Struct ControlFlowAnalyzer 

pub struct ControlFlowAnalyzer;

Control flow analyzer for building and analyzing CFGs.

Implementations

impl ControlFlowAnalyzer

pub fn build_cfg( instructions: &[DecodedInstruction], entry_address: u32, ) -> Result<ControlFlowGraph>

Build a control flow graph from a sequence of instructions.

Algorithm

1. Identify block boundaries: Entry points, branch targets, and instructions after branches
2. Build basic blocks: Group instructions into blocks with single entry/exit
3. Identify edges: Connect blocks based on branch targets and fall-through

Arguments

• instructions - Sequence of decoded PowerPC instructions
• entry_address - Entry address of the function (first instruction address)

Returns

Result<ControlFlowGraph> - Constructed control flow graph

Errors

Returns error if CFG construction fails (invalid addresses, malformed instructions)

Examples

let instructions = vec![/* decoded instructions */];
let cfg = ControlFlowAnalyzer::build_cfg(&instructions, 0x80000000)?;

pub fn detect_loops(cfg: &ControlFlowGraph) -> Vec<Loop>

Detect loops in the control flow graph using depth-first search.

Algorithm

Uses DFS to find back edges, which indicate loops. A back edge is an edge from a node to an ancestor in the DFS tree.

Arguments

• cfg - Control flow graph to analyze

Returns

Vec<Loop> - List of detected loops with header, body, and back edges

Examples

let loops = ControlFlowAnalyzer::detect_loops(&cfg);
for loop_info in loops {
    println!("Loop header: block {}", loop_info.header);
}

pub fn analyze_function_calls(cfg: &ControlFlowGraph) -> Vec<FunctionCall>

Analyze function calls in the control flow graph.

Algorithm

Scans all instructions in all blocks for branch-with-link instructions (bl, bla), which indicate function calls.

Arguments

• cfg - Control flow graph to analyze

Returns

Vec<FunctionCall> - List of function calls with caller, callee, and location

Examples

let calls = ControlFlowAnalyzer::analyze_function_calls(&cfg);
for call in calls {
    println!("Call from block {} to 0x{:08X}", call.caller_block, call.callee_address);
}