All Downloads are FREE. Search and download functionalities are using the official Maven repository.

soot.jimple.infoflow.solver.fastSolver.flowInsensitive.FlowInsensitiveSolver Maven / Gradle / Ivy

There is a newer version: 2.9.0
Show newest version
/*******************************************************************************
 * Copyright (c) 2012 Eric Bodden.
 * Copyright (c) 2013 Tata Consultancy Services & Ecole Polytechnique de Montreal
 * All rights reserved. This program and the accompanying materials
 * are made available under the terms of the GNU Lesser Public License v2.1
 * which accompanies this distribution, and is available at
 * http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
 * 
 * Contributors:
 *     Eric Bodden - initial API and implementation
 *     Marc-Andre Laverdiere-Papineau - Fixed race condition
 *     Steven Arzt - Created FastSolver implementation
 ******************************************************************************/
package soot.jimple.infoflow.solver.fastSolver.flowInsensitive;

import java.util.Collection;
import java.util.Collections;
import java.util.HashSet;
import java.util.Map;
import java.util.Map.Entry;
import java.util.Set;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.LinkedBlockingQueue;
import java.util.concurrent.TimeUnit;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.google.common.cache.CacheBuilder;

import heros.DontSynchronize;
import heros.FlowFunction;
import heros.FlowFunctionCache;
import heros.FlowFunctions;
import heros.IFDSTabulationProblem;
import heros.SynchronizedBy;
import heros.ZeroedFlowFunctions;
import heros.solver.Pair;
import heros.solver.PathEdge;
import soot.SootMethod;
import soot.Unit;
import soot.jimple.infoflow.collect.ConcurrentHashSet;
import soot.jimple.infoflow.collect.MyConcurrentHashMap;
import soot.jimple.infoflow.memory.IMemoryBoundedSolver;
import soot.jimple.infoflow.memory.ISolverTerminationReason;
import soot.jimple.infoflow.solver.PredecessorShorteningMode;
import soot.jimple.infoflow.solver.executors.InterruptableExecutor;
import soot.jimple.infoflow.solver.executors.SetPoolExecutor;
import soot.jimple.infoflow.solver.fastSolver.FastSolverLinkedNode;
import soot.jimple.infoflow.solver.memory.IMemoryManager;
import soot.jimple.toolkits.ide.icfg.BiDiInterproceduralCFG;

/**
 * A solver for an {@link IFDSTabulationProblem}. This solver is not based on
 * the IDESolver implementation in Heros for performance reasons.
 * 
 * @param  The type of nodes in the interprocedural control-flow graph.
 *        Typically {@link Unit}.
 * @param  The type of data-flow facts to be computed by the tabulation
 *        problem.
 * @param  The type of inter-procedural control-flow graph being used.
 * @see IFDSTabulationProblem
 */
public class FlowInsensitiveSolver, I extends BiDiInterproceduralCFG>
		implements IMemoryBoundedSolver {

	public static CacheBuilder DEFAULT_CACHE_BUILDER = CacheBuilder.newBuilder()
			.concurrencyLevel(Runtime.getRuntime().availableProcessors()).initialCapacity(10000).softValues();

	protected static final Logger logger = LoggerFactory.getLogger(FlowInsensitiveSolver.class);

	// enable with -Dorg.slf4j.simpleLogger.defaultLogLevel=trace
	public static final boolean DEBUG = logger.isDebugEnabled();

	protected InterruptableExecutor executor;

	@DontSynchronize("only used by single thread")
	protected int numThreads;

	@SynchronizedBy("thread safe data structure, consistent locking when used")
	protected MyConcurrentHashMap, D> jumpFunctions = new MyConcurrentHashMap, D>();

	@SynchronizedBy("thread safe data structure, only modified internally")
	protected final I icfg;

