function logic to act when symbols become dead.

llvm-svn: 50221

Problem:

In the recently refactored VisitDeref (which processes dereferences), we
were incorrectly skipping the node just generated for the subexpression
of the dereference.  This was a horrible regression.

llvm-svn: 50176

always be taken even if it was not feasible.

llvm-svn: 50132

llvm-svn: 50119

llvm-svn: 50112

llvm-svn: 50109

Added "nonlval::LValAsInteger" to represent abstract LVals casted to integers, allowing us to track lvals when they are casted back to pointers.

llvm-svn: 50108

llvm-svn: 50091

llvm-svn: 50089

llvm-svn: 50083

llvm-svn: 50071

compiler warning introduced by a recent patch of mine.

llvm-svn: 49917

llvm-svn: 49914

from registered BugTypes.  This helps with debugging.

Add detection of NULL values in ref count checker; this suppresses false positives.

llvm-svn: 49912

the checker-specific logic of symbolic assumptions.

llvm-svn: 49910

llvm-svn: 49826

represent possible stores to "Unknown."

llvm-svn: 49811

llvm-svn: 49804

to the plug-in GRTransferFuncs object.

llvm-svn: 49801

to start logically organizing them.

Added initial plug-in transfer function support for Objective-C message expressions.

llvm-svn: 49752

Remove FileVarDecl and BlockVarDecl. They are replaced by VarDecl::isBlockVarDecl() and VarDecl::isFileVarDecl().

This is a fairly mechanical/large change. As a result, I avoided making any changes/simplifications that weren't directly related. I did break two Analysis tests. I also have a couple FIXME's in UninitializedValues.cpp. Ted, can you take a look? If the bug isn't obvious, I am happy to dig in and fix it (since I broke it).

llvm-svn: 49748

use-after-release errors.  Added test case.

llvm-svn: 49509

Bugs are now reported using a combination of "BugType" (previously
BugDescription) and Bug "BugReport" objects, which are fed to BugReporter (which
generates PathDiagnostics). This provides a far more modular way of registering
bug types and plugging in diagnostics.

GRExprEngine now owns its copy of GRCoreEngine, and is not owned by the
ExplodedGraph.

ExplodedGraph is no longer templated on the "checker", but instead on the state
contained in the nodes.

llvm-svn: 49453

llvm-svn: 49101

of a stack variable.  This is the path-sensitive version of a check that
is already done during semantic analysis.

llvm-svn: 48980

llvm-svn: 48895

Added "GRAuditor" and "GRSimpleAPICheck" interface to allow simple stateless checkers to be injected into the analyzer.
Added "AnnotatedPath" class to record an annotated path that will be useful for inspecting paths.
Added some boilerplate code for simple checks of Apple's Foundation API.

llvm-svn: 48867

Bug fix: use GetRVal instead of GetLVal (were getting the value of a DeclRefExpr, not it's address).

llvm-svn: 48846

Bug fix in transfer function for ObjCMessageExpr: Visit the receiver expression as an ordinary expression, not using VisitLVal.

llvm-svn: 48842

and message expressions with a specified receiver.

llvm-svn: 48773

and uninitialized values passed-by-value as arguments to message expressions.

llvm-svn: 48760

llvm-svn: 48757

llvm-svn: 48659

llvm-svn: 48470

llvm-svn: 48469

llvm-svn: 48468

llvm-svn: 48466

lib dir and move all the libraries into it.  This follows the main
llvm tree, and allows the libraries to be built in parallel.  The
top level now enforces that all the libs are built before Driver,
but we don't care what order the libs are built in.  This speeds
up parallel builds, particularly incremental ones.

llvm-svn: 48402

llvm-svn: 48388

llvm-svn: 48387