#include "clang/StaticAnalyzer/Core/PathSensitive/SValBuilder.h"

Collaboration diagram for clang::ento::SValBuilder:

[legend]

Public Member Functions
virtual SVal	dispatchCast (SVal val, QualType castTy)=0

	SValBuilder (llvm::BumpPtrAllocator &alloc, ASTContext &context, ProgramStateManager &stateMgr)

virtual	~SValBuilder ()=default

bool	haveSameType (const SymExpr Sym1, const SymExpr Sym2)

bool	haveSameType (QualType Ty1, QualType Ty2)

SVal	evalCast (SVal val, QualType castTy, QualType originalType)

SVal	evalIntegralCast (ProgramStateRef state, SVal val, QualType castTy, QualType originalType)

virtual SVal	evalMinus (NonLoc val)=0

virtual SVal	evalComplement (NonLoc val)=0

virtual SVal	evalBinOpNN (ProgramStateRef state, BinaryOperator::Opcode op, NonLoc lhs, NonLoc rhs, QualType resultTy)=0
	Create a new value which represents a binary expression with two non- location operands. More...

virtual SVal	evalBinOpLL (ProgramStateRef state, BinaryOperator::Opcode op, Loc lhs, Loc rhs, QualType resultTy)=0
	Create a new value which represents a binary expression with two memory location operands. More...

virtual SVal	evalBinOpLN (ProgramStateRef state, BinaryOperator::Opcode op, Loc lhs, NonLoc rhs, QualType resultTy)=0
	Create a new value which represents a binary expression with a memory location and non-location operands. More...

virtual const llvm::APSInt *	getKnownValue (ProgramStateRef state, SVal val)=0
	Evaluates a given SVal. More...

virtual SVal	simplifySVal (ProgramStateRef State, SVal Val)=0
	Simplify symbolic expressions within a given SVal. More...

SVal	makeSymExprValNN (BinaryOperator::Opcode op, NonLoc lhs, NonLoc rhs, QualType resultTy)
	Constructs a symbolic expression for two non-location values. More...

SVal	evalBinOp (ProgramStateRef state, BinaryOperator::Opcode op, SVal lhs, SVal rhs, QualType type)

ConditionTruthVal	areEqual (ProgramStateRef state, SVal lhs, SVal rhs)

SVal	evalEQ (ProgramStateRef state, SVal lhs, SVal rhs)

DefinedOrUnknownSVal	evalEQ (ProgramStateRef state, DefinedOrUnknownSVal lhs, DefinedOrUnknownSVal rhs)

ASTContext &	getContext ()

const ASTContext &	getContext () const

ProgramStateManager &	getStateManager ()

QualType	getConditionType () const

QualType	getArrayIndexType () const

BasicValueFactory &	getBasicValueFactory ()

const BasicValueFactory &	getBasicValueFactory () const

SymbolManager &	getSymbolManager ()

const SymbolManager &	getSymbolManager () const

MemRegionManager &	getRegionManager ()

const MemRegionManager &	getRegionManager () const

const SymbolConjured *	conjureSymbol (const Stmt stmt, const LocationContext LCtx, QualType type, unsigned visitCount, const void *symbolTag=nullptr)

const SymbolConjured *	conjureSymbol (const Expr expr, const LocationContext LCtx, unsigned visitCount, const void *symbolTag=nullptr)

DefinedOrUnknownSVal	makeZeroVal (QualType type)
	Construct an SVal representing '0' for the specified type. More...

DefinedOrUnknownSVal	getRegionValueSymbolVal (const TypedValueRegion *region)
	Make a unique symbol for value of region. More...

DefinedOrUnknownSVal	conjureSymbolVal (const void symbolTag, const Expr expr, const LocationContext *LCtx, unsigned count)
	Create a new symbol with a unique 'name'. More...

DefinedOrUnknownSVal	conjureSymbolVal (const void symbolTag, const Expr expr, const LocationContext *LCtx, QualType type, unsigned count)

DefinedOrUnknownSVal	conjureSymbolVal (const Stmt stmt, const LocationContext LCtx, QualType type, unsigned visitCount)

DefinedOrUnknownSVal	getConjuredHeapSymbolVal (const Expr E, const LocationContext LCtx, unsigned Count)
	Conjure a symbol representing heap allocated memory region. More...

DefinedOrUnknownSVal	getDerivedRegionValueSymbolVal (SymbolRef parentSymbol, const TypedValueRegion *region)

DefinedSVal	getMetadataSymbolVal (const void symbolTag, const MemRegion region, const Expr expr, QualType type, const LocationContext LCtx, unsigned count)

DefinedSVal	getMemberPointer (const DeclaratorDecl *DD)

DefinedSVal	getFunctionPointer (const FunctionDecl *func)

DefinedSVal	getBlockPointer (const BlockDecl block, CanQualType locTy, const LocationContext locContext, unsigned blockCount)

Optional< SVal >	getConstantVal (const Expr *E)
	Returns the value of `E`, if it can be determined in a non-path-sensitive manner. More...

