1 //===--- SemaCast.cpp - Semantic Analysis for Casts -----------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements semantic analysis for cast expressions, including
11 //  1) C-style casts like '(int) x'
12 //  2) C++ functional casts like 'int(x)'
13 //  3) C++ named casts like 'static_cast<int>(x)'
14 //
15 //===----------------------------------------------------------------------===//
16 
17 #include "clang/Sema/SemaInternal.h"
18 #include "clang/AST/ASTContext.h"
19 #include "clang/AST/CXXInheritance.h"
20 #include "clang/AST/ExprCXX.h"
21 #include "clang/AST/ExprObjC.h"
22 #include "clang/AST/RecordLayout.h"
23 #include "clang/Basic/PartialDiagnostic.h"
24 #include "clang/Basic/TargetInfo.h"
25 #include "clang/Lex/Preprocessor.h"
26 #include "clang/Sema/Initialization.h"
27 #include "llvm/ADT/SmallVector.h"
28 #include <set>
29 using namespace clang;
30 
31 
32 
33 enum TryCastResult {
34   TC_NotApplicable, ///< The cast method is not applicable.
35   TC_Success,       ///< The cast method is appropriate and successful.
36   TC_Extension,     ///< The cast method is appropriate and accepted as a
37                     ///< language extension.
38   TC_Failed         ///< The cast method is appropriate, but failed. A
39                     ///< diagnostic has been emitted.
40 };
41 
42 static bool isValidCast(TryCastResult TCR) {
43   return TCR == TC_Success || TCR == TC_Extension;
44 }
45 
46 enum CastType {
47   CT_Const,       ///< const_cast
48   CT_Static,      ///< static_cast
49   CT_Reinterpret, ///< reinterpret_cast
50   CT_Dynamic,     ///< dynamic_cast
51   CT_CStyle,      ///< (Type)expr
52   CT_Functional   ///< Type(expr)
53 };
54 
55 namespace {
56   struct CastOperation {
57     CastOperation(Sema &S, QualType destType, ExprResult src)
58       : Self(S), SrcExpr(src), DestType(destType),
59         ResultType(destType.getNonLValueExprType(S.Context)),
60         ValueKind(Expr::getValueKindForType(destType)),
61         Kind(CK_Dependent), IsARCUnbridgedCast(false) {
62 
63       if (const BuiltinType *placeholder =
64             src.get()->getType()->getAsPlaceholderType()) {
65         PlaceholderKind = placeholder->getKind();
66       } else {
67         PlaceholderKind = (BuiltinType::Kind) 0;
68       }
69     }
70 
71     Sema &Self;
72     ExprResult SrcExpr;
73     QualType DestType;
74     QualType ResultType;
75     ExprValueKind ValueKind;
76     CastKind Kind;
77     BuiltinType::Kind PlaceholderKind;
78     CXXCastPath BasePath;
79     bool IsARCUnbridgedCast;
80 
81     SourceRange OpRange;
82     SourceRange DestRange;
83 
84     // Top-level semantics-checking routines.
85     void CheckConstCast();
86     void CheckReinterpretCast();
87     void CheckStaticCast();
88     void CheckDynamicCast();
89     void CheckCXXCStyleCast(bool FunctionalCast, bool ListInitialization);
90     void CheckCStyleCast();
91 
92     /// Complete an apparently-successful cast operation that yields
93     /// the given expression.
94     ExprResult complete(CastExpr *castExpr) {
95       // If this is an unbridged cast, wrap the result in an implicit
96       // cast that yields the unbridged-cast placeholder type.
97       if (IsARCUnbridgedCast) {
98         castExpr = ImplicitCastExpr::Create(Self.Context,
99                                             Self.Context.ARCUnbridgedCastTy,
100                                             CK_Dependent, castExpr, nullptr,
101                                             castExpr->getValueKind());
102       }
103       return castExpr;
104     }
105 
106     // Internal convenience methods.
107 
108     /// Try to handle the given placeholder expression kind.  Return
109     /// true if the source expression has the appropriate placeholder
110     /// kind.  A placeholder can only be claimed once.
111     bool claimPlaceholder(BuiltinType::Kind K) {
112       if (PlaceholderKind != K) return false;
113 
114       PlaceholderKind = (BuiltinType::Kind) 0;
115       return true;
116     }
117 
118     bool isPlaceholder() const {
119       return PlaceholderKind != 0;
120     }
121     bool isPlaceholder(BuiltinType::Kind K) const {
122       return PlaceholderKind == K;
123     }
124 
125     void checkCastAlign() {
126       Self.CheckCastAlign(SrcExpr.get(), DestType, OpRange);
127     }
128 
129     void checkObjCConversion(Sema::CheckedConversionKind CCK) {
130       assert(Self.getLangOpts().allowsNonTrivialObjCLifetimeQualifiers());
131 
132       Expr *src = SrcExpr.get();
133       if (Self.CheckObjCConversion(OpRange, DestType, src, CCK) ==
134           Sema::ACR_unbridged)
135         IsARCUnbridgedCast = true;
136       SrcExpr = src;
137     }
138 
139     /// Check for and handle non-overload placeholder expressions.
140     void checkNonOverloadPlaceholders() {
141       if (!isPlaceholder() || isPlaceholder(BuiltinType::Overload))
142         return;
143 
144       SrcExpr = Self.CheckPlaceholderExpr(SrcExpr.get());
145       if (SrcExpr.isInvalid())
146         return;
147       PlaceholderKind = (BuiltinType::Kind) 0;
148     }
149   };
150 }
151 
152 static void DiagnoseCastQual(Sema &Self, const ExprResult &SrcExpr,
153                              QualType DestType);
154 
155 // The Try functions attempt a specific way of casting. If they succeed, they
156 // return TC_Success. If their way of casting is not appropriate for the given
157 // arguments, they return TC_NotApplicable and *may* set diag to a diagnostic
158 // to emit if no other way succeeds. If their way of casting is appropriate but
159 // fails, they return TC_Failed and *must* set diag; they can set it to 0 if
160 // they emit a specialized diagnostic.
161 // All diagnostics returned by these functions must expect the same three
162 // arguments:
163 // %0: Cast Type (a value from the CastType enumeration)
164 // %1: Source Type
165 // %2: Destination Type
166 static TryCastResult TryLValueToRValueCast(Sema &Self, Expr *SrcExpr,
167                                            QualType DestType, bool CStyle,
168                                            CastKind &Kind,
169                                            CXXCastPath &BasePath,
170                                            unsigned &msg);
171 static TryCastResult TryStaticReferenceDowncast(Sema &Self, Expr *SrcExpr,
172                                                QualType DestType, bool CStyle,
173                                                SourceRange OpRange,
174                                                unsigned &msg,
175                                                CastKind &Kind,
176                                                CXXCastPath &BasePath);
177 static TryCastResult TryStaticPointerDowncast(Sema &Self, QualType SrcType,
178                                               QualType DestType, bool CStyle,
179                                               SourceRange OpRange,
180                                               unsigned &msg,
181                                               CastKind &Kind,
182                                               CXXCastPath &BasePath);
183 static TryCastResult TryStaticDowncast(Sema &Self, CanQualType SrcType,
184                                        CanQualType DestType, bool CStyle,
185                                        SourceRange OpRange,
186                                        QualType OrigSrcType,
187                                        QualType OrigDestType, unsigned &msg,
188                                        CastKind &Kind,
189                                        CXXCastPath &BasePath);
190 static TryCastResult TryStaticMemberPointerUpcast(Sema &Self, ExprResult &SrcExpr,
191                                                QualType SrcType,
192                                                QualType DestType,bool CStyle,
193                                                SourceRange OpRange,
194                                                unsigned &msg,
195                                                CastKind &Kind,
196                                                CXXCastPath &BasePath);
197 
198 static TryCastResult TryStaticImplicitCast(Sema &Self, ExprResult &SrcExpr,
199                                            QualType DestType,
200                                            Sema::CheckedConversionKind CCK,
201                                            SourceRange OpRange,
202                                            unsigned &msg, CastKind &Kind,
203                                            bool ListInitialization);
204 static TryCastResult TryStaticCast(Sema &Self, ExprResult &SrcExpr,
205                                    QualType DestType,
206                                    Sema::CheckedConversionKind CCK,
207                                    SourceRange OpRange,
208                                    unsigned &msg, CastKind &Kind,
209                                    CXXCastPath &BasePath,
210                                    bool ListInitialization);
211 static TryCastResult TryConstCast(Sema &Self, ExprResult &SrcExpr,
212                                   QualType DestType, bool CStyle,
213                                   unsigned &msg);
214 static TryCastResult TryReinterpretCast(Sema &Self, ExprResult &SrcExpr,
215                                         QualType DestType, bool CStyle,
216                                         SourceRange OpRange,
217                                         unsigned &msg,
218                                         CastKind &Kind);
219 
220 
221 /// ActOnCXXNamedCast - Parse {dynamic,static,reinterpret,const}_cast's.
222 ExprResult
223 Sema::ActOnCXXNamedCast(SourceLocation OpLoc, tok::TokenKind Kind,
224                         SourceLocation LAngleBracketLoc, Declarator &D,
225                         SourceLocation RAngleBracketLoc,
226                         SourceLocation LParenLoc, Expr *E,
227                         SourceLocation RParenLoc) {
228 
229   assert(!D.isInvalidType());
230 
231   TypeSourceInfo *TInfo = GetTypeForDeclaratorCast(D, E->getType());
232   if (D.isInvalidType())
233     return ExprError();
234 
235   if (getLangOpts().CPlusPlus) {
236     // Check that there are no default arguments (C++ only).
237     CheckExtraCXXDefaultArguments(D);
238   }
239 
240   return BuildCXXNamedCast(OpLoc, Kind, TInfo, E,
241                            SourceRange(LAngleBracketLoc, RAngleBracketLoc),
242                            SourceRange(LParenLoc, RParenLoc));
243 }
244 
245 ExprResult
246 Sema::BuildCXXNamedCast(SourceLocation OpLoc, tok::TokenKind Kind,
247                         TypeSourceInfo *DestTInfo, Expr *E,
248                         SourceRange AngleBrackets, SourceRange Parens) {
249   ExprResult Ex = E;
250   QualType DestType = DestTInfo->getType();
251 
252   // If the type is dependent, we won't do the semantic analysis now.
253   bool TypeDependent =
254       DestType->isDependentType() || Ex.get()->isTypeDependent();
255 
256   CastOperation Op(*this, DestType, E);
257   Op.OpRange = SourceRange(OpLoc, Parens.getEnd());
258   Op.DestRange = AngleBrackets;
259 
260   switch (Kind) {
261   default: llvm_unreachable("Unknown C++ cast!");
262 
263   case tok::kw_const_cast:
264     if (!TypeDependent) {
265       Op.CheckConstCast();
266       if (Op.SrcExpr.isInvalid())
267         return ExprError();
268       DiscardMisalignedMemberAddress(DestType.getTypePtr(), E);
269     }
270     return Op.complete(CXXConstCastExpr::Create(Context, Op.ResultType,
271                                   Op.ValueKind, Op.SrcExpr.get(), DestTInfo,
272                                                 OpLoc, Parens.getEnd(),
273                                                 AngleBrackets));
274 
275   case tok::kw_dynamic_cast: {
276     // OpenCL C++ 1.0 s2.9: dynamic_cast is not supported.
277     if (getLangOpts().OpenCLCPlusPlus) {
278       return ExprError(Diag(OpLoc, diag::err_openclcxx_not_supported)
279                        << "dynamic_cast");
280     }
281 
282     if (!TypeDependent) {
283       Op.CheckDynamicCast();
284       if (Op.SrcExpr.isInvalid())
285         return ExprError();
286     }
287     return Op.complete(CXXDynamicCastExpr::Create(Context, Op.ResultType,
288                                     Op.ValueKind, Op.Kind, Op.SrcExpr.get(),
289                                                   &Op.BasePath, DestTInfo,
290                                                   OpLoc, Parens.getEnd(),
291                                                   AngleBrackets));
292   }
293   case tok::kw_reinterpret_cast: {
294     if (!TypeDependent) {
295       Op.CheckReinterpretCast();
296       if (Op.SrcExpr.isInvalid())
297         return ExprError();
298       DiscardMisalignedMemberAddress(DestType.getTypePtr(), E);
299     }
300     return Op.complete(CXXReinterpretCastExpr::Create(Context, Op.ResultType,
301                                     Op.ValueKind, Op.Kind, Op.SrcExpr.get(),
302                                                       nullptr, DestTInfo, OpLoc,
303                                                       Parens.getEnd(),
304                                                       AngleBrackets));
305   }
306   case tok::kw_static_cast: {
307     if (!TypeDependent) {
308       Op.CheckStaticCast();
309       if (Op.SrcExpr.isInvalid())
310         return ExprError();
311       DiscardMisalignedMemberAddress(DestType.getTypePtr(), E);
312     }
313 
314     return Op.complete(CXXStaticCastExpr::Create(Context, Op.ResultType,
315                                    Op.ValueKind, Op.Kind, Op.SrcExpr.get(),
316                                                  &Op.BasePath, DestTInfo,
317                                                  OpLoc, Parens.getEnd(),
318                                                  AngleBrackets));
319   }
320   }
321 }
322 
323 /// Try to diagnose a failed overloaded cast.  Returns true if
324 /// diagnostics were emitted.
325 static bool tryDiagnoseOverloadedCast(Sema &S, CastType CT,
326                                       SourceRange range, Expr *src,
327                                       QualType destType,
328                                       bool listInitialization) {
329   switch (CT) {
330   // These cast kinds don't consider user-defined conversions.
331   case CT_Const:
332   case CT_Reinterpret:
333   case CT_Dynamic:
334     return false;
335 
336   // These do.
337   case CT_Static:
338   case CT_CStyle:
339   case CT_Functional:
340     break;
341   }
342 
343   QualType srcType = src->getType();
344   if (!destType->isRecordType() && !srcType->isRecordType())
345     return false;
346 
347   InitializedEntity entity = InitializedEntity::InitializeTemporary(destType);
348   InitializationKind initKind
349     = (CT == CT_CStyle)? InitializationKind::CreateCStyleCast(range.getBegin(),
350                                                       range, listInitialization)
351     : (CT == CT_Functional)? InitializationKind::CreateFunctionalCast(range,
352                                                              listInitialization)
353     : InitializationKind::CreateCast(/*type range?*/ range);
354   InitializationSequence sequence(S, entity, initKind, src);
355 
356   assert(sequence.Failed() && "initialization succeeded on second try?");
357   switch (sequence.getFailureKind()) {
358   default: return false;
359 
360   case InitializationSequence::FK_ConstructorOverloadFailed:
361   case InitializationSequence::FK_UserConversionOverloadFailed:
362     break;
363   }
364 
365   OverloadCandidateSet &candidates = sequence.getFailedCandidateSet();
366 
367   unsigned msg = 0;
368   OverloadCandidateDisplayKind howManyCandidates = OCD_AllCandidates;
369 
370   switch (sequence.getFailedOverloadResult()) {
371   case OR_Success: llvm_unreachable("successful failed overload");
372   case OR_No_Viable_Function:
373     if (candidates.empty())
374       msg = diag::err_ovl_no_conversion_in_cast;
375     else
376       msg = diag::err_ovl_no_viable_conversion_in_cast;
377     howManyCandidates = OCD_AllCandidates;
378     break;
379 
380   case OR_Ambiguous:
381     msg = diag::err_ovl_ambiguous_conversion_in_cast;
382     howManyCandidates = OCD_ViableCandidates;
383     break;
384 
385   case OR_Deleted:
386     msg = diag::err_ovl_deleted_conversion_in_cast;
387     howManyCandidates = OCD_ViableCandidates;
388     break;
389   }
390 
391   S.Diag(range.getBegin(), msg)
392     << CT << srcType << destType
393     << range << src->getSourceRange();
394 
395   candidates.NoteCandidates(S, howManyCandidates, src);
396 
397   return true;
398 }
399 
400 /// Diagnose a failed cast.
