clang  6.0.0svn
Public Types | Public Member Functions | Protected Member Functions | List of all members
clang::ento::ExprEngine Class Reference

#include "clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h"

Inheritance diagram for clang::ento::ExprEngine:
Inheritance graph
[legend]
Collaboration diagram for clang::ento::ExprEngine:
Collaboration graph
[legend]

Public Types

enum  InliningModes { Inline_Regular = 0, Inline_Minimal = 0x1 }
 The modes of inlining, which override the default analysis-wide settings. More...
 

Public Member Functions

 ExprEngine (AnalysisManager &mgr, bool gcEnabled, SetOfConstDecls *VisitedCalleesIn, FunctionSummariesTy *FS, InliningModes HowToInlineIn)
 
 ~ExprEngine () override
 
bool ExecuteWorkList (const LocationContext *L, unsigned Steps=150000)
 Returns true if there is still simulation state on the worklist. More...
 
bool ExecuteWorkListWithInitialState (const LocationContext *L, unsigned Steps, ProgramStateRef InitState, ExplodedNodeSet &Dst)
 Execute the work list with an initial state. More...
 
ASTContextgetContext () const
 getContext - Return the ASTContext associated with this analysis. More...
 
AnalysisManagergetAnalysisManager () override
 
CheckerManagergetCheckerManager () const
 
SValBuildergetSValBuilder ()
 
BugReportergetBugReporter ()
 
const NodeBuilderContextgetBuilderContext ()
 
bool isObjCGCEnabled ()
 
const StmtgetStmt () const
 
void GenerateAutoTransition (ExplodedNode *N)
 
void enqueueEndOfPath (ExplodedNodeSet &S)
 
void GenerateCallExitNode (ExplodedNode *N)
 
void ViewGraph (bool trim=false)
 Visualize the ExplodedGraph created by executing the simulation. More...
 
void ViewGraph (ArrayRef< const ExplodedNode *> Nodes)
 Visualize a trimmed ExplodedGraph that only contains paths to the given nodes. More...
 
ProgramStateRef getInitialState (const LocationContext *InitLoc) override
 getInitialState - Return the initial state used for the root vertex in the ExplodedGraph. More...
 
ExplodedGraphgetGraph ()
 
const ExplodedGraphgetGraph () const
 
void removeDead (ExplodedNode *Node, ExplodedNodeSet &Out, const Stmt *ReferenceStmt, const LocationContext *LC, const Stmt *DiagnosticStmt=nullptr, ProgramPoint::Kind K=ProgramPoint::PreStmtPurgeDeadSymbolsKind)
 Run the analyzer's garbage collection - remove dead symbols and bindings from the state. More...
 
void processCFGElement (const CFGElement E, ExplodedNode *Pred, unsigned StmtIdx, NodeBuilderContext *Ctx) override
 processCFGElement - Called by CoreEngine. More...
 
void ProcessStmt (const CFGStmt S, ExplodedNode *Pred)
 
void ProcessLoopExit (const Stmt *S, ExplodedNode *Pred)
 
void ProcessInitializer (const CFGInitializer I, ExplodedNode *Pred)
 
void ProcessImplicitDtor (const CFGImplicitDtor D, ExplodedNode *Pred)
 
void ProcessNewAllocator (const CXXNewExpr *NE, ExplodedNode *Pred)
 
void ProcessAutomaticObjDtor (const CFGAutomaticObjDtor D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void ProcessDeleteDtor (const CFGDeleteDtor D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void ProcessBaseDtor (const CFGBaseDtor D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void ProcessMemberDtor (const CFGMemberDtor D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void ProcessTemporaryDtor (const CFGTemporaryDtor D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void processCFGBlockEntrance (const BlockEdge &L, NodeBuilderWithSinks &nodeBuilder, ExplodedNode *Pred) override
 Called by CoreEngine when processing the entrance of a CFGBlock. More...
 
void processBranch (const Stmt *Condition, const Stmt *Term, NodeBuilderContext &BuilderCtx, ExplodedNode *Pred, ExplodedNodeSet &Dst, const CFGBlock *DstT, const CFGBlock *DstF) override
 ProcessBranch - Called by CoreEngine. More...
 
void processCleanupTemporaryBranch (const CXXBindTemporaryExpr *BTE, NodeBuilderContext &BldCtx, ExplodedNode *Pred, ExplodedNodeSet &Dst, const CFGBlock *DstT, const CFGBlock *DstF) override
 Called by CoreEngine. More...
 
void processStaticInitializer (const DeclStmt *DS, NodeBuilderContext &BuilderCtx, ExplodedNode *Pred, ExplodedNodeSet &Dst, const CFGBlock *DstT, const CFGBlock *DstF) override
 Called by CoreEngine. More...
 
void processIndirectGoto (IndirectGotoNodeBuilder &builder) override
 processIndirectGoto - Called by CoreEngine. More...
 
void processSwitch (SwitchNodeBuilder &builder) override
 ProcessSwitch - Called by CoreEngine. More...
 
void processBeginOfFunction (NodeBuilderContext &BC, ExplodedNode *Pred, ExplodedNodeSet &Dst, const BlockEdge &L) override
 Called by CoreEngine. More...
 
void processEndOfFunction (NodeBuilderContext &BC, ExplodedNode *Pred, const ReturnStmt *RS=nullptr) override
 Called by CoreEngine. More...
 
void removeDeadOnEndOfFunction (NodeBuilderContext &BC, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Remove dead bindings/symbols before exiting a function. More...
 
void processCallEnter (NodeBuilderContext &BC, CallEnter CE, ExplodedNode *Pred) override
 Generate the entry node of the callee. More...
 
void processCallExit (ExplodedNode *Pred) override
 Generate the sequence of nodes that simulate the call exit and the post visit for CallExpr. More...
 
void processEndWorklist (bool hasWorkRemaining) override
 Called by CoreEngine when the analysis worklist has terminated. More...
 
ProgramStateRef processAssume (ProgramStateRef state, SVal cond, bool assumption) override
 evalAssume - Callback function invoked by the ConstraintManager when making assumptions about state values. More...
 
ProgramStateRef processRegionChanges (ProgramStateRef state, const InvalidatedSymbols *invalidated, ArrayRef< const MemRegion *> ExplicitRegions, ArrayRef< const MemRegion *> Regions, const LocationContext *LCtx, const CallEvent *Call) override
 processRegionChanges - Called by ProgramStateManager whenever a change is made to the store. More...
 
void printState (raw_ostream &Out, ProgramStateRef State, const char *NL, const char *Sep) override
 printState - Called by ProgramStateManager to print checker-specific data. More...
 
ProgramStateManagergetStateManager () override
 
StoreManagergetStoreManager ()
 
ConstraintManagergetConstraintManager ()
 
BasicValueFactorygetBasicVals ()
 
SymbolManagergetSymbolManager ()
 
const SymbolManagergetSymbolManager () const
 
bool wasBlocksExhausted () const
 
bool hasEmptyWorkList () const
 
bool hasWorkRemaining () const
 
const CoreEnginegetCoreEngine () const
 
void Visit (const Stmt *S, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Visit - Transfer function logic for all statements. More...
 
void VisitArraySubscriptExpr (const ArraySubscriptExpr *Ex, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitArraySubscriptExpr - Transfer function for array accesses. More...
 
void VisitGCCAsmStmt (const GCCAsmStmt *A, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitGCCAsmStmt - Transfer function logic for inline asm. More...
 
void VisitMSAsmStmt (const MSAsmStmt *A, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitMSAsmStmt - Transfer function logic for MS inline asm. More...
 
void VisitBlockExpr (const BlockExpr *BE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitBlockExpr - Transfer function logic for BlockExprs. More...
 
void VisitLambdaExpr (const LambdaExpr *LE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitLambdaExpr - Transfer function logic for LambdaExprs. More...
 
void VisitBinaryOperator (const BinaryOperator *B, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitBinaryOperator - Transfer function logic for binary operators. More...
 
void VisitCallExpr (const CallExpr *CE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitCall - Transfer function for function calls. More...
 
void VisitCast (const CastExpr *CastE, const Expr *Ex, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitCast - Transfer function logic for all casts (implicit and explicit). More...
 
void VisitCompoundLiteralExpr (const CompoundLiteralExpr *CL, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitCompoundLiteralExpr - Transfer function logic for compound literals. More...
 
void VisitCommonDeclRefExpr (const Expr *DR, const NamedDecl *D, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Transfer function logic for DeclRefExprs and BlockDeclRefExprs. More...
 
void VisitDeclStmt (const DeclStmt *DS, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitDeclStmt - Transfer function logic for DeclStmts. More...
 
void VisitGuardedExpr (const Expr *Ex, const Expr *L, const Expr *R, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitGuardedExpr - Transfer function logic for ?, __builtin_choose. More...
 
void VisitInitListExpr (const InitListExpr *E, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitLogicalExpr (const BinaryOperator *B, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitLogicalExpr - Transfer function logic for '&&', '||'. More...
 
void VisitMemberExpr (const MemberExpr *M, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitMemberExpr - Transfer function for member expressions. More...
 
void VisitAtomicExpr (const AtomicExpr *E, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitMemberExpr - Transfer function for builtin atomic expressions. More...
 
void VisitObjCAtSynchronizedStmt (const ObjCAtSynchronizedStmt *S, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Transfer function logic for ObjCAtSynchronizedStmts. More...
 
void VisitLvalObjCIvarRefExpr (const ObjCIvarRefExpr *DR, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Transfer function logic for computing the lvalue of an Objective-C ivar. More...
 
void VisitObjCForCollectionStmt (const ObjCForCollectionStmt *S, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitObjCForCollectionStmt - Transfer function logic for ObjCForCollectionStmt. More...
 
void VisitObjCMessage (const ObjCMessageExpr *ME, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitReturnStmt (const ReturnStmt *R, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitReturnStmt - Transfer function logic for return statements. More...
 
void VisitOffsetOfExpr (const OffsetOfExpr *Ex, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitOffsetOfExpr - Transfer function for offsetof. More...
 
void VisitUnaryExprOrTypeTraitExpr (const UnaryExprOrTypeTraitExpr *Ex, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitUnaryExprOrTypeTraitExpr - Transfer function for sizeof. More...
 
void VisitUnaryOperator (const UnaryOperator *B, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 VisitUnaryOperator - Transfer function logic for unary operators. More...
 
void VisitIncrementDecrementOperator (const UnaryOperator *U, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Handle ++ and – (both pre- and post-increment). More...
 
void VisitCXXBindTemporaryExpr (const CXXBindTemporaryExpr *BTE, ExplodedNodeSet &PreVisit, ExplodedNodeSet &Dst)
 
void VisitCXXCatchStmt (const CXXCatchStmt *CS, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXThisExpr (const CXXThisExpr *TE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXConstructExpr (const CXXConstructExpr *E, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXDestructor (QualType ObjectType, const MemRegion *Dest, const Stmt *S, bool IsBaseDtor, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXNewAllocatorCall (const CXXNewExpr *CNE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXNewExpr (const CXXNewExpr *CNE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void VisitCXXDeleteExpr (const CXXDeleteExpr *CDE, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 
void CreateCXXTemporaryObject (const MaterializeTemporaryExpr *ME, ExplodedNode *Pred, ExplodedNodeSet &Dst)
 Create a C++ temporary object for an rvalue. More...
 
