EvalStore/EvalLoad to handle all loads/stores from symbolic memory, allowing us
to do checks for null dereferences, etc., at any arbitrary load/store (these
were missed checks before). This also resulted in some major cleanups, some
conceptual, and others just in the structure of the code.

This temporarily introduces a regression in the test suite (null-deref-ps.c)
before I add a new LVal type for structure fields.

llvm-svn: 50443

llvm-svn: 50396

llvm-svn: 50395

The transfer functions for the checker don't do anything special yet in GC mode.

llvm-svn: 50394

Make assertions for all addresses passed to ProgramPoint that they have at least an 8-byte alignment.

llvm-svn: 50310

empty CFGBlocks that only contained a terminator.

Added improved diagnostics for break and continue statements and default branches in switch statements.

This fixes <rdar://problem/5889244>.

llvm-svn: 50286

llvm-svn: 50246

llvm-svn: 50245

Don't emit empty strings for path diagnostics when taking the default branch of a switch statement that has no label.

llvm-svn: 50242

Implemented support for better localized leaks in the CF reference count checker.
Now leaks should be flagged close to where they occur.

This should implement the desired functionality in <rdar://problem/5879592>, although the diagnostics still need to be improved.

llvm-svn: 50241

llvm-svn: 50237

llvm-svn: 50233

function logic to act when symbols become dead.

llvm-svn: 50221

This fixes <rdar://problem/5886141>.

Part of this change resulted in creating sparser summaries.  I also added
some more comments and did some minor code cleanups.

llvm-svn: 50214

that say that we are jumping to "case a" instead of "case 0".

This is a feature implementation for <rdar://problem/5880430>.

llvm-svn: 50197

llvm-svn: 50195

When building PathDiagnostics for bug reports, generate a trimmed ExplodedGraph with a single path that BugReport objects can safely walk and introspect.

llvm-svn: 50194

Problem:

In the recently refactored VisitDeref (which processes dereferences), we
were incorrectly skipping the node just generated for the subexpression
of the dereference.  This was a horrible regression.

llvm-svn: 50176

always be taken even if it was not feasible.

llvm-svn: 50132

llvm-svn: 50119

the line we are going to.

llvm-svn: 50113

llvm-svn: 50112

llvm-svn: 50109

Added "nonlval::LValAsInteger" to represent abstract LVals casted to integers, allowing us to track lvals when they are casted back to pointers.

llvm-svn: 50108

them to not be stack-allocated.

HTMLDiagnostics now batches PathDiagnostics before emitting HTML in its dtor.
This is a workaround for a problem when we trampled the Preprocessor state
when highlighting macros (sometimes resulting in an assertion failure).

llvm-svn: 50102

llvm-svn: 50098

llvm-svn: 50091

llvm-svn: 50089

llvm-svn: 50083

llvm-svn: 50071

llvm-svn: 50012

llvm-svn: 49959

before.  This allows the HTMLDiagnostic object to retrieve the bug type, bug description, etc.

llvm-svn: 49939

llvm-svn: 49934

can decide the policy on how to cache related bugs.  This allows us to
properly to handle warning about multiple leaks in the same location in the
ref count checker (not yet done).

llvm-svn: 49918

compiler warning introduced by a recent patch of mine.

llvm-svn: 49917

llvm-svn: 49914

from registered BugTypes.  This helps with debugging.

Add detection of NULL values in ref count checker; this suppresses false positives.

llvm-svn: 49912

the checker-specific logic of symbolic assumptions.

llvm-svn: 49910

llvm-svn: 49907