#include "clang/AST/CharUnits.h"
#include "clang/AST/ParentMapContext.h"
#include "clang/StaticAnalyzer/Checkers/BuiltinCheckerRegistration.h"
#include "clang/StaticAnalyzer/Checkers/Taint.h"
#include "clang/StaticAnalyzer/Core/BugReporter/BugType.h"
#include "clang/StaticAnalyzer/Core/Checker.h"
#include "clang/StaticAnalyzer/Core/CheckerManager.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/APSIntType.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/DynamicExtent.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h"
#include "llvm/ADT/SmallString.h"
#include "llvm/Support/FormatVariadic.h"
#include "llvm/Support/raw_ostream.h"
#include <optional>

Functions
static std::optional< std::pair< const SubRegion *, NonLoc > >	computeOffset (ProgramStateRef State, SValBuilder &SVB, SVal Location)
	For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).

static std::pair< NonLoc, nonloc::ConcreteInt >	getSimplifiedOffsets (NonLoc offset, nonloc::ConcreteInt extent, SValBuilder &svalBuilder)

static std::pair< ProgramStateRef, ProgramStateRef >	compareValueToThreshold (ProgramStateRef State, NonLoc Value, NonLoc Threshold, SValBuilder &SVB, bool CheckEquality=false)

static std::string	getRegionName (const SubRegion *Region)

static std::optional< int64_t >	getConcreteValue (NonLoc SV)

static std::string	getShortMsg (OOB_Kind Kind, std::string RegName)

static Messages	getPrecedesMsgs (const SubRegion *Region, NonLoc Offset)

static Messages	getExceedsMsgs (ASTContext &ACtx, const SubRegion *Region, NonLoc Offset, NonLoc Extent, SVal Location)

static Messages	getTaintMsgs (const SubRegion Region, const char OffsetName)

Function Documentation

◆ compareValueToThreshold()

static std::pair< ProgramStateRef, ProgramStateRef > compareValueToThreshold	(	ProgramStateRef	State,
		NonLoc	Value,
		NonLoc	Threshold,
		SValBuilder &	SVB,
		bool	CheckEquality = `false`
	)

static

Definition at line 182 of file ArrayBoundCheckerV2.cpp.

References clang::ento::SValBuilder::evalBinOpNN(), clang::ento::SVal::getAs(), clang::ento::SValBuilder::getConditionType(), clang::ento::SValBuilder::getContext(), getSimplifiedOffsets(), clang::Value::getType(), and clang::Type::isUnsignedIntegerType().

◆ computeOffset()

static std::optional< std::pair< const SubRegion *, NonLoc > > computeOffset	(	ProgramStateRef	State,
		SValBuilder &	SVB,
		SVal	Location
	)

static

For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).

Returns nullopt when these cannot be determined.

Definition at line 86 of file ArrayBoundCheckerV2.cpp.

References clang::ento::SValBuilder::evalBinOpNN(), clang::ento::SValBuilder::getArrayIndexType(), clang::ento::MemRegion::getAs(), clang::ento::SVal::getAs(), clang::ento::SVal::getAsRegion(), clang::ento::SValBuilder::getContext(), clang::ento::ElementRegion::getElementType(), clang::ento::ElementRegion::getIndex(), clang::CharUnits::getQuantity(), clang::ento::SubRegion::getSuperRegion(), clang::ASTContext::getTypeSizeInChars(), clang::Type::isIncompleteType(), clang::ento::SValBuilder::makeArrayIndex(), and clang::ento::SValBuilder::makeZeroArrayIndex().