//= ValueState.cpp - Path-Sens. "State" for tracking valuues -----*- C++ -*--=// // // The LLVM Compiler Infrastructure // // This file is distributed under the University of Illinois Open Source // License. See LICENSE.TXT for details. // //===----------------------------------------------------------------------===// // // This files defines SymbolID, ExprBindKey, and ValueState. // //===----------------------------------------------------------------------===// #include "clang/Analysis/PathSensitive/ValueState.h" #include "llvm/ADT/SmallSet.h" using namespace clang; bool ValueState::isNotEqual(SymbolID sym, const llvm::APSInt& V) const { // Retrieve the NE-set associated with the given symbol. ConstNotEqTy::TreeTy* T = Data->ConstNotEq.SlimFind(sym); // See if V is present in the NE-set. return T ? T->getValue().second.contains(&V) : false; } const llvm::APSInt* ValueState::getSymVal(SymbolID sym) const { ConstEqTy::TreeTy* T = Data->ConstEq.SlimFind(sym); return T ? T->getValue().second : NULL; } ValueState ValueStateManager::RemoveDeadBindings(ValueState St, Stmt* Loc, const LiveVariables& Liveness) { // This code essentially performs a "mark-and-sweep" of the VariableBindings. // The roots are any Block-level exprs and Decls that our liveness algorithm // tells us are live. We then see what Decls they may reference, and keep // those around. This code more than likely can be made faster, and the // frequency of which this method is called should be experimented with // for optimum performance. llvm::SmallVector WList; llvm::SmallPtrSet Marked; llvm::SmallSet MarkedSymbols; ValueStateImpl NewSt = *St; // Drop bindings for subexpressions. NewSt.SubExprBindings = EXFactory.GetEmptyMap(); // Iterate over the block-expr bindings. for (ValueState::beb_iterator I = St.beb_begin(), E = St.beb_end(); I!=E ; ++I) { Expr* BlkExpr = I.getKey(); if (Liveness.isLive(Loc, BlkExpr)) { RVal X = I.getData(); if (isa(X)) { lval::DeclVal LV = cast(X); WList.push_back(LV.getDecl()); } for (RVal::symbol_iterator SI = X.symbol_begin(), SE = X.symbol_end(); SI != SE; ++SI) { MarkedSymbols.insert(*SI); } } else { RVal X = I.getData(); if (X.isUninit() && cast(X).getData()) continue; NewSt.BlockExprBindings = Remove(NewSt, BlkExpr); } } // Iterate over the variable bindings. for (ValueState::vb_iterator I = St.vb_begin(), E = St.vb_end(); I!=E ; ++I) if (Liveness.isLive(Loc, I.getKey())) { WList.push_back(I.getKey()); RVal X = I.getData(); for (RVal::symbol_iterator SI = X.symbol_begin(), SE = X.symbol_end(); SI != SE; ++SI) { MarkedSymbols.insert(*SI); } } // Perform the mark-and-sweep. while (!WList.empty()) { ValueDecl* V = WList.back(); WList.pop_back(); if (Marked.count(V)) continue; Marked.insert(V); if (V->getType()->isPointerType()) { RVal X = GetRVal(St, lval::DeclVal(cast(V))); if (X.isUnknownOrUninit()) continue; LVal LV = cast(X); for (RVal::symbol_iterator SI = LV.symbol_begin(), SE = LV.symbol_end(); SI != SE; ++SI) { MarkedSymbols.insert(*SI); } if (!isa(LV)) continue; const lval::DeclVal& LVD = cast(LV); WList.push_back(LVD.getDecl()); } } // Remove dead variable bindings. for (ValueState::vb_iterator I = St.vb_begin(), E = St.vb_end(); I!