clang
3.9.0
|
#include "clang/StaticAnalyzer/Core/BugReporter/BugReporter.h"
#include "clang/AST/ASTContext.h"
#include "clang/AST/DeclObjC.h"
#include "clang/AST/Expr.h"
#include "clang/AST/ExprCXX.h"
#include "clang/AST/ParentMap.h"
#include "clang/AST/StmtCXX.h"
#include "clang/AST/StmtObjC.h"
#include "clang/Analysis/CFG.h"
#include "clang/Analysis/ProgramPoint.h"
#include "clang/Basic/SourceManager.h"
#include "clang/StaticAnalyzer/Core/BugReporter/BugType.h"
#include "clang/StaticAnalyzer/Core/BugReporter/PathDiagnostic.h"
#include "clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h"
#include "llvm/ADT/DenseMap.h"
#include "llvm/ADT/IntrusiveRefCntPtr.h"
#include "llvm/ADT/STLExtras.h"
#include "llvm/ADT/SmallString.h"
#include "llvm/ADT/Statistic.h"
#include "llvm/Support/raw_ostream.h"
#include <memory>
#include <queue>
Go to the source code of this file.
Macros | |
#define | DEBUG_TYPE "BugReporter" |
Typedefs | |
typedef llvm::DenseMap< const PathPieces *, const LocationContext * > | LocationContextMap |
A map from PathDiagnosticPiece to the LocationContext of the inlined function call it represents. More... | |
typedef std::pair < PathDiagnosticCallPiece *, const ExplodedNode * > | StackDiagPair |
typedef SmallVector < StackDiagPair, 6 > | StackDiagVector |
typedef llvm::DenseSet< const Expr * > | InterestingExprs |
typedef llvm::DenseSet< const PathDiagnosticCallPiece * > | OptimizedCallsSet |
Functions | |
STATISTIC (MaxBugClassSize,"The maximum number of bug reports in the same equivalence class") | |
STATISTIC (MaxValidBugClassSize,"The maximum number of bug reports in the same equivalence class ""where at least one report is valid (not suppressed)") | |
static const Stmt * | GetPreviousStmt (const ExplodedNode *N) |
static const Stmt * | GetCurrentOrPreviousStmt (const ExplodedNode *N) |
static PathDiagnosticEventPiece * | eventsDescribeSameCondition (PathDiagnosticEventPiece *X, PathDiagnosticEventPiece *Y) |
static void | removeRedundantMsgs (PathPieces &path) |
An optimization pass over PathPieces that removes redundant diagnostics generated by both ConditionBRVisitor and TrackConstraintBRVisitor. More... | |
static bool | removeUnneededCalls (PathPieces &pieces, BugReport *R, LocationContextMap &LCM) |
Recursively scan through a path and prune out calls and macros pieces that aren't needed. More... | |
static bool | hasImplicitBody (const Decl *D) |
Returns true if the given decl has been implicitly given a body, either by the analyzer or by the compiler proper. More... | |
static void | adjustCallLocations (PathPieces &Pieces, PathDiagnosticLocation *LastCallLocation=nullptr) |
Recursively scan through a path and make sure that all call pieces have valid locations. More... | |
static void | removeEdgesToDefaultInitializers (PathPieces &Pieces) |
Remove edges in and out of C++ default initializer expressions. More... | |
static void | removePiecesWithInvalidLocations (PathPieces &Pieces) |
Remove all pieces with invalid locations as these cannot be serialized. More... | |
static const Stmt * | getEnclosingParent (const Stmt *S, const ParentMap &PM) |
static PathDiagnosticLocation | getEnclosingStmtLocation (const Stmt *S, SourceManager &SMgr, const ParentMap &P, const LocationContext *LC, bool allowNestedContexts) |
static bool | GenerateVisitorsOnlyPathDiagnostic (PathDiagnostic &PD, PathDiagnosticBuilder &PDB, const ExplodedNode *N, ArrayRef< std::unique_ptr< BugReporterVisitor >> visitors) |
static void | updateStackPiecesWithMessage (PathDiagnosticPiece *P, StackDiagVector &CallStack) |
static void | CompactPathDiagnostic (PathPieces &path, const SourceManager &SM) |
CompactPathDiagnostic - This function postprocesses a PathDiagnostic object and collapses PathDiagosticPieces that are expanded by macros. More... | |
static bool | GenerateMinimalPathDiagnostic (PathDiagnostic &PD, PathDiagnosticBuilder &PDB, const ExplodedNode *N, LocationContextMap &LCM, ArrayRef< std::unique_ptr< BugReporterVisitor >> visitors) |
static bool | IsControlFlowExpr (const Stmt *S) |