NonLoc	makeCompoundVal (QualType type, llvm::ImmutableList< SVal > vals)

NonLoc	makeLazyCompoundVal (const StoreRef &store, const TypedValueRegion *region)

NonLoc	makePointerToMember (const DeclaratorDecl *DD)

NonLoc	makePointerToMember (const PointerToMemberData *PTMD)

NonLoc	makeZeroArrayIndex ()

NonLoc	makeArrayIndex (uint64_t idx)

SVal	convertToArrayIndex (SVal val)

nonloc::ConcreteInt	makeIntVal (const IntegerLiteral *integer)

nonloc::ConcreteInt	makeBoolVal (const ObjCBoolLiteralExpr *boolean)

nonloc::ConcreteInt	makeBoolVal (const CXXBoolLiteralExpr *boolean)

nonloc::ConcreteInt	makeIntVal (const llvm::APSInt &integer)

loc::ConcreteInt	makeIntLocVal (const llvm::APSInt &integer)

NonLoc	makeIntVal (const llvm::APInt &integer, bool isUnsigned)

DefinedSVal	makeIntVal (uint64_t integer, QualType type)

NonLoc	makeIntVal (uint64_t integer, bool isUnsigned)

NonLoc	makeIntValWithPtrWidth (uint64_t integer, bool isUnsigned)

NonLoc	makeLocAsInteger (Loc loc, unsigned bits)

NonLoc	makeNonLoc (const SymExpr *lhs, BinaryOperator::Opcode op, const llvm::APSInt &rhs, QualType type)

NonLoc	makeNonLoc (const llvm::APSInt &rhs, BinaryOperator::Opcode op, const SymExpr *lhs, QualType type)

NonLoc	makeNonLoc (const SymExpr lhs, BinaryOperator::Opcode op, const SymExpr rhs, QualType type)

NonLoc	makeNonLoc (const SymExpr *operand, QualType fromTy, QualType toTy)
	Create a NonLoc value for cast. More...

nonloc::ConcreteInt	makeTruthVal (bool b, QualType type)

nonloc::ConcreteInt	makeTruthVal (bool b)

Loc	makeNullWithType (QualType type)
	Create NULL pointer, with proper pointer bit-width for given address space. More...

Loc	makeNull ()

Loc	makeLoc (SymbolRef sym)

Loc	makeLoc (const MemRegion *region)

Loc	makeLoc (const AddrLabelExpr *expr)

Loc	makeLoc (const llvm::APSInt &integer)

SVal	makeSymbolVal (SymbolRef Sym)
	Make an SVal that represents the given symbol. More...

loc::MemRegionVal	getCXXThis (const CXXMethodDecl D, const StackFrameContext SFC)
	Return a memory region for the 'this' object reference. More...

loc::MemRegionVal	getCXXThis (const CXXRecordDecl D, const StackFrameContext SFC)
	Return a memory region for the 'this' object reference. More...

Protected Member Functions
virtual SVal	evalCastFromNonLoc (NonLoc val, QualType castTy)=0

virtual SVal	evalCastFromLoc (Loc val, QualType castTy)=0

Protected Attributes
ASTContext &	Context

BasicValueFactory	BasicVals
	Manager of APSInt values. More...

SymbolManager	SymMgr
	Manages the creation of symbols. More...

MemRegionManager	MemMgr
	Manages the creation of memory regions. More...

ProgramStateManager &	StateMgr

const QualType	ArrayIndexTy
	The scalar type to use for array indices. More...

const unsigned	ArrayIndexWidth
	The width of the scalar type used for array indices. More...

Detailed Description

Definition at line 53 of file SValBuilder.h.

Constructor & Destructor Documentation

◆ SValBuilder()

clang::ento::SValBuilder::SValBuilder	(	llvm::BumpPtrAllocator &	alloc,
		ASTContext &	context,
		ProgramStateManager &	stateMgr
	)

inline

Definition at line 85 of file SValBuilder.h.

References ~SValBuilder().

◆ ~SValBuilder()

virtual clang::ento::SValBuilder::~SValBuilder ( )

virtualdefault

Referenced by SValBuilder().

Member Function Documentation

◆ areEqual()

ConditionTruthVal SValBuilder::areEqual	(	ProgramStateRef	state,
		SVal	lhs,
		SVal	rhs
	)

Returns: Whether values in lhs and rhs are equal at state.

Definition at line 438 of file SValBuilder.cpp.

References evalEQ().

Referenced by haveSameType().

◆ conjureSymbol() [1/2]

const SymbolConjured* clang::ento::SValBuilder::conjureSymbol	(	const Stmt *	stmt,
		const LocationContext *	LCtx,
		QualType	type,
		unsigned	visitCount,
		const void *	symbolTag = `nullptr`
	)

inline

Definition at line 180 of file SValBuilder.h.

References clang::ento::SymbolManager::conjureSymbol().

◆ conjureSymbol() [2/2]

const SymbolConjured* clang::ento::SValBuilder::conjureSymbol	(	const Expr *	expr,
		const LocationContext *	LCtx,
		unsigned	visitCount,
		const void *	symbolTag = `nullptr`
	)

inline

Definition at line 188 of file SValBuilder.h.

References clang::ento::SymbolManager::conjureSymbol(), conjureSymbolVal(), clang::ast_matchers::expr, getBlockPointer(), getConjuredHeapSymbolVal(), getConstantVal(), getDerivedRegionValueSymbolVal(), getFunctionPointer(), getMemberPointer(), getMetadataSymbolVal(), getRegionValueSymbolVal(), makeZeroVal(), and clang::ast_matchers::stmt.

◆ conjureSymbolVal() [1/3]

DefinedOrUnknownSVal clang::ento::SValBuilder::conjureSymbolVal	(	const void *	symbolTag,
		const Expr *	expr,
		const LocationContext *	LCtx,
		unsigned	count
	)

Create a new symbol with a unique 'name'.

We resort to conjured symbols when we cannot construct a derived symbol. The advantage of symbols derived/built from other symbols is that we preserve the relation between related(or even equivalent) expressions, so conjured symbols should be used sparingly.

◆ conjureSymbolVal() [2/3]

DefinedOrUnknownSVal SValBuilder::conjureSymbolVal	(	const void *	symbolTag,
		const Expr *	expr,
		const LocationContext *	LCtx,
		QualType	type,
		unsigned	count
	)

Definition at line 154 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), clang::ento::SymbolManager::conjureSymbol(), clang::ento::MemRegionManager::getSymbolicRegion(), clang::ento::Loc::isLocType(), clang::Type::isNullPtrType(), makeZeroVal(), MemMgr, and SymMgr.

◆ conjureSymbolVal() [3/3]

DefinedOrUnknownSVal SValBuilder::conjureSymbolVal	(	const Stmt *	stmt,
		const LocationContext *	LCtx,
		QualType	type,
		unsigned	visitCount
	)

Definition at line 173 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), clang::ento::SymbolManager::conjureSymbol(), clang::ento::MemRegionManager::getSymbolicRegion(), clang::ento::Loc::isLocType(), clang::Type::isNullPtrType(), makeZeroVal(), MemMgr, and SymMgr.

◆ convertToArrayIndex()

SVal SValBuilder::convertToArrayIndex ( SVal val )

Definition at line 100 of file SValBuilder.cpp.

References ArrayIndexTy, ArrayIndexWidth, clang::ento::SVal::castAs(), evalCastFromNonLoc(), clang::ento::SVal::getAs(), and clang::ento::SVal::isUnknownOrUndef().

Referenced by clang::ento::StoreManager::getLValueElement(), and makeArrayIndex().

◆ dispatchCast()

virtual SVal clang::ento::SValBuilder::dispatchCast	(	SVal	val,
		QualType	castTy
	)

pure virtual

Referenced by clang::ento::StoreManager::CastRetrievedVal(), and evalCast().

◆ evalBinOp()

SVal SValBuilder::evalBinOp	(	ProgramStateRef	state,
		BinaryOperator::Opcode	op,
		SVal	lhs,
		SVal	rhs,
		QualType	type
	)

Definition at line 405 of file SValBuilder.cpp.

References clang::ento::SVal::castAs(), evalBinOpLL(), evalBinOpLN(), evalBinOpNN(), clang::ento::SVal::getAs(), clang::ento::SVal::isUndef(), and clang::ento::SVal::isUnknown().

Referenced by clang::ento::ExprEngine::evalBinOp(), evalEQ(), and haveSameType().

◆ evalBinOpLL()

virtual SVal clang::ento::SValBuilder::evalBinOpLL	(	ProgramStateRef	state,
		BinaryOperator::Opcode	op,
		Loc	lhs,
		Loc	rhs,
		QualType	resultTy
	)

pure virtual

Create a new value which represents a binary expression with two memory location operands.

Referenced by evalBinOp(), and haveSameType().

◆ evalBinOpLN()

virtual SVal clang::ento::SValBuilder::evalBinOpLN	(	ProgramStateRef	state,
		BinaryOperator::Opcode	op,
		Loc	lhs,
		NonLoc	rhs,
		QualType	resultTy
	)

pure virtual

Create a new value which represents a binary expression with a memory location and non-location operands.

For example, this would be used to evaluate a pointer arithmetic operation.

Referenced by evalBinOp(), and haveSameType().

◆ evalBinOpNN()

virtual SVal clang::ento::SValBuilder::evalBinOpNN	(	ProgramStateRef	state,
		BinaryOperator::Opcode	op,
		NonLoc	lhs,
		NonLoc	rhs,
		QualType	resultTy
	)

pure virtual

Create a new value which represents a binary expression with two non- location operands.

Referenced by clang::ento::ProgramState::assumeInBound(), evalBinOp(), clang::ento::ExprEngine::evalBinOp(), evalIntegralCast(), and haveSameType().

◆ evalCast()

SVal SValBuilder::evalCast	(	SVal	val,
		QualType	castTy,
		QualType	originalType
	)

Definition at line 526 of file SValBuilder.cpp.

References clang::ento::ProgramStateManager::ArrayToPointer(), clang::ento::SVal::castAs(), clang::ento::StoreManager::castRegion(), Context, dispatchCast(), evalCastFromLoc(), clang::ento::SVal::getAs(), clang::ento::SVal::getAsRegion(), clang::ento::SVal::getAsSymbol(), getBasicValueFactory(), clang::QualType::getCanonicalType(), clang::ASTContext::getCanonicalType(), clang::ASTContext::getPointerType(), clang::ento::ProgramStateManager::getStoreManager(), clang::Type::isBlockPointerType(), clang::Type::isBooleanType(), clang::ento::SVal::isConstant(), clang::Type::isFunctionPointerType(), clang::Type::isFunctionType(), clang::Type::isIntegralOrEnumerationType(), clang::ento::Loc::isLocType(), clang::Type::isMemberPointerType(), clang::Type::isPointerType(), clang::Type::isReferenceType(), clang::ento::SVal::isUnknownOrUndef(), clang::Type::isVariableArrayType(), clang::ento::SVal::isZeroConstant(), makeNonLoc(), makeTruthVal(), shouldBeModeledWithNoOp(), and StateMgr.

Referenced by clang::ento::SimpleConstraintManager::assume(), evalIntegralCast(), getConstantVal(), clang::ento::ExprEngine::handleLValueBitCast(), haveSameType(), clang::ento::ExprEngine::processCallExit(), clang::ento::ExprEngine::VisitCXXNewExpr(), and clang::ento::ExprEngine::VisitLogicalExpr().

◆ evalCastFromLoc()

virtual SVal clang::ento::SValBuilder::evalCastFromLoc	(	Loc	val,
		QualType	castTy
	)

protectedpure virtual

Referenced by evalCast().

◆ evalCastFromNonLoc()

virtual SVal clang::ento::SValBuilder::evalCastFromNonLoc	(	NonLoc	val,
		QualType	castTy
	)

protectedpure virtual

Referenced by convertToArrayIndex().

◆ evalComplement()

virtual SVal clang::ento::SValBuilder::evalComplement ( NonLoc val )

pure virtual

Referenced by clang::ento::ExprEngine::evalComplement(), and haveSameType().

◆ evalEQ() [1/2]

SVal SValBuilder::evalEQ	(	ProgramStateRef	state,
		SVal	lhs,
		SVal	rhs
	)

Definition at line 443 of file SValBuilder.cpp.

