clang
3.7.0
|
This is the simplest builder which generates nodes in the ExplodedGraph. More...
#include <CoreEngine.h>
Public Types | |
typedef ExplodedNodeSet::iterator | iterator |
Public Member Functions | |
NodeBuilder (ExplodedNode *SrcNode, ExplodedNodeSet &DstSet, const NodeBuilderContext &Ctx, bool F=true) | |
NodeBuilder (const ExplodedNodeSet &SrcSet, ExplodedNodeSet &DstSet, const NodeBuilderContext &Ctx, bool F=true) | |
virtual | ~NodeBuilder () |
ExplodedNode * | generateNode (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred) |
Generates a node in the ExplodedGraph. More... | |
ExplodedNode * | generateSink (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred) |
Generates a sink in the ExplodedGraph. More... | |
const ExplodedNodeSet & | getResults () |
iterator | begin () |
Iterators through the results frontier. More... | |
iterator | end () |
const NodeBuilderContext & | getContext () |
bool | hasGeneratedNodes () |
void | takeNodes (const ExplodedNodeSet &S) |
void | takeNodes (ExplodedNode *N) |
void | addNodes (const ExplodedNodeSet &S) |
void | addNodes (ExplodedNode *N) |
Protected Member Functions | |
virtual bool | checkResults () |
Checkes if the results are ready. More... | |
bool | hasNoSinksInFrontier () |
virtual void | finalizeResults () |
Allow subclasses to finalize results before result_begin() is executed. More... | |
ExplodedNode * | generateNodeImpl (const ProgramPoint &PP, ProgramStateRef State, ExplodedNode *Pred, bool MarkAsSink=false) |
Protected Attributes | |
const NodeBuilderContext & | C |
bool | Finalized |
bool | HasGeneratedNodes |
ExplodedNodeSet & | Frontier |
The frontier set - a set of nodes which need to be propagated after the builder dies. More... | |
This is the simplest builder which generates nodes in the ExplodedGraph.
The main benefit of the builder is that it automatically tracks the frontier nodes (or destination set). This is the set of nodes which should be propagated to the next step / builder. They are the nodes which have been added to the builder (either as the input node set or as the newly constructed nodes) but did not have any outgoing transitions added.
Definition at line 207 of file CoreEngine.h.
Definition at line 283 of file CoreEngine.h.
|
inline |
Definition at line 244 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::Add(), and Frontier.
|
inline |
Definition at line 250 of file CoreEngine.h.
References Frontier, hasNoSinksInFrontier(), and clang::ento::ExplodedNodeSet::insert().
|
inlinevirtual |
Definition at line 257 of file CoreEngine.h.
|
inline |
Definition at line 303 of file CoreEngine.h.
References Frontier, and clang::ento::ExplodedNodeSet::insert().
Referenced by clang::ento::ExprEngine::Visit(), clang::ento::ExprEngine::VisitDeclStmt(), clang::ento::ExprEngine::VisitIncrementDecrementOperator(), clang::ento::ExprEngine::VisitMemberExpr(), and clang::ento::ExprEngine::VisitUnaryOperator().
|
inline |
Definition at line 304 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::Add(), and Frontier.
|
inline |
Iterators through the results frontier.
Definition at line 285 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), checkResults(), finalizeResults(), and Frontier.
|
inlineprotectedvirtual |
Checkes if the results are ready.
Definition at line 221 of file CoreEngine.h.
References Finalized.
Referenced by begin(), and getResults().
|
inline |
Definition at line 290 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::end(), finalizeResults(), and Frontier.
|
inlineprotectedvirtual |
Allow subclasses to finalize results before result_begin() is executed.
Definition at line 236 of file CoreEngine.h.
Referenced by begin(), end(), and getResults().
|
inline |
Generates a node in the ExplodedGraph.
Definition at line 260 of file CoreEngine.h.
References generateNodeImpl().
Referenced by clang::ento::NodeBuilderWithSinks::generateNode(), clang::ento::StmtNodeBuilder::generateNode(), clang::ento::ExprEngine::ProcessInitializer(), and clang::ento::ExprEngine::ProcessNewAllocator().
|
protected |
Definition at line 625 of file CoreEngine.cpp.
References clang::ento::ExplodedNode::addPredecessor(), and AttributeLangSupport::C.
Referenced by generateNode(), and generateSink().
|
inline |
Generates a sink in the ExplodedGraph.
When a node is marked as sink, the exploration from the node is stopped - the node becomes the last node on the path and certain kinds of bugs are suppressed.
Definition at line 271 of file CoreEngine.h.
References generateNodeImpl().
Referenced by clang::ento::NodeBuilderWithSinks::generateSink(), and clang::ento::StmtNodeBuilder::generateSink().
|
inline |
Definition at line 295 of file CoreEngine.h.
References C.
Referenced by clang::ento::CheckerContext::blockCount(), clang::ento::CheckerContext::getBlockID(), and clang::ento::ExprEngine::processCFGBlockEntrance().
|
inline |
Definition at line 277 of file CoreEngine.h.
References checkResults(), finalizeResults(), and Frontier.
Referenced by clang::ento::ExprEngine::VisitCXXNewExpr(), and clang::ento::ExprEngine::VisitDeclStmt().
|
inline |
Definition at line 296 of file CoreEngine.h.
References HasGeneratedNodes.
|
inlineprotected |
Definition at line 227 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), clang::ento::ExplodedNodeSet::end(), and Frontier.
Referenced by NodeBuilder().
|
inline |
Definition at line 298 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::begin(), clang::ento::ExplodedNodeSet::end(), clang::ento::ExplodedNodeSet::erase(), and Frontier.
Referenced by clang::ento::BranchNodeBuilder::BranchNodeBuilder(), clang::ento::StmtNodeBuilder::StmtNodeBuilder(), clang::ento::ExprEngine::Visit(), clang::ento::ExprEngine::VisitCXXNewExpr(), clang::ento::ExprEngine::VisitDeclStmt(), clang::ento::ExprEngine::VisitIncrementDecrementOperator(), clang::ento::ExprEngine::VisitMemberExpr(), and clang::ento::ExprEngine::VisitUnaryOperator().
|
inline |
Definition at line 302 of file CoreEngine.h.
References clang::ento::ExplodedNodeSet::erase(), and Frontier.
|
protected |
Definition at line 210 of file CoreEngine.h.
Referenced by getContext().
|
protected |
Specifies if the builder results have been finalized. For example, if it is set to false, autotransitions are yet to be generated.
Definition at line 214 of file CoreEngine.h.
Referenced by checkResults().
|
protected |
The frontier set - a set of nodes which need to be propagated after the builder dies.
Definition at line 218 of file CoreEngine.h.
Referenced by addNodes(), begin(), end(), getResults(), hasNoSinksInFrontier(), NodeBuilder(), and takeNodes().
|
protected |
Definition at line 215 of file CoreEngine.h.
Referenced by hasGeneratedNodes().