#include "clang/AST/ExprCXX.h"
#include "clang/Basic/SourceManager.h"
#include "clang/StaticAnalyzer/Checkers/BuiltinCheckerRegistration.h"
#include "clang/StaticAnalyzer/Core/BugReporter/BugType.h"
#include "clang/StaticAnalyzer/Core/Checker.h"
#include "clang/StaticAnalyzer/Core/CheckerManager.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/CallEvent.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/MemRegion.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/ProgramState.h"
#include "llvm/ADT/STLExtras.h"
#include "llvm/ADT/SmallPtrSet.h"
#include "llvm/Support/raw_ostream.h"

Classes
class	FindStackRegionsSymbolVisitor
	A visitor made for use with a ScanReachableSymbols scanner, used for finding stack regions within an SVal that live on the current stack frame of the given checker context. More...

Macros
#define	REGISTER_CHECKER(NAME)

Functions
static void	EmitReturnedAsPartOfError (llvm::raw_ostream &OS, SVal ReturnedVal, const MemRegion *LeakedRegion)
static SmallVector< const MemRegion * >	FilterReturnExpressionLeaks (const SmallVectorImpl< const MemRegion * > &MaybeEscaped, CheckerContext &C, const Expr *RetE, SVal &RetVal)
	Given some memory regions that are flagged by FindStackRegionsSymbolVisitor, this function filters out memory regions that are being returned that are likely not true leaks:
static SmallVector< const MemRegion * >	FindEscapingStackRegions (CheckerContext &C, const Expr *RetE, SVal RetVal)
	For use in finding regions that live on the checker context's current stack frame, deep in the SVal representing the return value.
static const MemSpaceRegion *	getStackOrGlobalSpaceRegion (ProgramStateRef State, const MemRegion *R)
static const MemRegion *	getOriginBaseRegion (const MemRegion *Reg)
static std::optional< std::string >	printReferrer (ProgramStateRef State, const MemRegion *Referrer)
static bool	isInvalidatedSymbolRegion (const MemRegion *Region)
	Check whether `Region` refers to a freshly minted symbol after an opaque function call.

Macro Definition Documentation

◆ REGISTER_CHECKER

#define REGISTER_CHECKER ( NAME )

Value:

  void ento::register##NAME##Checker(CheckerManager &Mgr) {                    \
    Mgr.getChecker<StackAddrEscapeChecker>()->NAME.enable(Mgr);                \
  }                                                                            \
                                                                               \
  bool ento::shouldRegister##NAME##Checker(const CheckerManager &) {           \
    return true;                                                               \
  }

Definition at line 620 of file StackAddrEscapeChecker.cpp.

Function Documentation

◆ EmitReturnedAsPartOfError()

void EmitReturnedAsPartOfError	(	llvm::raw_ostream &	OS,
		SVal	ReturnedVal,
		const MemRegion *	LeakedRegion )

static

Definition at line 154 of file StackAddrEscapeChecker.cpp.

References clang::ento::SVal::getAsRegion(), clang::isa(), and clang::ento::OS.

◆ FilterReturnExpressionLeaks()

SmallVector< const MemRegion * > FilterReturnExpressionLeaks	(	const SmallVectorImpl< const MemRegion * > &	MaybeEscaped,
		CheckerContext &	C,
		const Expr *	RetE,
		SVal &	RetVal )

static

Given some memory regions that are flagged by FindStackRegionsSymbolVisitor, this function filters out memory regions that are being returned that are likely not true leaks: