLOW</a>, eventStack, e.getAllocLb(), e.getAllocUb(), e.getAccessLb(),</div>
|
|
897
|
+
<div class="line"><a name="l00833"></a><span class="lineno"> 833</span>  e.getAccessUb());</div>
|
|
898
|
+
<div class="line"><a name="l00834"></a><span class="lineno"> 834</span>  <a class="code" href="classSVF_1_1AbstractInterpretation.html#a09aa739395388f64fcb3d539d58d2041">_nodeToBugInfo</a>[node] = e.what();</div>
|
|
899
|
+
<div class="line"><a name="l00835"></a><span class="lineno"> 835</span> }</div>
|
|
900
|
+
<div class="line"><a name="l00836"></a><span class="lineno"> 836</span>  </div>
|
|
901
|
+
<div class="line"><a name="l00837"></a><span class="lineno"> 837</span> }</div>
|
|
895
902
|
</div><!-- fragment --></div><!-- contents -->
|
|
896
903
|
<div class="ttc" id="aclassSVF_1_1SVFBugReport_html_a05f395eff23619ed10c31c0acda949e2"><div class="ttname"><a href="classSVF_1_1SVFBugReport.html#a05f395eff23619ed10c31c0acda949e2">SVF::SVFBugReport::addAbsExecBug</a></div><div class="ttdeci">void addAbsExecBug(GenericBug::BugType bugType, const GenericBug::EventStack &eventStack, s64_t allocLowerBound, s64_t allocUpperBound, s64_t accessLowerBound, s64_t accessUpperBound)</div><div class="ttdef"><b>Definition:</b> <a href="SVFBugReport_8h_source.html#l00367">SVFBugReport.h:367</a></div></div>
|
|
897
904
|
<div class="ttc" id="aclassSVF_1_1SVFValue_html_a2401b022638769f59f86ab424a189b6e"><div class="ttname"><a href="classSVF_1_1SVFValue.html#a2401b022638769f59f86ab424a189b6e">SVF::SVFValue::getName</a></div><div class="ttdeci">const std::string & getName() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00243">SVFValue.h:243</a></div></div>
|
|
@@ -903,21 +910,20 @@ $(function() {
|
|
|
903
910
|
<div class="ttc" id="aclassSVF_1_1AddrStmt_html"><div class="ttname"><a href="classSVF_1_1AddrStmt.html">SVF::AddrStmt</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFStatements_8h_source.html#l00313">SVFStatements.h:313</a></div></div>
|
|
904
911
|
<div class="ttc" id="astructSVF_1_1AbstractValue_html_ab1fe6a57f784971b3bc603dbfda746e8"><div class="ttname"><a href="structSVF_1_1AbstractValue.html#ab1fe6a57f784971b3bc603dbfda746e8">SVF::AbstractValue::getAddrs</a></div><div class="ttdeci">AddressValue & getAddrs()</div><div class="ttdef"><b>Definition:</b> <a href="AbstractValue_8h_source.html#l00171">AbstractValue.h:171</a></div></div>
|
|
905
912
|
<div class="ttc" id="aBufOverflowChecker_8h_html"><div class="ttname"><a href="BufOverflowChecker_8h.html">BufOverflowChecker.h</a></div></div>
|
|
906
|
-
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_ad68fa02efad8b628e4542dc9ab6c58bf"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">SVF::BufOverflowChecker::canSafelyAccessMemory</a></div><div class="ttdeci">bool canSafelyAccessMemory(const SVFValue *value, const AbstractValue &len, const ICFGNode *curNode)</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#
|
|
913
|
+
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_ad68fa02efad8b628e4542dc9ab6c58bf"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#ad68fa02efad8b628e4542dc9ab6c58bf">SVF::BufOverflowChecker::canSafelyAccessMemory</a></div><div class="ttdeci">bool canSafelyAccessMemory(const SVFValue *value, const AbstractValue &len, const ICFGNode *curNode)</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#l00492">BufOverflowChecker.cpp:492</a></div></div>
|
|
907
914
|
<div class="ttc" id="aclassSVF_1_1IRGraph_html_a43514023a4f4d0c32f536f51443b0efc"><div class="ttname"><a href="classSVF_1_1IRGraph.html#a43514023a4f4d0c32f536f51443b0efc">SVF::IRGraph::getValueNode</a></div><div class="ttdeci">NodeID getValueNode(const SVFValue *V)</div><div class="ttdef"><b>Definition:</b> <a href="IRGraph_8h_source.html#l00137">IRGraph.h:137</a></div></div>
|
|
908
915
|
<div class="ttc" id="anamespaceSVF_html_af739db846e47ba6b2fd15eaad31ab7fb"><div class="ttname"><a href="namespaceSVF.html#af739db846e47ba6b2fd15eaad31ab7fb">SVF::Set</a></div><div class="ttdeci">std::unordered_set< Key, Hash, KeyEqual, Allocator > Set</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00096">GeneralType.h:96</a></div></div>
|
|
909
916
|
<div class="ttc" id="aclassSVF_1_1CallICFGNode_html_a90fd0b8e44fba1a7eb76d15bce085d66"><div class="ttname"><a href="classSVF_1_1CallICFGNode.html#a90fd0b8e44fba1a7eb76d15bce085d66">SVF::CallICFGNode::getCallSite</a></div><div class="ttdeci">const SVFInstruction * getCallSite() const</div><div class="ttdoc">Return callsite.</div><div class="ttdef"><b>Definition:</b> <a href="ICFGNode_8h_source.html#l00409">ICFGNode.h:409</a></div></div>
|
|
910
917
|
<div class="ttc" id="aclassSVF_1_1IntervalValue_html_a0df07a2659cbf3a918de5b0d7c407264"><div class="ttname"><a href="classSVF_1_1IntervalValue.html#a0df07a2659cbf3a918de5b0d7c407264">SVF::IntervalValue::lb</a></div><div class="ttdeci">const NumericLiteral & lb() const</div><div class="ttdoc">Return the lower bound.</div><div class="ttdef"><b>Definition:</b> <a href="IntervalValue_8h_source.html#l00206">IntervalValue.h:206</a></div></div>
|
|
911
918
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_afa6b30220b0b3261205a909def9ca44e"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#afa6b30220b0b3261205a909def9ca44e">SVF::BufOverflowChecker::handleICFGNode</a></div><div class="ttdeci">virtual void handleICFGNode(const SVF::ICFGNode *node) override</div></div>
|
|
912
919
|
<div class="ttc" id="anamespaceSVF_html"><div class="ttname"><a href="namespaceSVF.html">SVF</a></div><div class="ttdoc">for isBitcode</div><div class="ttdef"><b>Definition:</b> <a href="BasicTypes_8h_source.html#l00067">BasicTypes.h:67</a></div></div>
|
|
913
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a5bba3c0570d73acc743742a30af1b0b4"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a5bba3c0570d73acc743742a30af1b0b4">SVF::AbstractInterpretation::getStrlen</a></div><div class="ttdeci">AbstractValue getStrlen(const SVF::SVFValue *strValue)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
920
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a5bba3c0570d73acc743742a30af1b0b4"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a5bba3c0570d73acc743742a30af1b0b4">SVF::AbstractInterpretation::getStrlen</a></div><div class="ttdeci">AbstractValue getStrlen(const SVF::SVFValue *strValue)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01464">AbstractInterpretation.cpp:1464</a></div></div>
|
|
914
921
|
<div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_a9815a5b31ac7dc21239d08e5b9f61106"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#a9815a5b31ac7dc21239d08e5b9f61106">SVF::SVFUtil::getSVFCallSite</a></div><div class="ttdeci">CallSite getSVFCallSite(const SVFInstruction *inst)</div><div class="ttdoc">Return LLVM callsite given an instruction.</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00196">SVFUtil.h:196</a></div></div>
|
|
915
922
|
<div class="ttc" id="aclassSVF_1_1ICFGNode_html_a6c68f52dd90728073fb79141df9b0661"><div class="ttname"><a href="classSVF_1_1ICFGNode.html#a6c68f52dd90728073fb79141df9b0661">SVF::ICFGNode::getSVFStmts</a></div><div class="ttdeci">const SVFStmtList & getSVFStmts() const</div><div class="ttdef"><b>Definition:</b> <a href="ICFGNode_8h_source.html#l00127">ICFGNode.h:127</a></div></div>
|
|
916
923
|
<div class="ttc" id="astructSVF_1_1BufOverflowException_html"><div class="ttname"><a href="structSVF_1_1BufOverflowException.html">SVF::BufOverflowException</a></div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8h_source.html#l00036">BufOverflowChecker.h:36</a></div></div>
|
|
917
924
|
<div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_ac71522e8c55f84cfc6c13a0ddff18436"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#ac71522e8c55f84cfc6c13a0ddff18436">SVF::SVFUtil::wrnMsg</a></div><div class="ttdeci">std::string wrnMsg(const std::string &msg)</div><div class="ttdoc">Returns warning message by converting a string into yellow string output.</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8cpp_source.html#l00061">SVFUtil.cpp:61</a></div></div>
|
|
918
925
|
<div class="ttc" id="aclassSVF_1_1SVFValue_html_a11f2d9b6e969ede6fca2c204cc15b821"><div class="ttname"><a href="classSVF_1_1SVFValue.html#a11f2d9b6e969ede6fca2c204cc15b821">SVF::SVFValue::getType</a></div><div class="ttdeci">virtual const SVFType * getType() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00256">SVFValue.h:256</a></div></div>
|
|
919
926
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_ad8b2f2fa6f22b9d1655135c819cbad8a"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#ad8b2f2fa6f22b9d1655135c819cbad8a">SVF::BufOverflowChecker::detectStrcpy</a></div><div class="ttdeci">bool detectStrcpy(const CallICFGNode *call)</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#l00124">BufOverflowChecker.cpp:124</a></div></div>
|
|
920
