|
@@ -1,4 +1,4 @@
|
|
-//===--- CheckerManager.cpp - Static Analyzer Checker Manager -------------===//
|
|
|
|
|
|
+//===- CheckerManager.cpp - Static Analyzer Checker Manager ---------------===//
|
|
//
|
|
//
|
|
// The LLVM Compiler Infrastructure
|
|
// The LLVM Compiler Infrastructure
|
|
//
|
|
//
|
|
@@ -13,10 +13,20 @@
|
|
|
|
|
|
#include "clang/StaticAnalyzer/Core/CheckerManager.h"
|
|
#include "clang/StaticAnalyzer/Core/CheckerManager.h"
|
|
#include "clang/AST/DeclBase.h"
|
|
#include "clang/AST/DeclBase.h"
|
|
|
|
+#include "clang/AST/Stmt.h"
|
|
#include "clang/Analysis/ProgramPoint.h"
|
|
#include "clang/Analysis/ProgramPoint.h"
|
|
|
|
+#include "clang/Basic/LLVM.h"
|
|
#include "clang/StaticAnalyzer/Core/Checker.h"
|
|
#include "clang/StaticAnalyzer/Core/Checker.h"
|
|
#include "clang/StaticAnalyzer/Core/PathSensitive/CallEvent.h"
|
|
#include "clang/StaticAnalyzer/Core/PathSensitive/CallEvent.h"
|
|
#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h"
|
|
#include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h"
|
|
|
|
+#include "clang/StaticAnalyzer/Core/PathSensitive/CoreEngine.h"
|
|
|
|
+#include "clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h"
|
|
|
|
+#include "clang/StaticAnalyzer/Core/PathSensitive/SVals.h"
|
|
|
|
+#include "llvm/ADT/SmallVector.h"
|
|
|
|
+#include "llvm/Support/Casting.h"
|
|
|
|
+#include "llvm/Support/ErrorHandling.h"
|
|
|
|
+#include <cassert>
|
|
|
|
+#include <vector>
|
|
|
|
|
|
using namespace clang;
|
|
using namespace clang;
|
|
using namespace ento;
|
|
using namespace ento;
|
|
@@ -43,9 +53,9 @@ void CheckerManager::finishedCheckerRegistration() {
|
|
#ifndef NDEBUG
|
|
#ifndef NDEBUG
|
|
// Make sure that for every event that has listeners, there is at least
|
|
// Make sure that for every event that has listeners, there is at least
|
|
// one dispatcher registered for it.
|
|
// one dispatcher registered for it.
|
|
- for (llvm::DenseMap<EventTag, EventInfo>::iterator
|
|
|
|
- I = Events.begin(), E = Events.end(); I != E; ++I)
|
|
|
|
- assert(I->second.HasDispatcher && "No dispatcher registered for an event");
|
|
|
|
|
|
+ for (const auto &Event : Events)
|
|
|
|
+ assert(Event.second.HasDispatcher &&
|
|
|
|
+ "No dispatcher registered for an event");
|
|
#endif
|
|
#endif
|
|
}
|
|
}
|
|
|
|
|
|
@@ -65,25 +75,22 @@ void CheckerManager::runCheckersOnASTDecl(const Decl *D, AnalysisManager& mgr,
|
|
} else {
|
|
} else {
|
|
// Find the checkers that should run for this Decl and cache them.
|
|
// Find the checkers that should run for this Decl and cache them.