static void | reversePropagateIntererstingSymbols (BugReport &R, InterestingExprs &IE, const ProgramState *State, const Expr *Ex, const LocationContext *LCtx) |
static void | reversePropagateInterestingSymbols (BugReport &R, InterestingExprs &IE, const ProgramState *State, const LocationContext *CalleeCtx, const LocationContext *CallerCtx) |
static bool | isLoop (const Stmt *Term) |
static bool | isJumpToFalseBranch (const BlockEdge *BE) |
static bool | isLoopJumpPastBody (const Stmt *Term, const BlockEdge *BE) |
Return true if the terminator is a loop and the destination is the false branch. More... | |
static bool | isContainedByStmt (ParentMap &PM, const Stmt *S, const Stmt *SubS) |
static const Stmt * | getStmtBeforeCond (ParentMap &PM, const Stmt *Term, const ExplodedNode *N) |
static bool | isInLoopBody (ParentMap &PM, const Stmt *S, const Stmt *Term) |
static bool | GenerateExtensivePathDiagnostic (PathDiagnostic &PD, PathDiagnosticBuilder &PDB, const ExplodedNode *N, LocationContextMap &LCM, ArrayRef< std::unique_ptr< BugReporterVisitor >> visitors) |
static void | addEdgeToPath (PathPieces &path, PathDiagnosticLocation &PrevLoc, PathDiagnosticLocation NewLoc, const LocationContext *LC) |
Adds a sanitized control-flow diagnostic edge to a path. More... | |
static const Stmt * | getTerminatorCondition (const CFGBlock *B) |
A customized wrapper for CFGBlock::getTerminatorCondition() which returns the element for ObjCForCollectionStmts. More... | |
static bool | GenerateAlternateExtensivePathDiagnostic (PathDiagnostic &PD, PathDiagnosticBuilder &PDB, const ExplodedNode *N, LocationContextMap &LCM, ArrayRef< std::unique_ptr< BugReporterVisitor >> visitors) |
static const Stmt * | getLocStmt (PathDiagnosticLocation L) |
static const Stmt * | getStmtParent (const Stmt *S, const ParentMap &PM) |
static bool | isConditionForTerminator (const Stmt *S, const Stmt *Cond) |
static bool | isIncrementOrInitInForLoop (const Stmt *S, const Stmt *FL) |
static void | addContextEdges (PathPieces &pieces, SourceManager &SM, const ParentMap &PM, const LocationContext *LCtx) |
Adds synthetic edges from top-level statements to their subexpressions. More... | |
static void | simplifySimpleBranches (PathPieces &pieces) |
Move edges from a branch condition to a branch target when the condition is simple. More... | |
static Optional< size_t > | getLengthOnSingleLine (SourceManager &SM, SourceRange Range) |
Returns the number of bytes in the given (character-based) SourceRange. More... | |
static Optional< size_t > | getLengthOnSingleLine (SourceManager &SM, const Stmt *S) |
static void | removeContextCycles (PathPieces &Path, SourceManager &SM, ParentMap &PM) |
Eliminate two-edge cycles created by addContextEdges(). More... | |
static bool | lexicalContains (ParentMap &PM, const Stmt *X, const Stmt *Y) |
Return true if X is contained by Y. More... | |
static void | removePunyEdges (PathPieces &path, SourceManager &SM, ParentMap &PM) |
static void | removeIdenticalEvents (PathPieces &path) |
static bool | optimizeEdges (PathPieces &path, SourceManager &SM, OptimizedCallsSet &OCS, LocationContextMap &LCM) |
static void | dropFunctionEntryEdge (PathPieces &Path, LocationContextMap &LCM, SourceManager &SM) |
Drop the very first edge in a path, which should be a function entry edge. More... | |
static BugReport * | FindReportInEquivalenceClass (BugReportEquivClass &EQ, SmallVectorImpl< BugReport * > &bugReports) |
Variables | |
static const char | StrEnteringLoop [] = "Entering loop body" |
static const char | StrLoopBodyZero [] = "Loop body executed 0 times" |
static const char | StrLoopRangeEmpty [] |
static const char | StrLoopCollectionEmpty [] |
#define DEBUG_TYPE "BugReporter" |
Definition at line 41 of file BugReporter.cpp.
typedef llvm::DenseSet<const Expr *> InterestingExprs |
Definition at line 1235 of file BugReporter.cpp.
typedef llvm::DenseMap<const PathPieces *, const LocationContext *> LocationContextMap |
A map from PathDiagnosticPiece to the LocationContext of the inlined function call it represents.
