ArrayBoundChecker.cpp File Reference (original) (raw)

Go to the source code of this file.

Functions
static std::optional< std::pair< const SubRegion *, NonLoc > >	computeOffset (ProgramStateRef State, SValBuilder &SVB, SVal Location)
	For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).
static std::pair< NonLoc, nonloc::ConcreteInt >	getSimplifiedOffsets (NonLoc offset, nonloc::ConcreteInt extent, SValBuilder &svalBuilder)
static bool	isNegative (SValBuilder &SVB, ProgramStateRef State, NonLoc Value)
static bool	isUnsigned (SValBuilder &SVB, NonLoc Value)
static std::pair< ProgramStateRef, ProgramStateRef >	compareValueToThreshold (ProgramStateRef State, NonLoc Value, NonLoc Threshold, SValBuilder &SVB, bool CheckEquality=false)
static std::string	getRegionName (const MemSpaceRegion Space, const SubRegion Region)
static std::optional< int64_t >	getConcreteValue (NonLoc SV)
static std::optional< int64_t >	getConcreteValue (std::optional< NonLoc > SV)
static bool	tryDividePair (std::optional< int64_t > &Val1, std::optional< int64_t > &Val2, int64_t Divisor)
	Try to divide Val1 and Val2 (in place) by Divisor and return true if it can be performed (Divisor is nonzero and there is no remainder).
static Messages	getNonTaintMsgs (const ASTContext &ACtx, const MemSpaceRegion Space, const SubRegion Region, NonLoc Offset, std::optional< NonLoc > Extent, SVal Location, BadOffsetKind Problem)
static Messages	getTaintMsgs (const MemSpaceRegion Space, const SubRegion Region, const char *OffsetName, bool AlsoMentionUnderflow)

◆ compareValueToThreshold()

◆ computeOffset()

For a given Location that can be represented as a symbolic expression Arr[Idx] (or perhaps Arr[Idx1][Idx2] etc.), return the parent memory block Arr and the distance of Location from the beginning of Arr (expressed in a NonLoc that specifies the number of CharUnits).

Returns nullopt when these cannot be determined.

Definition at line 201 of file ArrayBoundChecker.cpp.

References clang::ento::SValBuilder::evalBinOpNN(), clang::ento::SValBuilder::getArrayIndexType(), clang::ento::MemRegion::getAs(), clang::ento::SVal::getAs(), clang::ento::SValBuilder::getContext(), clang::ento::ElementRegion::getElementType(), clang::ento::ElementRegion::getIndex(), clang::CharUnits::getQuantity(), clang::ento::SubRegion::getSuperRegion(), clang::ASTContext::getTypeSizeInChars(), clang::Type::isIncompleteType(), clang::ento::SValBuilder::makeArrayIndex(), clang::ento::SValBuilder::makeZeroArrayIndex(), and clang::T.

◆ getConcreteValue() [1/2]

std::optional< int64_t > getConcreteValue ( NonLoc SV)	static

◆ getConcreteValue() [2/2]

std::optional< int64_t > getConcreteValue ( std::optional< NonLoc > SV)	static

◆ getNonTaintMsgs()

◆ getRegionName()

◆ getSimplifiedOffsets()

◆ getTaintMsgs()

Messages getTaintMsgs ( const MemSpaceRegion * Space, const SubRegion * Region, const char * OffsetName, bool AlsoMentionUnderflow )	static

◆ isNegative()

◆ isUnsigned()

Definition at line 307 of file ArrayBoundChecker.cpp.

References clang::ento::SValBuilder::getContext(), clang::Value::getType(), and clang::T.

Referenced by CheckC23ConstexprInitStringLiteral(), compareValueToThreshold(), clang::CIRGen::CIRGenBuilderTy::getConstInt(), clang::ento::BasicValueFactory::getIntValue(), cir::direct::getLLVMIntCast(), clang::ento::BasicValueFactory::getValue(), clang::DependentBitIntType::isSigned(), clang::ento::SValBuilder::makeIntVal(), clang::ento::SValBuilder::makeIntVal(), clang::ASTContext::mergeTypes(), clang::BitIntType::Profile(), clang::DependentBitIntType::Profile(), and clang::serialization::DataStreamBasicReader< Impl >::readAPSInt().

◆ tryDividePair()

bool tryDividePair ( std::optional< int64_t > & Val1, std::optional< int64_t > & Val2, int64_t Divisor )	static

Try to divide Val1 and Val2 (in place) by Divisor and return true if it can be performed (Divisor is nonzero and there is no remainder).

The values Val1 and Val2 may be nullopt and in that case the corresponding division is considered to be successful.

Definition at line 409 of file ArrayBoundChecker.cpp.

Referenced by getNonTaintMsgs().