	// stores summaries that were queried before they were computed
	// see CC 2010 paper by Naeem, Lhotak and Rodriguez
	@SynchronizedBy("consistent lock on 'incoming'")
	protected final MyConcurrentHashMap, Set>> endSummary = new MyConcurrentHashMap, Set>>();

	// edges going along calls
	// see CC 2010 paper by Naeem, Lhotak and Rodriguez
	@SynchronizedBy("consistent lock on field")
	protected final MyConcurrentHashMap, MyConcurrentHashMap>> incoming = new MyConcurrentHashMap, MyConcurrentHashMap>>();

	@DontSynchronize("stateless")
	protected final FlowFunctions flowFunctions;

	@DontSynchronize("only used by single thread")
	protected final Map> initialSeeds;

	@DontSynchronize("benign races")
	public long propagationCount;

	@DontSynchronize("stateless")
	protected final D zeroValue;

	@DontSynchronize("readOnly")
	protected final FlowFunctionCache ffCache;

	@DontSynchronize("readOnly")
	protected final boolean followReturnsPastSeeds;

	@DontSynchronize("readOnly")
	protected PredecessorShorteningMode shorteningMode = PredecessorShorteningMode.NeverShorten;

	@DontSynchronize("readOnly")
	private int maxJoinPointAbstractions = -1;

	@DontSynchronize("readOnly")
	protected IMemoryManager memoryManager = null;

	private boolean solverId = true;

	private Set notificationListeners = new HashSet<>();
	private ISolverTerminationReason killFlag = null;

	private int maxCalleesPerCallSite = 10;
	private int maxAbstractionPathLength = 100;

	/**
	 * Creates a solver for the given problem, which caches flow functions and edge
	 * functions. The solver must then be started by calling {@link #solve()}.
	 */
	public FlowInsensitiveSolver(IFDSTabulationProblem tabulationProblem) {
		this(tabulationProblem, DEFAULT_CACHE_BUILDER);
	}

	/**
	 * Creates a solver for the given problem, constructing caches with the given
	 * {@link CacheBuilder}. The solver must then be started by calling
	 * {@link #solve()}.
	 * 
	 * @param tabulationProblem        The tabulation problem to solve
	 * @param flowFunctionCacheBuilder A valid {@link CacheBuilder} or
	 *                                 null if no caching is to be used
	 *                                 for flow functions.
	 */
	public FlowInsensitiveSolver(IFDSTabulationProblem tabulationProblem,
			@SuppressWarnings("rawtypes") CacheBuilder flowFunctionCacheBuilder) {
		if (logger.isDebugEnabled())
			flowFunctionCacheBuilder = flowFunctionCacheBuilder.recordStats();
		this.zeroValue = tabulationProblem.zeroValue();
		this.icfg = tabulationProblem.interproceduralCFG();
		FlowFunctions flowFunctions = tabulationProblem.autoAddZero()
				? new ZeroedFlowFunctions(tabulationProblem.flowFunctions(), zeroValue)
				: tabulationProblem.flowFunctions();
		if (flowFunctionCacheBuilder != null) {
			ffCache = new FlowFunctionCache(flowFunctions, flowFunctionCacheBuilder);
			flowFunctions = ffCache;
		} else {
			ffCache = null;
		}
		this.flowFunctions = flowFunctions;
		this.initialSeeds = tabulationProblem.initialSeeds();
		this.followReturnsPastSeeds = tabulationProblem.followReturnsPastSeeds();
		this.numThreads = Math.max(1, tabulationProblem.numThreads());
		this.executor = getExecutor();
	}

	/**
	 * Runs the solver on the configured problem. This can take some time.
	 */
	public void solve() {
		reset();

		// Notify the listeners that the solver has been started
		for (IMemoryBoundedSolverStatusNotification listener : notificationListeners)
			listener.notifySolverStarted(this);

		submitInitialSeeds();
		awaitCompletionComputeValuesAndShutdown();