Definition at line 151 of file BugReporter.cpp.
typedef llvm::DenseSet<const PathDiagnosticCallPiece *> OptimizedCallsSet |
Definition at line 1955 of file BugReporter.cpp.
typedef std::pair<PathDiagnosticCallPiece*, const ExplodedNode*> StackDiagPair |
Definition at line 528 of file BugReporter.cpp.
typedef SmallVector<StackDiagPair, 6> StackDiagVector |
Definition at line 529 of file BugReporter.cpp.
|
static |
Adds synthetic edges from top-level statements to their subexpressions.
This avoids a "swoosh" effect, where an edge from a top-level statement A points to a sub-expression B.1 that's not at the start of B. In these cases, we'd like to see an edge from A to B, then another one from B to B.1.
Definition at line 1962 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asStmt(), E, getEnclosingStmtLocation(), clang::ento::PathDiagnosticControlFlowPiece::getEndLocation(), getLocStmt(), clang::ento::PathDiagnosticControlFlowPiece::getStartLocation(), getStmtParent(), I, clang::ento::PathDiagnosticLocation::isValid(), clang::ento::PathDiagnosticControlFlowPiece::setEndLocation(), and clang::ento::PathDiagnosticControlFlowPiece::setStartLocation().
Referenced by optimizeEdges().
|
static |
Adds a sanitized control-flow diagnostic edge to a path.
Definition at line 1584 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asLocation(), clang::ento::PathDiagnosticLocation::asStmt(), clang::SourceLocation::isInvalid(), clang::SourceLocation::isValid(), and clang::ento::PathDiagnosticLocation::isValid().
Referenced by GenerateAlternateExtensivePathDiagnostic().
|
static |
Recursively scan through a path and make sure that all call pieces have valid locations.
Definition at line 218 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asLocation(), clang::ento::PathDiagnosticCallPiece::callEnter, clang::ento::PathDiagnosticCallPiece::callEnterWithin, clang::ento::PathDiagnosticCallPiece::callReturn, E, clang::ento::PathDiagnosticCallPiece::getCallee(), clang::ento::PathDiagnosticCallPiece::getCaller(), hasImplicitBody(), I, clang::if(), clang::SourceLocation::isValid(), and clang::ento::PathDiagnosticCallPiece::path.
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
CompactPathDiagnostic - This function postprocesses a PathDiagnostic object and collapses PathDiagosticPieces that are expanded by macros.
Definition at line 2961 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asLocation(), clang::ento::PathDiagnosticLocation::createSingleLocation(), E, clang::SourceManager::getExpansionLoc(), clang::ento::PathDiagnosticPiece::getLocation(), I, clang::SourceLocation::isFileID(), and clang::SourceLocation::isMacroID().
Referenced by GenerateMinimalPathDiagnostic().
|
static |
Drop the very first edge in a path, which should be a function entry edge.
If the first edge is not a function entry edge (say, because the first statement had an invalid source location), this function does nothing.
Definition at line 2503 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::createBegin(), and clang::ento::PathDiagnosticControlFlowPiece::getStartLocation().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 78 of file BugReporter.cpp.
References clang::ento::PathDiagnosticSpotPiece::getLocation(), clang::ento::TrackConstraintBRVisitor::getTag(), clang::ento::ConditionBRVisitor::getTag(), and clang::ento::PathDiagnosticPiece::getTag().
Referenced by removeRedundantMsgs().
|
static |
Definition at line 3281 of file BugReporter.cpp.
References clang::ento::BugReportEquivClass::begin(), clang::ento::BugReport::BT, E, clang::ento::BugReportEquivClass::end(), I, clang::ento::ExplodedNode::isSink(), clang::ento::BugType::isSuppressOnSink(), and clang::ento::ExplodedNode::succ_empty().
|
static |
Definition at line 1627 of file BugReporter.cpp.
