angr 9.2.118__py3-none-macosx_11_0_arm64.whl → 9.2.120__py3-none-macosx_11_0_arm64.whl

angr/analyses/reaching_definitions/reaching_definitions.py

@@ -8,17 +8,17 @@ import ailment
 import pyvex
 
 from angr.analyses import ForwardAnalysis
-from ...block import Block
-from ...knowledge_plugins.cfg.cfg_node import CFGNode
-from ...codenode import CodeNode
-from ...engines.light import SimEngineLight
-from ...knowledge_plugins.functions import Function
-from ...knowledge_plugins.key_definitions import ReachingDefinitionsModel, LiveDefinitions
-from ...knowledge_plugins.key_definitions.constants import OP_BEFORE, OP_AFTER, ObservationPointType, ObservationPoint
-from ...code_location import CodeLocation, ExternalCodeLocation
-from ...misc.ux import deprecated
-from ..forward_analysis.visitors.graph import NodeType
-from ..analysis import Analysis
+from angr.block import Block
+from angr.knowledge_plugins.cfg.cfg_node import CFGNode
+from angr.codenode import CodeNode
+from angr.engines.light import SimEngineLight
+from angr.knowledge_plugins.functions import Function
+from angr.knowledge_plugins.key_definitions import ReachingDefinitionsModel, LiveDefinitions
+from angr.knowledge_plugins.key_definitions.constants import OP_BEFORE, OP_AFTER, ObservationPointType, ObservationPoint
+from angr.code_location import CodeLocation, ExternalCodeLocation
+from angr.misc.ux import deprecated
+from angr.analyses.forward_analysis.visitors.graph import NodeType
+from angr.analyses.analysis import Analysis
 from .engine_ail import SimEngineRDAIL
 from .engine_vex import SimEngineRDVEX
 from .rd_state import ReachingDefinitionsState

angr/analyses/reaching_definitions/subject.py

@@ -3,9 +3,9 @@ from enum import Enum
 
 import ailment
 
-from ...block import Block
-from ...knowledge_plugins.functions.function_manager import Function
-from ..forward_analysis import FunctionGraphVisitor, SingleNodeGraphVisitor
+from angr.block import Block
+from angr.knowledge_plugins.functions.function_manager import Function
+from angr.analyses.forward_analysis import FunctionGraphVisitor, SingleNodeGraphVisitor
 
 
 class SubjectType(Enum):

angr/analyses/reassembler.py

@@ -16,11 +16,11 @@ from . import Analysis
 from .cfg.cfg_emulated import CFGEmulated
 from .ddg import DDG
 from .cfg.cfg_fast import CFGFast
-from ..codenode import CodeNode
-from ..knowledge_plugins.cfg.memory_data import MemoryDataSort
-from ..knowledge_plugins.functions import Function
-from ..knowledge_base import KnowledgeBase
-from ..sim_variable import SimMemoryVariable, SimTemporaryVariable
+from angr.codenode import CodeNode
+from angr.knowledge_plugins.cfg.memory_data import MemoryDataSort
+from angr.knowledge_plugins.functions import Function
+from angr.knowledge_base import KnowledgeBase
+from angr.sim_variable import SimMemoryVariable, SimTemporaryVariable
 
 if TYPE_CHECKING:
     from .cfg import CFGNode

angr/analyses/{s_propagator/s_propagator.py → s_propagator.py}

@@ -38,7 +38,7 @@ class SPropagatorAnalysis(Analysis):
     Constant and expression propagation that only supports SSA AIL graphs.
     """
 
-    def __init__(
+    def __init__(  # pylint: disable=too-many-positional-arguments
         self,
         subject,
         func_graph=None,

angr/analyses/s_reaching_definitions/__init__.py

@@ -1,2 +1,12 @@
 from __future__ import annotations
-from .s_rda import SReachingDefinitionsAnalysis, SRDAModel, SRDAView
+
+from .s_rda_model import SRDAModel
+from .s_rda_view import SRDAView
+from .s_reaching_definitions import SReachingDefinitionsAnalysis
+
+
+__all__ = (
+    "SRDAModel",
+    "SRDAView",
+    "SReachingDefinitionsAnalysis",
+)

