SVF
SVF copied to clipboard
SVF-tools
Static Value-Flow Analysis Framework for Source Code
Is there a way to dump all points-to relationships at an arbitrary program statement when using dvf's flow sensitive points-to analysis? For example, in the following code snippet, I want...
Hi, I use SVF to construct ICFG and try to analyze the basic blocks of each ICFGNode. SVF-2.4 provides methods such as getBB(), getLLVMFun() to return llvm::BasicBlock and llvm::Function. However,...
I created a class inherited from the class SrcSnkDDA and override the initSrcs() method by looking for the store statements and checking if the source node of the store statement...
We are working on integration of the solver proposed by Ilia Muravev in ["Universal High-Performance CFL-Reachability via Matrix Multiplication"](https://dl.acm.org/doi/10.1145/3735544.3735585) (SOAP 2025). Are there any design principles we should follow? Particularly...
Hello, developers. WPA seems to analyze some parts that are unreachable relative to the entry function, which is very time-consuming. Is there a way to generate only part of the...
I am trying to manually add missing aliases into a node’s points-to set. But when I update the points-to set for one node, the change appears in other nodes as...
全局集合有两个points to分别是（r1，r2）（r2，r3），经过计算交集成了（r1）（r2）（r3）三个内存区域，之后在getMRsForLoad时是这样子的 实际工作机制 在 MRGenerator 基类中,getMRsForLoad 的默认实现非常简单[link to Repo SVF-tools/SVF: svf/include/MSSA/MemRegion.h:316-321]: virtual inline void getMRsForLoad(MRSet& aliasMRs, const NodeBS& cpts, const FunObjVar*) { const MemRegion* mr = getMR(cpts); aliasMRs.insert(mr); } 查看...
I have updated the CallGraph for indirect callee targets as described in https://github.com/SVF-tools/SVF/issues/1762. After updating the callgraph for indirect callees, I made sure to update pag and icfg using builder.updateCallGraph(callgraph)...