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_af78f068a373ebb6a2f14dcde980a9dae"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#af78f068a373ebb6a2f14dcde980a9dae">SVF::AbstractInterpretation::_svfir2ExeState</a></div><div class="ttdeci">SVFIR2AbsState * _svfir2ExeState</div><div class="ttdoc">Execution State, used to store the Interval Value of every SVF variable.</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00345">AbstractInterpretation.h:345</a></div></div>
|
|
921
927
|
<div class="ttc" id="aclassSVF_1_1SVFVar_html_ac2db6304ea5526fb446ae882983beeb0"><div class="ttname"><a href="classSVF_1_1SVFVar.html#ac2db6304ea5526fb446ae882983beeb0">SVF::SVFVar::getValue</a></div><div class="ttdeci">const SVFValue * getValue() const</div><div class="ttdoc">Get/has methods of the components.</div><div class="ttdef"><b>Definition:</b> <a href="SVFVariables_8h_source.html#l00094">SVFVariables.h:94</a></div></div>
|
|
922
928
|
<div class="ttc" id="aclassSVF_1_1GenericBug_html_acc65b033bfd61257d5b6fdbf932dfafe"><div class="ttname"><a href="classSVF_1_1GenericBug.html#acc65b033bfd61257d5b6fdbf932dfafe">SVF::GenericBug::EventStack</a></div><div class="ttdeci">std::vector< SVFBugEvent > EventStack</div><div class="ttdef"><b>Definition:</b> <a href="SVFBugReport_8h_source.html#l00083">SVFBugReport.h:83</a></div></div>
|
|
923
929
|
<div class="ttc" id="aclassSVF_1_1ICFGNode_html"><div class="ttname"><a href="classSVF_1_1ICFGNode.html">SVF::ICFGNode</a></div><div class="ttdef"><b>Definition:</b> <a href="ICFGNode_8h_source.html#l00054">ICFGNode.h:54</a></div></div>
|
|
@@ -937,7 +943,7 @@ $(function() {
|
|
|
937
943
|
<div class="ttc" id="aclassSVF_1_1GenericBug_html_a7aeeb33097bca5f7fe6747f90f5cecacac88ddac03bb8ae09a72058e4ad7af747"><div class="ttname"><a href="classSVF_1_1GenericBug.html#a7aeeb33097bca5f7fe6747f90f5cecacac88ddac03bb8ae09a72058e4ad7af747">SVF::GenericBug::FULLBUFOVERFLOW</a></div><div class="ttdeci">@ FULLBUFOVERFLOW</div><div class="ttdef"><b>Definition:</b> <a href="SVFBugReport_8h_source.html#l00086">SVFBugReport.h:86</a></div></div>
|
|
938
944
|
<div class="ttc" id="aclassSVF_1_1SVFFunction_html_a067bd6dbaf74a028d546fa56b095791b"><div class="ttname"><a href="classSVF_1_1SVFFunction.html#a067bd6dbaf74a028d546fa56b095791b">SVF::SVFFunction::getAnnotations</a></div><div class="ttdeci">const std::vector< std::string > & getAnnotations() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00466">SVFValue.h:466</a></div></div>
|
|
939
945
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_aa68f8aef09481d7c07dc59d7dfb83822"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#aa68f8aef09481d7c07dc59d7dfb83822">SVF::BufOverflowChecker::detectStrcat</a></div><div class="ttdeci">bool detectStrcat(const CallICFGNode *call)</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#l00376">BufOverflowChecker.cpp:376</a></div></div>
|
|
940
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a0e8b546f608417e218c2fab5a5893135"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a0e8b546f608417e218c2fab5a5893135">SVF::AbstractInterpretation::getAllocaInstByteSize</a></div><div class="ttdeci">u32_t getAllocaInstByteSize(const AddrStmt *addr)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
946
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a0e8b546f608417e218c2fab5a5893135"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a0e8b546f608417e218c2fab5a5893135">SVF::AbstractInterpretation::getAllocaInstByteSize</a></div><div class="ttdeci">u32_t getAllocaInstByteSize(const AddrStmt *addr)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01296">AbstractInterpretation.cpp:1296</a></div></div>
|
|
941
947
|
<div class="ttc" id="anamespaceSVF_1_1SVFUtil_html_a145abbd2958629718fbca41d25c3124d"><div class="ttname"><a href="namespaceSVF_1_1SVFUtil.html#a145abbd2958629718fbca41d25c3124d">SVF::SVFUtil::getCallee</a></div><div class="ttdeci">const SVFFunction * getCallee(const CallSite cs)</div><div class="ttdoc">Return callee of a callsite. Return null if this is an indirect call.</div><div class="ttdef"><b>Definition:</b> <a href="SVFUtil_8h_source.html#l00241">SVFUtil.h:241</a></div></div>
|
|
942
948
|
<div class="ttc" id="aSVFType_8h_html"><div class="ttname"><a href="SVFType_8h.html">SVFType.h</a></div></div>
|
|
943
949
|
<div class="ttc" id="aclassSVF_1_1NumericLiteral_html_a4181e5e15e10304ea524e5f8b2a3f576"><div class="ttname"><a href="classSVF_1_1NumericLiteral.html#a4181e5e15e10304ea524e5f8b2a3f576">SVF::NumericLiteral::getNumeral</a></div><div class="ttdeci">s64_t getNumeral() const</div><div class="ttdoc">Return Numeral, default type is double in case to support both int and float.</div><div class="ttdef"><b>Definition:</b> <a href="NumericLiteral_8h_source.html#l00132">NumericLiteral.h:132</a></div></div>