=E ; ++I) if (!Marked.count(I.getKey())) NewSt.VarBindings = Remove(NewSt, I.getKey()); // Remove dead symbols. for (ValueState::ce_iterator I = St.ce_begin(), E=St.ce_end(); I!=E; ++I) if (!MarkedSymbols.count(I.getKey())) NewSt.ConstEq = CEFactory.Remove(NewSt.ConstEq, I.getKey()); for (ValueState::cne_iterator I = St.cne_begin(), E=St.cne_end(); I!=E; ++I) if (!MarkedSymbols.count(I.getKey())) NewSt.ConstNotEq = CNEFactory.Remove(NewSt.ConstNotEq, I.getKey()); return getPersistentState(NewSt); } RVal ValueStateManager::GetRVal(ValueState St, const LVal& LV, QualType T) { if (isa(LV)) return UnknownVal(); assert (!isa(LV)); switch (LV.getSubKind()) { case lval::DeclValKind: { ValueState::VarBindingsTy::TreeTy* T = St->VarBindings.SlimFind(cast(LV).getDecl()); return T ? T->getValue().second : UnknownVal(); } // FIXME: We should limit how far a "ContentsOf" will go... case lval::SymbolValKind: { const lval::SymbolVal& SV = cast(LV); assert (T.getTypePtr()); // Punt on "symbolic" function pointers. if (T->isFunctionType()) return UnknownVal(); if (T->isPointerType()) return lval::SymbolVal(SymMgr.getContentsOfSymbol(SV.getSymbol())); else return nonlval::SymbolVal(SymMgr.getContentsOfSymbol(SV.getSymbol())); } default: assert (false && "Invalid LVal."); break; } return UnknownVal(); } ValueState ValueStateManager::AddNE(ValueState St, SymbolID sym, const llvm::APSInt& V) { // First, retrieve the NE-set associated with the given symbol. ValueState::ConstNotEqTy::TreeTy* T = St->ConstNotEq.SlimFind(sym); ValueState::IntSetTy S = T ? T->getValue().second : ISetFactory.GetEmptySet(); // Now add V to the NE set. S = ISetFactory.Add(S, &V); // Create a new state with the old binding replaced. ValueStateImpl NewSt = *St; NewSt.ConstNotEq = CNEFactory.Add(NewSt.ConstNotEq, sym, S); // Get the persistent copy. return getPersistentState(NewSt); } ValueState ValueStateManager::AddEQ(ValueState St, SymbolID sym, const llvm::APSInt& V) { // Create a new state with the old binding replaced. ValueStateImpl NewSt = *St; NewSt.ConstEq = CEFactory.Add(NewSt.ConstEq, sym, &V); // Get the persistent copy. return getPersistentState(NewSt); } RVal ValueStateManager::GetRVal(ValueState St, Expr* E) { for (;;) { switch (E->getStmtClass()) { case Stmt::AddrLabelExprClass: return LVal::MakeVal(cast(E)); // ParenExprs are no-ops. case Stmt::ParenExprClass: E = cast(E)->getSubExpr(); continue; // DeclRefExprs can either evaluate to an LVal or a Non-LVal // (assuming an implicit "load") depending on the context. In this // context we assume that we are retrieving the value contained // within the referenced variables. case Stmt::DeclRefExprClass: { ValueDecl* D = cast(E)->getDecl(); if (VarDecl* VD = dyn_cast(D)) { return GetRVal(St, lval::DeclVal(VD)); } else if (EnumConstantDecl* ED = dyn_cast(D)) { // FIXME: Do we need to cache a copy of this enum, since it // already has persistent storage? We do this because we // are comparing states using pointer equality. Perhaps there is // a better way, since APInts are fairly lightweight. return nonlval::ConcreteInt(ValMgr.getValue(ED->getInitVal())); } else if (FunctionDecl* FD = dyn_cast(D)) return