401 static void diagnoseBadCast(Sema &S, unsigned msg, CastType castType,
402                             SourceRange opRange, Expr *src, QualType destType,
403                             bool listInitialization) {
404   if (msg == diag::err_bad_cxx_cast_generic &&
405       tryDiagnoseOverloadedCast(S, castType, opRange, src, destType,
406                                 listInitialization))
407     return;
408 
409   S.Diag(opRange.getBegin(), msg) << castType
410     << src->getType() << destType << opRange << src->getSourceRange();
411 
412   // Detect if both types are (ptr to) class, and note any incompleteness.
413   int DifferentPtrness = 0;
414   QualType From = destType;
415   if (auto Ptr = From->getAs<PointerType>()) {
416     From = Ptr->getPointeeType();
417     DifferentPtrness++;
418   }
419   QualType To = src->getType();
420   if (auto Ptr = To->getAs<PointerType>()) {
421     To = Ptr->getPointeeType();
422     DifferentPtrness--;
423   }
424   if (!DifferentPtrness) {
425     auto RecFrom = From->getAs<RecordType>();
426     auto RecTo = To->getAs<RecordType>();
427     if (RecFrom && RecTo) {
428       auto DeclFrom = RecFrom->getAsCXXRecordDecl();
429       if (!DeclFrom->isCompleteDefinition())
430         S.Diag(DeclFrom->getLocation(), diag::note_type_incomplete)
431           << DeclFrom->getDeclName();
432       auto DeclTo = RecTo->getAsCXXRecordDecl();
433       if (!DeclTo->isCompleteDefinition())
434         S.Diag(DeclTo->getLocation(), diag::note_type_incomplete)
435           << DeclTo->getDeclName();
436     }
437   }
438 }
439 
440 namespace {
441 /// The kind of unwrapping we did when determining whether a conversion casts
442 /// away constness.
443 enum CastAwayConstnessKind {
444   /// The conversion does not cast away constness.
445   CACK_None = 0,
446   /// We unwrapped similar types.
447   CACK_Similar = 1,
448   /// We unwrapped dissimilar types with similar representations (eg, a pointer
449   /// versus an Objective-C object pointer).
450   CACK_SimilarKind = 2,
451   /// We unwrapped representationally-unrelated types, such as a pointer versus
452   /// a pointer-to-member.
453   CACK_Incoherent = 3,
454 };
455 }
456 
457 /// Unwrap one level of types for CastsAwayConstness.
458 ///
459 /// Like Sema::UnwrapSimilarTypes, this removes one level of indirection from
460 /// both types, provided that they're both pointer-like or array-like. Unlike
461 /// the Sema function, doesn't care if the unwrapped pieces are related.
462 ///
463 /// This function may remove additional levels as necessary for correctness:
464 /// the resulting T1 is unwrapped sufficiently that it is never an array type,
465 /// so that its qualifiers can be directly compared to those of T2 (which will
466 /// have the combined set of qualifiers from all indermediate levels of T2),
467 /// as (effectively) required by [expr.const.cast]p7 replacing T1's qualifiers
468 /// with those from T2.
469 static CastAwayConstnessKind
470 unwrapCastAwayConstnessLevel(ASTContext &Context, QualType &T1, QualType &T2) {
471   enum { None, Ptr, MemPtr, BlockPtr, Array };
472   auto Classify = [](QualType T) {
473     if (T->isAnyPointerType()) return Ptr;
474     if (T->isMemberPointerType()) return MemPtr;
475     if (T->isBlockPointerType()) return BlockPtr;
476     // We somewhat-arbitrarily don't look through VLA types here. This is at
477     // least consistent with the behavior of UnwrapSimilarTypes.
478     if (T->isConstantArrayType() || T->isIncompleteArrayType()) return Array;
479     return None;
480   };
481 
482   auto Unwrap = [&](QualType T) {
483     if (auto *AT = Context.getAsArrayType(T))
484       return AT->getElementType();
485     return T->getPointeeType();
486   };
487 
488   CastAwayConstnessKind Kind;
489 
490   if (T2->isReferenceType()) {
491     // Special case: if the destination type is a reference type, unwrap it as
492     // the first level. (The source will have been an lvalue expression in this
493     // case, so there is no corresponding "reference to" in T1 to remove.) This
494     // simulates removing a "pointer to" from both sides.
495     T2 = T2->getPointeeType();
496     Kind = CastAwayConstnessKind::CACK_Similar;
497   } else if (Context.UnwrapSimilarTypes(T1, T2)) {
498     Kind = CastAwayConstnessKind::CACK_Similar;
499   } else {
500     // Try unwrapping mismatching levels.
501     int T1Class = Classify(T1);
502     if (T1Class == None)
503       return CastAwayConstnessKind::CACK_None;
504 
505     int T2Class = Classify(T2);
506     if (T2Class == None)
507       return CastAwayConstnessKind::CACK_None;
508 
509     T1 = Unwrap(T1);
510     T2 = Unwrap(T2);
511     Kind = T1Class == T2Class ? CastAwayConstnessKind::CACK_SimilarKind
512                               : CastAwayConstnessKind::CACK_Incoherent;
513   }
514 
515   // We've unwrapped at least one level. If the resulting T1 is a (possibly
516   // multidimensional) array type, any qualifier on any matching layer of
517   // T2 is considered to correspond to T1. Decompose down to the element
518   // type of T1 so that we can compare properly.
519   while (true) {
520     Context.UnwrapSimilarArrayTypes(T1, T2);
521 
522     if (Classify(T1) != Array)
523       break;
524 
525     auto T2Class = Classify(T2);
526     if (T2Class == None)
527       break;
528 
529     if (T2Class != Array)
530       Kind = CastAwayConstnessKind::CACK_Incoherent;
531     else if (Kind != CastAwayConstnessKind::CACK_Incoherent)
532       Kind = CastAwayConstnessKind::CACK_SimilarKind;
533 
534     T1 = Unwrap(T1);
535     T2 = Unwrap(T2).withCVRQualifiers(T2.getCVRQualifiers());
536   }
537 
538   return Kind;
539 }
540 
541 /// Check if the pointer conversion from SrcType to DestType casts away
542 /// constness as defined in C++ [expr.const.cast]. This is used by the cast
543 /// checkers. Both arguments must denote pointer (possibly to member) types.
544 ///
545 /// \param CheckCVR Whether to check for const/volatile/restrict qualifiers.
546 /// \param CheckObjCLifetime Whether to check Objective-C lifetime qualifiers.
547 static CastAwayConstnessKind
548 CastsAwayConstness(Sema &Self, QualType SrcType, QualType DestType,
549                    bool CheckCVR, bool CheckObjCLifetime,
550                    QualType *TheOffendingSrcType = nullptr,
551                    QualType *TheOffendingDestType = nullptr,
552                    Qualifiers *CastAwayQualifiers = nullptr) {
553   // If the only checking we care about is for Objective-C lifetime qualifiers,
554   // and we're not in ObjC mode, there's nothing to check.
555   if (!CheckCVR && CheckObjCLifetime && !Self.Context.getLangOpts().ObjC1)
556     return CastAwayConstnessKind::CACK_None;
557 
558   if (!DestType->isReferenceType()) {
559     assert((SrcType->isAnyPointerType() || SrcType->isMemberPointerType() ||
560             SrcType->isBlockPointerType()) &&
561            "Source type is not pointer or pointer to member.");
562     assert((DestType->isAnyPointerType() || DestType->isMemberPointerType() ||
563             DestType->isBlockPointerType()) &&
564            "Destination type is not pointer or pointer to member.");
565   }
566 
567   QualType UnwrappedSrcType = Self.Context.getCanonicalType(SrcType),
568            UnwrappedDestType = Self.Context.getCanonicalType(DestType);
569 
570   // Find the qualifiers. We only care about cvr-qualifiers for the
571   // purpose of this check, because other qualifiers (address spaces,
572   // Objective-C GC, etc.) are part of the type's identity.
573   QualType PrevUnwrappedSrcType = UnwrappedSrcType;
574   QualType PrevUnwrappedDestType = UnwrappedDestType;
575   auto WorstKind = CastAwayConstnessKind::CACK_Similar;
576   bool AllConstSoFar = true;
577   while (auto Kind = unwrapCastAwayConstnessLevel(
578              Self.Context, UnwrappedSrcType, UnwrappedDestType)) {
579     // Track the worst kind of unwrap we needed to do before we found a
580     // problem.
581     if (Kind > WorstKind)
582       WorstKind = Kind;
583 
584     // Determine the relevant qualifiers at this level.
585     Qualifiers SrcQuals, DestQuals;
586     Self.Context.getUnqualifiedArrayType(UnwrappedSrcType, SrcQuals);
587     Self.Context.getUnqualifiedArrayType(UnwrappedDestType, DestQuals);
588 
589     // We do not meaningfully track object const-ness of Objective-C object
590     // types. Remove const from the source type if either the source or
591     // the destination is an Objective-C object type.
592     if (UnwrappedSrcType->isObjCObjectType() ||
593         UnwrappedDestType->isObjCObjectType())
594       SrcQuals.removeConst();
595 
596     if (CheckCVR) {
597       Qualifiers SrcCvrQuals =
598           Qualifiers::fromCVRMask(SrcQuals.getCVRQualifiers());
599       Qualifiers DestCvrQuals =
600           Qualifiers::fromCVRMask(DestQuals.getCVRQualifiers());
601 
602       if (SrcCvrQuals != DestCvrQuals) {
603         if (CastAwayQualifiers)
604           *CastAwayQualifiers = SrcCvrQuals - DestCvrQuals;
605 
606         // If we removed a cvr-qualifier, this is casting away 'constness'.
607         if (!DestCvrQuals.compatiblyIncludes(SrcCvrQuals)) {
608           if (TheOffendingSrcType)
609             *TheOffendingSrcType = PrevUnwrappedSrcType;
610           if (TheOffendingDestType)
611             *TheOffendingDestType = PrevUnwrappedDestType;
612           return WorstKind;
613         }
614 
615         // If any prior level was not 'const', this is also casting away
616         // 'constness'. We noted the outermost type missing a 'const' already.
617         if (!AllConstSoFar)
618           return WorstKind;
619       }
620     }
621 
622     if (CheckObjCLifetime &&
623         !DestQuals.compatiblyIncludesObjCLifetime(SrcQuals))
624       return WorstKind;
625 
626     // If we found our first non-const-qualified type, this may be the place
627     // where things start to go wrong.
628     if (AllConstSoFar && !DestQuals.hasConst()) {
629       AllConstSoFar = false;
630       if (TheOffendingSrcType)
631         *TheOffendingSrcType = PrevUnwrappedSrcType;
632       if (TheOffendingDestType)
633         *TheOffendingDestType = PrevUnwrappedDestType;
634     }
635 
636     PrevUnwrappedSrcType = UnwrappedSrcType;
637     PrevUnwrappedDestType = UnwrappedDestType;
638   }
639 
640   return CastAwayConstnessKind::CACK_None;
641 }
642 
643 static TryCastResult getCastAwayConstnessCastKind(CastAwayConstnessKind CACK,
644                                                   unsigned &DiagID) {
645   switch (CACK) {
646   case CastAwayConstnessKind::CACK_None:
647     llvm_unreachable("did not cast away constness");
648 
649   case CastAwayConstnessKind::CACK_Similar:
650     // FIXME: Accept these as an extension too?
651   case CastAwayConstnessKind::CACK_SimilarKind:
652     DiagID = diag::err_bad_cxx_cast_qualifiers_away;
653     return TC_Failed;
654 
655   case CastAwayConstnessKind::CACK_Incoherent:
656     DiagID = diag::ext_bad_cxx_cast_qualifiers_away_incoherent;
657     return TC_Extension;
658   }
659 
660   llvm_unreachable("unexpected cast away constness kind");
661 }
662 
663 /// CheckDynamicCast - Check that a dynamic_cast\<DestType\>(SrcExpr) is valid.
664 /// Refer to C++ 5.2.7 for details. Dynamic casts are used mostly for runtime-
665 /// checked downcasts in class hierarchies.
666 void CastOperation::CheckDynamicCast() {
667   if (ValueKind == VK_RValue)
668     SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
669   else if (isPlaceholder())
670     SrcExpr = Self.CheckPlaceholderExpr(SrcExpr.get());
671   if (SrcExpr.isInvalid()) // if conversion failed, don't report another error
672     return;
673 
674   QualType OrigSrcType = SrcExpr.get()->getType();
675   QualType DestType = Self.Context.getCanonicalType(this->DestType);
676 
677   // C++ 5.2.7p1: T shall be a pointer or reference to a complete class type,
678   //   or "pointer to cv void".
679 
680   QualType DestPointee;
681   const PointerType *DestPointer = DestType->getAs<PointerType>();
682   const ReferenceType *DestReference = nullptr;
683   if (DestPointer) {
684     DestPointee = DestPointer->getPointeeType();
685   } else if ((DestReference = DestType->getAs<ReferenceType>())) {
686     DestPointee = DestReference->getPointeeType();
687   } else {
688     Self.Diag(OpRange.getBegin(), diag::err_bad_dynamic_cast_not_ref_or_ptr)
689       << this->DestType << DestRange;
690     SrcExpr = ExprError();
691     return;
692   }
693 
694   const RecordType *DestRecord = DestPointee->getAs<RecordType>();
695   if (DestPointee->isVoidType()) {
696     assert(DestPointer && "Reference to void is not possible");
697   } else if (DestRecord) {
698     if (Self.RequireCompleteType(OpRange.getBegin(), DestPointee,
699                                  diag::err_bad_dynamic_cast_incomplete,
700                                  DestRange)) {
701       SrcExpr = ExprError();
702       return;
703     }
704   } else {
705     Self.Diag(OpRange.getBegin(), diag::err_bad_dynamic_cast_not_class)
706       << DestPointee.getUnqualifiedType() << DestRange;
707     SrcExpr = ExprError();
708     return;
709   }
710 
711   // C++0x 5.2.7p2: If T is a pointer type, v shall be an rvalue of a pointer to
712   //   complete class type, [...]. If T is an lvalue reference type, v shall be
713   //   an lvalue of a complete class type, [...]. If T is an rvalue reference
714   //   type, v shall be an expression having a complete class type, [...]
715   QualType SrcType = Self.Context.getCanonicalType(OrigSrcType);
716   QualType SrcPointee;
717   if (DestPointer) {
718     if (const PointerType *SrcPointer = SrcType->getAs<PointerType>()) {
719       SrcPointee = SrcPointer->getPointeeType();
720     } else {
721       Self.Diag(OpRange.getBegin(), diag::err_bad_dynamic_cast_not_ptr)
722         << OrigSrcType << SrcExpr.get()->getSourceRange();
723       SrcExpr = ExprError();
724       return;
725     }
726   } else if (DestReference->isLValueReferenceType()) {
727     if (!SrcExpr.get()->isLValue()) {
728       Self.Diag(OpRange.getBegin(), diag::err_bad_cxx_cast_rvalue)
729         << CT_Dynamic << OrigSrcType << this->DestType << OpRange;
730     }
731     SrcPointee = SrcType;
732   } else {
733     // If we're dynamic_casting from a prvalue to an rvalue reference, we need
734     // to materialize the prvalue before we bind the reference to it.
