BBLFactory (B2R2) | B2R2

BBLFactory Type

Namespace: B2R2.MiddleEnd.ControlFlowAnalysis
Assembly: B2R2.MiddleEnd.ControlFlowAnalysis.dll
Base Type: obj

Per-function factory for basic blocks. Each BBL is memoized so that we do not create multiple BBLs for the same address. As this is a per-function structure, each different function has its own BBLFactory.

Constructors

Constructor	Description
`BBLFactory(hdl, instrs)` Full Usage: `BBLFactory(hdl, instrs)` Parameters: hdl : `BinHandle` instrs : `InstructionCollection` Returns: `BBLFactory`	hdl : `BinHandle` instrs : `InstructionCollection` Returns: `BBLFactory`
`BBLFactory(hdl, instrs, blkOptimizer)` Full Usage: `BBLFactory(hdl, instrs, blkOptimizer)` Parameters: hdl : `BinHandle` instrs : `InstructionCollection` blkOptimizer : `IIRBlockOptimizable` Returns: `BBLFactory`	hdl : `BinHandle` instrs : `InstructionCollection` blkOptimizer : `IIRBlockOptimizable` Returns: `BBLFactory`

Instance members

Instance member	Description
`this.Contains` Full Usage: `this.Contains` Parameters: ppoint : `ProgramPoint` Returns: `bool`	Check if there is a BBL at the given program point. ppoint : `ProgramPoint` Returns: `bool`
`this.Count` Full Usage: `this.Count` Returns: `int`	Number of BBLs in the factory. Returns: `int`
`this.Find` Full Usage: `this.Find` Parameters: ppoint : `ProgramPoint` Returns: `LowUIRBasicBlock`	Find an existing BBL that contains the given program point. ppoint : `ProgramPoint` Returns: `LowUIRBasicBlock`
`this.PeekBBL` Full Usage: `this.PeekBBL` Parameters: addr : `Addr` Returns: `Result<IInstruction list, IInstruction list>`	Peek the BBL at the given address without caching it. This function is useful when we want to check if an arbitrary address contains a meaningful BBL without affecting the BBLFactory state. addr : `Addr` Returns: `Result<IInstruction list, IInstruction list>`
`this.ScanBBLs` Full Usage: `this.ScanBBLs` Parameters: addrs : `Addr seq` ?allowOverlap : `bool` Returns: `Task<Result<List<ProgramPoint * ProgramPoint>, ErrorCase>>`	Scan all directly reachable intra-procedural BBLs from the given addresses. This function does not handle indirect branches nor call instructions. It always assumes that a call instruction will never return in order to avoid parsing incorrect BBLs. Fall-through BBLs should be considered only after we know that the target function can return (after a no-return analysis), which is not the scope of BBLFactory. In the end, this function returns a list of divided edges, which are pairs of BBL addresses that have been created from a single BBL by splitting it. A BBL can be divided if there is a new control flow target within the BBL. When the `allowOverlap` argument is true, however, we do not split BBLs and allow overlapping BBLs. This is useful when we analyze EVM binaries, for instance. addrs : `Addr seq` ?allowOverlap : `bool` Returns: `Task<Result<List<ProgramPoint * ProgramPoint>, ErrorCase>>`
`this.TryFind` Full Usage: `this.TryFind` Parameters: ppoint : `ProgramPoint` Returns: `Result<LowUIRBasicBlock, ErrorCase>`	Find an existing BBL that is located at the given program point. If there is no such BBL, then this function will return an error. ppoint : `ProgramPoint` Returns: `Result<LowUIRBasicBlock, ErrorCase>`