|
|
@@ -950,14 +956,13 @@ $(function() {
|
|
|
950
956
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a2a5e0a88ebef4ae740983726e7f1b5eb"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a2a5e0a88ebef4ae740983726e7f1b5eb">SVF::AbstractInterpretation::_bugLoc</a></div><div class="ttdeci">Set< std::string > _bugLoc</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00352">AbstractInterpretation.h:352</a></div></div>
|
|
951
957
|
<div class="ttc" id="aclassSVF_1_1SVFIR2AbsState_html_a21e927af79c73460ff5629cbd4961163"><div class="ttname"><a href="classSVF_1_1SVFIR2AbsState.html#a21e927af79c73460ff5629cbd4961163">SVF::SVFIR2AbsState::getByteOffset</a></div><div class="ttdeci">AbstractValue getByteOffset(const GepStmt *gep)</div><div class="ttdef"><b>Definition:</b> <a href="SVFIR2AbsState_8cpp_source.html#l00415">SVFIR2AbsState.cpp:415</a></div></div>
|
|
952
958
|
<div class="ttc" id="aclassSVF_1_1CallICFGNode_html"><div class="ttname"><a href="classSVF_1_1CallICFGNode.html">SVF::CallICFGNode</a></div><div class="ttdef"><b>Definition:</b> <a href="ICFGNode_8h_source.html#l00385">ICFGNode.h:385</a></div></div>
|
|
953
|
-
<div class="ttc" id="aclassSVF_1_1SVFIR2AbsState_html_afe8766165bfc4be1f9d5f5df25c954a3"><div class="ttname"><a href="classSVF_1_1SVFIR2AbsState.html#afe8766165bfc4be1f9d5f5df25c954a3">SVF::SVFIR2AbsState::getEs</a></div><div class="ttdeci">AbstractState & getEs()</div><div class="ttdef"><b>Definition:</b> <a href="SVFIR2AbsState_8h_source.html#l00054">SVFIR2AbsState.h:54</a></div></div>
|
|
954
959
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a13fdb4a6a6d09e3504fdad16b88616daa9cc269dadf9cff7d399c54d9570a6614"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa9cc269dadf9cff7d399c54d9570a6614">SVF::AbstractInterpretation::MEMCPY</a></div><div class="ttdeci">@ MEMCPY</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00113">AbstractInterpretation.h:113</a></div></div>
|
|
955
960
|
<div class="ttc" id="aclassSVF_1_1SVFType_html"><div class="ttname"><a href="classSVF_1_1SVFType.html">SVF::SVFType</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFType_8h_source.html#l00156">SVFType.h:156</a></div></div>
|
|
956
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a048e203517ac727e6fe0653e1f24052c"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a048e203517ac727e6fe0653e1f24052c">SVF::AbstractInterpretation::AccessMemoryViaCallArgs</a></div><div class="ttdeci">void AccessMemoryViaCallArgs(const SVF::SVFArgument *arg, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
961
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a048e203517ac727e6fe0653e1f24052c"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a048e203517ac727e6fe0653e1f24052c">SVF::AbstractInterpretation::AccessMemoryViaCallArgs</a></div><div class="ttdeci">void AccessMemoryViaCallArgs(const SVF::SVFArgument *arg, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01751">AbstractInterpretation.cpp:1751</a></div></div>
|
|
957
962
|
<div class="ttc" id="aclassSVF_1_1ICFG_html_a5f2c0aaba07d6fdd63058da0fb60ca8b"><div class="ttname"><a href="classSVF_1_1ICFG.html#a5f2c0aaba07d6fdd63058da0fb60ca8b">SVF::ICFG::getICFGNode</a></div><div class="ttdeci">ICFGNode * getICFGNode(NodeID id) const</div><div class="ttdoc">Get a ICFG node.</div><div class="ttdef"><b>Definition:</b> <a href="ICFG_8h_source.html#l00092">ICFG.h:92</a></div></div>
|
|
958
963
|
<div class="ttc" id="aclassSVF_1_1SVFFunction_html"><div class="ttname"><a href="classSVF_1_1SVFFunction.html">SVF::SVFFunction</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00297">SVFValue.h:297</a></div></div>
|
|
959
964
|
<div class="ttc" id="aclassSVF_1_1FILOWorkList_html_afcf3fcda18e8d3e2bad70a51376c0ce1"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html#afcf3fcda18e8d3e2bad70a51376c0ce1">SVF::FILOWorkList::push</a></div><div class="ttdeci">bool push(const Data &data)</div><div class="ttdef"><b>Definition:</b> <a href="WorkList_8h_source.html#l00257">WorkList.h:257</a></div></div>
|
|
960
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a550c12360c2149ba0e55bdf4cf7b8dd0"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a550c12360c2149ba0e55bdf4cf7b8dd0">SVF::AbstractInterpretation::AccessMemoryViaCopyStmt</a></div><div class="ttdeci">void AccessMemoryViaCopyStmt(const CopyStmt *copy, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
965