735     if (SrcExpr.get()->isRValue())
736       SrcExpr = Self.CreateMaterializeTemporaryExpr(
737           SrcType, SrcExpr.get(), /*IsLValueReference*/ false);
738     SrcPointee = SrcType;
739   }
740 
741   const RecordType *SrcRecord = SrcPointee->getAs<RecordType>();
742   if (SrcRecord) {
743     if (Self.RequireCompleteType(OpRange.getBegin(), SrcPointee,
744                                  diag::err_bad_dynamic_cast_incomplete,
745                                  SrcExpr.get())) {
746       SrcExpr = ExprError();
747       return;
748     }
749   } else {
750     Self.Diag(OpRange.getBegin(), diag::err_bad_dynamic_cast_not_class)
751       << SrcPointee.getUnqualifiedType() << SrcExpr.get()->getSourceRange();
752     SrcExpr = ExprError();
753     return;
754   }
755 
756   assert((DestPointer || DestReference) &&
757     "Bad destination non-ptr/ref slipped through.");
758   assert((DestRecord || DestPointee->isVoidType()) &&
759     "Bad destination pointee slipped through.");
760   assert(SrcRecord && "Bad source pointee slipped through.");
761 
762   // C++ 5.2.7p1: The dynamic_cast operator shall not cast away constness.
763   if (!DestPointee.isAtLeastAsQualifiedAs(SrcPointee)) {
764     Self.Diag(OpRange.getBegin(), diag::err_bad_cxx_cast_qualifiers_away)
765       << CT_Dynamic << OrigSrcType << this->DestType << OpRange;
766     SrcExpr = ExprError();
767     return;
768   }
769 
770   // C++ 5.2.7p3: If the type of v is the same as the required result type,
771   //   [except for cv].
772   if (DestRecord == SrcRecord) {
773     Kind = CK_NoOp;
774     return;
775   }
776 
777   // C++ 5.2.7p5
778   // Upcasts are resolved statically.
779   if (DestRecord &&
780       Self.IsDerivedFrom(OpRange.getBegin(), SrcPointee, DestPointee)) {
781     if (Self.CheckDerivedToBaseConversion(SrcPointee, DestPointee,
782                                            OpRange.getBegin(), OpRange,
783                                            &BasePath)) {
784       SrcExpr = ExprError();
785       return;
786     }
787 
788     Kind = CK_DerivedToBase;
789     return;
790   }
791 
792   // C++ 5.2.7p6: Otherwise, v shall be [polymorphic].
793   const RecordDecl *SrcDecl = SrcRecord->getDecl()->getDefinition();
794   assert(SrcDecl && "Definition missing");
795   if (!cast<CXXRecordDecl>(SrcDecl)->isPolymorphic()) {
796     Self.Diag(OpRange.getBegin(), diag::err_bad_dynamic_cast_not_polymorphic)
797       << SrcPointee.getUnqualifiedType() << SrcExpr.get()->getSourceRange();
798     SrcExpr = ExprError();
799   }
800 
801   // dynamic_cast is not available with -fno-rtti.
802   // As an exception, dynamic_cast to void* is available because it doesn't
803   // use RTTI.
804   if (!Self.getLangOpts().RTTI && !DestPointee->isVoidType()) {
805     Self.Diag(OpRange.getBegin(), diag::err_no_dynamic_cast_with_fno_rtti);
806     SrcExpr = ExprError();
807     return;
808   }
809 
810   // Done. Everything else is run-time checks.
811   Kind = CK_Dynamic;
812 }
813 
814 /// CheckConstCast - Check that a const_cast\<DestType\>(SrcExpr) is valid.
815 /// Refer to C++ 5.2.11 for details. const_cast is typically used in code
816 /// like this:
817 /// const char *str = "literal";
818 /// legacy_function(const_cast\<char*\>(str));
819 void CastOperation::CheckConstCast() {
820   if (ValueKind == VK_RValue)
821     SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
822   else if (isPlaceholder())
823     SrcExpr = Self.CheckPlaceholderExpr(SrcExpr.get());
824   if (SrcExpr.isInvalid()) // if conversion failed, don't report another error
825     return;
826 
827   unsigned msg = diag::err_bad_cxx_cast_generic;
828   auto TCR = TryConstCast(Self, SrcExpr, DestType, /*CStyle*/ false, msg);
829   if (TCR != TC_Success && msg != 0) {
830     Self.Diag(OpRange.getBegin(), msg) << CT_Const
831       << SrcExpr.get()->getType() << DestType << OpRange;
832   }
833   if (!isValidCast(TCR))
834     SrcExpr = ExprError();
835 }
836 
837 /// Check that a reinterpret_cast\<DestType\>(SrcExpr) is not used as upcast
838 /// or downcast between respective pointers or references.
839 static void DiagnoseReinterpretUpDownCast(Sema &Self, const Expr *SrcExpr,
840                                           QualType DestType,
841                                           SourceRange OpRange) {
842   QualType SrcType = SrcExpr->getType();
843   // When casting from pointer or reference, get pointee type; use original
844   // type otherwise.
845   const CXXRecordDecl *SrcPointeeRD = SrcType->getPointeeCXXRecordDecl();
846   const CXXRecordDecl *SrcRD =
847     SrcPointeeRD ? SrcPointeeRD : SrcType->getAsCXXRecordDecl();
848 
849   // Examining subobjects for records is only possible if the complete and
850   // valid definition is available.  Also, template instantiation is not
851   // allowed here.
852   if (!SrcRD || !SrcRD->isCompleteDefinition() || SrcRD->isInvalidDecl())
853     return;
854 
855   const CXXRecordDecl *DestRD = DestType->getPointeeCXXRecordDecl();
856 
857   if (!DestRD || !DestRD->isCompleteDefinition() || DestRD->isInvalidDecl())
858     return;
859 
860   enum {
861     ReinterpretUpcast,
862     ReinterpretDowncast
863   } ReinterpretKind;
864 
865   CXXBasePaths BasePaths;
866 
867   if (SrcRD->isDerivedFrom(DestRD, BasePaths))
868     ReinterpretKind = ReinterpretUpcast;
869   else if (DestRD->isDerivedFrom(SrcRD, BasePaths))
870     ReinterpretKind = ReinterpretDowncast;
871   else
872     return;
873 
874   bool VirtualBase = true;
875   bool NonZeroOffset = false;
876   for (CXXBasePaths::const_paths_iterator I = BasePaths.begin(),
877                                           E = BasePaths.end();
878        I != E; ++I) {
879     const CXXBasePath &Path = *I;
880     CharUnits Offset = CharUnits::Zero();
881     bool IsVirtual = false;
882     for (CXXBasePath::const_iterator IElem = Path.begin(), EElem = Path.end();
883          IElem != EElem; ++IElem) {
884       IsVirtual = IElem->Base->isVirtual();
885       if (IsVirtual)
886         break;
887       const CXXRecordDecl *BaseRD = IElem->Base->getType()->getAsCXXRecordDecl();
888       assert(BaseRD && "Base type should be a valid unqualified class type");
889       // Don't check if any base has invalid declaration or has no definition
890       // since it has no layout info.
891       const CXXRecordDecl *Class = IElem->Class,
892                           *ClassDefinition = Class->getDefinition();
893       if (Class->isInvalidDecl() || !ClassDefinition ||
894           !ClassDefinition->isCompleteDefinition())
895         return;
896 
897       const ASTRecordLayout &DerivedLayout =
898           Self.Context.getASTRecordLayout(Class);
899       Offset += DerivedLayout.getBaseClassOffset(BaseRD);
900     }
901     if (!IsVirtual) {
902       // Don't warn if any path is a non-virtually derived base at offset zero.
903       if (Offset.isZero())
904         return;
905       // Offset makes sense only for non-virtual bases.
906       else
907         NonZeroOffset = true;
908     }
909     VirtualBase = VirtualBase && IsVirtual;
910   }
911 
912   (void) NonZeroOffset; // Silence set but not used warning.
913   assert((VirtualBase || NonZeroOffset) &&
914          "Should have returned if has non-virtual base with zero offset");
915 
916   QualType BaseType =
917       ReinterpretKind == ReinterpretUpcast? DestType : SrcType;
918   QualType DerivedType =
919       ReinterpretKind == ReinterpretUpcast? SrcType : DestType;
920 
921   SourceLocation BeginLoc = OpRange.getBegin();
922   Self.Diag(BeginLoc, diag::warn_reinterpret_different_from_static)
923     << DerivedType << BaseType << !VirtualBase << int(ReinterpretKind)
924     << OpRange;
925   Self.Diag(BeginLoc, diag::note_reinterpret_updowncast_use_static)
926     << int(ReinterpretKind)
927     << FixItHint::CreateReplacement(BeginLoc, "static_cast");
928 }
929 
930 /// CheckReinterpretCast - Check that a reinterpret_cast\<DestType\>(SrcExpr) is
931 /// valid.
932 /// Refer to C++ 5.2.10 for details. reinterpret_cast is typically used in code
933 /// like this:
934 /// char *bytes = reinterpret_cast\<char*\>(int_ptr);
935 void CastOperation::CheckReinterpretCast() {
936   if (ValueKind == VK_RValue && !isPlaceholder(BuiltinType::Overload))
937     SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
938   else
939     checkNonOverloadPlaceholders();
940   if (SrcExpr.isInvalid()) // if conversion failed, don't report another error
941     return;
942 
943   unsigned msg = diag::err_bad_cxx_cast_generic;
944   TryCastResult tcr =
945     TryReinterpretCast(Self, SrcExpr, DestType,
946                        /*CStyle*/false, OpRange, msg, Kind);
947   if (tcr != TC_Success && msg != 0) {
948     if (SrcExpr.isInvalid()) // if conversion failed, don't report another error
949       return;
950     if (SrcExpr.get()->getType() == Self.Context.OverloadTy) {
951       //FIXME: &f<int>; is overloaded and resolvable
952       Self.Diag(OpRange.getBegin(), diag::err_bad_reinterpret_cast_overload)
953         << OverloadExpr::find(SrcExpr.get()).Expression->getName()
954         << DestType << OpRange;
955       Self.NoteAllOverloadCandidates(SrcExpr.get());
956 
957     } else {
958       diagnoseBadCast(Self, msg, CT_Reinterpret, OpRange, SrcExpr.get(),
959                       DestType, /*listInitialization=*/false);
960     }
961   }
962 
963   if (isValidCast(tcr)) {
964     if (Self.getLangOpts().allowsNonTrivialObjCLifetimeQualifiers())
965       checkObjCConversion(Sema::CCK_OtherCast);
966     DiagnoseReinterpretUpDownCast(Self, SrcExpr.get(), DestType, OpRange);
967   } else {
968     SrcExpr = ExprError();
969   }
970 }
971 
972 
973 /// CheckStaticCast - Check that a static_cast\<DestType\>(SrcExpr) is valid.
974 /// Refer to C++ 5.2.9 for details. Static casts are mostly used for making
975 /// implicit conversions explicit and getting rid of data loss warnings.
976 void CastOperation::CheckStaticCast() {
977   if (isPlaceholder()) {
978     checkNonOverloadPlaceholders();
979     if (SrcExpr.isInvalid())
980       return;
981   }
982 
983   // This test is outside everything else because it's the only case where
984   // a non-lvalue-reference target type does not lead to decay.
985   // C++ 5.2.9p4: Any expression can be explicitly converted to type "cv void".
986   if (DestType->isVoidType()) {
987     Kind = CK_ToVoid;
988 
989     if (claimPlaceholder(BuiltinType::Overload)) {
990       Self.ResolveAndFixSingleFunctionTemplateSpecialization(SrcExpr,
991                 false, // Decay Function to ptr
992                 true, // Complain
993                 OpRange, DestType, diag::err_bad_static_cast_overload);
994       if (SrcExpr.isInvalid())
995         return;
996     }
997 
998     SrcExpr = Self.IgnoredValueConversions(SrcExpr.get());
999     return;
1000   }
1001 
1002   if (ValueKind == VK_RValue && !DestType->isRecordType() &&
1003       !isPlaceholder(BuiltinType::Overload)) {
1004     SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
1005     if (SrcExpr.isInvalid()) // if conversion failed, don't report another error
1006       return;
1007   }
1008 
1009   unsigned msg = diag::err_bad_cxx_cast_generic;
1010   TryCastResult tcr
1011     = TryStaticCast(Self, SrcExpr, DestType, Sema::CCK_OtherCast, OpRange, msg,
1012                     Kind, BasePath, /*ListInitialization=*/false);
1013   if (tcr != TC_Success && msg != 0) {
1014     if (SrcExpr.isInvalid())
1015       return;
1016     if (SrcExpr.get()->getType() == Self.Context.OverloadTy) {
1017       OverloadExpr* oe = OverloadExpr::find(SrcExpr.get()).Expression;
1018       Self.Diag(OpRange.getBegin(), diag::err_bad_static_cast_overload)
1019         << oe->getName() << DestType << OpRange
1020         << oe->getQualifierLoc().getSourceRange();
1021       Self.NoteAllOverloadCandidates(SrcExpr.get());
1022     } else {
1023       diagnoseBadCast(Self, msg, CT_Static, OpRange, SrcExpr.get(), DestType,
1024                       /*listInitialization=*/false);
1025     }
1026   }
1027 
1028   if (isValidCast(tcr)) {
1029     if (Kind == CK_BitCast)
1030       checkCastAlign();
1031     if (Self.getLangOpts().allowsNonTrivialObjCLifetimeQualifiers())
1032       checkObjCConversion(Sema::CCK_OtherCast);
1033   } else {
1034     SrcExpr = ExprError();
1035   }
1036 }
1037 
1038 /// TryStaticCast - Check if a static cast can be performed, and do so if
1039 /// possible. If @p CStyle, ignore access restrictions on hierarchy casting
1040 /// and casting away constness.
1041 static TryCastResult TryStaticCast(Sema &Self, ExprResult &SrcExpr,
1042                                    QualType DestType,
1043                                    Sema::CheckedConversionKind CCK,
1044                                    SourceRange OpRange, unsigned &msg,
1045                                    CastKind &Kind, CXXCastPath &BasePath,
1046                                    bool ListInitialization) {
1047   // Determine whether we have the semantics of a C-style cast.
1048   bool CStyle
1049     = (CCK == Sema::CCK_CStyleCast || CCK == Sema::CCK_FunctionalCast);
1050 
1051   // The order the tests is not entirely arbitrary. There is one conversion
1052   // that can be handled in two different ways. Given:
1053   // struct A {};
1054   // struct B : public A {
1055   //   B(); B(const A&);
1056   // };
1057   // const A &a = B();
1058   // the cast static_cast<const B&>(a) could be seen as either a static
1059   // reference downcast, or an explicit invocation of the user-defined
1060   // conversion using B's conversion constructor.
1061   // DR 427 specifies that the downcast is to be applied here.
1062 
1063   // C++ 5.2.9p4: Any expression can be explicitly converted to type "cv void".
1064   // Done outside this function.
1065 
1066   TryCastResult tcr;
1067 
1068   // C++ 5.2.9p5, reference downcast.
1069   // See the function for details.
1070   // DR 427 specifies that this is to be applied before paragraph 2.
1071   tcr = TryStaticReferenceDowncast(Self, SrcExpr.get(), DestType, CStyle,
1072                                    OpRange, msg, Kind, BasePath);
1073   if (tcr != TC_NotApplicable)
1074     return tcr;
1075 
1076   // C++11 [expr.static.cast]p3:
1077   //   A glvalue of type "cv1 T1" can be cast to type "rvalue reference to cv2
1078   //   T2" if "cv2 T2" is reference-compatible with "cv1 T1".
1079   tcr = TryLValueToRValueCast(Self, SrcExpr.get(), DestType, CStyle, Kind,
1080                               BasePath, msg);
1081   if (tcr != TC_NotApplicable)
1082     return tcr;
1083 
1084   // C++ 5.2.9p2: An expression e can be explicitly converted to a type T
1085   //   [...] if the declaration "T t(e);" is well-formed, [...].
1086   tcr = TryStaticImplicitCast(Self, SrcExpr, DestType, CCK, OpRange, msg,
1087                               Kind, ListInitialization);
1088   if (SrcExpr.isInvalid())
1089     return TC_Failed;
1090   if (tcr != TC_NotApplicable)
1091     return tcr;
1092 
1093   // C++ 5.2.9p6: May apply the reverse of any standard conversion, except
1094   // lvalue-to-rvalue, array-to-pointer, function-to-pointer, and boolean
1095   // conversions, subject to further restrictions.
