ROSE  0.9.10.44
Public Types | Public Member Functions | List of all members
Rose::BinaryAnalysis::FeasiblePath::PathProcessor Class Referenceabstract

Description

Path searching functor.

This is the base class for user-defined functors called when searching for feasible paths.

Definition at line 97 of file BinaryFeasiblePath.h.

#include <BinaryFeasiblePath.h>

Public Types

enum  Action {
  BREAK,
  CONTINUE
}
 

Public Member Functions

virtual Action found (const FeasiblePath &analyzer, const Partitioner2::CfgPath &path, const std::vector< SymbolicExpr::Ptr > &pathConditions, const InstructionSemantics2::BaseSemantics::DispatcherPtr &, const SmtSolverPtr &solver)=0
 Function invoked whenever a complete path is found. More...
 
virtual void nullDeref (IoMode ioMode, const InstructionSemantics2::BaseSemantics::SValuePtr &addr, SgAsmInstruction *)
 Function invoked whenever a null pointer dereference is detected. More...
 

Member Enumeration Documentation

Enumerator
BREAK 

Do not look for more paths.

CONTINUE 

Look for more paths.

Definition at line 99 of file BinaryFeasiblePath.h.

Member Function Documentation

virtual Action Rose::BinaryAnalysis::FeasiblePath::PathProcessor::found ( const FeasiblePath analyzer,
const Partitioner2::CfgPath path,
const std::vector< SymbolicExpr::Ptr > &  pathConditions,
const InstructionSemantics2::BaseSemantics::DispatcherPtr ,
const SmtSolverPtr solver 
)
pure virtual

Function invoked whenever a complete path is found.

virtual void Rose::BinaryAnalysis::FeasiblePath::PathProcessor::nullDeref ( IoMode  ioMode,
const InstructionSemantics2::BaseSemantics::SValuePtr addr,
SgAsmInstruction  
)
inlinevirtual

Function invoked whenever a null pointer dereference is detected.

The ioMode indicates whether the null address was read or written, and the addr is the address that was accessed. The address might not be the constant zero depending on other settings (for example, it could be an unknown value represented as a variable if "may" analysis is used and the comparison is not limited to only constant expressions).

The instruction during which the null dereference occurred is also passed as an argument, but it may be a null pointer in some situations. For instance, the instruction will be null if the dereference occurs when popping the return address from the stack for a function that was called but whose implementation is not present (such as when the inter-procedural depth was too great, the function is a non-linked import, etc.)

Definition at line 123 of file BinaryFeasiblePath.h.


The documentation for this class was generated from the following file: