Context

#

Learned in this study

#

Things to explore

#

• Spectral graph theory

Tools

#

• Graph/tree theory
• Linear algebra

Overview

#

• Use adjacency matrices to represent a control flow graph, allows you to do operations easily (get children (nodes to which a given node may go) = $V \cdot A$, get parents (nodes from which a given node might come from) = $V \cdot A^T$ (matrix transpose))¹

Basic program structure

#

• Fileset creation and filtering based on masks and regexes
• Initial AST construction for the fileset
• Analysis passes
• Output of diagnosis messages

Object analysis

#

• Track all properties
• Mark all properties that are read/written in each method
• Track function calls
• Track all methods signature (parameter types and return type)

See also

#

• PHP Analyzer

References

#

• http://llvm.org/docs/Passes.html
• http://llvm.org/docs/WritingAnLLVMPass.html

Theory

#

• https://en.wikipedia.org/wiki/Control_flow_graph
• https://en.wikipedia.org/wiki/Loop-invariant_code_motion
• https://en.wikipedia.org/wiki/Dominator_(graph_theory)
• https://www.youtube.com/watch?v=I0KXjN67hkA
• http://www.viva64.com/en/a/0045/

List of analysis

#

• http://www.viva64.com/en/w/