angr/analyses/s_reaching_definitions/s_rda_model.py

@@ -0,0 +1,117 @@
+from __future__ import annotations
+
+from collections import defaultdict
+from collections.abc import Generator
+from typing import Any
+
+from ailment.expression import VirtualVariable, Tmp
+
+from angr.knowledge_plugins.key_definitions import atoms, Definition
+from angr.code_location import CodeLocation
+
+
+class SRDAModel:
+    """
+    The model for SRDA.
+    """
+
+    def __init__(self, func_graph, arch):
+        self.func_graph = func_graph
+        self.arch = arch
+        self.varid_to_vvar: dict[int, VirtualVariable] = {}
+        self.all_vvar_definitions: dict[VirtualVariable, CodeLocation] = {}
+        self.all_vvar_uses: dict[VirtualVariable, set[tuple[VirtualVariable | None, CodeLocation]]] = defaultdict(set)
+        self.all_tmp_definitions: dict[CodeLocation, dict[atoms.Tmp, int]] = defaultdict(dict)
+        self.all_tmp_uses: dict[CodeLocation, dict[atoms.Tmp, set[tuple[Tmp, int]]]] = defaultdict(dict)
+        self.phi_vvar_ids: set[int] = set()
+        self.phivarid_to_varids: dict[int, set[int]] = {}
+
+    @property
+    def all_definitions(self) -> Generator[Definition]:
+        for vvar, defloc in self.all_vvar_definitions.items():
+            yield Definition(atoms.VirtualVariable(vvar.varid, vvar.size, vvar.category, vvar.oident), defloc)
+
+    def is_phi_vvar_id(self, idx: int) -> bool:
+        return idx in self.phi_vvar_ids
+
+    def get_all_definitions(self, block_loc: CodeLocation) -> set[Definition]:
+        s = set()
+        for vvar, codeloc in self.all_vvar_definitions.items():
+            if codeloc.block_addr == block_loc.block_addr and codeloc.block_idx == block_loc.block_idx:
+                s.add(Definition(atoms.VirtualVariable(vvar.varid, vvar.size, vvar.category, vvar.oident), codeloc))
+        return s | self.get_all_tmp_definitions(block_loc)
+
+    def get_all_tmp_definitions(self, block_loc: CodeLocation) -> set[Definition]:
+        s = set()
+        for tmp_atom, stmt_idx in self.all_tmp_definitions[block_loc].items():
+            s.add(Definition(tmp_atom, CodeLocation(block_loc.block_addr, stmt_idx, block_idx=block_loc.block_idx)))
+        return s
+
+    def get_uses_by_location(
+        self, loc: CodeLocation, exprs: bool = False
+    ) -> set[Definition] | set[tuple[Definition, Any | None]]:
+        """
+        Retrieve all definitions that are used at a given location.
+
+        :param loc:     The code location.
+        :return:        A set of definitions that are used at the given location.
+        """
+        if exprs:
+            defs: set[tuple[Definition, Any]] = set()
+            for vvar, uses in self.all_vvar_uses.items():
+                for expr, loc_ in uses:
+                    if loc_ == loc:
+                        defs.add(
+                            (
+                                Definition(
+                                    atoms.VirtualVariable(vvar.varid, vvar.size, vvar.category, vvar.oident),
+                                    self.all_vvar_definitions[vvar],
+                                ),
+                                expr,
+                            )
+                        )
+            return defs
+
+        defs: set[Definition] = set()
+        for vvar, uses in self.all_vvar_uses.items():
+            for _, loc_ in uses:
+                if loc_ == loc:
+                    defs.add(
+                        Definition(
+                            atoms.VirtualVariable(vvar.varid, vvar.size, vvar.category, vvar.oident),
+                            self.all_vvar_definitions[vvar],
+                        )
+                    )
+        return defs
+
+    def get_vvar_uses(self, obj: atoms.VirtualVariable) -> set[CodeLocation]:
+        the_vvar = self.varid_to_vvar.get(obj.varid, None)
+        if the_vvar is not None:
+            return {loc for _, loc in self.all_vvar_uses[the_vvar]}
+        return set()
+
+    def get_vvar_uses_with_expr(self, obj: atoms.VirtualVariable) -> set[tuple[CodeLocation, VirtualVariable]]:
+        the_vvar = self.varid_to_vvar.get(obj.varid, None)
+        if the_vvar is not None:
+            return {(loc, expr) for expr, loc in self.all_vvar_uses[the_vvar]}
+        return set()
+
+    def get_tmp_uses(self, obj: atoms.Tmp, block_loc: CodeLocation) -> set[CodeLocation]:
+        if block_loc not in self.all_tmp_uses:
+            return set()
+        if obj not in self.all_tmp_uses[block_loc]:
+            return set()
+        s = set()
+        for _, stmt_idx in self.all_tmp_uses[block_loc][obj]:
+            s.add(CodeLocation(block_loc.block_addr, stmt_idx, block_idx=block_loc.block_idx))
+        return s
+
+    def get_uses_by_def(self, def_: Definition) -> set[CodeLocation]:
+        if isinstance(def_.atom, atoms.Tmp):
+            return self.get_tmp_uses(
+                def_.atom,
+                CodeLocation(def_.codeloc.block_addr, def_.codeloc.stmt_idx, block_idx=def_.codeloc.block_idx),
+            )
+        if isinstance(def_.atom, atoms.VirtualVariable):
+            return self.get_vvar_uses(def_.atom)
+        return set()