		// Notify the listeners that the solver has been terminated
		for (IMemoryBoundedSolverStatusNotification listener : notificationListeners)
			listener.notifySolverTerminated(this);
	}

	/**
	 * Schedules the processing of initial seeds, initiating the analysis. Clients
	 * should only call this methods if performing synchronization on their own.
	 * Normally, {@link #solve()} should be called instead.
	 */
	protected void submitInitialSeeds() {
		for (Entry> seed : initialSeeds.entrySet()) {
			Unit startPoint = seed.getKey();
			SootMethod mp = icfg.getMethodOf(startPoint);

			for (D val : seed.getValue()) {
				if (icfg.isCallStmt(startPoint))
					processCall(zeroValue, startPoint, val);
				else if (icfg.isExitStmt(startPoint))
					processExit(zeroValue, startPoint, val);
				else
					processNormalFlow(zeroValue, startPoint, val, mp);
			}
			addFunction(new PathEdge(zeroValue, mp, zeroValue));
		}
	}

	/**
	 * Awaits the completion of the exploded super graph. When complete, computes
	 * result values, shuts down the executor and returns.
	 */
	protected void awaitCompletionComputeValuesAndShutdown() {
		{
			// run executor and await termination of tasks
			runExecutorAndAwaitCompletion();
		}
		if (logger.isDebugEnabled())
			printStats();

		// ask executor to shut down;
		// this will cause new submissions to the executor to be rejected,
		// but at this point all tasks should have completed anyway
		executor.shutdown();

		// Wait for the executor to be really gone
		while (!executor.isTerminated()) {
			try {
				Thread.sleep(100);
			} catch (InterruptedException e) {
				e.printStackTrace();
			}
		}
	}

	/**
	 * Runs execution, re-throwing exceptions that might be thrown during its
	 * execution.
	 */
	private void runExecutorAndAwaitCompletion() {
		try {
			executor.awaitCompletion();
		} catch (InterruptedException e) {
			e.printStackTrace();
		}
		Throwable exception = executor.getException();
		if (exception != null) {
			throw new RuntimeException("There were exceptions during IFDS analysis. Exiting.", exception);
		}
	}

	protected boolean getSolverId() {
		return this.solverId;
	}

	protected void setSolverId(boolean solverId) {
		this.solverId = solverId;
	}

	/**
	 * Dispatch the processing of a given edge. It may be executed in a different
	 * thread.
	 * 
	 * @param edge the edge to process
	 */
	protected void scheduleEdgeProcessing(PathEdge edge) {
		// If the executor has been killed, there is little point
		// in submitting new tasks
		if (killFlag != null || executor.isTerminating())
			return;

		executor.execute(new PathEdgeProcessingTask(edge, getSolverId()));
		propagationCount++;
	}

	/**
	 * Lines 13-20 of the algorithm; processing a call site in the caller's context.
	 * 
	 * For each possible callee, registers incoming call edges. Also propagates
	 * call-to-return flows and summarized callee flows within the caller.
	 * 
	 * @param edge an edge whose target node resembles a method call
	 */
	private void processCall(D d1, Unit n, D d2) {
		Collection returnSiteNs = icfg.getReturnSitesOfCallAt(n);

		// for each possible callee
		Collection callees = icfg.getCalleesOfCallAt(n);
		if (maxCalleesPerCallSite < 0 || callees.size() <= maxCalleesPerCallSite) {
			for (SootMethod sCalledProcN : callees) { // still line 14
				// Early termination check
				if (killFlag != null)
					return;
				if (!sCalledProcN.isConcrete())
					continue;

				// compute the call-flow function
				FlowFunction function = flowFunctions.getCallFlowFunction(n, sCalledProcN);
				Set res = computeCallFlowFunction(function, d1, d2);

				// for each result node of the call-flow function
				if (res != null && !res.isEmpty()) {
					for (D d3 : res) {
						if (memoryManager != null)
							d3 = memoryManager.handleGeneratedMemoryObject(d2, d3);
						if (d3 == null)
							continue;

