soot.jimple.toolkits.callgraph.VirtualCalls Maven / Gradle / Ivy

package soot.jimple.toolkits.callgraph;

/*-
 * #%L
 * Soot - a J*va Optimization Framework
 * %%
 * Copyright (C) 2003 Ondrej Lhotak
 * %%
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation, either version 2.1 of the
 * License, or (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Lesser Public License for more details.
 * 
 * You should have received a copy of the GNU General Lesser Public
 * License along with this program.  If not, see
 * .
 * #L%
 */

import java.util.ArrayList;
import java.util.HashSet;
import java.util.Iterator;
import java.util.LinkedList;
import java.util.List;
import java.util.Set;

import soot.AnySubType;
import soot.ArrayType;
import soot.FastHierarchy;
import soot.G;
import soot.NullType;
import soot.PhaseOptions;
import soot.RefType;
import soot.Scene;
import soot.Singletons;
import soot.SootClass;
import soot.SootMethod;
import soot.Type;
import soot.jimple.SpecialInvokeExpr;
import soot.options.CGOptions;
import soot.toolkits.scalar.Pair;
import soot.util.Chain;
import soot.util.HashMultiMap;
import soot.util.LargeNumberedMap;
import soot.util.MultiMap;
import soot.util.NumberedString;
import soot.util.SmallNumberedMap;
import soot.util.queue.ChunkedQueue;

/**
 * Resolves virtual calls.
 *
 * @author Ondrej Lhotak
 */
public class VirtualCalls {
  private CGOptions options = new CGOptions(PhaseOptions.v().getPhaseOptions("cg"));

  public VirtualCalls(Singletons.Global g) {
  }

  public static VirtualCalls v() {
    return G.v().soot_jimple_toolkits_callgraph_VirtualCalls();
  }

  private final LargeNumberedMap> typeToVtbl
      = new LargeNumberedMap>(Scene.v().getTypeNumberer());

  public SootMethod resolveSpecial(SpecialInvokeExpr iie, NumberedString subSig, SootMethod container) {
    return resolveSpecial(iie, subSig, container, false);
  }

  public SootMethod resolveSpecial(SpecialInvokeExpr iie, NumberedString subSig, SootMethod container, boolean appOnly) {
    SootMethod target = iie.getMethod();
    /* cf. JVM spec, invokespecial instruction */
    if (Scene.v().getOrMakeFastHierarchy().canStoreType(container.getDeclaringClass().getType(),
        target.getDeclaringClass().getType())
        && container.getDeclaringClass().getType() != target.getDeclaringClass().getType()
        && !target.getName().equals("") && subSig != sigClinit) {

      return resolveNonSpecial(container.getDeclaringClass().getSuperclass().getType(), subSig, appOnly);
    } else {
      return target;
    }
  }

  public SootMethod resolveNonSpecial(RefType t, NumberedString subSig) {
    return resolveNonSpecial(t, subSig, false);
  }

  public SootMethod resolveNonSpecial(RefType t, NumberedString subSig, boolean appOnly) {
    SmallNumberedMap vtbl = typeToVtbl.get(t);
    if (vtbl == null) {
      typeToVtbl.put(t, vtbl = new SmallNumberedMap());
    }
    SootMethod ret = vtbl.get(subSig);
    if (ret != null) {
      return ret;
    }
    SootClass cls = t.getSootClass();
    if (appOnly && cls.isLibraryClass()) {
      return null;
    }

    SootMethod m = cls.getMethodUnsafe(subSig);
    if (m != null) {
      if (!m.isAbstract()) {
        ret = m;
      }
    } else {
      SootClass c = cls.getSuperclassUnsafe();
      if (c != null) {
        ret = resolveNonSpecial(c.getType(), subSig);
      }
    }
    vtbl.put(subSig, ret);
    return ret;
  }

  protected MultiMap baseToSubTypes = new HashMultiMap();
  protected MultiMap, Pair> baseToPossibleSubTypes
      = new HashMultiMap, Pair>();

  public void resolve(Type t, Type declaredType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets) {
    resolve(t, declaredType, null, subSig, container, targets);
  }