angr/analyses/s_reaching_definitions/s_rda_view.py

@@ -0,0 +1,213 @@
+from __future__ import annotations
+
+import logging
+from collections import defaultdict
+
+from ailment.statement import Assignment, Call, Label
+from ailment.expression import VirtualVariable, Expression
+
+from angr.utils.ail import is_phi_assignment
+from angr.utils.graph import GraphUtils
+from angr.knowledge_plugins.key_definitions.constants import ObservationPointType, ObservationPoint
+from angr.utils.ssa import get_reg_offset_base
+from angr.calling_conventions import SimRegArg, default_cc
+
+from .s_rda_model import SRDAModel
+
+log = logging.getLogger(__name__)
+
+
+class SRDAView:
+    """
+    A view of SRDA model that provides various functionalities for querying the model.
+    """
+
+    def __init__(self, model: SRDAModel):
+        self.model = model
+
+    def _get_call_clobbered_regs(self, stmt: Call) -> set[int]:
+        cc = stmt.calling_convention
+        if cc is None:
+            # get the default calling convention
+            cc = default_cc(self.model.arch.name)  # TODO: platform and language
+        if cc is not None:
+            reg_list = cc.CALLER_SAVED_REGS
+            if isinstance(cc.RETURN_VAL, SimRegArg):
+                reg_list.append(cc.RETURN_VAL.reg_name)
+            return {self.model.arch.registers[reg_name][0] for reg_name in reg_list}
+        log.warning("Cannot determine registers that are clobbered by call statement %r.", stmt)
+        return set()
+
+    def _get_vvar_by_insn(self, addr: int, op_type: ObservationPointType, predicate, block_idx: int | None = None):
+        # find the starting block
+        for block in self.model.func_graph:
+            if block.idx == block_idx and block.addr <= addr < block.addr + block.original_size:
+                the_block = block
+                break
+        else:
+            return
+
+        starting_stmt_idx = len(the_block.statements) if op_type == ObservationPointType.OP_AFTER else 0
+        for stmt_idx, stmt in enumerate(the_block.statements):
+            # skip all labels and phi assignments
+            if isinstance(stmt, Label) or is_phi_assignment(stmt):
+                if op_type == ObservationPointType.OP_BEFORE:
+                    # ensure that we tick starting_stmt_idx forward
+                    starting_stmt_idx = stmt_idx
+                continue
+
+            if (
+                op_type == ObservationPointType.OP_BEFORE
+                and stmt.ins_addr == addr
+                or op_type == ObservationPointType.OP_AFTER
+                and stmt.ins_addr > addr
+            ):
+                starting_stmt_idx = stmt_idx
+                break
+
+        traversed = set()
+        queue = [(the_block, starting_stmt_idx)]
+        while queue:
+            block, start_stmt_idx = queue.pop(0)
+            traversed.add(block)
+
+            stmts = block.statements[:start_stmt_idx] if start_stmt_idx is not None else block.statements
+
+            for stmt in reversed(stmts):
+                should_break = predicate(stmt)
+                if should_break:
+                    break
+            else:
+                # not found
+                for pred in self.model.func_graph.predecessors(block):
+                    if pred not in traversed:
+                        traversed.add(pred)
+                        queue.append((pred, None))
+
+    def get_reg_vvar_by_insn(
+        self, reg_offset: int, addr: int, op_type: ObservationPointType, block_idx: int | None = None
+    ) -> VirtualVariable | None:
+        reg_offset = get_reg_offset_base(reg_offset, self.model.arch)
+        vvars = set()
+
+        def _predicate(stmt) -> bool:
+            if (
+                isinstance(stmt, Assignment)
+                and isinstance(stmt.dst, VirtualVariable)
+                and stmt.dst.was_reg
+                and stmt.dst.reg_offset == reg_offset
+            ):
+                vvars.add(stmt.dst)
+                return True
+            if isinstance(stmt, Call):
+                if (
+                    isinstance(stmt.ret_expr, VirtualVariable)
+                    and stmt.ret_expr.was_reg
+                    and stmt.ret_expr.reg_offset == reg_offset
+                ):
+                    vvars.add(stmt.ret_expr)
+                    return True
+                # is it clobbered maybe?
+                clobbered_regs = self._get_call_clobbered_regs(stmt)
+                if reg_offset in clobbered_regs:
+                    return True
+            return False
+
+        self._get_vvar_by_insn(addr, op_type, _predicate, block_idx=block_idx)
+
+        assert len(vvars) <= 1
+        return next(iter(vvars), None)
+
+    def get_stack_vvar_by_insn(  # pylint: disable=too-many-positional-arguments