						// for each callee's start point(s), create initial
						// self-loop
						propagate(d3, sCalledProcN, d3, n, false); // line 15

						// register the fact that  has an incoming edge from
						// 
						// line 15.1 of Naeem/Lhotak/Rodriguez
						if (!addIncoming(sCalledProcN, d3, n, d1, d2))
							continue;

						applyEndSummaryOnCall(d1, n, d2, returnSiteNs, sCalledProcN, d3);
					}
				}
			}
		}

		// line 17-19 of Naeem/Lhotak/Rodriguez
		// process intra-procedural flows along call-to-return flow functions
		for (Unit returnSiteN : returnSiteNs) {
			SootMethod retMeth = icfg.getMethodOf(returnSiteN);
			FlowFunction callToReturnFlowFunction = flowFunctions.getCallToReturnFlowFunction(n, returnSiteN);
			Set res = computeCallToReturnFlowFunction(callToReturnFlowFunction, d1, d2);
			if (res != null && !res.isEmpty()) {
				for (D d3 : res) {
					if (memoryManager != null)
						d3 = memoryManager.handleGeneratedMemoryObject(d2, d3);
					if (d3 != null)
						propagate(d1, retMeth, d3, n, false);
				}
			}
		}
	}

	protected void applyEndSummaryOnCall(D d1, Unit n, D d2, Collection returnSiteNs, SootMethod sCalledProcN,
			D d3) {
		// line 15.2
		Set> endSumm = endSummary(sCalledProcN, d3);

		// still line 15.2 of Naeem/Lhotak/Rodriguez
		// for each already-queried exit value  reachable
		// from , create new caller-side jump functions to the return
		// sites because we have observed a potentially new incoming edge into
		// 
		if (endSumm != null && !endSumm.isEmpty()) {
			for (Pair entry : endSumm) {
				Unit eP = entry.getO1();
				D d4 = entry.getO2();
				// for each return site
				for (Unit retSiteN : returnSiteNs) {
					SootMethod retMeth = icfg.getMethodOf(retSiteN);
					// compute return-flow function
					FlowFunction retFunction = flowFunctions.getReturnFlowFunction(n, sCalledProcN, eP, retSiteN);
					Set retFlowRes = computeReturnFlowFunction(retFunction, d3, d4, n, Collections.singleton(d1));
					if (retFlowRes != null && !retFlowRes.isEmpty()) {
						// for each target value of the function
						for (D d5 : retFlowRes) {
							if (memoryManager != null)
								d5 = memoryManager.handleGeneratedMemoryObject(d4, d5);

							// If we have not changed anything in the callee, we
							// do not need the facts from there. Even if we
							// change something: If we don't need the concrete
							// path, we can skip the callee in the predecessor
							// chain
							D d5p = d5;
							switch (shorteningMode) {
							case AlwaysShorten:
								if (d5p != d2) {
									d5p = d5p.clone();
									d5p.setPredecessor(d2);
								}
								break;
							case ShortenIfEqual:
								if (d5.equals(d2))
									d5p = d2;
								break;
							}
							propagate(d1, retMeth, d5p, n, false, true);
						}
					}
				}
			}
		}
	}

	/**
	 * Computes the call flow function for the given call-site abstraction
	 * 
	 * @param callFlowFunction The call flow function to compute
	 * @param d1               The abstraction at the current method's start node.
	 * @param d2               The abstraction at the call site
	 * @return The set of caller-side abstractions at the callee's start node
	 */
	protected Set computeCallFlowFunction(FlowFunction callFlowFunction, D d1, D d2) {
		return callFlowFunction.computeTargets(d2);
	}

