Frama-C API - Dataflows
Implementation of data flow analyses over user-supplied domains.
module type FUNCTION_ENV = sig ... endEnvironment relative to the function being processed, and function to create them from Kf.
val function_env : Cil_types.kernel_function -> (module FUNCTION_ENV)module type JOIN_SEMILATTICE = sig ... endBackward dataflow
module type BACKWARD_MONOTONE_PARAMETER = sig ... endStatement-based backward dataflow. Contrary to the forward dataflow, the transfer function cannot differentiate the state before a statement between different predecessors.
module Simple_backward (_ : FUNCTION_ENV) (P : BACKWARD_MONOTONE_PARAMETER) : sig ... endForward dataflow
module type FORWARD_MONOTONE_PARAMETER = sig ... endEdge-based forward dataflow. It is edge-based because the transfer function can differentiate the state after a statement between different successors. In particular, the state can be reduced according to the conditions in if statements.
module Simple_forward (_ : FUNCTION_ENV) (P : FORWARD_MONOTONE_PARAMETER) : sig ... endHelper functions for forward dataflow.
val transfer_if_from_guard : (Cil_types.stmt -> Cil_types.exp -> 'a -> 'a * 'a) -> Cil_types.stmt -> 'a -> (Cil_types.stmt * 'a) listtransfer_if_from_guard implements FORWARD_MONOTONE_PARAMETER.transfer_stmt for the If statement, given a function transfer_guard.
transfer_guard receives a conditional expression, the current statement, and the current state, and must return two states in which the conditional is assumed to be true and false respectively. Returning twice the current state is a valid, albeit imprecise, result.
val transfer_switch_from_guard : (Cil_types.stmt -> Cil_types.exp -> 'a -> 'a * 'a) -> Cil_types.stmt -> 'a -> (Cil_types.stmt * 'a) listSame as transfer_if_from_guard, but for a Switch statement. The same function transfer_guard can be used for transfer_if_from_guard and transfer_switch_from_guard.