variables as uninitialized, and only "initialize" static function variables.

llvm-svn: 47683

In such cases, handle them just like Visit().

llvm-svn: 47665

globals/parameters at the beginning of the analysis.

llvm-svn: 47664

llvm-svn: 47661

ExplodedNode for the Callee subexpression we would not evaluate the CallExpr
transfer function.

llvm-svn: 47651

sometimes skip evaluating all the arguments when some arguments would not
create new ExplodedNodes.

llvm-svn: 47650

Fix bug when processing '?' operator: invalidate the old "Uninitialized" value of the block-level expression for ?.

llvm-svn: 47645

uninitialized) value. At this point we're just too imprecise.

llvm-svn: 47636

Use custom diagnostics for static analysis checkers.  Added warnings
for dereferencing uninitialized values and divide-by-zeroes.

llvm-svn: 47626

llvm-svn: 47620

CharacterLiteral expressions.

llvm-svn: 47617

now store in the state essentially which branch we took.  This removes
a bunch of bogus assumptions (and likely bugs), reduces the complexity of
the implementation, and facilitates more optimizations.

llvm-svn: 47613

llvm-svn: 47590

Added recording of divide-by-zero and divide-by-uninitialized nodes.

llvm-svn: 47586

llvm-svn: 47578

llvm-svn: 47562

"remainder-by-zero" checking (operator '%').

llvm-svn: 47549

llvm-svn: 47547

assumption logic for lval::DeclVal.

llvm-svn: 47466

against '0' of the same bit-width.

llvm-svn: 47465

about.  The default logic is to invalidate the values of all values
passed-by-reference.

llvm-svn: 47456

llvm-svn: 47449

do so implicitly.

llvm-svn: 47447

llvm-svn: 47445

the transfer function to be invoked without an Expr* for the Cast operation.

Added implicit promotions to the transfer function logic for compound
assignments.

llvm-svn: 47444

llvm-svn: 47443

based on constant. prop. and limited symbolics.

- Renamed class: RValue -> RVal, LValue -> LVal, etc.
- Minor method renamings and interface cleanups.
- Tightened the RVal "type system" so that UninitializedVal and UnknownVal
  cannot be cast to LVal or NonLVal.  This forces these corner cases values
  to be explicitly handled early before being dispatched to plug-in transfer
  function logic.
- Major cleanup in the transfer function logic for binary and unary operators.
  Still fixing some regressions, but we now explicitly handle Uninitialized
  and Unknown values in a more rigorous way.

llvm-svn: 47441

llvm-svn: 47357

the same time clearing up some logic of how the unary '*' operator is processed.

llvm-svn: 47356

for pointer dereferences.

llvm-svn: 47340

cast's subexpression even if the cast itself has no effect.

llvm-svn: 47335

llvm-svn: 47333

CharacterLiterals.  This may not be a permanent solution; it doesn't cost that
much, however, to create a few additional states, and solves a whole bunch
of edge cases when handling ?, ||, and &&.

llvm-svn: 47299

llvm-svn: 47298

For now we just treat their values as "Unknown."

llvm-svn: 47294

an analyzed function.

GRExprEngine now records stores to "uninitialized lvalues" (which are sinks in
the ExplodedGraph).

llvm-svn: 47293

UninitializedVals and UnknownVals.

llvm-svn: 47288

Fixed bug in transfer functions for sizeof(*); we were incorrectly evaluating to
a value of the wrong type.

Fixed bug in transfer functions for compound assignments where we did not properly
handle assignments involving dereferences of symbolic values.

llvm-svn: 47190

Fixed bug in transfer function for compound assignment operators when both operands where variables but had a non-pointer type (we fired an assertion).

llvm-svn: 47184

Added more boilerplate transfer function support for pointer arithmetic.
Added more pretty-printing support for symbolic constraints.
Added transfer function support for handling enum values.
Minor pointer types cleanup in ExplodedGraphImpl.

llvm-svn: 47183