References evalBinOp(), and getConditionType().

Referenced by areEqual(), evalEQ(), and haveSameType().

◆ evalEQ() [2/2]

DefinedOrUnknownSVal SValBuilder::evalEQ	(	ProgramStateRef	state,
		DefinedOrUnknownSVal	lhs,
		DefinedOrUnknownSVal	rhs
	)

Definition at line 447 of file SValBuilder.cpp.

References clang::ento::SVal::castAs(), and evalEQ().

◆ evalIntegralCast()

SVal SValBuilder::evalIntegralCast	(	ProgramStateRef	state,
		SVal	val,
		QualType	castTy,
		QualType	originalType
	)

Definition at line 490 of file SValBuilder.cpp.

References clang::ento::SVal::castAs(), evalBinOpNN(), evalCast(), clang::ento::SVal::getAsSymbolicExpression(), getConditionType(), getContext(), clang::ento::APSIntType::getMaxValue(), clang::Type::isUnsignedIntegerType(), makeIntVal(), and makeNonLoc().

Referenced by haveSameType(), and clang::ento::ExprEngine::VisitCast().

◆ evalMinus()

virtual SVal clang::ento::SValBuilder::evalMinus ( NonLoc val )

pure virtual

Referenced by clang::ento::ExprEngine::evalMinus(), and haveSameType().

◆ getArrayIndexType()

QualType clang::ento::SValBuilder::getArrayIndexType ( ) const

inline

Definition at line 165 of file SValBuilder.h.

References ArrayIndexTy.

Referenced by clang::ento::ProgramState::assumeInBound(), clang::ento::TypedValueRegion::getExtent(), and clang::ento::StringRegion::getExtent().

◆ getBasicValueFactory() [1/2]

BasicValueFactory& clang::ento::SValBuilder::getBasicValueFactory ( )

inline

Definition at line 169 of file SValBuilder.h.

References BasicVals.

Referenced by clang::ento::ProgramState::assumeInBound(), clang::ento::nonloc::ConcreteInt::evalBinOp(), evalCast(), clang::ento::SimpleConstraintManager::getBasicVals(), and clang::ento::StoreManager::getLValueElement().

◆ getBasicValueFactory() [2/2]

const BasicValueFactory& clang::ento::SValBuilder::getBasicValueFactory ( ) const

inline

Definition at line 170 of file SValBuilder.h.

References BasicVals.

◆ getBlockPointer()

DefinedSVal SValBuilder::getBlockPointer	(	const BlockDecl *	block,
		CanQualType	locTy,
		const LocationContext *	locContext,
		unsigned	blockCount
	)

Definition at line 260 of file SValBuilder.cpp.

References clang::LocationContext::getAnalysisDeclContext(), clang::ento::MemRegionManager::getBlockCodeRegion(), clang::ento::MemRegionManager::getBlockDataRegion(), and MemMgr.

Referenced by conjureSymbol(), and clang::ento::ExprEngine::VisitBlockExpr().

◆ getConditionType()

QualType clang::ento::SValBuilder::getConditionType ( ) const

inline

Definition at line 161 of file SValBuilder.h.

References clang::ASTContext::BoolTy, clang::ASTContext::getLangOpts(), and clang::ASTContext::IntTy.

Referenced by evalEQ(), evalIntegralCast(), and clang::ento::ExprEngine::getInitialState().

◆ getConjuredHeapSymbolVal()

DefinedOrUnknownSVal SValBuilder::getConjuredHeapSymbolVal	(	const Expr *	E,
		const LocationContext *	LCtx,
		unsigned	Count
	)

Conjure a symbol representing heap allocated memory region.

Note, the expression should represent a location.

Definition at line 192 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), clang::ento::SymbolManager::conjureSymbol(), clang::ento::MemRegionManager::getSymbolicHeapRegion(), clang::Expr::getType(), clang::ento::Loc::isLocType(), clang::Type::isNullPtrType(), makeZeroVal(), MemMgr, and SymMgr.

Referenced by conjureSymbol(), and clang::ento::ExprEngine::VisitCXXNewExpr().

◆ getConstantVal()

Optional< SVal > SValBuilder::getConstantVal ( const Expr * E )

Returns the value of E, if it can be determined in a non-path-sensitive manner.

If E is not a constant or cannot be modeled, returns None.

Definition at line 286 of file SValBuilder.cpp.

References evalCast(), clang::Expr::EvaluateAsInt(), getContext(), clang::APValue::getInt(), getRegionManager(), clang::Stmt::getStmtClass(), clang::Expr::getType(), clang::Expr::IgnoreParens(), clang::Expr::isGLValue(), clang::ento::Loc::isLocType(), clang::Expr::isNullPointerConstant(), makeBoolVal(), makeIntVal(), makeLoc(), makeNull(), makeTruthVal(), makeZeroVal(), clang::Expr::NPC_ValueDependentIsNotNull, and clang::Expr::EvalResult::Val.

Referenced by conjureSymbol().

◆ getContext() [1/2]

ASTContext& clang::ento::SValBuilder::getContext ( )

inline

Definition at line 156 of file SValBuilder.h.

References Context.

Referenced by clang::ento::SimpleConstraintManager::assume(), clang::ento::ProgramState::assumeInBound(), clang::ento::ExprEngine::CreateCXXTemporaryObject(), evalIntegralCast(), getConstantVal(), getCXXThis(), clang::ento::TypedValueRegion::getExtent(), clang::ento::FieldRegion::getExtent(), and clang::ento::StoreManager::MakeElementRegion().

◆ getContext() [2/2]

const ASTContext& clang::ento::SValBuilder::getContext ( ) const

inline

Definition at line 157 of file SValBuilder.h.

References Context.

