24 std::ostream &out)
const
28 if(gf_entry.second.body_available())
31 out <<
"//// Function: " << gf_entry.first <<
"\n";
35 output(ns, gf_entry.first, gf_entry.second.body, out);
44 std::ostream &out)
const
48 out <<
"**** " << i_it->location_number <<
" " << i_it->source_location()
68 if(gf_entry.second.body_available())
71 output_json(ns, gf_entry.first, gf_entry.second.body);
79 return std::move(result);
92 std::ostringstream out;
96 {
"locationNumber",
json_numbert(std::to_string(i_it->location_number))},
97 {
"sourceLocation",
json_stringt(i_it->source_location().as_string())},
104 return std::move(contents);
111 xmlt program(
"program");
118 {
"body_available", gf_entry.second.body_available() ?
"true" :
"false"}},
121 if(gf_entry.second.body_available())
124 output_xml(ns, gf_entry.first, gf_entry.second.body));
144 {{
"location_number", std::to_string(i_it->location_number)},
145 {
"source_location", i_it->source_location().as_string()}},
149 std::ostringstream out;
151 location.set_attribute(
"instruction", out.str());
156 return function_body;
164 goto_functionst::function_mapt::const_iterator
213 std::set<trace_ptrt, ai_history_baset::compare_historyt>>::value,
214 "begin must return the minimal entry");
215 auto first = working_set.begin();
219 working_set.erase(first);
238 while(!working_set.empty())
243 if(
visit(function_id, p, working_set, goto_program, goto_functions, ns))
255 goto_functionst::function_mapt::const_iterator f_it =
259 fixedpoint(start_trace, f_it->first, f_it->second.body, goto_functions, ns);
274 log.
progress() <<
"ai_baset::visit " << l->location_number <<
" in "
278 if(l->is_function_call())
282 "function calls only have one successor");
286 "function call successor / return location must be the next instruction");
289 function_id, p, working_set, goto_program, goto_functions, ns);
291 else if(l->is_end_function())
295 "The end function instruction should have no successors.");
298 function_id, p, working_set, goto_program, goto_functions, ns);
333 log.
progress() <<
"ai_baset::visit_edge from "
334 << p->current_location()->location_number <<
" to "
335 << to_l->location_number <<
"... ";
339 p->step(to_l, *(
storage->abstract_traces_before(to_l)), caller_history);
347 log.
progress() <<
"gives a new history... ";
351 log.
progress() <<
"merges with existing history... ";
359 statet &new_values = *tmp_state;
362 log.
progress() <<
"applying transformer... ";
363 new_values.
transform(function_id, p, to_function_id, to_p, *
this, ns);
369 bool return_value =
false;
371 merge(new_values, p, to_p) ||
388 log.
debug() <<
"p = ";
389 p->output(log.
debug());
392 log.
debug() <<
"current = ";
396 log.
debug() <<
"to_p = ";
397 to_p->output(log.
debug());
400 log.
debug() <<
"new_values = ";
409 const irep_idt &calling_function_id,
419 log.
progress() <<
"ai_baset::visit_edge_function_call from "
420 << p_call->current_location()->location_number <<
" to "
437 const irep_idt &calling_function_id,
444 locationt l_call = p_call->current_location();
449 log.
progress() <<
"ai_baset::visit_function_call at "
458 const exprt &callee_expression = l_call->call_function();
460 if(callee_expression.
id() == ID_symbol)
462 const irep_idt &callee_function_id =
467 goto_functionst::function_mapt::const_iterator it =
472 "Function " +
id2string(callee_function_id) +
"not in function map");
476 if(callee_fun.body_available())
497 callee_expression.
id() == ID_symbol,
498 "Function pointers and indirect calls must be removed before "
527 log.
progress() <<
"ai_baset::visit_end_function " << function_id
535 const irep_idt &calling_function_id,
545 log.
progress() <<
"ai_recursive_interproceduralt::visit_edge_function_call"
546 <<
" from " << p_call->current_location()->location_number
566 log.
progress() <<
"Handle " << callee_function_id <<
" recursively"
586 l_end->is_end_function(),
587 "The last instruction of a goto_program must be END_FUNCTION");
590 auto traces =
storage->abstract_traces_before(l_end);
592 bool new_data =
false;
599 for(
auto p_end : *traces)
goto_programt::const_targett locationt
virtual bool visit(const irep_idt &function_id, trace_ptrt p, working_sett &working_set, const goto_programt &goto_program, const goto_functionst &goto_functions, const namespacet &ns)
Perform one step of abstract interpretation from trace t Depending on the instruction type it may com...
virtual jsont output_json(const namespacet &ns, const goto_functionst &goto_functions) const
Output the abstract states for the whole program as JSON.