|
|
checkers = &CachedDeclCheckersMap[DeclKind];
|
|
checkers = &CachedDeclCheckersMap[DeclKind];
|
|
- for (unsigned i = 0, e = DeclCheckers.size(); i != e; ++i) {
|
|
|
|
- DeclCheckerInfo &info = DeclCheckers[i];
|
|
|
|
|
|
+ for (const auto &info : DeclCheckers)
|
|
if (info.IsForDeclFn(D))
|
|
if (info.IsForDeclFn(D))
|
|
checkers->push_back(info.CheckFn);
|
|
checkers->push_back(info.CheckFn);
|
|
- }
|
|
|
|
}
|
|
}
|
|
|
|
|
|
assert(checkers);
|
|
assert(checkers);
|
|
- for (CachedDeclCheckers::iterator
|
|
|
|
- I = checkers->begin(), E = checkers->end(); I != E; ++I)
|
|
|
|
- (*I)(D, mgr, BR);
|
|
|
|
|
|
+ for (const auto checker : *checkers)
|
|
|
|
+ checker(D, mgr, BR);
|
|
}
|
|
}
|
|
|
|
|
|
void CheckerManager::runCheckersOnASTBody(const Decl *D, AnalysisManager& mgr,
|
|
void CheckerManager::runCheckersOnASTBody(const Decl *D, AnalysisManager& mgr,
|
|
BugReporter &BR) {
|
|
BugReporter &BR) {
|
|
assert(D && D->hasBody());
|
|
assert(D && D->hasBody());
|
|
|
|
|
|
- for (unsigned i = 0, e = BodyCheckers.size(); i != e; ++i)
|
|
|
|
- BodyCheckers[i](D, mgr, BR);
|
|
|
|
|
|
+ for (const auto BodyChecker : BodyCheckers)
|
|
|
|
+ BodyChecker(D, mgr, BR);
|
|
}
|
|
}
|
|
|
|
|
|
//===----------------------------------------------------------------------===//
|
|
//===----------------------------------------------------------------------===//
|
|
@@ -118,10 +125,8 @@ static void expandGraphWithCheckers(CHECK_CTX checkCtx,
|
|
}
|
|
}
|
|
|
|
|
|
NodeBuilder B(*PrevSet, *CurrSet, BldrCtx);
|
|
NodeBuilder B(*PrevSet, *CurrSet, BldrCtx);
|
|
- for (ExplodedNodeSet::iterator NI = PrevSet->begin(), NE = PrevSet->end();
|
|
|
|
- NI != NE; ++NI) {
|
|
|
|
- checkCtx.runChecker(*I, B, *NI);
|
|
|
|
- }
|
|
|
|
|
|
+ for (const auto &NI : *PrevSet)
|
|
|
|
+ checkCtx.runChecker(*I, B, NI);
|
|
|
|
|
|
// If all the produced transitions are sinks, stop.
|
|
// If all the produced transitions are sinks, stop.
|
|
if (CurrSet->empty())
|
|
if (CurrSet->empty())
|
|
@@ -133,21 +138,23 @@ static void expandGraphWithCheckers(CHECK_CTX checkCtx,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckStmtContext {
|
|
struct CheckStmtContext {
|
|
- typedef SmallVectorImpl<CheckerManager::CheckStmtFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = SmallVectorImpl<CheckerManager::CheckStmtFunc>;
|
|
|
|
+
|
|
bool IsPreVisit;
|
|
bool IsPreVisit;
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
const Stmt *S;
|
|
const Stmt *S;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
bool WasInlined;
|
|
bool WasInlined;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckStmtContext(bool isPreVisit, const CheckersTy &checkers,
|
|
CheckStmtContext(bool isPreVisit, const CheckersTy &checkers,
|
|
const Stmt *s, ExprEngine &eng, bool wasInlined = false)
|
|
const Stmt *s, ExprEngine &eng, bool wasInlined = false)
|
|
- : IsPreVisit(isPreVisit), Checkers(checkers), S(s), Eng(eng),
|
|
|
|
- WasInlined(wasInlined) {}
|
|
|
|
|
|
+ : IsPreVisit(isPreVisit), Checkers(checkers), S(s), Eng(eng),
|
|
|
|
+ WasInlined(wasInlined) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckStmtFunc checkFn,
|
|
void runChecker(CheckerManager::CheckStmtFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -160,7 +167,8 @@ namespace {
|
|
checkFn(S, C);
|
|
checkFn(S, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for visiting Stmts.
|
|
/// \brief Run checkers for visiting Stmts.
|
|
void CheckerManager::runCheckersForStmt(bool isPreVisit,
|
|
void CheckerManager::runCheckersForStmt(bool isPreVisit,
|
|
@@ -175,8 +183,9 @@ void CheckerManager::runCheckersForStmt(bool isPreVisit,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckObjCMessageContext {
|
|
struct CheckObjCMessageContext {
|
|
- typedef std::vector<CheckerManager::CheckObjCMessageFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckObjCMessageFunc>;
|
|
|
|
|
|
ObjCMessageVisitKind Kind;
|
|
ObjCMessageVisitKind Kind;
|
|
bool WasInlined;
|
|
bool WasInlined;
|
|
@@ -184,19 +193,18 @@ namespace {
|
|
const ObjCMethodCall &Msg;
|
|
const ObjCMethodCall &Msg;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckObjCMessageContext(ObjCMessageVisitKind visitKind,
|
|
CheckObjCMessageContext(ObjCMessageVisitKind visitKind,
|
|
const CheckersTy &checkers,
|
|
const CheckersTy &checkers,
|
|
const ObjCMethodCall &msg, ExprEngine &eng,
|
|
const ObjCMethodCall &msg, ExprEngine &eng,
|
|
bool wasInlined)
|
|
bool wasInlined)
|
|
- : Kind(visitKind), WasInlined(wasInlined), Checkers(checkers),
|
|
|
|
- Msg(msg), Eng(eng) { }
|
|
|
|
|
|
+ : Kind(visitKind), WasInlined(wasInlined), Checkers(checkers), Msg(msg),
|
|
|
|
+ Eng(eng) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckObjCMessageFunc checkFn,
|
|
void runChecker(CheckerManager::CheckObjCMessageFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
-
|
|
|
|
bool IsPreVisit;
|
|
bool IsPreVisit;
|
|
|
|
|
|
switch (Kind) {
|
|
switch (Kind) {
|
|
@@ -215,7 +223,8 @@ namespace {
|
|
checkFn(*Msg.cloneWithState<ObjCMethodCall>(Pred->getState()), C);
|
|
checkFn(*Msg.cloneWithState<ObjCMethodCall>(Pred->getState()), C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for visiting obj-c messages.
