CBMC
java_object_factoryt Class Reference
+ Collaboration diagram for java_object_factoryt:

Public Member Functions

 java_object_factoryt (const source_locationt &loc, const java_object_factory_parameterst _object_factory_parameters, symbol_table_baset &_symbol_table, const select_pointer_typet &pointer_type_selector, message_handlert &log)
 
bool gen_nondet_enum_init (code_blockt &assignments, const exprt &expr, const java_class_typet &java_class_type, const source_locationt &location)
 We nondet-initialize enums to be equal to one of the constants defined for their type: int i = nondet(int); assume(0 < = i < $VALUES.length); expr = $VALUES[i]; where $VALUES is a variable generated by the Java compiler and which gives the possible values of a particular enum subtype (this is the same array that is returned by Enum.values()). More...
 
void gen_nondet_init (code_blockt &assignments, const exprt &expr, bool is_sub, bool skip_classid, lifetimet lifetime, const std::optional< typet > &override_type, size_t depth, update_in_placet, const source_locationt &location)
 Initializes a primitive-typed or reference-typed object tree rooted at expr, allocating child objects as necessary and nondet-initializing their members, or if MUST_UPDATE_IN_PLACE is set, re-initializing already-allocated objects. More...
 
void add_created_symbol (const symbolt &symbol)
 
void declare_created_symbols (code_blockt &init_code)
 

Private Member Functions

void gen_pointer_target_init (code_blockt &assignments, const exprt &expr, const typet &target_type, lifetimet lifetime, size_t depth, update_in_placet update_in_place, const source_locationt &location)
 Initializes the pointer-typed lvalue expression expr to point to an object of type target_type, recursively nondet-initializing the members of that object. More...
 
void gen_nondet_pointer_init (code_blockt &assignments, const exprt &expr, lifetimet lifetime, const pointer_typet &pointer_type, size_t depth, const update_in_placet &update_in_place, const source_locationt &location)
 Initializes a pointer expr of type pointer_type to a primitive-typed value or an object tree. More...
 
void gen_nondet_struct_init (code_blockt &assignments, const exprt &expr, bool is_sub, bool skip_classid, lifetimet lifetime, const struct_typet &struct_type, size_t depth, const update_in_placet &update_in_place, const source_locationt &location)
 Initializes an object tree rooted at expr, allocating child objects as necessary and nondet-initializes their members, or if MUST_UPDATE_IN_PLACE is set, re-initializes already-allocated objects. More...
 
symbol_exprt gen_nondet_subtype_pointer_init (code_blockt &assignments, lifetimet lifetime, const pointer_typet &substitute_pointer_type, size_t depth, const source_locationt &location)
 Generate codet assignments to initalize the selected concrete type. More...
 
code_blockt assign_element (const exprt &element, update_in_placet update_in_place, const typet &element_type, size_t depth, const source_locationt &location)
 Generate codet for assigning an individual element inside the array. More...
 

Private Attributes

const java_object_factory_parameterst object_factory_parameters
 
std::unordered_set< irep_idtrecursion_set
 This is employed in conjunction with the depth above. More...
 
generic_parameter_specialization_mapt generic_parameter_specialization_map
 Every time the non-det generator visits a type and the type is generic (either a struct or a pointer), the following map is used to store and look up the concrete types of the generic parameters in the current scope. More...
 
symbol_table_basetsymbol_table
 The symbol table. More...
 
const select_pointer_typetpointer_type_selector
 Resolves pointer types potentially using some heuristics, for example to replace pointers to interface types with pointers to concrete implementations. More...
 
allocate_objectst allocate_objects
 
messaget log
 Log for reporting warnings and errors in object creation. More...
 

Detailed Description

Definition at line 31 of file java_object_factory.cpp.

Constructor & Destructor Documentation

◆ java_object_factoryt()

java_object_factoryt::java_object_factoryt ( const source_locationt loc,
const java_object_factory_parameterst  _object_factory_parameters,
symbol_table_baset _symbol_table,
const select_pointer_typet pointer_type_selector,
message_handlert log 
)
inline

Definition at line 73 of file java_object_factory.cpp.

Member Function Documentation

◆ add_created_symbol()

void java_object_factoryt::add_created_symbol ( const symbolt symbol)

Definition at line 1112 of file java_object_factory.cpp.

◆ assign_element()

code_blockt java_object_factoryt::assign_element ( const exprt element,
update_in_placet  update_in_place,
const typet element_type,
size_t  depth,
const source_locationt location 
)
private

Generate codet for assigning an individual element inside the array.

Parameters
elementThe lhs expression that will be assigned the new element.
update_in_placeShould the code allow for the object to updated in place.
element_typeThe type of the element to create.
depthThe depth in the object tree.
locationSource location to use for synthesized code
Returns
Synthesized code using the object factory to create an element of the type and assign it into element.

Definition at line 1227 of file java_object_factory.cpp.

◆ declare_created_symbols()

void java_object_factoryt::declare_created_symbols ( code_blockt init_code)

Definition at line 1117 of file java_object_factory.cpp.

