Bugs are now reported using a combination of "BugType" (previously
BugDescription) and Bug "BugReport" objects, which are fed to BugReporter (which
generates PathDiagnostics). This provides a far more modular way of registering
bug types and plugging in diagnostics.

GRExprEngine now owns its copy of GRCoreEngine, and is not owned by the
ExplodedGraph.

ExplodedGraph is no longer templated on the "checker", but instead on the state
contained in the nodes.

llvm-svn: 49453

llvm-svn: 49414

checker-specific diagnostics.

llvm-svn: 49412

llvm-svn: 49356

llvm-svn: 49258

llvm-svn: 49193

llvm-svn: 49184

llvm-svn: 49183

the ranges of highlighted elements in the source code.

llvm-svn: 49181

the new BugReporter interface.

llvm-svn: 49180

llvm-svn: 49155

llvm-svn: 49139

BFS path to the root.  This also avoids problems with loops in the ExplodedGraph.

llvm-svn: 49133

"BugReporter" and "BugDescription".  BugDescription is used to describe
a bug and provide pieces of the PathDiagnostic, and BugReporter creates
the actual PathDiagnostic by crawling through the ExplodedGraph.

Migrated checks done by GRSimpleVals to be reported using the new BugReporter
mechanism.

llvm-svn: 49127

llvm-svn: 49120

llvm-svn: 49119

llvm-svn: 49102

llvm-svn: 49101

that describe a bug.

llvm-svn: 49086

GRSimpleVals warnings.  Cleaning up, but now we get multiple bubbles (branches are annotated).

llvm-svn: 49077

llvm-svn: 49057

a PathDiagnosticClient.

llvm-svn: 48996

llvm-svn: 48990

GRSimpleVals.h

Added a PathDiagnosticClient option to the driver functions for the
CFRefCountChecker and the GRSimpleVals analysis. Both analyses now accept a "-o"
argument from the driver that specifies where HTML reports should be dumped.

llvm-svn: 48989

of a stack variable.  This is the path-sensitive version of a check that
is already done during semantic analysis.

llvm-svn: 48980

Added skeleton checking for NSString's method initWithFormat: (do not pass nil).  This won't be useful in most cases right now
because the analyzer isn't tracking expected types for an object, and [NSString alloc] just runs "id".

llvm-svn: 48917

llvm-svn: 48898

Added test case to test warning about passing 'nil' to NSString's compare: method.

llvm-svn: 48896

llvm-svn: 48895

llvm-svn: 48886

Added "GRAuditor" and "GRSimpleAPICheck" interface to allow simple stateless checkers to be injected into the analyzer.
Added "AnnotatedPath" class to record an annotated path that will be useful for inspecting paths.
Added some boilerplate code for simple checks of Apple's Foundation API.

llvm-svn: 48867

PathDiagnostic no longer contains a diagnostic ID or diagnostic level.

llvm-svn: 48864

Added classes "PathDiagnosticPiece", "PathDiagnostic", and "PathDiagnosticClient", which encapsulate diagnostic reporting for paths.

llvm-svn: 48861

Bug fix: use GetRVal instead of GetLVal (were getting the value of a DeclRefExpr, not it's address).

llvm-svn: 48846

Bug fix in transfer function for ObjCMessageExpr: Visit the receiver expression as an ordinary expression, not using VisitLVal.

llvm-svn: 48842

passing an uninitialized value to a message expresion.

llvm-svn: 48776

and message expressions with a specified receiver.

llvm-svn: 48773

and uninitialized values passed-by-value as arguments to message expressions.

llvm-svn: 48760

llvm-svn: 48757

The effect is that if a variable is uninitialized along a branch (but initialized along another), at merge points it is considered uninitialized.  Previously we had the opposite behavior.  The new behavior is more conservative, and more in line with gcc's behavior.

llvm-svn: 48689