taptipalit

AndersenWaveDiff and VarGep Edges

2

Hi, I have been trying to understand how VarGep edges are handled. It looks like a VarGep edge from src --> dst would cause all objects in pts(src) to become...

epoll_ctl can propagate objects containing pointers, but isn't handled

5

`epoll_ctl` accepts an object pointer in the `event.data.ptr` pointer. This object is returned by the `epoll_wait` libc call. This modeling is missing in SVF. I'm attaching the complete test case...

Is there a way to dump all points-to relationships at an arbitrary program statement when using dvf's flow sensitive points-to analysis? For example, in the following code snippet, I want...