Correctly invalidate reference count state when passing objects by reference in message expressions we don't understand.

llvm-svn: 50541

Added temporary fix for Obj-C exception handling in the static analyzer: treat these as panic functions.

llvm-svn: 50535

llvm-svn: 50533

llvm-svn: 50530

should catch this one easily.

llvm-svn: 50526

lval passed as an argument.

Fix: Inverted diagnostic messages.
llvm-svn: 50513

llvm-svn: 50512

a CF memory leak occurred with GC enabled, etc.

llvm-svn: 50507

llvm-svn: 50503

llvm-svn: 50502

llvm-svn: 50500

Provide SizeOfAlignTypeExpr workaround in the static analyzer for taking the sizeof of a ObjCInterfaceType.

llvm-svn: 50499

llvm-svn: 50498

llvm-svn: 50497

llvm-svn: 50494

llvm-svn: 50493

Add db_error as panic function.

llvm-svn: 50489

llvm-svn: 50486

llvm-svn: 50466

llvm-svn: 50458

llvm-svn: 50453

This removes the failure in null-deref-ps.c (test suite).

llvm-svn: 50449

EvalStore/EvalLoad to handle all loads/stores from symbolic memory, allowing us
to do checks for null dereferences, etc., at any arbitrary load/store (these
were missed checks before). This also resulted in some major cleanups, some
conceptual, and others just in the structure of the code.

This temporarily introduces a regression in the test suite (null-deref-ps.c)
before I add a new LVal type for structure fields.

llvm-svn: 50443

llvm-svn: 50396

llvm-svn: 50395

The transfer functions for the checker don't do anything special yet in GC mode.

llvm-svn: 50394

Make assertions for all addresses passed to ProgramPoint that they have at least an 8-byte alignment.

llvm-svn: 50310

empty CFGBlocks that only contained a terminator.

Added improved diagnostics for break and continue statements and default branches in switch statements.

This fixes <rdar://problem/5889244>.

llvm-svn: 50286

llvm-svn: 50246

llvm-svn: 50245

Don't emit empty strings for path diagnostics when taking the default branch of a switch statement that has no label.

llvm-svn: 50242

Implemented support for better localized leaks in the CF reference count checker.
Now leaks should be flagged close to where they occur.

This should implement the desired functionality in <rdar://problem/5879592>, although the diagnostics still need to be improved.

llvm-svn: 50241

llvm-svn: 50237

llvm-svn: 50233

function logic to act when symbols become dead.

llvm-svn: 50221

This fixes <rdar://problem/5886141>.

Part of this change resulted in creating sparser summaries.  I also added
some more comments and did some minor code cleanups.

llvm-svn: 50214

that say that we are jumping to "case a" instead of "case 0".

This is a feature implementation for <rdar://problem/5880430>.

llvm-svn: 50197

llvm-svn: 50195

When building PathDiagnostics for bug reports, generate a trimmed ExplodedGraph with a single path that BugReport objects can safely walk and introspect.

llvm-svn: 50194

Problem:

In the recently refactored VisitDeref (which processes dereferences), we
were incorrectly skipping the node just generated for the subexpression
of the dereference.  This was a horrible regression.

llvm-svn: 50176