	/**
	 * Computes the call-to-return flow function for the given call-site abstraction
	 * 
	 * @param callToReturnFlowFunction The call-to-return flow function to compute
	 * @param d1                       The abstraction at the current method's start
	 *                                 node.
	 * @param d2                       The abstraction at the call site
	 * @return The set of caller-side abstractions at the return site
	 */
	protected Set computeCallToReturnFlowFunction(FlowFunction callToReturnFlowFunction, D d1, D d2) {
		return callToReturnFlowFunction.computeTargets(d2);
	}

	/**
	 * Lines 21-32 of the algorithm.
	 * 
	 * Stores callee-side summaries. Also, at the side of the caller, propagates
	 * intra-procedural flows to return sites using those newly computed summaries.
	 * 
	 * @param edge an edge whose target node resembles a method exits
	 */
	protected void processExit(D d1, Unit n, D d2) {
		SootMethod methodThatNeedsSummary = icfg.getMethodOf(n);

		// for each of the method's start points, determine incoming calls

		// line 21.1 of Naeem/Lhotak/Rodriguez
		// register end-summary
		if (!addEndSummary(methodThatNeedsSummary, d1, n, d2))
			return;
		Map> inc = incoming(d1, methodThatNeedsSummary);

		// for each incoming call edge already processed
		// (see processCall(..))
		if (inc != null && !inc.isEmpty()) {
			for (Entry> entry : inc.entrySet()) {
				// line 22
				Unit c = entry.getKey();
				Set callerSideDs = entry.getValue().keySet();
				// for each return site
				for (Unit retSiteC : icfg.getReturnSitesOfCallAt(c)) {
					SootMethod returnMeth = icfg.getMethodOf(retSiteC);
					// compute return-flow function
					FlowFunction retFunction = flowFunctions.getReturnFlowFunction(c, methodThatNeedsSummary, n,
							retSiteC);
					Set targets = computeReturnFlowFunction(retFunction, d1, d2, c, callerSideDs);
					// for each incoming-call value
					for (Entry d1d2entry : entry.getValue().entrySet()) {
						final D d4 = d1d2entry.getKey();
						final D predVal = d1d2entry.getValue();

						for (D d5 : targets) {
							if (memoryManager != null)
								d5 = memoryManager.handleGeneratedMemoryObject(d2, d5);
							if (d5 == null)
								continue;

							// If we have not changed anything in the callee, we
							// do not need the facts
							// from there. Even if we change something: If we
							// don't need the concrete
							// path, we can skip the callee in the predecessor
							// chain
							D d5p = d5;
							switch (shorteningMode) {
							case AlwaysShorten:
								if (d5p != predVal) {
									d5p = d5p.clone();
									d5p.setPredecessor(predVal);
								}
								break;
							case ShortenIfEqual:
								if (d5.equals(predVal))
									d5p = predVal;
								break;
							}
							propagate(d4, returnMeth, d5p, c, false);
						}
					}
				}
			}
		}

		// handling for unbalanced problems where we return out of a method with
		// a fact
		// for which we have no incoming flow
		// note: we propagate that way only values that originate from ZERO, as
		// conditionally generated values should only
		// be propagated into callers that have an incoming edge for this
		// condition
		if (followReturnsPastSeeds && d1 == zeroValue && (inc == null || inc.isEmpty())) {
			Collection callers = icfg.getCallersOf(methodThatNeedsSummary);
			for (Unit c : callers) {
				SootMethod callerMethod = icfg.getMethodOf(c);
				for (Unit retSiteC : icfg.getReturnSitesOfCallAt(c)) {
					FlowFunction retFunction = flowFunctions.getReturnFlowFunction(c, methodThatNeedsSummary, n,
							retSiteC);
					Set targets = computeReturnFlowFunction(retFunction, d1, d2, c,
							Collections.singleton(zeroValue));
					if (targets != null && !targets.isEmpty()) {
						for (D d5 : targets) {
							if (memoryManager != null)
								d5 = memoryManager.handleGeneratedMemoryObject(d2, d5);
							if (d5 != null)
								propagate(zeroValue, callerMethod, d5, c, true);
						}
					}
				}
			}
			// in cases where there are no callers, the return statement would
			// normally not
			// be processed at all;
			// this might be undesirable if the flow function has a side effect
			// such as
			// registering a taint;
			// instead we thus call the return flow function will a null caller
			if (callers.isEmpty()) {
				FlowFunction retFunction = flowFunctions.getReturnFlowFunction(null, methodThatNeedsSummary, n,
						null);
				retFunction.computeTargets(d2);
			}
		}
	}