  public void resolve(Type t, Type declaredType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets, boolean appOnly) {
    resolve(t, declaredType, null, subSig, container, targets, appOnly);
  }

  public void resolve(Type t, Type declaredType, Type sigType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets) {
    resolve(t, declaredType, sigType, subSig, container, targets, false);
  }

  public void resolve(Type t, Type declaredType, Type sigType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets, boolean appOnly) {
    if (declaredType instanceof ArrayType) {
      declaredType = RefType.v("java.lang.Object");
    }
    if (sigType instanceof ArrayType) {
      sigType = RefType.v("java.lang.Object");
    }
    if (t instanceof ArrayType) {
      t = RefType.v("java.lang.Object");
    }
    FastHierarchy fastHierachy = Scene.v().getOrMakeFastHierarchy();
    if (declaredType != null && !fastHierachy.canStoreType(t, declaredType)) {
      return;
    }
    if (sigType != null && !fastHierachy.canStoreType(t, sigType)) {
      return;
    }
    if (t instanceof RefType) {
      SootMethod target = resolveNonSpecial((RefType) t, subSig, appOnly);
      if (target != null) {
        targets.add(target);
      }
    } else if (t instanceof AnySubType) {
      RefType base = ((AnySubType) t).getBase();

      /*
       * Whenever any sub type of a specific type is considered as receiver for a method to call and the base type is an
       * interface, calls to existing methods with matching signature (possible implementation of method to call) are also
       * added. As Javas' subtyping allows contra-variance for return types and co-variance for parameters when overriding a
       * method, these cases are also considered here.
       *
       * Example: Classes A, B (B sub type of A), interface I with method public A foo(B b); and a class C with method public
       * B foo(A a) { ... }. The extended class hierarchy will contain C as possible implementation of I.
       *
       * Since Java has no multiple inheritance call by signature resolution is only activated if the base is an interface.
       */
      if (options.library() == CGOptions.library_signature_resolution && base.getSootClass().isInterface()) {
        resolveLibrarySignature(declaredType, sigType, subSig, container, targets, appOnly, base);
      } else {
        resolveAnySubType(declaredType, sigType, subSig, container, targets, appOnly, base);
      }
    } else if (t instanceof NullType) {
    } else {
      throw new RuntimeException("oops " + t);
    }
  }

  public void resolveSuperType(Type t, Type declaredType, NumberedString subSig, ChunkedQueue targets, 
      boolean appOnly) {
    if (declaredType == null) {
      return;
    }
    if (t == null) {
      return;
    }
    if (declaredType instanceof ArrayType) {
      declaredType = RefType.v("java.lang.Object");
    }
    if (t instanceof ArrayType) {
      t = RefType.v("java.lang.Object");
    }
    if (declaredType instanceof RefType) {
      RefType parent = (RefType)declaredType;
      SootClass parentClass = parent.getSootClass();
      RefType child;
      SootClass childClass;
      if (t instanceof AnySubType) {
        child = ((AnySubType) t).getBase();
      } else if (t instanceof RefType) {
        child = (RefType)t;
      } else {
        return;
      }
      childClass = child.getSootClass();
      FastHierarchy fastHierachy = Scene.v().getOrMakeFastHierarchy();
      if (fastHierachy.canStoreClass(childClass,parentClass)) {
        SootMethod target = resolveNonSpecial(child, subSig, appOnly);
        if (target != null) {
          targets.add(target);
        }
      }
    }
  }

  protected void resolveAnySubType(Type declaredType, Type sigType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets, boolean appOnly, RefType base) {
    FastHierarchy fastHierachy = Scene.v().getOrMakeFastHierarchy();

    {
      Set subTypes = baseToSubTypes.get(base);
      if (subTypes != null && !subTypes.isEmpty()) {
        for (final Type st : subTypes) {
          resolve(st, declaredType, sigType, subSig, container, targets, appOnly);
        }
        return;
      }
    }

    Set newSubTypes = new HashSet<>();
    newSubTypes.add(base);