◆ gen_nondet_enum_init()

bool java_object_factoryt::gen_nondet_enum_init ( code_blockt assignments,
const exprt expr,
const java_class_typet java_class_type,
const source_locationt location 
)

We nondet-initialize enums to be equal to one of the constants defined for their type: int i = nondet(int); assume(0 < = i < $VALUES.length); expr = $VALUES[i]; where $VALUES is a variable generated by the Java compiler and which gives the possible values of a particular enum subtype (this is the same array that is returned by Enum.values()).

This may fail if the $VALUES static field is not present. Ensuring that field is in the symbol table when this method may be applicable is the driver program's responsibility: for example, ci_lazy_methods.cpp makes some effort to retain this field when a stub method might refer to it.

Returns
true on success

Definition at line 1470 of file java_object_factory.cpp.

◆ gen_nondet_init()

void java_object_factoryt::gen_nondet_init ( code_blockt assignments,
const exprt expr,
bool  is_sub,
bool  skip_classid,
lifetimet  lifetime,
const std::optional< typet > &  override_type,
size_t  depth,
update_in_placet  update_in_place,
const source_locationt location 
)

Initializes a primitive-typed or reference-typed object tree rooted at expr, allocating child objects as necessary and nondet-initializing their members, or if MUST_UPDATE_IN_PLACE is set, re-initializing already-allocated objects.

Extra constraints might be added to initialized objects, based on options recorded in object_factory_parameters.

Parameters
assignmentsA code block where the initializing assignments will be appended to.
exprLvalue expression to initialize.
is_subIf true, expr is a substructure of a larger object, which in Java necessarily means a base class.
skip_classidIf true, skip initializing @class_identifier.
lifetimeLifetime of the allocated objects (AUTOMATIC_LOCAL, STATIC_GLOBAL, or DYNAMIC)
depthNumber of times that a pointer has been dereferenced from the root of the object tree that we are initializing.
override_typeIf not empty, initialize with override_type instead of expr.type(). Used at the moment for reference arrays, which are implemented as void* arrays but should be init'd as their true type with appropriate casts.
update_in_placeNO_UPDATE_IN_PLACE: initialize expr from scratch MAY_UPDATE_IN_PLACE: generate a runtime nondet branch between the NO_ and MUST_ cases. MUST_UPDATE_IN_PLACE: reinitialize an existing object
locationSource location associated with nondet-initialization.

Definition at line 995 of file java_object_factory.cpp.

◆ gen_nondet_pointer_init()

void java_object_factoryt::gen_nondet_pointer_init ( code_blockt assignments,
const exprt expr,
lifetimet  lifetime,
const pointer_typet pointer_type,
size_t  depth,
const update_in_placet update_in_place,
const source_locationt location 
)
private

Initializes a pointer expr of type pointer_type to a primitive-typed value or an object tree.

It allocates child objects as necessary and nondet-initializes their members, or if MUST_UPDATE_IN_PLACE is set, re-initializes already-allocated objects.

Parameters
assignmentsThe code block we are building with initialization code.
exprPointer-typed lvalue expression to initialize.
lifetimeLifetime of the allocated objects (AUTOMATIC_LOCAL, STATIC_GLOBAL, or DYNAMIC)
depthNumber of times that a pointer has been dereferenced from the root of the object tree that we are initializing.
pointer_typeThe type of the pointer we are initalizing
update_in_place
  • NO_UPDATE_IN_PLACE: initialize expr from scratch
  • MAY_UPDATE_IN_PLACE: generate a runtime nondet branch between the NO_ and MUST_ cases.
  • MUST_UPDATE_IN_PLACE: reinitialize an existing object
locationSource location associated with nondet-initialization.

Definition at line 471 of file java_object_factory.cpp.

◆ gen_nondet_struct_init()

void java_object_factoryt::gen_nondet_struct_init ( code_blockt assignments,
const exprt expr,
bool  is_sub,
bool  skip_classid,
lifetimet  lifetime,
const struct_typet struct_type,
size_t  depth,
const update_in_placet update_in_place,
const source_locationt location 
)
private

Initializes an object tree rooted at expr, allocating child objects as necessary and nondet-initializes their members, or if MUST_UPDATE_IN_PLACE is set, re-initializes already-allocated objects.

After initialization calls validation method expr.cproverNondetInitialize() if it was provided by the user.

Parameters
assignmentsThe code block to append the new instructions to
exprStruct-typed lvalue expression to initialize
is_subIf true, expr is a substructure of a larger object, which in Java necessarily means a base class
skip_classidIf true, skip initializing @class_identifier
lifetimeLifetime of the allocated objects (AUTOMATIC_LOCAL, STATIC_GLOBAL, or DYNAMIC)
struct_typeThe type of the struct we are initializing
depthNumber of times that a pointer has been dereferenced from the root of the object tree that we are initializing
update_in_placeEnum instance with the following meaning. NO_UPDATE_IN_PLACE: initialize expr from scratch MUST_UPDATE_IN_PLACE: reinitialize an existing object MAY_UPDATE_IN_PLACE: invalid input
locationSource location associated with nondet-initialization

Definition at line 761 of file java_object_factory.cpp.