	/**
	 * Computes the return flow function for the given set of caller-side
	 * abstractions.
	 * 
	 * @param retFunction  The return flow function to compute
	 * @param d1           The abstraction at the beginning of the callee
	 * @param d2           The abstraction at the exit node in the callee
	 * @param callSite     The call site
	 * @param callerSideDs The abstractions at the call site
	 * @return The set of caller-side abstractions at the return site
	 */
	protected Set computeReturnFlowFunction(FlowFunction retFunction, D d1, D d2, Unit callSite,
			Collection callerSideDs) {
		return retFunction.computeTargets(d2);
	}

	/**
	 * Lines 33-37 of the algorithm. Simply propagate normal, intra-procedural
	 * flows.
	 * 
	 * @param edge
	 */
	private void processNormalFlow(D d1, Unit n, D d2, SootMethod method) {
		for (Unit m : icfg.getSuccsOf(n)) {
			FlowFunction flowFunction = flowFunctions.getNormalFlowFunction(n, m);
			Set res = computeNormalFlowFunction(flowFunction, d1, d2);
			if (res != null && !res.isEmpty()) {
				for (D d3 : res) {
					if (memoryManager != null && d2 != d3)
						d3 = memoryManager.handleGeneratedMemoryObject(d2, d3);
					if (d3 != null && d3 != d2)
						propagate(d1, method, d3, null, false);
				}
			}
		}
	}

	private void processMethod(PathEdge edge) {
		D d1 = edge.factAtSource();
		SootMethod target = edge.getTarget();
		D d2 = edge.factAtTarget();

		// Iterate over all statements in the method and apply the propagation
		for (Unit u : target.getActiveBody().getUnits()) {
			if (icfg.isCallStmt(u))
				processCall(d1, u, d2);
			else {
				if (icfg.isExitStmt(u))
					processExit(d1, u, d2);
				if (!icfg.getSuccsOf(u).isEmpty())
					processNormalFlow(d1, u, d2, target);
			}
		}
	}

	/**
	 * Computes the normal flow function for the given set of start and end
	 * abstractions.
	 * 
	 * @param flowFunction The normal flow function to compute
	 * @param d1           The abstraction at the method's start node
	 * @param d2           The abstraction at the current node
	 * @return The set of abstractions at the successor node
	 */
	protected Set computeNormalFlowFunction(FlowFunction flowFunction, D d1, D d2) {
		return flowFunction.computeTargets(d2);
	}

	/**
	 * Propagates the flow further down the exploded super graph.
	 * 
	 * @param sourceVal          the source value of the propagated summary edge
	 * @param target             the target statement
	 * @param targetVal          the target value at the target statement
	 * @param relatedCallSite    for call and return flows the related call
	 *                           statement, null otherwise (this value
	 *                           is not used within this implementation but may be
	 *                           useful for subclasses of
	 *                           {@link FlowInsensitiveSolver})
	 * @param isUnbalancedReturn true if this edge is propagating an
	 *                           unbalanced return (this value is not used within
	 *                           this implementation but may be useful for
	 *                           subclasses of {@link FlowInsensitiveSolver})
	 */
	protected void propagate(D sourceVal, SootMethod target, D targetVal,
			/* deliberately exposed to clients */ Unit relatedCallSite,
			/* deliberately exposed to clients */ boolean isUnbalancedReturn) {
		propagate(sourceVal, target, targetVal, relatedCallSite, isUnbalancedReturn, true);
	}