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a550c12360c2149ba0e55bdf4cf7b8dd0"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a550c12360c2149ba0e55bdf4cf7b8dd0">SVF::AbstractInterpretation::AccessMemoryViaCopyStmt</a></div><div class="ttdeci">void AccessMemoryViaCopyStmt(const CopyStmt *copy, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01721">AbstractInterpretation.cpp:1721</a></div></div>
|
|
961
966
|
<div class="ttc" id="aclassSVF_1_1SVFConstantInt_html"><div class="ttname"><a href="classSVF_1_1SVFConstantInt.html">SVF::SVFConstantInt</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00966">SVFValue.h:966</a></div></div>
|
|
962
967
|
<div class="ttc" id="aclassSVF_1_1IntervalValue_html_adac2dc2c9f744a071ad3f0175ed40cd9"><div class="ttname"><a href="classSVF_1_1IntervalValue.html#adac2dc2c9f744a071ad3f0175ed40cd9">SVF::IntervalValue::ub</a></div><div class="ttdeci">const NumericLiteral & ub() const</div><div class="ttdoc">Return the upper bound.</div><div class="ttdef"><b>Definition:</b> <a href="IntervalValue_8h_source.html#l00213">IntervalValue.h:213</a></div></div>
|
|
963
968
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_a52de7d619e8746a70718719306d7c5a1"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#a52de7d619e8746a70718719306d7c5a1">SVF::BufOverflowChecker::detectBufOverflow</a></div><div class="ttdeci">bool detectBufOverflow(const ICFGNode *node)</div></div>
|
|
@@ -965,16 +970,18 @@ $(function() {
|
|
|
965
970
|
<div class="ttc" id="aclassSVF_1_1SVFStmt_html"><div class="ttname"><a href="classSVF_1_1SVFStmt.html">SVF::SVFStmt</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFStatements_8h_source.html#l00051">SVFStatements.h:51</a></div></div>
|
|
966
971
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_af83b65ed98cd4e0f6cd92962e7392d4d"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#af83b65ed98cd4e0f6cd92962e7392d4d">SVF::BufOverflowChecker::_extAPIBufOverflowCheckRules</a></div><div class="ttdeci">Map< std::string, std::vector< std::pair< u32_t, u32_t > > > _extAPIBufOverflowCheckRules</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8h_source.html#l00202">BufOverflowChecker.h:202</a></div></div>
|
|
967
972
|
<div class="ttc" id="aclassSVF_1_1SVFVar_html"><div class="ttname"><a href="classSVF_1_1SVFVar.html">SVF::SVFVar</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFVariables_8h_source.html#l00045">SVFVariables.h:45</a></div></div>
|
|
973
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a9c592b91a1e3d72ada730387232a2fcf"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a9c592b91a1e3d72ada730387232a2fcf">SVF::AbstractInterpretation::_svfir2AbsState</a></div><div class="ttdeci">SVFIR2AbsState * _svfir2AbsState</div><div class="ttdoc">Execution State, used to store the Interval Value of every SVF variable.</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00345">AbstractInterpretation.h:345</a></div></div>
|
|
968
974
|
<div class="ttc" id="aclassSVF_1_1LoadStmt_html"><div class="ttname"><a href="classSVF_1_1LoadStmt.html">SVF::LoadStmt</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFStatements_8h_source.html#l00489">SVFStatements.h:489</a></div></div>
|
|
969
975
|
<div class="ttc" id="aclassSVF_1_1IntervalValue_html"><div class="ttname"><a href="classSVF_1_1IntervalValue.html">SVF::IntervalValue</a></div><div class="ttdef"><b>Definition:</b> <a href="IntervalValue_8h_source.html#l00043">IntervalValue.h:43</a></div></div>
|
|
970
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a6cac9b69d85111a5a26373ec848a3282"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a6cac9b69d85111a5a26373ec848a3282">SVF::AbstractInterpretation::handleExtAPI</a></div><div class="ttdeci">virtual void handleExtAPI(const CallICFGNode *call)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
976
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a6cac9b69d85111a5a26373ec848a3282"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a6cac9b69d85111a5a26373ec848a3282">SVF::AbstractInterpretation::handleExtAPI</a></div><div class="ttdeci">virtual void handleExtAPI(const CallICFGNode *call)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01174">AbstractInterpretation.cpp:1174</a></div></div>
|
|
971
977
|
<div class="ttc" id="aclassSVF_1_1GenericGraph_html_a43c9c773bfa17abf481c33073e30d01b"><div class="ttname"><a href="classSVF_1_1GenericGraph.html#a43c9c773bfa17abf481c33073e30d01b">SVF::GenericGraph::getGNode</a></div><div class="ttdeci">NodeType * getGNode(NodeID id) const</div><div class="ttdoc">Get a node.</div><div class="ttdef"><b>Definition:</b> <a href="GenericGraph_8h_source.html#l00406">GenericGraph.h:406</a></div></div>