1096   // Also, C++ 5.2.9p1 forbids casting away constness, which makes reversal
1097   // of qualification conversions impossible.
1098   // In the CStyle case, the earlier attempt to const_cast should have taken
1099   // care of reverse qualification conversions.
1100 
1101   QualType SrcType = Self.Context.getCanonicalType(SrcExpr.get()->getType());
1102 
1103   // C++0x 5.2.9p9: A value of a scoped enumeration type can be explicitly
1104   // converted to an integral type. [...] A value of a scoped enumeration type
1105   // can also be explicitly converted to a floating-point type [...].
1106   if (const EnumType *Enum = SrcType->getAs<EnumType>()) {
1107     if (Enum->getDecl()->isScoped()) {
1108       if (DestType->isBooleanType()) {
1109         Kind = CK_IntegralToBoolean;
1110         return TC_Success;
1111       } else if (DestType->isIntegralType(Self.Context)) {
1112         Kind = CK_IntegralCast;
1113         return TC_Success;
1114       } else if (DestType->isRealFloatingType()) {
1115         Kind = CK_IntegralToFloating;
1116         return TC_Success;
1117       }
1118     }
1119   }
1120 
1121   // Reverse integral promotion/conversion. All such conversions are themselves
1122   // again integral promotions or conversions and are thus already handled by
1123   // p2 (TryDirectInitialization above).
1124   // (Note: any data loss warnings should be suppressed.)
1125   // The exception is the reverse of enum->integer, i.e. integer->enum (and
1126   // enum->enum). See also C++ 5.2.9p7.
1127   // The same goes for reverse floating point promotion/conversion and
1128   // floating-integral conversions. Again, only floating->enum is relevant.
1129   if (DestType->isEnumeralType()) {
1130     if (SrcType->isIntegralOrEnumerationType()) {
1131       Kind = CK_IntegralCast;
1132       return TC_Success;
1133     } else if (SrcType->isRealFloatingType())   {
1134       Kind = CK_FloatingToIntegral;
1135       return TC_Success;
1136     }
1137   }
1138 
1139   // Reverse pointer upcast. C++ 4.10p3 specifies pointer upcast.
1140   // C++ 5.2.9p8 additionally disallows a cast path through virtual inheritance.
1141   tcr = TryStaticPointerDowncast(Self, SrcType, DestType, CStyle, OpRange, msg,
1142                                  Kind, BasePath);
1143   if (tcr != TC_NotApplicable)
1144     return tcr;
1145 
1146   // Reverse member pointer conversion. C++ 4.11 specifies member pointer
1147   // conversion. C++ 5.2.9p9 has additional information.
1148   // DR54's access restrictions apply here also.
1149   tcr = TryStaticMemberPointerUpcast(Self, SrcExpr, SrcType, DestType, CStyle,
1150                                      OpRange, msg, Kind, BasePath);
1151   if (tcr != TC_NotApplicable)
1152     return tcr;
1153 
1154   // Reverse pointer conversion to void*. C++ 4.10.p2 specifies conversion to
1155   // void*. C++ 5.2.9p10 specifies additional restrictions, which really is
1156   // just the usual constness stuff.
1157   if (const PointerType *SrcPointer = SrcType->getAs<PointerType>()) {
1158     QualType SrcPointee = SrcPointer->getPointeeType();
1159     if (SrcPointee->isVoidType()) {
1160       if (const PointerType *DestPointer = DestType->getAs<PointerType>()) {
1161         QualType DestPointee = DestPointer->getPointeeType();
1162         if (DestPointee->isIncompleteOrObjectType()) {
1163           // This is definitely the intended conversion, but it might fail due
1164           // to a qualifier violation. Note that we permit Objective-C lifetime
1165           // and GC qualifier mismatches here.
1166           if (!CStyle) {
1167             Qualifiers DestPointeeQuals = DestPointee.getQualifiers();
1168             Qualifiers SrcPointeeQuals = SrcPointee.getQualifiers();
1169             DestPointeeQuals.removeObjCGCAttr();
1170             DestPointeeQuals.removeObjCLifetime();
1171             SrcPointeeQuals.removeObjCGCAttr();
1172             SrcPointeeQuals.removeObjCLifetime();
1173             if (DestPointeeQuals != SrcPointeeQuals &&
1174                 !DestPointeeQuals.compatiblyIncludes(SrcPointeeQuals)) {
1175               msg = diag::err_bad_cxx_cast_qualifiers_away;
1176               return TC_Failed;
1177             }
1178           }
1179           Kind = CK_BitCast;
1180           return TC_Success;
1181         }
1182 
1183         // Microsoft permits static_cast from 'pointer-to-void' to
1184         // 'pointer-to-function'.
1185         if (!CStyle && Self.getLangOpts().MSVCCompat &&
1186             DestPointee->isFunctionType()) {
1187           Self.Diag(OpRange.getBegin(), diag::ext_ms_cast_fn_obj) << OpRange;
1188           Kind = CK_BitCast;
1189           return TC_Success;
1190         }
1191       }
1192       else if (DestType->isObjCObjectPointerType()) {
1193         // allow both c-style cast and static_cast of objective-c pointers as
1194         // they are pervasive.
1195         Kind = CK_CPointerToObjCPointerCast;
1196         return TC_Success;
1197       }
1198       else if (CStyle && DestType->isBlockPointerType()) {
1199         // allow c-style cast of void * to block pointers.
1200         Kind = CK_AnyPointerToBlockPointerCast;
1201         return TC_Success;
1202       }
1203     }
1204   }
1205   // Allow arbitrary objective-c pointer conversion with static casts.
1206   if (SrcType->isObjCObjectPointerType() &&
1207       DestType->isObjCObjectPointerType()) {
1208     Kind = CK_BitCast;
1209     return TC_Success;
1210   }
1211   // Allow ns-pointer to cf-pointer conversion in either direction
1212   // with static casts.
1213   if (!CStyle &&
1214       Self.CheckTollFreeBridgeStaticCast(DestType, SrcExpr.get(), Kind))
1215     return TC_Success;
1216 
1217   // See if it looks like the user is trying to convert between
1218   // related record types, and select a better diagnostic if so.
1219   if (auto SrcPointer = SrcType->getAs<PointerType>())
1220     if (auto DestPointer = DestType->getAs<PointerType>())
1221       if (SrcPointer->getPointeeType()->getAs<RecordType>() &&
1222           DestPointer->getPointeeType()->getAs<RecordType>())
1223        msg = diag::err_bad_cxx_cast_unrelated_class;
1224 
1225   // We tried everything. Everything! Nothing works! :-(
1226   return TC_NotApplicable;
1227 }
1228 
1229 /// Tests whether a conversion according to N2844 is valid.
1230 TryCastResult TryLValueToRValueCast(Sema &Self, Expr *SrcExpr,
1231                                     QualType DestType, bool CStyle,
1232                                     CastKind &Kind, CXXCastPath &BasePath,
1233                                     unsigned &msg) {
1234   // C++11 [expr.static.cast]p3:
1235   //   A glvalue of type "cv1 T1" can be cast to type "rvalue reference to
1236   //   cv2 T2" if "cv2 T2" is reference-compatible with "cv1 T1".
1237   const RValueReferenceType *R = DestType->getAs<RValueReferenceType>();
1238   if (!R)
1239     return TC_NotApplicable;
1240 
1241   if (!SrcExpr->isGLValue())
1242     return TC_NotApplicable;
1243 
1244   // Because we try the reference downcast before this function, from now on
1245   // this is the only cast possibility, so we issue an error if we fail now.
1246   // FIXME: Should allow casting away constness if CStyle.
1247   bool DerivedToBase;
1248   bool ObjCConversion;
1249   bool ObjCLifetimeConversion;
1250   QualType FromType = SrcExpr->getType();
1251   QualType ToType = R->getPointeeType();
1252   if (CStyle) {
1253     FromType = FromType.getUnqualifiedType();
1254     ToType = ToType.getUnqualifiedType();
1255   }
1256 
1257   Sema::ReferenceCompareResult RefResult = Self.CompareReferenceRelationship(
1258       SrcExpr->getLocStart(), ToType, FromType, DerivedToBase, ObjCConversion,
1259       ObjCLifetimeConversion);
1260   if (RefResult != Sema::Ref_Compatible) {
1261     if (CStyle || RefResult == Sema::Ref_Incompatible)
1262       return TC_NotApplicable;
1263     // Diagnose types which are reference-related but not compatible here since
1264     // we can provide better diagnostics. In these cases forwarding to
1265     // [expr.static.cast]p4 should never result in a well-formed cast.
1266     msg = SrcExpr->isLValue() ? diag::err_bad_lvalue_to_rvalue_cast
1267                               : diag::err_bad_rvalue_to_rvalue_cast;
1268     return TC_Failed;
1269   }
1270 
1271   if (DerivedToBase) {
1272     Kind = CK_DerivedToBase;
1273     CXXBasePaths Paths(/*FindAmbiguities=*/true, /*RecordPaths=*/true,
1274                        /*DetectVirtual=*/true);
1275     if (!Self.IsDerivedFrom(SrcExpr->getLocStart(), SrcExpr->getType(),
1276                             R->getPointeeType(), Paths))
1277       return TC_NotApplicable;
1278 
1279     Self.BuildBasePathArray(Paths, BasePath);
1280   } else
1281     Kind = CK_NoOp;
1282 
1283   return TC_Success;
1284 }
1285 
1286 /// Tests whether a conversion according to C++ 5.2.9p5 is valid.
1287 TryCastResult
1288 TryStaticReferenceDowncast(Sema &Self, Expr *SrcExpr, QualType DestType,
1289                            bool CStyle, SourceRange OpRange,
1290                            unsigned &msg, CastKind &Kind,
1291                            CXXCastPath &BasePath) {
1292   // C++ 5.2.9p5: An lvalue of type "cv1 B", where B is a class type, can be
1293   //   cast to type "reference to cv2 D", where D is a class derived from B,
1294   //   if a valid standard conversion from "pointer to D" to "pointer to B"
1295   //   exists, cv2 >= cv1, and B is not a virtual base class of D.
1296   // In addition, DR54 clarifies that the base must be accessible in the
1297   // current context. Although the wording of DR54 only applies to the pointer
1298   // variant of this rule, the intent is clearly for it to apply to the this
1299   // conversion as well.
1300 
1301   const ReferenceType *DestReference = DestType->getAs<ReferenceType>();
1302   if (!DestReference) {
1303     return TC_NotApplicable;
1304   }
1305   bool RValueRef = DestReference->isRValueReferenceType();
1306   if (!RValueRef && !SrcExpr->isLValue()) {
1307     // We know the left side is an lvalue reference, so we can suggest a reason.
1308     msg = diag::err_bad_cxx_cast_rvalue;
1309     return TC_NotApplicable;
1310   }
1311 
1312   QualType DestPointee = DestReference->getPointeeType();
1313 
1314   // FIXME: If the source is a prvalue, we should issue a warning (because the
1315   // cast always has undefined behavior), and for AST consistency, we should
1316   // materialize a temporary.
1317   return TryStaticDowncast(Self,
1318                            Self.Context.getCanonicalType(SrcExpr->getType()),
1319                            Self.Context.getCanonicalType(DestPointee), CStyle,
1320                            OpRange, SrcExpr->getType(), DestType, msg, Kind,
1321                            BasePath);
1322 }
1323 
1324 /// Tests whether a conversion according to C++ 5.2.9p8 is valid.
1325 TryCastResult
1326 TryStaticPointerDowncast(Sema &Self, QualType SrcType, QualType DestType,
1327                          bool CStyle, SourceRange OpRange,
1328                          unsigned &msg, CastKind &Kind,
1329                          CXXCastPath &BasePath) {
1330   // C++ 5.2.9p8: An rvalue of type "pointer to cv1 B", where B is a class
1331   //   type, can be converted to an rvalue of type "pointer to cv2 D", where D
1332   //   is a class derived from B, if a valid standard conversion from "pointer
1333   //   to D" to "pointer to B" exists, cv2 >= cv1, and B is not a virtual base
1334   //   class of D.
1335   // In addition, DR54 clarifies that the base must be accessible in the
1336   // current context.
1337 
1338   const PointerType *DestPointer = DestType->getAs<PointerType>();
1339   if (!DestPointer) {
1340     return TC_NotApplicable;
1341   }
1342 
1343   const PointerType *SrcPointer = SrcType->getAs<PointerType>();
1344   if (!SrcPointer) {
1345     msg = diag::err_bad_static_cast_pointer_nonpointer;
1346     return TC_NotApplicable;
1347   }
1348 
1349   return TryStaticDowncast(Self,
1350                    Self.Context.getCanonicalType(SrcPointer->getPointeeType()),
1351                   Self.Context.getCanonicalType(DestPointer->getPointeeType()),
1352                            CStyle, OpRange, SrcType, DestType, msg, Kind,
1353                            BasePath);
1354 }
1355 
1356 /// TryStaticDowncast - Common functionality of TryStaticReferenceDowncast and
1357 /// TryStaticPointerDowncast. Tests whether a static downcast from SrcType to
1358 /// DestType is possible and allowed.
1359 TryCastResult
1360 TryStaticDowncast(Sema &Self, CanQualType SrcType, CanQualType DestType,
1361                   bool CStyle, SourceRange OpRange, QualType OrigSrcType,
1362                   QualType OrigDestType, unsigned &msg,
1363                   CastKind &Kind, CXXCastPath &BasePath) {
1364   // We can only work with complete types. But don't complain if it doesn't work
1365   if (!Self.isCompleteType(OpRange.getBegin(), SrcType) ||
1366       !Self.isCompleteType(OpRange.getBegin(), DestType))
1367     return TC_NotApplicable;
1368 
1369   // Downcast can only happen in class hierarchies, so we need classes.
1370   if (!DestType->getAs<RecordType>() || !SrcType->getAs<RecordType>()) {
1371     return TC_NotApplicable;
1372   }
1373 
1374   CXXBasePaths Paths(/*FindAmbiguities=*/true, /*RecordPaths=*/true,
1375                      /*DetectVirtual=*/true);
1376   if (!Self.IsDerivedFrom(OpRange.getBegin(), DestType, SrcType, Paths)) {
1377     return TC_NotApplicable;
1378   }
1379 
1380   // Target type does derive from source type. Now we're serious. If an error
1381   // appears now, it's not ignored.
1382   // This may not be entirely in line with the standard. Take for example:
1383   // struct A {};
1384   // struct B : virtual A {
1385   //   B(A&);
1386   // };
1387   //
1388   // void f()
1389   // {
1390   //   (void)static_cast<const B&>(*((A*)0));
1391   // }
1392   // As far as the standard is concerned, p5 does not apply (A is virtual), so
1393   // p2 should be used instead - "const B& t(*((A*)0));" is perfectly valid.
1394   // However, both GCC and Comeau reject this example, and accepting it would
1395   // mean more complex code if we're to preserve the nice error message.
1396   // FIXME: Being 100% compliant here would be nice to have.
1397 
1398   // Must preserve cv, as always, unless we're in C-style mode.
1399   if (!CStyle && !DestType.isAtLeastAsQualifiedAs(SrcType)) {
1400     msg = diag::err_bad_cxx_cast_qualifiers_away;
1401     return TC_Failed;
1402   }
1403 
1404   if (Paths.isAmbiguous(SrcType.getUnqualifiedType())) {
1405     // This code is analoguous to that in CheckDerivedToBaseConversion, except
1406     // that it builds the paths in reverse order.
1407     // To sum up: record all paths to the base and build a nice string from
1408     // them. Use it to spice up the error message.