	/**
	 * Propagates the flow further down the exploded super graph.
	 * 
	 * @param sourceVal          the source value of the propagated summary edge
	 * @param target             the target statement
	 * @param targetVal          the target value at the target statement
	 * @param relatedCallSite    for call and return flows the related call
	 *                           statement, null otherwise (this value
	 *                           is not used within this implementation but may be
	 *                           useful for subclasses of
	 *                           {@link FlowInsensitiveSolver})
	 * @param isUnbalancedReturn true if this edge is propagating an
	 *                           unbalanced return (this value is not used within
	 *                           this implementation but may be useful for
	 *                           subclasses of {@link FlowInsensitiveSolver})
	 * @param forceRegister      True if the jump function must always be registered
	 *                           with jumpFn . This can happen when externally
	 *                           injecting edges that don't come out of this solver.
	 */
	@SuppressWarnings("unchecked")
	protected void propagate(D sourceVal, SootMethod target, D targetVal,
			/* deliberately exposed to clients */ Unit relatedCallSite,
			/* deliberately exposed to clients */ boolean isUnbalancedReturn, boolean schedule) {
		// Let the memory manager run
		if (memoryManager != null) {
			sourceVal = memoryManager.handleMemoryObject(sourceVal);
			targetVal = memoryManager.handleMemoryObject(targetVal);
			if (sourceVal == null || targetVal == null)
				return;
		}

		// Check the path length
		if (maxAbstractionPathLength >= 0 && targetVal.getPathLength() > maxAbstractionPathLength)
			return;

		final PathEdge edge = new PathEdge<>(sourceVal, target, targetVal);
		final D existingVal = addFunction(edge);
		if (existingVal != null) {
			// Check whether we need to retain this abstraction
			boolean isEssential;
			if (memoryManager == null)
				isEssential = relatedCallSite != null && icfg.isCallStmt(relatedCallSite);
			else
				isEssential = memoryManager.isEssentialJoinPoint(targetVal, (N) relatedCallSite);

			if (maxJoinPointAbstractions < 0 || existingVal.getNeighborCount() < maxJoinPointAbstractions
					|| isEssential)
				existingVal.addNeighbor(targetVal);
		} else if (schedule) {
			scheduleEdgeProcessing(edge);
		}
	}

	/**
	 * Records a jump function. The source statement is implicit.
	 * 
	 * @see PathEdge
	 */
	public D addFunction(PathEdge edge) {
		return jumpFunctions.putIfAbsent(edge, edge.factAtTarget());
	}

	protected Set> endSummary(SootMethod m, D d3) {
		return endSummary.get(new Pair(m, d3));
	}

	private boolean addEndSummary(SootMethod m, D d1, Unit eP, D d2) {
		if (d1 == zeroValue)
			return true;

		Set> summaries = endSummary.putIfAbsentElseGet(new Pair(m, d1),
				new ConcurrentHashSet>());
		return summaries.add(new Pair(eP, d2));
	}

	protected Map> incoming(D d1, SootMethod m) {
		return incoming.get(new Pair(m, d1));
	}

	protected boolean addIncoming(SootMethod m, D d3, Unit n, D d1, D d2) {
		MyConcurrentHashMap> summaries = incoming.putIfAbsentElseGet(new Pair(m, d3),
				new MyConcurrentHashMap>());
		Map set = summaries.putIfAbsentElseGet(n, new ConcurrentHashMap());
		return set.put(d1, d2) == null;
	}

	/**
	 * Factory method for this solver's thread-pool executor.
	 */
	protected InterruptableExecutor getExecutor() {
		return new SetPoolExecutor(1, this.numThreads, 30, TimeUnit.SECONDS, new LinkedBlockingQueue());
	}

