1 //===--- SemaExpr.cpp - Semantic Analysis for Expressions -----------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements semantic analysis for expressions.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "clang/Sema/SemaInternal.h"
15 #include "clang/Sema/DelayedDiagnostic.h"
16 #include "clang/Sema/Initialization.h"
17 #include "clang/Sema/Lookup.h"
18 #include "clang/Sema/ScopeInfo.h"
19 #include "clang/Sema/AnalysisBasedWarnings.h"
20 #include "clang/AST/ASTContext.h"
21 #include "clang/AST/ASTConsumer.h"
22 #include "clang/AST/ASTMutationListener.h"
23 #include "clang/AST/CXXInheritance.h"
24 #include "clang/AST/DeclObjC.h"
25 #include "clang/AST/DeclTemplate.h"
26 #include "clang/AST/EvaluatedExprVisitor.h"
27 #include "clang/AST/Expr.h"
28 #include "clang/AST/ExprCXX.h"
29 #include "clang/AST/ExprObjC.h"
30 #include "clang/AST/RecursiveASTVisitor.h"
31 #include "clang/AST/TypeLoc.h"
32 #include "clang/Basic/PartialDiagnostic.h"
33 #include "clang/Basic/SourceManager.h"
34 #include "clang/Basic/TargetInfo.h"
35 #include "clang/Lex/LiteralSupport.h"
36 #include "clang/Lex/Preprocessor.h"
37 #include "clang/Sema/DeclSpec.h"
38 #include "clang/Sema/Designator.h"
39 #include "clang/Sema/Scope.h"
40 #include "clang/Sema/ScopeInfo.h"
41 #include "clang/Sema/ParsedTemplate.h"
42 #include "clang/Sema/SemaFixItUtils.h"
43 #include "clang/Sema/Template.h"
44 #include "TreeTransform.h"
45 using namespace clang;
46 using namespace sema;
47 
48 /// \brief Determine whether the use of this declaration is valid, without
49 /// emitting diagnostics.
50 bool Sema::CanUseDecl(NamedDecl *D) {
51   // See if this is an auto-typed variable whose initializer we are parsing.
52   if (ParsingInitForAutoVars.count(D))
53     return false;
54 
55   // See if this is a deleted function.
56   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
57     if (FD->isDeleted())
58       return false;
59   }
60 
61   // See if this function is unavailable.
62   if (D->getAvailability() == AR_Unavailable &&
63       cast<Decl>(CurContext)->getAvailability() != AR_Unavailable)
64     return false;
65 
66   return true;
67 }
68 
69 static AvailabilityResult DiagnoseAvailabilityOfDecl(Sema &S,
70                               NamedDecl *D, SourceLocation Loc,
71                               const ObjCInterfaceDecl *UnknownObjCClass) {
72   // See if this declaration is unavailable or deprecated.
73   std::string Message;
74   AvailabilityResult Result = D->getAvailability(&Message);
75   if (const EnumConstantDecl *ECD = dyn_cast<EnumConstantDecl>(D))
76     if (Result == AR_Available) {
77       const DeclContext *DC = ECD->getDeclContext();
78       if (const EnumDecl *TheEnumDecl = dyn_cast<EnumDecl>(DC))
79         Result = TheEnumDecl->getAvailability(&Message);
80     }
81 
82   switch (Result) {
83     case AR_Available:
84     case AR_NotYetIntroduced:
85       break;
86 
87     case AR_Deprecated:
88       S.EmitDeprecationWarning(D, Message, Loc, UnknownObjCClass);
89       break;
90 
91     case AR_Unavailable:
92       if (S.getCurContextAvailability() != AR_Unavailable) {
93         if (Message.empty()) {
94           if (!UnknownObjCClass)
95             S.Diag(Loc, diag::err_unavailable) << D->getDeclName();
96           else
97             S.Diag(Loc, diag::warn_unavailable_fwdclass_message)
98               << D->getDeclName();
99         }
100         else
101           S.Diag(Loc, diag::err_unavailable_message)
102             << D->getDeclName() << Message;
103           S.Diag(D->getLocation(), diag::note_unavailable_here)
104           << isa<FunctionDecl>(D) << false;
105       }
106       break;
107     }
108     return Result;
109 }
110 
111 /// \brief Determine whether the use of this declaration is valid, and
112 /// emit any corresponding diagnostics.
113 ///
114 /// This routine diagnoses various problems with referencing
115 /// declarations that can occur when using a declaration. For example,
116 /// it might warn if a deprecated or unavailable declaration is being
117 /// used, or produce an error (and return true) if a C++0x deleted
118 /// function is being used.
119 ///
120 /// \returns true if there was an error (this declaration cannot be
121 /// referenced), false otherwise.
122 ///
123 bool Sema::DiagnoseUseOfDecl(NamedDecl *D, SourceLocation Loc,
124                              const ObjCInterfaceDecl *UnknownObjCClass) {
125   if (getLangOptions().CPlusPlus && isa<FunctionDecl>(D)) {
126     // If there were any diagnostics suppressed by template argument deduction,
127     // emit them now.
128     llvm::DenseMap<Decl *, SmallVector<PartialDiagnosticAt, 1> >::iterator
129       Pos = SuppressedDiagnostics.find(D->getCanonicalDecl());
130     if (Pos != SuppressedDiagnostics.end()) {
131       SmallVectorImpl<PartialDiagnosticAt> &Suppressed = Pos->second;
132       for (unsigned I = 0, N = Suppressed.size(); I != N; ++I)
133         Diag(Suppressed[I].first, Suppressed[I].second);
134 
135       // Clear out the list of suppressed diagnostics, so that we don't emit
136       // them again for this specialization. However, we don't obsolete this
137       // entry from the table, because we want to avoid ever emitting these
138       // diagnostics again.
139       Suppressed.clear();
140     }
141   }
142 
143   // See if this is an auto-typed variable whose initializer we are parsing.
144   if (ParsingInitForAutoVars.count(D)) {
145     Diag(Loc, diag::err_auto_variable_cannot_appear_in_own_initializer)
146       << D->getDeclName();
147     return true;
148   }
149 
150   // See if this is a deleted function.
151   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
152     if (FD->isDeleted()) {
153       Diag(Loc, diag::err_deleted_function_use);
154       Diag(D->getLocation(), diag::note_unavailable_here) << 1 << true;
155       return true;
156     }
157   }
158   DiagnoseAvailabilityOfDecl(*this, D, Loc, UnknownObjCClass);
159 
160   // Warn if this is used but marked unused.
161   if (D->hasAttr<UnusedAttr>())
162     Diag(Loc, diag::warn_used_but_marked_unused) << D->getDeclName();
163   return false;
164 }
165 
166 /// \brief Retrieve the message suffix that should be added to a
167 /// diagnostic complaining about the given function being deleted or
168 /// unavailable.
169 std::string Sema::getDeletedOrUnavailableSuffix(const FunctionDecl *FD) {
170   // FIXME: C++0x implicitly-deleted special member functions could be
171   // detected here so that we could improve diagnostics to say, e.g.,
172   // "base class 'A' had a deleted copy constructor".
173   if (FD->isDeleted())
174     return std::string();
175 
176   std::string Message;
177   if (FD->getAvailability(&Message))
178     return ": " + Message;
179 
180   return std::string();
181 }
182 
183 /// DiagnoseSentinelCalls - This routine checks whether a call or
184 /// message-send is to a declaration with the sentinel attribute, and
185 /// if so, it checks that the requirements of the sentinel are
186 /// satisfied.
187 void Sema::DiagnoseSentinelCalls(NamedDecl *D, SourceLocation Loc,
188                                  Expr **args, unsigned numArgs) {
189   const SentinelAttr *attr = D->getAttr<SentinelAttr>();
190   if (!attr)
191     return;
192 
193   // The number of formal parameters of the declaration.
194   unsigned numFormalParams;
195 
196   // The kind of declaration.  This is also an index into a %select in
197   // the diagnostic.
198   enum CalleeType { CT_Function, CT_Method, CT_Block } calleeType;
199 
200   if (ObjCMethodDecl *MD = dyn_cast<ObjCMethodDecl>(D)) {
201     numFormalParams = MD->param_size();
202     calleeType = CT_Method;
203   } else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
204     numFormalParams = FD->param_size();
205     calleeType = CT_Function;
206   } else if (isa<VarDecl>(D)) {
207     QualType type = cast<ValueDecl>(D)->getType();
208     const FunctionType *fn = 0;
209     if (const PointerType *ptr = type->getAs<PointerType>()) {
210       fn = ptr->getPointeeType()->getAs<FunctionType>();
211       if (!fn) return;
212       calleeType = CT_Function;
213     } else if (const BlockPointerType *ptr = type->getAs<BlockPointerType>()) {
214       fn = ptr->getPointeeType()->castAs<FunctionType>();
215       calleeType = CT_Block;
216     } else {
217       return;
218     }
219 
220     if (const FunctionProtoType *proto = dyn_cast<FunctionProtoType>(fn)) {
221       numFormalParams = proto->getNumArgs();
222     } else {
223       numFormalParams = 0;
224     }
225   } else {
226     return;
227   }
228 
229   // "nullPos" is the number of formal parameters at the end which
230   // effectively count as part of the variadic arguments.  This is
231   // useful if you would prefer to not have *any* formal parameters,
232   // but the language forces you to have at least one.