lval::FuncVal(FD); assert (false && "ValueDecl support for this ValueDecl not implemented."); return UnknownVal(); } case Stmt::CharacterLiteralClass: { CharacterLiteral* C = cast(E); return NonLVal::MakeVal(ValMgr, C->getValue(), C->getType(), C->getLoc()); } case Stmt::IntegerLiteralClass: { return NonLVal::MakeVal(ValMgr, cast(E)); } // Casts where the source and target type are the same // are no-ops. We blast through these to get the descendant // subexpression that has a value. case Stmt::ImplicitCastExprClass: { ImplicitCastExpr* C = cast(E); QualType CT = C->getType(); if (CT->isVoidType()) return UnknownVal(); QualType ST = C->getSubExpr()->getType(); if (CT == ST || (CT->isPointerType() && ST->isFunctionType())) { E = C->getSubExpr(); continue; } break; } case Stmt::CastExprClass: { CastExpr* C = cast(E); QualType CT = C->getType(); QualType ST = C->getSubExpr()->getType(); if (CT->isVoidType()) return UnknownVal(); if (CT == ST || (CT->isPointerType() && ST->isFunctionType())) { E = C->getSubExpr(); continue; } break; } case Stmt::UnaryOperatorClass: { UnaryOperator* U = cast(E); if (U->getOpcode() == UnaryOperator::Plus) { E = U->getSubExpr(); continue; } break; } // Handle all other Expr* using a lookup. default: break; }; break; } ValueState::ExprBindingsTy::TreeTy* T = St->SubExprBindings.SlimFind(E); if (T) return T->getValue().second; T = St->BlockExprBindings.SlimFind(E); return T ? T->getValue().second : UnknownVal(); } RVal ValueStateManager::GetBlkExprRVal(ValueState St, Expr* E) { E = E->IgnoreParens(); switch (E->getStmtClass()) { case Stmt::CharacterLiteralClass: { CharacterLiteral* C = cast(E); return NonLVal::MakeVal(ValMgr, C->getValue(), C->getType(), C->getLoc()); } case Stmt::IntegerLiteralClass: { return NonLVal::MakeVal(ValMgr, cast(E)); } default: { ValueState::ExprBindingsTy::TreeTy* T = St->BlockExprBindings.SlimFind(E); return T ? T->getValue().second : UnknownVal(); } } } RVal ValueStateManager::GetLVal(ValueState St, Expr* E) { E = E->IgnoreParens(); if (DeclRefExpr* DR = dyn_cast(E)) { ValueDecl* VD = DR->getDecl(); if (FunctionDecl* FD = dyn_cast(VD)) return lval::FuncVal(FD); else return lval::DeclVal(cast(DR->getDecl())); } if (UnaryOperator* U = dyn_cast(E)) if (U->getOpcode() == UnaryOperator::Deref) { E = U->getSubExpr()->IgnoreParens(); if (DeclRefExpr* DR = dyn_cast(E)) { lval::DeclVal X(cast(DR->getDecl())); return GetRVal(St, X); } else return GetRVal(St, E); } return GetRVal(St, E); } ValueState ValueStateManager::SetRVal(ValueState St, Expr* E, RVal V, bool isBlkExpr, bool Invalidate) { assert (E); if (V.isUnknown()) { if (Invalidate) { ValueStateImpl NewSt = *St; if (isBlkExpr) NewSt.BlockExprBindings = EXFactory.Remove(NewSt.BlockExprBindings, E); else NewSt.SubExprBindings = EXFactory.Remove(NewSt.SubExprBindings, E); return getPersistentState(NewSt); } return St; } ValueStateImpl NewSt = *St; if (isBlkExpr) { NewSt.BlockExprBindings = EXFactory.Add(NewSt.BlockExprBindings, E, V); } else { NewSt.SubExprBindings = EXFactory.Add(NewSt.SubExprBindings, E, V); } return getPersistentState(NewSt); } ValueState ValueStateManager::SetRVal(ValueState St, LVal LV, RVal V) { switch (LV.getSubKind()) { case lval::DeclValKind: return V.isUnknown() ? UnbindVar(St, cast(LV).getDecl()) : BindVar(St, cast(LV).getDecl(), V); default: assert ("SetRVal for given LVal type not yet implemented."); return St; } } void ValueStateManager::BindVar(ValueStateImpl& StImpl, VarDecl* D, RVal V) { StImpl.VarBindings = VBFactory.Add(StImpl.VarBindings, D, V); } ValueState ValueStateManager::BindVar(ValueState St, VarDecl* D, RVal V) { // Create a new state with the old binding removed. ValueStateImpl NewSt = *St; NewSt.VarBindings = VBFactory.Add(NewSt.VarBindings, D, V); // Get the persistent copy. return getPersistentState(NewSt); } ValueState ValueStateManager::UnbindVar(ValueState St, VarDecl* D) { // Create a new state with the old binding removed. ValueStateImpl NewSt = *St; NewSt.VarBindings = VBFactory.Remove(NewSt.VarBindings, D); // Get the persistent copy. return getPersistentState(NewSt); } ValueState ValueStateManager::getInitialState() { // Create a state with empty variable bindings. ValueStateImpl StateImpl(EXFactory.GetEmptyMap(), VBFactory.GetEmptyMap(), CNEFactory.GetEmptyMap(), CEFactory.GetEmptyMap()); return getPersistentState(StateImpl); } ValueState ValueStateManager::getPersistentState(const ValueStateImpl &State) { llvm::FoldingSetNodeID ID; State.Profile(ID); void* InsertPos; if (ValueStateImpl* I = StateSet.FindNodeOrInsertPos(ID, InsertPos)) return I; ValueStateImpl* I = (ValueStateImpl*) Alloc.Allocate(); new (I) ValueStateImpl(State); StateSet.InsertNode(I, InsertPos); return I; } void ValueState::printDOT(std::ostream& Out) const { // Print Variable Bindings Out << "Variables:\\l"; bool isFirst = true; for (vb_iterator I = vb_begin(), E = vb_end(); I != E; ++I) { if (isFirst) isFirst = false; else Out << "\\l"; Out << ' ' << I.getKey()->getName() << " : "; I.getData().print(Out); } // Print Subexpression bindings. isFirst = true; for (seb_iterator I = seb_begin(), E = seb_end(); I != E; ++I) { if (isFirst) { Out << "\\l\\lSub-Expressions:\\l"; isFirst = false; } else { Out << "\\l"; } Out << " (" << (void*) I.getKey() << ") "; I.getKey()->printPretty(Out); Out << " : "; I.getData().print(Out); } // Print block-expression bindings. isFirst = true; for (beb_iterator I = beb_begin(), E = beb_end(); I != E; ++I) { if (isFirst) { Out << "\\l\\lBlock-level Expressions:\\l"; isFirst = false; } else { Out << "\\l"; } Out << " (" << (void*) I.getKey() << ") "; I.getKey()->printPretty(Out); Out << " : "; I.getData().print(Out); } // Print equality constraints. if (!Data->ConstEq.isEmpty()) { Out << "\\l\\|'==' constraints:"; for (ConstEqTy::iterator I = Data->ConstEq.begin(), E = Data->ConstEq.end(); I!=E; ++I) { Out << "\\l $" << I.getKey() << " : " << I.getData()->toString(); } } // Print != constraints. if (!Data->ConstNotEq.isEmpty()) { Out << "\\l\\|'!=' constraints:"; for (ConstNotEqTy::iterator I = Data->ConstNotEq.begin(), EI = Data->ConstNotEq.end(); I != EI; ++I) { Out << "\\l $" << I.getKey() << " : "; isFirst = true; IntSetTy::iterator J = I.getData().begin(), EJ = I.getData().end(); for ( ; J != EJ; ++J) { if (isFirst) isFirst = false; else Out << ", "; Out << (*J)->toString(); } } } }