◆ getCXXThis() [1/2]

loc::MemRegionVal SValBuilder::getCXXThis	(	const CXXMethodDecl *	D,
		const StackFrameContext *	SFC
	)

Return a memory region for the 'this' object reference.

Definition at line 272 of file SValBuilder.cpp.

References getContext(), getRegionManager(), and clang::CXXMethodDecl::getThisType().

Referenced by clang::ento::ExprEngine::CreateCXXTemporaryObject(), getConstructedRegion(), clang::ento::ExprEngine::getInitialState(), makeSymbolVal(), clang::ento::ExprEngine::ProcessBaseDtor(), clang::ento::ExprEngine::processCallExit(), clang::ento::ExprEngine::ProcessInitializer(), clang::ento::ExprEngine::ProcessMemberDtor(), and clang::ento::ExprEngine::VisitCXXConstructExpr().

◆ getCXXThis() [2/2]

loc::MemRegionVal SValBuilder::getCXXThis	(	const CXXRecordDecl *	D,
		const StackFrameContext *	SFC
	)

Return a memory region for the 'this' object reference.

Definition at line 279 of file SValBuilder.cpp.

References getContext(), clang::ASTContext::getPointerType(), getRegionManager(), and clang::TypeDecl::getTypeForDecl().

◆ getDerivedRegionValueSymbolVal()

DefinedOrUnknownSVal SValBuilder::getDerivedRegionValueSymbolVal	(	SymbolRef	parentSymbol,
		const TypedValueRegion *	region
	)

Definition at line 222 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), clang::ento::SymbolManager::getDerivedSymbol(), clang::ento::MemRegionManager::getSymbolicRegion(), clang::ento::TypedValueRegion::getValueType(), clang::ento::Loc::isLocType(), clang::Type::isNullPtrType(), makeZeroVal(), MemMgr, and SymMgr.

Referenced by conjureSymbol().

◆ getFunctionPointer()

DefinedSVal SValBuilder::getFunctionPointer ( const FunctionDecl * func )

Definition at line 256 of file SValBuilder.cpp.

References clang::ento::MemRegionManager::getFunctionCodeRegion(), and MemMgr.

Referenced by conjureSymbol(), and getMemberPointer().

◆ getKnownValue()

virtual const llvm::APSInt* clang::ento::SValBuilder::getKnownValue	(	ProgramStateRef	state,
		SVal	val
	)

pure virtual

Evaluates a given SVal.

If the SVal has only one possible (integer) value, that value is returned. Otherwise, returns NULL.

Referenced by haveSameType().

◆ getMemberPointer()

DefinedSVal SValBuilder::getMemberPointer ( const DeclaratorDecl * DD )

Definition at line 240 of file SValBuilder.cpp.

References getFunctionPointer(), and clang::prec::PointerToMember.

Referenced by conjureSymbol(), clang::ento::ExprEngine::VisitCast(), and clang::ento::ExprEngine::VisitUnaryOperator().

◆ getMetadataSymbolVal()

DefinedSVal SValBuilder::getMetadataSymbolVal	(	const void *	symbolTag,
		const MemRegion *	region,
		const Expr *	expr,
		QualType	type,
		const LocationContext *	LCtx,
		unsigned	count
	)

Definition at line 205 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), clang::ento::SymbolManager::getMetadataSymbol(), clang::ento::MemRegionManager::getSymbolicRegion(), clang::ento::Loc::isLocType(), MemMgr, and SymMgr.

Referenced by conjureSymbol().

◆ getRegionManager() [1/2]

MemRegionManager& clang::ento::SValBuilder::getRegionManager ( )

inline

Definition at line 175 of file SValBuilder.h.

References MemMgr.

Referenced by clang::ento::retaincountchecker::RetainCountChecker::checkPostStmt(), clang::ento::ExprEngine::CreateCXXTemporaryObject(), getConstantVal(), getCXXThis(), clang::ento::ExprEngine::VisitCXXConstructExpr(), clang::ento::ExprEngine::VisitCXXThisExpr(), and clang::ento::ExprEngine::VisitLambdaExpr().

◆ getRegionManager() [2/2]

const MemRegionManager& clang::ento::SValBuilder::getRegionManager ( ) const

inline

Definition at line 176 of file SValBuilder.h.

References MemMgr.

◆ getRegionValueSymbolVal()

DefinedOrUnknownSVal SValBuilder::getRegionValueSymbolVal ( const TypedValueRegion * region )

Make a unique symbol for value of region.

Definition at line 119 of file SValBuilder.cpp.

References clang::ento::SymbolManager::canSymbolicate(), conjureSymbolVal(), clang::LocationContext::getAnalysisDeclContext(), clang::AnalysisDeclContext::getASTContext(), clang::ASTContext::getPointerType(), clang::ento::SymbolManager::getRegionValueSymbol(), clang::ento::MemRegionManager::getSymbolicRegion(), clang::Expr::getType(), clang::ento::TypedValueRegion::getValueType(), clang::Expr::isGLValue(), clang::ento::Loc::isLocType(), clang::Type::isNullPtrType(), makeZeroVal(), MemMgr, and SymMgr.

Referenced by conjureSymbol().

◆ getStateManager()

ProgramStateManager& clang::ento::SValBuilder::getStateManager ( )

inline

Definition at line 159 of file SValBuilder.h.

References StateMgr.

◆ getSymbolManager() [1/2]

SymbolManager& clang::ento::SValBuilder::getSymbolManager ( )

inline

Definition at line 172 of file SValBuilder.h.

References SymMgr.

Referenced by clang::ento::AllocaRegion::getExtent(), clang::ento::TypedValueRegion::getExtent(), clang::ento::SymbolicRegion::getExtent(), clang::ento::SimpleConstraintManager::getSymbolManager(), and clang::ento::CheckerContext::getSymbolManager().

◆ getSymbolManager() [2/2]

const SymbolManager& clang::ento::SValBuilder::getSymbolManager ( ) const

inline

Definition at line 173 of file SValBuilder.h.