References addEdgeToPath(), clang::ento::PathDiagnosticCallPiece::callReturn, clang::ento::PathDiagnosticCallPiece::construct(), clang::ento::PathDiagnosticLocation::createBegin(), clang::ento::PathDiagnosticLocation::createEndBrace(), clang::ento::PathDiagnostic::getActivePath(), clang::ProgramPoint::getAs(), clang::LocationContext::getDecl(), clang::ento::ExplodedNode::getFirstPred(), clang::ento::ExplodedNode::getLocation(), clang::ento::PathDiagnosticSpotPiece::getLocation(), clang::ento::PathDiagnosticCallPiece::getLocation(), clang::ento::PathDiagnostic::getLocation(), clang::ento::ExplodedNode::getLocationContext(), clang::ento::ExplodedNode::getState(), getStmtBeforeCond(), clang::CFGBlock::getTerminator(), getTerminatorCondition(), clang::ento::PathDiagnosticLocation::invalidate(), isInLoopBody(), isJumpToFalseBranch(), isLoop(), clang::ento::BugReport::isValid(), clang::ento::PathDiagnostic::isWithinCall(), P, clang::ento::PathDiagnosticCallPiece::path, clang::ento::PathDiagnostic::popActivePath(), clang::ento::PathDiagnostic::pushActivePath(), reversePropagateIntererstingSymbols(), reversePropagateInterestingSymbols(), clang::ento::PathDiagnosticCallPiece::setCallee(), clang::ento::PathDiagnosticEventPiece::setPrunable(), SM, StrEnteringLoop, StrLoopBodyZero, StrLoopCollectionEmpty, StrLoopRangeEmpty, and updateStackPiecesWithMessage().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 1387 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asStmt(), clang::ento::PathDiagnosticCallPiece::callReturn, clang::ento::PathDiagnosticCallPiece::construct(), clang::ento::PathDiagnosticLocation::createBegin(), clang::ento::PathDiagnosticLocation::createEndBrace(), clang::ento::PathDiagnostic::getActivePath(), clang::ProgramPoint::getAs(), clang::ento::ExplodedNode::getFirstPred(), clang::ento::ExplodedNode::getLocation(), clang::ento::PathDiagnosticSpotPiece::getLocation(), clang::ento::PathDiagnosticCallPiece::getLocation(), clang::ento::ExplodedNode::getLocationContext(), clang::ento::ExplodedNode::getState(), getStmtBeforeCond(), clang::CFGBlock::getTerminator(), clang::CFGBlock::getTerminatorCondition(), IsControlFlowExpr(), isInLoopBody(), isLoopJumpPastBody(), clang::ento::PathDiagnostic::isWithinCall(), clang::None, P, clang::ento::PathDiagnosticCallPiece::path, clang::ento::PathDiagnostic::popActivePath(), clang::ento::ExplodedNode::pred_begin(), clang::ento::ExplodedNode::pred_empty(), clang::ento::PathDiagnostic::pushActivePath(), reversePropagateIntererstingSymbols(), reversePropagateInterestingSymbols(), clang::ento::PathDiagnosticCallPiece::setCallee(), clang::ento::PathDiagnosticEventPiece::setPrunable(), clang::ast_matchers::stmt, and updateStackPiecesWithMessage().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 556 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asLocation(), clang::ento::PathDiagnosticLocation::asStmt(), CompactPathDiagnostic(), clang::ento::PathDiagnosticCallPiece::construct(), clang::ento::PathDiagnosticLocation::createBegin(), clang::ento::PathDiagnosticLocation::createOperatorLoc(), End, clang::ento::PathDiagnostic::getActivePath(), clang::ProgramPoint::getAs(), clang::FullSourceLoc::getExpansionLineNumber(), clang::ento::ExplodedNode::getFirstPred(), clang::CFGBlock::getLabel(), clang::CaseStmt::getLHS(), clang::BinaryOperator::getLHS(), clang::ento::ExplodedNode::getLocation(), clang::ento::ExplodedNode::getLocationContext(), clang::ento::PathDiagnostic::getMutablePieces(), clang::ento::PathDiagnosticLocation::getNextStmt(), clang::BinaryOperator::getOpcode(), clang::CFGBlock::getTerminator(), clang::Expr::IgnoreParenCasts(), clang::ento::PathDiagnostic::isWithinCall(), P, clang::ento::PathDiagnosticCallPiece::path, clang::ento::PathDiagnostic::popActivePath(), clang::ento::ExplodedNode::pred_begin(), clang::ento::ExplodedNode::pred_empty(), clang::ento::PathDiagnostic::pushActivePath(), S, clang::ento::PathDiagnosticCallPiece::setCallee(), clang::CFGBlock::succ_begin(), and updateStackPiecesWithMessage().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 502 of file BugReporter.cpp.