void evalEagerlyAssumeBinOpBifurcation (ExplodedNodeSet &Dst, ExplodedNodeSet &Src, const Expr *Ex)
 evalEagerlyAssumeBinOpBifurcation - Given the nodes in 'Src', eagerly assume symbolic expressions of the form 'x != 0' and generate new nodes (stored in Dst) with those assumptions. More...
 
std::pair< const ProgramPointTag *, const ProgramPointTag * > geteagerlyAssumeBinOpBifurcationTags ()
 
SVal evalMinus (SVal X)
 
SVal evalComplement (SVal X)
 
ProgramStateRef handleLValueBitCast (ProgramStateRef state, const Expr *Ex, const LocationContext *LCtx, QualType T, QualType ExTy, const CastExpr *CastE, StmtNodeBuilder &Bldr, ExplodedNode *Pred)
 
ProgramStateRef handleLVectorSplat (ProgramStateRef state, const LocationContext *LCtx, const CastExpr *CastE, StmtNodeBuilder &Bldr, ExplodedNode *Pred)
 
void handleUOExtension (ExplodedNodeSet::iterator I, const UnaryOperator *U, StmtNodeBuilder &Bldr)
 
SVal evalBinOp (ProgramStateRef state, BinaryOperator::Opcode op, NonLoc L, NonLoc R, QualType T)
 
SVal evalBinOp (ProgramStateRef state, BinaryOperator::Opcode op, NonLoc L, SVal R, QualType T)
 
SVal evalBinOp (ProgramStateRef ST, BinaryOperator::Opcode Op, SVal LHS, SVal RHS, QualType T)
 
void evalLoad (ExplodedNodeSet &Dst, const Expr *NodeEx, const Expr *BoundExpr, ExplodedNode *Pred, ProgramStateRef St, SVal location, const ProgramPointTag *tag=nullptr, QualType LoadTy=QualType())
 Simulate a read of the result of Ex. More...
 
void evalStore (ExplodedNodeSet &Dst, const Expr *AssignE, const Expr *StoreE, ExplodedNode *Pred, ProgramStateRef St, SVal TargetLV, SVal Val, const ProgramPointTag *tag=nullptr)
 evalStore - Handle the semantics of a store via an assignment. More...
 
ProgramStateRef bindReturnValue (const CallEvent &Call, const LocationContext *LCtx, ProgramStateRef State)
 Create a new state in which the call return value is binded to the call origin expression. More...
 
void evalCall (ExplodedNodeSet &Dst, ExplodedNode *Pred, const CallEvent &Call)
 Evaluate a call, running pre- and post-call checks and allowing checkers to be responsible for handling the evaluation of the call itself. More...
 
void defaultEvalCall (NodeBuilder &B, ExplodedNode *Pred, const CallEvent &Call)
 Default implementation of call evaluation. More...
 
- Public Member Functions inherited from clang::ento::SubEngine
virtual ~SubEngine ()
 
ProgramStateRef processRegionChange (ProgramStateRef state, const MemRegion *MR, const LocationContext *LCtx)
 

Protected Member Functions

void evalBind (ExplodedNodeSet &Dst, const Stmt *StoreE, ExplodedNode *Pred, SVal location, SVal Val, bool atDeclInit=false, const ProgramPoint *PP=nullptr)
 evalBind - Handle the semantics of binding a value to a specific location. More...
 
ProgramStateRef processPointerEscapedOnBind (ProgramStateRef State, SVal Loc, SVal Val, const LocationContext *LCtx) override
 Call PointerEscape callback when a value escapes as a result of bind. More...
 
ProgramStateRef notifyCheckersOfPointerEscape (ProgramStateRef State, const InvalidatedSymbols *Invalidated, ArrayRef< const MemRegion *> ExplicitRegions, ArrayRef< const MemRegion *> Regions, const CallEvent *Call, RegionAndSymbolInvalidationTraits &ITraits) override
 Call PointerEscape callback when a value escapes as a result of region invalidation. More...
 

Detailed Description

Definition at line 48 of file ExprEngine.h.

Member Enumeration Documentation

◆ InliningModes

The modes of inlining, which override the default analysis-wide settings.

Enumerator
Inline_Regular 

Follow the default settings for inlining callees.

Inline_Minimal 

Do minimal inlining of callees.

Definition at line 51 of file ExprEngine.h.

Constructor & Destructor Documentation

◆ ExprEngine()

ExprEngine::ExprEngine ( AnalysisManager mgr,
bool  gcEnabled,
SetOfConstDecls VisitedCalleesIn,
FunctionSummariesTy FS,
InliningModes  HowToInlineIn 
)

◆ ~ExprEngine()

ExprEngine::~ExprEngine ( )
override

Definition at line 98 of file ExprEngine.cpp.

References clang::ento::BugReporter::FlushReports().

Member Function Documentation

◆ bindReturnValue()

ProgramStateRef ExprEngine::bindReturnValue ( const CallEvent Call,
const LocationContext LCtx,
ProgramStateRef  State 
)

Create a new state in which the call return value is binded to the call origin expression.

Definition at line 524 of file ExprEngineCallAndReturn.cpp.

Referenced by evalBinOp().

◆ CreateCXXTemporaryObject()

void ExprEngine::CreateCXXTemporaryObject ( const MaterializeTemporaryExpr ME,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ defaultEvalCall()

void ExprEngine::defaultEvalCall ( NodeBuilder B,
ExplodedNode Pred,
const CallEvent Call 
)

◆ enqueueEndOfPath()

void clang::ento::ExprEngine::enqueueEndOfPath ( ExplodedNodeSet S)

Referenced by isObjCGCEnabled().

◆ evalBind()

void ExprEngine::evalBind ( ExplodedNodeSet Dst,
const Stmt StoreE,
ExplodedNode Pred,
SVal  location,
SVal  Val,
bool  atDeclInit = false,
const ProgramPoint PP = nullptr 
)
protected

evalBind - Handle the semantics of binding a value to a specific location.