References SymMgr.

◆ haveSameType() [1/2]

bool clang::ento::SValBuilder::haveSameType	(	const SymExpr *	Sym1,
		const SymExpr *	Sym2
	)

inline

Definition at line 94 of file SValBuilder.h.

References clang::ento::SymExpr::getType().

◆ haveSameType() [2/2]

bool clang::ento::SValBuilder::haveSameType	(	QualType	Ty1,
		QualType	Ty2
	)

inline

Definition at line 98 of file SValBuilder.h.

References areEqual(), evalBinOp(), evalBinOpLL(), evalBinOpLN(), evalBinOpNN(), evalCast(), evalComplement(), evalEQ(), evalIntegralCast(), evalMinus(), clang::ASTContext::getCanonicalType(), getKnownValue(), clang::Type::isIntegralOrEnumerationType(), makeSymExprValNN(), simplifySVal(), clang::CodeGen::state, and State.

◆ makeArrayIndex()

NonLoc clang::ento::SValBuilder::makeArrayIndex ( uint64_t idx )

inline

Definition at line 273 of file SValBuilder.h.

References convertToArrayIndex().

Referenced by clang::ento::mpi::MPIChecker::checkMissingWaits(), and clang::ento::StoreManager::MakeElementRegion().

◆ makeBoolVal() [1/2]

nonloc::ConcreteInt clang::ento::SValBuilder::makeBoolVal ( const ObjCBoolLiteralExpr * boolean )

inline

Definition at line 285 of file SValBuilder.h.

References clang::ObjCBoolLiteralExpr::getValue(), and makeTruthVal().

Referenced by getConstantVal().

◆ makeBoolVal() [2/2]

nonloc::ConcreteInt SValBuilder::makeBoolVal ( const CXXBoolLiteralExpr * boolean )

Definition at line 114 of file SValBuilder.cpp.

References clang::CXXBoolLiteralExpr::getValue(), and makeTruthVal().

◆ makeCompoundVal()

NonLoc clang::ento::SValBuilder::makeCompoundVal	(	QualType	type,
		llvm::ImmutableList< SVal >	vals
	)

inline

Definition at line 251 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getCompoundValData().

Referenced by makeZeroVal(), and clang::ento::ExprEngine::VisitInitListExpr().

◆ makeIntLocVal()

loc::ConcreteInt clang::ento::SValBuilder::makeIntLocVal ( const llvm::APSInt & integer )

inline

Definition at line 295 of file SValBuilder.h.

◆ makeIntVal() [1/5]

nonloc::ConcreteInt clang::ento::SValBuilder::makeIntVal ( const IntegerLiteral * integer )

inline

Definition at line 279 of file SValBuilder.h.

References clang::Expr::getType(), clang::APIntStorage::getValue(), and clang::Type::isUnsignedIntegerOrEnumerationType().

Referenced by clang::ento::nonloc::ConcreteInt::evalComplement(), evalIntegralCast(), clang::ento::nonloc::ConcreteInt::evalMinus(), getConstantVal(), clang::ento::TypedValueRegion::getExtent(), clang::ento::StringRegion::getExtent(), clang::ento::CheckerContext::isGreaterOrEqual(), clang::ento::CheckerContext::isNegative(), makeZeroVal(), clang::ento::ExprEngine::VisitLogicalExpr(), and clang::ento::ExprEngine::VisitUnaryExprOrTypeTraitExpr().

◆ makeIntVal() [2/5]

nonloc::ConcreteInt clang::ento::SValBuilder::makeIntVal ( const llvm::APSInt & integer )

inline

Definition at line 291 of file SValBuilder.h.

◆ makeIntVal() [3/5]

NonLoc clang::ento::SValBuilder::makeIntVal	(	const llvm::APInt &	integer,
		bool	isUnsigned
	)

inline

Definition at line 299 of file SValBuilder.h.

◆ makeIntVal() [4/5]

DefinedSVal clang::ento::SValBuilder::makeIntVal	(	uint64_t	integer,
		QualType	type
	)

inline

Definition at line 303 of file SValBuilder.h.

References clang::ento::Loc::isLocType().

◆ makeIntVal() [5/5]

NonLoc clang::ento::SValBuilder::makeIntVal	(	uint64_t	integer,
		bool	isUnsigned
	)

inline

Definition at line 310 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getIntValue().

◆ makeIntValWithPtrWidth()

NonLoc clang::ento::SValBuilder::makeIntValWithPtrWidth	(	uint64_t	integer,
		bool	isUnsigned
	)

inline

Definition at line 314 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getIntWithPtrWidth().

◆ makeLazyCompoundVal()

NonLoc clang::ento::SValBuilder::makeLazyCompoundVal	(	const StoreRef &	store,
		const TypedValueRegion *	region
	)

inline

Definition at line 255 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getLazyCompoundValData().

◆ makeLoc() [1/4]

Loc clang::ento::SValBuilder::makeLoc ( SymbolRef sym )

inline

Definition at line 354 of file SValBuilder.h.

References clang::ento::MemRegionManager::getSymbolicRegion().

Referenced by getConstantVal(), clang::ento::StoreManager::getLValueVar(), and makeSymbolVal().

◆ makeLoc() [2/4]

Loc clang::ento::SValBuilder::makeLoc ( const MemRegion * region )

inline

Definition at line 358 of file SValBuilder.h.

◆ makeLoc() [3/4]

Loc clang::ento::SValBuilder::makeLoc ( const AddrLabelExpr * expr )

inline

Definition at line 362 of file SValBuilder.h.

References clang::AddrLabelExpr::getLabel().

◆ makeLoc() [4/4]

Loc clang::ento::SValBuilder::makeLoc ( const llvm::APSInt & integer )

inline

Definition at line 366 of file SValBuilder.h.