◆ gen_nondet_subtype_pointer_init()

symbol_exprt java_object_factoryt::gen_nondet_subtype_pointer_init ( code_blockt assignments,
lifetimet  lifetime,
const pointer_typet replacement_pointer,
size_t  depth,
const source_locationt location 
)
private

Generate codet assignments to initalize the selected concrete type.

Generated code looks as follows (here A = replacement_pointer.subtype()):

// allocate memory for a new object, depends on lifetime A { ... } tmp_object;

// non-det init all the fields of A A.x = NONDET(...) A.y = NONDET(...)

// assign expr with a suitably casted pointer to new_object A * p = &tmp_object

Parameters
assignmentsA block of code where we append the generated code
lifetimeLifetime of the allocated objects (AUTOMATIC_LOCAL, STATIC_GLOBAL, or DYNAMIC)
replacement_pointerThe type of the pointer we actually want to create
depthNumber of times that a pointer has been dereferenced from the root of the object tree that we are initializing
locationSource location associated with nondet-initialization
Returns
A symbol expression of type replacement_pointer corresponding to a pointer to object tmp_object (see above)

Definition at line 689 of file java_object_factory.cpp.

◆ gen_pointer_target_init()

void java_object_factoryt::gen_pointer_target_init ( code_blockt assignments,
const exprt expr,
const typet target_type,
lifetimet  lifetime,
size_t  depth,
update_in_placet  update_in_place,
const source_locationt location 
)
private

Initializes the pointer-typed lvalue expression expr to point to an object of type target_type, recursively nondet-initializing the members of that object.

Code emitted mainly depends on update_in_place:

When in NO_UPDATE_IN_PLACE mode, the code emitted looks like:

struct new_object obj; // depends on lifetime
<expr> := &obj
// recursive initialization of obj in NO_UPDATE_IN_PLACE mode

When in MUST_UPDATE_IN_PLACE mode, all code is emitted by a recursive call to gen_nondet_init in MUST_UPDATE_IN_PLACE mode, and looks like:

(*<expr>).some_int := NONDET(int)
(*<expr>).some_char := NONDET(char)

It is illegal to call the function with MAY_UPDATE_IN_PLACE.

Parameters
[out]assignmentsA code_blockt where the initialization code will be emitted to.
exprPointer-typed lvalue expression to initialize. The pointed type equals target_type.
target_typeStructure type to initialize, which may not match *expr (for example, expr might be have type void*). It cannot be a pointer to a primitive type because Java does not allow so.
lifetimeLifetime of the allocated objects (AUTOMATIC_LOCAL, STATIC_GLOBAL, or DYNAMIC)
depthNumber of times that a pointer has been dereferenced from the root of the object tree that we are initializing.
update_in_placeNO_UPDATE_IN_PLACE: initialize expr from scratch MUST_UPDATE_IN_PLACE: reinitialize an existing object MAY_UPDATE_IN_PLACE: invalid input
locationSource location associated with nondet-initialization.

Definition at line 189 of file java_object_factory.cpp.

Member Data Documentation

◆ allocate_objects

allocate_objectst java_object_factoryt::allocate_objects
private

Definition at line 59 of file java_object_factory.cpp.

◆ generic_parameter_specialization_map

generic_parameter_specialization_mapt java_object_factoryt::generic_parameter_specialization_map
private

Every time the non-det generator visits a type and the type is generic (either a struct or a pointer), the following map is used to store and look up the concrete types of the generic parameters in the current scope.

Note that not all generic parameters need to have a concrete type, e.g., the method under test is generic. The types are removed from the map when the scope changes. Note that in different depths of the scope the parameters can be specialized with different types so we keep a stack of types for each parameter.

Definition at line 49 of file java_object_factory.cpp.

◆ log

messaget java_object_factoryt::log
private

Log for reporting warnings and errors in object creation.

Definition at line 62 of file java_object_factory.cpp.

◆ object_factory_parameters

const java_object_factory_parameterst java_object_factoryt::object_factory_parameters
private

Definition at line 33 of file java_object_factory.cpp.

◆ pointer_type_selector

const select_pointer_typet& java_object_factoryt::pointer_type_selector
private

Resolves pointer types potentially using some heuristics, for example to replace pointers to interface types with pointers to concrete implementations.

Definition at line 57 of file java_object_factory.cpp.

◆ recursion_set

std::unordered_set<irep_idt> java_object_factoryt::recursion_set
private

This is employed in conjunction with the depth above.

Every time the non-det generator visits a type, the type is added to this set. We forbid the non-det initialization when we see the type for the second time in this set AND the tree depth becomes >= than the maximum value above.

Definition at line 39 of file java_object_factory.cpp.

◆ symbol_table

symbol_table_baset& java_object_factoryt::symbol_table
private

The symbol table.

Definition at line 52 of file java_object_factory.cpp.


The documentation for this class was generated from the following file: