llvm-svn: 50500

Provide SizeOfAlignTypeExpr workaround in the static analyzer for taking the sizeof of a ObjCInterfaceType.

llvm-svn: 50499

llvm-svn: 50497

llvm-svn: 50494

llvm-svn: 50493

Add db_error as panic function.

llvm-svn: 50489

llvm-svn: 50466

llvm-svn: 50453

This removes the failure in null-deref-ps.c (test suite).

llvm-svn: 50449

EvalStore/EvalLoad to handle all loads/stores from symbolic memory, allowing us
to do checks for null dereferences, etc., at any arbitrary load/store (these
were missed checks before). This also resulted in some major cleanups, some
conceptual, and others just in the structure of the code.

This temporarily introduces a regression in the test suite (null-deref-ps.c)
before I add a new LVal type for structure fields.

llvm-svn: 50443

Implemented support for better localized leaks in the CF reference count checker.
Now leaks should be flagged close to where they occur.

This should implement the desired functionality in <rdar://problem/5879592>, although the diagnostics still need to be improved.

llvm-svn: 50241

llvm-svn: 50233

function logic to act when symbols become dead.

llvm-svn: 50221

Problem:

In the recently refactored VisitDeref (which processes dereferences), we
were incorrectly skipping the node just generated for the subexpression
of the dereference.  This was a horrible regression.

llvm-svn: 50176

always be taken even if it was not feasible.

llvm-svn: 50132

llvm-svn: 50119

llvm-svn: 50112

llvm-svn: 50109

Added "nonlval::LValAsInteger" to represent abstract LVals casted to integers, allowing us to track lvals when they are casted back to pointers.

llvm-svn: 50108

llvm-svn: 50091

llvm-svn: 50089

llvm-svn: 50083

llvm-svn: 50071

compiler warning introduced by a recent patch of mine.

llvm-svn: 49917

llvm-svn: 49914

from registered BugTypes.  This helps with debugging.

Add detection of NULL values in ref count checker; this suppresses false positives.

llvm-svn: 49912

the checker-specific logic of symbolic assumptions.

llvm-svn: 49910

llvm-svn: 49826

represent possible stores to "Unknown."

llvm-svn: 49811

llvm-svn: 49804

to the plug-in GRTransferFuncs object.

llvm-svn: 49801

to start logically organizing them.

Added initial plug-in transfer function support for Objective-C message expressions.

llvm-svn: 49752

Remove FileVarDecl and BlockVarDecl. They are replaced by VarDecl::isBlockVarDecl() and VarDecl::isFileVarDecl().

This is a fairly mechanical/large change. As a result, I avoided making any changes/simplifications that weren't directly related. I did break two Analysis tests. I also have a couple FIXME's in UninitializedValues.cpp. Ted, can you take a look? If the bug isn't obvious, I am happy to dig in and fix it (since I broke it).

llvm-svn: 49748

use-after-release errors.  Added test case.

llvm-svn: 49509

Bugs are now reported using a combination of "BugType" (previously
BugDescription) and Bug "BugReport" objects, which are fed to BugReporter (which
generates PathDiagnostics). This provides a far more modular way of registering
bug types and plugging in diagnostics.

GRExprEngine now owns its copy of GRCoreEngine, and is not owned by the
ExplodedGraph.

ExplodedGraph is no longer templated on the "checker", but instead on the state
contained in the nodes.

llvm-svn: 49453

llvm-svn: 49101

of a stack variable.  This is the path-sensitive version of a check that
is already done during semantic analysis.

llvm-svn: 48980

llvm-svn: 48895

Added "GRAuditor" and "GRSimpleAPICheck" interface to allow simple stateless checkers to be injected into the analyzer.
Added "AnnotatedPath" class to record an annotated path that will be useful for inspecting paths.
Added some boilerplate code for simple checks of Apple's Foundation API.

llvm-svn: 48867

Bug fix: use GetRVal instead of GetLVal (were getting the value of a DeclRefExpr, not it's address).

llvm-svn: 48846