package org.aspectj.apache.bcel.verifier.structurals;
/* ====================================================================
* The Apache Software License, Version 1.1
*
* Copyright (c) 2001 The Apache Software Foundation. All rights
* reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. The end-user documentation included with the redistribution,
* if any, must include the following acknowledgment:
* "This product includes software developed by the
* Apache Software Foundation (http://www.apache.org/)."
* Alternately, this acknowledgment may appear in the software itself,
* if and wherever such third-party acknowledgments normally appear.
*
* 4. The names "Apache" and "Apache Software Foundation" and
* "Apache BCEL" must not be used to endorse or promote products
* derived from this software without prior written permission. For
* written permission, please contact apache@apache.org.
*
* 5. Products derived from this software may not be called "Apache",
* "Apache BCEL", nor may "Apache" appear in their name, without
* prior written permission of the Apache Software Foundation.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
* USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
* OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
* ====================================================================
*
* This software consists of voluntary contributions made by many
* individuals on behalf of the Apache Software Foundation. For more
* information on the Apache Software Foundation, please see
* .
*/
import java.util.ArrayList;
import java.util.HashMap;
import java.util.Hashtable;
import org.aspectj.apache.bcel.Constants;
import org.aspectj.apache.bcel.generic.Instruction;
import org.aspectj.apache.bcel.generic.InstructionBranch;
import org.aspectj.apache.bcel.generic.InstructionHandle;
import org.aspectj.apache.bcel.generic.InstructionSelect;
import org.aspectj.apache.bcel.generic.MethodGen;
import org.aspectj.apache.bcel.generic.RET;
import org.aspectj.apache.bcel.verifier.InstructionWalker;
import org.aspectj.apache.bcel.verifier.exc.AssertionViolatedException;
import org.aspectj.apache.bcel.verifier.exc.StructuralCodeConstraintException;
/**
* This class represents a control flow graph of a method.
*
* @version $Id: ControlFlowGraph.java,v 1.4 2009/09/09 19:56:20 aclement Exp $
* @author Enver Haase
*/
public class ControlFlowGraph {
/**
* Objects of this class represent a node in a ControlFlowGraph. These nodes are instructions, not basic blocks.
*/
private class InstructionContextImpl implements InstructionContext {
/**
* The TAG field is here for external temporary flagging, such as graph colouring.
*
* @see #getTag()
* @see #setTag(int)
*/
private int TAG;
/**
* The InstructionHandle this InstructionContext is wrapped around.
*/
private final InstructionHandle instruction;
/**
* The 'incoming' execution Frames.
*/
private final HashMap inFrames; // key: the last-executed JSR
/**
* The 'outgoing' execution Frames.
*/
private final HashMap outFrames; // key: the last-executed JSR
/**
* The 'execution predecessors' - a list of type InstructionContext of those instances that have been execute()d before in
* that order.
*/
private ArrayList executionPredecessors = null; // Type: InstructionContext
/**
* Creates an InstructionHandleImpl object from an InstructionHandle. Creation of one per InstructionHandle suffices. Don't
* create more.
*/
public InstructionContextImpl(InstructionHandle inst) {
if (inst == null) {
throw new AssertionViolatedException("Cannot instantiate InstructionContextImpl from NULL.");
}
instruction = inst;
inFrames = new java.util.HashMap();
outFrames = new java.util.HashMap();
}
/* Satisfies InstructionContext.getTag(). */
public int getTag() {
return TAG;
}
/* Satisfies InstructionContext.setTag(int). */
public void setTag(int tag) {
TAG = tag;
}
/**
* Returns the exception handlers of this instruction.
*/
public ExceptionHandler[] getExceptionHandlers() {
return exceptionhandlers.getExceptionHandlers(getInstruction());
}
/**
* Returns a clone of the "outgoing" frame situation with respect to the given ExecutionChain.
*/
public Frame getOutFrame(ArrayList execChain) {
executionPredecessors = execChain;
Frame org;
InstructionContext jsr = lastExecutionJSR();
org = outFrames.get(jsr);
if (org == null) {
throw new AssertionViolatedException("outFrame not set! This:\n" + this + "\nExecutionChain: "
+ getExecutionChain() + "\nOutFrames: '" + outFrames + "'.");
}
return org.getClone();
}
/**
* "Merges in" (vmspec2, page 146) the "incoming" frame situation; executes the instructions symbolically and therefore
* calculates the "outgoing" frame situation. Returns: True iff the "incoming" frame situation changed after merging with
* "inFrame". The execPreds ArrayList must contain the InstructionContext objects executed so far in the correct order. This
* is just one execution path [out of many]. This is needed to correctly "merge" in the special case of a RET's successor.
