- The work for the non-intruder Arachne part is now mostly done.

This commit is contained in:
ccremers 2004-08-11 21:04:52 +00:00
parent ec8b515218
commit ac174b8130
3 changed files with 155 additions and 106 deletions

View File

@ -18,6 +18,11 @@ static System sys;
static Protocol INTRUDER; // Pointers, to be set by the Init static Protocol INTRUDER; // Pointers, to be set by the Init
static Role I_GOAL; // Same here. static Role I_GOAL; // Same here.
#ifdef DEBUG
static explanation; // Pointer to a string that describes what we just tried to do
static indent; // Integer indicating iteration depth 0..
#endif
struct goalstruct struct goalstruct
{ {
int run; int run;
@ -133,12 +138,95 @@ iterate_role_sends (int (*func) ())
return 1; return 1;
} }
//! Generates a new intruder goal, yields runid //! Generates a new intruder goal, iterates
/**
* Sloppy, does not unify term but hardcodes it into the stuff.
*/
int int
add_intruder_goal (Term t) add_intruder_goal (Goal goal)
{ {
int run;
int flag;
Roledef rd;
roleInstance (sys, INTRUDER, I_GOAL, NULL); roleInstance (sys, INTRUDER, I_GOAL, NULL);
return (sys->maxruns - 1); run = sys->maxruns - 1;
goal.rd->bind_run = run;
goal.rd->bind_index = 0;
rd = sys->runs[run].start;
termDelete (rd->message);
rd->message = goal.rd->message;
#ifdef DEBUG
explanation = "Adding intruder goal";
#endif
flag = iterate ();
roleInstanceDestroy (sys); // destroy the created run
goal.rd->bind_run = INVALID;
return flag;
}
//! Bind a goal to an existing regular run, if possible
int
bind_existing_run (const Goal goal, const Protocol p, const Role r,
const int index)
{
int run, flag;
flag = 1;
for (run = 0; run < sys->maxruns; run++)
{
if (sys->runs[run].protocol == p && sys->runs[run].role == r)
{
int i;
int old_length;
Roledef rd;
// find roledef entry
rd = sys->runs[run].start;
for (i = 0; i < index; i++)
rd = rd->next;
// mgu and iterate
old_length = sys->runs[run].length;
if (index >= old_length)
sys->runs[run].length = index + 1;
#ifdef DEBUG
explanation = "Bind existing run";
#endif
flag =
flag & termMguInTerm (goal.rd->message, rd->message, mgu_iterate);
sys->runs[run].length = old_length;
}
}
return flag;
}
//! Bind a goal to a new run
int
bind_new_run (const Goal goal, const Protocol p, const Role r,
const int index)
{
int run;
int flag;
Roledef rd;
roleInstance (sys, p, r, NULL);
run = sys->maxruns-1;
sys->runs[run].length = index+1;
goal.rd->bind_run = run;
goal.rd->bind_index = index;
rd = roledef_shift (sys->runs[run].start, index);
#ifdef DEBUG
explanation = "Bind new run";
#endif
iterate ();
goal.rd->bind_run = INVALID;
roleInstanceDestroy (sys);
return flag;
} }
//------------------------------------------------------------------------ //------------------------------------------------------------------------
@ -181,67 +269,6 @@ select_goal ()
return goal; return goal;
} }
//! Bind a goal to an existing regular run, if possible
int
bind_existing_run (const Goal goal, const Protocol p, const Role r,
const int index)
{
int run, flag;
flag = 1;
for (run = 0; run < sys->maxruns; run++)
{
if (sys->runs[run].protocol == p && sys->runs[run].role == r)
{
int i;
int old_length;
Roledef rd;
// find roledef entry
rd = sys->runs[run].start;
for (i = 0; i < index; i++)
rd = rd->next;
// mgu and iterate
old_length = sys->runs[run].length;
if (index >= old_length)
sys->runs[run].length = index + 1;
flag =
flag & termMguInTerm (goal.rd->message, rd->message, mgu_iterate);
sys->runs[run].length = old_length;
}
}
return flag;
}
//! Bind a goal to a new run
int
bind_new_run (const Goal goal, const Protocol p, const Role r,
const int index)
{
int run;
int flag;
Roledef rd;
roleInstance (sys, p, r, NULL);
run = sys->maxruns-1;
sys->runs[run].length = index+1;
goal.rd->bind_run = run;
goal.rd->bind_index = index;
rd = roledef_shift (sys->runs[run].start, index);
// Possibly double recursion (overkill) because of interm construct. Find a way to maintain this over instances/