|
|
972
978
|
<div class="ttc" id="aclassSVF_1_1Options_html_afbe432aabda95308e2c190a04d227a6d"><div class="ttname"><a href="classSVF_1_1Options.html#afbe432aabda95308e2c190a04d227a6d">SVF::Options::BufferOverflowCheck</a></div><div class="ttdeci">static const Option< bool > BufferOverflowCheck</div><div class="ttdoc">buffer overflow checker, Default: false</div><div class="ttdef"><b>Definition:</b> <a href="Options_8h_source.html#l00271">Options.h:271</a></div></div>
|
|
973
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a29fe7c63c61a7aec8ae1477a061f5bf2"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a29fe7c63c61a7aec8ae1477a061f5bf2">SVF::AbstractInterpretation::AccessMemoryViaRetNode</a></div><div class="ttdeci">void AccessMemoryViaRetNode(const CallICFGNode *callnode, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
979
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a29fe7c63c61a7aec8ae1477a061f5bf2"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a29fe7c63c61a7aec8ae1477a061f5bf2">SVF::AbstractInterpretation::AccessMemoryViaRetNode</a></div><div class="ttdeci">void AccessMemoryViaRetNode(const CallICFGNode *callnode, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01696">AbstractInterpretation.cpp:1696</a></div></div>
|
|
974
980
|
<div class="ttc" id="aclassSVF_1_1AbstractState_html"><div class="ttname"><a href="classSVF_1_1AbstractState.html">SVF::AbstractState</a></div><div class="ttdef"><b>Definition:</b> <a href="AbstractState_8h_source.html#l00054">AbstractState.h:54</a></div></div>
|
|
975
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_ac60581a57407fa4c65b1975f5be687b8"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#ac60581a57407fa4c65b1975f5be687b8">SVF::AbstractInterpretation::AccessMemoryViaLoadStmt</a></div><div class="ttdeci">void AccessMemoryViaLoadStmt(const LoadStmt *load, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
981
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_ac60581a57407fa4c65b1975f5be687b8"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#ac60581a57407fa4c65b1975f5be687b8">SVF::AbstractInterpretation::AccessMemoryViaLoadStmt</a></div><div class="ttdeci">void AccessMemoryViaLoadStmt(const LoadStmt *load, SVF::FILOWorkList< const SVFValue * > &worklist, Set< const SVFValue * > &visited)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01730">AbstractInterpretation.cpp:1730</a></div></div>
|
|
976
982
|
<div class="ttc" id="anamespaceSVF_html_a9b707002523ece2ac54ca893ee9a2d4e"><div class="ttname"><a href="namespaceSVF.html#a9b707002523ece2ac54ca893ee9a2d4e">SVF::s32_t</a></div><div class="ttdeci">signed s32_t</div><div class="ttdef"><b>Definition:</b> <a href="GeneralType_8h_source.html#l00047">GeneralType.h:47</a></div></div>
|
|
977
983
|
<div class="ttc" id="aclassSVF_1_1GepStmt_html"><div class="ttname"><a href="classSVF_1_1GepStmt.html">SVF::GepStmt</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFStatements_8h_source.html#l00526">SVFStatements.h:526</a></div></div>
|
|
984
|
+
<div class="ttc" id="aclassSVF_1_1SVFIR2AbsState_html_a99b526db536fb241ff755a82a45123fa"><div class="ttname"><a href="classSVF_1_1SVFIR2AbsState.html#a99b526db536fb241ff755a82a45123fa">SVF::SVFIR2AbsState::getAbsState</a></div><div class="ttdeci">AbstractState & getAbsState()</div><div class="ttdef"><b>Definition:</b> <a href="SVFIR2AbsState_8h_source.html#l00054">SVFIR2AbsState.h:54</a></div></div>
|
|
978
985
|
<div class="ttc" id="aclassSVF_1_1SVFIR_html_abda052b73e869ed6d7c139ad1528da11"><div class="ttname"><a href="classSVF_1_1SVFIR.html#abda052b73e869ed6d7c139ad1528da11">SVF::SVFIR::getICFG</a></div><div class="ttdeci">ICFG * getICFG() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFIR_8h_source.html#l00170">SVFIR.h:170</a></div></div>
|
|
979
986
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a13fdb4a6a6d09e3504fdad16b88616da"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616da">SVF::AbstractInterpretation::ExtAPIType</a></div><div class="ttdeci">ExtAPIType</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00113">AbstractInterpretation.h:113</a></div></div>
|
|
980
987
|
<div class="ttc" id="aclassSVF_1_1SVFIR2AbsState_html_aa3e62b9ef912def502b95992199f5d8c"><div class="ttname"><a href="classSVF_1_1SVFIR2AbsState.html#aa3e62b9ef912def502b95992199f5d8c">SVF::SVFIR2AbsState::getAddrs</a></div><div class="ttdeci">AbstractValue & getAddrs(u32_t id)</div><div class="ttdef"><b>Definition:</b> <a href="SVFIR2AbsState_8h_source.html#l00113">SVFIR2AbsState.h:113</a></div></div>