1409     if (!Paths.isRecordingPaths()) {
1410       Paths.clear();
1411       Paths.setRecordingPaths(true);
1412       Self.IsDerivedFrom(OpRange.getBegin(), DestType, SrcType, Paths);
1413     }
1414     std::string PathDisplayStr;
1415     std::set<unsigned> DisplayedPaths;
1416     for (clang::CXXBasePath &Path : Paths) {
1417       if (DisplayedPaths.insert(Path.back().SubobjectNumber).second) {
1418         // We haven't displayed a path to this particular base
1419         // class subobject yet.
1420         PathDisplayStr += "\n    ";
1421         for (CXXBasePathElement &PE : llvm::reverse(Path))
1422           PathDisplayStr += PE.Base->getType().getAsString() + " -> ";
1423         PathDisplayStr += QualType(DestType).getAsString();
1424       }
1425     }
1426 
1427     Self.Diag(OpRange.getBegin(), diag::err_ambiguous_base_to_derived_cast)
1428       << QualType(SrcType).getUnqualifiedType()
1429       << QualType(DestType).getUnqualifiedType()
1430       << PathDisplayStr << OpRange;
1431     msg = 0;
1432     return TC_Failed;
1433   }
1434 
1435   if (Paths.getDetectedVirtual() != nullptr) {
1436     QualType VirtualBase(Paths.getDetectedVirtual(), 0);
1437     Self.Diag(OpRange.getBegin(), diag::err_static_downcast_via_virtual)
1438       << OrigSrcType << OrigDestType << VirtualBase << OpRange;
1439     msg = 0;
1440     return TC_Failed;
1441   }
1442 
1443   if (!CStyle) {
1444     switch (Self.CheckBaseClassAccess(OpRange.getBegin(),
1445                                       SrcType, DestType,
1446                                       Paths.front(),
1447                                 diag::err_downcast_from_inaccessible_base)) {
1448     case Sema::AR_accessible:
1449     case Sema::AR_delayed:     // be optimistic
1450     case Sema::AR_dependent:   // be optimistic
1451       break;
1452 
1453     case Sema::AR_inaccessible:
1454       msg = 0;
1455       return TC_Failed;
1456     }
1457   }
1458 
1459   Self.BuildBasePathArray(Paths, BasePath);
1460   Kind = CK_BaseToDerived;
1461   return TC_Success;
1462 }
1463 
1464 /// TryStaticMemberPointerUpcast - Tests whether a conversion according to
1465 /// C++ 5.2.9p9 is valid:
1466 ///
1467 ///   An rvalue of type "pointer to member of D of type cv1 T" can be
1468 ///   converted to an rvalue of type "pointer to member of B of type cv2 T",
1469 ///   where B is a base class of D [...].
1470 ///
1471 TryCastResult
1472 TryStaticMemberPointerUpcast(Sema &Self, ExprResult &SrcExpr, QualType SrcType,
1473                              QualType DestType, bool CStyle,
1474                              SourceRange OpRange,
1475                              unsigned &msg, CastKind &Kind,
1476                              CXXCastPath &BasePath) {
1477   const MemberPointerType *DestMemPtr = DestType->getAs<MemberPointerType>();
1478   if (!DestMemPtr)
1479     return TC_NotApplicable;
1480 
1481   bool WasOverloadedFunction = false;
1482   DeclAccessPair FoundOverload;
1483   if (SrcExpr.get()->getType() == Self.Context.OverloadTy) {
1484     if (FunctionDecl *Fn
1485           = Self.ResolveAddressOfOverloadedFunction(SrcExpr.get(), DestType, false,
1486                                                     FoundOverload)) {
1487       CXXMethodDecl *M = cast<CXXMethodDecl>(Fn);
1488       SrcType = Self.Context.getMemberPointerType(Fn->getType(),
1489                       Self.Context.getTypeDeclType(M->getParent()).getTypePtr());
1490       WasOverloadedFunction = true;
1491     }
1492   }
1493 
1494   const MemberPointerType *SrcMemPtr = SrcType->getAs<MemberPointerType>();
1495   if (!SrcMemPtr) {
1496     msg = diag::err_bad_static_cast_member_pointer_nonmp;
1497     return TC_NotApplicable;
1498   }
1499 
1500   // Lock down the inheritance model right now in MS ABI, whether or not the
1501   // pointee types are the same.
1502   if (Self.Context.getTargetInfo().getCXXABI().isMicrosoft()) {
1503     (void)Self.isCompleteType(OpRange.getBegin(), SrcType);
1504     (void)Self.isCompleteType(OpRange.getBegin(), DestType);
1505   }
1506 
1507   // T == T, modulo cv
1508   if (!Self.Context.hasSameUnqualifiedType(SrcMemPtr->getPointeeType(),
1509                                            DestMemPtr->getPointeeType()))
1510     return TC_NotApplicable;
1511 
1512   // B base of D
1513   QualType SrcClass(SrcMemPtr->getClass(), 0);
1514   QualType DestClass(DestMemPtr->getClass(), 0);
1515   CXXBasePaths Paths(/*FindAmbiguities=*/true, /*RecordPaths=*/true,
1516                   /*DetectVirtual=*/true);
1517   if (!Self.IsDerivedFrom(OpRange.getBegin(), SrcClass, DestClass, Paths))
1518     return TC_NotApplicable;
1519 
1520   // B is a base of D. But is it an allowed base? If not, it's a hard error.
1521   if (Paths.isAmbiguous(Self.Context.getCanonicalType(DestClass))) {
1522     Paths.clear();
1523     Paths.setRecordingPaths(true);
1524     bool StillOkay =
1525         Self.IsDerivedFrom(OpRange.getBegin(), SrcClass, DestClass, Paths);
1526     assert(StillOkay);
1527     (void)StillOkay;
1528     std::string PathDisplayStr = Self.getAmbiguousPathsDisplayString(Paths);
1529     Self.Diag(OpRange.getBegin(), diag::err_ambiguous_memptr_conv)
1530       << 1 << SrcClass << DestClass << PathDisplayStr << OpRange;
1531     msg = 0;
1532     return TC_Failed;
1533   }
1534 
1535   if (const RecordType *VBase = Paths.getDetectedVirtual()) {
1536     Self.Diag(OpRange.getBegin(), diag::err_memptr_conv_via_virtual)
1537       << SrcClass << DestClass << QualType(VBase, 0) << OpRange;
1538     msg = 0;
1539     return TC_Failed;
1540   }
1541 
1542   if (!CStyle) {
1543     switch (Self.CheckBaseClassAccess(OpRange.getBegin(),
1544                                       DestClass, SrcClass,
1545                                       Paths.front(),
1546                                       diag::err_upcast_to_inaccessible_base)) {
1547     case Sema::AR_accessible:
1548     case Sema::AR_delayed:
1549     case Sema::AR_dependent:
1550       // Optimistically assume that the delayed and dependent cases
1551       // will work out.
1552       break;
1553 
1554     case Sema::AR_inaccessible:
1555       msg = 0;
1556       return TC_Failed;
1557     }
1558   }
1559 
1560   if (WasOverloadedFunction) {
1561     // Resolve the address of the overloaded function again, this time
1562     // allowing complaints if something goes wrong.
1563     FunctionDecl *Fn = Self.ResolveAddressOfOverloadedFunction(SrcExpr.get(),
1564                                                                DestType,
1565                                                                true,
1566                                                                FoundOverload);
1567     if (!Fn) {
1568       msg = 0;
1569       return TC_Failed;
1570     }
1571 
1572     SrcExpr = Self.FixOverloadedFunctionReference(SrcExpr, FoundOverload, Fn);
1573     if (!SrcExpr.isUsable()) {
1574       msg = 0;
1575       return TC_Failed;
1576     }
1577   }
1578 
1579   Self.BuildBasePathArray(Paths, BasePath);
1580   Kind = CK_DerivedToBaseMemberPointer;
1581   return TC_Success;
1582 }
1583 
1584 /// TryStaticImplicitCast - Tests whether a conversion according to C++ 5.2.9p2
1585 /// is valid:
1586 ///
1587 ///   An expression e can be explicitly converted to a type T using a
1588 ///   @c static_cast if the declaration "T t(e);" is well-formed [...].
1589 TryCastResult
1590 TryStaticImplicitCast(Sema &Self, ExprResult &SrcExpr, QualType DestType,
1591                       Sema::CheckedConversionKind CCK,
1592                       SourceRange OpRange, unsigned &msg,
1593                       CastKind &Kind, bool ListInitialization) {
1594   if (DestType->isRecordType()) {
1595     if (Self.RequireCompleteType(OpRange.getBegin(), DestType,
1596                                  diag::err_bad_dynamic_cast_incomplete) ||
1597         Self.RequireNonAbstractType(OpRange.getBegin(), DestType,
1598                                     diag::err_allocation_of_abstract_type)) {
1599       msg = 0;
1600       return TC_Failed;
1601     }
1602   }
1603 
1604   InitializedEntity Entity = InitializedEntity::InitializeTemporary(DestType);
1605   InitializationKind InitKind
1606     = (CCK == Sema::CCK_CStyleCast)
1607         ? InitializationKind::CreateCStyleCast(OpRange.getBegin(), OpRange,
1608                                                ListInitialization)
1609     : (CCK == Sema::CCK_FunctionalCast)
1610         ? InitializationKind::CreateFunctionalCast(OpRange, ListInitialization)
1611     : InitializationKind::CreateCast(OpRange);
1612   Expr *SrcExprRaw = SrcExpr.get();
1613   // FIXME: Per DR242, we should check for an implicit conversion sequence
1614   // or for a constructor that could be invoked by direct-initialization
1615   // here, not for an initialization sequence.
1616   InitializationSequence InitSeq(Self, Entity, InitKind, SrcExprRaw);
1617 
1618   // At this point of CheckStaticCast, if the destination is a reference,
1619   // or the expression is an overload expression this has to work.
1620   // There is no other way that works.
1621   // On the other hand, if we're checking a C-style cast, we've still got
1622   // the reinterpret_cast way.
1623   bool CStyle
1624     = (CCK == Sema::CCK_CStyleCast || CCK == Sema::CCK_FunctionalCast);
1625   if (InitSeq.Failed() && (CStyle || !DestType->isReferenceType()))
1626     return TC_NotApplicable;
1627 
1628   ExprResult Result = InitSeq.Perform(Self, Entity, InitKind, SrcExprRaw);
1629   if (Result.isInvalid()) {
1630     msg = 0;
1631     return TC_Failed;
1632   }
1633 
1634   if (InitSeq.isConstructorInitialization())
1635     Kind = CK_ConstructorConversion;
1636   else
1637     Kind = CK_NoOp;
1638 
1639   SrcExpr = Result;
1640   return TC_Success;
1641 }
1642 
1643 /// TryConstCast - See if a const_cast from source to destination is allowed,
1644 /// and perform it if it is.
1645 static TryCastResult TryConstCast(Sema &Self, ExprResult &SrcExpr,
1646                                   QualType DestType, bool CStyle,
1647                                   unsigned &msg) {
1648   DestType = Self.Context.getCanonicalType(DestType);
1649   QualType SrcType = SrcExpr.get()->getType();
1650   bool NeedToMaterializeTemporary = false;
1651 
1652   if (const ReferenceType *DestTypeTmp =DestType->getAs<ReferenceType>()) {
1653     // C++11 5.2.11p4:
1654     //   if a pointer to T1 can be explicitly converted to the type "pointer to
1655     //   T2" using a const_cast, then the following conversions can also be
1656     //   made:
1657     //    -- an lvalue of type T1 can be explicitly converted to an lvalue of
1658     //       type T2 using the cast const_cast<T2&>;
1659     //    -- a glvalue of type T1 can be explicitly converted to an xvalue of
1660     //       type T2 using the cast const_cast<T2&&>; and
1661     //    -- if T1 is a class type, a prvalue of type T1 can be explicitly
1662     //       converted to an xvalue of type T2 using the cast const_cast<T2&&>.
1663 
1664     if (isa<LValueReferenceType>(DestTypeTmp) && !SrcExpr.get()->isLValue()) {
1665       // Cannot const_cast non-lvalue to lvalue reference type. But if this
1666       // is C-style, static_cast might find a way, so we simply suggest a
1667       // message and tell the parent to keep searching.
1668       msg = diag::err_bad_cxx_cast_rvalue;
1669       return TC_NotApplicable;
1670     }
1671 
1672     if (isa<RValueReferenceType>(DestTypeTmp) && SrcExpr.get()->isRValue()) {
1673       if (!SrcType->isRecordType()) {
1674         // Cannot const_cast non-class prvalue to rvalue reference type. But if
1675         // this is C-style, static_cast can do this.
1676         msg = diag::err_bad_cxx_cast_rvalue;
1677         return TC_NotApplicable;
1678       }
1679 
1680       // Materialize the class prvalue so that the const_cast can bind a
1681       // reference to it.
1682       NeedToMaterializeTemporary = true;
1683     }
1684 
1685     // It's not completely clear under the standard whether we can
1686     // const_cast bit-field gl-values.  Doing so would not be
1687     // intrinsically complicated, but for now, we say no for
1688     // consistency with other compilers and await the word of the
1689     // committee.
1690     if (SrcExpr.get()->refersToBitField()) {
1691       msg = diag::err_bad_cxx_cast_bitfield;
1692       return TC_NotApplicable;
1693     }
1694 
1695     DestType = Self.Context.getPointerType(DestTypeTmp->getPointeeType());
1696     SrcType = Self.Context.getPointerType(SrcType);
1697   }
1698 
1699   // C++ 5.2.11p5: For a const_cast involving pointers to data members [...]
1700   //   the rules for const_cast are the same as those used for pointers.
1701 
1702   if (!DestType->isPointerType() &&
1703       !DestType->isMemberPointerType() &&
1704       !DestType->isObjCObjectPointerType()) {
1705     // Cannot cast to non-pointer, non-reference type. Note that, if DestType
1706     // was a reference type, we converted it to a pointer above.
1707     // The status of rvalue references isn't entirely clear, but it looks like
1708     // conversion to them is simply invalid.
1709     // C++ 5.2.11p3: For two pointer types [...]
1710     if (!CStyle)
1711       msg = diag::err_bad_const_cast_dest;
1712     return TC_NotApplicable;
1713   }
1714   if (DestType->isFunctionPointerType() ||
1715       DestType->isMemberFunctionPointerType()) {
1716     // Cannot cast direct function pointers.
1717     // C++ 5.2.11p2: [...] where T is any object type or the void type [...]
1718     // T is the ultimate pointee of source and target type.
1719     if (!CStyle)
1720       msg = diag::err_bad_const_cast_dest;
1721     return TC_NotApplicable;
1722   }
1723 
1724   // C++ [expr.const.cast]p3:
1725   //   "For two similar types T1 and T2, [...]"
1726   //
1727   // We only allow a const_cast to change cvr-qualifiers, not other kinds of
1728   // type qualifiers. (Likewise, we ignore other changes when determining
1729   // whether a cast casts away constness.)
1730   if (!Self.Context.hasCvrSimilarType(SrcType, DestType))
1731     return TC_NotApplicable;
1732 
1733   if (NeedToMaterializeTemporary)
1734     // This is a const_cast from a class prvalue to an rvalue reference type.
1735     // Materialize a temporary to store the result of the conversion.
1736     SrcExpr = Self.CreateMaterializeTemporaryExpr(SrcExpr.get()->getType(),
1737                                                   SrcExpr.get(),
1738                                                   /*IsLValueReference*/ false);
1739 
1740   return TC_Success;
1741 }
1742 
1743 // Checks for undefined behavior in reinterpret_cast.
1744 // The cases that is checked for is:
1745 // *reinterpret_cast<T*>(&a)
1746 // reinterpret_cast<T&>(a)
1747 // where accessing 'a' as type 'T' will result in undefined behavior.
1748 void Sema::CheckCompatibleReinterpretCast(QualType SrcType, QualType DestType,
1749                                           bool IsDereference,
1750                                           SourceRange Range) {
1751   unsigned DiagID = IsDereference ?
