143dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis//===--- CheckerManager.cpp - Static Analyzer Checker Manager -------------===// 243dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// 343dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// The LLVM Compiler Infrastructure 443dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// 543dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// This file is distributed under the University of Illinois Open Source 643dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// License. See LICENSE.TXT for details. 743dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// 843dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis//===----------------------------------------------------------------------===// 943dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// 1043dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// Defines the Static Analyzer Checker Manager. 1143dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis// 1243dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis//===----------------------------------------------------------------------===// 1343dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis 1443dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis#include "clang/StaticAnalyzer/Core/CheckerManager.h" 15ca804539d908d3a0e8c72a0df5f1f571d29490bbTed Kremenek#include "clang/StaticAnalyzer/Core/Checker.h" 16769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h" 17f540c54701e3eeb34cb619a3a4eb18f1ac70ef2dJordan Rose#include "clang/StaticAnalyzer/Core/PathSensitive/CallEvent.h" 18769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis#include "clang/Analysis/ProgramPoint.h" 199fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis#include "clang/AST/DeclBase.h" 2043dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis 2143dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidisusing namespace clang; 2243dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidisusing namespace ento; 2343dee220252ef0b42c5f8a3bb1eca97f84f2565fArgyrios Kyrtzidis 24d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidisbool CheckerManager::hasPathSensitiveCheckers() const { 25d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis return !StmtCheckers.empty() || 26d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !PreObjCMessageCheckers.empty() || 27d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !PostObjCMessageCheckers.empty() || 2896479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose !PreCallCheckers.empty() || 2996479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose !PostCallCheckers.empty() || 30d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !LocationCheckers.empty() || 31d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !BindCheckers.empty() || 32d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !EndAnalysisCheckers.empty() || 33d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !EndPathCheckers.empty() || 34d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !BranchConditionCheckers.empty() || 35d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !LiveSymbolsCheckers.empty() || 36d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !DeadSymbolsCheckers.empty() || 37d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !RegionChangesCheckers.empty() || 38d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis !EvalAssumeCheckers.empty() || 39dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks !EvalCallCheckers.empty() || 40dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks !InlineCallCheckers.empty(); 41d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis} 42d655ab28fdf7c940d3f79f8f287954d7f76e0977Argyrios Kyrtzidis 43deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidisvoid CheckerManager::finishedCheckerRegistration() { 44deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis#ifndef NDEBUG 45deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis // Make sure that for every event that has listeners, there is at least 46deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis // one dispatcher registered for it. 47deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis for (llvm::DenseMap<EventTag, EventInfo>::iterator 48deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis I = Events.begin(), E = Events.end(); I != E; ++I) 49deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis assert(I->second.HasDispatcher && "No dispatcher registered for an event"); 50deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis#endif 51deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis} 52deb6447d0029bdb122397fafb5fa2a4e76f2e555Argyrios Kyrtzidis 53769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 54769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis// Functions for running checkers for AST traversing.. 55769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 56769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 579fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidisvoid CheckerManager::runCheckersOnASTDecl(const Decl *D, AnalysisManager& mgr, 589fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis BugReporter &BR) { 599fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis assert(D); 609fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 619fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis unsigned DeclKind = D->getKind(); 629fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis CachedDeclCheckers *checkers = 0; 639fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis CachedDeclCheckersMapTy::iterator CCI = CachedDeclCheckersMap.find(DeclKind); 649fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis if (CCI != CachedDeclCheckersMap.end()) { 659fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis checkers = &(CCI->second); 669fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis } else { 679fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis // Find the checkers that should run for this Decl and cache them. 689fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis checkers = &CachedDeclCheckersMap[DeclKind]; 699fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis for (unsigned i = 0, e = DeclCheckers.size(); i != e; ++i) { 709fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis DeclCheckerInfo &info = DeclCheckers[i]; 719fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis if (info.IsForDeclFn(D)) 72769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis checkers->push_back(info.CheckFn); 739fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis } 749fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis } 759fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 769fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis assert(checkers); 779fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis for (CachedDeclCheckers::iterator 78769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis I = checkers->begin(), E = checkers->end(); I != E; ++I) 79769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis (*I)(D, mgr, BR); 809fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis} 819fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 829fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidisvoid CheckerManager::runCheckersOnASTBody(const Decl *D, AnalysisManager& mgr, 839fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis BugReporter &BR) { 849fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis assert(D && D->hasBody()); 859fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 86769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis for (unsigned i = 0, e = BodyCheckers.size(); i != e; ++i) 87769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis BodyCheckers[i](D, mgr, BR); 88769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 89769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 90769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 91769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis// Functions for running checkers for path-sensitive checking. 