/**
*@todo We should have the roleInstance carry over any instantiated vars from the roledef, and then undo the instatiations on the original.
* Then this could simply iterate, which is much better.
*/
flag = termMguInTerm (goal.rd->message, rd->message, mgu_iterate);
goal.rd->bind_run = INVALID;
roleInstanceDestroy (sys);
return flag;
}
//! Bind a regular goal //! Bind a regular goal
int int
bind_goal_regular (const Goal goal) bind_goal_regular (const Goal goal)
@ -258,10 +285,15 @@ bind_goal_regular (const Goal goal)
/** /**
* Two options; as this, it is from an existing run, * Two options; as this, it is from an existing run,
* or from a new one. * or from a new one.
*
* Note that we only bind to regular runs here
*/ */
int flag; int flag;
termlistSubstReset (substlist); // undo, we don't really need that if (p == INTRUDER)
{
return 1; // don't abort scans
}
flag = bind_existing_run (goal, p, r, index); flag = bind_existing_run (goal, p, r, index);
if (flag) if (flag)
{ {
@ -279,15 +311,7 @@ bind_goal_regular (const Goal goal)
// Bind to an intruder node? // Bind to an intruder node?
if (flag) if (flag)
{ {
int run; add_intruder_goal (goal); // creates a new run
goal.rd->bind_run = add_intruder_goal (goal.rd->message); // creates a new run
goal.rd->bind_index = 0; // such a run only has a simple read;
flag = iterate ();
roleInstanceDestroy (sys); // destroy the created run
goal.rd->bind_run = INVALID;
} }
return flag; return flag;
} }
@ -331,20 +355,31 @@ prune ()
int int
iterate () iterate ()
{ {
int flag;
Goal goal; Goal goal;
/** flag = 1;
* Possibly prune this state #ifdef DEBUG
*/ indent++;
#endif
if (prune ()) if (prune ())
return 0; {
/** /**
* Not pruned: count * Not pruned: count
*/ */
sys->states = statesIncrease (sys->states); sys->states = statesIncrease (sys->states);
#ifdef DEBUG
if (explanation != NULL)
{
int i;
for (i = 0; i < indent; i++)
eprintf (" ");
eprintf ("%s\n", explanation);
explanation = NULL;
}
#endif
/** /**
* Check whether its a final state (i.e. all goals bound) * Check whether its a final state (i.e. all goals bound)
@ -356,16 +391,21 @@ iterate ()
/* /*
* all goals bound, check for property * all goals bound, check for property
*/ */
return 1; //!@todo Property check in Arachne.
} }
else else
{ {
/* /*
* bind this goal in all possible ways and iterate * bind this goal in all possible ways and iterate
*/ */
return bind_goal (goal); flag = bind_goal (goal);
} }
} }
#ifdef DEBUG
indent--;
#endif
return flag;
}
//! Main code for Arachne //! Main code for Arachne
/** /**
@ -377,6 +417,10 @@ arachne ()
/* /*
* set up claim role(s) * set up claim role(s)
*/ */
#ifdef DEBUG
explanation = NULL;
indent = -1;
#endif
/* /*
* iterate * iterate

View File

@ -596,12 +596,13 @@ inverseKey (Termlist inverses, Term key)
*\sa termlistLocal() *\sa termlistLocal()
*/ */
Term Term
termLocal (const Term t, Termlist fromlist, Termlist tolist, termLocal (Term t, Termlist fromlist, Termlist tolist,
const Termlist locals, const int runid) const Termlist locals, const int runid)
{ {
if (t == NULL) if (t == NULL)
return NULL; return NULL;
deVar (t); // remove any instantiated variables from the term.
if (realTermLeaf (t)) if (realTermLeaf (t))
{ {
while (fromlist != NULL && tolist != NULL) while (fromlist != NULL && tolist != NULL)

View File

@ -1,3 +1,7 @@
- roleInstance should determine whether any role variables (e.g. role names,
received values) are already instantiated. These should be copied and
replaced by their substitution values. Then, still in roleInstance, the role
variables should be reset.
- Constraint logic now also has no checks for when a run is done by the - Constraint logic now also has no checks for when a run is done by the
intruder (which should be excluded). intruder (which should be excluded).
- Fix constants in intruder knowledge. Auto add single one of each type, - Fix constants in intruder knowledge. Auto add single one of each type,