This method is used by evalStore, VisitDeclStmt, and others.

This method is used by evalStore and (soon) VisitDeclStmt, and others.

Definition at line 2389 of file ExprEngine.cpp.

References clang::ento::StmtNodeBuilder::generateNode(), clang::ento::SVal::getAs(), getCheckerManager(), clang::ento::ExplodedNode::getLocationContext(), clang::ento::ExplodedNode::getState(), processPointerEscapedOnBind(), clang::ento::CheckerManager::runCheckersForBind(), and clang::CodeGen::state.

Referenced by CreateCXXTemporaryObject(), evalBinOp(), evalStore(), ProcessInitializer(), and VisitCXXNewExpr().

◆ evalBinOp() [1/3]

SVal clang::ento::ExprEngine::evalBinOp ( ProgramStateRef  state,
BinaryOperator::Opcode  op,
NonLoc  L,
NonLoc  R,
QualType  T 
)
inline

Definition at line 503 of file ExprEngine.h.

References clang::ento::SValBuilder::evalBinOpNN().

Referenced by getInitialState(), and VisitLogicalExpr().

◆ evalBinOp() [2/3]

SVal clang::ento::ExprEngine::evalBinOp ( ProgramStateRef  state,
BinaryOperator::Opcode  op,
NonLoc  L,
SVal  R,
QualType  T 
)
inline

◆ evalBinOp() [3/3]

SVal clang::ento::ExprEngine::evalBinOp ( ProgramStateRef  ST,
BinaryOperator::Opcode  Op,
SVal  LHS,
SVal  RHS,
QualType  T 
)
inline

◆ evalCall()

void ExprEngine::evalCall ( ExplodedNodeSet Dst,
ExplodedNode Pred,
const CallEvent Call 
)

Evaluate a call, running pre- and post-call checks and allowing checkers to be responsible for handling the evaluation of the call itself.

Definition at line 499 of file ExprEngineCallAndReturn.cpp.

References getCheckerManager(), clang::ento::CheckerManager::runCheckersForEvalCall(), clang::ento::CheckerManager::runCheckersForPostCall(), and clang::ento::CheckerManager::runCheckersForPreCall().

Referenced by evalBinOp().

◆ evalComplement()

SVal clang::ento::ExprEngine::evalComplement ( SVal  X)
inline

◆ evalEagerlyAssumeBinOpBifurcation()

void ExprEngine::evalEagerlyAssumeBinOpBifurcation ( ExplodedNodeSet Dst,
ExplodedNodeSet Src,
const Expr Ex 
)

evalEagerlyAssumeBinOpBifurcation - Given the nodes in 'Src', eagerly assume symbolic expressions of the form 'x != 0' and generate new nodes (stored in Dst) with those assumptions.

Definition at line 2595 of file ExprEngine.cpp.

Referenced by getCoreEngine().

◆ evalLoad()

void ExprEngine::evalLoad ( ExplodedNodeSet Dst,
const Expr NodeEx,
const Expr BoundExpr,
ExplodedNode Pred,
ProgramStateRef  St,
SVal  location,
const ProgramPointTag tag = nullptr,
QualType  LoadTy = QualType() 
)

Simulate a read of the result of Ex.

Definition at line 2472 of file ExprEngine.cpp.

References clang::ento::SVal::getAs(), clang::Type::getAs(), clang::ento::SVal::getAsRegion(), and getContext().

Referenced by evalBinOp(), and VisitIncrementDecrementOperator().

◆ evalMinus()

SVal clang::ento::ExprEngine::evalMinus ( SVal  X)
inline

◆ evalStore()

void ExprEngine::evalStore ( ExplodedNodeSet Dst,
const Expr AssignE,
const Expr LocationE,
ExplodedNode Pred,
ProgramStateRef  state,
SVal  location,
SVal  Val,
const ProgramPointTag tag = nullptr 
)

evalStore - Handle the semantics of a store via an assignment.

Parameters
DstThe node set to store generated state nodes
AssignEThe assignment expression if the store happens in an assignment.
LocationEThe location expression that is stored to.
stateThe current simulation state
locationThe location to store the value
ValThe value to be stored

Definition at line 2449 of file ExprEngine.cpp.

References clang::ento::ExplodedNodeSet::begin(), clang::ento::ExplodedNodeSet::empty(), clang::ento::ExplodedNodeSet::end(), evalBind(), and clang::ento::SVal::isUndef().

Referenced by evalBinOp(), and VisitBinaryOperator().

◆ ExecuteWorkList()

bool clang::ento::ExprEngine::ExecuteWorkList ( const LocationContext L,
unsigned  Steps = 150000 
)
inline

Returns true if there is still simulation state on the worklist.

Definition at line 108 of file ExprEngine.h.

References clang::ento::CoreEngine::ExecuteWorkList().

◆ ExecuteWorkListWithInitialState()

bool clang::ento::ExprEngine::ExecuteWorkListWithInitialState ( const LocationContext L,
unsigned  Steps,
ProgramStateRef  InitState,
ExplodedNodeSet Dst 
)
inline

Execute the work list with an initial state.

Nodes that reaches the exit of the function are added into the Dst set, which represent the exit state of the function call. Returns true if there is still simulation state on the worklist.

Definition at line 116 of file ExprEngine.h.

References clang::ento::CoreEngine::ExecuteWorkListWithInitialState().

◆ GenerateAutoTransition()

void clang::ento::ExprEngine::GenerateAutoTransition ( ExplodedNode N)

Referenced by isObjCGCEnabled().