92769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 93769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 94769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidistemplate <typename CHECK_CTX> 95c2e0db82139c70c0eac9d5c165b6bf3250af5bedArgyrios Kyrtzidisstatic void expandGraphWithCheckers(CHECK_CTX checkCtx, 96c2e0db82139c70c0eac9d5c165b6bf3250af5bedArgyrios Kyrtzidis ExplodedNodeSet &Dst, 97cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis const ExplodedNodeSet &Src) { 988ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks const NodeBuilderContext &BldrCtx = checkCtx.Eng.getBuilderContext(); 998ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks if (Src.empty()) 1008ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks return; 101769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 102e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis typename CHECK_CTX::CheckersTy::const_iterator 103e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis I = checkCtx.checkers_begin(), E = checkCtx.checkers_end(); 104e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis if (I == E) { 105769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis Dst.insert(Src); 106769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis return; 107769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 108769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 109cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis ExplodedNodeSet Tmp1, Tmp2; 110cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis const ExplodedNodeSet *PrevSet = &Src; 111769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 112e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis for (; I != E; ++I) { 113769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExplodedNodeSet *CurrSet = 0; 114769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis if (I+1 == E) 115769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CurrSet = &Dst; 116769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis else { 117cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis CurrSet = (PrevSet == &Tmp1) ? &Tmp2 : &Tmp1; 118769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CurrSet->clear(); 119769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 120769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 1218ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder B(*PrevSet, *CurrSet, BldrCtx); 122769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis for (ExplodedNodeSet::iterator NI = PrevSet->begin(), NE = PrevSet->end(); 1238ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NI != NE; ++NI) { 1248ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks checkCtx.runChecker(*I, B, *NI); 1258ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks } 1268ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks 1278ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks // If all the produced transitions are sinks, stop. 1288ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks if (CurrSet->empty()) 1298ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks return; 1308ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks 131769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis // Update which NodeSet is the current one. 132769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis PrevSet = CurrSet; 1339fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis } 1349fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis} 1359fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 136769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisnamespace { 137769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis struct CheckStmtContext { 1385f9e272e632e951b1efe824cd16acb4d96077930Chris Lattner typedef SmallVectorImpl<CheckerManager::CheckStmtFunc> CheckersTy; 139769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis bool IsPreVisit; 140769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis const CheckersTy &Checkers; 141769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis const Stmt *S; 142769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExprEngine &Eng; 14357c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool WasInlined; 144769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 145e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 146e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 147e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 148769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CheckStmtContext(bool isPreVisit, const CheckersTy &checkers, 149514f2c9dcb9e04b52929c5b141a6fe88bd68b33fTed Kremenek const Stmt *s, ExprEngine &eng, bool wasInlined = false) 150514f2c9dcb9e04b52929c5b141a6fe88bd68b33fTed Kremenek : IsPreVisit(isPreVisit), Checkers(checkers), S(s), Eng(eng), 15157c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose WasInlined(wasInlined) {} 152769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 153769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis void runChecker(CheckerManager::CheckStmtFunc checkFn, 1548ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 155769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis // FIXME: Remove respondsToCallback from CheckerContext; 1563f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks ProgramPoint::Kind K = IsPreVisit ? ProgramPoint::PreStmtKind : 1573f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks ProgramPoint::PostStmtKind; 1583f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks const ProgramPoint &L = ProgramPoint::getProgramPoint(S, K, 1593f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks Pred->getLocationContext(), checkFn.Checker); 16057c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose CheckerContext C(Bldr, Eng, Pred, L, WasInlined); 161769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis checkFn(S, C); 162769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 163769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis }; 164769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 165769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 166769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis/// \brief Run checkers for visiting Stmts. 167769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::runCheckersForStmt(bool isPreVisit, 168769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExplodedNodeSet &Dst, 169cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis const ExplodedNodeSet &Src, 170769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis const Stmt *S, 171514f2c9dcb9e04b52929c5b141a6fe88bd68b33fTed Kremenek ExprEngine &Eng, 17257c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool WasInlined) { 173769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CheckStmtContext C(isPreVisit, *getCachedStmtCheckersFor(S, isPreVisit), 17457c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose S, Eng, WasInlined); 175c2e0db82139c70c0eac9d5c165b6bf3250af5bedArgyrios Kyrtzidis expandGraphWithCheckers(C, Dst, Src); 176769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 177769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 178769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisnamespace { 179769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis struct CheckObjCMessageContext { 180769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis typedef std::vector<CheckerManager::CheckObjCMessageFunc> CheckersTy; 18157c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool IsPreVisit, WasInlined; 182769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis const CheckersTy &Checkers; 183de507eaf3cb54d3cb234dc14499c10ab3373d15fJordan Rose const ObjCMethodCall &Msg; 