//===-- ASTOps.cc -------------------------------*- C++ -*-===// // // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. // See https://llvm.org/LICENSE.txt for license information. // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception // //===----------------------------------------------------------------------===// // // Operations on AST nodes that are used in flow-sensitive analysis. // //===----------------------------------------------------------------------===// #include "clang/Analysis/FlowSensitive/ASTOps.h" #include "clang/AST/ComputeDependence.h" #include "clang/AST/Decl.h" #include "clang/AST/DeclBase.h" #include "clang/AST/DeclCXX.h" #include "clang/AST/Expr.h" #include "clang/AST/ExprCXX.h" #include "clang/AST/Stmt.h" #include "clang/AST/Type.h" #include "clang/Analysis/FlowSensitive/StorageLocation.h" #include "clang/Basic/LLVM.h" #include "llvm/ADT/DenseSet.h" #include "llvm/ADT/STLExtras.h" #include #include #include #define DEBUG_TYPE "dataflow" namespace clang::dataflow { const Expr &ignoreCFGOmittedNodes(const Expr &E) { const Expr *Current = &E; const Expr *Last = nullptr; while (Current != Last) { Last = Current; if (auto *EWC = dyn_cast(Current)) { Current = EWC->getSubExpr(); assert(Current != nullptr); } if (auto *CE = dyn_cast(Current)) { Current = CE->getSubExpr(); assert(Current != nullptr); } Current = Current->IgnoreParens(); assert(Current != nullptr); } return *Current; } const Stmt &ignoreCFGOmittedNodes(const Stmt &S) { if (auto *E = dyn_cast(&S)) return ignoreCFGOmittedNodes(*E); return S; } // FIXME: Does not precisely handle non-virtual diamond inheritance. A single // field decl will be modeled for all instances of the inherited field. static void getFieldsFromClassHierarchy(QualType Type, FieldSet &Fields) { if (Type->isIncompleteType() || Type->isDependentType() || !Type->isRecordType()) return; for (const FieldDecl *Field : Type->getAsRecordDecl()->fields()) Fields.insert(Field); if (auto *CXXRecord = Type->getAsCXXRecordDecl()) for (const CXXBaseSpecifier &Base : CXXRecord->bases()) getFieldsFromClassHierarchy(Base.getType(), Fields); } /// Gets the set of all fields in the type. FieldSet getObjectFields(QualType Type) { FieldSet Fields; getFieldsFromClassHierarchy(Type, Fields); return Fields; } bool containsSameFields(const FieldSet &Fields, const RecordStorageLocation::FieldToLoc &FieldLocs) { if (Fields.size() != FieldLocs.size()) return false; for ([[maybe_unused]] auto [Field, Loc] : FieldLocs) if (!Fields.contains(cast_or_null(Field))) return false; return true; } /// Returns the fields of a `RecordDecl` that are initialized by an /// `InitListExpr` or `CXXParenListInitExpr`, in the order in which they appear /// in `InitListExpr::inits()` / `CXXParenListInitExpr::getInitExprs()`. /// `InitList->getType()` must be a record type. template static std::vector getFieldsForInitListExpr(const InitListT *InitList) { const RecordDecl *RD = InitList->getType()->getAsRecordDecl(); assert(RD != nullptr); std::vector Fields; if (InitList->getType()->isUnionType()) { if (const FieldDecl *Field = InitList->getInitializedFieldInUnion()) Fields.push_back(Field); return Fields; } // Unnamed bitfields are only used for padding and do not appear in // `InitListExpr`'s inits. However, those fields do appear in `RecordDecl`'s // field list, and we thus need to remove them before mapping inits to // fields to avoid mapping inits to the wrongs fields. llvm::copy_if( RD->fields(), std::back_inserter(Fields), [](const FieldDecl *Field) { return !Field->isUnnamedBitField(); }); return Fields; } RecordInitListHelper::RecordInitListHelper(const InitListExpr *InitList) : RecordInitListHelper(InitList->getType(), getFieldsForInitListExpr(InitList), InitList->inits()) {} RecordInitListHelper::RecordInitListHelper( const CXXParenListInitExpr *ParenInitList) : RecordInitListHelper(ParenInitList->getType(), getFieldsForInitListExpr(ParenInitList), ParenInitList->getInitExprs()) {} RecordInitListHelper::RecordInitListHelper( QualType Ty, std::vector Fields, ArrayRef Inits) { auto *RD = Ty->getAsCXXRecordDecl(); assert(RD != nullptr); // Unions initialized with an empty initializer list need special treatment. // For structs/classes initialized with an