|
|
/// \brief Run checkers for visiting obj-c messages.
|
|
void CheckerManager::runCheckersForObjCMessage(ObjCMessageVisitKind visitKind,
|
|
void CheckerManager::runCheckersForObjCMessage(ObjCMessageVisitKind visitKind,
|
|
@@ -242,24 +251,27 @@ CheckerManager::getObjCMessageCheckers(ObjCMessageVisitKind Kind) {
|
|
}
|
|
}
|
|
llvm_unreachable("Unknown Kind");
|
|
llvm_unreachable("Unknown Kind");
|
|
}
|
|
}
|
|
|
|
+
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
// FIXME: This has all the same signatures as CheckObjCMessageContext.
|
|
// FIXME: This has all the same signatures as CheckObjCMessageContext.
|
|
// Is there a way we can merge the two?
|
|
// Is there a way we can merge the two?
|
|
struct CheckCallContext {
|
|
struct CheckCallContext {
|
|
- typedef std::vector<CheckerManager::CheckCallFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckCallFunc>;
|
|
|
|
+
|
|
bool IsPreVisit, WasInlined;
|
|
bool IsPreVisit, WasInlined;
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
const CallEvent &Call;
|
|
const CallEvent &Call;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckCallContext(bool isPreVisit, const CheckersTy &checkers,
|
|
CheckCallContext(bool isPreVisit, const CheckersTy &checkers,
|
|
const CallEvent &call, ExprEngine &eng,
|
|
const CallEvent &call, ExprEngine &eng,
|
|
bool wasInlined)
|
|
bool wasInlined)
|
|
- : IsPreVisit(isPreVisit), WasInlined(wasInlined), Checkers(checkers),
|
|
|
|
- Call(call), Eng(eng) { }
|
|
|
|
|
|
+ : IsPreVisit(isPreVisit), WasInlined(wasInlined), Checkers(checkers),
|
|
|
|
+ Call(call), Eng(eng) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckCallFunc checkFn,
|
|
void runChecker(CheckerManager::CheckCallFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -269,7 +281,8 @@ namespace {
|
|
checkFn(*Call.cloneWithState(Pred->getState()), C);
|
|
checkFn(*Call.cloneWithState(Pred->getState()), C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for visiting an abstract call event.
|
|
/// \brief Run checkers for visiting an abstract call event.
|
|
void CheckerManager::runCheckersForCallEvent(bool isPreVisit,
|
|
void CheckerManager::runCheckersForCallEvent(bool isPreVisit,
|
|
@@ -286,8 +299,10 @@ void CheckerManager::runCheckersForCallEvent(bool isPreVisit,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckLocationContext {
|
|
struct CheckLocationContext {
|
|
- typedef std::vector<CheckerManager::CheckLocationFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckLocationFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
SVal Loc;
|
|
SVal Loc;
|
|
bool IsLoad;
|
|
bool IsLoad;
|
|
@@ -295,15 +310,15 @@ namespace {
|
|
const Stmt *BoundEx;
|
|
const Stmt *BoundEx;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckLocationContext(const CheckersTy &checkers,
|
|
CheckLocationContext(const CheckersTy &checkers,
|
|
SVal loc, bool isLoad, const Stmt *NodeEx,
|
|
SVal loc, bool isLoad, const Stmt *NodeEx,
|
|
const Stmt *BoundEx,
|
|
const Stmt *BoundEx,
|
|
ExprEngine &eng)
|
|
ExprEngine &eng)
|
|
- : Checkers(checkers), Loc(loc), IsLoad(isLoad), NodeEx(NodeEx),
|
|
|
|
- BoundEx(BoundEx), Eng(eng) {}
|
|
|
|
|
|
+ : Checkers(checkers), Loc(loc), IsLoad(isLoad), NodeEx(NodeEx),
|
|
|
|
+ BoundEx(BoundEx), Eng(eng) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckLocationFunc checkFn,
|
|
void runChecker(CheckerManager::CheckLocationFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -317,7 +332,8 @@ namespace {
|
|
checkFn(Loc, IsLoad, BoundEx, C);
|
|
checkFn(Loc, IsLoad, BoundEx, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for load/store of a location.
|
|
/// \brief Run checkers for load/store of a location.