+        self, stack_offset: int, size: int, addr: int, op_type: ObservationPointType, block_idx: int | None = None
+    ) -> VirtualVariable | None:
+        vvars = set()
+
+        def _predicate(stmt) -> bool:
+            if (
+                isinstance(stmt, Assignment)
+                and isinstance(stmt.dst, VirtualVariable)
+                and stmt.dst.was_stack
+                and stmt.dst.stack_offset == stack_offset
+                and stmt.dst.size == size
+            ):
+                vvars.add(stmt.dst)
+                return True
+            return False
+
+        self._get_vvar_by_insn(addr, op_type, _predicate, block_idx=block_idx)
+
+        assert len(vvars) <= 1
+        return next(iter(vvars), None)
+
+    def get_vvar_value(self, vvar: VirtualVariable) -> Expression | None:
+        if vvar not in self.model.all_vvar_definitions:
+            return None
+        codeloc = self.model.all_vvar_definitions[vvar]
+
+        for block in self.model.func_graph:
+            if block.addr == codeloc.block_addr and block.idx == codeloc.block_idx:
+                if codeloc.stmt_idx < len(block.statements):
+                    stmt = block.statements[codeloc.stmt_idx]
+                    if isinstance(stmt, Assignment) and stmt.dst.likes(vvar):
+                        return stmt.src
+                break
+        return None
+
+    def observe(self, observation_points: list[ObservationPoint]):
+        insn_ops: dict[int, ObservationPointType] = {op[1]: op[2] for op in observation_points if op[0] == "insn"}
+        stmt_ops: dict[tuple[tuple[int, int | None], int], ObservationPointType] = {
+            op[1]: op[2] for op in observation_points if op[0] == "stmt"
+        }
+        node_ops: dict[tuple[int, int | None], ObservationPointType] = {
+            op[1]: op[2] for op in observation_points if op[0] == "node"
+        }
+        # TODO: Other types
+
+        traversal_order = GraphUtils.quasi_topological_sort_nodes(self.model.func_graph)
+        all_reg2vvarid: defaultdict[tuple[int, int | None], dict[int, int]] = defaultdict(dict)
+
+        observations = {}
+        for block in traversal_order:
+            reg2vvarid = all_reg2vvarid[block.addr, block.idx]
+
+            if (block.addr, block.idx) in node_ops and node_ops[
+                (block.addr, block.idx)
+            ] == ObservationPointType.OP_BEFORE:
+                observations[("block", (block.addr, block.idx), ObservationPointType.OP_BEFORE)] = reg2vvarid.copy()
+
+            last_insn_addr = None
+            for stmt_idx, stmt in enumerate(block.statements):
+                if last_insn_addr != stmt.ins_addr:
+                    # observe
+                    if last_insn_addr in insn_ops and insn_ops[last_insn_addr] == ObservationPointType.OP_AFTER:
+                        observations[("insn", last_insn_addr, ObservationPointType.OP_AFTER)] = reg2vvarid.copy()
+                    if stmt.ins_addr in insn_ops and insn_ops[stmt.ins_addr] == ObservationPointType.OP_BEFORE:
+                        observations[("insn", last_insn_addr, ObservationPointType.OP_BEFORE)] = reg2vvarid.copy()
+                    last_insn_addr = stmt.ins_addr
+
+                stmt_key = (block.addr, block.idx), stmt_idx
+                if stmt_key in stmt_ops and stmt_ops[stmt_key] == ObservationPointType.OP_BEFORE:
+                    observations[("stmt", stmt_key, ObservationPointType.OP_BEFORE)] = reg2vvarid.copy()
+
+                if isinstance(stmt, Assignment) and isinstance(stmt.dst, VirtualVariable) and stmt.dst.was_reg:
+                    base_offset = get_reg_offset_base(stmt.dst.reg_offset, self.model.arch)
+                    reg2vvarid[base_offset] = stmt.dst.varid
+                elif isinstance(stmt, Call) and isinstance(stmt.ret_expr, VirtualVariable) and stmt.ret_expr.was_reg:
+                    base_offset = get_reg_offset_base(stmt.ret_expr.reg_offset, self.model.arch)
+                    reg2vvarid[base_offset] = stmt.ret_expr.varid
+
+                if stmt_key in stmt_ops and stmt_ops[stmt_key] == ObservationPointType.OP_AFTER:
+                    observations[("stmt", stmt_key, ObservationPointType.OP_AFTER)] = reg2vvarid.copy()
+
+            if (block.addr, block.idx) in node_ops and node_ops[
+                (block.addr, block.idx)
+            ] == ObservationPointType.OP_AFTER:
+                observations[("block", (block.addr, block.idx), ObservationPointType.OP_AFTER)] = reg2vvarid.copy()
+
+            for succ in self.model.func_graph.successors(block):
+                if succ is block:
+                    continue
+                all_reg2vvarid[succ.addr, succ.idx] = reg2vvarid.copy()
+
+        return observations