◆ GenerateCallExitNode()

void clang::ento::ExprEngine::GenerateCallExitNode ( ExplodedNode N)

◆ getAnalysisManager()

AnalysisManager& clang::ento::ExprEngine::getAnalysisManager ( )
inlineoverridevirtual

◆ getBasicVals()

BasicValueFactory& clang::ento::ExprEngine::getBasicVals ( )
inline

◆ getBugReporter()

BugReporter& clang::ento::ExprEngine::getBugReporter ( )
inline

◆ getBuilderContext()

const NodeBuilderContext& clang::ento::ExprEngine::getBuilderContext ( )
inline

◆ getCheckerManager()

CheckerManager& clang::ento::ExprEngine::getCheckerManager ( ) const
inline

◆ getConstraintManager()

ConstraintManager& clang::ento::ExprEngine::getConstraintManager ( )
inline

◆ getContext()

ASTContext& clang::ento::ExprEngine::getContext ( ) const
inline

◆ getCoreEngine()

const CoreEngine& clang::ento::ExprEngine::getCoreEngine ( ) const
inline

◆ geteagerlyAssumeBinOpBifurcationTags()

std::pair< const ProgramPointTag *, const ProgramPointTag * > ExprEngine::geteagerlyAssumeBinOpBifurcationTags ( )

Definition at line 2585 of file ExprEngine.cpp.

Referenced by getCoreEngine().

◆ getGraph() [1/2]

ExplodedGraph& clang::ento::ExprEngine::getGraph ( )
inline

Definition at line 159 of file ExprEngine.h.

◆ getGraph() [2/2]

const ExplodedGraph& clang::ento::ExprEngine::getGraph ( ) const
inline

◆ getInitialState()

ProgramStateRef ExprEngine::getInitialState ( const LocationContext InitLoc)
overridevirtual

◆ getStateManager()

ProgramStateManager& clang::ento::ExprEngine::getStateManager ( )
inlineoverridevirtual

◆ getStmt()

const Stmt* clang::ento::ExprEngine::getStmt ( ) const

◆ getStoreManager()

StoreManager& clang::ento::ExprEngine::getStoreManager ( )
inline

◆ getSValBuilder()

SValBuilder& clang::ento::ExprEngine::getSValBuilder ( )
inline

◆ getSymbolManager() [1/2]

SymbolManager& clang::ento::ExprEngine::getSymbolManager ( )
inline

Definition at line 319 of file ExprEngine.h.

◆ getSymbolManager() [2/2]

const SymbolManager& clang::ento::ExprEngine::getSymbolManager ( ) const
inline

Definition at line 320 of file ExprEngine.h.

◆ handleLValueBitCast()

ProgramStateRef ExprEngine::handleLValueBitCast ( ProgramStateRef  state,
const Expr Ex,
const LocationContext LCtx,
QualType  T,
QualType  ExTy,
const CastExpr CastE,
StmtNodeBuilder Bldr,
ExplodedNode Pred 
)

◆ handleLVectorSplat()

ProgramStateRef ExprEngine::handleLVectorSplat ( ProgramStateRef  state,
const LocationContext LCtx,
const CastExpr CastE,
StmtNodeBuilder Bldr,
ExplodedNode Pred 
)

◆ handleUOExtension()

void ExprEngine::handleUOExtension ( ExplodedNodeSet::iterator  I,
const UnaryOperator U,
StmtNodeBuilder Bldr 
)

Definition at line 868 of file ExprEngineC.cpp.

Referenced by evalComplement().

◆ hasEmptyWorkList()

bool clang::ento::ExprEngine::hasEmptyWorkList ( ) const
inline

◆ hasWorkRemaining()

bool clang::ento::ExprEngine::hasWorkRemaining ( ) const
inline

Definition at line 325 of file ExprEngine.h.

References clang::ento::CoreEngine::hasWorkRemaining().

◆ isObjCGCEnabled()

bool clang::ento::ExprEngine::isObjCGCEnabled ( )
inline

◆ notifyCheckersOfPointerEscape()

ProgramStateRef ExprEngine::notifyCheckersOfPointerEscape ( ProgramStateRef  State,
const InvalidatedSymbols Invalidated,
ArrayRef< const MemRegion *>  ExplicitRegions,
ArrayRef< const MemRegion *>  Regions,
const CallEvent Call,
RegionAndSymbolInvalidationTraits ITraits 
)
overrideprotectedvirtual

Call PointerEscape callback when a value escapes as a result of region invalidation.

Parameters
[in]ITraitsSpecifies invalidation traits for regions/symbols.

Implements clang::ento::SubEngine.

Definition at line 2340 of file ExprEngine.cpp.

References getCheckerManager(), clang::ento::PSK_EscapeOther, and clang::ento::CheckerManager::runCheckersForPointerEscape().

Referenced by evalBinOp().

◆ printState()

void ExprEngine::printState ( raw_ostream &  Out,
ProgramStateRef  State,
const char *  NL,
const char *  Sep 
)
overridevirtual

printState - Called by ProgramStateManager to print checker-specific data.

Implements clang::ento::SubEngine.

Definition at line 334 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForPrintState().

◆ processAssume()

ProgramStateRef ExprEngine::processAssume ( ProgramStateRef  state,
SVal  cond,
bool  assumption 
)
overridevirtual

evalAssume - Callback function invoked by the ConstraintManager when making assumptions about state values.

evalAssume - Called by ConstraintManager.

Used to call checker-specific logic for handling assumptions on symbolic values.

Implements clang::ento::SubEngine.

Definition at line 317 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForEvalAssume().

◆ ProcessAutomaticObjDtor()

void ExprEngine::ProcessAutomaticObjDtor ( const CFGAutomaticObjDtor  D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ ProcessBaseDtor()

void ExprEngine::ProcessBaseDtor ( const CFGBaseDtor  D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ processBeginOfFunction()

void ExprEngine::processBeginOfFunction ( NodeBuilderContext BC,
ExplodedNode Pred,
ExplodedNodeSet Dst,
const BlockEdge L 
)
overridevirtual

Called by CoreEngine.

Used to notify checkers that processing a function has begun. Called for both inlined and and top-level functions.

