llvm-svn: 48377

llvm-svn: 48374

llvm-svn: 48368

Changed CallRetValSymbol to SymbolConjured to allow "conjured" symbols to be created for any expression, not just CallExprs.
Added experimental support for conjuring symbols during assingments where the RHS is "unknown".  This allows more value tracking for path-sensitivity.
Fixed bug in "assumption" logic when processing symbolic constraints; we would improperly mark constraints we didn't support as infeasible.

llvm-svn: 48306

from the sources, and to try and generate only a single path from sources
to roots.

llvm-svn: 48286

llvm-svn: 48238

nodes to use a trim sources.

llvm-svn: 48236

llvm-svn: 48127

variables from the symbolic state. Now we keep a mapping from the predecessor
node of a statement and its cleaned state, and interpose an accessor
"GetState()" to return the cleaned state when the node is the predecessor node,
and the real state otherwise. This obviates problem of ever accidentally
cleaning the state more than once (thus blowing away new bindings by mistake).

llvm-svn: 48124

RemoveDeadBindings early because (1) it will always be called and (2) we can
dispatch to a plug-in transfer function that can evaluate the effect of dead
symbols (not yet added).

llvm-svn: 48114

method. This paves the way for other alterations to RemoveDeadBindings that are
transparent to its callers.

llvm-svn: 48113

of the LHS expressions is Unknown, the value of the entire expression
does not evaluate to the RHS (as is the case with normal assignments).

llvm-svn: 48102

we weren't processing a statement within a basic block.

llvm-svn: 48087

Bug fix: Don't call RemoveDeadBindings more than once (can kill newly generated values to Block-Level Expressions).

llvm-svn: 48079

that are not related to error nodes.

Fixed bug where we did not detect some NULL dereferences.

Added "ExplodedGraph::Trim" to trim all nodes that cannot transitively reach
a set of provided nodes.

Fixed subtle bug in ExplodedNodeImpl where we could create predecessor
iterators that included the mangled "sink" bit.  The better fix is to integrate
this bit into the void* for the wrapped State, not the NodeGroups representing
a node's predecessors and successors.

llvm-svn: 48036

information.

llvm-svn: 48031

llvm-svn: 48025

divide-by-zero errors.

llvm-svn: 48013

llvm-svn: 47971

llvm-svn: 47970

llvm-svn: 47964

llvm-svn: 47955

llvm-svn: 47954

GRStmtNodeBuilder and is now responsible for adding its own nodes to the graph.

llvm-svn: 47923

allow us to pass the builder to plug-in transfer functions and allow those
functions to create intermediate nodes.

llvm-svn: 47919

llvm-svn: 47912

passed-by-reference to builtin functions until we have better builtin support.

llvm-svn: 47910

structs (local variables) to Unknown instead of Undefined.  (added FIXME to initialize *members* of struct to undefined)

llvm-svn: 47901

variables that are pointers or integers.

llvm-svn: 47880

to bifurcate at the wrong places and not propagate at others.

llvm-svn: 47876

llvm-svn: 47873

llvm-svn: 47842

as arguments.

llvm-svn: 47778

or otherwise a constant integer value that doesn't evaluate to an address.

llvm-svn: 47774

"Refinement" of hack to bound loop-traversals: visit any block at a maximum of 3 times along a given path.

llvm-svn: 47766

This current implementation only works when both operands are concrete values; later we will add support for symbolic values.

llvm-svn: 47726

Merged ValueState and ValueStateImpl into just ValueState, with GRExprEngine::StateTy just becoming ValueState*.

llvm-svn: 47714

llvm-svn: 47713

llvm-svn: 47690

variables as uninitialized, and only "initialize" static function variables.

llvm-svn: 47683