- May 04, 2009
-
-
Ted Kremenek authored
- Fix retain checker test failures. - Update retain checker to have annotations override default summary effects, not completely redefine them. llvm-svn: 70828
-
Ted Kremenek authored
which is returned instead of a null pointer. This helps centralize the logic concerning "default effects". llvm-svn: 70826
-
Ted Kremenek authored
We never compare summaries by their pointers, and we create only a handful of them when analyzing a given function. llvm-svn: 70824
-
- May 03, 2009
-
-
rdar://problem/6850275Ted Kremenek authored
Fix: <rdar://problem/6850275> CF objects returned from methods with "new" or "copy" in their name should be treated as owned For methods that follow the "fundamental rule" and return Core Foundation objects, treat those objects as owned by the caller. llvm-svn: 70665
-
Ted Kremenek authored
Convert ArgEffects from an std::vector to an ImmutableMap. This will make it much easier to clean up the summary generation logic with annotations. llvm-svn: 70660
-
Ted Kremenek authored
llvm-svn: 70657
-
Zhongxing Xu authored
simplify the retrieve logic. llvm-svn: 70651
-
- May 02, 2009
-
-
Ted Kremenek authored
occurs in GC mode. llvm-svn: 70638
-
Ted Kremenek authored
GRCoreEngine. This tends to result in shorter paths for pathological cases. llvm-svn: 70585
-
- May 01, 2009
-
-
Ted Kremenek authored
- Don't layer TypedViewRegions on top of any region except SymbolicRegions and AllocaRegions. This follows from my offline discussion within Zhongxing about how TypedViewRegions really only represent memory getting re-appropriated for a new purpose. Fallout from this change: - Move test case from xfail_rdar_6440393.m to misc-ps-64.m (it now passes). - test/Analysis/fields.c now fails for region store (crash). Marking XFAIL. - test/Analysis/rdar-6441136-region.c now fails (only runs with region store). Marking XFAIL. Diagnosis: The analyzer now correctly identifies an early out-of-bounds memory access then the one flagged: rdar-6541136-region.c:17:3: warning: Load or store into an out-of-bound memory position. *p = 1; ^~ Changing the line: char *p = (void*) &wonky[1]; to char *p = (void*) &wonky[0]; (which should delay the buffer overrun) causes region store to crash, probably because it expects a TypedViewRegion. - test/Analysis/casts.c (region store) now fails (crash). Marking XFAIL. llvm-svn: 70565
-
Ted Kremenek authored
llvm-svn: 70564
-
Ted Kremenek authored
llvm-svn: 70563
-
Ted Kremenek authored
location context. This allows us to postpone the decision of whether or not a context should add a control-flow piece to the diagnostics when inspecting its subexpressions. llvm-svn: 70545
-
Ted Kremenek authored
llvm-svn: 70542
-
- Apr 30, 2009
-
-
Ted Kremenek authored
'objc_ownership_release' to the effects on receivers. llvm-svn: 70507
-
Ted Kremenek authored
llvm-svn: 70475
-
Ted Kremenek authored
matching ObjCMethodDecl exists in the @interface. llvm-svn: 70474
-
Ted Kremenek authored
ObjCInterfaceDecl, not before. llvm-svn: 70473
-
Ted Kremenek authored
an owned object, consult its summary instead of inspecting the selector. This picks up annotations, and is just more general. llvm-svn: 70429
-
Ted Kremenek authored
llvm-svn: 70420
-
Ted Kremenek authored
llvm-svn: 70417
-
- Apr 29, 2009
-
-
Ted Kremenek authored
- Add an (optional) short description for BugReports for clients that want to distinguish between long and short descriptions for bugs - Make the bug report for VLA less obscene for Plist diagnostics by using the short description llvm-svn: 70415
-
Ted Kremenek authored
llvm-svn: 70412
-
Ted Kremenek authored
(those diffs are just code moving) and move the logic for "return of owned object" leak reporting to EvalReturnStmt. llvm-svn: 70399
-
Ted Kremenek authored
method currently being analyzed. llvm-svn: 70388
-
Ted Kremenek authored
llvm-svn: 70387
-
Ted Kremenek authored
reasoning about OSCompareAndSwap32Barrier/OSCompareAndSwap64Barrier. Essentially the address of reference to a region (pointer-to-pointer) can be casted to (int32_t*), and we need to handle the logic to convert the involved locations back and forth from nonloc::LocAsInteger, nonloc::ConcreteInt, to Loc and loc::ConcreteInt respectively. This adds some potentially suspect logic to BasicStoreManager that allows the analyzer to reason about abuses of the C type system. This should probably be refined, be ported over to RegionStoreManager, and extended with "path-sensitive type checking" to flag bugs in clearly incoherent code. llvm-svn: 70382
-
Ted Kremenek authored
name of the tracked function. llvm-svn: 70381
-
Zhongxing Xu authored
llvm-svn: 70380
-
Ted Kremenek authored
llvm-svn: 70369
-
Zhongxing Xu authored
llvm-svn: 70358
-
Ted Kremenek authored
on ObjCMessageExpr. This will enable us to use it elsewhere. This should not change any functionality. llvm-svn: 70352
-
Ted Kremenek authored
to add 'CFMakeCollectable' semantics to a method. llvm-svn: 70336
-
- Apr 28, 2009
-
-
Ted Kremenek authored
llvm-svn: 70313
-
Zhongxing Xu authored
llvm-svn: 70293
-
Ted Kremenek authored
llvm-svn: 70286
-
Ted Kremenek authored
add "Looping back to the head of the loop" diagnostic for loops. llvm-svn: 70285
-
- Apr 27, 2009
-
-
Ted Kremenek authored
'objc_ownership_cfrelease'. These are the 'release' equivalents of 'objc_ownership_retain' and 'objc_ownership_cfretain' respectively. llvm-svn: 70235
-
Ted Kremenek authored
treated as "not owned" objects. llvm-svn: 70232
-
Ted Kremenek authored
as 'objc_ownership_cfretain' except that the method acts like a CFRetain instead of a [... retain] (important in GC modes). Checker support is wired up, but currently only for Objective-C message expressions (not function calls). llvm-svn: 70218
-