angr/analyses/s_reaching_definitions/s_reaching_definitions.py

@@ -0,0 +1,159 @@
+from __future__ import annotations
+
+from ailment.block import Block
+from ailment.statement import Assignment, Call, Return
+
+from angr.knowledge_plugins.functions import Function
+from angr.knowledge_plugins.key_definitions.constants import ObservationPointType
+from angr.code_location import CodeLocation, ExternalCodeLocation
+from angr.analyses import Analysis, register_analysis
+from angr.utils.ssa import get_vvar_uselocs, get_vvar_deflocs, get_tmp_deflocs, get_tmp_uselocs
+from angr.calling_conventions import default_cc
+from .s_rda_model import SRDAModel
+from .s_rda_view import SRDAView
+
+
+class SReachingDefinitionsAnalysis(Analysis):
+    """
+    Constant and expression propagation that only supports SSA AIL graphs.
+    """
+
+    def __init__(  # pylint: disable=too-many-positional-arguments
+        self,
+        subject,
+        func_addr: int | None = None,
+        func_graph=None,
+        track_tmps: bool = False,
+        stack_pointer_tracker=None,
+    ):
+        if isinstance(subject, Block):
+            self.block = subject
+            self.func = None
+            self.mode = "block"
+        elif isinstance(subject, Function):
+            self.block = None
+            self.func = subject
+            self.mode = "function"
+        else:
+            raise TypeError(f"Unsupported subject type {type(subject)}")
+
+        self.func_graph = func_graph
+        self.func_addr = func_addr if func_addr is not None else self.func.addr if self.func is not None else None
+        self._track_tmps = track_tmps
+        self._sp_tracker = stack_pointer_tracker  # FIXME: Is it still used?
+
+        self._bp_as_gpr = False
+        if self.func is not None:
+            self._bp_as_gpr = self.func.info.get("bp_as_gpr", False)
+
+        self.model = SRDAModel(func_graph, self.project.arch)
+
+        self._analyze()
+
+    def _analyze(self):
+        match self.mode:
+            case "block":
+                blocks = {(self.block.addr, self.block.idx): self.block}
+            case "function":
+                blocks = {(block.addr, block.idx): block for block in self.func_graph}
+            case _:
+                raise NotImplementedError
+
+        phi_vvars = {}
+        # find all vvar definitions
+        vvar_deflocs = get_vvar_deflocs(blocks.values(), phi_vvars=phi_vvars)
+        # find all explicit vvar uses
+        vvar_uselocs = get_vvar_uselocs(blocks.values())
+
+        # update model
+        for vvar, defloc in vvar_deflocs.items():
+            self.model.varid_to_vvar[vvar.varid] = vvar
+            self.model.all_vvar_definitions[vvar] = defloc
+
+            for vvar_at_use, useloc in vvar_uselocs[vvar.varid]:
+                self.model.all_vvar_uses[vvar].add((vvar_at_use, useloc))
+
+        self.model.phi_vvar_ids = {vvar.varid for vvar in phi_vvars}
+        self.model.phivarid_to_varids = {}
+        for vvar, src_vvars in phi_vvars.items():
+            self.model.phivarid_to_varids[vvar.varid] = {
+                src_vvar.varid for src_vvar in src_vvars if src_vvar is not None
+            }
+
+        if self.mode == "function":
+            # fix register definitions for arguments
+            defined_vvarids = {vvar.varid for vvar in vvar_deflocs}
+            undefined_vvarids = set(vvar_uselocs.keys()).difference(defined_vvarids)
+            for vvar_id in undefined_vvarids:
+                used_vvar = next(iter(vvar_uselocs[vvar_id]))[0]
+                self.model.varid_to_vvar[used_vvar.varid] = used_vvar