233   unsigned nullPos = attr->getNullPos();
234   assert((nullPos == 0 || nullPos == 1) && "invalid null position on sentinel");
235   numFormalParams = (nullPos > numFormalParams ? 0 : numFormalParams - nullPos);
236 
237   // The number of arguments which should follow the sentinel.
238   unsigned numArgsAfterSentinel = attr->getSentinel();
239 
240   // If there aren't enough arguments for all the formal parameters,
241   // the sentinel, and the args after the sentinel, complain.
242   if (numArgs < numFormalParams + numArgsAfterSentinel + 1) {
243     Diag(Loc, diag::warn_not_enough_argument) << D->getDeclName();
244     Diag(D->getLocation(), diag::note_sentinel_here) << calleeType;
245     return;
246   }
247 
248   // Otherwise, find the sentinel expression.
249   Expr *sentinelExpr = args[numArgs - numArgsAfterSentinel - 1];
250   if (!sentinelExpr) return;
251   if (sentinelExpr->isValueDependent()) return;
252   if (Context.isSentinelNullExpr(sentinelExpr)) return;
253 
254   // Pick a reasonable string to insert.  Optimistically use 'nil' or
255   // 'NULL' if those are actually defined in the context.  Only use
256   // 'nil' for ObjC methods, where it's much more likely that the
257   // variadic arguments form a list of object pointers.
258   SourceLocation MissingNilLoc
259     = PP.getLocForEndOfToken(sentinelExpr->getLocEnd());
260   std::string NullValue;
261   if (calleeType == CT_Method &&
262       PP.getIdentifierInfo("nil")->hasMacroDefinition())
263     NullValue = "nil";
264   else if (PP.getIdentifierInfo("NULL")->hasMacroDefinition())
265     NullValue = "NULL";
266   else
267     NullValue = "(void*) 0";
268 
269   if (MissingNilLoc.isInvalid())
270     Diag(Loc, diag::warn_missing_sentinel) << calleeType;
271   else
272     Diag(MissingNilLoc, diag::warn_missing_sentinel)
273       << calleeType
274       << FixItHint::CreateInsertion(MissingNilLoc, ", " + NullValue);
275   Diag(D->getLocation(), diag::note_sentinel_here) << calleeType;
276 }
277 
278 SourceRange Sema::getExprRange(Expr *E) const {
279   return E ? E->getSourceRange() : SourceRange();
280 }
281 
282 //===----------------------------------------------------------------------===//
283 //  Standard Promotions and Conversions
284 //===----------------------------------------------------------------------===//
285 
286 /// DefaultFunctionArrayConversion (C99 6.3.2.1p3, C99 6.3.2.1p4).
287 ExprResult Sema::DefaultFunctionArrayConversion(Expr *E) {
288   // Handle any placeholder expressions which made it here.
289   if (E->getType()->isPlaceholderType()) {
290     ExprResult result = CheckPlaceholderExpr(E);
291     if (result.isInvalid()) return ExprError();
292     E = result.take();
293   }
294 
295   QualType Ty = E->getType();
296   assert(!Ty.isNull() && "DefaultFunctionArrayConversion - missing type");
297 
298   if (Ty->isFunctionType())
299     E = ImpCastExprToType(E, Context.getPointerType(Ty),
300                           CK_FunctionToPointerDecay).take();
301   else if (Ty->isArrayType()) {
302     // In C90 mode, arrays only promote to pointers if the array expression is
303     // an lvalue.  The relevant legalese is C90 6.2.2.1p3: "an lvalue that has
304     // type 'array of type' is converted to an expression that has type 'pointer
305     // to type'...".  In C99 this was changed to: C99 6.3.2.1p3: "an expression
306     // that has type 'array of type' ...".  The relevant change is "an lvalue"
307     // (C90) to "an expression" (C99).
308     //
309     // C++ 4.2p1:
310     // An lvalue or rvalue of type "array of N T" or "array of unknown bound of
311     // T" can be converted to an rvalue of type "pointer to T".
312     //
313     if (getLangOptions().C99 || getLangOptions().CPlusPlus || E->isLValue())
314       E = ImpCastExprToType(E, Context.getArrayDecayedType(Ty),
315                             CK_ArrayToPointerDecay).take();
316   }
317   return Owned(E);
318 }
319 
320 static void CheckForNullPointerDereference(Sema &S, Expr *E) {
321   // Check to see if we are dereferencing a null pointer.  If so,
322   // and if not volatile-qualified, this is undefined behavior that the
323   // optimizer will delete, so warn about it.  People sometimes try to use this
324   // to get a deterministic trap and are surprised by clang's behavior.  This
325   // only handles the pattern "*null", which is a very syntactic check.
326   if (UnaryOperator *UO = dyn_cast<UnaryOperator>(E->IgnoreParenCasts()))
327     if (UO->getOpcode() == UO_Deref &&
328         UO->getSubExpr()->IgnoreParenCasts()->
329           isNullPointerConstant(S.Context, Expr::NPC_ValueDependentIsNotNull) &&
330         !UO->getType().isVolatileQualified()) {
331     S.DiagRuntimeBehavior(UO->getOperatorLoc(), UO,
332                           S.PDiag(diag::warn_indirection_through_null)
333                             << UO->getSubExpr()->getSourceRange());
334     S.DiagRuntimeBehavior(UO->getOperatorLoc(), UO,
335                         S.PDiag(diag::note_indirection_through_null));
336   }
337 }
338 
339 ExprResult Sema::DefaultLvalueConversion(Expr *E) {
340   // Handle any placeholder expressions which made it here.
341   if (E->getType()->isPlaceholderType()) {
342     ExprResult result = CheckPlaceholderExpr(E);
343     if (result.isInvalid()) return ExprError();
344     E = result.take();
345   }
346 
347   // C++ [conv.lval]p1:
348   //   A glvalue of a non-function, non-array type T can be
349   //   converted to a prvalue.
350   if (!E->isGLValue()) return Owned(E);
351 
352   QualType T = E->getType();
353   assert(!T.isNull() && "r-value conversion on typeless expression?");
354 
355   // We can't do lvalue-to-rvalue on atomics yet.
356   if (T->isAtomicType())
357     return Owned(E);
358 
359   // We don't want to throw lvalue-to-rvalue casts on top of
360   // expressions of certain types in C++.
361   if (getLangOptions().CPlusPlus &&
362       (E->getType() == Context.OverloadTy ||
363        T->isDependentType() ||
364        T->isRecordType()))
365     return Owned(E);
366 
367   // The C standard is actually really unclear on this point, and
368   // DR106 tells us what the result should be but not why.  It's
369   // generally best to say that void types just doesn't undergo
370   // lvalue-to-rvalue at all.  Note that expressions of unqualified
371   // 'void' type are never l-values, but qualified void can be.
372   if (T->isVoidType())
373     return Owned(E);
374 
375   CheckForNullPointerDereference(*this, E);
376 
377   // C++ [conv.lval]p1:
378   //   [...] If T is a non-class type, the type of the prvalue is the
379   //   cv-unqualified version of T. Otherwise, the type of the
380   //   rvalue is T.
381   //
382   // C99 6.3.2.1p2:
383   //   If the lvalue has qualified type, the value has the unqualified
384   //   version of the type of the lvalue; otherwise, the value has the
385   //   type of the lvalue.
386   if (T.hasQualifiers())
387     T = T.getUnqualifiedType();
388 
389   UpdateMarkingForLValueToRValue(E);
390 
391   ExprResult Res = Owned(ImplicitCastExpr::Create(Context, T, CK_LValueToRValue,
392                                                   E, 0, VK_RValue));
393 
394   return Res;
395 }
396 
397 ExprResult Sema::DefaultFunctionArrayLvalueConversion(Expr *E) {
398   ExprResult Res = DefaultFunctionArrayConversion(E);
399   if (Res.isInvalid())
400     return ExprError();
401   Res = DefaultLvalueConversion(Res.take());
402   if (Res.isInvalid())
403     return ExprError();
404   return move(Res);
405 }
406 
407 
408 /// UsualUnaryConversions - Performs various conversions that are common to most
409 /// operators (C99 6.3). The conversions of array and function types are
410 /// sometimes suppressed. For example, the array->pointer conversion doesn't
411 /// apply if the array is an argument to the sizeof or address (&) operators.
412 /// In these instances, this routine should *not* be called.
413 ExprResult Sema::UsualUnaryConversions(Expr *E) {
414   // First, convert to an r-value.
415   ExprResult Res = DefaultFunctionArrayLvalueConversion(E);
416   if (Res.isInvalid())
417     return Owned(E);
418   E = Res.take();
419 
420   QualType Ty = E->getType();
421   assert(!Ty.isNull() && "UsualUnaryConversions - missing type");
422 
423   // Half FP is a bit different: it's a storage-only type, meaning that any
424   // "use" of it should be promoted to float.
425   if (Ty->isHalfType())
426     return ImpCastExprToType(Res.take(), Context.FloatTy, CK_FloatingCast);
427 
428   // Try to perform integral promotions if the object has a theoretically
429   // promotable type.
430   if (Ty->isIntegralOrUnscopedEnumerationType()) {
431     // C99 6.3.1.1p2:
432     //
433     //   The following may be used in an expression wherever an int or
434     //   unsigned int may be used:
435     //     - an object or expression with an integer type whose integer
436     //       conversion rank is less than or equal to the rank of int
437     //       and unsigned int.
438     //     - A bit-field of type _Bool, int, signed int, or unsigned int.
439     //
440     //   If an int can represent all values of the original type, the
441     //   value is converted to an int; otherwise, it is converted to an
442     //   unsigned int. These are called the integer promotions. All
443     //   other types are unchanged by the integer promotions.