184769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExprEngine &Eng; 185769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 186e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 187e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 188e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 189769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CheckObjCMessageContext(bool isPreVisit, const CheckersTy &checkers, 19057c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose const ObjCMethodCall &msg, ExprEngine &eng, 19157c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool wasInlined) 19257c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose : IsPreVisit(isPreVisit), WasInlined(wasInlined), Checkers(checkers), 19357c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose Msg(msg), Eng(eng) { } 194769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 195769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis void runChecker(CheckerManager::CheckObjCMessageFunc checkFn, 1968ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 197d563d3fb73879df7147b8a5302c3bf0e1402ba18Jordan Rose const ProgramPoint &L = Msg.getProgramPoint(IsPreVisit,checkFn.Checker); 19857c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose CheckerContext C(Bldr, Eng, Pred, L, WasInlined); 1993f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks 200d563d3fb73879df7147b8a5302c3bf0e1402ba18Jordan Rose checkFn(*Msg.cloneWithState<ObjCMethodCall>(Pred->getState()), C); 201769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 202769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis }; 203769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 204769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 205769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis/// \brief Run checkers for visiting obj-c messages. 206769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::runCheckersForObjCMessage(bool isPreVisit, 207769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExplodedNodeSet &Dst, 208cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis const ExplodedNodeSet &Src, 209de507eaf3cb54d3cb234dc14499c10ab3373d15fJordan Rose const ObjCMethodCall &msg, 21057c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose ExprEngine &Eng, 21157c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool WasInlined) { 2123f8212787d9bd620930817177fbba5f32659377fArgyrios Kyrtzidis CheckObjCMessageContext C(isPreVisit, 2133f8212787d9bd620930817177fbba5f32659377fArgyrios Kyrtzidis isPreVisit ? PreObjCMessageCheckers 2143f8212787d9bd620930817177fbba5f32659377fArgyrios Kyrtzidis : PostObjCMessageCheckers, 21557c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose msg, Eng, WasInlined); 216c2e0db82139c70c0eac9d5c165b6bf3250af5bedArgyrios Kyrtzidis expandGraphWithCheckers(C, Dst, Src); 217769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 218769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 219769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisnamespace { 22096479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose // FIXME: This has all the same signatures as CheckObjCMessageContext. 22196479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose // Is there a way we can merge the two? 22296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose struct CheckCallContext { 22396479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose typedef std::vector<CheckerManager::CheckCallFunc> CheckersTy; 22457c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool IsPreVisit, WasInlined; 22596479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose const CheckersTy &Checkers; 22696479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose const CallEvent &Call; 22796479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose ExprEngine &Eng; 22896479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 22996479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 23096479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 23196479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 23296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose CheckCallContext(bool isPreVisit, const CheckersTy &checkers, 23357c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose const CallEvent &call, ExprEngine &eng, 23457c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool wasInlined) 23557c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose : IsPreVisit(isPreVisit), WasInlined(wasInlined), Checkers(checkers), 23657c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose Call(call), Eng(eng) { } 23796479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 23896479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose void runChecker(CheckerManager::CheckCallFunc checkFn, 23996479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose NodeBuilder &Bldr, ExplodedNode *Pred) { 240d563d3fb73879df7147b8a5302c3bf0e1402ba18Jordan Rose const ProgramPoint &L = Call.getProgramPoint(IsPreVisit,checkFn.Checker); 24157c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose CheckerContext C(Bldr, Eng, Pred, L, WasInlined); 24296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 243d563d3fb73879df7147b8a5302c3bf0e1402ba18Jordan Rose checkFn(*Call.cloneWithState(Pred->getState()), C); 24496479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose } 24596479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose }; 24696479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose} 24796479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 24896479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose/// \brief Run checkers for visiting an abstract call event. 24996479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rosevoid CheckerManager::runCheckersForCallEvent(bool isPreVisit, 25096479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose ExplodedNodeSet &Dst, 25196479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose const ExplodedNodeSet &Src, 25296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose const CallEvent &Call, 25357c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose ExprEngine &Eng, 25457c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose bool WasInlined) { 25596479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose CheckCallContext C(isPreVisit, 25696479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose isPreVisit ? PreCallCheckers 25796479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose : PostCallCheckers, 25857c033621dacd8720ac9ff65a09025f14f70e22fJordan Rose Call, Eng, WasInlined); 25996479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose expandGraphWithCheckers(C, Dst, Src); 26096479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose} 26196479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 26296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rosenamespace { 263769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis struct CheckLocationContext { 264769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis typedef std::vector<CheckerManager::CheckLocationFunc> CheckersTy; 265769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis const CheckersTy &Checkers; 266769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis SVal Loc; 267769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis bool IsLoad; 268bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const Stmt *NodeEx; /* Will become a CFGStmt */ 269bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const Stmt *BoundEx; 270769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis ExprEngine &Eng; 271769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 272e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 273e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 274e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 275769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CheckLocationContext(const CheckersTy &checkers, 276bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek SVal loc, bool isLoad, const Stmt *NodeEx, 277bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const Stmt *BoundEx, 278bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek ExprEngine &eng) 279bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek : Checkers(checkers), Loc(loc), IsLoad(isLoad), NodeEx(NodeEx), 280bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek BoundEx(BoundEx), Eng(eng) {} 281769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 282769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis void runChecker(CheckerManager::CheckLocationFunc checkFn, 2838ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 2843f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks ProgramPoint::Kind K = IsLoad ? ProgramPoint::PreLoadKind : 2853f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks ProgramPoint::PreStoreKind; 286bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const ProgramPoint &L = 287bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek ProgramPoint::getProgramPoint(NodeEx, K, 288bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek Pred->getLocationContext(), 289bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek checkFn.Checker); 290063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(Bldr, Eng, Pred, L); 291bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek checkFn(Loc, IsLoad, BoundEx, C); 292769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 293769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis }; 2949fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis} 2959fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 296769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis/// \brief Run checkers for load/store of a location. 297ebae6d0209e1ec3d5ea14f9e63bd0d740218ed14Anna Zaks 298769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::runCheckersForLocation(ExplodedNodeSet &Dst, 299cd50e136ad7dc721822f5e6350769a37c216612dArgyrios Kyrtzidis const ExplodedNodeSet &Src, 300769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis SVal location, bool isLoad, 301bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const Stmt *NodeEx, 302bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek const Stmt *BoundEx, 303bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek ExprEngine &Eng) { 304bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek CheckLocationContext C(LocationCheckers, location, isLoad, NodeEx, 305bd613137499b1d4c3b63dccd0aa21f6add243f4fTed Kremenek BoundEx, Eng); 306c2e0db82139c70c0eac9d5c165b6bf3250af5bedArgyrios Kyrtzidis expandGraphWithCheckers(C, Dst, Src); 3079fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis} 3089fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis 309312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidisnamespace { 310312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis struct CheckBindContext { 311312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis typedef std::vector<CheckerManager::CheckBindFunc> CheckersTy; 312312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis const CheckersTy &Checkers; 313312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis SVal Loc; 314312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis SVal Val; 315312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis const Stmt *S; 316312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis ExprEngine &Eng; 3173682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose const ProgramPoint &PP; 318312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 319312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 320312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 321312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 322312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis CheckBindContext(const CheckersTy &checkers, 323ebae6d0209e1ec3d5ea14f9e63bd0d740218ed14Anna Zaks SVal loc, SVal val, const Stmt *s, ExprEngine &eng, 3243682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose const ProgramPoint &pp) 3253682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose : Checkers(checkers), Loc(loc), Val(val), S(s), Eng(eng), PP(pp) {} 326312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 327312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis void runChecker(CheckerManager::CheckBindFunc checkFn, 3288ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 3293682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose const ProgramPoint &L = PP.withTag(checkFn.Checker); 330063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(Bldr, Eng, Pred, L); 3313f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks 332390909c89c98ab1807e15e033a72e975f866fb23Anna Zaks checkFn(Loc, Val, S, C); 333312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis } 334312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis }; 335312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis} 336312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 337312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis/// \brief Run checkers for binding of a value to a location. 338312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidisvoid CheckerManager::runCheckersForBind(ExplodedNodeSet &Dst, 339312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis const ExplodedNodeSet &Src, 340312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis SVal location, SVal val, 341ebae6d0209e1ec3d5ea14f9e63bd0d740218ed14Anna Zaks const Stmt *S, ExprEngine &Eng, 3423682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose const ProgramPoint &PP) { 3433682f1ea9c7fddc7dcbc590891158ba40f7fca16Jordan Rose CheckBindContext C(BindCheckers, location, val, S, Eng, PP); 344312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis expandGraphWithCheckers(C, Dst, Src); 345312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis} 346312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 34730726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidisvoid CheckerManager::runCheckersForEndAnalysis(ExplodedGraph &G, 34830726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis BugReporter &BR, 34930726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis ExprEngine &Eng) { 35030726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis for (unsigned i = 0, e = EndAnalysisCheckers.size(); i != e; ++i) 35130726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis EndAnalysisCheckers[i](G, BR, Eng); 35230726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis} 35330726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis 354af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis/// \brief Run checkers for end of path. 355af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks// Note, We do not chain the checker output (like in expandGraphWithCheckers) 356af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks// for this callback since end of path nodes are expected to be final. 357af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaksvoid CheckerManager::runCheckersForEndPath(NodeBuilderContext &BC, 358af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks ExplodedNodeSet &Dst, 359af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis ExprEngine &Eng) { 360af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks ExplodedNode *Pred = BC.Pred; 361af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks 362af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks // We define the builder outside of the loop bacause if at least one checkers 363af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks // creates a sucsessor for Pred, we do not need to generate an 364af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks // autotransition for it. 365af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks NodeBuilder Bldr(Pred, Dst, BC); 366af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis for (unsigned i = 0, e = EndPathCheckers.size(); i != e; ++i) { 367af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks CheckEndPathFunc checkFn = EndPathCheckers[i]; 368af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks 369af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks const ProgramPoint &L = BlockEntrance(BC.Block, 370af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks Pred->getLocationContext(), 371af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks checkFn.Checker); 372063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(Bldr, Eng, Pred, L); 373af498a28797c075c48d7e943df5f5a8e78ed8eb0Anna Zaks checkFn(C); 374af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis } 375af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis} 376af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis 377f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaksnamespace { 378f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks struct CheckBranchConditionContext { 379f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks typedef std::vector<CheckerManager::CheckBranchConditionFunc> CheckersTy; 380f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks const CheckersTy &Checkers; 381f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks const Stmt *Condition; 382f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks ExprEngine &Eng; 383f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks 384f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 385f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 386f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks 387f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks CheckBranchConditionContext(const CheckersTy &checkers, 388f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks const Stmt *Cond, ExprEngine &eng) 389f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks : Checkers(checkers), Condition(Cond), Eng(eng) {} 390f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks 391f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks void runChecker(CheckerManager::CheckBranchConditionFunc checkFn, 392f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 393f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks ProgramPoint L = PostCondition(Condition, Pred->getLocationContext(), 394f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks checkFn.Checker); 395063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(Bldr, Eng, Pred, L); 396f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks checkFn(Condition, C); 397f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks } 398f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks }; 399f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks} 400f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks 401cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis/// \brief Run checkers for branch condition. 402f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaksvoid CheckerManager::runCheckersForBranchCondition(const Stmt *Condition, 403f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks ExplodedNodeSet &Dst, 4044e82d3cf6fd4c907265e3fa3aac0a835c35dc759Anna Zaks ExplodedNode *Pred, 405cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis ExprEngine &Eng) { 406f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks ExplodedNodeSet Src; 407f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks Src.insert(Pred); 408f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks CheckBranchConditionContext C(BranchConditionCheckers, Condition, Eng); 409f236b6503a4dbc44c1fccb8756bd57c9d0efdf05Anna Zaks expandGraphWithCheckers(C, Dst, Src); 410cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis} 411cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis 412183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis/// \brief Run checkers for live symbols. 4138bef8238181a30e52dea380789a7e2d760eac532Ted Kremenekvoid CheckerManager::runCheckersForLiveSymbols(ProgramStateRef state, 414183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis SymbolReaper &SymReaper) { 415183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis for (unsigned i = 0, e = LiveSymbolsCheckers.size(); i != e; ++i) 416183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis LiveSymbolsCheckers[i](state, SymReaper); 417183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 418183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 419183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidisnamespace { 420183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis struct CheckDeadSymbolsContext { 421183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis typedef std::vector<CheckerManager::CheckDeadSymbolsFunc> CheckersTy; 422183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis const CheckersTy &Checkers; 423183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis SymbolReaper &SR; 424183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis const Stmt *S; 425183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis ExprEngine &Eng; 4260b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks ProgramPoint::Kind ProgarmPointKind; 427183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 428183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); } 429183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis CheckersTy::const_iterator checkers_end() { return Checkers.end(); } 430183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 431183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis CheckDeadSymbolsContext(const CheckersTy &checkers, SymbolReaper &sr, 4320b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks const Stmt *s, ExprEngine &eng, 4330b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks ProgramPoint::Kind K) 4340b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks : Checkers(checkers), SR(sr), S(s), Eng(eng), ProgarmPointKind(K) { } 435183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 436183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis void runChecker(CheckerManager::CheckDeadSymbolsFunc checkFn, 4378ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder &Bldr, ExplodedNode *Pred) { 4380b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks const ProgramPoint &L = ProgramPoint::getProgramPoint(S, ProgarmPointKind, 4393f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks Pred->getLocationContext(), checkFn.Checker); 440063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(Bldr, Eng, Pred, L); 4413f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks 4420b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks // Note, do not pass the statement to the checkers without letting them 4430b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks // differentiate if we ran remove dead bindings before or after the 4440b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks // statement. 445183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis checkFn(SR, C); 446183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis } 447183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis }; 448183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 449183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 450183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis/// \brief Run checkers for dead symbols. 451183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidisvoid CheckerManager::runCheckersForDeadSymbols(ExplodedNodeSet &Dst, 452183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis const ExplodedNodeSet &Src, 453183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis SymbolReaper &SymReaper, 454183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis const Stmt *S, 4550b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks ExprEngine &Eng, 4560b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks ProgramPoint::Kind K) { 4570b3ade86a1c60cf0c7b56aa238aff458eb7f5974Anna Zaks CheckDeadSymbolsContext C(DeadSymbolsCheckers, SymReaper, S, Eng, K); 458183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis expandGraphWithCheckers(C, Dst, Src); 459183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 460183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 461183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis/// \brief True if at least one checker wants to check region changes. 4628bef8238181a30e52dea380789a7e2d760eac532Ted Kremenekbool CheckerManager::wantsRegionChangeUpdate(ProgramStateRef state) { 463183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis for (unsigned i = 0, e = RegionChangesCheckers.size(); i != e; ++i) 464183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis if (RegionChangesCheckers[i].WantUpdateFn(state)) 465183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis return true; 466183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 467183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis return false; 468183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 469183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 470183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis/// \brief Run checkers for region changes. 4718bef8238181a30e52dea380789a7e2d760eac532Ted KremenekProgramStateRef 4728bef8238181a30e52dea380789a7e2d760eac532Ted KremenekCheckerManager::runCheckersForRegionChanges(ProgramStateRef state, 47335bdbf40624beba3fc00cb72ab444659939c1a6bTed Kremenek const StoreManager::InvalidatedSymbols *invalidated, 474537716ad8dd10f984b6cfe6985afade1185c5e3cJordy Rose ArrayRef<const MemRegion *> ExplicitRegions, 47566c40400e7d6272b0cd675ada18dd62c1f0362c7Anna Zaks ArrayRef<const MemRegion *> Regions, 476740d490593e0de8732a697c9f77b90ddd463863bJordan Rose const CallEvent *Call) { 477183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis for (unsigned i = 0, e = RegionChangesCheckers.size(); i != e; ++i) { 478183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis // If any checker declares the state infeasible (or if it starts that way), 479183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis // bail out. 480183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis if (!state) 481183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis return NULL; 482537716ad8dd10f984b6cfe6985afade1185c5e3cJordy Rose state = RegionChangesCheckers[i].CheckFn(state, invalidated, 48366c40400e7d6272b0cd675ada18dd62c1f0362c7Anna Zaks ExplicitRegions, Regions, Call); 484183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis } 485183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis return state; 486183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 487183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 488312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis/// \brief Run checkers for handling assumptions on symbolic values. 4898bef8238181a30e52dea380789a7e2d760eac532Ted KremenekProgramStateRef 4908bef8238181a30e52dea380789a7e2d760eac532Ted KremenekCheckerManager::runCheckersForEvalAssume(ProgramStateRef state, 491312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis SVal Cond, bool Assumption) { 492312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis for (unsigned i = 0, e = EvalAssumeCheckers.size(); i != e; ++i) { 493312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis // If any checker declares the state infeasible (or if it starts that way), 494312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis // bail out. 495312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis if (!state) 496312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis return NULL; 497312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis state = EvalAssumeCheckers[i](state, Cond, Assumption); 498312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis } 499312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis return state; 500312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis} 501312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 502e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis/// \brief Run checkers for evaluating a call. 503e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis/// Only one checker will evaluate the call. 504e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidisvoid CheckerManager::runCheckersForEvalCall(ExplodedNodeSet &Dst, 505e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis const ExplodedNodeSet &Src, 506645baeed6800f952e9ad1d5666e01080385531a2Jordan Rose const CallEvent &Call, 50769f87c956b3ac2b80124fd9604af012e1061473aJordan Rose ExprEngine &Eng) { 508645baeed6800f952e9ad1d5666e01080385531a2Jordan Rose const CallExpr *CE = cast<CallExpr>(Call.getOriginExpr()); 509e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis for (ExplodedNodeSet::iterator 510e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis NI = Src.begin(), NE = Src.end(); NI != NE; ++NI) { 511e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 512e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis ExplodedNode *Pred = *NI; 513e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis bool anyEvaluated = false; 514dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks 515dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks // First, check if any of the InlineCall callbacks can evaluate the call. 516dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks assert(InlineCallCheckers.size() <= 1 && 517dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks "InlineCall is a special hacky callback to allow intrusive" 518dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks "evaluation of the call (which simulates inlining). It is " 519dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks "currently only used by OSAtomicChecker and should go away " 520dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks "at some point."); 521dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks for (std::vector<InlineCallFunc>::iterator 522dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks EI = InlineCallCheckers.begin(), EE = InlineCallCheckers.end(); 523dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks EI != EE; ++EI) { 524dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks ExplodedNodeSet checkDst; 525dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks bool evaluated = (*EI)(CE, Eng, Pred, checkDst); 526dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks assert(!(evaluated && anyEvaluated) 527dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks && "There are more than one checkers evaluating the call"); 528dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks if (evaluated) { 529dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks anyEvaluated = true; 530dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks Dst.insert(checkDst); 531dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks#ifdef NDEBUG 532dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks break; // on release don't check that no other checker also evals. 533dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks#endif 534dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks } 535dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks } 536dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks 537dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks#ifdef NDEBUG // on release don't check that no other checker also evals. 538dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks if (anyEvaluated) { 539dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks break; 540dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks } 541dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks#endif 542dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks 5438ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks ExplodedNodeSet checkDst; 5448ff5c41f2bde7ebbe568b4c15e59f14b8befae66Anna Zaks NodeBuilder B(Pred, checkDst, Eng.getBuilderContext()); 545dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks // Next, check if any of the EvalCall callbacks can evaluate the call. 546e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis for (std::vector<EvalCallFunc>::iterator 547e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis EI = EvalCallCheckers.begin(), EE = EvalCallCheckers.end(); 548e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis EI != EE; ++EI) { 5493f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks ProgramPoint::Kind K = ProgramPoint::PostStmtKind; 5503f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks const ProgramPoint &L = ProgramPoint::getProgramPoint(CE, K, 5513f5e8d87dbf449d8b39fe96068415428594d370eAnna Zaks Pred->getLocationContext(), EI->Checker); 552b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks bool evaluated = false; 553b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks { // CheckerContext generates transitions(populates checkDest) on 554b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks // destruction, so introduce the scope to make sure it gets properly 555b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks // populated. 556063e0887ad65d666d23ee3178436ad6507abbd1bAnna Zaks CheckerContext C(B, Eng, Pred, L); 557b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks evaluated = (*EI)(CE, C); 558b1576f7136163ce3efd6dcf5a3e53e1c8ec6520cAnna Zaks } 559e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis assert(!(evaluated && anyEvaluated) 560e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis && "There are more than one checkers evaluating the call"); 561e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis if (evaluated) { 562e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis anyEvaluated = true; 563e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis Dst.insert(checkDst); 564e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis#ifdef NDEBUG 565e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis break; // on release don't check that no other checker also evals. 566e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis#endif 567e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis } 568e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis } 569e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 570dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks // If none of the checkers evaluated the call, ask ExprEngine to handle it. 571e81ce256b62717dd846bd19aecc4115a0dcd4995Anna Zaks if (!anyEvaluated) { 572e81ce256b62717dd846bd19aecc4115a0dcd4995Anna Zaks NodeBuilder B(Pred, Dst, Eng.getBuilderContext()); 573e81ce256b62717dd846bd19aecc4115a0dcd4995Anna Zaks Eng.defaultEvalCall(B, Pred, Call); 574e81ce256b62717dd846bd19aecc4115a0dcd4995Anna Zaks } 575e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis } 576e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis} 577e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 5789be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek/// \brief Run checkers for the entire Translation Unit. 5799be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenekvoid CheckerManager::runCheckersOnEndOfTranslationUnit( 5809be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek const TranslationUnitDecl *TU, 5819be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek AnalysisManager &mgr, 5829be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek BugReporter &BR) { 5839be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek for (unsigned i = 0, e = EndOfTranslationUnitCheckers.size(); i != e; ++i) 5849be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek EndOfTranslationUnitCheckers[i](TU, mgr, BR); 5859be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek} 5869be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek 587dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rosevoid CheckerManager::runCheckersForPrintState(raw_ostream &Out, 5888bef8238181a30e52dea380789a7e2d760eac532Ted Kremenek ProgramStateRef State, 589dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose const char *NL, const char *Sep) { 590dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose for (llvm::DenseMap<CheckerTag, CheckerRef>::iterator 591dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose I = CheckerTags.begin(), E = CheckerTags.end(); I != E; ++I) 592dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose I->second->printState(Out, State, NL, Sep); 593dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose} 594dbd658e139b3e0bf084f75feaea8d844af9e319fJordy Rose 595769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 596769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis// Internal registration functions for AST traversing. 597769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 598769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 599769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForDecl(CheckDeclFunc checkfn, 600769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis HandlesDeclFunc isForDeclFn) { 601769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis DeclCheckerInfo info = { checkfn, isForDeclFn }; 602769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis DeclCheckers.push_back(info); 603769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 604769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 605769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForBody(CheckDeclFunc checkfn) { 606769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis BodyCheckers.push_back(checkfn); 607769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 608769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 609769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 610769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis// Internal registration functions for path-sensitive checking. 611769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 612769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 613769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForPreStmt(CheckStmtFunc checkfn, 614769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis HandlesStmtFunc isForStmtFn) { 615769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/true }; 616769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis StmtCheckers.push_back(info); 617769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 618769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForPostStmt(CheckStmtFunc checkfn, 619769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis HandlesStmtFunc isForStmtFn) { 620769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/false }; 621769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis StmtCheckers.push_back(info); 622769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 623769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 624769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForPreObjCMessage(CheckObjCMessageFunc checkfn) { 625769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis PreObjCMessageCheckers.push_back(checkfn); 626769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 627769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForPostObjCMessage(CheckObjCMessageFunc checkfn) { 628769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis PostObjCMessageCheckers.push_back(checkfn); 629769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 630769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 63196479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rosevoid CheckerManager::_registerForPreCall(CheckCallFunc checkfn) { 63296479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose PreCallCheckers.push_back(checkfn); 63396479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose} 63496479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rosevoid CheckerManager::_registerForPostCall(CheckCallFunc checkfn) { 63596479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose PostCallCheckers.push_back(checkfn); 63696479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose} 63796479da6ad9d921d875e7be29fe1bfa127be8069Jordan Rose 638769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidisvoid CheckerManager::_registerForLocation(CheckLocationFunc checkfn) { 639769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis LocationCheckers.push_back(checkfn); 640769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 641769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 642312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidisvoid CheckerManager::_registerForBind(CheckBindFunc checkfn) { 643312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis BindCheckers.push_back(checkfn); 644312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis} 645312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 64630726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidisvoid CheckerManager::_registerForEndAnalysis(CheckEndAnalysisFunc checkfn) { 64730726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis EndAnalysisCheckers.push_back(checkfn); 64830726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis} 64930726c6baee1417307236e854f1474fdb3cedb98Argyrios Kyrtzidis 650af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidisvoid CheckerManager::_registerForEndPath(CheckEndPathFunc checkfn) { 651af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis EndPathCheckers.push_back(checkfn); 652af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis} 653af5800a1e287990bb547e052f257adeeae5ab476Argyrios Kyrtzidis 654cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidisvoid CheckerManager::_registerForBranchCondition( 655cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis CheckBranchConditionFunc checkfn) { 656cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis BranchConditionCheckers.push_back(checkfn); 657cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis} 658cc05d511b26ac6dc80fcbcc78ac305d2755aa0b9Argyrios Kyrtzidis 659183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidisvoid CheckerManager::_registerForLiveSymbols(CheckLiveSymbolsFunc checkfn) { 660183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis LiveSymbolsCheckers.push_back(checkfn); 661183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 662183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 663183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidisvoid CheckerManager::_registerForDeadSymbols(CheckDeadSymbolsFunc checkfn) { 664183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis DeadSymbolsCheckers.push_back(checkfn); 665183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 666183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 667183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidisvoid CheckerManager::_registerForRegionChanges(CheckRegionChangesFunc checkfn, 668183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis WantsRegionChangeUpdateFunc wantUpdateFn) { 669183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis RegionChangesCheckerInfo info = {checkfn, wantUpdateFn}; 670183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis RegionChangesCheckers.push_back(info); 671183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis} 672183ff98f425d470c2a0276880aaf43496c9dad14Argyrios Kyrtzidis 673312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidisvoid CheckerManager::_registerForEvalAssume(EvalAssumeFunc checkfn) { 674312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis EvalAssumeCheckers.push_back(checkfn); 675312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis} 676312dbec867f6b8d6b86fd562c53352cd4db27468Argyrios Kyrtzidis 677e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidisvoid CheckerManager::_registerForEvalCall(EvalCallFunc checkfn) { 678e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis EvalCallCheckers.push_back(checkfn); 679e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis} 680e1bfb7ae0dd0762c88e1fd94746e973c37f2e04eArgyrios Kyrtzidis 681dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaksvoid CheckerManager::_registerForInlineCall(InlineCallFunc checkfn) { 682dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks InlineCallCheckers.push_back(checkfn); 683dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks} 684dff6ef903ff4fcb43b5ea292ecd772e381393b5dAnna Zaks 6859be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenekvoid CheckerManager::_registerForEndOfTranslationUnit( 6869be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek CheckEndOfTranslationUnit checkfn) { 6879be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek EndOfTranslationUnitCheckers.push_back(checkfn); 6889be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek} 6899be6e7ce5788e50c62d40c59b0bbc2ea423683f7Ted Kremenek 690769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 691769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis// Implementation details. 692769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis//===----------------------------------------------------------------------===// 693769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 694769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios KyrtzidisCheckerManager::CachedStmtCheckers * 695769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios KyrtzidisCheckerManager::getCachedStmtCheckersFor(const Stmt *S, bool isPreVisit) { 696769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis assert(S); 697769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 698769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CachedStmtCheckersKey key(S->getStmtClass(), isPreVisit); 699769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CachedStmtCheckers *checkers = 0; 700769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CachedStmtCheckersMapTy::iterator CCI = CachedStmtCheckersMap.find(key); 701769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis if (CCI != CachedStmtCheckersMap.end()) { 702769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis checkers = &(CCI->second); 703769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } else { 704769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis // Find the checkers that should run for this Stmt and cache them. 705769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis checkers = &CachedStmtCheckersMap[key]; 706769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis for (unsigned i = 0, e = StmtCheckers.size(); i != e; ++i) { 707769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis StmtCheckerInfo &info = StmtCheckers[i]; 708769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis if (info.IsPreVisit == isPreVisit && info.IsForStmtFn(S)) 709769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis checkers->push_back(info.CheckFn); 710769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis } 7119fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis } 712769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 713769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis assert(checkers); 714769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis return checkers; 715769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis} 716769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis 717769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios KyrtzidisCheckerManager::~CheckerManager() { 718769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis for (unsigned i = 0, e = CheckerDtors.size(); i != e; ++i) 719769ce3e93ad35bd9ac28e4d8b8f035ae4fd9a5b5Argyrios Kyrtzidis CheckerDtors[i](); 7209fb9474c5b267400d4abfbff63c8b39f378235d4Argyrios Kyrtzidis} 721