title: Static call graph generation for the Linux kernel
body: <p>I'm looking for a tool to statically generate a call graph of the Linux kernel (for a given kernel configuration). The generated call graph should be "complete", in the sense that all calls are included, including potential indirect ones which we can assume are only done through the use of function pointers in the case of the Linux kernel. </p>
  
  <p>For instance, this could be done by analyzing the function pointer types: this approach would lead to superfluous edges in the graph, but that's ok for me. </p>
  
  <p><a href="http://students.ceid.upatras.gr/~sxanth/ncc/">ncc</a> seems to implement this idea, however I didn't succeed in making it work on the 3.0 kernel. Any other suggestions?   </p>
  
  <p>I'm guessing this approach could also lead to missing edges in cases where function pointer casts are used, so I'd also be interested in knowing whether this is likely in the Linux kernel.</p>
  
  <p>As a side note, there seems to be other tools that are able to do semantic analysis of the source to infer potential pointer values, but AFAICT, none of them are design to be used in a project such as the Linux kernel.</p>
  
  <p>Any help would be much appreciated.</p>