444 
445     QualType PTy = Context.isPromotableBitField(E);
446     if (!PTy.isNull()) {
447       E = ImpCastExprToType(E, PTy, CK_IntegralCast).take();
448       return Owned(E);
449     }
450     if (Ty->isPromotableIntegerType()) {
451       QualType PT = Context.getPromotedIntegerType(Ty);
452       E = ImpCastExprToType(E, PT, CK_IntegralCast).take();
453       return Owned(E);
454     }
455   }
456   return Owned(E);
457 }
458 
459 /// DefaultArgumentPromotion (C99 6.5.2.2p6). Used for function calls that
460 /// do not have a prototype. Arguments that have type float are promoted to
461 /// double. All other argument types are converted by UsualUnaryConversions().
462 ExprResult Sema::DefaultArgumentPromotion(Expr *E) {
463   QualType Ty = E->getType();
464   assert(!Ty.isNull() && "DefaultArgumentPromotion - missing type");
465 
466   ExprResult Res = UsualUnaryConversions(E);
467   if (Res.isInvalid())
468     return Owned(E);
469   E = Res.take();
470 
471   // If this is a 'float' (CVR qualified or typedef) promote to double.
472   if (Ty->isSpecificBuiltinType(BuiltinType::Float))
473     E = ImpCastExprToType(E, Context.DoubleTy, CK_FloatingCast).take();
474 
475   // C++ performs lvalue-to-rvalue conversion as a default argument
476   // promotion, even on class types, but note:
477   //   C++11 [conv.lval]p2:
478   //     When an lvalue-to-rvalue conversion occurs in an unevaluated
479   //     operand or a subexpression thereof the value contained in the
480   //     referenced object is not accessed. Otherwise, if the glvalue
481   //     has a class type, the conversion copy-initializes a temporary
482   //     of type T from the glvalue and the result of the conversion
483   //     is a prvalue for the temporary.
484   // FIXME: add some way to gate this entire thing for correctness in
485   // potentially potentially evaluated contexts.
486   if (getLangOptions().CPlusPlus && E->isGLValue() &&
487       ExprEvalContexts.back().Context != Unevaluated) {
488     ExprResult Temp = PerformCopyInitialization(
489                        InitializedEntity::InitializeTemporary(E->getType()),
490                                                 E->getExprLoc(),
491                                                 Owned(E));
492     if (Temp.isInvalid())
493       return ExprError();
494     E = Temp.get();
495   }
496 
497   return Owned(E);
498 }
499 
500 /// DefaultVariadicArgumentPromotion - Like DefaultArgumentPromotion, but
501 /// will warn if the resulting type is not a POD type, and rejects ObjC
502 /// interfaces passed by value.
503 ExprResult Sema::DefaultVariadicArgumentPromotion(Expr *E, VariadicCallType CT,
504                                                   FunctionDecl *FDecl) {
505   if (const BuiltinType *PlaceholderTy = E->getType()->getAsPlaceholderType()) {
506     // Strip the unbridged-cast placeholder expression off, if applicable.
507     if (PlaceholderTy->getKind() == BuiltinType::ARCUnbridgedCast &&
508         (CT == VariadicMethod ||
509          (FDecl && FDecl->hasAttr<CFAuditedTransferAttr>()))) {
510       E = stripARCUnbridgedCast(E);
511 
512     // Otherwise, do normal placeholder checking.
513     } else {
514       ExprResult ExprRes = CheckPlaceholderExpr(E);
515       if (ExprRes.isInvalid())
516         return ExprError();
517       E = ExprRes.take();
518     }
519   }
520 
521   ExprResult ExprRes = DefaultArgumentPromotion(E);
522   if (ExprRes.isInvalid())
523     return ExprError();
524   E = ExprRes.take();
525 
526   // Don't allow one to pass an Objective-C interface to a vararg.
527   if (E->getType()->isObjCObjectType() &&
528     DiagRuntimeBehavior(E->getLocStart(), 0,
529                         PDiag(diag::err_cannot_pass_objc_interface_to_vararg)
530                           << E->getType() << CT))
531     return ExprError();
532 
533   // Complain about passing non-POD types through varargs. However, don't
534   // perform this check for incomplete types, which we can get here when we're
535   // in an unevaluated context.
536   if (!E->getType()->isIncompleteType() && !E->getType().isPODType(Context)) {
537     // C++0x [expr.call]p7:
538     //   Passing a potentially-evaluated argument of class type (Clause 9)
539     //   having a non-trivial copy constructor, a non-trivial move constructor,
540     //   or a non-trivial destructor, with no corresponding parameter,
541     //   is conditionally-supported with implementation-defined semantics.
542     bool TrivialEnough = false;
543     if (getLangOptions().CPlusPlus0x && !E->getType()->isDependentType())  {
544       if (CXXRecordDecl *Record = E->getType()->getAsCXXRecordDecl()) {
545         if (Record->hasTrivialCopyConstructor() &&
546             Record->hasTrivialMoveConstructor() &&
547             Record->hasTrivialDestructor()) {
548           DiagRuntimeBehavior(E->getLocStart(), 0,
549             PDiag(diag::warn_cxx98_compat_pass_non_pod_arg_to_vararg)
550               << E->getType() << CT);
551           TrivialEnough = true;
552         }
553       }
554     }
555 
556     if (!TrivialEnough &&
557         getLangOptions().ObjCAutoRefCount &&
558         E->getType()->isObjCLifetimeType())
559       TrivialEnough = true;
560 
561     if (TrivialEnough) {
562       // Nothing to diagnose. This is okay.
563     } else if (DiagRuntimeBehavior(E->getLocStart(), 0,
564                           PDiag(diag::warn_cannot_pass_non_pod_arg_to_vararg)
565                             << getLangOptions().CPlusPlus0x << E->getType()
566                             << CT)) {
567       // Turn this into a trap.
568       CXXScopeSpec SS;
569       SourceLocation TemplateKWLoc;
570       UnqualifiedId Name;
571       Name.setIdentifier(PP.getIdentifierInfo("__builtin_trap"),
572                          E->getLocStart());
573       ExprResult TrapFn = ActOnIdExpression(TUScope, SS, TemplateKWLoc, Name,
574                                             true, false);
575       if (TrapFn.isInvalid())
576         return ExprError();
577 
578       ExprResult Call = ActOnCallExpr(TUScope, TrapFn.get(), E->getLocStart(),
579                                       MultiExprArg(), E->getLocEnd());
580       if (Call.isInvalid())
581         return ExprError();
582 
583       ExprResult Comma = ActOnBinOp(TUScope, E->getLocStart(), tok::comma,
584                                     Call.get(), E);
585       if (Comma.isInvalid())
586         return ExprError();
587       E = Comma.get();
588     }
589   }
590 
591   return Owned(E);
592 }
593 
594 /// \brief Converts an integer to complex float type.  Helper function of
595 /// UsualArithmeticConversions()
596 ///
597 /// \return false if the integer expression is an integer type and is
598 /// successfully converted to the complex type.
599 static bool handleIntegerToComplexFloatConversion(Sema &S, ExprResult &IntExpr,
600                                                   ExprResult &ComplexExpr,
601                                                   QualType IntTy,
602                                                   QualType ComplexTy,
603                                                   bool SkipCast) {
604   if (IntTy->isComplexType() || IntTy->isRealFloatingType()) return true;
605   if (SkipCast) return false;
606   if (IntTy->isIntegerType()) {
607     QualType fpTy = cast<ComplexType>(ComplexTy)->getElementType();
608     IntExpr = S.ImpCastExprToType(IntExpr.take(), fpTy, CK_IntegralToFloating);
609     IntExpr = S.ImpCastExprToType(IntExpr.take(), ComplexTy,
610                                   CK_FloatingRealToComplex);
611   } else {
612     assert(IntTy->isComplexIntegerType());
613     IntExpr = S.ImpCastExprToType(IntExpr.take(), ComplexTy,
614                                   CK_IntegralComplexToFloatingComplex);
615   }
616   return false;
617 }
618 
619 /// \brief Takes two complex float types and converts them to the same type.
620 /// Helper function of UsualArithmeticConversions()
621 static QualType
622 handleComplexFloatToComplexFloatConverstion(Sema &S, ExprResult &LHS,
623                                             ExprResult &RHS, QualType LHSType,
624                                             QualType RHSType,
625                                             bool IsCompAssign) {
626   int order = S.Context.getFloatingTypeOrder(LHSType, RHSType);
627 
628   if (order < 0) {
629     // _Complex float -> _Complex double
630     if (!IsCompAssign)
631       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_FloatingComplexCast);
632     return RHSType;
633   }
634   if (order > 0)
635     // _Complex float -> _Complex double
636     RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_FloatingComplexCast);
637   return LHSType;
638 }
639 
640 /// \brief Converts otherExpr to complex float and promotes complexExpr if
641 /// necessary.  Helper function of UsualArithmeticConversions()
642 static QualType handleOtherComplexFloatConversion(Sema &S,
643                                                   ExprResult &ComplexExpr,
644                                                   ExprResult &OtherExpr,
645                                                   QualType ComplexTy,
646                                                   QualType OtherTy,
647                                                   bool ConvertComplexExpr,
648                                                   bool ConvertOtherExpr) {
649   int order = S.Context.getFloatingTypeOrder(ComplexTy, OtherTy);
650 
651   // If just the complexExpr is complex, the otherExpr needs to be converted,
652   // and the complexExpr might need to be promoted.
