Open tisble opened 4 months ago
HI @tisble I think there may be some confusion here. The RTA algorithm does not track data flow of objects. It assumes that if it sees a new
expression for some class, then objects of that class may flow to any type-compatible variable. So here, it is correct for RTA to conclude that n1
and n2
each may point to objects of type either C1
or C2
. I would expect a 0-CFA builder to be more precise. Does that make sense?
Hi, I found a case that can help improving Wala. Please see the minimized code example below:
In this example, the concrete type of the first parameter in
foo
should only beOne
as it is only initlialized bynew One()
, but Wala providesOne
andTwo
. The second parameter has similar issue.Wala version: 1.6.4
Code