cprover
|
Public Member Functions | |
taint_analysist () | |
bool | operator() (const std::string &taint_file_name, const symbol_tablet &, goto_functionst &, bool show_full, const std::string &json_file_name) |
Protected Member Functions | |
void | instrument (const namespacet &, goto_functionst &) |
void | instrument (const namespacet &, goto_functionst::goto_functiont &) |
Protected Attributes | |
taint_parse_treet | taint |
class_hierarchyt | class_hierarchy |
Additional Inherited Members |
Definition at line 28 of file taint_analysis.cpp.
|
inline |
Definition at line 31 of file taint_analysis.cpp.
|
protected |
Definition at line 50 of file taint_analysis.cpp.
References goto_functionst::function_map.
Referenced by operator()().
|
protected |
Definition at line 58 of file taint_analysis.cpp.
References goto_programt::add_instruction(), code_function_callt::arguments(), class_hierarchy, goto_programt::instructiont::code, messaget::debug(), dstringt::empty(), goto_programt::empty(), messaget::eom(), code_function_callt::function(), FUNCTION_CALL, symbol_exprt::get_identifier(), class_hierarchyt::get_parents_trans(), has_prefix(), id2string(), namespacet::lookup(), exprt::op0(), exprt::op1(), exprt::operands(), taint_parse_treet::rulet::PARAMETER, code_typet::parameters(), taint_parse_treet::rulet::RETURN_VALUE, taint_parse_treet::rules, taint_parse_treet::rulet::SANITIZER, source_locationt::set_property_class(), taint_parse_treet::rulet::SINK, dstringt::size(), taint_parse_treet::rulet::SOURCE, goto_programt::instructiont::source_location, symbolt::symbol_expr(), taint, taint_parse_treet::rulet::THIS, to_code_function_call(), to_code_type(), to_symbol_expr(), and goto_programt::instructiont::type.
bool taint_analysist::operator() | ( | const std::string & | taint_file_name, |
const symbol_tablet & | symbol_table, | ||
goto_functionst & | goto_functions, | ||
bool | show_full, | ||
const std::string & | json_file_name | ||
) |
Definition at line 225 of file taint_analysis.cpp.
References goto_programt::add_instruction(), jsont::array, class_hierarchy, messaget::debug(), goto_programt::destructive_append(), symbolt::display_name(), END_FUNCTION, goto_functionst::entry_point(), messaget::eom(), messaget::error(), custom_bitvector_analysist::eval(), forall_goto_functions, forall_goto_program_instructions, code_function_callt::function(), goto_functionst::function_map, messaget::get_message_handler(), custom_bitvector_domaint::has_get_must_or_may(), id2string(), goto_programt::instructions, instrument(), exprt::is_true(), json(), namespacet::lookup(), taint_parse_treet::output(), ai_baset::output(), messaget::result(), taint_parse_treet::rules, simplify_expr(), messaget::status(), taint, taint_parser(), and goto_functionst::update().
|
protected |
Definition at line 44 of file taint_analysis.cpp.
Referenced by instrument(), and operator()().
|
protected |
Definition at line 43 of file taint_analysis.cpp.
Referenced by instrument(), and operator()().