[Soot-list] Concrete field nodes exist in field-based points-to analysis in Spark

[Macro Angkor]

Through step-by-step debugging on the building process of method pag,
finally I find the cause. No matter in the field-based or field-sensitive
mode, Spark models an array variable as a VarNode and its elements as a
field ArrayElement. Whenever there exists access to an array element, Spark
would generate FieldRefNode, which in turn leads to Concrete field nodes in
the points-to propagation.

So, does it imply that field-based points-to analysis is not always
field-based?


2013/4/23 Macro Angkor <macro.angkor at gmail.com>

> Hi All,
>
> From my understanding, field-based points-to analysis in Spark groups
> together field reference nodes that share the same field name and have
> compatiable types for bases, and create a global VarNode for each group,
> thus not touching concrete field nodes. However, with the phase option
> "field-based" set to true, Spark's worklist propagator would still
> introduce a lot of concrete field nodes. Anyone can help?
>
> Thanks in advance,
> Michael
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.cs.mcgill.ca/pipermail/soot-list/attachments/20130427/9602e3fb/attachment.html