◆ makeLocAsInteger()

NonLoc clang::ento::SValBuilder::makeLocAsInteger	(	Loc	loc,
		unsigned	bits
	)

inline

Definition at line 319 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getPersistentSValWithData(), and makeNonLoc().

◆ makeNonLoc() [1/4]

NonLoc SValBuilder::makeNonLoc	(	const SymExpr *	lhs,
		BinaryOperator::Opcode	op,
		const llvm::APSInt &	rhs,
		QualType	type
	)

Definition at line 68 of file SValBuilder.cpp.

References clang::ento::SymbolManager::getIntSymExpr(), clang::ento::SymbolManager::getSymIntExpr(), clang::ento::Loc::isLocType(), and SymMgr.

Referenced by evalCast(), evalIntegralCast(), makeLocAsInteger(), and makeSymExprValNN().

◆ makeNonLoc() [2/4]

NonLoc clang::ento::SValBuilder::makeNonLoc	(	const llvm::APSInt &	rhs,
		BinaryOperator::Opcode	op,
		const SymExpr *	lhs,
		QualType	type
	)

◆ makeNonLoc() [3/4]

NonLoc SValBuilder::makeNonLoc	(	const SymExpr *	lhs,
		BinaryOperator::Opcode	op,
		const SymExpr *	rhs,
		QualType	type
	)

Definition at line 86 of file SValBuilder.cpp.

References clang::ento::SymbolManager::getSymSymExpr(), clang::ento::Loc::isLocType(), and SymMgr.

◆ makeNonLoc() [4/4]

NonLoc SValBuilder::makeNonLoc	(	const SymExpr *	operand,
		QualType	fromTy,
		QualType	toTy
	)

Create a NonLoc value for cast.

Definition at line 93 of file SValBuilder.cpp.

References clang::ento::SymbolManager::getCastSymbol(), clang::ento::Loc::isLocType(), and SymMgr.

◆ makeNull()

Loc clang::ento::SValBuilder::makeNull ( )

inline

Definition at line 350 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getZeroWithPtrWidth().

Referenced by clang::ento::retaincountchecker::RetainCountChecker::evalCall(), getConstantVal(), makeZeroVal(), and clang::ento::ExprEngine::VisitCast().

◆ makeNullWithType()

Loc clang::ento::SValBuilder::makeNullWithType ( QualType type )

inline

Create NULL pointer, with proper pointer bit-width for given address space.

Parameters

type	pointer type.

Definition at line 346 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getZeroWithTypeSize().

◆ makePointerToMember() [1/2]

NonLoc clang::ento::SValBuilder::makePointerToMember ( const DeclaratorDecl * DD )

inline

Definition at line 261 of file SValBuilder.h.

References clang::prec::PointerToMember.

Referenced by clang::ento::ExprEngine::VisitCast().

◆ makePointerToMember() [2/2]

NonLoc clang::ento::SValBuilder::makePointerToMember ( const PointerToMemberData * PTMD )

inline

Definition at line 265 of file SValBuilder.h.

References clang::prec::PointerToMember.

◆ makeSymbolVal()

SVal clang::ento::SValBuilder::makeSymbolVal ( SymbolRef Sym )

inline

Make an SVal that represents the given symbol.

This follows the convention of representing Loc-type symbols (symbolic pointers and references) as Loc values wrapping the symbol rather than as plain symbol values.

Definition at line 373 of file SValBuilder.h.

References clang::ento::createSimpleSValBuilder(), getCXXThis(), clang::ento::SymExpr::getType(), clang::ento::Loc::isLocType(), and makeLoc().

Referenced by clang::ento::SMTConstraintManager< ConstraintSMT, SMTExprTy >::canReasonAbout().

◆ makeSymExprValNN()

SVal SValBuilder::makeSymExprValNN	(	BinaryOperator::Opcode	op,
		NonLoc	lhs,
		NonLoc	rhs,
		QualType	resultTy
	)

Constructs a symbolic expression for two non-location values.

Definition at line 378 of file SValBuilder.cpp.

References clang::ento::SymExpr::computeComplexity(), clang::ento::SubEngine::getAnalysisManager(), clang::ento::SVal::getAs(), clang::ento::SVal::getAsSymExpr(), clang::ento::ProgramStateManager::getOwningEngine(), makeNonLoc(), clang::ento::AnalysisManager::options, and StateMgr.

Referenced by haveSameType().

◆ makeTruthVal() [1/2]

nonloc::ConcreteInt clang::ento::SValBuilder::makeTruthVal	(	bool	b,
		QualType	type
	)

inline

Definition at line 335 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getTruthValue().

Referenced by evalCast(), getConstantVal(), makeBoolVal(), and clang::ento::ExprEngine::VisitCast().

◆ makeTruthVal() [2/2]

nonloc::ConcreteInt clang::ento::SValBuilder::makeTruthVal ( bool b )

inline

Definition at line 339 of file SValBuilder.h.

References clang::ento::BasicValueFactory::getTruthValue().

◆ makeZeroArrayIndex()

NonLoc clang::ento::SValBuilder::makeZeroArrayIndex ( )

inline

Definition at line 269 of file SValBuilder.h.

Referenced by clang::ento::ExprEngine::CreateCXXTemporaryObject(), and clang::ento::StoreManager::GetElementZeroRegion().

◆ makeZeroVal()

DefinedOrUnknownSVal SValBuilder::makeZeroVal ( QualType type )

Construct an SVal representing '0' for the specified type.

Definition at line 53 of file SValBuilder.cpp.

References BasicVals, clang::ento::BasicValueFactory::getEmptySValList(), clang::Type::isAnyComplexType(), clang::Type::isArrayType(), clang::Type::isIntegralOrEnumerationType(), clang::ento::Loc::isLocType(), clang::Type::isRecordType(), clang::Type::isVectorType(), makeCompoundVal(), makeIntVal(), and makeNull().