|
|
|
|
|
|
@@ -333,8 +349,10 @@ void CheckerManager::runCheckersForLocation(ExplodedNodeSet &Dst,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckBindContext {
|
|
struct CheckBindContext {
|
|
- typedef std::vector<CheckerManager::CheckBindFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckBindFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
SVal Loc;
|
|
SVal Loc;
|
|
SVal Val;
|
|
SVal Val;
|
|
@@ -342,13 +360,13 @@ namespace {
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
const ProgramPoint &PP;
|
|
const ProgramPoint &PP;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckBindContext(const CheckersTy &checkers,
|
|
CheckBindContext(const CheckersTy &checkers,
|
|
SVal loc, SVal val, const Stmt *s, ExprEngine &eng,
|
|
SVal loc, SVal val, const Stmt *s, ExprEngine &eng,
|
|
const ProgramPoint &pp)
|
|
const ProgramPoint &pp)
|
|
- : Checkers(checkers), Loc(loc), Val(val), S(s), Eng(eng), PP(pp) {}
|
|
|
|
|
|
+ : Checkers(checkers), Loc(loc), Val(val), S(s), Eng(eng), PP(pp) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckBindFunc checkFn,
|
|
void runChecker(CheckerManager::CheckBindFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -358,7 +376,8 @@ namespace {
|
|
checkFn(Loc, Val, S, C);
|
|
checkFn(Loc, Val, S, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for binding of a value to a location.
|
|
/// \brief Run checkers for binding of a value to a location.
|
|
void CheckerManager::runCheckersForBind(ExplodedNodeSet &Dst,
|
|
void CheckerManager::runCheckersForBind(ExplodedNodeSet &Dst,
|
|
@@ -373,24 +392,26 @@ void CheckerManager::runCheckersForBind(ExplodedNodeSet &Dst,
|
|
void CheckerManager::runCheckersForEndAnalysis(ExplodedGraph &G,
|
|
void CheckerManager::runCheckersForEndAnalysis(ExplodedGraph &G,
|
|
BugReporter &BR,
|
|
BugReporter &BR,
|
|
ExprEngine &Eng) {
|
|
ExprEngine &Eng) {
|
|
- for (unsigned i = 0, e = EndAnalysisCheckers.size(); i != e; ++i)
|
|
|
|
- EndAnalysisCheckers[i](G, BR, Eng);
|
|
|
|
|
|
+ for (const auto EndAnalysisChecker : EndAnalysisCheckers)
|
|
|
|
+ EndAnalysisChecker(G, BR, Eng);
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckBeginFunctionContext {
|
|
struct CheckBeginFunctionContext {
|
|
- typedef std::vector<CheckerManager::CheckBeginFunctionFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckBeginFunctionFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
const ProgramPoint &PP;
|
|
const ProgramPoint &PP;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckBeginFunctionContext(const CheckersTy &Checkers, ExprEngine &Eng,
|
|
CheckBeginFunctionContext(const CheckersTy &Checkers, ExprEngine &Eng,
|
|
const ProgramPoint &PP)
|
|
const ProgramPoint &PP)
|
|
: Checkers(Checkers), Eng(Eng), PP(PP) {}
|
|
: Checkers(Checkers), Eng(Eng), PP(PP) {}
|
|
|
|
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
+
|
|
void runChecker(CheckerManager::CheckBeginFunctionFunc checkFn,
|
|
void runChecker(CheckerManager::CheckBeginFunctionFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
const ProgramPoint &L = PP.withTag(checkFn.Checker);
|
|
const ProgramPoint &L = PP.withTag(checkFn.Checker);
|
|
@@ -399,7 +420,8 @@ struct CheckBeginFunctionContext {
|
|
checkFn(C);
|
|
checkFn(C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
void CheckerManager::runCheckersForBeginFunction(ExplodedNodeSet &Dst,
|
|
void CheckerManager::runCheckersForBeginFunction(ExplodedNodeSet &Dst,
|
|
const BlockEdge &L,
|
|
const BlockEdge &L,
|
|
@@ -418,14 +440,11 @@ void CheckerManager::runCheckersForEndFunction(NodeBuilderContext &BC,
|
|
ExplodedNodeSet &Dst,
|
|
ExplodedNodeSet &Dst,
|
|
ExplodedNode *Pred,
|
|
ExplodedNode *Pred,
|
|
ExprEngine &Eng) {
|
|
ExprEngine &Eng) {
|
|
-
|
|
|
|
// We define the builder outside of the loop bacause if at least one checkers
|
|
// We define the builder outside of the loop bacause if at least one checkers
|
|
// creates a sucsessor for Pred, we do not need to generate an
|
|
// creates a sucsessor for Pred, we do not need to generate an
|
|
// autotransition for it.
|
|
// autotransition for it.