653   if (order > 0) { // complexExpr is wider
654     // float -> _Complex double
655     if (ConvertOtherExpr) {
656       QualType fp = cast<ComplexType>(ComplexTy)->getElementType();
657       OtherExpr = S.ImpCastExprToType(OtherExpr.take(), fp, CK_FloatingCast);
658       OtherExpr = S.ImpCastExprToType(OtherExpr.take(), ComplexTy,
659                                       CK_FloatingRealToComplex);
660     }
661     return ComplexTy;
662   }
663 
664   // otherTy is at least as wide.  Find its corresponding complex type.
665   QualType result = (order == 0 ? ComplexTy :
666                                   S.Context.getComplexType(OtherTy));
667 
668   // double -> _Complex double
669   if (ConvertOtherExpr)
670     OtherExpr = S.ImpCastExprToType(OtherExpr.take(), result,
671                                     CK_FloatingRealToComplex);
672 
673   // _Complex float -> _Complex double
674   if (ConvertComplexExpr && order < 0)
675     ComplexExpr = S.ImpCastExprToType(ComplexExpr.take(), result,
676                                       CK_FloatingComplexCast);
677 
678   return result;
679 }
680 
681 /// \brief Handle arithmetic conversion with complex types.  Helper function of
682 /// UsualArithmeticConversions()
683 static QualType handleComplexFloatConversion(Sema &S, ExprResult &LHS,
684                                              ExprResult &RHS, QualType LHSType,
685                                              QualType RHSType,
686                                              bool IsCompAssign) {
687   // if we have an integer operand, the result is the complex type.
688   if (!handleIntegerToComplexFloatConversion(S, RHS, LHS, RHSType, LHSType,
689                                              /*skipCast*/false))
690     return LHSType;
691   if (!handleIntegerToComplexFloatConversion(S, LHS, RHS, LHSType, RHSType,
692                                              /*skipCast*/IsCompAssign))
693     return RHSType;
694 
695   // This handles complex/complex, complex/float, or float/complex.
696   // When both operands are complex, the shorter operand is converted to the
697   // type of the longer, and that is the type of the result. This corresponds
698   // to what is done when combining two real floating-point operands.
699   // The fun begins when size promotion occur across type domains.
700   // From H&S 6.3.4: When one operand is complex and the other is a real
701   // floating-point type, the less precise type is converted, within it's
702   // real or complex domain, to the precision of the other type. For example,
703   // when combining a "long double" with a "double _Complex", the
704   // "double _Complex" is promoted to "long double _Complex".
705 
706   bool LHSComplexFloat = LHSType->isComplexType();
707   bool RHSComplexFloat = RHSType->isComplexType();
708 
709   // If both are complex, just cast to the more precise type.
710   if (LHSComplexFloat && RHSComplexFloat)
711     return handleComplexFloatToComplexFloatConverstion(S, LHS, RHS,
712                                                        LHSType, RHSType,
713                                                        IsCompAssign);
714 
715   // If only one operand is complex, promote it if necessary and convert the
716   // other operand to complex.
717   if (LHSComplexFloat)
718     return handleOtherComplexFloatConversion(
719         S, LHS, RHS, LHSType, RHSType, /*convertComplexExpr*/!IsCompAssign,
720         /*convertOtherExpr*/ true);
721 
722   assert(RHSComplexFloat);
723   return handleOtherComplexFloatConversion(
724       S, RHS, LHS, RHSType, LHSType, /*convertComplexExpr*/true,
725       /*convertOtherExpr*/ !IsCompAssign);
726 }
727 
728 /// \brief Hande arithmetic conversion from integer to float.  Helper function
729 /// of UsualArithmeticConversions()
730 static QualType handleIntToFloatConversion(Sema &S, ExprResult &FloatExpr,
731                                            ExprResult &IntExpr,
732                                            QualType FloatTy, QualType IntTy,
733                                            bool ConvertFloat, bool ConvertInt) {
734   if (IntTy->isIntegerType()) {
735     if (ConvertInt)
736       // Convert intExpr to the lhs floating point type.
737       IntExpr = S.ImpCastExprToType(IntExpr.take(), FloatTy,
738                                     CK_IntegralToFloating);
739     return FloatTy;
740   }
741 
742   // Convert both sides to the appropriate complex float.
743   assert(IntTy->isComplexIntegerType());
744   QualType result = S.Context.getComplexType(FloatTy);
745 
746   // _Complex int -> _Complex float
747   if (ConvertInt)
748     IntExpr = S.ImpCastExprToType(IntExpr.take(), result,
749                                   CK_IntegralComplexToFloatingComplex);
750 
751   // float -> _Complex float
752   if (ConvertFloat)
753     FloatExpr = S.ImpCastExprToType(FloatExpr.take(), result,
754                                     CK_FloatingRealToComplex);
755 
756   return result;
757 }
758 
759 /// \brief Handle arithmethic conversion with floating point types.  Helper
760 /// function of UsualArithmeticConversions()
761 static QualType handleFloatConversion(Sema &S, ExprResult &LHS,
762                                       ExprResult &RHS, QualType LHSType,
763                                       QualType RHSType, bool IsCompAssign) {
764   bool LHSFloat = LHSType->isRealFloatingType();
765   bool RHSFloat = RHSType->isRealFloatingType();
766 
767   // If we have two real floating types, convert the smaller operand
768   // to the bigger result.
769   if (LHSFloat && RHSFloat) {
770     int order = S.Context.getFloatingTypeOrder(LHSType, RHSType);
771     if (order > 0) {
772       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_FloatingCast);
773       return LHSType;
774     }
775 
776     assert(order < 0 && "illegal float comparison");
777     if (!IsCompAssign)
778       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_FloatingCast);
779     return RHSType;
780   }
781 
782   if (LHSFloat)
783     return handleIntToFloatConversion(S, LHS, RHS, LHSType, RHSType,
784                                       /*convertFloat=*/!IsCompAssign,
785                                       /*convertInt=*/ true);
786   assert(RHSFloat);
787   return handleIntToFloatConversion(S, RHS, LHS, RHSType, LHSType,
788                                     /*convertInt=*/ true,
789                                     /*convertFloat=*/!IsCompAssign);
790 }
791 
792 /// \brief Handle conversions with GCC complex int extension.  Helper function
793 /// of UsualArithmeticConversions()
794 // FIXME: if the operands are (int, _Complex long), we currently
795 // don't promote the complex.  Also, signedness?
796 static QualType handleComplexIntConversion(Sema &S, ExprResult &LHS,
797                                            ExprResult &RHS, QualType LHSType,
798                                            QualType RHSType,
799                                            bool IsCompAssign) {
800   const ComplexType *LHSComplexInt = LHSType->getAsComplexIntegerType();
801   const ComplexType *RHSComplexInt = RHSType->getAsComplexIntegerType();
802 
803   if (LHSComplexInt && RHSComplexInt) {
804     int order = S.Context.getIntegerTypeOrder(LHSComplexInt->getElementType(),
805                                               RHSComplexInt->getElementType());
806     assert(order && "inequal types with equal element ordering");
807     if (order > 0) {
808       // _Complex int -> _Complex long
809       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralComplexCast);
810       return LHSType;
811     }
812 
813     if (!IsCompAssign)
814       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralComplexCast);
815     return RHSType;
816   }
817 
818   if (LHSComplexInt) {
819     // int -> _Complex int
820     // FIXME: This needs to take integer ranks into account
821     RHS = S.ImpCastExprToType(RHS.take(), LHSComplexInt->getElementType(),
822                               CK_IntegralCast);
823     RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralRealToComplex);
824     return LHSType;
825   }
826 
827   assert(RHSComplexInt);
828   // int -> _Complex int
829   // FIXME: This needs to take integer ranks into account
830   if (!IsCompAssign) {
831     LHS = S.ImpCastExprToType(LHS.take(), RHSComplexInt->getElementType(),
832                               CK_IntegralCast);
833     LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralRealToComplex);
834   }
835   return RHSType;
836 }
837 
838 /// \brief Handle integer arithmetic conversions.  Helper function of
839 /// UsualArithmeticConversions()
840 static QualType handleIntegerConversion(Sema &S, ExprResult &LHS,
841                                         ExprResult &RHS, QualType LHSType,
842                                         QualType RHSType, bool IsCompAssign) {
843   // The rules for this case are in C99 6.3.1.8
844   int order = S.Context.getIntegerTypeOrder(LHSType, RHSType);
845   bool LHSSigned = LHSType->hasSignedIntegerRepresentation();
846   bool RHSSigned = RHSType->hasSignedIntegerRepresentation();
847   if (LHSSigned == RHSSigned) {
848     // Same signedness; use the higher-ranked type
849     if (order >= 0) {
850       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
851       return LHSType;
852     } else if (!IsCompAssign)
853       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
854     return RHSType;
855   } else if (order != (LHSSigned ? 1 : -1)) {
856     // The unsigned type has greater than or equal rank to the
857     // signed type, so use the unsigned type
858     if (RHSSigned) {
859       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
860       return LHSType;
861     } else if (!IsCompAssign)
862       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
863     return RHSType;
864   } else if (S.Context.getIntWidth(LHSType) != S.Context.getIntWidth(RHSType)) {
865     // The two types are different widths; if we are here, that
866     // means the signed type is larger than the unsigned type, so
867     // use the signed type.
