About CppCodeAnalyzerJava

[youmizai]

Thanks for you provide tool using Cpp for Cpg. I would like parse java. Just you say CppCodeAnalyzerJava in your markdown, I could not found it. Can you provide correct link？

[for-just-we]

Thanks for you provide tool using Cpp for Cpg. I would like parse java. Just you say CppCodeAnalyzerJava in your markdown, I could not found it. Can you provide correct link？

I have updated the link now, you could visit it. By the way, CppCodeAnalyzerJava is implemented in Java not for parsing Java, it's still used to parse cpp code, it shares the same function as python version CppCodeAnalyzer. The difference is that CppCodeAnalyzerJava works faster 7-8 times than CppCodeAnalyzer. And due to the low efficiency of Antlr, we are working to replace Antlr with clang/llvm API to drive this tool. We are focusing on Cpp code right now.

If you want to parse Java Code, apart from Joern, you may consider cpg and PropertyGraph.

• The cpg tool outputs AST, evaluation order graph(a graph extend CFG to AST node) and AST-level data flow graph. Which is different from statement-level code property graph. Besides, it seems there are no control-dependence graph in cpg.

• I haven't use PropertyGraph tool, but it's said to process CFG, PDG for Java Code.

[Enorsee]

If you want to parse Java Code, apart from Joern, you may consider cpg and PropertyGraph.

• The cpg tool outputs AST, evaluation order graph(a graph extend CFG to AST node) and AST-level data flow graph. Which is different from statement-level code property graph. Besides, it seems there are no control-dependence graph in cpg.
• I haven't use PropertyGraph tool, but it's said to process CFG, PDG for Java Code.

Joern's capabilities appear to be very limited. Specifically, Joern does not support inter-procedural analysis and its dataflow engine produces many chaotic results.

[for-just-we]

If you want to parse Java Code, apart from Joern, you may consider cpg and PropertyGraph.

• The cpg tool outputs AST, evaluation order graph(a graph extend CFG to AST node) and AST-level data flow graph. Which is different from statement-level code property graph. Besides, it seems there are no control-dependence graph in cpg.
• I haven't use PropertyGraph tool, but it's said to process CFG, PDG for Java Code.

Joern's capabilities appear to be very limited. Specifically, Joern does not support inter-procedural analysis and its dataflow engine produces many chaotic results.

cpg seems could do simple inter-procedural analysis in a single file. You could have a try

[yaoyue123]

joern now support inter-procedural analysis https://joern.io/blog/interproc-dataflow-2024/