std::unique_ptr< ai_storage_baset > storage
virtual xmlt output_xml(const namespacet &ns, const goto_functionst &goto_functions) const
Output the abstract states for the whole program as XML.
virtual statet & get_state(trace_ptrt p)
Get the state for the given history, creating it with the factory if it doesn't exist.
bool visit_edge(const irep_idt &function_id, trace_ptrt p, const irep_idt &to_function_id, locationt to_l, trace_ptrt caller_history, const namespacet &ns, working_sett &working_set)
virtual void output(const namespacet &ns, const irep_idt &function_id, const goto_programt &goto_program, std::ostream &out) const
Output the abstract states for a single function.
message_handlert & message_handler
virtual bool visit_end_function(const irep_idt &function_id, trace_ptrt p, working_sett &working_set, const goto_programt &goto_program, const goto_functionst &goto_functions, const namespacet &ns)
virtual bool visit_function_call(const irep_idt &function_id, trace_ptrt p_call, working_sett &working_set, const goto_programt &goto_program, const goto_functionst &goto_functions, const namespacet &ns)
trace_ptrt entry_state(const goto_programt &goto_program)
Set the abstract state of the entry location of a single function to the entry state required by the ...
virtual bool visit_edge_function_call(const irep_idt &calling_function_id, trace_ptrt p_call, locationt l_return, const irep_idt &callee_function_id, working_sett &working_set, const goto_programt &callee, const goto_functionst &goto_functions, const namespacet &ns)
virtual void initialize(const irep_idt &function_id, const goto_programt &goto_program)
Initialize all the abstract states for a single function.
virtual bool fixedpoint(trace_ptrt starting_trace, const irep_idt &function_id, const goto_programt &goto_program, const goto_functionst &goto_functions, const namespacet &ns)
Run the fixedpoint algorithm until it reaches a fixed point.
virtual std::unique_ptr< statet > make_temporary_state(const statet &s)
Make a copy of a state.
ai_history_baset::trace_ptrt trace_ptrt
void put_in_working_set(working_sett &working_set, trace_ptrt t)
trace_ptrt get_next(working_sett &working_set)
Get the next location from the work queue.
trace_sett working_sett
The work queue, sorted using the history's ordering operator.
virtual bool merge(const statet &src, trace_ptrt from, trace_ptrt to)
Merge the state src, flowing from tracet from to tracet to, into the state currently stored for trace...
virtual cstate_ptrt abstract_state_before(locationt l) const
Get a copy of the abstract state before the given instruction, without needing to know what kind of d...
std::unique_ptr< ai_history_factory_baset > history_factory
For creating history objects.
virtual void finalize()
Override this to add a cleanup or post-processing step after fixedpoint has run.
The interface offered by a domain, allows code to manipulate domains without knowing their exact type...
virtual bool is_bottom() const =0
virtual void transform(const irep_idt &function_from, trace_ptrt from, const irep_idt &function_to, trace_ptrt to, ai_baset &ai, const namespacet &ns)=0
how function calls are treated: a) there is an edge from each call site to the function head b) there...
virtual void output(std::ostream &, const ai_baset &, const namespacet &) const
virtual void make_entry()=0
Make this domain a reasonable entry-point state.
A history object is an abstraction / representation of the control-flow part of a set of traces.
static const trace_ptrt no_caller_history
bool visit_edge_function_call(const irep_idt &calling_function_id, trace_ptrt p_call, locationt l_return, const irep_idt &callee_function_id, working_sett &working_set, const goto_programt &callee, const goto_functionst &goto_functions, const namespacet &ns) override
dstringt has one field, an unsigned integer no which is an index into a static table of strings.
Base class for all expressions.
A collection of goto functions.
function_mapt function_map
::goto_functiont goto_functiont
static irep_idt entry_point()
Get the identifier of the entry point to a goto model.
A generic container class for the GOTO intermediate representation of one function.
instructionst instructions
The list of instructions in the goto program.
std::ostream & output_instruction(const namespacet &ns, const irep_idt &identifier, std::ostream &out, const instructionst::value_type &instruction) const
Output a single instruction.
std::list< Target > get_successors(Target target) const
Get control-flow successors of a given instruction.
const irep_idt & id() const
jsont & push_back(const jsont &json)
unsigned get_verbosity() const
Class that provides messages with a built-in verbosity 'level'.
mstreamt & progress() const
A namespacet is essentially one or two symbol tables bound together, to allow for symbol lookups in t...
const irep_idt & get_identifier() const
xmlt & new_element(const std::string &key)
#define forall_goto_program_instructions(it, program)
const std::string & id2string(const irep_idt &d)
#define DATA_INVARIANT(CONDITION, REASON)
This condition should be used to document that assumptions that are made on goto_functions,...
#define PRECONDITION(CONDITION)
const symbol_exprt & to_symbol_expr(const exprt &expr)
Cast an exprt to a symbol_exprt.