1752                         diag::warn_pointer_indirection_from_incompatible_type :
1753                         diag::warn_undefined_reinterpret_cast;
1754 
1755   if (Diags.isIgnored(DiagID, Range.getBegin()))
1756     return;
1757 
1758   QualType SrcTy, DestTy;
1759   if (IsDereference) {
1760     if (!SrcType->getAs<PointerType>() || !DestType->getAs<PointerType>()) {
1761       return;
1762     }
1763     SrcTy = SrcType->getPointeeType();
1764     DestTy = DestType->getPointeeType();
1765   } else {
1766     if (!DestType->getAs<ReferenceType>()) {
1767       return;
1768     }
1769     SrcTy = SrcType;
1770     DestTy = DestType->getPointeeType();
1771   }
1772 
1773   // Cast is compatible if the types are the same.
1774   if (Context.hasSameUnqualifiedType(DestTy, SrcTy)) {
1775     return;
1776   }
1777   // or one of the types is a char or void type
1778   if (DestTy->isAnyCharacterType() || DestTy->isVoidType() ||
1779       SrcTy->isAnyCharacterType() || SrcTy->isVoidType()) {
1780     return;
1781   }
1782   // or one of the types is a tag type.
1783   if (SrcTy->getAs<TagType>() || DestTy->getAs<TagType>()) {
1784     return;
1785   }
1786 
1787   // FIXME: Scoped enums?
1788   if ((SrcTy->isUnsignedIntegerType() && DestTy->isSignedIntegerType()) ||
1789       (SrcTy->isSignedIntegerType() && DestTy->isUnsignedIntegerType())) {
1790     if (Context.getTypeSize(DestTy) == Context.getTypeSize(SrcTy)) {
1791       return;
1792     }
1793   }
1794 
1795   Diag(Range.getBegin(), DiagID) << SrcType << DestType << Range;
1796 }
1797 
1798 static void DiagnoseCastOfObjCSEL(Sema &Self, const ExprResult &SrcExpr,
1799                                   QualType DestType) {
1800   QualType SrcType = SrcExpr.get()->getType();
1801   if (Self.Context.hasSameType(SrcType, DestType))
1802     return;
1803   if (const PointerType *SrcPtrTy = SrcType->getAs<PointerType>())
1804     if (SrcPtrTy->isObjCSelType()) {
1805       QualType DT = DestType;
1806       if (isa<PointerType>(DestType))
1807         DT = DestType->getPointeeType();
1808       if (!DT.getUnqualifiedType()->isVoidType())
1809         Self.Diag(SrcExpr.get()->getExprLoc(),
1810                   diag::warn_cast_pointer_from_sel)
1811         << SrcType << DestType << SrcExpr.get()->getSourceRange();
1812     }
1813 }
1814 
1815 /// Diagnose casts that change the calling convention of a pointer to a function
1816 /// defined in the current TU.
1817 static void DiagnoseCallingConvCast(Sema &Self, const ExprResult &SrcExpr,
1818                                     QualType DstType, SourceRange OpRange) {
1819   // Check if this cast would change the calling convention of a function
1820   // pointer type.
1821   QualType SrcType = SrcExpr.get()->getType();
1822   if (Self.Context.hasSameType(SrcType, DstType) ||
1823       !SrcType->isFunctionPointerType() || !DstType->isFunctionPointerType())
1824     return;
1825   const auto *SrcFTy =
1826       SrcType->castAs<PointerType>()->getPointeeType()->castAs<FunctionType>();
1827   const auto *DstFTy =
1828       DstType->castAs<PointerType>()->getPointeeType()->castAs<FunctionType>();
1829   CallingConv SrcCC = SrcFTy->getCallConv();
1830   CallingConv DstCC = DstFTy->getCallConv();
1831   if (SrcCC == DstCC)
1832     return;
1833 
1834   // We have a calling convention cast. Check if the source is a pointer to a
1835   // known, specific function that has already been defined.
1836   Expr *Src = SrcExpr.get()->IgnoreParenImpCasts();
1837   if (auto *UO = dyn_cast<UnaryOperator>(Src))
1838     if (UO->getOpcode() == UO_AddrOf)
1839       Src = UO->getSubExpr()->IgnoreParenImpCasts();
1840   auto *DRE = dyn_cast<DeclRefExpr>(Src);
1841   if (!DRE)
1842     return;
1843   auto *FD = dyn_cast<FunctionDecl>(DRE->getDecl());
1844   if (!FD)
1845     return;
1846 
1847   // Only warn if we are casting from the default convention to a non-default
1848   // convention. This can happen when the programmer forgot to apply the calling
1849   // convention to the function declaration and then inserted this cast to
1850   // satisfy the type system.
1851   CallingConv DefaultCC = Self.getASTContext().getDefaultCallingConvention(
1852       FD->isVariadic(), FD->isCXXInstanceMember());
1853   if (DstCC == DefaultCC || SrcCC != DefaultCC)
1854     return;
1855 
1856   // Diagnose this cast, as it is probably bad.
1857   StringRef SrcCCName = FunctionType::getNameForCallConv(SrcCC);
1858   StringRef DstCCName = FunctionType::getNameForCallConv(DstCC);
1859   Self.Diag(OpRange.getBegin(), diag::warn_cast_calling_conv)
1860       << SrcCCName << DstCCName << OpRange;
1861 
1862   // The checks above are cheaper than checking if the diagnostic is enabled.
1863   // However, it's worth checking if the warning is enabled before we construct
1864   // a fixit.
1865   if (Self.Diags.isIgnored(diag::warn_cast_calling_conv, OpRange.getBegin()))
1866     return;
1867 
1868   // Try to suggest a fixit to change the calling convention of the function
1869   // whose address was taken. Try to use the latest macro for the convention.
1870   // For example, users probably want to write "WINAPI" instead of "__stdcall"
1871   // to match the Windows header declarations.
1872   SourceLocation NameLoc = FD->getFirstDecl()->getNameInfo().getLoc();
1873   Preprocessor &PP = Self.getPreprocessor();
1874   SmallVector<TokenValue, 6> AttrTokens;
1875   SmallString<64> CCAttrText;
1876   llvm::raw_svector_ostream OS(CCAttrText);
1877   if (Self.getLangOpts().MicrosoftExt) {
1878     // __stdcall or __vectorcall
1879     OS << "__" << DstCCName;
1880     IdentifierInfo *II = PP.getIdentifierInfo(OS.str());
1881     AttrTokens.push_back(II->isKeyword(Self.getLangOpts())
1882                              ? TokenValue(II->getTokenID())
1883                              : TokenValue(II));
1884   } else {
1885     // __attribute__((stdcall)) or __attribute__((vectorcall))
1886     OS << "__attribute__((" << DstCCName << "))";
1887     AttrTokens.push_back(tok::kw___attribute);
1888     AttrTokens.push_back(tok::l_paren);
1889     AttrTokens.push_back(tok::l_paren);
1890     IdentifierInfo *II = PP.getIdentifierInfo(DstCCName);
1891     AttrTokens.push_back(II->isKeyword(Self.getLangOpts())
1892                              ? TokenValue(II->getTokenID())
1893                              : TokenValue(II));
1894     AttrTokens.push_back(tok::r_paren);
1895     AttrTokens.push_back(tok::r_paren);
1896   }
1897   StringRef AttrSpelling = PP.getLastMacroWithSpelling(NameLoc, AttrTokens);
1898   if (!AttrSpelling.empty())
1899     CCAttrText = AttrSpelling;
1900   OS << ' ';
1901   Self.Diag(NameLoc, diag::note_change_calling_conv_fixit)
1902       << FD << DstCCName << FixItHint::CreateInsertion(NameLoc, CCAttrText);
1903 }
1904 
1905 static void checkIntToPointerCast(bool CStyle, SourceLocation Loc,
1906                                   const Expr *SrcExpr, QualType DestType,
1907                                   Sema &Self) {
1908   QualType SrcType = SrcExpr->getType();
1909 
1910   // Not warning on reinterpret_cast, boolean, constant expressions, etc
1911   // are not explicit design choices, but consistent with GCC's behavior.
1912   // Feel free to modify them if you've reason/evidence for an alternative.
1913   if (CStyle && SrcType->isIntegralType(Self.Context)
1914       && !SrcType->isBooleanType()
1915       && !SrcType->isEnumeralType()
1916       && !SrcExpr->isIntegerConstantExpr(Self.Context)
1917       && Self.Context.getTypeSize(DestType) >
1918          Self.Context.getTypeSize(SrcType)) {
1919     // Separate between casts to void* and non-void* pointers.
1920     // Some APIs use (abuse) void* for something like a user context,
1921     // and often that value is an integer even if it isn't a pointer itself.
1922     // Having a separate warning flag allows users to control the warning
1923     // for their workflow.
1924     unsigned Diag = DestType->isVoidPointerType() ?
1925                       diag::warn_int_to_void_pointer_cast
1926                     : diag::warn_int_to_pointer_cast;
1927     Self.Diag(Loc, Diag) << SrcType << DestType;
1928   }
1929 }
1930 
1931 static bool fixOverloadedReinterpretCastExpr(Sema &Self, QualType DestType,
1932                                              ExprResult &Result) {
1933   // We can only fix an overloaded reinterpret_cast if
1934   // - it is a template with explicit arguments that resolves to an lvalue
1935   //   unambiguously, or
1936   // - it is the only function in an overload set that may have its address
1937   //   taken.
1938 
1939   Expr *E = Result.get();
1940   // TODO: what if this fails because of DiagnoseUseOfDecl or something
1941   // like it?
1942   if (Self.ResolveAndFixSingleFunctionTemplateSpecialization(
1943           Result,
1944           Expr::getValueKindForType(DestType) == VK_RValue // Convert Fun to Ptr
1945           ) &&
1946       Result.isUsable())
1947     return true;
1948 
1949   // No guarantees that ResolveAndFixSingleFunctionTemplateSpecialization
1950   // preserves Result.
1951   Result = E;
1952   if (!Self.resolveAndFixAddressOfOnlyViableOverloadCandidate(
1953           Result, /*DoFunctionPointerConversion=*/true))
1954     return false;
1955   return Result.isUsable();
1956 }
1957 
1958 static bool IsAddressSpaceConversion(QualType SrcType, QualType DestType) {
1959   return SrcType->isPointerType() && DestType->isPointerType() &&
1960          SrcType->getAs<PointerType>()->getPointeeType().getAddressSpace() !=
1961              DestType->getAs<PointerType>()->getPointeeType().getAddressSpace();
1962 }
1963 
1964 static TryCastResult TryReinterpretCast(Sema &Self, ExprResult &SrcExpr,
1965                                         QualType DestType, bool CStyle,
1966                                         SourceRange OpRange,
1967                                         unsigned &msg,
1968                                         CastKind &Kind) {
1969   bool IsLValueCast = false;
1970 
1971   DestType = Self.Context.getCanonicalType(DestType);
1972   QualType SrcType = SrcExpr.get()->getType();
1973 
1974   // Is the source an overloaded name? (i.e. &foo)
1975   // If so, reinterpret_cast generally can not help us here (13.4, p1, bullet 5)
1976   if (SrcType == Self.Context.OverloadTy) {
1977     ExprResult FixedExpr = SrcExpr;
1978     if (!fixOverloadedReinterpretCastExpr(Self, DestType, FixedExpr))
1979       return TC_NotApplicable;
1980 
1981     assert(FixedExpr.isUsable() && "Invalid result fixing overloaded expr");
1982     SrcExpr = FixedExpr;
1983     SrcType = SrcExpr.get()->getType();
1984   }
1985 
1986   if (const ReferenceType *DestTypeTmp = DestType->getAs<ReferenceType>()) {
1987     if (!SrcExpr.get()->isGLValue()) {
1988       // Cannot cast non-glvalue to (lvalue or rvalue) reference type. See the
1989       // similar comment in const_cast.
1990       msg = diag::err_bad_cxx_cast_rvalue;
1991       return TC_NotApplicable;
1992     }
1993 
1994     if (!CStyle) {
1995       Self.CheckCompatibleReinterpretCast(SrcType, DestType,
1996                                           /*isDereference=*/false, OpRange);
1997     }
1998 
1999     // C++ 5.2.10p10: [...] a reference cast reinterpret_cast<T&>(x) has the
2000     //   same effect as the conversion *reinterpret_cast<T*>(&x) with the
2001     //   built-in & and * operators.
2002 
2003     const char *inappropriate = nullptr;
2004     switch (SrcExpr.get()->getObjectKind()) {
2005     case OK_Ordinary:
2006       break;
2007     case OK_BitField:
2008       msg = diag::err_bad_cxx_cast_bitfield;
2009       return TC_NotApplicable;
2010       // FIXME: Use a specific diagnostic for the rest of these cases.
2011     case OK_VectorComponent: inappropriate = "vector element";      break;
2012     case OK_ObjCProperty:    inappropriate = "property expression"; break;
2013     case OK_ObjCSubscript:   inappropriate = "container subscripting expression";
2014                              break;
2015     }
2016     if (inappropriate) {
2017       Self.Diag(OpRange.getBegin(), diag::err_bad_reinterpret_cast_reference)
2018           << inappropriate << DestType
2019           << OpRange << SrcExpr.get()->getSourceRange();
2020       msg = 0; SrcExpr = ExprError();
2021       return TC_NotApplicable;
2022     }
2023 
2024     // This code does this transformation for the checked types.
2025     DestType = Self.Context.getPointerType(DestTypeTmp->getPointeeType());
2026     SrcType = Self.Context.getPointerType(SrcType);
2027 
2028     IsLValueCast = true;
2029   }
2030 
2031   // Canonicalize source for comparison.
2032   SrcType = Self.Context.getCanonicalType(SrcType);
2033 
2034   const MemberPointerType *DestMemPtr = DestType->getAs<MemberPointerType>(),
2035                           *SrcMemPtr = SrcType->getAs<MemberPointerType>();
2036   if (DestMemPtr && SrcMemPtr) {
2037     // C++ 5.2.10p9: An rvalue of type "pointer to member of X of type T1"
2038     //   can be explicitly converted to an rvalue of type "pointer to member
2039     //   of Y of type T2" if T1 and T2 are both function types or both object
2040     //   types.
2041     if (DestMemPtr->isMemberFunctionPointer() !=
2042         SrcMemPtr->isMemberFunctionPointer())
2043       return TC_NotApplicable;
2044 
2045     if (Self.Context.getTargetInfo().getCXXABI().isMicrosoft()) {
2046       // We need to determine the inheritance model that the class will use if
2047       // haven't yet.
2048       (void)Self.isCompleteType(OpRange.getBegin(), SrcType);
2049       (void)Self.isCompleteType(OpRange.getBegin(), DestType);
2050     }
2051 
2052     // Don't allow casting between member pointers of different sizes.
2053     if (Self.Context.getTypeSize(DestMemPtr) !=
2054         Self.Context.getTypeSize(SrcMemPtr)) {
2055       msg = diag::err_bad_cxx_cast_member_pointer_size;
2056       return TC_Failed;
2057     }
2058 
2059     // C++ 5.2.10p2: The reinterpret_cast operator shall not cast away
2060     //   constness.
2061     // A reinterpret_cast followed by a const_cast can, though, so in C-style,
2062     // we accept it.
2063     if (auto CACK =
2064             CastsAwayConstness(Self, SrcType, DestType, /*CheckCVR=*/!CStyle,
2065                                /*CheckObjCLifetime=*/CStyle))
2066       return getCastAwayConstnessCastKind(CACK, msg);
2067 
2068     // A valid member pointer cast.
2069     assert(!IsLValueCast);
2070     Kind = CK_ReinterpretMemberPointer;
2071     return TC_Success;
2072   }
2073 
2074   // See below for the enumeral issue.
2075   if (SrcType->isNullPtrType() && DestType->isIntegralType(Self.Context)) {
2076     // C++0x 5.2.10p4: A pointer can be explicitly converted to any integral
2077     //   type large enough to hold it. A value of std::nullptr_t can be
2078     //   converted to an integral type; the conversion has the same meaning
2079     //   and validity as a conversion of (void*)0 to the integral type.