|
|
NodeBuilder Bldr(Pred, Dst, BC);
|
|
NodeBuilder Bldr(Pred, Dst, BC);
|
|
- for (unsigned i = 0, e = EndFunctionCheckers.size(); i != e; ++i) {
|
|
|
|
- CheckEndFunctionFunc checkFn = EndFunctionCheckers[i];
|
|
|
|
-
|
|
|
|
|
|
+ for (const auto checkFn : EndFunctionCheckers) {
|
|
const ProgramPoint &L = BlockEntrance(BC.Block,
|
|
const ProgramPoint &L = BlockEntrance(BC.Block,
|
|
Pred->getLocationContext(),
|
|
Pred->getLocationContext(),
|
|
checkFn.Checker);
|
|
checkFn.Checker);
|
|
@@ -435,18 +454,20 @@ void CheckerManager::runCheckersForEndFunction(NodeBuilderContext &BC,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckBranchConditionContext {
|
|
struct CheckBranchConditionContext {
|
|
- typedef std::vector<CheckerManager::CheckBranchConditionFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckBranchConditionFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
const Stmt *Condition;
|
|
const Stmt *Condition;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckBranchConditionContext(const CheckersTy &checkers,
|
|
CheckBranchConditionContext(const CheckersTy &checkers,
|
|
const Stmt *Cond, ExprEngine &eng)
|
|
const Stmt *Cond, ExprEngine &eng)
|
|
- : Checkers(checkers), Condition(Cond), Eng(eng) {}
|
|
|
|
|
|
+ : Checkers(checkers), Condition(Cond), Eng(eng) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckBranchConditionFunc checkFn,
|
|
void runChecker(CheckerManager::CheckBranchConditionFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -456,7 +477,8 @@ namespace {
|
|
checkFn(Condition, C);
|
|
checkFn(Condition, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for branch condition.
|
|
/// \brief Run checkers for branch condition.
|
|
void CheckerManager::runCheckersForBranchCondition(const Stmt *Condition,
|
|
void CheckerManager::runCheckersForBranchCondition(const Stmt *Condition,
|
|
@@ -470,22 +492,24 @@ void CheckerManager::runCheckersForBranchCondition(const Stmt *Condition,
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckNewAllocatorContext {
|
|
struct CheckNewAllocatorContext {
|
|
- typedef std::vector<CheckerManager::CheckNewAllocatorFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckNewAllocatorFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
const CXXNewExpr *NE;
|
|
const CXXNewExpr *NE;
|
|
SVal Target;
|
|
SVal Target;
|
|
bool WasInlined;
|
|
bool WasInlined;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckNewAllocatorContext(const CheckersTy &Checkers, const CXXNewExpr *NE,
|
|
CheckNewAllocatorContext(const CheckersTy &Checkers, const CXXNewExpr *NE,
|
|
SVal Target, bool WasInlined, ExprEngine &Eng)
|
|
SVal Target, bool WasInlined, ExprEngine &Eng)
|
|
: Checkers(Checkers), NE(NE), Target(Target), WasInlined(WasInlined),
|
|
: Checkers(Checkers), NE(NE), Target(Target), WasInlined(WasInlined),
|
|
Eng(Eng) {}
|
|
Eng(Eng) {}
|
|
|
|
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
+
|
|
void runChecker(CheckerManager::CheckNewAllocatorFunc checkFn,
|
|
void runChecker(CheckerManager::CheckNewAllocatorFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
ProgramPoint L = PostAllocatorCall(NE, Pred->getLocationContext());
|
|
ProgramPoint L = PostAllocatorCall(NE, Pred->getLocationContext());
|
|
@@ -493,7 +517,8 @@ namespace {
|
|
checkFn(NE, Target, C);
|
|
checkFn(NE, Target, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
void CheckerManager::runCheckersForNewAllocator(
|
|
void CheckerManager::runCheckersForNewAllocator(
|
|
const CXXNewExpr *NE, SVal Target, ExplodedNodeSet &Dst, ExplodedNode *Pred,
|
|
const CXXNewExpr *NE, SVal Target, ExplodedNodeSet &Dst, ExplodedNode *Pred,
|
|
@@ -507,26 +532,28 @@ void CheckerManager::runCheckersForNewAllocator(
|
|
/// \brief Run checkers for live symbols.
|
|
/// \brief Run checkers for live symbols.