Implements clang::ento::SubEngine.

Definition at line 1920 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForBeginFunction().

Referenced by processCallEnter().

◆ processBranch()

void ExprEngine::processBranch ( const Stmt Condition,
const Stmt Term,
NodeBuilderContext BuilderCtx,
ExplodedNode Pred,
ExplodedNodeSet Dst,
const CFGBlock DstT,
const CFGBlock DstF 
)
overridevirtual

◆ processCallEnter()

void ExprEngine::processCallEnter ( NodeBuilderContext BC,
CallEnter  CE,
ExplodedNode Pred 
)
overridevirtual

◆ processCallExit()

void ExprEngine::processCallExit ( ExplodedNode CEBNode)
overridevirtual

◆ processCFGBlockEntrance()

void ExprEngine::processCFGBlockEntrance ( const BlockEdge L,
NodeBuilderWithSinks nodeBuilder,
ExplodedNode Pred 
)
overridevirtual

◆ processCFGElement()

void ExprEngine::processCFGElement ( const CFGElement  E,
ExplodedNode Pred,
unsigned  StmtIdx,
NodeBuilderContext Ctx 
)
overridevirtual

processCFGElement - Called by CoreEngine.

Used to generate new successor nodes by processing the 'effects' of a CFG element.

Implements clang::ento::SubEngine.

Definition at line 343 of file ExprEngine.cpp.

Referenced by getGraph().

◆ processCleanupTemporaryBranch()

void ExprEngine::processCleanupTemporaryBranch ( const CXXBindTemporaryExpr BTE,
NodeBuilderContext BldCtx,
ExplodedNode Pred,
ExplodedNodeSet Dst,
const CFGBlock DstT,
const CFGBlock DstF 
)
overridevirtual

Called by CoreEngine.

Used to generate successor nodes for temporary destructors depending on whether the corresponding constructor was visited.

Implements clang::ento::SubEngine.

Definition at line 787 of file ExprEngine.cpp.

References clang::ento::BranchNodeBuilder::generateNode(), clang::ento::ExplodedNode::getStackFrame(), clang::ento::ExplodedNode::getState(), and clang::ento::BranchNodeBuilder::markInfeasible().

◆ ProcessDeleteDtor()

void ExprEngine::ProcessDeleteDtor ( const CFGDeleteDtor  D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ processEndOfFunction()

void ExprEngine::processEndOfFunction ( NodeBuilderContext BC,
ExplodedNode Pred,
const ReturnStmt RS = nullptr 
)
overridevirtual

Called by CoreEngine.

ProcessEndPath - Called by CoreEngine.

Used to notify checkers that processing a function has ended. Called for both inlined and and top-level functions.

Used to generate end-of-path nodes when the control reaches the end of a function.

Implements clang::ento::SubEngine.

Definition at line 1930 of file ExprEngine.cpp.

References clang::ento::ExplodedNode::getLocationContext(), clang::ento::ExplodedNode::getState(), clang::LocationContext::inTopFrame(), and removeDeadOnEndOfFunction().

◆ processEndWorklist()

void ExprEngine::processEndWorklist ( bool  hasWorkRemaining)
overridevirtual

Called by CoreEngine when the analysis worklist has terminated.

Implements clang::ento::SubEngine.

Definition at line 339 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForEndAnalysis().

◆ ProcessImplicitDtor()

void ExprEngine::ProcessImplicitDtor ( const CFGImplicitDtor  D,
ExplodedNode Pred 
)

◆ processIndirectGoto()

void ExprEngine::processIndirectGoto ( IndirectGotoNodeBuilder builder)
overridevirtual

processIndirectGoto - Called by CoreEngine.

Used to generate successor nodes by processing the 'effects' of a computed goto jump.

Implements clang::ento::SubEngine.

Definition at line 1862 of file ExprEngine.cpp.

References clang::ento::SVal::getAs(), clang::ento::IndirectGotoNodeBuilder::getLocationContext(), clang::ento::IndirectGotoNodeBuilder::getState(), clang::ento::IndirectGotoNodeBuilder::getTarget(), and clang::CodeGen::state.

◆ ProcessInitializer()

void ExprEngine::ProcessInitializer ( const CFGInitializer  I,
ExplodedNode Pred 
)

◆ ProcessLoopExit()

void ExprEngine::ProcessLoopExit ( const Stmt S,
ExplodedNode Pred 
)

Definition at line 515 of file ExprEngine.cpp.

◆ ProcessMemberDtor()

void ExprEngine::ProcessMemberDtor ( const CFGMemberDtor  D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ ProcessNewAllocator()

void ExprEngine::ProcessNewAllocator ( const CXXNewExpr NE,
ExplodedNode Pred 
)

◆ processPointerEscapedOnBind()

ProgramStateRef ExprEngine::processPointerEscapedOnBind ( ProgramStateRef  State,
SVal  Loc,
SVal  Val,
const LocationContext LCtx 
)
overrideprotectedvirtual

Call PointerEscape callback when a value escapes as a result of bind.

Implements clang::ento::SubEngine.

Definition at line 2296 of file ExprEngine.cpp.

References clang::ento::SVal::getAs(), getCheckerManager(), clang::ento::PSK_EscapeOnBind, clang::ento::CheckerManager::runCheckersForPointerEscape(), and State.

Referenced by evalBind(), and evalBinOp().

◆ processRegionChanges()

ProgramStateRef ExprEngine::processRegionChanges ( ProgramStateRef  state,
const InvalidatedSymbols invalidated,
ArrayRef< const MemRegion *>  ExplicitRegions,
ArrayRef< const MemRegion *>  Regions,
const LocationContext LCtx,
const CallEvent Call 
)
overridevirtual

processRegionChanges - Called by ProgramStateManager whenever a change is made to the store.

Used to update checkers that track region values.