|
|
@@ -987,11 +994,11 @@ $(function() {
|
|
|
987
994
|
<div class="ttc" id="aclassSVF_1_1FILOWorkList_html_a071a624c91def82a4bbbf3806c7b7eea"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html#a071a624c91def82a4bbbf3806c7b7eea">SVF::FILOWorkList::empty</a></div><div class="ttdeci">bool empty() const</div><div class="ttdef"><b>Definition:</b> <a href="WorkList_8h_source.html#l00238">WorkList.h:238</a></div></div>
|
|
988
995
|
<div class="ttc" id="aclassSVF_1_1SVFValue_html_a4a0cfe3a8f37d33ffcdca3d66026dcc3"><div class="ttname"><a href="classSVF_1_1SVFValue.html#a4a0cfe3a8f37d33ffcdca3d66026dcc3">SVF::SVFValue::toString</a></div><div class="ttdeci">std::string toString() const</div><div class="ttdoc">Needs to be implemented by a SVF front end.</div><div class="ttdef"><b>Definition:</b> <a href="LLVMUtil_8cpp_source.html#l00943">LLVMUtil.cpp:943</a></div></div>
|
|
989
996
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a8e4f0c5f527e321369a19a0b37124079"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a8e4f0c5f527e321369a19a0b37124079">SVF::AbstractInterpretation::_recoder</a></div><div class="ttdeci">SVFBugReport _recoder</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00353">AbstractInterpretation.h:353</a></div></div>
|
|
990
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a896d04a02951947bc228bf97b2c00313"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a896d04a02951947bc228bf97b2c00313">SVF::AbstractInterpretation::handleSVFStatement</a></div><div class="ttdeci">virtual void handleSVFStatement(const SVFStmt *stmt)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
997
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a896d04a02951947bc228bf97b2c00313"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a896d04a02951947bc228bf97b2c00313">SVF::AbstractInterpretation::handleSVFStatement</a></div><div class="ttdeci">virtual void handleSVFStatement(const SVFStmt *stmt)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l00830">AbstractInterpretation.cpp:830</a></div></div>
|
|
991
998
|
<div class="ttc" id="aWorkList_8h_html"><div class="ttname"><a href="WorkList_8h.html">WorkList.h</a></div></div>
|
|
992
999
|
<div class="ttc" id="acJSON_8cpp_html_a7669ee67a0563250c1efaa24d130e1ac"><div class="ttname"><a href="cJSON_8cpp.html#a7669ee67a0563250c1efaa24d130e1ac">copy</a></div><div class="ttdeci">copy</div><div class="ttdef"><b>Definition:</b> <a href="cJSON_8cpp_source.html#l00414">cJSON.cpp:414</a></div></div>
|
|
993
1000
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a13fdb4a6a6d09e3504fdad16b88616daae8dad405c06383859d8db715fd455317"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daae8dad405c06383859d8db715fd455317">SVF::AbstractInterpretation::STRCAT</a></div><div class="ttdeci">@ STRCAT</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00113">AbstractInterpretation.h:113</a></div></div>
|
|
994
|
-
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_a1ed3cb0a1a118d9e505b192841a58dde"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#a1ed3cb0a1a118d9e505b192841a58dde">SVF::BufOverflowChecker::handleExtAPI</a></div><div class="ttdeci">void handleExtAPI(const CallICFGNode *call) override</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#
|
|
1001
|
+
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_a1ed3cb0a1a118d9e505b192841a58dde"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#a1ed3cb0a1a118d9e505b192841a58dde">SVF::BufOverflowChecker::handleExtAPI</a></div><div class="ttdeci">void handleExtAPI(const CallICFGNode *call) override</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8cpp_source.html#l00415">BufOverflowChecker.cpp:415</a></div></div>
|
|
995
1002
|
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a13fdb4a6a6d09e3504fdad16b88616daa5aec33226dc590ec951d0f12bf35f15f"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a13fdb4a6a6d09e3504fdad16b88616daa5aec33226dc590ec951d0f12bf35f15f">SVF::AbstractInterpretation::MEMSET</a></div><div class="ttdeci">@ MEMSET</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00113">AbstractInterpretation.h:113</a></div></div>
|
|
996
1003
|
<div class="ttc" id="aclassSVF_1_1FILOWorkList_html_a3fd9acb6d09fd142bfd402fdf8cac93b"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html#a3fd9acb6d09fd142bfd402fdf8cac93b">SVF::FILOWorkList::pop</a></div><div class="ttdeci">Data pop()</div><div class="ttdef"><b>Definition:</b> <a href="WorkList_8h_source.html#l00272">WorkList.h:272</a></div></div>