2080     if (Self.Context.getTypeSize(SrcType) >
2081         Self.Context.getTypeSize(DestType)) {
2082       msg = diag::err_bad_reinterpret_cast_small_int;
2083       return TC_Failed;
2084     }
2085     Kind = CK_PointerToIntegral;
2086     return TC_Success;
2087   }
2088 
2089   // Allow reinterpret_casts between vectors of the same size and
2090   // between vectors and integers of the same size.
2091   bool destIsVector = DestType->isVectorType();
2092   bool srcIsVector = SrcType->isVectorType();
2093   if (srcIsVector || destIsVector) {
2094     // The non-vector type, if any, must have integral type.  This is
2095     // the same rule that C vector casts use; note, however, that enum
2096     // types are not integral in C++.
2097     if ((!destIsVector && !DestType->isIntegralType(Self.Context)) ||
2098         (!srcIsVector && !SrcType->isIntegralType(Self.Context)))
2099       return TC_NotApplicable;
2100 
2101     // The size we want to consider is eltCount * eltSize.
2102     // That's exactly what the lax-conversion rules will check.
2103     if (Self.areLaxCompatibleVectorTypes(SrcType, DestType)) {
2104       Kind = CK_BitCast;
2105       return TC_Success;
2106     }
2107 
2108     // Otherwise, pick a reasonable diagnostic.
2109     if (!destIsVector)
2110       msg = diag::err_bad_cxx_cast_vector_to_scalar_different_size;
2111     else if (!srcIsVector)
2112       msg = diag::err_bad_cxx_cast_scalar_to_vector_different_size;
2113     else
2114       msg = diag::err_bad_cxx_cast_vector_to_vector_different_size;
2115 
2116     return TC_Failed;
2117   }
2118 
2119   if (SrcType == DestType) {
2120     // C++ 5.2.10p2 has a note that mentions that, subject to all other
2121     // restrictions, a cast to the same type is allowed so long as it does not
2122     // cast away constness. In C++98, the intent was not entirely clear here,
2123     // since all other paragraphs explicitly forbid casts to the same type.
2124     // C++11 clarifies this case with p2.
2125     //
2126     // The only allowed types are: integral, enumeration, pointer, or
2127     // pointer-to-member types.  We also won't restrict Obj-C pointers either.
2128     Kind = CK_NoOp;
2129     TryCastResult Result = TC_NotApplicable;
2130     if (SrcType->isIntegralOrEnumerationType() ||
2131         SrcType->isAnyPointerType() ||
2132         SrcType->isMemberPointerType() ||
2133         SrcType->isBlockPointerType()) {
2134       Result = TC_Success;
2135     }
2136     return Result;
2137   }
2138 
2139   bool destIsPtr = DestType->isAnyPointerType() ||
2140                    DestType->isBlockPointerType();
2141   bool srcIsPtr = SrcType->isAnyPointerType() ||
2142                   SrcType->isBlockPointerType();
2143   if (!destIsPtr && !srcIsPtr) {
2144     // Except for std::nullptr_t->integer and lvalue->reference, which are
2145     // handled above, at least one of the two arguments must be a pointer.
2146     return TC_NotApplicable;
2147   }
2148 
2149   if (DestType->isIntegralType(Self.Context)) {
2150     assert(srcIsPtr && "One type must be a pointer");
2151     // C++ 5.2.10p4: A pointer can be explicitly converted to any integral
2152     //   type large enough to hold it; except in Microsoft mode, where the
2153     //   integral type size doesn't matter (except we don't allow bool).
2154     bool MicrosoftException = Self.getLangOpts().MicrosoftExt &&
2155                               !DestType->isBooleanType();
2156     if ((Self.Context.getTypeSize(SrcType) >
2157          Self.Context.getTypeSize(DestType)) &&
2158          !MicrosoftException) {
2159       msg = diag::err_bad_reinterpret_cast_small_int;
2160       return TC_Failed;
2161     }
2162     Kind = CK_PointerToIntegral;
2163     return TC_Success;
2164   }
2165 
2166   if (SrcType->isIntegralOrEnumerationType()) {
2167     assert(destIsPtr && "One type must be a pointer");
2168     checkIntToPointerCast(CStyle, OpRange.getBegin(), SrcExpr.get(), DestType,
2169                           Self);
2170     // C++ 5.2.10p5: A value of integral or enumeration type can be explicitly
2171     //   converted to a pointer.
2172     // C++ 5.2.10p9: [Note: ...a null pointer constant of integral type is not
2173     //   necessarily converted to a null pointer value.]
2174     Kind = CK_IntegralToPointer;
2175     return TC_Success;
2176   }
2177 
2178   if (!destIsPtr || !srcIsPtr) {
2179     // With the valid non-pointer conversions out of the way, we can be even
2180     // more stringent.
2181     return TC_NotApplicable;
2182   }
2183 
2184   // Cannot convert between block pointers and Objective-C object pointers.
2185   if ((SrcType->isBlockPointerType() && DestType->isObjCObjectPointerType()) ||
2186       (DestType->isBlockPointerType() && SrcType->isObjCObjectPointerType()))
2187     return TC_NotApplicable;
2188 
2189   // C++ 5.2.10p2: The reinterpret_cast operator shall not cast away constness.
2190   // The C-style cast operator can.
2191   TryCastResult SuccessResult = TC_Success;
2192   if (auto CACK =
2193           CastsAwayConstness(Self, SrcType, DestType, /*CheckCVR=*/!CStyle,
2194                              /*CheckObjCLifetime=*/CStyle))
2195     SuccessResult = getCastAwayConstnessCastKind(CACK, msg);
2196 
2197   if (IsLValueCast) {
2198     Kind = CK_LValueBitCast;
2199   } else if (DestType->isObjCObjectPointerType()) {
2200     Kind = Self.PrepareCastToObjCObjectPointer(SrcExpr);
2201   } else if (DestType->isBlockPointerType()) {
2202     if (!SrcType->isBlockPointerType()) {
2203       Kind = CK_AnyPointerToBlockPointerCast;
2204     } else {
2205       Kind = CK_BitCast;
2206     }
2207   } else if (IsAddressSpaceConversion(SrcType, DestType)) {
2208     Kind = CK_AddressSpaceConversion;
2209   } else {
2210     Kind = CK_BitCast;
2211   }
2212 
2213   // Any pointer can be cast to an Objective-C pointer type with a C-style
2214   // cast.
2215   if (CStyle && DestType->isObjCObjectPointerType()) {
2216     return SuccessResult;
2217   }
2218   if (CStyle)
2219     DiagnoseCastOfObjCSEL(Self, SrcExpr, DestType);
2220 
2221   DiagnoseCallingConvCast(Self, SrcExpr, DestType, OpRange);
2222 
2223   // Not casting away constness, so the only remaining check is for compatible
2224   // pointer categories.
2225 
2226   if (SrcType->isFunctionPointerType()) {
2227     if (DestType->isFunctionPointerType()) {
2228       // C++ 5.2.10p6: A pointer to a function can be explicitly converted to
2229       // a pointer to a function of a different type.
2230       return SuccessResult;
2231     }
2232 
2233     // C++0x 5.2.10p8: Converting a pointer to a function into a pointer to
2234     //   an object type or vice versa is conditionally-supported.
2235     // Compilers support it in C++03 too, though, because it's necessary for
2236     // casting the return value of dlsym() and GetProcAddress().
2237     // FIXME: Conditionally-supported behavior should be configurable in the
2238     // TargetInfo or similar.
2239     Self.Diag(OpRange.getBegin(),
2240               Self.getLangOpts().CPlusPlus11 ?
2241                 diag::warn_cxx98_compat_cast_fn_obj : diag::ext_cast_fn_obj)
2242       << OpRange;
2243     return SuccessResult;
2244   }
2245 
2246   if (DestType->isFunctionPointerType()) {
2247     // See above.
2248     Self.Diag(OpRange.getBegin(),
2249               Self.getLangOpts().CPlusPlus11 ?
2250                 diag::warn_cxx98_compat_cast_fn_obj : diag::ext_cast_fn_obj)
2251       << OpRange;
2252     return SuccessResult;
2253   }
2254 
2255   // C++ 5.2.10p7: A pointer to an object can be explicitly converted to
2256   //   a pointer to an object of different type.
2257   // Void pointers are not specified, but supported by every compiler out there.
2258   // So we finish by allowing everything that remains - it's got to be two
2259   // object pointers.
2260   return SuccessResult;
2261 }
2262 
2263 void CastOperation::CheckCXXCStyleCast(bool FunctionalStyle,
2264                                        bool ListInitialization) {
2265   assert(Self.getLangOpts().CPlusPlus);
2266 
2267   // Handle placeholders.
2268   if (isPlaceholder()) {
2269     // C-style casts can resolve __unknown_any types.
2270     if (claimPlaceholder(BuiltinType::UnknownAny)) {
2271       SrcExpr = Self.checkUnknownAnyCast(DestRange, DestType,
2272                                          SrcExpr.get(), Kind,
2273                                          ValueKind, BasePath);
2274       return;
2275     }
2276 
2277     checkNonOverloadPlaceholders();
2278     if (SrcExpr.isInvalid())
2279       return;
2280   }
2281 
2282   // C++ 5.2.9p4: Any expression can be explicitly converted to type "cv void".
2283   // This test is outside everything else because it's the only case where
2284   // a non-lvalue-reference target type does not lead to decay.
2285   if (DestType->isVoidType()) {
2286     Kind = CK_ToVoid;
2287 
2288     if (claimPlaceholder(BuiltinType::Overload)) {
2289       Self.ResolveAndFixSingleFunctionTemplateSpecialization(
2290                   SrcExpr, /* Decay Function to ptr */ false,
2291                   /* Complain */ true, DestRange, DestType,
2292                   diag::err_bad_cstyle_cast_overload);
2293       if (SrcExpr.isInvalid())
2294         return;
2295     }
2296 
2297     SrcExpr = Self.IgnoredValueConversions(SrcExpr.get());
2298     return;
2299   }
2300 
2301   // If the type is dependent, we won't do any other semantic analysis now.
2302   if (DestType->isDependentType() || SrcExpr.get()->isTypeDependent() ||
2303       SrcExpr.get()->isValueDependent()) {
2304     assert(Kind == CK_Dependent);
2305     return;
2306   }
2307 
2308   if (ValueKind == VK_RValue && !DestType->isRecordType() &&
2309       !isPlaceholder(BuiltinType::Overload)) {
2310     SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
2311     if (SrcExpr.isInvalid())
2312       return;
2313   }
2314 
2315   // AltiVec vector initialization with a single literal.
2316   if (const VectorType *vecTy = DestType->getAs<VectorType>())
2317     if (vecTy->getVectorKind() == VectorType::AltiVecVector
2318         && (SrcExpr.get()->getType()->isIntegerType()
2319             || SrcExpr.get()->getType()->isFloatingType())) {
2320       Kind = CK_VectorSplat;
2321       SrcExpr = Self.prepareVectorSplat(DestType, SrcExpr.get());
2322       return;
2323     }
2324 
2325   // C++ [expr.cast]p5: The conversions performed by
2326   //   - a const_cast,
2327   //   - a static_cast,
2328   //   - a static_cast followed by a const_cast,
2329   //   - a reinterpret_cast, or
2330   //   - a reinterpret_cast followed by a const_cast,
2331   //   can be performed using the cast notation of explicit type conversion.
2332   //   [...] If a conversion can be interpreted in more than one of the ways
2333   //   listed above, the interpretation that appears first in the list is used,
2334   //   even if a cast resulting from that interpretation is ill-formed.
2335   // In plain language, this means trying a const_cast ...
2336   unsigned msg = diag::err_bad_cxx_cast_generic;
2337   TryCastResult tcr = TryConstCast(Self, SrcExpr, DestType,
2338                                    /*CStyle*/true, msg);
2339   if (SrcExpr.isInvalid())
2340     return;
2341   if (isValidCast(tcr))
2342     Kind = CK_NoOp;
2343 
2344   Sema::CheckedConversionKind CCK
2345     = FunctionalStyle? Sema::CCK_FunctionalCast
2346                      : Sema::CCK_CStyleCast;
2347   if (tcr == TC_NotApplicable) {
2348     // ... or if that is not possible, a static_cast, ignoring const, ...
2349     tcr = TryStaticCast(Self, SrcExpr, DestType, CCK, OpRange,
2350                         msg, Kind, BasePath, ListInitialization);
2351     if (SrcExpr.isInvalid())
2352       return;
2353 
2354     if (tcr == TC_NotApplicable) {
2355       // ... and finally a reinterpret_cast, ignoring const.
2356       tcr = TryReinterpretCast(Self, SrcExpr, DestType, /*CStyle*/true,
2357                                OpRange, msg, Kind);
2358       if (SrcExpr.isInvalid())
2359         return;
2360     }
2361   }
2362 
2363   if (Self.getLangOpts().allowsNonTrivialObjCLifetimeQualifiers() &&
2364       isValidCast(tcr))
2365     checkObjCConversion(CCK);
2366 
2367   if (tcr != TC_Success && msg != 0) {
2368     if (SrcExpr.get()->getType() == Self.Context.OverloadTy) {
2369       DeclAccessPair Found;
2370       FunctionDecl *Fn = Self.ResolveAddressOfOverloadedFunction(SrcExpr.get(),
2371                                 DestType,
2372                                 /*Complain*/ true,
2373                                 Found);
2374       if (Fn) {
2375         // If DestType is a function type (not to be confused with the function
2376         // pointer type), it will be possible to resolve the function address,
2377         // but the type cast should be considered as failure.
2378         OverloadExpr *OE = OverloadExpr::find(SrcExpr.get()).Expression;
2379         Self.Diag(OpRange.getBegin(), diag::err_bad_cstyle_cast_overload)
2380           << OE->getName() << DestType << OpRange
2381           << OE->getQualifierLoc().getSourceRange();
2382         Self.NoteAllOverloadCandidates(SrcExpr.get());
2383       }
2384     } else {
2385       diagnoseBadCast(Self, msg, (FunctionalStyle ? CT_Functional : CT_CStyle),
2386                       OpRange, SrcExpr.get(), DestType, ListInitialization);
2387     }
2388   }
2389 
2390   if (isValidCast(tcr)) {
2391     if (Kind == CK_BitCast)
2392       checkCastAlign();
2393   } else {
2394     SrcExpr = ExprError();
2395   }
2396 }
2397 
2398 /// DiagnoseBadFunctionCast - Warn whenever a function call is cast to a
2399 ///  non-matching type. Such as enum function call to int, int call to
2400 /// pointer; etc. Cast to 'void' is an exception.
2401 static void DiagnoseBadFunctionCast(Sema &Self, const ExprResult &SrcExpr,
2402                                   QualType DestType) {
2403   if (Self.Diags.isIgnored(diag::warn_bad_function_cast,
2404                            SrcExpr.get()->getExprLoc()))
2405     return;
2406 
2407   if (!isa<CallExpr>(SrcExpr.get()))
2408     return;
2409 
2410   QualType SrcType = SrcExpr.get()->getType();
2411   if (DestType.getUnqualifiedType()->isVoidType())
2412     return;
2413   if ((SrcType->isAnyPointerType() || SrcType->isBlockPointerType())
2414       && (DestType->isAnyPointerType() || DestType->isBlockPointerType()))
2415     return;
2416   if (SrcType->isIntegerType() && DestType->isIntegerType() &&
2417       (SrcType->isBooleanType() == DestType->isBooleanType()) &&
2418       (SrcType->isEnumeralType() == DestType->isEnumeralType()))
2419     return;
2420   if (SrcType->isRealFloatingType() && DestType->isRealFloatingType())
2421     return;
2422   if (SrcType->isEnumeralType() && DestType->isEnumeralType())
2423     return;
2424   if (SrcType->isComplexType() && DestType->isComplexType())
2425     return;
2426   if (SrcType->isComplexIntegerType() && DestType->isComplexIntegerType())
2427     return;
2428 
2429   Self.Diag(SrcExpr.get()->getExprLoc(),
2430             diag::warn_bad_function_cast)
2431             << SrcType << DestType << SrcExpr.get()->getSourceRange();
2432 }
2433 
2434 /// Check the semantics of a C-style cast operation, in C.