References clang::ento::ExplodedNode::getFirstPred(), and clang::ento::BugReport::isValid().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
inlinestatic |
Definition at line 66 of file BugReporter.cpp.
References GetPreviousStmt(), clang::ento::PathDiagnosticLocation::getStmt(), and S.
Referenced by clang::ento::BugReport::Profile().
Definition at line 403 of file BugReporter.cpp.
References clang::ParentMap::getParentIgnoreParens(), and clang::ParentMap::isConsumedExpr().
Referenced by getEnclosingStmtLocation().
|
static |
Definition at line 426 of file BugReporter.cpp.
References getEnclosingParent(), and clang::BinaryOperator::isLogicalOp().
Referenced by addContextEdges().
|
static |
Returns the number of bytes in the given (character-based) SourceRange.
If the locations in the range are not on the same line, returns None.
Note that this does not do a precise user-visible character or column count.
Definition at line 2115 of file BugReporter.cpp.
References Buffer, clang::SourceRange::getBegin(), clang::SourceManager::getBuffer(), clang::SourceRange::getEnd(), clang::SourceManager::getExpansionLoc(), clang::SourceManager::getExpansionRange(), clang::SourceManager::getFileID(), clang::SourceManager::getFileOffset(), and clang::None.
Referenced by getLengthOnSingleLine(), optimizeEdges(), removeContextCycles(), and removePunyEdges().
|
static |
Definition at line 2145 of file BugReporter.cpp.
References getLengthOnSingleLine().
|
static |
Definition at line 1877 of file BugReporter.cpp.
References clang::ento::PathDiagnosticLocation::asStmt(), and clang::ento::PathDiagnosticLocation::isValid().
Referenced by addContextEdges(), clang::ento::PathDiagnosticCallPiece::dump(), optimizeEdges(), removeContextCycles(), removePunyEdges(), and simplifySimpleBranches().
|
static |
Definition at line 57 of file BugReporter.cpp.
References clang::ento::ExplodedNode::getFirstPred(), clang::ento::PathDiagnosticLocation::getStmt(), and S.
Referenced by GetCurrentOrPreviousStmt(), and clang::ento::BugReport::getStmt().
|
static |
Definition at line 1336 of file BugReporter.cpp.
References clang::ProgramPoint::getAs(), clang::ento::ExplodedNode::getFirstPred(), clang::ento::ExplodedNode::getLocation(), isContainedByStmt(), and S.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and GenerateExtensivePathDiagnostic().
Definition at line 1883 of file BugReporter.cpp.
References clang::ParentMap::getParentIgnoreParens(), and S.
Referenced by addContextEdges(), and optimizeEdges().
A customized wrapper for CFGBlock::getTerminatorCondition() which returns the element for ObjCForCollectionStmts.
Definition at line 1612 of file BugReporter.cpp.
References clang::CFGBlock::getTerminatorCondition(), and S.
Referenced by GenerateAlternateExtensivePathDiagnostic().
Returns true if the given decl has been implicitly given a body, either by the analyzer or by the compiler proper.
Definition at line 210 of file BugReporter.cpp.
Referenced by adjustCallLocations().
Definition at line 1904 of file BugReporter.cpp.
References clang::CXXForRangeStmt::getCond(), clang::ConditionalOperator::getCond(), clang::BinaryOperator::getLHS(), clang::ConditionalOperator::getLHS(), clang::CXXForRangeStmt::getRangeInit(), clang::BinaryOperator::getRHS(), clang::ConditionalOperator::getRHS(), clang::BinaryOperator::isLogicalOp(), and S.
Referenced by optimizeEdges(), removePunyEdges(), and simplifySimpleBranches().
Definition at line 1327 of file BugReporter.cpp.
References clang::ParentMap::getParent().
Referenced by getStmtBeforeCond(), and isInLoopBody().
Definition at line 891 of file BugReporter.cpp.
References E, clang::Expr::IgnoreParenCasts(), and S.
Referenced by GenerateExtensivePathDiagnostic().
Definition at line 1350 of file BugReporter.cpp.
References clang::ObjCForCollectionStmt::getBody(), clang::CXXForRangeStmt::getBody(), clang::ForStmt::getBody(), clang::CXXForRangeStmt::getInc(), clang::ForStmt::getInc(), clang::CXXForRangeStmt::getLoopVarStmt(), isContainedByStmt(), and S.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and GenerateExtensivePathDiagnostic().
Definition at line 1311 of file BugReporter.cpp.
References clang::BlockEdge::getDst(), clang::BlockEdge::getSrc(), clang::CFGBlock::succ_begin(), and clang::CFGBlock::succ_size().
Referenced by GenerateAlternateExtensivePathDiagnostic(), and isLoopJumpPastBody().
Definition at line 1298 of file BugReporter.cpp.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and isLoopJumpPastBody().
Return true if the terminator is a loop and the destination is the false branch.
Definition at line 1319 of file BugReporter.cpp.
References isJumpToFalseBranch(), and isLoop().
Referenced by GenerateExtensivePathDiagnostic().
Return true if X is contained by Y.
Definition at line 2223 of file BugReporter.cpp.
References clang::ParentMap::getParent().
Referenced by optimizeEdges().
|
static |
Definition at line 2317 of file BugReporter.cpp.
References addContextEdges(), clang::ento::PathDiagnosticLocation::asLocation(), E, clang::ObjCForCollectionStmt::getCollection(), clang::ObjCForCollectionStmt::getElement(), clang::ento::PathDiagnosticControlFlowPiece::getEndLocation(), getLengthOnSingleLine(), getLocStmt(), clang::LocationContext::getParentMap(), clang::ento::PathDiagnosticControlFlowPiece::getStartLocation(), getStmtParent(), I, clang::Expr::IgnoreParens(), isConditionForTerminator(), clang::ParentMap::isConsumedExpr(), isIncrementOrInitInForLoop(), lexicalContains(), removeContextCycles(), removeIdenticalEvents(), removePunyEdges(), clang::ento::PathDiagnosticControlFlowPiece::setEndLocation(), and simplifySimpleBranches().
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Eliminate two-edge cycles created by addContextEdges().
Once all the context edges are in place, there are plenty of cases where there's a single edge from a top-level statement to a subexpression, followed by a single path note, and then a reverse edge to get back out to the top level. If the statement is simple enough, the subexpression edges just add noise and make it harder to understand what's going on.
This function only removes edges in pairs, because removing only one edge might leave other edges dangling.
This will not remove edges in more complicated situations:
Definition at line 2166 of file BugReporter.cpp.
References E, clang::ento::PathDiagnosticControlFlowPiece::getEndLocation(), getLengthOnSingleLine(), getLocStmt(), clang::ento::PathDiagnosticControlFlowPiece::getStartLocation(), and I.
Referenced by optimizeEdges().
|
static |
Remove edges in and out of C++ default initializer expressions.
These are for fields that have in-class initializers, as opposed to being initialized explicitly in a constructor or braced list.
Definition at line 253 of file BugReporter.cpp.
References E, End, I, and Next.
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 2292 of file BugReporter.cpp.
References E, clang::ento::PathDiagnosticPiece::getString(), and I.
Referenced by optimizeEdges().
|
static |
Remove all pieces with invalid locations as these cannot be serialized.
We might have pieces with invalid locations as a result of inlining Body Farm generated functions.
Definition at line 288 of file BugReporter.cpp.
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 2235 of file BugReporter.cpp.
References E, clang::end(), clang::ento::PathDiagnosticControlFlowPiece::getEndLocation(), getLengthOnSingleLine(), getLocStmt(), clang::ParentMap::getParent(), clang::ento::PathDiagnosticControlFlowPiece::getStartLocation(), I, clang::SourceManager::isBeforeInTranslationUnit(), isConditionForTerminator(), and clang::SourceManager::isWrittenInSameFile().
Referenced by optimizeEdges().
|
static |
An optimization pass over PathPieces that removes redundant diagnostics generated by both ConditionBRVisitor and TrackConstraintBRVisitor.
Both BugReporterVisitors use different methods to generate diagnostics, with one capable of emitting diagnostics in some cases but not in others. This can lead to redundant diagnostic pieces at the same point in a path.
Definition at line 102 of file BugReporter.cpp.
References clang::ento::PathDiagnosticPiece::Call, clang::ento::PathDiagnosticPiece::ControlFlow, clang::ento::PathDiagnosticPiece::Event, eventsDescribeSameCondition(), and clang::ento::PathDiagnosticPiece::Macro.
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Recursively scan through a path and prune out calls and macros pieces that aren't needed.
Return true if afterwards the path contains "interesting stuff" which means it shouldn't be pruned from the parent path.
Definition at line 156 of file BugReporter.cpp.
References clang::ento::PathDiagnosticPiece::Call, clang::ento::PathDiagnosticPiece::ControlFlow, clang::ento::PathDiagnosticPiece::Event, clang::ento::BugReport::isInteresting(), clang::ento::PathDiagnosticEventPiece::isPrunable(), clang::ento::PathDiagnosticPiece::Macro, clang::ento::PathDiagnosticCallPiece::path, and clang::ento::PathDiagnosticMacroPiece::subPieces.
Referenced by clang::ento::GRBugReporter::generatePathDiagnostic().
|
static |
Definition at line 1237 of file BugReporter.cpp.
References clang::ento::ProgramState::getSVal(), clang::ento::BugReport::isInteresting(), and clang::ento::BugReport::markInteresting().
Referenced by GenerateAlternateExtensivePathDiagnostic(), and GenerateExtensivePathDiagnostic().
|
static |
Definition at line 1267 of file BugReporter.cpp.
References clang::StackFrameContext::getCallSite(), clang::LocationContext::getCurrentStackFrame(), clang::LocationContext::getDecl(), clang::ento::ProgramState::getLValue(), clang::ento::ProgramState::getRawSVal(), and clang::ento::BugReport::isInteresting().
Referenced by GenerateAlternateExtensivePathDiagnostic(), and GenerateExtensivePathDiagnostic().
|
static |
Move edges from a branch condition to a branch target when the condition is simple.
This restructures some of the work of addContextEdges. That function creates edges this may destroy, but they work together to create a more aesthetically set of edges around branches. After the call to addContextEdges, we may have (1) an edge to the branch, (2) an edge from the branch to the branch condition, and (3) an edge from the branch condition to the branch target. We keep (1), but may wish to remove (2) and move the source of (3) to the branch if the branch condition is simple.
Definition at line 2043 of file BugReporter.cpp.
References E, clang::ento::PathDiagnosticControlFlowPiece::getEndLocation(), getLocStmt(), clang::ento::PathDiagnosticControlFlowPiece::getStartLocation(), clang::ento::PathDiagnosticPiece::getString(), I, isConditionForTerminator(), clang::ento::PathDiagnosticControlFlowPiece::setStartLocation(), StrEnteringLoop, StrLoopBodyZero, StrLoopCollectionEmpty, and StrLoopRangeEmpty.
Referenced by optimizeEdges().
STATISTIC | ( | MaxBugClassSize | , |
"The maximum number of bug reports in the same equivalence class" | |||
) |
STATISTIC | ( | MaxValidBugClassSize | , |
"The maximum number of bug reports in the same equivalence class ""where at least one report is valid (not suppressed)" | |||
) |
|
static |
Definition at line 531 of file BugReporter.cpp.
References E, clang::ento::PathDiagnosticCallPiece::hasCallStackMessage(), I, and clang::ento::PathDiagnosticCallPiece::setCallStackMessage().
Referenced by GenerateAlternateExtensivePathDiagnostic(), GenerateExtensivePathDiagnostic(), and GenerateMinimalPathDiagnostic().
|
static |
Definition at line 1620 of file BugReporter.cpp.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and simplifySimpleBranches().
|
static |
Definition at line 1621 of file BugReporter.cpp.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and simplifySimpleBranches().
|
static |
Definition at line 1624 of file BugReporter.cpp.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and simplifySimpleBranches().
|
static |
Definition at line 1622 of file BugReporter.cpp.
Referenced by GenerateAlternateExtensivePathDiagnostic(), and simplifySimpleBranches().