package frama-c
Install
Dune Dependency
Authors
-
MMichele Alberti
-
TThibaud Antignac
-
GGergö Barany
-
PPatrick Baudin
-
NNicolas Bellec
-
TThibaut Benjamin
-
AAllan Blanchard
-
LLionel Blatter
-
FFrançois Bobot
-
RRichard Bonichon
-
VVincent Botbol
-
QQuentin Bouillaguet
-
DDavid Bühler
-
ZZakaria Chihani
-
LLoïc Correnson
-
JJulien Crétin
-
PPascal Cuoq
-
ZZaynah Dargaye
-
BBasile Desloges
-
JJean-Christophe Filliâtre
-
PPhilippe Herrmann
-
MMaxime Jacquemin
-
FFlorent Kirchner
-
AAlexander Kogtenkov
-
RRemi Lazarini
-
TTristan Le Gall
-
JJean-Christophe Léchenet
-
MMatthieu Lemerre
-
DDara Ly
-
DDavid Maison
-
CClaude Marché
-
AAndré Maroneze
-
TThibault Martin
-
FFonenantsoa Maurica
-
MMelody Méaulle
-
BBenjamin Monate
-
YYannick Moy
-
PPierre Nigron
-
AAnne Pacalet
-
VValentin Perrelle
-
GGuillaume Petiot
-
DDario Pinto
-
VVirgile Prevosto
-
AArmand Puccetti
-
FFélix Ridoux
-
VVirgile Robles
-
JJan Rochel
-
MMuriel Roger
-
JJulien Signoles
-
NNicolas Stouls
-
KKostyantyn Vorobyov
-
BBoris Yakobowski
Maintainers
Sources
sha256=d2fbb3b8d0ff83945872e9e6fa258e934a706360e698dae3b4d5f971addf7493
doc/frama-c-alias.core/Alias/API/Abstract_state/index.html
Module API.Abstract_state
Source
Type denothing an abstract state of the analysis. It is a graph containing all aliases and points-to information.
set of lvals which can be used to refered to the given vertex Example graph: a
→ -t→ c
The lvals corresponding to the rightmost vertex are c, b.t, a->t
:
- c: simply refers to a variable associated with the vertex.
- b.t: starting from the second vertex one can follow a field-edge labelled "t" to come upon the rightmost vertex.
- a->t: Following a pointer edge from the leftmost vertex one obtains "*a". Following the "t" field-edge one arrives at the rightmost vertex, corresponding to "( *a ).t" or "a->t".
pretty printer; debug=true prints the graph, debug = false only prints aliased variables
finds the vertex corresponding to a lval.
Note: You probably want to use alias_lvals
instead of this function. Combining find_vertex
with get_lval_set
, this function yields all the different ways the vertex containing the given lval can be referred to. Example: a
→ ,c If "a" points to "b", then the vertex containing "b" can be referred to not only by "b" but also by "c" or "*a". Does not raise an exception but returns an empty set if the lval is not in the graph.
all the variables that are aliases of the given lval:
- variables sharing an equivalence class (or: vertex) with
lv
- variables from a neighbouring vertex, i.e. a vertex that shares a successor with the vertex of
lv
.
Example: a,b
→ c
← d
← The aliases of "a" are a,b,d
:
- "b" shares a vertex with "a"
- "d" is in a neighbouring vertex, pointing to "c" as does
a,b
Yields all lvals that are an alias of a given lval lv
. This includes:
- variables sharing an equivalence class (or: vertex) with
lv
- variables from a neighbouring vertex, i.e. a vertex that shares a successor with the vertex of
lv
. - lvals reconstructed from the variables from the two previous sets.
Example: a,b
→ c
← d
← The aliases of "a" are a,b,d,*e
:
- "b" shares a vertex with "a"
- "d" is in a neighbouring vertex, as it shares a successor with
a,b
- *e is obtained by following backwards the pointer edge from
d
to .
the set of all variables to which the given variable may point.
the set of all lvals to which the given variable may point including reconstructed lvals such as *p, a.t, c->s. For some pointer p it will always include *p.
all the alias sets of a given state Example: a,b
→ c
← d
← ,f The aliases sets are {a,b,d
, ,f
}
all the alias sets of a given state, including reconstructed lvals Example: a,b
→ c
← d
← ,f The aliases sets are {a,b,d,*e,*f
, ,f
}
alias_lvals, then recursively finds other sets of lvals. We have the property (if lval lv
is in abstract state x
) : List.hd (find_transitive_closure lv x) = (find_vertex lv x, find_aliases lv x). Only follows pointer edges, not field edges.