	/**
	 * Returns a String used to identify the output of this solver in debug mode.
	 * Subclasses can overwrite this string to distinguish the output from different
	 * solvers.
	 */
	protected String getDebugName() {
		return "FAST IFDS SOLVER";
	}

	public void printStats() {
		if (logger.isDebugEnabled()) {
			if (ffCache != null)
				ffCache.printStats();
		} else {
			logger.info("No statistics were collected, as DEBUG is disabled.");
		}
	}

	private class PathEdgeProcessingTask implements Runnable {

		private final PathEdge edge;
		private final boolean solverId;

		public PathEdgeProcessingTask(PathEdge edge, boolean solverId) {
			this.edge = edge;
			this.solverId = solverId;
		}

		public void run() {
			processMethod(edge);
		}

		@Override
		public int hashCode() {
			final int prime = 31;
			int result = 1;
			result = prime * result + ((edge == null) ? 0 : edge.hashCode());
			result = result + (solverId ? 1337 : 13);
			return result;
		}

		@Override
		public boolean equals(Object obj) {
			if (this == obj)
				return true;
			if (obj == null)
				return false;
			if (getClass() != obj.getClass())
				return false;
			@SuppressWarnings("unchecked")
			PathEdgeProcessingTask other = (PathEdgeProcessingTask) obj;
			if (edge == null) {
				if (other.edge != null)
					return false;
			} else if (!edge.equals(other.edge))
				return false;
			if (this.solverId != other.solverId)
				return false;
			return true;
		}

		@Override
		public String toString() {
			return edge.toString();
		}

	}

	/**
	 * Sets whether abstractions on method returns shall be connected to the
	 * respective call abstractions to shortcut paths.
	 * 
	 * @param mode The strategy to use for shortening predecessor paths
	 */
	public void setPredecessorShorteningMode(PredecessorShorteningMode mode) {
		this.shorteningMode = mode;
	}

	/**
	 * Sets the maximum number of abstractions that shall be recorded per join
	 * point. In other words, enabling this option disables the recording of
	 * neighbors beyond the given count.
	 * 
	 * @param maxJoinPointAbstractions The maximum number of abstractions per join
	 *                                 point, or -1 to record an arbitrary number of
	 *                                 join point abstractions
	 */
	public void setMaxJoinPointAbstractions(int maxJoinPointAbstractions) {
		this.maxJoinPointAbstractions = maxJoinPointAbstractions;
	}

	/**
	 * Sets the memory manager that shall be used to manage the abstractions
	 * 
	 * @param memoryManager The memory manager that shall be used to manage the
	 *                      abstractions
	 */
	public void setMemoryManager(IMemoryManager memoryManager) {
		this.memoryManager = memoryManager;
	}

	/**
	 * Gets the memory manager used by this solver to reduce memory consumption
	 * 
	 * @return The memory manager registered with this solver
	 */
	public IMemoryManager getMemoryManager() {
		return this.memoryManager;
	}

	@Override
	public void forceTerminate(ISolverTerminationReason reason) {
		this.killFlag = reason;
		this.executor.interrupt();
		this.executor.shutdown();
	}

	@Override
	public boolean isTerminated() {
		return killFlag != null || this.executor.isFinished();
	}

	@Override
	public boolean isKilled() {
		return killFlag != null;
	}

	@Override
	public void reset() {
		this.killFlag = null;
	}

	@Override
	public void addStatusListener(IMemoryBoundedSolverStatusNotification listener) {
		this.notificationListeners.add(listener);
	}

	@Override
	public ISolverTerminationReason getTerminationReason() {
		return killFlag;
	}

	public void setMaxCalleesPerCallSite(int maxCalleesPerCallSite) {
		this.maxCalleesPerCallSite = maxCalleesPerCallSite;
	}

	public void setMaxAbstractionPathLength(int maxAbstractionPathLength) {
		this.maxAbstractionPathLength = maxAbstractionPathLength;
	}

}




© 2015 - 2024 Weber Informatics LLC | Privacy Policy