|
|
void CheckerManager::runCheckersForLiveSymbols(ProgramStateRef state,
|
|
void CheckerManager::runCheckersForLiveSymbols(ProgramStateRef state,
|
|
SymbolReaper &SymReaper) {
|
|
SymbolReaper &SymReaper) {
|
|
- for (unsigned i = 0, e = LiveSymbolsCheckers.size(); i != e; ++i)
|
|
|
|
- LiveSymbolsCheckers[i](state, SymReaper);
|
|
|
|
|
|
+ for (const auto LiveSymbolsChecker : LiveSymbolsCheckers)
|
|
|
|
+ LiveSymbolsChecker(state, SymReaper);
|
|
}
|
|
}
|
|
|
|
|
|
namespace {
|
|
namespace {
|
|
|
|
+
|
|
struct CheckDeadSymbolsContext {
|
|
struct CheckDeadSymbolsContext {
|
|
- typedef std::vector<CheckerManager::CheckDeadSymbolsFunc> CheckersTy;
|
|
|
|
|
|
+ using CheckersTy = std::vector<CheckerManager::CheckDeadSymbolsFunc>;
|
|
|
|
+
|
|
const CheckersTy &Checkers;
|
|
const CheckersTy &Checkers;
|
|
SymbolReaper &SR;
|
|
SymbolReaper &SR;
|
|
const Stmt *S;
|
|
const Stmt *S;
|
|
ExprEngine &Eng;
|
|
ExprEngine &Eng;
|
|
ProgramPoint::Kind ProgarmPointKind;
|
|
ProgramPoint::Kind ProgarmPointKind;
|
|
|
|
|
|
- CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
- CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
-
|
|
|
|
CheckDeadSymbolsContext(const CheckersTy &checkers, SymbolReaper &sr,
|
|
CheckDeadSymbolsContext(const CheckersTy &checkers, SymbolReaper &sr,
|
|
const Stmt *s, ExprEngine &eng,
|
|
const Stmt *s, ExprEngine &eng,
|
|
ProgramPoint::Kind K)
|
|
ProgramPoint::Kind K)
|
|
- : Checkers(checkers), SR(sr), S(s), Eng(eng), ProgarmPointKind(K) { }
|
|
|
|
|
|
+ : Checkers(checkers), SR(sr), S(s), Eng(eng), ProgarmPointKind(K) {}
|
|
|
|
+
|
|
|
|
+ CheckersTy::const_iterator checkers_begin() { return Checkers.begin(); }
|
|
|
|
+ CheckersTy::const_iterator checkers_end() { return Checkers.end(); }
|
|
|
|
|
|
void runChecker(CheckerManager::CheckDeadSymbolsFunc checkFn,
|
|
void runChecker(CheckerManager::CheckDeadSymbolsFunc checkFn,
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
NodeBuilder &Bldr, ExplodedNode *Pred) {
|
|
@@ -540,7 +567,8 @@ namespace {
|
|
checkFn(SR, C);
|
|
checkFn(SR, C);
|
|
}
|
|
}
|
|
};
|
|
};
|
|
-}
|
|
|
|
|
|
+
|
|
|
|
+} // namespace
|
|
|
|
|
|
/// \brief Run checkers for dead symbols.
|
|
/// \brief Run checkers for dead symbols.
|
|
void CheckerManager::runCheckersForDeadSymbols(ExplodedNodeSet &Dst,
|
|
void CheckerManager::runCheckersForDeadSymbols(ExplodedNodeSet &Dst,
|
|
@@ -561,14 +589,13 @@ CheckerManager::runCheckersForRegionChanges(ProgramStateRef state,
|
|
ArrayRef<const MemRegion *> Regions,
|
|
ArrayRef<const MemRegion *> Regions,
|
|
const LocationContext *LCtx,
|
|
const LocationContext *LCtx,
|
|
const CallEvent *Call) {
|
|
const CallEvent *Call) {
|
|
- for (unsigned i = 0, e = RegionChangesCheckers.size(); i != e; ++i) {
|
|
|
|
|
|
+ for (const auto RegionChangesChecker : RegionChangesCheckers) {
|
|
// If any checker declares the state infeasible (or if it starts that way),
|
|
// If any checker declares the state infeasible (or if it starts that way),
|
|
// bail out.
|
|
// bail out.
|
|
if (!state)
|
|
if (!state)
|
|
return nullptr;
|
|
return nullptr;
|
|
- state = RegionChangesCheckers[i](state, invalidated,
|
|
|
|
- ExplicitRegions, Regions,
|
|
|
|
- LCtx, Call);
|
|
|
|
|
|
+ state = RegionChangesChecker(state, invalidated, ExplicitRegions, Regions,
|
|
|
|
+ LCtx, Call);
|
|
}
|
|
}
|
|
return state;
|
|
return state;
|
|
}
|
|
}
|
|
@@ -584,13 +611,13 @@ CheckerManager::runCheckersForPointerEscape(ProgramStateRef State,
|
|
(Kind != PSK_DirectEscapeOnCall &&
|
|
(Kind != PSK_DirectEscapeOnCall &&
|
|
Kind != PSK_IndirectEscapeOnCall)) &&
|
|
Kind != PSK_IndirectEscapeOnCall)) &&
|
|
"Call must not be NULL when escaping on call");
|
|
"Call must not be NULL when escaping on call");
|
|
- for (unsigned i = 0, e = PointerEscapeCheckers.size(); i != e; ++i) {
|
|
|
|
- // If any checker declares the state infeasible (or if it starts that
|
|
|
|
- // way), bail out.