868     if (LHSSigned) {
869       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
870       return LHSType;
871     } else if (!IsCompAssign)
872       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
873     return RHSType;
874   } else {
875     // The signed type is higher-ranked than the unsigned type,
876     // but isn't actually any bigger (like unsigned int and long
877     // on most 32-bit systems).  Use the unsigned type corresponding
878     // to the signed type.
879     QualType result =
880       S.Context.getCorrespondingUnsignedType(LHSSigned ? LHSType : RHSType);
881     RHS = S.ImpCastExprToType(RHS.take(), result, CK_IntegralCast);
882     if (!IsCompAssign)
883       LHS = S.ImpCastExprToType(LHS.take(), result, CK_IntegralCast);
884     return result;
885   }
886 }
887 
888 /// UsualArithmeticConversions - Performs various conversions that are common to
889 /// binary operators (C99 6.3.1.8). If both operands aren't arithmetic, this
890 /// routine returns the first non-arithmetic type found. The client is
891 /// responsible for emitting appropriate error diagnostics.
892 /// FIXME: verify the conversion rules for "complex int" are consistent with
893 /// GCC.
894 QualType Sema::UsualArithmeticConversions(ExprResult &LHS, ExprResult &RHS,
895                                           bool IsCompAssign) {
896   if (!IsCompAssign) {
897     LHS = UsualUnaryConversions(LHS.take());
898     if (LHS.isInvalid())
899       return QualType();
900   }
901 
902   RHS = UsualUnaryConversions(RHS.take());
903   if (RHS.isInvalid())
904     return QualType();
905 
906   // For conversion purposes, we ignore any qualifiers.
907   // For example, "const float" and "float" are equivalent.
908   QualType LHSType =
909     Context.getCanonicalType(LHS.get()->getType()).getUnqualifiedType();
910   QualType RHSType =
911     Context.getCanonicalType(RHS.get()->getType()).getUnqualifiedType();
912 
913   // If both types are identical, no conversion is needed.
914   if (LHSType == RHSType)
915     return LHSType;
916 
917   // If either side is a non-arithmetic type (e.g. a pointer), we are done.
918   // The caller can deal with this (e.g. pointer + int).
919   if (!LHSType->isArithmeticType() || !RHSType->isArithmeticType())
920     return LHSType;
921 
922   // Apply unary and bitfield promotions to the LHS's type.
923   QualType LHSUnpromotedType = LHSType;
924   if (LHSType->isPromotableIntegerType())
925     LHSType = Context.getPromotedIntegerType(LHSType);
926   QualType LHSBitfieldPromoteTy = Context.isPromotableBitField(LHS.get());
927   if (!LHSBitfieldPromoteTy.isNull())
928     LHSType = LHSBitfieldPromoteTy;
929   if (LHSType != LHSUnpromotedType && !IsCompAssign)
930     LHS = ImpCastExprToType(LHS.take(), LHSType, CK_IntegralCast);
931 
932   // If both types are identical, no conversion is needed.
933   if (LHSType == RHSType)
934     return LHSType;
935 
936   // At this point, we have two different arithmetic types.
937 
938   // Handle complex types first (C99 6.3.1.8p1).
939   if (LHSType->isComplexType() || RHSType->isComplexType())
940     return handleComplexFloatConversion(*this, LHS, RHS, LHSType, RHSType,
941                                         IsCompAssign);
942 
943   // Now handle "real" floating types (i.e. float, double, long double).
944   if (LHSType->isRealFloatingType() || RHSType->isRealFloatingType())
945     return handleFloatConversion(*this, LHS, RHS, LHSType, RHSType,
946                                  IsCompAssign);
947 
948   // Handle GCC complex int extension.
949   if (LHSType->isComplexIntegerType() || RHSType->isComplexIntegerType())
950     return handleComplexIntConversion(*this, LHS, RHS, LHSType, RHSType,
951                                       IsCompAssign);
952 
953   // Finally, we have two differing integer types.
954   return handleIntegerConversion(*this, LHS, RHS, LHSType, RHSType,
955                                  IsCompAssign);
956 }
957 
958 //===----------------------------------------------------------------------===//
959 //  Semantic Analysis for various Expression Types
960 //===----------------------------------------------------------------------===//
961 
962 
963 ExprResult
964 Sema::ActOnGenericSelectionExpr(SourceLocation KeyLoc,
965                                 SourceLocation DefaultLoc,
966                                 SourceLocation RParenLoc,
967                                 Expr *ControllingExpr,
968                                 MultiTypeArg ArgTypes,
969                                 MultiExprArg ArgExprs) {
970   unsigned NumAssocs = ArgTypes.size();
971   assert(NumAssocs == ArgExprs.size());
972 
973   ParsedType *ParsedTypes = ArgTypes.release();
974   Expr **Exprs = ArgExprs.release();
975 
976   TypeSourceInfo **Types = new TypeSourceInfo*[NumAssocs];
977   for (unsigned i = 0; i < NumAssocs; ++i) {
978     if (ParsedTypes[i])
979       (void) GetTypeFromParser(ParsedTypes[i], &Types[i]);
980     else
981       Types[i] = 0;
982   }
983 
984   ExprResult ER = CreateGenericSelectionExpr(KeyLoc, DefaultLoc, RParenLoc,
985                                              ControllingExpr, Types, Exprs,
986                                              NumAssocs);
987   delete [] Types;
988   return ER;
989 }
990 
991 ExprResult
992 Sema::CreateGenericSelectionExpr(SourceLocation KeyLoc,
993                                  SourceLocation DefaultLoc,
994                                  SourceLocation RParenLoc,
995                                  Expr *ControllingExpr,
996                                  TypeSourceInfo **Types,
997                                  Expr **Exprs,
998                                  unsigned NumAssocs) {
999   bool TypeErrorFound = false,
1000        IsResultDependent = ControllingExpr->isTypeDependent(),
1001        ContainsUnexpandedParameterPack
1002          = ControllingExpr->containsUnexpandedParameterPack();
1003 
1004   for (unsigned i = 0; i < NumAssocs; ++i) {
1005     if (Exprs[i]->containsUnexpandedParameterPack())
1006       ContainsUnexpandedParameterPack = true;
1007 
1008     if (Types[i]) {
1009       if (Types[i]->getType()->containsUnexpandedParameterPack())
1010         ContainsUnexpandedParameterPack = true;
1011 
1012       if (Types[i]->getType()->isDependentType()) {
1013         IsResultDependent = true;
1014       } else {
1015         // C11 6.5.1.1p2 "The type name in a generic association shall specify a
1016         // complete object type other than a variably modified type."
1017         unsigned D = 0;
1018         if (Types[i]->getType()->isIncompleteType())
1019           D = diag::err_assoc_type_incomplete;
1020         else if (!Types[i]->getType()->isObjectType())
1021           D = diag::err_assoc_type_nonobject;
1022         else if (Types[i]->getType()->isVariablyModifiedType())
1023           D = diag::err_assoc_type_variably_modified;
1024 
1025         if (D != 0) {
1026           Diag(Types[i]->getTypeLoc().getBeginLoc(), D)
1027             << Types[i]->getTypeLoc().getSourceRange()
1028             << Types[i]->getType();
1029           TypeErrorFound = true;
1030         }
1031 
1032         // C11 6.5.1.1p2 "No two generic associations in the same generic
1033         // selection shall specify compatible types."
1034         for (unsigned j = i+1; j < NumAssocs; ++j)
1035           if (Types[j] && !Types[j]->getType()->isDependentType() &&
1036               Context.typesAreCompatible(Types[i]->getType(),
1037                                          Types[j]->getType())) {
1038             Diag(Types[j]->getTypeLoc().getBeginLoc(),
1039                  diag::err_assoc_compatible_types)
1040               << Types[j]->getTypeLoc().getSourceRange()
1041               << Types[j]->getType()
1042               << Types[i]->getType();
1043             Diag(Types[i]->getTypeLoc().getBeginLoc(),
1044                  diag::note_compat_assoc)
1045               << Types[i]->getTypeLoc().getSourceRange()
1046               << Types[i]->getType();
1047             TypeErrorFound = true;
1048           }
1049       }
1050     }
1051   }
1052   if (TypeErrorFound)
1053     return ExprError();
1054 
1055   // If we determined that the generic selection is result-dependent, don't
1056   // try to compute the result expression.
1057   if (IsResultDependent)
1058     return Owned(new (Context) GenericSelectionExpr(
1059                    Context, KeyLoc, ControllingExpr,
1060                    Types, Exprs, NumAssocs, DefaultLoc,
1061                    RParenLoc, ContainsUnexpandedParameterPack));
1062 
1063   SmallVector<unsigned, 1> CompatIndices;
1064   unsigned DefaultIndex = -1U;
1065   for (unsigned i = 0; i < NumAssocs; ++i) {
1066     if (!Types[i])
1067       DefaultIndex = i;
1068     else if (Context.typesAreCompatible(ControllingExpr->getType(),
1069                                         Types[i]->getType()))
1070       CompatIndices.push_back(i);
1071   }
1072 
1073   // C11 6.5.1.1p2 "The controlling expression of a generic selection shall have
1074   // type compatible with at most one of the types named in its generic
1075   // association list."
1076   if (CompatIndices.size() > 1) {
1077     // We strip parens here because the controlling expression is typically
1078     // parenthesized in macro definitions.
