[Soot-list] context sensitive allocation site for specjbb

[Tony Yan]

Eric,

Thanks for the advice!

I have a follow-up question: how does TamiFlex handle reflections in
factory methods?

Here's an example:

Object create(Class c) {
   return c.newInstance();
}

A a = (A) create(A.class);
B b = (B) create(B.class);

What exactly would happen if I use TamiFlex for this sample code? Is
create() specialized and inlined?

Thanks,
Tony

On Tue, Oct 2, 2012 at 5:19 PM, Eric Bodden <eric.bodden at ec-spride.de> wrote:
> Hi Tony.
>
> The best way is to use TamiFlex:
>
> https://code.google.com/p/tamiflex/wiki/DaCapoAndSoot
>
> Eric
>
> On 2 October 2012 12:29, Tony Yan <yan at cse.ohio-state.edu> wrote:
>> Dear Soot Users,
>>
>> I'm developing a static analysis, and it needs to find the context
>> sensitive allocation sites.
>>
>> I run into serious problems when analyzing specjbb since it uses
>> reflection in factory methods to create objects. It is inaccurate to
>> simply annotate reflection sites like Class.newInstance(). What would
>> be the usual solution to handle reflections in factory methods? Could
>> anyone here who has done this before share some experience?
>>
>> Thanks,
>> Tony
>>
>> --
>> Dacong (Tony) Yan
>> Ph.D. Student
>> Computer Science and Engineering
>> The Ohio State University, Columbus
>> http://www.cse.ohio-state.edu/~yan
>> _______________________________________________
>> Soot-list mailing list
>> Soot-list at sable.mcgill.ca
>> http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list
>
>
>
> --
> Eric Bodden, Ph.D., http://sse.ec-spride.de/ http://bodden.de/
> Head of Secure Software Engineering Group at EC SPRIDE
> Tel: +49 6151 16-75422    Fax: +49 6151 16-72051
> Room 3.2.14, Mornewegstr. 30, 64293 Darmstadt