Implements clang::ento::SubEngine.

Definition at line 323 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForRegionChanges().

◆ processStaticInitializer()

void clang::ento::ExprEngine::processStaticInitializer ( const DeclStmt DS,
NodeBuilderContext BuilderCtx,
ExplodedNode Pred,
ExplodedNodeSet Dst,
const CFGBlock DstT,
const CFGBlock DstF 
)
overridevirtual

Called by CoreEngine.

Used to processing branching behavior at static initializers.

Implements clang::ento::SubEngine.

◆ ProcessStmt()

void ExprEngine::ProcessStmt ( const CFGStmt  S,
ExplodedNode Pred 
)

Definition at line 484 of file ExprEngine.cpp.

◆ processSwitch()

void ExprEngine::processSwitch ( SwitchNodeBuilder builder)
overridevirtual

ProcessSwitch - Called by CoreEngine.

Used to generate successor nodes by processing the 'effects' of a switch statement.

Implements clang::ento::SubEngine.

Definition at line 1959 of file ExprEngine.cpp.

References clang::ento::SVal::castAs(), clang::ento::SwitchNodeBuilder::getCondition(), clang::ento::SwitchNodeBuilder::getLocationContext(), clang::ento::SwitchNodeBuilder::getState(), clang::ento::SVal::isUndef(), and clang::CodeGen::state.

◆ ProcessTemporaryDtor()

void ExprEngine::ProcessTemporaryDtor ( const CFGTemporaryDtor  D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ removeDead()

void ExprEngine::removeDead ( ExplodedNode Node,
ExplodedNodeSet Out,
const Stmt ReferenceStmt,
const LocationContext LC,
const Stmt DiagnosticStmt = nullptr,
ProgramPoint::Kind  K = ProgramPoint::PreStmtPurgeDeadSymbolsKind 
)

Run the analyzer's garbage collection - remove dead symbols and bindings from the state.

Checkers can participate in this process with two callbacks: checkLiveSymbols and checkDeadSymbols. See the CheckerDocumentation class for more information.

Parameters
NodeThe predecessor node, from which the processing should start.
OutThe returned set of output nodes.
ReferenceStmtThe statement which is about to be processed. Everything needed for this statement should be considered live. A null statement means that everything in child LocationContexts is dead.
LCThe location context of the ReferenceStmt. A null location context means that we have reached the end of analysis and that all statements and local variables should be considered dead.
DiagnosticStmtUsed as a location for any warnings that should occur while removing the dead (e.g. leaks). By default, the ReferenceStmt is used.
KDenotes whether this is a pre- or post-statement purge. This must only be ProgramPoint::PostStmtPurgeDeadSymbolsKind if an entire location context is being cleared, in which case the ReferenceStmt must either be a ReturnStmt or NULL. Otherwise, it must be ProgramPoint::PreStmtPurgeDeadSymbolsKind (the default) and ReferenceStmt must be valid (non-null).

Definition at line 402 of file ExprEngine.cpp.

References clang::ento::StmtNodeBuilder::generateNode(), getCheckerManager(), clang::LocationContext::getCurrentStackFrame(), clang::LocationContext::getParent(), clang::ento::ExplodedNode::getState(), getStoreManager(), clang::ento::SymbolReaper::hasDeadSymbols(), clang::ProgramPoint::PostStmtPurgeDeadSymbolsKind, clang::ProgramPoint::PreStmtPurgeDeadSymbolsKind, clang::ento::ProgramStateManager::removeDeadBindings(), clang::ento::CheckerManager::runCheckersForDeadSymbols(), and clang::ento::CheckerManager::runCheckersForLiveSymbols().

Referenced by getGraph(), processCallExit(), and removeDeadOnEndOfFunction().

◆ removeDeadOnEndOfFunction()

void ExprEngine::removeDeadOnEndOfFunction ( NodeBuilderContext BC,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ ViewGraph() [1/2]

void ExprEngine::ViewGraph ( bool  trim = false)

Visualize the ExplodedGraph created by executing the simulation.

Definition at line 2922 of file ExprEngine.cpp.

◆ ViewGraph() [2/2]

void ExprEngine::ViewGraph ( ArrayRef< const ExplodedNode *>  Nodes)

Visualize a trimmed ExplodedGraph that only contains paths to the given nodes.

Definition at line 2953 of file ExprEngine.cpp.

References getContext(), and clang::ASTContext::getSourceManager().

◆ Visit()

void ExprEngine::Visit ( const Stmt S,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

Visit - Transfer function logic for all statements.

Dispatches to other functions that handle specific kinds of statements.

Definition at line 845 of file ExprEngine.cpp.

Referenced by getCoreEngine().

◆ VisitArraySubscriptExpr()

void ExprEngine::VisitArraySubscriptExpr ( const ArraySubscriptExpr Ex,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitAtomicExpr()

void ExprEngine::VisitAtomicExpr ( const AtomicExpr E,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitMemberExpr - Transfer function for builtin atomic expressions.

Definition at line 2253 of file ExprEngine.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForPreStmt().

Referenced by getCoreEngine().

◆ VisitBinaryOperator()

void ExprEngine::VisitBinaryOperator ( const BinaryOperator B,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitBlockExpr()

void ExprEngine::VisitBlockExpr ( const BlockExpr BE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCallExpr()

void ExprEngine::VisitCallExpr ( const CallExpr CE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCast()

void ExprEngine::VisitCast ( const CastExpr CastE,
const Expr Ex,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitCast - Transfer function logic for all casts (implicit and explicit).

Definition at line 288 of file ExprEngineC.cpp.

References clang::CastExpr::getCastKind(), getCheckerManager(), and clang::ento::CheckerManager::runCheckersForPreStmt().

Referenced by getCoreEngine().

