Indirect function call

The BasicCallGraph class only lines out the indirect calls(makes the caller

point to external node),

but do not resolves them using alias analysis such as DSA.
I think DSA solve this problem for interested call sites by finding the

corresponding globals(i.e. the functions)

for the callsite DSnode.

Yes, if we want to determine all indirect call(including function pointers in
structs, arrays), we should improve DSA to analyze function pointer, and then
exploit pointing set of function pointer in callgraph analysis. :slight_smile:

Yimin

Various people have done this in the past (a DSA based callgraph
analysis). Try emailing Rob Bocchino. He's done this in the past and
probably can be convinced to brush off that code and make it work with
the current callgraph interface.

Andrew