MDG Usage

How to use the MDG

Given a program under analysis (in the format of bytecode), the following step will first create the MDG for that program and then computes forward dependencies either for a specified query (method for which the dependencies are to be queried) or, if not specified, for all methods in the program as queries. We use a script encompassing the details to demonstrate the usage.

As shown in the following example, the class path for JVM and Soot are given by "MAINCP" and "SOOTCP", respectively. To run this step on command line under Windows environments, the shell script below can be converted into batch script accordingly. When running it in IDEs such as Eclipse, a Run/Debug configuration can be created by picking class paths as exemplified in the script too with corresponding parameters specified.
The primary parameters are explained as follows.

• the first parameter is the option '-wrapTryCatch', indicating that MDG should wrap the entire body of each method with an extraneous try-catch block to capture complete method events. This flag should always be enabled unless the program under analysis does not involve any exception handling or you do not care about any dependencies arsing from exceptional control flows.
• the second parameter is the option "-serializeMDG", for serializing the MDG at the end of the analysis.
• the "-d" option gives the target directory where the instrumented subject will be placed.
• the "-main-class" gives the name of the main class, usually the same as the entry class given by the "-entry:" option.
• the "-process-dir" receives the directory holding classes to be analyzed, including at least the entry class file of the subject. If multiple directories need be processed, you need give multiple "-process-dir" options, each indicating one of those directories.
• other flags such as "-exInterCD", "-intraCD", and "-interCD" allow for flexible customization concerning the construction of the MDG. For safety, these flags should all be set.
• another option, "-ignoreRTECD", should be set only if you don't want to include interprocedural control dependencies due to unhandled runtime exceptions; so, you should not set this option for safe results if you think the program under analysis could possibly throw runtime exceptions unhandled. Note that for static client analysis, this should NEVER be set because statically you do not about runtime conditions thus conservatively assuming that all types of exception-driven dependencies should be included is recommended for sound results.
• to query dependence set for a specific query, use '-query method_name'.
• to query dependence sets of all methods in the program, use '-queryAll'.
• all other parameters and options are to be forwarded to DUAForensics and Soot, just use exactly the same ones as shown is sufficient and recommended.

ver=$1
seed=$2
ROOT=/home/hcai/
subjectloc=/home/hcai/SVNRepos/star-lab/trunk/Subjects/Schedule1/

MAINCP=".:/etc/alternatives/java_sdk/jre/lib/rt.jar:$ROOT/tools/polyglot-1.3.5/lib/polyglot.jar:$ROOT/tools/soot-2.3.0/lib/sootclasses-2.3.0.jar:$ROOT/tools/jasmin-2.3.0/lib/jasminclasses-2.3.0.jar:$ROOT/workspace/DUAForensics/bin:$ROOT/workspace/LocalsBox/bin:$ROOT/workspace/InstrReporters/bin:$ROOT/workspace/mcia/bin:$ROOT/tools/java_cup.jar"

mkdir -p out-MDG
#$ROOT/software/j2re1.4.2_18/lib/rt.jar
SOOTCP=".:$ROOT/software/j2re1.4.2_18/lib/rt.jar:$ROOT/workspace/DUAForensics/bin:$ROOT/workspace/LocalsBox/bin:$ROOT/workspace/InstrReporters/bin:$ROOT/workspace/mcia/bin":$subjectloc/bin/${ver}${seed}:$subjectloc/lib

OUTDIR=$subjectloc/MDGAnalyzed-$ver$seed
mkdir -p $OUTDIR

java -Xmx4600m -ea -cp ${MAINCP} MDG.MdgAnalysis \
	-w -cp ${SOOTCP} \
	-p cg verbose:true,implicit-entry:false -p cg.spark verbose:true,on-fly-cg:true,rta:true \
	-f n -d "$OUTDIR" -brinstr:off -duainstr:off \
	-allowphantom \
	-slicectxinsens \
	-intraCD \
	-queryAll \
	-exInterCD \
	-interCD \
	-main-class ScheduleClass -entry:ScheduleClass \
	-process-dir $subjectloc/bin/${ver}${seed}  \
	1>out-MDG/log-${ver}${seed}.out 2>out-MDG/log-${ver}${seed}.err