- tools/SRCSNKA/srcsnka.cpp
- Code compiled into executable binary which contains LLVM main function.
- lib/SABER/PathChecker.cpp
- Source code that finds all paths from Source to Sink.
- include/SABER/PathChecker.h
- Declare the PathChecker class that inherits from SrcSnkDDA.
- LLVM 13.0.0
- z3 4.8.8
- citr 10
git clone https://github.com/SCVMON/SCVMON-SVF.git
sudo apt install cmake gcc g++ libtinfo-dev libz-dev zip wget
./build.sh. ./setup.sh
srcsnka ${single_llvm_ir_file} --source-file=${source_file} --sink-file=${sink_file} --include-file=${include_file} --add-edge-file=${add_edge_file} -stat=false --debug->- All files must conform to the indentation rules.
- Find LLVM IR of the Source variables and describe it in a regex format.
- In the case of Source, it is often a member variable of a structure or class, so it cannot be expressed as a single IR.
- Therefore, all IRs that refer to the member variable must be found.
- In most cases, getelementptr command is used.
- e.g.
{} = getelementptr inbounds %class.AP_InertialSensor, %class.AP_InertialSensor* %this, i64 0, i32 11, i64 {}
- Find the LLVM IR of the Sinks and describe it in regex format
- In the case of sink, since only a specific line of the source code is considered a sink, the function name has to be provided.
- Find the IR in a specific function and add it as a sink
- e.g.
Function : _ZN20AP_MotorsMulticopter13output_to_pwmEf %conv15 = fptosi float %pwm_output.0 to i162
- Describe the nodes that must be included in the result for debugging.
- After execution of source-sink analysis, debug logs are printed, whether the corresponding nodes are included in the result.
- Description in the same format as the source file.
- e.g.
%conv15 = fptosi float %pwm_output.0 to i16 ret i16 %conv15
- Additional edge information to be connected in DFG.
- Support only new edges from Store nodes to Load nodes.
- Store nodes are described in sink file format
- Load nodes are described in source file format
- Many-to-many connections are possible.
- e.g.
Store Function _ZN6AC_PID10update_allEffb store float %target, float* %_target, align 4 Function _ZN6AC_PID10update_allEffb store float %add, float* %_target10, align 4 Load {} = getelementptr inbounds %class.AC_PID, %class.AC_PID* %this, i64 0, i32 12