We compute the set of possible call-targets for each dynamic call, and add them as CALL edges to the graph, based on call.methodFullName, method.name and method.signature, the inheritance hierarchy and the AST of typedecls and methods.
This pass intentionally ignores the vtable mechanism based on BINDING nodes but does check for an existing call edge before adding one. It assumes non-circular inheritance, on pain of endless recursion / stack overflow.
Based on the algorithm by Jang, Dongseok & Tatlock, Zachary & Lerner, Sorin. (2014). SAFEDISPATCH: Securing C++ Virtual Calls from Memory Corruption Attacks. 10.14722/ndss.2014.23287.
- Companion:
- object
Type members
Inherited types
Value members
Concrete methods
Recursively returns all the sub-types of the given type declaration. Does not account for circular hierarchies.
Recursively returns all the sub-types of the given type declaration. Does not account for circular hierarchies.
Inherited methods
- Definition Classes
- ForkJoinParallelCpgPass -> CpgPassBase
- Inherited from:
- ForkJoinParallelCpgPass
Name of the pass. By default it is inferred from the name of the class, override if needed.
Name of the pass. By default it is inferred from the name of the class, override if needed.
- Inherited from:
- CpgPassBase
Wraps runWithBuilder with logging, and swallows raised exceptions. Use with caution -- API is unstable. A return value of -1 indicates failure, otherwise the return value of runWithBuilder is passed through.
Wraps runWithBuilder with logging, and swallows raised exceptions. Use with caution -- API is unstable. A return value of -1 indicates failure, otherwise the return value of runWithBuilder is passed through.
- Inherited from:
- CpgPassBase