Package qilin.core.pag

package qilin.core.pag
Points-to analysis graph (PAG) data structures, based on Soot/jimple/spark/pag with significant modifications.
  • Class
    Description
    AllocNode
    Represents an allocation site node in the pointer assignment graph.
    ArrayElement
    A pseudo-field standing in for "any element of any array", used to model array stores/loads field-insensitively: PAG holds exactly one ArrayElement instance (see PAG.getArrayElement()), shared across every array type in the program.
    CallSite
    callsite based context element in the points to analysis.
    ClassConstantNode
    Represents an allocation site node the represents a known java.lang.Class object.
    ConcreteField
    A SparkField wrapping a real, declared SootField -- as opposed to ArrayElement, which is the pseudo-field standing in for "any array cell".
    ConstantNode
     
    ContextAllocNode
     
    ContextField
     
    ContextMethod
     
    ContextVarNode
     
    ExceptionThrowSite
     
    FieldRefNode
    Represents a field reference node in the pointer assignment graph.
    FieldValNode
     
    GlobalVarNode
    Represents a simple variable node in the pointer assignment graph that is not associated with any particular method invocation.
    LambdaAllocNode
    An allocation site standing in for the object a LambdaMetafactory-bootstrapped invokedynamic call site produces (a lambda or method reference).
    LambdaAllocNode.Target
    The resolved target of a lambda/method-reference alloc, as read off its bootstrap args.
    LocalVarNode
     
    MergedNewExpr
     
    MethodPAG
    Part of a pointer assignment graph for a single method.
    MethodParameter
    Represents a synthetic pointer-assignment-graph variable for one of a method's special argument-passing slots: an ordinary parameter at a given index (the base case, this class itself), or the receiver (this), the return value, or the thrown exception (the MethodParameter.This, MethodParameter.Return and MethodParameter.Throw subclasses).
    PAG
    Pointer assignment graph.
    PagNode
    Represents every node in the pointer assignment graph.
    Parameterizer
    Double-dispatch counterpart of PagNode.parameterize(Parameterizer, Context): each PAG node kind that knows how to turn itself into a context-sensitive node calls back into the matching overload here, instead of the caller (e.g.
    SparkField
    Represents a field.
    StringConstantNode
    Represents an allocation site node the represents a constant string.
    ValNode
    Represents a simple of pointer node in the pointer assignment graph.
    VarNode
    Represents a simple variable node in the pointer assignment graph.
    VirtualCallSite
    Holds relevant information about a particular virtual call site.