variables from the symbolic state. Now we keep a mapping from the predecessor
node of a statement and its cleaned state, and interpose an accessor
"GetState()" to return the cleaned state when the node is the predecessor node,
and the real state otherwise. This obviates problem of ever accidentally
cleaning the state more than once (thus blowing away new bindings by mistake).

llvm-svn: 48124

RemoveDeadBindings early because (1) it will always be called and (2) we can
dispatch to a plug-in transfer function that can evaluate the effect of dead
symbols (not yet added).

llvm-svn: 48114

method. This paves the way for other alterations to RemoveDeadBindings that are
transparent to its callers.

llvm-svn: 48113

of the LHS expressions is Unknown, the value of the entire expression
does not evaluate to the RHS (as is the case with normal assignments).

llvm-svn: 48102

we weren't processing a statement within a basic block.

llvm-svn: 48087

Bug fix: Don't call RemoveDeadBindings more than once (can kill newly generated values to Block-Level Expressions).

llvm-svn: 48079

that are not related to error nodes.

Fixed bug where we did not detect some NULL dereferences.

Added "ExplodedGraph::Trim" to trim all nodes that cannot transitively reach
a set of provided nodes.

Fixed subtle bug in ExplodedNodeImpl where we could create predecessor
iterators that included the mangled "sink" bit.  The better fix is to integrate
this bit into the void* for the wrapped State, not the NodeGroups representing
a node's predecessors and successors.

llvm-svn: 48036

information.

llvm-svn: 48031

llvm-svn: 48025

divide-by-zero errors.

llvm-svn: 48013

llvm-svn: 47971

llvm-svn: 47970

llvm-svn: 47964

llvm-svn: 47955

llvm-svn: 47954

GRStmtNodeBuilder and is now responsible for adding its own nodes to the graph.

llvm-svn: 47923

allow us to pass the builder to plug-in transfer functions and allow those
functions to create intermediate nodes.

llvm-svn: 47919

llvm-svn: 47912

passed-by-reference to builtin functions until we have better builtin support.

llvm-svn: 47910

structs (local variables) to Unknown instead of Undefined.  (added FIXME to initialize *members* of struct to undefined)

llvm-svn: 47901

variables that are pointers or integers.

llvm-svn: 47880

to bifurcate at the wrong places and not propagate at others.

llvm-svn: 47876

llvm-svn: 47873

llvm-svn: 47842

as arguments.

llvm-svn: 47778

or otherwise a constant integer value that doesn't evaluate to an address.

llvm-svn: 47774

"Refinement" of hack to bound loop-traversals: visit any block at a maximum of 3 times along a given path.

llvm-svn: 47766

This current implementation only works when both operands are concrete values; later we will add support for symbolic values.

llvm-svn: 47726

Merged ValueState and ValueStateImpl into just ValueState, with GRExprEngine::StateTy just becoming ValueState*.

llvm-svn: 47714

llvm-svn: 47713

llvm-svn: 47690

variables as uninitialized, and only "initialize" static function variables.

llvm-svn: 47683

In such cases, handle them just like Visit().

llvm-svn: 47665

globals/parameters at the beginning of the analysis.

llvm-svn: 47664

llvm-svn: 47661

ExplodedNode for the Callee subexpression we would not evaluate the CallExpr
transfer function.

llvm-svn: 47651

sometimes skip evaluating all the arguments when some arguments would not
create new ExplodedNodes.

llvm-svn: 47650

Fix bug when processing '?' operator: invalidate the old "Uninitialized" value of the block-level expression for ?.

llvm-svn: 47645

uninitialized) value. At this point we're just too imprecise.

llvm-svn: 47636

Use custom diagnostics for static analysis checkers.  Added warnings
for dereferencing uninitialized values and divide-by-zeroes.

llvm-svn: 47626