|
|
|
|
- if (!State)
|
|
|
|
- return nullptr;
|
|
|
|
- State = PointerEscapeCheckers[i](State, Escaped, Call, Kind, ETraits);
|
|
|
|
- }
|
|
|
|
|
|
+ for (const auto PointerEscapeChecker : PointerEscapeCheckers) {
|
|
|
|
+ // If any checker declares the state infeasible (or if it starts that
|
|
|
|
+ // way), bail out.
|
|
|
|
+ if (!State)
|
|
|
|
+ return nullptr;
|
|
|
|
+ State = PointerEscapeChecker(State, Escaped, Call, Kind, ETraits);
|
|
|
|
+ }
|
|
return State;
|
|
return State;
|
|
}
|
|
}
|
|
|
|
|
|
@@ -598,12 +625,12 @@ CheckerManager::runCheckersForPointerEscape(ProgramStateRef State,
|
|
ProgramStateRef
|
|
ProgramStateRef
|
|
CheckerManager::runCheckersForEvalAssume(ProgramStateRef state,
|
|
CheckerManager::runCheckersForEvalAssume(ProgramStateRef state,
|
|
SVal Cond, bool Assumption) {
|
|
SVal Cond, bool Assumption) {
|
|
- for (unsigned i = 0, e = EvalAssumeCheckers.size(); i != e; ++i) {
|
|
|
|
|
|
+ for (const auto EvalAssumeChecker : EvalAssumeCheckers) {
|
|
// If any checker declares the state infeasible (or if it starts that way),
|
|
// If any checker declares the state infeasible (or if it starts that way),
|
|
// bail out.
|
|
// bail out.
|
|
if (!state)
|
|
if (!state)
|
|
return nullptr;
|
|
return nullptr;
|
|
- state = EvalAssumeCheckers[i](state, Cond, Assumption);
|
|
|
|
|
|
+ state = EvalAssumeChecker(state, Cond, Assumption);
|
|
}
|
|
}
|
|
return state;
|
|
return state;
|
|
}
|
|
}
|
|
@@ -615,27 +642,24 @@ void CheckerManager::runCheckersForEvalCall(ExplodedNodeSet &Dst,
|
|
const CallEvent &Call,
|
|
const CallEvent &Call,
|
|
ExprEngine &Eng) {
|
|
ExprEngine &Eng) {
|
|
const CallExpr *CE = cast<CallExpr>(Call.getOriginExpr());
|
|
const CallExpr *CE = cast<CallExpr>(Call.getOriginExpr());
|
|
- for (ExplodedNodeSet::iterator
|
|
|
|
- NI = Src.begin(), NE = Src.end(); NI != NE; ++NI) {
|
|
|
|
- ExplodedNode *Pred = *NI;
|
|
|
|
|
|
+ for (const auto Pred : Src) {
|
|
bool anyEvaluated = false;
|
|
bool anyEvaluated = false;
|
|
|
|
|
|
ExplodedNodeSet checkDst;
|
|
ExplodedNodeSet checkDst;
|
|
NodeBuilder B(Pred, checkDst, Eng.getBuilderContext());
|
|
NodeBuilder B(Pred, checkDst, Eng.getBuilderContext());
|
|
|
|
|
|
// Check if any of the EvalCall callbacks can evaluate the call.
|
|
// Check if any of the EvalCall callbacks can evaluate the call.
|
|
- for (std::vector<EvalCallFunc>::iterator
|
|
|
|
- EI = EvalCallCheckers.begin(), EE = EvalCallCheckers.end();
|
|
|
|
- EI != EE; ++EI) {
|
|
|
|
|
|
+ for (const auto EvalCallChecker : EvalCallCheckers) {
|
|
ProgramPoint::Kind K = ProgramPoint::PostStmtKind;
|
|
ProgramPoint::Kind K = ProgramPoint::PostStmtKind;
|
|
- const ProgramPoint &L = ProgramPoint::getProgramPoint(CE, K,
|
|
|
|
- Pred->getLocationContext(), EI->Checker);
|
|
|
|
|
|
+ const ProgramPoint &L =
|
|
|
|
+ ProgramPoint::getProgramPoint(CE, K, Pred->getLocationContext(),
|
|
|
|
+ EvalCallChecker.Checker);
|
|
bool evaluated = false;
|
|
bool evaluated = false;
|
|
{ // CheckerContext generates transitions(populates checkDest) on
|
|
{ // CheckerContext generates transitions(populates checkDest) on
|
|
// destruction, so introduce the scope to make sure it gets properly
|
|
// destruction, so introduce the scope to make sure it gets properly
|
|
// populated.