◆ VisitCommonDeclRefExpr()

void ExprEngine::VisitCommonDeclRefExpr ( const Expr DR,
const NamedDecl D,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCompoundLiteralExpr()

void ExprEngine::VisitCompoundLiteralExpr ( const CompoundLiteralExpr CL,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXBindTemporaryExpr()

void ExprEngine::VisitCXXBindTemporaryExpr ( const CXXBindTemporaryExpr BTE,
ExplodedNodeSet PreVisit,
ExplodedNodeSet Dst 
)

Definition at line 804 of file ExprEngine.cpp.

References clang::ento::StmtNodeBuilder::generateNode(), getAnalysisManager(), and Node.

Referenced by getCoreEngine().

◆ VisitCXXCatchStmt()

void ExprEngine::VisitCXXCatchStmt ( const CXXCatchStmt CS,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXConstructExpr()

void ExprEngine::VisitCXXConstructExpr ( const CXXConstructExpr E,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXDeleteExpr()

void ExprEngine::VisitCXXDeleteExpr ( const CXXDeleteExpr CDE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXDestructor()

void ExprEngine::VisitCXXDestructor ( QualType  ObjectType,
const MemRegion Dest,
const Stmt S,
bool  IsBaseDtor,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXNewAllocatorCall()

void ExprEngine::VisitCXXNewAllocatorCall ( const CXXNewExpr CNE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXNewExpr()

void ExprEngine::VisitCXXNewExpr ( const CXXNewExpr CNE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitCXXThisExpr()

void ExprEngine::VisitCXXThisExpr ( const CXXThisExpr TE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitDeclStmt()

void ExprEngine::VisitDeclStmt ( const DeclStmt DS,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitDeclStmt - Transfer function logic for DeclStmts.

Definition at line 552 of file ExprEngineC.cpp.

References clang::DeclStmt::decl_begin(), getCheckerManager(), clang::ento::ExplodedNodeSet::insert(), and clang::ento::CheckerManager::runCheckersForPreStmt().

Referenced by getCoreEngine().

◆ VisitGCCAsmStmt()

void ExprEngine::VisitGCCAsmStmt ( const GCCAsmStmt A,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitGuardedExpr()

void ExprEngine::VisitGuardedExpr ( const Expr Ex,
const Expr L,
const Expr R,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitIncrementDecrementOperator()

void ExprEngine::VisitIncrementDecrementOperator ( const UnaryOperator U,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitInitListExpr()

void ExprEngine::VisitInitListExpr ( const InitListExpr E,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitLambdaExpr()

void ExprEngine::VisitLambdaExpr ( const LambdaExpr LE,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitLogicalExpr()

void ExprEngine::VisitLogicalExpr ( const BinaryOperator B,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitLvalObjCIvarRefExpr()

void ExprEngine::VisitLvalObjCIvarRefExpr ( const ObjCIvarRefExpr DR,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitMemberExpr()

void ExprEngine::VisitMemberExpr ( const MemberExpr M,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitMemberExpr - Transfer function for member expressions.

Definition at line 2172 of file ExprEngine.cpp.

References getCheckerManager(), clang::MemberExpr::getMemberDecl(), and clang::ento::CheckerManager::runCheckersForPreStmt().

Referenced by getCoreEngine().

◆ VisitMSAsmStmt()

void ExprEngine::VisitMSAsmStmt ( const MSAsmStmt A,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitMSAsmStmt - Transfer function logic for MS inline asm.

Definition at line 2660 of file ExprEngine.cpp.

References clang::ento::StmtNodeBuilder::generateNode(), and clang::ento::ExplodedNode::getState().

Referenced by getCoreEngine().

◆ VisitObjCAtSynchronizedStmt()

void ExprEngine::VisitObjCAtSynchronizedStmt ( const ObjCAtSynchronizedStmt S,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

Transfer function logic for ObjCAtSynchronizedStmts.

Definition at line 39 of file ExprEngineObjC.cpp.

Referenced by getCoreEngine().

◆ VisitObjCForCollectionStmt()

void ExprEngine::VisitObjCForCollectionStmt ( const ObjCForCollectionStmt S,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitObjCForCollectionStmt - Transfer function logic for ObjCForCollectionStmt.

Definition at line 45 of file ExprEngineObjC.cpp.

Referenced by getCoreEngine().

◆ VisitObjCMessage()

void ExprEngine::VisitObjCMessage ( const ObjCMessageExpr ME,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitOffsetOfExpr()

void ExprEngine::VisitOffsetOfExpr ( const OffsetOfExpr Ex,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitReturnStmt()

void ExprEngine::VisitReturnStmt ( const ReturnStmt R,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

◆ VisitUnaryExprOrTypeTraitExpr()

void ExprEngine::VisitUnaryExprOrTypeTraitExpr ( const UnaryExprOrTypeTraitExpr Ex,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitUnaryExprOrTypeTraitExpr - Transfer function for sizeof.

Definition at line 826 of file ExprEngineC.cpp.

References getCheckerManager(), clang::UnaryExprOrTypeTraitExpr::getTypeOfArgument(), clang::ento::CheckerManager::runCheckersForPreStmt(), and clang::T.

Referenced by getCoreEngine(), and VisitOffsetOfExpr().

◆ VisitUnaryOperator()

void ExprEngine::VisitUnaryOperator ( const UnaryOperator B,
ExplodedNode Pred,
ExplodedNodeSet Dst 
)

VisitUnaryOperator - Transfer function logic for unary operators.

Definition at line 885 of file ExprEngineC.cpp.

References getCheckerManager(), and clang::ento::CheckerManager::runCheckersForPreStmt().

Referenced by getCoreEngine().

◆ wasBlocksExhausted()

bool clang::ento::ExprEngine::wasBlocksExhausted ( ) const
inline

Definition at line 323 of file ExprEngine.h.

References clang::ento::CoreEngine::wasBlocksExhausted().


The documentation for this class was generated from the following files: