#include "clang/AST/CharUnits.h"
#include "clang/AST/ParentMapContext.h"
#include "clang/StaticAnalyzer/Checkers/BuiltinCheckerRegistration.h"
#include "clang/StaticAnalyzer/Checkers/Taint.h"
#include "clang/StaticAnalyzer/Core/BugReporter/BugType.h"
#include "clang/StaticAnalyzer/Core/Checker.h"
#include "clang/StaticAnalyzer/Core/CheckerManager.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/APSIntType.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/DynamicExtent.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h"
#include "llvm/ADT/APSInt.h"
#include "llvm/ADT/SmallString.h"
#include "llvm/Support/FormatVariadic.h"
#include "llvm/Support/raw_ostream.h"
#include <optional>

Functions
static std::optional< std::pair< const SubRegion *, NonLoc > >	computeOffset (ProgramStateRef State, SValBuilder &SVB, SVal Location)
	For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).

static std::pair< NonLoc, nonloc::ConcreteInt >	getSimplifiedOffsets (NonLoc offset, nonloc::ConcreteInt extent, SValBuilder &svalBuilder)

static bool	isNegative (SValBuilder &SVB, ProgramStateRef State, NonLoc Value)

static bool	isUnsigned (SValBuilder &SVB, NonLoc Value)

static std::pair< ProgramStateRef, ProgramStateRef >	compareValueToThreshold (ProgramStateRef State, NonLoc Value, NonLoc Threshold, SValBuilder &SVB, bool CheckEquality=false)

static std::string	getRegionName (const SubRegion *Region)

static std::optional< int64_t >	getConcreteValue (NonLoc SV)

static std::optional< int64_t >	getConcreteValue (std::optional< NonLoc > SV)

static Messages	getPrecedesMsgs (const SubRegion *Region, NonLoc Offset)

static bool	tryDividePair (std::optional< int64_t > &Val1, std::optional< int64_t > &Val2, int64_t Divisor)
	Try to divide `Val1` and `Val2` (in place) by `Divisor` and return true if it can be performed (`Divisor` is nonzero and there is no remainder).

static Messages	getExceedsMsgs (ASTContext &ACtx, const SubRegion *Region, NonLoc Offset, NonLoc Extent, SVal Location, bool AlsoMentionUnderflow)

static Messages	getTaintMsgs (const SubRegion Region, const char OffsetName, bool AlsoMentionUnderflow)

Function Documentation

◆ compareValueToThreshold()

static std::pair< ProgramStateRef, ProgramStateRef > compareValueToThreshold	(	ProgramStateRef	State,
		NonLoc	Value,
		NonLoc	Threshold,
		SValBuilder &	SVB,
		bool	CheckEquality = `false`
	)

static

Definition at line 291 of file ArrayBoundCheckerV2.cpp.

References clang::ento::SValBuilder::evalBinOpNN(), clang::ento::SVal::getAs(), clang::ento::SValBuilder::getConditionType(), getSimplifiedOffsets(), isNegative(), and isUnsigned().

◆ computeOffset()

static std::optional< std::pair< const SubRegion *, NonLoc > > computeOffset	(	ProgramStateRef	State,
		SValBuilder &	SVB,
		SVal	Location
	)

static

For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).

Returns nullopt when these cannot be determined.

Definition at line 172 of file ArrayBoundCheckerV2.cpp.

References clang::ento::SValBuilder::evalBinOpNN(), clang::ento::SValBuilder::getArrayIndexType(), clang::ento::MemRegion::getAs(), clang::ento::SVal::getAs(), clang::ento::SVal::getAsRegion(), clang::ento::SValBuilder::getContext(), clang::ento::ElementRegion::getElementType(), clang::ento::ElementRegion::getIndex(), clang::CharUnits::getQuantity(), clang::ento::SubRegion::getSuperRegion(), clang::ASTContext::getTypeSizeInChars(), clang::Type::isIncompleteType(), clang::ento::SValBuilder::makeArrayIndex(), clang::ento::SValBuilder::makeZeroArrayIndex(), and clang::T.