Bugs are now reported using a combination of "BugType" (previously
BugDescription) and Bug "BugReport" objects, which are fed to BugReporter (which
generates PathDiagnostics). This provides a far more modular way of registering
bug types and plugging in diagnostics.

GRExprEngine now owns its copy of GRCoreEngine, and is not owned by the
ExplodedGraph.

ExplodedGraph is no longer templated on the "checker", but instead on the state
contained in the nodes.

llvm-svn: 49453

llvm-svn: 49258

llvm-svn: 49184

llvm-svn: 49183

the new BugReporter interface.

llvm-svn: 49180

"BugReporter" and "BugDescription".  BugDescription is used to describe
a bug and provide pieces of the PathDiagnostic, and BugReporter creates
the actual PathDiagnostic by crawling through the ExplodedGraph.

Migrated checks done by GRSimpleVals to be reported using the new BugReporter
mechanism.

llvm-svn: 49127

llvm-svn: 49120

llvm-svn: 49119

llvm-svn: 49102

llvm-svn: 49101

that describe a bug.

llvm-svn: 49086

GRSimpleVals warnings.  Cleaning up, but now we get multiple bubbles (branches are annotated).

llvm-svn: 49077

llvm-svn: 49057

a PathDiagnosticClient.

llvm-svn: 48996

llvm-svn: 48990

GRSimpleVals.h

Added a PathDiagnosticClient option to the driver functions for the
CFRefCountChecker and the GRSimpleVals analysis. Both analyses now accept a "-o"
argument from the driver that specifies where HTML reports should be dumped.

llvm-svn: 48989

of a stack variable.  This is the path-sensitive version of a check that
is already done during semantic analysis.

llvm-svn: 48980

llvm-svn: 48895

llvm-svn: 48886

passing an uninitialized value to a message expresion.

llvm-svn: 48776

llvm-svn: 48659

lib dir and move all the libraries into it.  This follows the main
llvm tree, and allows the libraries to be built in parallel.  The
top level now enforces that all the libs are built before Driver,
but we don't care what order the libs are built in.  This speeds
up parallel builds, particularly incremental ones.

llvm-svn: 48402

potentially being used uninitialized (which it cannot be).

llvm-svn: 48393

llvm-svn: 48368

a block of "code".

Patched various ASTConsumers (such as ASTDumper) to have more support for
processing ObjCMethodDecl. CFGVisitor now builds CFGs for ObjCMethodDecls.

llvm-svn: 48363

Changed CallRetValSymbol to SymbolConjured to allow "conjured" symbols to be created for any expression, not just CallExprs.
Added experimental support for conjuring symbols during assingments where the RHS is "unknown".  This allows more value tracking for path-sensitivity.
Fixed bug in "assumption" logic when processing symbolic constraints; we would improperly mark constraints we didn't support as infeasible.

llvm-svn: 48306

of function calls. This is useful in pruning paths.

llvm-svn: 48299

from the sources, and to try and generate only a single path from sources
to roots.

llvm-svn: 48286

llvm-svn: 48272

with gcc 4.4, patch by Shantonu Sen!

llvm-svn: 48155

llvm-svn: 48037

that are not related to error nodes.

Fixed bug where we did not detect some NULL dereferences.

Added "ExplodedGraph::Trim" to trim all nodes that cannot transitively reach
a set of provided nodes.

Fixed subtle bug in ExplodedNodeImpl where we could create predecessor
iterators that included the mangled "sink" bit.  The better fix is to integrate
this bit into the void* for the wrapped State, not the NodeGroups representing
a node's predecessors and successors.

llvm-svn: 48036

llvm-svn: 48025

divide-by-zero errors.

llvm-svn: 48013

llvm-svn: 47995

llvm-svn: 47954

GRStmtNodeBuilder and is now responsible for adding its own nodes to the graph.

llvm-svn: 47923

llvm-svn: 47912

llvm-svn: 47873

as arguments.

llvm-svn: 47778