clang
3.9.0
|
This is the simplest builder which generates nodes in the ExplodedGraph. More...
#include <CoreEngine.h>
Public Types | |
typedef ExplodedNodeSet::iterator | iterator |
Public Member Functions | |
NodeBuilder (ExplodedNode *SrcNode, ExplodedNodeSet &DstSet, const NodeBuilderContext &Ctx, bool F=true) | |
NodeBuilder (const ExplodedNodeSet &SrcSet, ExplodedNodeSet &DstSet, const NodeBuilderContext &Ctx, bool F=true) | |
virtual | ~NodeBuilder () |
ExplodedNode * | generateNode (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred) |
Generates a node in the ExplodedGraph. More... | |
ExplodedNode * | generateSink (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred) |
Generates a sink in the ExplodedGraph. More... | |
const ExplodedNodeSet & | getResults () |
iterator | begin () |
Iterators through the results frontier. More... | |
iterator | end () |
const NodeBuilderContext & | getContext () |
bool | hasGeneratedNodes () |
void | takeNodes (const ExplodedNodeSet &S) |
void | takeNodes (ExplodedNode *N) |
void | addNodes (const ExplodedNodeSet &S) |
void | addNodes (ExplodedNode *N) |
Protected Member Functions | |
virtual bool | checkResults () |
Checkes if the results are ready. More... | |
bool | hasNoSinksInFrontier () |
virtual void | finalizeResults () |
Allow subclasses to finalize results before result_begin() is executed. More... | |
ExplodedNode * | generateNodeImpl (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred, bool MarkAsSink=false) |
Protected Attributes | |
const NodeBuilderContext & | C |
bool | Finalized |
Specifies if the builder results have been finalized. More... | |
bool | HasGeneratedNodes |
ExplodedNodeSet & | Frontier |
The frontier set - a set of nodes which need to be propagated after the builder dies. More... | |
This is the simplest builder which generates nodes in the ExplodedGraph.
The main benefit of the builder is that it automatically tracks the frontier nodes (or destination set). This is the set of nodes which should be propagated to the next step / builder. They are the nodes which have been added to the builder (either as the input node set or as the newly constructed nodes) but did not have any outgoing transitions added.
Definition at line 210 of file CoreEngine.h.
Definition at line 286 of file CoreEngine.h.
|
inline |
Definition at line 247 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::Add(), and Frontier.
|
inline |
Definition at line 253 of file CoreEngine.h.
References Frontier, hasNoSinksInFrontier(), and clang::ento::ExplodedNodeSet::insert().
|
inlinevirtual |
Definition at line 260 of file CoreEngine.h.
|
inline |
Definition at line 306 of file CoreEngine.h.
References Frontier, and clang::ento::ExplodedNodeSet::insert().
Referenced by clang::ento::ExprEngine::Visit(), clang::ento::ExprEngine::VisitDeclStmt(), clang::ento::ExprEngine::VisitIncrementDecrementOperator(), clang::ento::ExprEngine::VisitMemberExpr(), and clang::ento::ExprEngine::VisitUnaryOperator().
|
inline |
Definition at line 307 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::Add(), and Frontier.
|
inline |
Iterators through the results frontier.
Definition at line 288 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), checkResults(), finalizeResults(), and Frontier.
|
inlineprotectedvirtual |
Checkes if the results are ready.
Definition at line 224 of file CoreEngine.h.
References Finalized.
Referenced by begin(), and getResults().
|
inline |
Definition at line 293 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::end(), finalizeResults(), and Frontier.
|
inlineprotectedvirtual |
Allow subclasses to finalize results before result_begin() is executed.
Definition at line 239 of file CoreEngine.h.
Referenced by begin(), end(), and getResults().
|
inline |
Generates a node in the ExplodedGraph.
Definition at line 263 of file CoreEngine.h.
References generateNodeImpl().
Referenced by clang::ento::NodeBuilderWithSinks::generateNode(), clang::ento::StmtNodeBuilder::generateNode(), clang::ento::ExprEngine::ProcessInitializer(), and clang::ento::ExprEngine::ProcessNewAllocator().
|
protected |
Definition at line 642 of file CoreEngine.cpp.
References clang::ento::ExplodedNode::addPredecessor().
Referenced by generateNode(), and generateSink().
|
inline |
Generates a sink in the ExplodedGraph.
When a node is marked as sink, the exploration from the node is stopped - the node becomes the last node on the path and certain kinds of bugs are suppressed.
Definition at line 274 of file CoreEngine.h.
References generateNodeImpl().
Referenced by clang::ento::NodeBuilderWithSinks::generateSink(), and clang::ento::StmtNodeBuilder::generateSink().
|
inline |
Definition at line 298 of file CoreEngine.h.
References C.
Referenced by clang::ento::CheckerContext::blockCount(), clang::ento::CheckerContext::getBlockID(), and clang::ento::ExprEngine::processCFGBlockEntrance().
|
inline |
Definition at line 280 of file CoreEngine.h.
References checkResults(), finalizeResults(), and Frontier.
Referenced by clang::ento::ExprEngine::VisitCXXNewExpr(), and clang::ento::ExprEngine::VisitDeclStmt().
|
inline |
Definition at line 299 of file CoreEngine.h.
References HasGeneratedNodes.
|
inlineprotected |
Definition at line 230 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), E, clang::ento::ExplodedNodeSet::end(), Frontier, and I.
Referenced by NodeBuilder().
|
inline |
Definition at line 301 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), E, clang::ento::ExplodedNodeSet::end(), clang::ento::ExplodedNodeSet::erase(), Frontier, and I.
Referenced by clang::ento::BranchNodeBuilder::BranchNodeBuilder(), clang::ento::StmtNodeBuilder::StmtNodeBuilder(), clang::ento::ExprEngine::Visit(), clang::ento::ExprEngine::VisitCXXNewExpr(), clang::ento::ExprEngine::VisitDeclStmt(), clang::ento::ExprEngine::VisitIncrementDecrementOperator(), clang::ento::ExprEngine::VisitMemberExpr(), and clang::ento::ExprEngine::VisitUnaryOperator().
|
inline |
Definition at line 305 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::erase(), and Frontier.
|
protected |
Definition at line 213 of file CoreEngine.h.
Referenced by getContext().
|
protected |
Specifies if the builder results have been finalized.
For example, if it is set to false, autotransitions are yet to be generated.
Definition at line 217 of file CoreEngine.h.
Referenced by checkResults().
|
protected |
The frontier set - a set of nodes which need to be propagated after the builder dies.
Definition at line 221 of file CoreEngine.h.
Referenced by addNodes(), begin(), end(), getResults(), hasNoSinksInFrontier(), NodeBuilder(), and takeNodes().
|
protected |
Definition at line 218 of file CoreEngine.h.
Referenced by hasGeneratedNodes().