empty initializer list, Clang // puts `ImplicitValueInitExpr`s in `InitListExpr::inits()`, but for unions, // it doesn't do this -- so we create an `ImplicitValueInitExpr` ourselves. SmallVector InitsForUnion; if (Ty->isUnionType() && Inits.empty()) { assert(Fields.size() <= 1); if (!Fields.empty()) { ImplicitValueInitForUnion.emplace(Fields.front()->getType()); InitsForUnion.push_back(&*ImplicitValueInitForUnion); } Inits = InitsForUnion; } size_t InitIdx = 0; assert(Fields.size() + RD->getNumBases() == Inits.size()); for (const CXXBaseSpecifier &Base : RD->bases()) { assert(InitIdx < Inits.size()); Expr *Init = Inits[InitIdx++]; BaseInits.emplace_back(&Base, Init); } assert(Fields.size() == Inits.size() - InitIdx); for (const FieldDecl *Field : Fields) { assert(InitIdx < Inits.size()); Expr *Init = Inits[InitIdx++]; FieldInits.emplace_back(Field, Init); } } static void insertIfGlobal(const Decl &D, llvm::DenseSet &Globals) { if (auto *V = dyn_cast(&D)) if (V->hasGlobalStorage()) Globals.insert(V); } static void insertIfFunction(const Decl &D, llvm::DenseSet &Funcs) { if (auto *FD = dyn_cast(&D)) Funcs.insert(FD); } static MemberExpr *getMemberForAccessor(const CXXMemberCallExpr &C) { // Use getCalleeDecl instead of getMethodDecl in order to handle // pointer-to-member calls. const auto *MethodDecl = dyn_cast_or_null(C.getCalleeDecl()); if (!MethodDecl) return nullptr; auto *Body = dyn_cast_or_null(MethodDecl->getBody()); if (!Body || Body->size() != 1) return nullptr; if (auto *RS = dyn_cast(*Body->body_begin())) if (auto *Return = RS->getRetValue()) return dyn_cast(Return->IgnoreParenImpCasts()); return nullptr; } class ReferencedDeclsVisitor : public AnalysisASTVisitor { public: ReferencedDeclsVisitor(ReferencedDecls &Referenced) : Referenced(Referenced) {} void TraverseConstructorInits(const CXXConstructorDecl *Ctor) { for (const CXXCtorInitializer *Init : Ctor->inits()) { if (Init->isMemberInitializer()) { Referenced.Fields.insert(Init->getMember()); } else if (Init->isIndirectMemberInitializer()) { for (const auto *I : Init->getIndirectMember()->chain()) Referenced.Fields.insert(cast(I)); } Expr *InitExpr = Init->getInit(); // Also collect declarations referenced in `InitExpr`. TraverseStmt(InitExpr); // If this is a `CXXDefaultInitExpr`, also collect declarations referenced // within the default expression. if (auto *DefaultInit = dyn_cast(InitExpr)) TraverseStmt(DefaultInit->getExpr()); } } bool VisitDecl(Decl *D) { insertIfGlobal(*D, Referenced.Globals); insertIfFunction(*D, Referenced.Functions); return true; } bool VisitDeclRefExpr(DeclRefExpr *E) { insertIfGlobal(*E->getDecl(), Referenced.Globals); insertIfFunction(*E->getDecl(), Referenced.Functions); return true; } bool VisitCXXMemberCallExpr(CXXMemberCallExpr *C) { // If this is a method that returns a member variable but does nothing else, // model the field of the return value. if (MemberExpr *E = getMemberForAccessor(*C)) if (const auto *FD = dyn_cast(E->getMemberDecl())) Referenced.Fields.insert(FD); return true; } bool VisitMemberExpr(MemberExpr *E) { // FIXME: should we be using `E->getFoundDecl()`? const ValueDecl *VD = E->getMemberDecl(); insertIfGlobal(*VD, Referenced.Globals); insertIfFunction(*VD, Referenced.Functions); if (const auto *FD = dyn_cast(VD)) Referenced.Fields.insert(FD); return true; } bool VisitInitListExpr(InitListExpr *InitList) { if (InitList->getType()->isRecordType()) for (const auto *FD : getFieldsForInitListExpr(InitList)) Referenced.Fields.insert(FD); return true; } bool VisitCXXParenListInitExpr(CXXParenListInitExpr *ParenInitList) { if (ParenInitList->getType()->isRecordType()) for (const auto *FD : getFieldsForInitListExpr(ParenInitList)) Referenced.Fields.insert(FD); return true; } private: ReferencedDecls &Referenced; }; ReferencedDecls getReferencedDecls(const FunctionDecl &FD) { ReferencedDecls Result; ReferencedDeclsVisitor Visitor(Result); Visitor.TraverseStmt(FD.getBody()); if (const auto *CtorDecl = dyn_cast(&FD)) Visitor.TraverseConstructorInits(CtorDecl); return Result; } ReferencedDecls getReferencedDecls(const Stmt &S) { ReferencedDecls Result; ReferencedDeclsVisitor Visitor(Result); Visitor.TraverseStmt(const_cast(&S)); return Result; } } // namespace clang::dataflow