2435 void CastOperation::CheckCStyleCast() {
2436   assert(!Self.getLangOpts().CPlusPlus);
2437 
2438   // C-style casts can resolve __unknown_any types.
2439   if (claimPlaceholder(BuiltinType::UnknownAny)) {
2440     SrcExpr = Self.checkUnknownAnyCast(DestRange, DestType,
2441                                        SrcExpr.get(), Kind,
2442                                        ValueKind, BasePath);
2443     return;
2444   }
2445 
2446   // C99 6.5.4p2: the cast type needs to be void or scalar and the expression
2447   // type needs to be scalar.
2448   if (DestType->isVoidType()) {
2449     // We don't necessarily do lvalue-to-rvalue conversions on this.
2450     SrcExpr = Self.IgnoredValueConversions(SrcExpr.get());
2451     if (SrcExpr.isInvalid())
2452       return;
2453 
2454     // Cast to void allows any expr type.
2455     Kind = CK_ToVoid;
2456     return;
2457   }
2458 
2459   // Overloads are allowed with C extensions, so we need to support them.
2460   if (SrcExpr.get()->getType() == Self.Context.OverloadTy) {
2461     DeclAccessPair DAP;
2462     if (FunctionDecl *FD = Self.ResolveAddressOfOverloadedFunction(
2463             SrcExpr.get(), DestType, /*Complain=*/true, DAP))
2464       SrcExpr = Self.FixOverloadedFunctionReference(SrcExpr.get(), DAP, FD);
2465     else
2466       return;
2467     assert(SrcExpr.isUsable());
2468   }
2469   SrcExpr = Self.DefaultFunctionArrayLvalueConversion(SrcExpr.get());
2470   if (SrcExpr.isInvalid())
2471     return;
2472   QualType SrcType = SrcExpr.get()->getType();
2473 
2474   assert(!SrcType->isPlaceholderType());
2475 
2476   // OpenCL v1 s6.5: Casting a pointer to address space A to a pointer to
2477   // address space B is illegal.
2478   if (Self.getLangOpts().OpenCL && DestType->isPointerType() &&
2479       SrcType->isPointerType()) {
2480     const PointerType *DestPtr = DestType->getAs<PointerType>();
2481     if (!DestPtr->isAddressSpaceOverlapping(*SrcType->getAs<PointerType>())) {
2482       Self.Diag(OpRange.getBegin(),
2483                 diag::err_typecheck_incompatible_address_space)
2484           << SrcType << DestType << Sema::AA_Casting
2485           << SrcExpr.get()->getSourceRange();
2486       SrcExpr = ExprError();
2487       return;
2488     }
2489   }
2490 
2491   if (Self.RequireCompleteType(OpRange.getBegin(), DestType,
2492                                diag::err_typecheck_cast_to_incomplete)) {
2493     SrcExpr = ExprError();
2494     return;
2495   }
2496 
2497   if (!DestType->isScalarType() && !DestType->isVectorType()) {
2498     const RecordType *DestRecordTy = DestType->getAs<RecordType>();
2499 
2500     if (DestRecordTy && Self.Context.hasSameUnqualifiedType(DestType, SrcType)){
2501       // GCC struct/union extension: allow cast to self.
2502       Self.Diag(OpRange.getBegin(), diag::ext_typecheck_cast_nonscalar)
2503         << DestType << SrcExpr.get()->getSourceRange();
2504       Kind = CK_NoOp;
2505       return;
2506     }
2507 
2508     // GCC's cast to union extension.
2509     if (DestRecordTy && DestRecordTy->getDecl()->isUnion()) {
2510       RecordDecl *RD = DestRecordTy->getDecl();
2511       if (CastExpr::getTargetFieldForToUnionCast(RD, SrcType)) {
2512         Self.Diag(OpRange.getBegin(), diag::ext_typecheck_cast_to_union)
2513           << SrcExpr.get()->getSourceRange();
2514         Kind = CK_ToUnion;
2515         return;
2516       } else {
2517         Self.Diag(OpRange.getBegin(), diag::err_typecheck_cast_to_union_no_type)
2518           << SrcType << SrcExpr.get()->getSourceRange();
2519         SrcExpr = ExprError();
2520         return;
2521       }
2522     }
2523 
2524     // OpenCL v2.0 s6.13.10 - Allow casts from '0' to event_t type.
2525     if (Self.getLangOpts().OpenCL && DestType->isEventT()) {
2526       llvm::APSInt CastInt;
2527       if (SrcExpr.get()->EvaluateAsInt(CastInt, Self.Context)) {
2528         if (0 == CastInt) {
2529           Kind = CK_ZeroToOCLEvent;
2530           return;
2531         }
2532         Self.Diag(OpRange.getBegin(),
2533                   diag::err_opencl_cast_non_zero_to_event_t)
2534                   << CastInt.toString(10) << SrcExpr.get()->getSourceRange();
2535         SrcExpr = ExprError();
2536         return;
2537       }
2538     }
2539 
2540     // Reject any other conversions to non-scalar types.
2541     Self.Diag(OpRange.getBegin(), diag::err_typecheck_cond_expect_scalar)
2542       << DestType << SrcExpr.get()->getSourceRange();
2543     SrcExpr = ExprError();
2544     return;
2545   }
2546 
2547   // The type we're casting to is known to be a scalar or vector.
2548 
2549   // Require the operand to be a scalar or vector.
2550   if (!SrcType->isScalarType() && !SrcType->isVectorType()) {
2551     Self.Diag(SrcExpr.get()->getExprLoc(),
2552               diag::err_typecheck_expect_scalar_operand)
2553       << SrcType << SrcExpr.get()->getSourceRange();
2554     SrcExpr = ExprError();
2555     return;
2556   }
2557 
2558   if (DestType->isExtVectorType()) {
2559     SrcExpr = Self.CheckExtVectorCast(OpRange, DestType, SrcExpr.get(), Kind);
2560     return;
2561   }
2562 
2563   if (const VectorType *DestVecTy = DestType->getAs<VectorType>()) {
2564     if (DestVecTy->getVectorKind() == VectorType::AltiVecVector &&
2565           (SrcType->isIntegerType() || SrcType->isFloatingType())) {
2566       Kind = CK_VectorSplat;
2567       SrcExpr = Self.prepareVectorSplat(DestType, SrcExpr.get());
2568     } else if (Self.CheckVectorCast(OpRange, DestType, SrcType, Kind)) {
2569       SrcExpr = ExprError();
2570     }
2571     return;
2572   }
2573 
2574   if (SrcType->isVectorType()) {
2575     if (Self.CheckVectorCast(OpRange, SrcType, DestType, Kind))
2576       SrcExpr = ExprError();
2577     return;
2578   }
2579 
2580   // The source and target types are both scalars, i.e.
2581   //   - arithmetic types (fundamental, enum, and complex)
2582   //   - all kinds of pointers
2583   // Note that member pointers were filtered out with C++, above.
2584 
2585   if (isa<ObjCSelectorExpr>(SrcExpr.get())) {
2586     Self.Diag(SrcExpr.get()->getExprLoc(), diag::err_cast_selector_expr);
2587     SrcExpr = ExprError();
2588     return;
2589   }
2590 
2591   // If either type is a pointer, the other type has to be either an
2592   // integer or a pointer.
2593   if (!DestType->isArithmeticType()) {
2594     if (!SrcType->isIntegralType(Self.Context) && SrcType->isArithmeticType()) {
2595       Self.Diag(SrcExpr.get()->getExprLoc(),
2596                 diag::err_cast_pointer_from_non_pointer_int)
2597         << SrcType << SrcExpr.get()->getSourceRange();
2598       SrcExpr = ExprError();
2599       return;
2600     }
2601     checkIntToPointerCast(/* CStyle */ true, OpRange.getBegin(), SrcExpr.get(),
2602                           DestType, Self);
2603   } else if (!SrcType->isArithmeticType()) {
2604     if (!DestType->isIntegralType(Self.Context) &&
2605         DestType->isArithmeticType()) {
2606       Self.Diag(SrcExpr.get()->getLocStart(),
2607            diag::err_cast_pointer_to_non_pointer_int)
2608         << DestType << SrcExpr.get()->getSourceRange();
2609       SrcExpr = ExprError();
2610       return;
2611     }
2612   }
2613 
2614   if (Self.getLangOpts().OpenCL &&
2615       !Self.getOpenCLOptions().isEnabled("cl_khr_fp16")) {
2616     if (DestType->isHalfType()) {
2617       Self.Diag(SrcExpr.get()->getLocStart(), diag::err_opencl_cast_to_half)
2618         << DestType << SrcExpr.get()->getSourceRange();
2619       SrcExpr = ExprError();
2620       return;
2621     }
2622   }
2623 
2624   // ARC imposes extra restrictions on casts.
2625   if (Self.getLangOpts().allowsNonTrivialObjCLifetimeQualifiers()) {
2626     checkObjCConversion(Sema::CCK_CStyleCast);
2627     if (SrcExpr.isInvalid())
2628       return;
2629 
2630     const PointerType *CastPtr = DestType->getAs<PointerType>();
2631     if (Self.getLangOpts().ObjCAutoRefCount && CastPtr) {
2632       if (const PointerType *ExprPtr = SrcType->getAs<PointerType>()) {
2633         Qualifiers CastQuals = CastPtr->getPointeeType().getQualifiers();
2634         Qualifiers ExprQuals = ExprPtr->getPointeeType().getQualifiers();
2635         if (CastPtr->getPointeeType()->isObjCLifetimeType() &&
2636             ExprPtr->getPointeeType()->isObjCLifetimeType() &&
2637             !CastQuals.compatiblyIncludesObjCLifetime(ExprQuals)) {
2638           Self.Diag(SrcExpr.get()->getLocStart(),
2639                     diag::err_typecheck_incompatible_ownership)
2640             << SrcType << DestType << Sema::AA_Casting
2641             << SrcExpr.get()->getSourceRange();
2642           return;
2643         }
2644       }
2645     }
2646     else if (!Self.CheckObjCARCUnavailableWeakConversion(DestType, SrcType)) {
2647       Self.Diag(SrcExpr.get()->getLocStart(),
2648                 diag::err_arc_convesion_of_weak_unavailable)
2649         << 1 << SrcType << DestType << SrcExpr.get()->getSourceRange();
2650       SrcExpr = ExprError();
2651       return;
2652     }
2653   }
2654 
2655   DiagnoseCastOfObjCSEL(Self, SrcExpr, DestType);
2656   DiagnoseCallingConvCast(Self, SrcExpr, DestType, OpRange);
2657   DiagnoseBadFunctionCast(Self, SrcExpr, DestType);
2658   Kind = Self.PrepareScalarCast(SrcExpr, DestType);
2659   if (SrcExpr.isInvalid())
2660     return;
2661 
2662   if (Kind == CK_BitCast)
2663     checkCastAlign();
2664 }
2665 
2666 /// DiagnoseCastQual - Warn whenever casts discards a qualifiers, be it either
2667 /// const, volatile or both.
2668 static void DiagnoseCastQual(Sema &Self, const ExprResult &SrcExpr,
2669                              QualType DestType) {
2670   if (SrcExpr.isInvalid())
2671     return;
2672 
2673   QualType SrcType = SrcExpr.get()->getType();
2674   if (!((SrcType->isAnyPointerType() && DestType->isAnyPointerType()) ||
2675         DestType->isLValueReferenceType()))
2676     return;
2677 
2678   QualType TheOffendingSrcType, TheOffendingDestType;
2679   Qualifiers CastAwayQualifiers;
2680   if (CastsAwayConstness(Self, SrcType, DestType, true, false,
2681                          &TheOffendingSrcType, &TheOffendingDestType,
2682                          &CastAwayQualifiers) !=
2683       CastAwayConstnessKind::CACK_Similar)
2684     return;
2685 
2686   // FIXME: 'restrict' is not properly handled here.
2687   int qualifiers = -1;
2688   if (CastAwayQualifiers.hasConst() && CastAwayQualifiers.hasVolatile()) {
2689     qualifiers = 0;
2690   } else if (CastAwayQualifiers.hasConst()) {
2691     qualifiers = 1;
2692   } else if (CastAwayQualifiers.hasVolatile()) {
2693     qualifiers = 2;
2694   }
2695   // This is a variant of int **x; const int **y = (const int **)x;
2696   if (qualifiers == -1)
2697     Self.Diag(SrcExpr.get()->getLocStart(), diag::warn_cast_qual2)
2698         << SrcType << DestType;
2699   else
2700     Self.Diag(SrcExpr.get()->getLocStart(), diag::warn_cast_qual)
2701         << TheOffendingSrcType << TheOffendingDestType << qualifiers;
2702 }
2703 
2704 ExprResult Sema::BuildCStyleCastExpr(SourceLocation LPLoc,
2705                                      TypeSourceInfo *CastTypeInfo,
2706                                      SourceLocation RPLoc,
2707                                      Expr *CastExpr) {
2708   CastOperation Op(*this, CastTypeInfo->getType(), CastExpr);
2709   Op.DestRange = CastTypeInfo->getTypeLoc().getSourceRange();
2710   Op.OpRange = SourceRange(LPLoc, CastExpr->getLocEnd());
2711 
2712   if (getLangOpts().CPlusPlus) {
2713     Op.CheckCXXCStyleCast(/*FunctionalStyle=*/ false,
2714                           isa<InitListExpr>(CastExpr));
2715   } else {
2716     Op.CheckCStyleCast();
2717   }
2718 
2719   if (Op.SrcExpr.isInvalid())
2720     return ExprError();
2721 
2722   // -Wcast-qual
2723   DiagnoseCastQual(Op.Self, Op.SrcExpr, Op.DestType);
2724 
2725   return Op.complete(CStyleCastExpr::Create(Context, Op.ResultType,
2726                               Op.ValueKind, Op.Kind, Op.SrcExpr.get(),
2727                               &Op.BasePath, CastTypeInfo, LPLoc, RPLoc));
2728 }
2729 
2730 ExprResult Sema::BuildCXXFunctionalCastExpr(TypeSourceInfo *CastTypeInfo,
2731                                             QualType Type,
2732                                             SourceLocation LPLoc,
2733                                             Expr *CastExpr,
2734                                             SourceLocation RPLoc) {
2735   assert(LPLoc.isValid() && "List-initialization shouldn't get here.");
2736   CastOperation Op(*this, Type, CastExpr);
2737   Op.DestRange = CastTypeInfo->getTypeLoc().getSourceRange();
2738   Op.OpRange = SourceRange(Op.DestRange.getBegin(), CastExpr->getLocEnd());
2739 
2740   Op.CheckCXXCStyleCast(/*FunctionalStyle=*/true, /*ListInit=*/false);
2741   if (Op.SrcExpr.isInvalid())
2742     return ExprError();
2743 
2744   auto *SubExpr = Op.SrcExpr.get();
2745   if (auto *BindExpr = dyn_cast<CXXBindTemporaryExpr>(SubExpr))
2746     SubExpr = BindExpr->getSubExpr();
2747   if (auto *ConstructExpr = dyn_cast<CXXConstructExpr>(SubExpr))
2748     ConstructExpr->setParenOrBraceRange(SourceRange(LPLoc, RPLoc));
2749 
2750   return Op.complete(CXXFunctionalCastExpr::Create(Context, Op.ResultType,
2751                          Op.ValueKind, CastTypeInfo, Op.Kind,
2752                          Op.SrcExpr.get(), &Op.BasePath, LPLoc, RPLoc));
2753 }
2754