    LinkedList worklist = new LinkedList();
    HashSet workset = new HashSet();
    FastHierarchy fh = fastHierachy;
    SootClass cl = base.getSootClass();

    if (workset.add(cl)) {
      worklist.add(cl);
    }
    while (!worklist.isEmpty()) {
      cl = worklist.removeFirst();
      if (cl.isInterface()) {
        for (Iterator cIt = fh.getAllImplementersOfInterface(cl).iterator(); cIt.hasNext();) {
          final SootClass c = cIt.next();
          if (workset.add(c)) {
            worklist.add(c);
          }
        }
      } else {
        if (cl.isConcrete()) {
          resolve(cl.getType(), declaredType, sigType, subSig, container, targets, appOnly);
          newSubTypes.add(cl.getType());
        }
        for (Iterator cIt = fh.getSubclassesOf(cl).iterator(); cIt.hasNext();) {
          final SootClass c = cIt.next();
          if (workset.add(c)) {
            worklist.add(c);
          }
        }
      }
    }

    baseToSubTypes.putAll(base, newSubTypes);
  }

  protected void resolveLibrarySignature(Type declaredType, Type sigType, NumberedString subSig, SootMethod container,
      ChunkedQueue targets, boolean appOnly, RefType base) {
    FastHierarchy fastHierachy = Scene.v().getOrMakeFastHierarchy();

    assert (declaredType instanceof RefType);
    Pair pair = new Pair(base, subSig);
    {
      Set> types = baseToPossibleSubTypes.get(pair);
      // if this type and method has been resolved earlier we can
      // just retrieve the previous result.
      if (types != null) {
        for (Pair tuple : types) {
          Type st = tuple.getO1();
          if (!fastHierachy.canStoreType(st, declaredType)) {
            resolve(st, st, sigType, subSig, container, targets, appOnly);
          } else {
            resolve(st, declaredType, sigType, subSig, container, targets, appOnly);
          }
        }
        return;
      }
    }

    Set> types = new HashSet>();

    // get return type; method name; parameter types
    String[] split = subSig.getString().replaceAll("(.*) (.*)\\((.*)\\)", "$1;$2;$3").split(";");

    Type declaredReturnType = Scene.v().getType(split[0]);
    String declaredName = split[1];
    List declaredParamTypes = new ArrayList();

    // separate the parameter types
    if (split.length == 3) {
      for (String type : split[2].split(",")) {
        declaredParamTypes.add(Scene.v().getType(type));
      }
    }

    Chain classes = Scene.v().getClasses();
    for (SootClass sc : classes) {
      for (SootMethod sm : sc.getMethods()) {
        if (!sm.isAbstract()) {

          // method name has to match
          if (!sm.getName().equals(declaredName)) {
            continue;
          }

          // the return type has to be a the declared return
          // type or a sub type of it
          if (!fastHierachy.canStoreType(sm.getReturnType(), declaredReturnType)) {
            continue;
          }
          List paramTypes = sm.getParameterTypes();

          // method parameters have to match to the declared
          // ones (same type or super type).
          if (declaredParamTypes.size() != paramTypes.size()) {
            continue;
          }
          boolean check = true;
          for (int i = 0; i < paramTypes.size(); i++) {
            if (!fastHierachy.canStoreType(declaredParamTypes.get(i), paramTypes.get(i))) {
              check = false;
              break;
            }
          }

          if (check) {
            Type st = sc.getType();
            if (!fastHierachy.canStoreType(st, declaredType)) {
              // final classes can not be extended and
              // therefore not used in library client
              if (!sc.isFinal()) {
                NumberedString newSubSig = sm.getNumberedSubSignature();
                resolve(st, st, sigType, newSubSig, container, targets, appOnly);
                types.add(new Pair(st, newSubSig));
              }
            } else {
              resolve(st, declaredType, sigType, subSig, container, targets, appOnly);
              types.add(new Pair(st, subSig));
            }
          }
        }
      }
    }
    baseToPossibleSubTypes.putAll(pair, types);
  }

  public final NumberedString sigClinit = Scene.v().getSubSigNumberer().findOrAdd("void ()");
  public final NumberedString sigStart = Scene.v().getSubSigNumberer().findOrAdd("void start()");
  public final NumberedString sigRun = Scene.v().getSubSigNumberer().findOrAdd("void run()");
}