|
|
// populated.
|
|
CheckerContext C(B, Eng, Pred, L);
|
|
CheckerContext C(B, Eng, Pred, L);
|
|
- evaluated = (*EI)(CE, C);
|
|
|
|
|
|
+ evaluated = EvalCallChecker(CE, C);
|
|
}
|
|
}
|
|
assert(!(evaluated && anyEvaluated)
|
|
assert(!(evaluated && anyEvaluated)
|
|
&& "There are more than one checkers evaluating the call");
|
|
&& "There are more than one checkers evaluating the call");
|
|
@@ -661,16 +685,15 @@ void CheckerManager::runCheckersOnEndOfTranslationUnit(
|
|
const TranslationUnitDecl *TU,
|
|
const TranslationUnitDecl *TU,
|
|
AnalysisManager &mgr,
|
|
AnalysisManager &mgr,
|
|
BugReporter &BR) {
|
|
BugReporter &BR) {
|
|
- for (unsigned i = 0, e = EndOfTranslationUnitCheckers.size(); i != e; ++i)
|
|
|
|
- EndOfTranslationUnitCheckers[i](TU, mgr, BR);
|
|
|
|
|
|
+ for (const auto EndOfTranslationUnitChecker : EndOfTranslationUnitCheckers)
|
|
|
|
+ EndOfTranslationUnitChecker(TU, mgr, BR);
|
|
}
|
|
}
|
|
|
|
|
|
void CheckerManager::runCheckersForPrintState(raw_ostream &Out,
|
|
void CheckerManager::runCheckersForPrintState(raw_ostream &Out,
|
|
ProgramStateRef State,
|
|
ProgramStateRef State,
|
|
const char *NL, const char *Sep) {
|
|
const char *NL, const char *Sep) {
|
|
- for (llvm::DenseMap<CheckerTag, CheckerRef>::iterator
|
|
|
|
- I = CheckerTags.begin(), E = CheckerTags.end(); I != E; ++I)
|
|
|
|
- I->second->printState(Out, State, NL, Sep);
|
|
|
|
|
|
+ for (const auto &CheckerTag : CheckerTags)
|
|
|
|
+ CheckerTag.second->printState(Out, State, NL, Sep);
|
|
}
|
|
}
|
|
|
|
|
|
//===----------------------------------------------------------------------===//
|
|
//===----------------------------------------------------------------------===//
|
|
@@ -696,6 +719,7 @@ void CheckerManager::_registerForPreStmt(CheckStmtFunc checkfn,
|
|
StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/true };
|
|
StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/true };
|
|
StmtCheckers.push_back(info);
|
|
StmtCheckers.push_back(info);
|
|
}
|
|
}
|
|
|
|
+
|
|
void CheckerManager::_registerForPostStmt(CheckStmtFunc checkfn,
|
|
void CheckerManager::_registerForPostStmt(CheckStmtFunc checkfn,
|
|
HandlesStmtFunc isForStmtFn) {
|
|
HandlesStmtFunc isForStmtFn) {
|
|
StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/false };
|
|
StmtCheckerInfo info = { checkfn, isForStmtFn, /*IsPreVisit*/false };
|
|
@@ -799,15 +823,13 @@ CheckerManager::getCachedStmtCheckersFor(const Stmt *S, bool isPreVisit) {
|
|
|
|
|
|
// Find the checkers that should run for this Stmt and cache them.
|
|
// Find the checkers that should run for this Stmt and cache them.
|
|
CachedStmtCheckers &Checkers = CachedStmtCheckersMap[Key];
|
|
CachedStmtCheckers &Checkers = CachedStmtCheckersMap[Key];
|
|
- for (unsigned i = 0, e = StmtCheckers.size(); i != e; ++i) {
|
|
|
|
- StmtCheckerInfo &Info = StmtCheckers[i];
|
|
|
|
|
|
+ for (const auto &Info : StmtCheckers)
|
|
if (Info.IsPreVisit == isPreVisit && Info.IsForStmtFn(S))
|
|
if (Info.IsPreVisit == isPreVisit && Info.IsForStmtFn(S))
|
|
Checkers.push_back(Info.CheckFn);
|
|
Checkers.push_back(Info.CheckFn);
|
|
- }
|
|
|
|
return Checkers;
|
|
return Checkers;
|
|
}
|
|
}
|
|
|
|
|
|
CheckerManager::~CheckerManager() {
|
|
CheckerManager::~CheckerManager() {
|
|
- for (unsigned i = 0, e = CheckerDtors.size(); i != e; ++i)
|
|
|
|
- CheckerDtors[i]();
|
|
|
|
|
|
+ for (const auto CheckerDtor : CheckerDtors)
|
|
|
|
+ CheckerDtor();
|
|
}
|
|
}
|