The old test case has a little mistake.

llvm-svn: 93148

This with previous patch fixes a OSAtomic test case.

llvm-svn: 93146

value bindings.  Along with a small change to OSAtomicChecker, this
resolves <rdar://problem/7527292> and resolves some long-standing
issues with how values can be bound to the same physical address by
not have the same "key".  This change is only a beginning; logically
RegionStore needs to better handle loads from addresses where the
stored value is larger/smaller/different type than the loaded value.
We handle these cases in an approximate fashion now (via
CastRetrievedVal and help in SimpleSValuator), but it could be made
much smarter.

llvm-svn: 93137

(1) Introduce a new 'BindingKey' class to match 'BindingValue'.  This
gives us the flexibility to change the current key value from 'const
MemRegion*' to something more interesting.

(2) Rework additions/removals/lookups from the store to use new
'Remove', 'Add', 'Lookup' utility methods.

No "real" functionality change; just prep work and abstraction.

llvm-svn: 93136

CallExpr/ObjCMessageExpr can be visited in an "lvalue" context if it
returns a struct temporary.  Currently the analyzer doesn't reason
about struct temporary returned by function calls, but we shouldn't
crash here either.

llvm-svn: 93081

llvm-svn: 93071

CXXObjectRegion to represent it. 

In Environment, lookup a literal expression before make up a value for it.

llvm-svn: 93047

when the default case is winnowed down to be infeasible.  When all
cases were ruled out (and the analysis state for the default case
would be infeasible) we would still consider the default case
possible.  This fixes PR 5969.

llvm-svn: 93017

ASTContext::hasSameUnqualifiedType() when one of the type is VariableArrayType.

llvm-svn: 92723

Make static analysis support for C++ 'this' expression context-sensitive.  Essentially treat 'this' as a implicit parameter to the method call, and associate a region with it.

llvm-svn: 92675

GRStateManager.  Having these references was an abstraction violation,
as they really should only be known about GRExprEngine.

This change required adding a new 'ProcessAssume' callback in
GRSubEngine.  GRExprEngine implements this callback by calling
'EvalAssume' on all registered Checker objects as well as the
registered GRTransferFunc object.

llvm-svn: 92549

Add new states for symbolic regions tracked by malloc checker. This enables us
to do malloc checking more accurately. See test case.

Based on Lei Zhang's patch and discussion.

llvm-svn: 92342

llvm-svn: 92305

llvm-svn: 92162

GRExprEngine.cpp(1348) : warning C4305: 'argument' : truncation from 'clang::ProgramPoint::Kind' to 'bool'

llvm-svn: 92154

llvm-svn: 92121

Enhance dataflow analyses to recognize branch statements in the CFG used as hooks for the initialization of condition variables.

llvm-svn: 92119

llvm-svn: 92116

llvm-svn: 92114

llvm-svn: 92113

CFG tweak: in a WhileStmt, the condition variable initializer is evaluated every time the condition is checked.

llvm-svn: 92111

llvm-svn: 92106

llvm-svn: 92105

llvm-svn: 92102

llvm-svn: 92101

llvm-svn: 92087

llvm-svn: 92012

llvm-svn: 91991

So we should use the current program point.

llvm-svn: 91989

Add transfer function support in GRExprEngine for IfStmts with initialized condition variables.

llvm-svn: 91987

llvm-svn: 91986

llvm-svn: 91985

llvm-svn: 91982

Fix PR 5857.  When casting from a symbolic region to an integer back to a pointer value, we were not correctly layering the correct ElementRegion on the original SymbolicRegion.

llvm-svn: 91981

llvm-svn: 91970

Also treat the type of the subexpression as a pointer in GRExprEngine::VisitCast when the expression is handled as an lvalue.

llvm-svn: 91969

llvm-svn: 91952

Add transfer functions support for visiting an Objective-C message expression as an lvalue when the return type is a C++ reference.

llvm-svn: 91926

llvm-svn: 91818

llvm-svn: 91751