proguard.analysis.cpa.jvm.domain.taint

Class JvmTaintCpa

java.lang.Object

proguard.analysis.cpa.defaults.SimpleCpa<JvmAbstractState<SetAbstractState<JvmTaintSource>>>

proguard.analysis.cpa.jvm.domain.taint.JvmTaintCpa

All Implemented Interfaces:

ConfigurableProgramAnalysis<JvmAbstractState<SetAbstractState<JvmTaintSource>>>

public class JvmTaintCpa
extends SimpleCpa<JvmAbstractState<SetAbstractState<JvmTaintSource>>>

The JvmTaintCpa computes abstract states containing JvmTaintSources which can reach the given code location.

Constructor Summary

Constructors

Constructor and Description
JvmTaintCpa(java.util.Map<Signature,java.util.Set<JvmTaintSource>> signaturesToSources, java.util.Map<MethodSignature,JvmTaintTransformer> taintTransformers, java.util.Map<Call,java.util.Set<JvmMemoryLocation>> extraTaintPropagationLocations, AbortOperator abortOperator) Create a taint CPA.
JvmTaintCpa(java.util.Set<? extends JvmTaintSource> sources) Create a taint CPA.

Method Summary

Modifier and Type	Method and Description
static java.util.Map<Signature,java.util.Set<JvmTaintSource>>	createSourcesMap(java.util.Set<? extends JvmTaintSource> sources) Since the used data structure is a map that uses the fqn as key, which is a parameter of the TaintSources, this method constructs the map correctly starting from a set of sources.

Methods inherited from class proguard.analysis.cpa.defaults.SimpleCpa

getAbortOperator, getMergeOperator, getPrecisionAdjustment, getStopOperator, getTransferRelation

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JvmTaintCpa

public JvmTaintCpa(java.util.Set<? extends JvmTaintSource> sources)

Create a taint CPA.

Parameters:

sources - a set of taint sources

JvmTaintCpa

public JvmTaintCpa(java.util.Map<Signature,java.util.Set<JvmTaintSource>> signaturesToSources,
                   java.util.Map<MethodSignature,JvmTaintTransformer> taintTransformers,
                   java.util.Map<Call,java.util.Set<JvmMemoryLocation>> extraTaintPropagationLocations,
                   AbortOperator abortOperator)

Create a taint CPA.

Parameters:

signaturesToSources - a mapping from method signature to taint sources

taintTransformers - a mapping from method signature to a transformer object applied to the taint state when that method is invoked

extraTaintPropagationLocations - a mapping from a specific method call to any jvm state location that is tainted as a result of the call

abortOperator - an operator used to stop the analysis prematurely.

Method Detail

createSourcesMap

public static java.util.Map<Signature,java.util.Set<JvmTaintSource>> createSourcesMap(java.util.Set<? extends JvmTaintSource> sources)

Since the used data structure is a map that uses the fqn as key, which is a parameter of the TaintSources, this method constructs the map correctly starting from a set of sources.