|
|
|
(*
|
|
|
|
* Copyright (c) 2016 - present Facebook, Inc.
|
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* This source code is licensed under the BSD style license found in the
|
|
|
|
* LICENSE file in the root directory of this source tree. An additional grant
|
|
|
|
* of patent rights can be found in the PATENTS file in the same directory.
|
|
|
|
*)
|
|
|
|
|
|
|
|
open! Utils
|
|
|
|
|
|
|
|
module F = Format
|
|
|
|
module L = Logging
|
|
|
|
|
|
|
|
module Domain = struct
|
|
|
|
include Var.Map
|
|
|
|
type astate = Var.t Var.Map.t
|
|
|
|
|
|
|
|
let initial = Var.Map.empty
|
|
|
|
|
|
|
|
(* return true if the key-value bindings in [rhs] are a subset of the key-value bindings in
|
|
|
|
[lhs] *)
|
|
|
|
let (<=) ~lhs ~rhs =
|
|
|
|
if lhs == rhs
|
|
|
|
then true
|
|
|
|
else
|
|
|
|
Var.Map.for_all
|
|
|
|
(fun k v ->
|
|
|
|
try Var.equal v (Var.Map.find k lhs)
|
|
|
|
with Not_found -> false)
|
|
|
|
rhs
|
|
|
|
|
|
|
|
let join astate1 astate2 =
|
|
|
|
if astate1 == astate2
|
|
|
|
then astate1
|
|
|
|
else
|
|
|
|
let keep_if_same _ v1_opt v2_opt = match v1_opt, v2_opt with
|
|
|
|
| Some v1, Some v2 ->
|
|
|
|
if Var.equal v1 v2 then Some v1 else None
|
|
|
|
| _ -> None in
|
|
|
|
Var.Map.merge keep_if_same astate1 astate2
|
|
|
|
|
|
|
|
let widen ~prev ~next ~num_iters:_=
|
|
|
|
join prev next
|
|
|
|
|
|
|
|
let pp fmt astate =
|
|
|
|
let pp_value = Var.pp in
|
|
|
|
Var.Map.pp ~pp_value fmt astate
|
|
|
|
|
|
|
|
let gen var1 var2 astate =
|
|
|
|
(* don't add tautological copies *)
|
|
|
|
if Var.equal var1 var2
|
|
|
|
then astate
|
|
|
|
else Var.Map.add var1 var2 astate
|
|
|
|
|
|
|
|
let kill_copies_with_var var astate =
|
|
|
|
let do_kill lhs_var rhs_var astate_acc =
|
|
|
|
if Var.equal var lhs_var
|
|
|
|
then astate_acc (* kill copies vith [var] on lhs *)
|
|
|
|
else
|
|
|
|
if Var.equal var rhs_var
|
|
|
|
then (* delete [var] = [rhs_var] copy, but add [lhs_var] = M(rhs_var) copy*)
|
|
|
|
try Var.Map.add lhs_var (Var.Map.find rhs_var astate) astate_acc
|
|
|
|
with Not_found -> astate_acc
|
|
|
|
else (* copy is unaffected by killing [var]; keep it *)
|
|
|
|
Var.Map.add lhs_var rhs_var astate_acc in
|
|
|
|
Var.Map.fold do_kill astate Var.Map.empty
|
|
|
|
|
|
|
|
(* kill the previous binding for [lhs_var], and add a new [lhs_var] -> [rhs_var] binding *)
|
|
|
|
let kill_then_gen lhs_var rhs_var astate =
|
|
|
|
let already_has_binding lhs_var rhs_var astate =
|
|
|
|
try Var.equal rhs_var (Var.Map.find lhs_var astate)
|
|
|
|
with Not_found -> false in
|
|
|
|
if Var.equal lhs_var rhs_var || already_has_binding lhs_var rhs_var astate
|
|
|
|
then astate (* already have this binding; no need to kill or gen *)
|
|
|
|
else
|
|
|
|
kill_copies_with_var lhs_var astate
|
|
|
|
|> gen lhs_var rhs_var
|
|
|
|
end
|
|
|
|
|
|
|
|
module TransferFunctions (CFG : ProcCfg.S) = struct
|
|
|
|
module CFG = CFG
|
|
|
|
module Domain = Domain
|
|
|
|
type extras = ProcData.no_extras
|
|
|
|
|
|
|
|
let exec_instr astate _ _ = function
|
|
|
|
| Sil.Letderef (lhs_id, Exp.Lvar rhs_pvar, _, _) when not (Pvar.is_global rhs_pvar) ->
|
|
|
|
Domain.gen (Var.of_id lhs_id) (Var.of_pvar rhs_pvar) astate
|
|
|
|
| Sil.Set (Exp.Lvar lhs_pvar, _, Exp.Var rhs_id, _) when not (Pvar.is_global lhs_pvar) ->
|
|
|
|
Domain.kill_then_gen (Var.of_pvar lhs_pvar) (Var.of_id rhs_id) astate
|
|
|
|
| Sil.Set (Exp.Lvar lhs_pvar, _, _, _) ->
|
|
|
|
(* non-copy assignment; can only kill *)
|
|
|
|
Domain.kill_copies_with_var (Var.of_pvar lhs_pvar) astate
|
|
|
|
| Sil.Letderef _
|
|
|
|
(* lhs = *rhs where rhs isn't a pvar (or is a global). in any case, not a copy *)
|
|
|
|
(* note: since logical vars can't be reassigned, don't need to kill bindings for lhs id *)
|
|
|
|
| Sil.Set (Var _, _, _, _) ->
|
|
|
|
(* *lhs = rhs. not a copy, and not a write to lhs *)
|
|
|
|
astate
|
|
|
|
| Sil.Call (ret_ids, _, actuals, _, _) ->
|
|
|
|
let kill_ret_ids astate_acc id =
|
|
|
|
Domain.kill_copies_with_var (Var.of_id id) astate_acc in
|
|
|
|
let kill_actuals_by_ref astate_acc = function
|
|
|
|
| (Exp.Lvar pvar, Typ.Tptr _) -> Domain.kill_copies_with_var (Var.of_pvar pvar) astate_acc
|
|
|
|
| _ -> astate_acc in
|
|
|
|
let astate' = IList.fold_left kill_ret_ids astate ret_ids in
|
|
|
|
if !Config.curr_language = Config.Java
|
|
|
|
then astate' (* Java doesn't have pass-by-reference *)
|
|
|
|
else IList.fold_left kill_actuals_by_ref astate' actuals
|
|
|
|
| Sil.Set _ | Sil.Prune _ | Sil.Nullify _ | Sil.Abstract _ | Sil.Remove_temps _
|
|
|
|
| Sil.Declare_locals _ | Sil.Stackop _ ->
|
|
|
|
(* none of these can assign to program vars or logical vars *)
|
|
|
|
astate
|
|
|
|
end
|