Referenced by conjureSymbol(), conjureSymbolVal(), getConjuredHeapSymbolVal(), getConstantVal(), getDerivedRegionValueSymbolVal(), clang::ento::ExprEngine::getInitialState(), getRegionValueSymbolVal(), clang::ento::ExprEngine::VisitInitListExpr(), and clang::ento::ExprEngine::VisitUnaryOperator().

◆ simplifySVal()

virtual SVal clang::ento::SValBuilder::simplifySVal	(	ProgramStateRef	State,
		SVal	Val
	)

pure virtual

Simplify symbolic expressions within a given SVal.

Return an SVal that represents the same value, but is hopefully easier to work with than the original SVal.

Referenced by haveSameType().

Member Data Documentation

◆ ArrayIndexTy

const QualType clang::ento::SValBuilder::ArrayIndexTy

protected

The scalar type to use for array indices.

Definition at line 71 of file SValBuilder.h.

Referenced by convertToArrayIndex(), and getArrayIndexType().

◆ ArrayIndexWidth

const unsigned clang::ento::SValBuilder::ArrayIndexWidth

protected

The width of the scalar type used for array indices.

Definition at line 74 of file SValBuilder.h.

Referenced by convertToArrayIndex().

◆ BasicVals

BasicValueFactory clang::ento::SValBuilder::BasicVals

protected

Manager of APSInt values.

Definition at line 60 of file SValBuilder.h.

Referenced by getBasicValueFactory(), and makeZeroVal().

◆ Context

ASTContext& clang::ento::SValBuilder::Context

protected

Definition at line 57 of file SValBuilder.h.

Referenced by evalCast(), and getContext().

◆ MemMgr

MemRegionManager clang::ento::SValBuilder::MemMgr

protected

Manages the creation of memory regions.

Definition at line 66 of file SValBuilder.h.

Referenced by conjureSymbolVal(), getBlockPointer(), getConjuredHeapSymbolVal(), getDerivedRegionValueSymbolVal(), getFunctionPointer(), getMetadataSymbolVal(), getRegionManager(), and getRegionValueSymbolVal().

◆ StateMgr

ProgramStateManager& clang::ento::SValBuilder::StateMgr

protected

Definition at line 68 of file SValBuilder.h.

Referenced by evalCast(), getStateManager(), and makeSymExprValNN().

◆ SymMgr

SymbolManager clang::ento::SValBuilder::SymMgr

protected

Manages the creation of symbols.

Definition at line 63 of file SValBuilder.h.

Referenced by conjureSymbolVal(), getConjuredHeapSymbolVal(), getDerivedRegionValueSymbolVal(), getMetadataSymbolVal(), getRegionValueSymbolVal(), getSymbolManager(), and makeNonLoc().

The documentation for this class was generated from the following files:

include/clang/StaticAnalyzer/Core/PathSensitive/SValBuilder.h
lib/StaticAnalyzer/Core/SValBuilder.cpp

Public Member Functions

Protected Member Functions

Protected Attributes

Detailed Description

Constructor & Destructor Documentation

◆ SValBuilder()

◆ ~SValBuilder()

Member Function Documentation

◆ areEqual()

◆ conjureSymbol() [1/2]

◆ conjureSymbol() [2/2]

◆ conjureSymbolVal() [1/3]

◆ conjureSymbolVal() [2/3]

◆ conjureSymbolVal() [3/3]

◆ convertToArrayIndex()

◆ dispatchCast()

◆ evalBinOp()

◆ evalBinOpLL()

◆ evalBinOpLN()

◆ evalBinOpNN()

◆ evalCast()

◆ evalCastFromLoc()

◆ evalCastFromNonLoc()

◆ evalComplement()

◆ evalEQ() [1/2]

◆ evalEQ() [2/2]

◆ evalIntegralCast()

◆ evalMinus()

◆ getArrayIndexType()

◆ getBasicValueFactory() [1/2]

◆ getBasicValueFactory() [2/2]

◆ getBlockPointer()

◆ getConditionType()

◆ getConjuredHeapSymbolVal()

◆ getConstantVal()

◆ getContext() [1/2]

◆ getContext() [2/2]

◆ getCXXThis() [1/2]

◆ getCXXThis() [2/2]

◆ getDerivedRegionValueSymbolVal()

◆ getFunctionPointer()

◆ getKnownValue()

◆ getMemberPointer()

◆ getMetadataSymbolVal()

◆ getRegionManager() [1/2]

◆ getRegionManager() [2/2]

◆ getRegionValueSymbolVal()

◆ getStateManager()

◆ getSymbolManager() [1/2]

◆ getSymbolManager() [2/2]

◆ haveSameType() [1/2]

◆ haveSameType() [2/2]

◆ makeArrayIndex()

◆ makeBoolVal() [1/2]

◆ makeBoolVal() [2/2]

◆ makeCompoundVal()

◆ makeIntLocVal()

◆ makeIntVal() [1/5]

◆ makeIntVal() [2/5]

◆ makeIntVal() [3/5]

◆ makeIntVal() [4/5]

◆ makeIntVal() [5/5]

◆ makeIntValWithPtrWidth()

◆ makeLazyCompoundVal()

◆ makeLoc() [1/4]

◆ makeLoc() [2/4]

◆ makeLoc() [3/4]

◆ makeLoc() [4/4]

◆ makeLocAsInteger()

◆ makeNonLoc() [1/4]

◆ makeNonLoc() [2/4]

◆ makeNonLoc() [3/4]

◆ makeNonLoc() [4/4]

◆ makeNull()

◆ makeNullWithType()

◆ makePointerToMember() [1/2]

◆ makePointerToMember() [2/2]

◆ makeSymbolVal()

◆ makeSymExprValNN()

◆ makeTruthVal() [1/2]