|
|
997
1004
|
<div class="ttc" id="aclassSVF_1_1FILOWorkList_html"><div class="ttname"><a href="classSVF_1_1FILOWorkList.html">SVF::FILOWorkList</a></div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8h_source.html#l00042">AbstractInterpretation.h:42</a></div></div>
|
|
@@ -999,9 +1006,9 @@ $(function() {
|
|
|
999
1006
|
<div class="ttc" id="anamespaceSVF_html_a43a65e0d33af3c743294f7a1139d2301"><div class="ttname"><a href="namespaceSVF.html#a43a65e0d33af3c743294f7a1139d2301">SVF::NodeID</a></div><div class="ttdeci">unsigned NodeID</div><div class="ttdef"><b>Definition:</b> <a href="svf-llvm_2tools_2MTA_2MTAResultValidator_8h_source.html#l00020">MTAResultValidator.h:20</a></div></div>
|
|
1000
1007
|
<div class="ttc" id="aclassSVF_1_1SVFType_html_a870b63af2bf9fe43cdf1df3d56b20f6c"><div class="ttname"><a href="classSVF_1_1SVFType.html#a870b63af2bf9fe43cdf1df3d56b20f6c">SVF::SVFType::isPointerTy</a></div><div class="ttdeci">bool isPointerTy() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFType_8h_source.html#l00249">SVFType.h:249</a></div></div>
|
|
1001
1008
|
<div class="ttc" id="aclassSVF_1_1SVFVar_html_ab6f95d3e7e099d75cfc9645ebc037047"><div class="ttname"><a href="classSVF_1_1SVFVar.html#ab6f95d3e7e099d75cfc9645ebc037047">SVF::SVFVar::getType</a></div><div class="ttdeci">virtual const SVFType * getType() const</div><div class="ttdoc">Return type of the value.</div><div class="ttdef"><b>Definition:</b> <a href="SVFVariables_8h_source.html#l00107">SVFVariables.h:107</a></div></div>
|
|
1002
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a9b179466955023f275b6692b59048846"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a9b179466955023f275b6692b59048846">SVF::AbstractInterpretation::handleICFGNode</a></div><div class="ttdeci">virtual void handleICFGNode(const ICFGNode *node)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
1009
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a9b179466955023f275b6692b59048846"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a9b179466955023f275b6692b59048846">SVF::AbstractInterpretation::handleICFGNode</a></div><div class="ttdeci">virtual void handleICFGNode(const ICFGNode *node)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l00674">AbstractInterpretation.cpp:674</a></div></div>
|
|
1003
1010
|
<div class="ttc" id="aclassSVF_1_1SVFArgument_html"><div class="ttname"><a href="classSVF_1_1SVFArgument.html">SVF::SVFArgument</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00897">SVFValue.h:897</a></div></div>
|
|
1004
|
-
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a2057e8e1c0aaf39e74f0a8fb2a1b580c"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a2057e8e1c0aaf39e74f0a8fb2a1b580c">SVF::AbstractInterpretation::getPointeeElement</a></div><div class="ttdeci">const SVFType * getPointeeElement(NodeID id)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#
|
|
1011
|
+
<div class="ttc" id="aclassSVF_1_1AbstractInterpretation_html_a2057e8e1c0aaf39e74f0a8fb2a1b580c"><div class="ttname"><a href="classSVF_1_1AbstractInterpretation.html#a2057e8e1c0aaf39e74f0a8fb2a1b580c">SVF::AbstractInterpretation::getPointeeElement</a></div><div class="ttdeci">const SVFType * getPointeeElement(NodeID id)</div><div class="ttdef"><b>Definition:</b> <a href="AbstractInterpretation_8cpp_source.html#l01620">AbstractInterpretation.cpp:1620</a></div></div>
|
|
1005
1012
|
<div class="ttc" id="aclassSVF_1_1SVFArrayType_html_a28da1169748e38b891133b76568a2759"><div class="ttname"><a href="classSVF_1_1SVFArrayType.html#a28da1169748e38b891133b76568a2759">SVF::SVFArrayType::getTypeOfElement</a></div><div class="ttdeci">const SVFType * getTypeOfElement() const</div><div class="ttdef"><b>Definition:</b> <a href="SVFType_8h_source.html#l00399">SVFType.h:399</a></div></div>
|
|
1006
1013
|
<div class="ttc" id="aclassSVF_1_1SVFInstruction_html"><div class="ttname"><a href="classSVF_1_1SVFInstruction.html">SVF::SVFInstruction</a></div><div class="ttdef"><b>Definition:</b> <a href="SVFValue_8h_source.html#l00631">SVFValue.h:631</a></div></div>
|
|
1007
1014
|
<div class="ttc" id="aclassSVF_1_1BufOverflowChecker_html_a0088456e712c555cbfba6203aec38037"><div class="ttname"><a href="classSVF_1_1BufOverflowChecker.html#a0088456e712c555cbfba6203aec38037">SVF::BufOverflowChecker::_addrToGep</a></div><div class="ttdeci">Map< NodeID, const GepStmt * > _addrToGep</div><div class="ttdef"><b>Definition:</b> <a href="BufOverflowChecker_8h_source.html#l00201">BufOverflowChecker.h:201</a></div></div>
|