+                self.model.all_vvar_definitions[used_vvar] = ExternalCodeLocation()
+                self.model.all_vvar_uses[used_vvar] |= vvar_uselocs[vvar_id]
+
+            srda_view = SRDAView(self.model)
+
+            # fix register uses at call sites
+
+            # find all implicit vvar uses
+            call_stmt_ids = []
+            for block in blocks.values():
+                for stmt_idx, stmt in enumerate(block.statements):
+                    if (  # pylint:disable=too-many-boolean-expressions
+                        (isinstance(stmt, Call) and stmt.args is None)
+                        or (isinstance(stmt, Assignment) and isinstance(stmt.src, Call) and stmt.src.args is None)
+                        or (isinstance(stmt, Return) and stmt.ret_exprs and isinstance(stmt.ret_exprs[0], Call))
+                    ):
+                        call_stmt_ids.append(((block.addr, block.idx), stmt_idx))
+
+            observations = srda_view.observe(
+                [("stmt", insn_stmt_id, ObservationPointType.OP_BEFORE) for insn_stmt_id in call_stmt_ids]
+            )
+            for key, reg_to_vvarids in observations.items():
+                _, ((block_addr, block_idx), stmt_idx), _ = key
+
+                block = blocks[(block_addr, block_idx)]
+                stmt = block.statements[stmt_idx]
+                assert isinstance(stmt, (Call, Assignment, Return))
+
+                call: Call = (
+                    stmt if isinstance(stmt, Call) else stmt.src if isinstance(stmt, Assignment) else stmt.ret_exprs[0]
+                )
+                if call.prototype is None:
+                    # without knowing the prototype, we must conservatively add uses to all registers that are
+                    # potentially used here
+                    if call.calling_convention is not None:
+                        cc = call.calling_convention
+                    else:
+                        # just use all registers in the default calling convention because we don't know anything about
+                        # the calling convention yet
+                        cc = default_cc(self.project.arch.name)(self.project.arch)
+
+                    codeloc = CodeLocation(block_addr, stmt_idx, block_idx=block_idx, ins_addr=stmt.ins_addr)
+                    arg_locs = cc.ARG_REGS
+
+                    for arg_reg_name in arg_locs:
+                        reg_offset = self.project.arch.registers[arg_reg_name][0]
+                        if reg_offset in reg_to_vvarids:
+                            vvarid = reg_to_vvarids[reg_offset]
+                            vvar = self.model.varid_to_vvar[vvarid]
+                            self.model.all_vvar_uses[vvar].add((None, codeloc))
+
+        if self._track_tmps:
+            # track tmps
+            tmp_deflocs = get_tmp_deflocs(blocks.values())
+            # find all vvar uses
+            tmp_uselocs = get_tmp_uselocs(blocks.values())
+
+            # update model
+            for block_loc, d in tmp_deflocs.items():
+                for tmp_atom, stmt_idx in d.items():
+                    self.model.all_tmp_definitions[block_loc][tmp_atom] = stmt_idx
+
+                    if tmp_atom in tmp_uselocs[block_loc]:
+                        for tmp_at_use, use_stmt_idx in tmp_uselocs[block_loc][tmp_atom]:
+                            if tmp_atom not in self.model.all_tmp_uses[block_loc]:
+                                self.model.all_tmp_uses[block_loc][tmp_atom] = set()
+                            self.model.all_tmp_uses[block_loc][tmp_atom].add((tmp_at_use, use_stmt_idx))
+
+
+register_analysis(SReachingDefinitionsAnalysis, "SReachingDefinitions")