* The InstConstraintVisitor and ExecutionVisitor instances must be set up correctly.
*
* @return true - if and only if the "outgoing" frame situation changed from the one before execute()ing.
*/
public boolean execute(Frame inFrame, ArrayList execPreds, InstConstraintVisitor icv, ExecutionVisitor ev) {
executionPredecessors = (ArrayList) execPreds.clone();
// sanity check
if (lastExecutionJSR() == null && subroutines.subroutineOf(getInstruction()) != subroutines.getTopLevel()) {
throw new AssertionViolatedException("Huh?! Am I '" + this + "' part of a subroutine or not?");
}
if (lastExecutionJSR() != null && subroutines.subroutineOf(getInstruction()) == subroutines.getTopLevel()) {
throw new AssertionViolatedException("Huh?! Am I '" + this + "' part of a subroutine or not?");
}
Frame inF = inFrames.get(lastExecutionJSR());
if (inF == null) {// no incoming frame was set, so set it.
inFrames.put(lastExecutionJSR(), inFrame);
inF = inFrame;
} else {// if there was an "old" inFrame
if (inF.equals(inFrame)) { // shortcut: no need to merge equal frames.
return false;
}
if (!mergeInFrames(inFrame)) {
return false;
}
}
// Now we're sure the inFrame has changed!
// new inFrame is already merged in, see above.
Frame workingFrame = inF.getClone();
try {
// This verifies the InstructionConstraint for the current
// instruction, but does not modify the workingFrame object.
// InstConstraintVisitor icv =
// InstConstraintVisitor.getInstance(VerifierFactory.getVerifier(method_gen.getClassName()));
icv.setFrame(workingFrame);
InstructionWalker.accept(getInstruction().getInstruction(), icv);
} catch (StructuralCodeConstraintException ce) {
ce.extendMessage("", "\nInstructionHandle: " + getInstruction() + "\n");
ce.extendMessage("", "\nExecution Frame:\n" + workingFrame);
extendMessageWithFlow(ce);
throw ce;
}
// This executes the Instruction.
// Therefore the workingFrame object is modified.
// ExecutionVisitor ev = ExecutionVisitor.getInstance(VerifierFactory.getVerifier(method_gen.getClassName()));
ev.setFrame(workingFrame);
InstructionWalker.accept(getInstruction().getInstruction(), ev);
// getInstruction().accept(ExecutionVisitor.withFrame(workingFrame));
outFrames.put(lastExecutionJSR(), workingFrame);
return true; // new inFrame was different from old inFrame so merging them
// yielded a different this.inFrame.
}
/**
* Returns a simple String representation of this InstructionContext.
*/
public String toString() {
// TODO: Put information in the brackets, e.g.
// Is this an ExceptionHandler? Is this a RET? Is this the start of
// a subroutine?
String ret = getInstruction().toString(false) + "\t[InstructionContext]";
return ret;
}
/**
* Does the actual merging (vmspec2, page 146). Returns true IFF this.inFrame was changed in course of merging with inFrame.
*/
private boolean mergeInFrames(Frame inFrame) {
// TODO: Can be performance-improved.
Frame inF = inFrames.get(lastExecutionJSR());
OperandStack oldstack = inF.getStack().getClone();
LocalVariables oldlocals = inF.getLocals().getClone();
try {
inF.getStack().merge(inFrame.getStack());
inF.getLocals().merge(inFrame.getLocals());
} catch (StructuralCodeConstraintException sce) {
extendMessageWithFlow(sce);
throw sce;
}
if (oldstack.equals(inF.getStack()) && oldlocals.equals(inF.getLocals())) {
return false;
} else {
return true;
}
}
/**
* Returns the control flow execution chain. This is built while execute(Frame, ArrayList)-ing the code represented by the
* surrounding ControlFlowGraph.
*/
private String getExecutionChain() {
String s = this.toString();
for (int i = executionPredecessors.size() - 1; i >= 0; i--) {
s = executionPredecessors.get(i) + "\n" + s;
}
return s;
}
/**
* Extends the StructuralCodeConstraintException ("e") object with an at-the-end-extended message. This extended message
* will then reflect the execution flow needed to get to the constraint violation that triggered the throwing of the "e"
* object.
