If you want to use OPAL for the development of static analyes, you can either use the latest release found on Maven Central or just checkout and build the current development snapshot of OPAL found one BitBucket. In general, using the development snapshot; i.e., the
develop branch of OPAL is very safe and gives you access to the latest features, improvements and bug fixes.
Go to BitBucket to checkout OPAL and to read how to compile and deploy it.
The latest release is always found on Maven Central and can therefore added to you project as standard library dependecy.
OPAL is an extensible, Java bytecode processing and analysis library written in Scala 2.12.4. OPAL supports Java 8 Bytecode and has preliminary support for Java 9; OPAL in particular provides support to facilitate the analysis of Java 8 lambda expressions (Invokedynamic instructions). The latest release is 1.0.0, the latest snapshot version is 1.1.0-SNAPSHOT. Both versions are found on Maven central. If you want to use the snapshot version do not forget to add the respective resolver:
resolvers += "Sonatype OSS Snapshots" at "https://oss.sonatype.org/content/repositories/snapshots"
OPAL consists of multiple sub projects and tools which are described in the following.
Contains general datastructure and algorithms particular useful in the context of static analyis. E.g., graph algorithms, such as an implementation of Tarjan's algorithm for finding strongly connected components. The implementations are designed with scalability in mind and should be able to process millions of nodes.
libraryDependencies += "de.opal-project" % "common_2.12" % "1.0.0"
The bytecode toolkit implements a generic infrastructure for parsing Java class files. Additionally, it provides a default representation for Java bytecode that can be used to analyze class files. That representation provides extensive support for pattern matching on Java bytecode to facilitate writing basic analyses.
libraryDependencies += "de.opal-project" % "bytecode-representation_2.12" % "1.0.0"
The architecture validation framework facilitates the development of tools for specifying and validating software architectures.
libraryDependencies += "de.opal-project" % "architecture-validation_2.12" % "1.0.0"
The abstract interpretation framework is a highly-customizable framework for the lightweight abstract interpretation of the Java bytecode. The framework was designed with ease of use and customizability in mind.
libraryDependencies += "de.opal-project" % "abstract-interpretation-framework_2.12" % "1.0.0"
Exploring the Abstract Interpretation Framework
To get a good, first idea what the abstract interpretation framework can do, you can use the BugPicker. It enables you to perform some local abstract interpretations. To get good results it is usually necessary to load the JDK and all related libraries.
Find bugs in your Java project using BugPicker.
Disassembles your Java bytecode.