*/
private void extendMessageWithFlow(StructuralCodeConstraintException e) {
String s = "Execution flow:\n";
e.extendMessage("", s + getExecutionChain());
}
/*
* Fulfils the contract of InstructionContext.getInstruction().
*/
public InstructionHandle getInstruction() {
return instruction;
}
/**
* Returns the InstructionContextImpl with an JSR/JSR_W that was last in the ExecutionChain, without a corresponding RET,
* i.e. we were called by this one. Returns null if we were called from the top level.
*/
private InstructionContextImpl lastExecutionJSR() {
int size = executionPredecessors.size();
int retcount = 0;
for (int i = size - 1; i >= 0; i--) {
InstructionContextImpl current = (InstructionContextImpl) executionPredecessors.get(i);
Instruction currentlast = current.getInstruction().getInstruction();
if (currentlast instanceof RET) {
retcount++;
}
if (currentlast.isJsrInstruction()) {
retcount--;
if (retcount == -1) {
return current;
}
}
}
return null;
}
/* Satisfies InstructionContext.getSuccessors(). */
public InstructionContext[] getSuccessors() {
return contextsOf(_getSuccessors());
}
/**
* A utility method that calculates the successors of a given InstructionHandle That means, a RET does have successors as
* defined here. A JsrInstruction has its target as its successor (opposed to its physical successor) as defined here.
*/
// TODO: implement caching!
private InstructionHandle[] _getSuccessors() {
final InstructionHandle[] empty = new InstructionHandle[0];
final InstructionHandle[] single = new InstructionHandle[1];
final InstructionHandle[] pair = new InstructionHandle[2];
Instruction inst = getInstruction().getInstruction();
if (inst instanceof RET) {
Subroutine s = subroutines.subroutineOf(getInstruction());
if (s == null) { // return empty; // RET in dead code. "empty" would be the correct answer, but we know something
// about the surrounding project...
throw new AssertionViolatedException("Asking for successors of a RET in dead code?!");
}
// TODO: remove
throw new AssertionViolatedException("DID YOU REALLY WANT TO ASK FOR RET'S SUCCS?");
/*
* InstructionHandle[] jsrs = s.getEnteringJsrInstructions(); InstructionHandle[] ret = new
* InstructionHandle[jsrs.length]; for (int i=0; i instructionContexts = new Hashtable(); // keys: InstructionHandle, values: InstructionContextImpl
/**
* A Control Flow Graph.
*/
public ControlFlowGraph(MethodGen method_gen) {
subroutines = new Subroutines(method_gen);
exceptionhandlers = new ExceptionHandlers(method_gen);
InstructionHandle[] instructionhandles = method_gen.getInstructionList().getInstructionHandles();
for (int i = 0; i < instructionhandles.length; i++) {
instructionContexts.put(instructionhandles[i], new InstructionContextImpl(instructionhandles[i]));
}
this.method_gen = method_gen;
}
/**
* Returns the InstructionContext of a given instruction.
*/
public InstructionContext contextOf(InstructionHandle inst) {
InstructionContext ic = instructionContexts.get(inst);
if (ic == null) {
throw new AssertionViolatedException("InstructionContext requested for an InstructionHandle that's not known!");
}
return ic;
}
/**
* Returns the InstructionContext[] of a given InstructionHandle[], in a naturally ordered manner.
*/
public InstructionContext[] contextsOf(InstructionHandle[] insts) {
InstructionContext[] ret = new InstructionContext[insts.length];
for (int i = 0; i < insts.length; i++) {
ret[i] = contextOf(insts[i]);
}
return ret;
}
/**
* Returns an InstructionContext[] with all the InstructionContext instances for the method whose control flow is represented by
* this ControlFlowGraph (NOT ORDERED!).
*/
public InstructionContext[] getInstructionContexts() {
InstructionContext[] ret = new InstructionContext[instructionContexts.values().size()];
return instructionContexts.values().toArray(ret);
}
/**
* Returns true, if and only if the said instruction is not reachable; that means, if it not part of this ControlFlowGraph.
*/
public boolean isDead(InstructionHandle i) {
return instructionContexts.containsKey(i);
}
}