1079     ControllingExpr = ControllingExpr->IgnoreParens();
1080     Diag(ControllingExpr->getLocStart(), diag::err_generic_sel_multi_match)
1081       << ControllingExpr->getSourceRange() << ControllingExpr->getType()
1082       << (unsigned) CompatIndices.size();
1083     for (SmallVector<unsigned, 1>::iterator I = CompatIndices.begin(),
1084          E = CompatIndices.end(); I != E; ++I) {
1085       Diag(Types[*I]->getTypeLoc().getBeginLoc(),
1086            diag::note_compat_assoc)
1087         << Types[*I]->getTypeLoc().getSourceRange()
1088         << Types[*I]->getType();
1089     }
1090     return ExprError();
1091   }
1092 
1093   // C11 6.5.1.1p2 "If a generic selection has no default generic association,
1094   // its controlling expression shall have type compatible with exactly one of
1095   // the types named in its generic association list."
1096   if (DefaultIndex == -1U && CompatIndices.size() == 0) {
1097     // We strip parens here because the controlling expression is typically
1098     // parenthesized in macro definitions.
1099     ControllingExpr = ControllingExpr->IgnoreParens();
1100     Diag(ControllingExpr->getLocStart(), diag::err_generic_sel_no_match)
1101       << ControllingExpr->getSourceRange() << ControllingExpr->getType();
1102     return ExprError();
1103   }
1104 
1105   // C11 6.5.1.1p3 "If a generic selection has a generic association with a
1106   // type name that is compatible with the type of the controlling expression,
1107   // then the result expression of the generic selection is the expression
1108   // in that generic association. Otherwise, the result expression of the
1109   // generic selection is the expression in the default generic association."
1110   unsigned ResultIndex =
1111     CompatIndices.size() ? CompatIndices[0] : DefaultIndex;
1112 
1113   return Owned(new (Context) GenericSelectionExpr(
1114                  Context, KeyLoc, ControllingExpr,
1115                  Types, Exprs, NumAssocs, DefaultLoc,
1116                  RParenLoc, ContainsUnexpandedParameterPack,
1117                  ResultIndex));
1118 }
1119 
1120 /// ActOnStringLiteral - The specified tokens were lexed as pasted string
1121 /// fragments (e.g. "foo" "bar" L"baz").  The result string has to handle string
1122 /// concatenation ([C99 5.1.1.2, translation phase #6]), so it may come from
1123 /// multiple tokens.  However, the common case is that StringToks points to one
1124 /// string.
1125 ///
1126 ExprResult
1127 Sema::ActOnStringLiteral(const Token *StringToks, unsigned NumStringToks) {
1128   assert(NumStringToks && "Must have at least one string!");
1129 
1130   StringLiteralParser Literal(StringToks, NumStringToks, PP);
1131   if (Literal.hadError)
1132     return ExprError();
1133 
1134   SmallVector<SourceLocation, 4> StringTokLocs;
1135   for (unsigned i = 0; i != NumStringToks; ++i)
1136     StringTokLocs.push_back(StringToks[i].getLocation());
1137 
1138   QualType StrTy = Context.CharTy;
1139   if (Literal.isWide())
1140     StrTy = Context.getWCharType();
1141   else if (Literal.isUTF16())
1142     StrTy = Context.Char16Ty;
1143   else if (Literal.isUTF32())
1144     StrTy = Context.Char32Ty;
1145   else if (Literal.isPascal())
1146     StrTy = Context.UnsignedCharTy;
1147 
1148   StringLiteral::StringKind Kind = StringLiteral::Ascii;
1149   if (Literal.isWide())
1150     Kind = StringLiteral::Wide;
1151   else if (Literal.isUTF8())
1152     Kind = StringLiteral::UTF8;
1153   else if (Literal.isUTF16())
1154     Kind = StringLiteral::UTF16;
1155   else if (Literal.isUTF32())
1156     Kind = StringLiteral::UTF32;
1157 
1158   // A C++ string literal has a const-qualified element type (C++ 2.13.4p1).
1159   if (getLangOptions().CPlusPlus || getLangOptions().ConstStrings)
1160     StrTy.addConst();
1161 
1162   // Get an array type for the string, according to C99 6.4.5.  This includes
1163   // the nul terminator character as well as the string length for pascal
1164   // strings.
1165   StrTy = Context.getConstantArrayType(StrTy,
1166                                  llvm::APInt(32, Literal.GetNumStringChars()+1),
1167                                        ArrayType::Normal, 0);
1168 
1169   // Pass &StringTokLocs[0], StringTokLocs.size() to factory!
1170   return Owned(StringLiteral::Create(Context, Literal.GetString(),
1171                                      Kind, Literal.Pascal, StrTy,
1172                                      &StringTokLocs[0],
1173                                      StringTokLocs.size()));
1174 }
1175 
1176 ExprResult
1177 Sema::BuildDeclRefExpr(ValueDecl *D, QualType Ty, ExprValueKind VK,
1178                        SourceLocation Loc,
1179                        const CXXScopeSpec *SS) {
1180   DeclarationNameInfo NameInfo(D->getDeclName(), Loc);
1181   return BuildDeclRefExpr(D, Ty, VK, NameInfo, SS);
1182 }
1183 
1184 /// BuildDeclRefExpr - Build an expression that references a
1185 /// declaration that does not require a closure capture.
1186 ExprResult
1187 Sema::BuildDeclRefExpr(ValueDecl *D, QualType Ty, ExprValueKind VK,
1188                        const DeclarationNameInfo &NameInfo,
1189                        const CXXScopeSpec *SS) {
1190   if (getLangOptions().CUDA)
1191     if (const FunctionDecl *Caller = dyn_cast<FunctionDecl>(CurContext))
1192       if (const FunctionDecl *Callee = dyn_cast<FunctionDecl>(D)) {
1193         CUDAFunctionTarget CallerTarget = IdentifyCUDATarget(Caller),
1194                            CalleeTarget = IdentifyCUDATarget(Callee);
1195         if (CheckCUDATarget(CallerTarget, CalleeTarget)) {
1196           Diag(NameInfo.getLoc(), diag::err_ref_bad_target)
1197             << CalleeTarget << D->getIdentifier() << CallerTarget;
1198           Diag(D->getLocation(), diag::note_previous_decl)
1199             << D->getIdentifier();
1200           return ExprError();
1201         }
1202       }
1203 
1204   DeclRefExpr *E = DeclRefExpr::Create(Context,
1205                                        SS ? SS->getWithLocInContext(Context)
1206                                               : NestedNameSpecifierLoc(),
1207                                            SourceLocation(),
1208                                            D, NameInfo, Ty, VK);
1209 
1210   MarkDeclRefReferenced(E);
1211 
1212   // Just in case we're building an illegal pointer-to-member.
1213   FieldDecl *FD = dyn_cast<FieldDecl>(D);
1214   if (FD && FD->isBitField())
1215     E->setObjectKind(OK_BitField);
1216 
1217   return Owned(E);
1218 }
1219 
1220 /// Decomposes the given name into a DeclarationNameInfo, its location, and
1221 /// possibly a list of template arguments.
1222 ///
1223 /// If this produces template arguments, it is permitted to call
1224 /// DecomposeTemplateName.
1225 ///
1226 /// This actually loses a lot of source location information for
1227 /// non-standard name kinds; we should consider preserving that in
1228 /// some way.
1229 void
1230 Sema::DecomposeUnqualifiedId(const UnqualifiedId &Id,
1231                              TemplateArgumentListInfo &Buffer,
1232                              DeclarationNameInfo &NameInfo,
1233                              const TemplateArgumentListInfo *&TemplateArgs) {
1234   if (Id.getKind() == UnqualifiedId::IK_TemplateId) {
1235     Buffer.setLAngleLoc(Id.TemplateId->LAngleLoc);
1236     Buffer.setRAngleLoc(Id.TemplateId->RAngleLoc);
1237 
1238     ASTTemplateArgsPtr TemplateArgsPtr(*this,
1239                                        Id.TemplateId->getTemplateArgs(),
1240                                        Id.TemplateId->NumArgs);
1241     translateTemplateArguments(TemplateArgsPtr, Buffer);
1242     TemplateArgsPtr.release();
1243 
1244     TemplateName TName = Id.TemplateId->Template.get();
1245     SourceLocation TNameLoc = Id.TemplateId->TemplateNameLoc;
1246     NameInfo = Context.getNameForTemplate(TName, TNameLoc);
1247     TemplateArgs = &Buffer;
1248   } else {
1249     NameInfo = GetNameFromUnqualifiedId(Id);
1250     TemplateArgs = 0;
1251   }
1252 }
1253 
1254 /// Diagnose an empty lookup.
1255 ///
1256 /// \return false if new lookup candidates were found
1257 bool Sema::DiagnoseEmptyLookup(Scope *S, CXXScopeSpec &SS, LookupResult &R,
1258                                CorrectionCandidateCallback &CCC,
1259                                TemplateArgumentListInfo *ExplicitTemplateArgs,
1260                                Expr **Args, unsigned NumArgs) {
1261   DeclarationName Name = R.getLookupName();
1262 
1263   unsigned diagnostic = diag::err_undeclared_var_use;
1264   unsigned diagnostic_suggest = diag::err_undeclared_var_use_suggest;
1265   if (Name.getNameKind() == DeclarationName::CXXOperatorName ||
1266       Name.getNameKind() == DeclarationName::CXXLiteralOperatorName ||
1267       Name.getNameKind() == DeclarationName::CXXConversionFunctionName) {
1268     diagnostic = diag::err_undeclared_use;
1269     diagnostic_suggest = diag::err_undeclared_use_suggest;
1270   }
1271 
1272   // If the original lookup was an unqualified lookup, fake an
1273   // unqualified lookup.  This is useful when (for example) the
1274   // original lookup would not have found something because it was a
1275   // dependent name.
1276   DeclContext *DC = SS.isEmpty() ? CurContext : 0;
1277   while (DC) {
1278     if (isa<CXXRecordDecl>(DC)) {
1279       LookupQualifiedName(R, DC);
1280 
1281       if (!R.empty()) {
1282         // Don't give errors about ambiguities in this lookup.
1283         R.suppressDiagnostics();
1284 
1285         // During a default argument instantiation the CurContext points
1286         // to a CXXMethodDecl; but we can't apply a this-> fixit inside a
1287         // function parameter list, hence add an explicit check.
1288         bool isDefaultArgument = !ActiveTemplateInstantiations.empty() &&
1289                               ActiveTemplateInstantiations.back().Kind ==
1290             ActiveTemplateInstantiation::DefaultFunctionArgumentInstantiation;
1291         CXXMethodDecl *CurMethod = dyn_cast<CXXMethodDecl>(CurContext);
1292         bool isInstance = CurMethod &&
1293                           CurMethod->isInstance() &&
1294                           DC == CurMethod->getParent() && !isDefaultArgument;
1295 
1296 
1297         // Give a code modification hint to insert 'this->'.
1298         // TODO: fixit for inserting 'Base<T>::' in the other cases.
1299         // Actually quite difficult!
1300         if (isInstance) {
1301           UnresolvedLookupExpr *ULE = cast<UnresolvedLookupExpr>(
1302               CallsUndergoingInstantiation.back()->getCallee());
1303           CXXMethodDecl *DepMethod = cast_or_null<CXXMethodDecl>(
1304               CurMethod->getInstantiatedFromMemberFunction());
1305           if (DepMethod) {
1306             if (getLangOptions().MicrosoftMode)
1307               diagnostic = diag::warn_found_via_dependent_bases_lookup;
1308             Diag(R.getNameLoc(), diagnostic) << Name
1309               << FixItHint::CreateInsertion(R.getNameLoc(), "this->");
1310             QualType DepThisType = DepMethod->getThisType(Context);
1311             CheckCXXThisCapture(R.getNameLoc());
1312             CXXThisExpr *DepThis = new (Context) CXXThisExpr(
1313                                        R.getNameLoc(), DepThisType, false);
1314             TemplateArgumentListInfo TList;
1315             if (ULE->hasExplicitTemplateArgs())
1316               ULE->copyTemplateArgumentsInto(TList);
1317 
1318             CXXScopeSpec SS;
1319             SS.Adopt(ULE->getQualifierLoc());
1320             CXXDependentScopeMemberExpr *DepExpr =
1321                 CXXDependentScopeMemberExpr::Create(
1322                     Context, DepThis, DepThisType, true, SourceLocation(),
1323                     SS.getWithLocInContext(Context),
1324                     ULE->getTemplateKeywordLoc(), 0,
1325                     R.getLookupNameInfo(),
1326                     ULE->hasExplicitTemplateArgs() ? &TList : 0);
1327             CallsUndergoingInstantiation.back()->setCallee(DepExpr);
1328           } else {
1329             // FIXME: we should be able to handle this case too. It is correct
1330             // to add this-> here. This is a workaround for PR7947.
1331             Diag(R.getNameLoc(), diagnostic) << Name;
1332           }
1333         } else {
1334           if (getLangOptions().MicrosoftMode)
1335             diagnostic = diag::warn_found_via_dependent_bases_lookup;
1336           Diag(R.getNameLoc(), diagnostic) << Name;
1337         }
1338 
1339         // Do we really want to note all of these?
1340         for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I)
1341           Diag((*I)->getLocation(), diag::note_dependent_var_use);
1342 
1343         // Return true if we are inside a default argument instantiation
1344         // and the found name refers to an instance member function, otherwise
1345         // the function calling DiagnoseEmptyLookup will try to create an
1346         // implicit member call and this is wrong for default argument.
1347         if (isDefaultArgument && ((*R.begin())->isCXXInstanceMember())) {
1348           Diag(R.getNameLoc(), diag::err_member_call_without_object);
1349           return true;
1350         }
1351 
1352         // Tell the callee to try to recover.
1353         return false;
1354       }
1355 
1356       R.clear();
1357     }
1358 
1359     // In Microsoft mode, if we are performing lookup from within a friend
1360     // function definition declared at class scope then we must set
1361     // DC to the lexical parent to be able to search into the parent
1362     // class.
1363     if (getLangOptions().MicrosoftMode && isa<FunctionDecl>(DC) &&
1364         cast<FunctionDecl>(DC)->getFriendObjectKind() &&
1365         DC->getLexicalParent()->isRecord())
1366       DC = DC->getLexicalParent();
1367     else
1368       DC = DC->getParent();
1369   }
1370 
1371   // We didn't find anything, so try to correct for a typo.
1372   TypoCorrection Corrected;
1373   if (S && (Corrected = CorrectTypo(R.getLookupNameInfo(), R.getLookupKind(),
1374                                     S, &SS, CCC))) {
1375     std::string CorrectedStr(Corrected.getAsString(getLangOptions()));
1376     std::string CorrectedQuotedStr(Corrected.getQuoted(getLangOptions()));
1377     R.setLookupName(Corrected.getCorrection());
1378 
1379     if (NamedDecl *ND = Corrected.getCorrectionDecl()) {
1380       if (Corrected.isOverloaded()) {
1381         OverloadCandidateSet OCS(R.getNameLoc());
1382         OverloadCandidateSet::iterator Best;
1383         for (TypoCorrection::decl_iterator CD = Corrected.begin(),
1384                                         CDEnd = Corrected.end();
1385              CD != CDEnd; ++CD) {
1386           if (FunctionTemplateDecl *FTD =
1387                    dyn_cast<FunctionTemplateDecl>(*CD))
1388             AddTemplateOverloadCandidate(
1389                 FTD, DeclAccessPair::make(FTD, AS_none), ExplicitTemplateArgs,
1390                 Args, NumArgs, OCS);
1391           else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(*CD))
1392             if (!ExplicitTemplateArgs || ExplicitTemplateArgs->size() == 0)
1393               AddOverloadCandidate(FD, DeclAccessPair::make(FD, AS_none),
1394                                    Args, NumArgs, OCS);
1395         }
1396         switch (OCS.BestViableFunction(*this, R.getNameLoc(), Best)) {
1397           case OR_Success:
1398             ND = Best->Function;
1399             break;
1400           default:
1401             break;
1402         }
1403       }
1404       R.addDecl(ND);
1405       if (isa<ValueDecl>(ND) || isa<FunctionTemplateDecl>(ND)) {
1406         if (SS.isEmpty())
1407           Diag(R.getNameLoc(), diagnostic_suggest) << Name << CorrectedQuotedStr
1408             << FixItHint::CreateReplacement(R.getNameLoc(), CorrectedStr);
1409         else
1410           Diag(R.getNameLoc(), diag::err_no_member_suggest)
1411             << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1412             << SS.getRange()
1413             << FixItHint::CreateReplacement(R.getNameLoc(), CorrectedStr);
1414         if (ND)
1415           Diag(ND->getLocation(), diag::note_previous_decl)
1416             << CorrectedQuotedStr;
1417 
1418         // Tell the callee to try to recover.
1419         return false;
1420       }
1421 
1422       if (isa<TypeDecl>(ND) || isa<ObjCInterfaceDecl>(ND)) {
1423         // FIXME: If we ended up with a typo for a type name or
1424         // Objective-C class name, we're in trouble because the parser
1425         // is in the wrong place to recover. Suggest the typo
1426         // correction, but don't make it a fix-it since we're not going
1427         // to recover well anyway.
1428         if (SS.isEmpty())
1429           Diag(R.getNameLoc(), diagnostic_suggest)
1430             << Name << CorrectedQuotedStr;
1431         else
1432           Diag(R.getNameLoc(), diag::err_no_member_suggest)
1433             << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1434             << SS.getRange();
1435 
1436         // Don't try to recover; it won't work.
1437         return true;
1438       }
1439     } else {
1440       // FIXME: We found a keyword. Suggest it, but don't provide a fix-it
1441       // because we aren't able to recover.
1442       if (SS.isEmpty())
1443         Diag(R.getNameLoc(), diagnostic_suggest) << Name << CorrectedQuotedStr;
1444       else
1445         Diag(R.getNameLoc(), diag::err_no_member_suggest)
1446         << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1447         << SS.getRange();
1448       return true;
1449     }
1450   }
1451   R.clear();
1452 
1453   // Emit a special diagnostic for failed member lookups.
1454   // FIXME: computing the declaration context might fail here (?)
1455   if (!SS.isEmpty()) {
1456     Diag(R.getNameLoc(), diag::err_no_member)
1457       << Name << computeDeclContext(SS, false)
1458       << SS.getRange();
1459     return true;
1460   }
1461 
1462   // Give up, we can't recover.
1463   Diag(R.getNameLoc(), diagnostic) << Name;
1464   return true;
1465 }
1466 
1467 ExprResult Sema::ActOnIdExpression(Scope *S,
1468                                    CXXScopeSpec &SS,
1469                                    SourceLocation TemplateKWLoc,
1470                                    UnqualifiedId &Id,
1471                                    bool HasTrailingLParen,
1472                                    bool IsAddressOfOperand,
1473                                    CorrectionCandidateCallback *CCC) {
1474   assert(!(IsAddressOfOperand && HasTrailingLParen) &&
1475          "cannot be direct & operand and have a trailing lparen");
1476 
1477   if (SS.isInvalid())
1478     return ExprError();
1479 
1480   TemplateArgumentListInfo TemplateArgsBuffer;
1481 
1482   // Decompose the UnqualifiedId into the following data.
1483   DeclarationNameInfo NameInfo;
1484   const TemplateArgumentListInfo *TemplateArgs;
1485   DecomposeUnqualifiedId(Id, TemplateArgsBuffer, NameInfo, TemplateArgs);
1486 
1487   DeclarationName Name = NameInfo.getName();
1488   IdentifierInfo *II = Name.getAsIdentifierInfo();
1489   SourceLocation NameLoc = NameInfo.getLoc();
1490 
1491   // C++ [temp.dep.expr]p3:
1492   //   An id-expression is type-dependent if it contains:
1493   //     -- an identifier that was declared with a dependent type,
1494   //        (note: handled after lookup)
1495   //     -- a template-id that is dependent,
1496   //        (note: handled in BuildTemplateIdExpr)
1497   //     -- a conversion-function-id that specifies a dependent type,
1498   //     -- a nested-name-specifier that contains a class-name that
1499   //        names a dependent type.
1500   // Determine whether this is a member of an unknown specialization;
1501   // we need to handle these differently.
1502   bool DependentID = false;
1503   if (Name.getNameKind() == DeclarationName::CXXConversionFunctionName &&
1504       Name.getCXXNameType()->isDependentType()) {
1505     DependentID = true;
1506   } else if (SS.isSet()) {
1507     if (DeclContext *DC = computeDeclContext(SS, false)) {
1508       if (RequireCompleteDeclContext(SS, DC))
1509         return ExprError();
1510     } else {
1511       DependentID = true;
1512     }
1513   }
1514 
1515   if (DependentID)
1516     return ActOnDependentIdExpression(SS, TemplateKWLoc, NameInfo,
1517                                       IsAddressOfOperand, TemplateArgs);
1518 
1519   // Perform the required lookup.
1520   LookupResult R(*this, NameInfo,
1521                  (Id.getKind() == UnqualifiedId::IK_ImplicitSelfParam)
1522                   ? LookupObjCImplicitSelfParam : LookupOrdinaryName);
1523   if (TemplateArgs) {
1524     // Lookup the template name again to correctly establish the context in
1525     // which it was found. This is really unfortunate as we already did the
1526     // lookup to determine that it was a template name in the first place. If
1527     // this becomes a performance hit, we can work harder to preserve those
1528     // results until we get here but it's likely not worth it.
1529     bool MemberOfUnknownSpecialization;
1530     LookupTemplateName(R, S, SS, QualType(), /*EnteringContext=*/false,
1531                        MemberOfUnknownSpecialization);
1532 
1533     if (MemberOfUnknownSpecialization ||
1534         (R.getResultKind() == LookupResult::NotFoundInCurrentInstantiation))
1535       return ActOnDependentIdExpression(SS, TemplateKWLoc, NameInfo,
1536                                         IsAddressOfOperand, TemplateArgs);
1537   } else {
1538     bool IvarLookupFollowUp = II && !SS.isSet() && getCurMethodDecl();
1539     LookupParsedName(R, S, &SS, !IvarLookupFollowUp);
1540 
1541     // If the result might be in a dependent base class, this is a dependent
1542     // id-expression.
1543     if (R.getResultKind() == LookupResult::NotFoundInCurrentInstantiation)
1544       return ActOnDependentIdExpression(SS, TemplateKWLoc, NameInfo,
1545                                         IsAddressOfOperand, TemplateArgs);
1546 
1547     // If this reference is in an Objective-C method, then we need to do
1548     // some special Objective-C lookup, too.
1549     if (IvarLookupFollowUp) {
1550       ExprResult E(LookupInObjCMethod(R, S, II, true));
1551       if (E.isInvalid())
1552         return ExprError();
1553 
1554       if (Expr *Ex = E.takeAs<Expr>())
1555         return Owned(Ex);
1556     }
1557   }
1558 
1559   if (R.isAmbiguous())
1560     return ExprError();
1561 
1562   // Determine whether this name might be a candidate for
1563   // argument-dependent lookup.
1564   bool ADL = UseArgumentDependentLookup(SS, R, HasTrailingLParen);
1565 
1566   if (R.empty() && !ADL) {
1567     // Otherwise, this could be an implicitly declared function reference (legal
1568     // in C90, extension in C99, forbidden in C++).
1569     if (HasTrailingLParen && II && !getLangOptions().CPlusPlus) {
1570       NamedDecl *D = ImplicitlyDefineFunction(NameLoc, *II, S);
1571       if (D) R.addDecl(D);
1572     }
1573 
1574     // If this name wasn't predeclared and if this is not a function
1575     // call, diagnose the problem.
1576     if (R.empty()) {
1577 
1578       // In Microsoft mode, if we are inside a template class member function
1579       // and we can't resolve an identifier then assume the identifier is type
1580       // dependent. The goal is to postpone name lookup to instantiation time
1581       // to be able to search into type dependent base classes.
1582       if (getLangOptions().MicrosoftMode && CurContext->isDependentContext() &&
1583           isa<CXXMethodDecl>(CurContext))
1584         return ActOnDependentIdExpression(SS, TemplateKWLoc, NameInfo,
1585                                           IsAddressOfOperand, TemplateArgs);
1586 
1587       CorrectionCandidateCallback DefaultValidator;
1588       if (DiagnoseEmptyLookup(S, SS, R, CCC ? *CCC : DefaultValidator))
1589         return ExprError();
1590 
1591       assert(!R.empty() &&
1592              "DiagnoseEmptyLookup returned false but added no results");
1593 
1594       // If we found an Objective-C instance variable, let
1595       // LookupInObjCMethod build the appropriate expression to
1596       // reference the ivar.
1597       if (ObjCIvarDecl *Ivar = R.getAsSingle<ObjCIvarDecl>()) {
1598         R.clear();
1599         ExprResult E(LookupInObjCMethod(R, S, Ivar->getIdentifier()));
1600         // In a hopelessly buggy code, Objective-C instance variable
1601         // lookup fails and no expression will be built to reference it.
1602         if (!E.isInvalid() && !E.get())
1603           return ExprError();
1604         return move(E);
1605       }
1606     }
1607   }
1608 
1609   // This is guaranteed from this point on.
1610   assert(!R.empty() || ADL);
1611 
1612   // Check whether this might be a C++ implicit instance member access.
1613   // C++ [class.mfct.non-static]p3:
1614   //   When an id-expression that is not part of a class member access
1615   //   syntax and not used to form a pointer to member is used in the
1616   //   body of a non-static member function of class X, if name lookup
1617   //   resolves the name in the id-expression to a non-static non-type
1618   //   member of some class C, the id-expression is transformed into a
1619   //   class member access expression using (*this) as the
1620   //   postfix-expression to the left of the . operator.
1621   //
1622   // But we don't actually need to do this for '&' operands if R
1623   // resolved to a function or overloaded function set, because the
1624   // expression is ill-formed if it actually works out to be a
1625   // non-static member function:
1626   //
1627   // C++ [expr.ref]p4:
1628   //   Otherwise, if E1.E2 refers to a non-static member function. . .
1629   //   [t]he expression can be used only as the left-hand operand of a
1630   //   member function call.
1631   //
1632   // There are other safeguards against such uses, but it's important
1633   // to get this right here so that we don't end up making a
1634   // spuriously dependent expression if we're inside a dependent
1635   // instance method.
1636   if (!R.empty() && (*R.begin())->isCXXClassMember()) {
1637     bool MightBeImplicitMember;
1638     if (!IsAddressOfOperand)
1639       MightBeImplicitMember = true;
1640     else if (!SS.isEmpty())
1641       MightBeImplicitMember = false;
1642     else if (R.isOverloadedResult())
1643       MightBeImplicitMember = false;
1644     else if (R.isUnresolvableResult())
1645       MightBeImplicitMember = true;
1646     else
1647       MightBeImplicitMember = isa<FieldDecl>(R.getFoundDecl()) ||
1648                               isa<IndirectFieldDecl>(R.getFoundDecl());
1649 
1650     if (MightBeImplicitMember)
1651       return BuildPossibleImplicitMemberExpr(SS, TemplateKWLoc,
1652                                              R, TemplateArgs);
1653   }
1654 
1655   if (TemplateArgs || TemplateKWLoc.isValid())
1656     return BuildTemplateIdExpr(SS, TemplateKWLoc, R, ADL, TemplateArgs);
1657 
1658   return BuildDeclarationNameExpr(SS, R, ADL);
1659 }
1660 
1661 /// BuildQualifiedDeclarationNameExpr - Build a C++ qualified
1662 /// declaration name, generally during template instantiation.
1663 /// There's a large number of things which don't need to be done along
1664 /// this path.
1665 ExprResult
1666 Sema::BuildQualifiedDeclarationNameExpr(CXXScopeSpec &SS,
1667                                         const DeclarationNameInfo &NameInfo) {
1668   DeclContext *DC;
1669   if (!(DC = computeDeclContext(SS, false)) || DC->isDependentContext())
1670     return BuildDependentDeclRefExpr(SS, /*TemplateKWLoc=*/SourceLocation(),
1671                                      NameInfo, /*TemplateArgs=*/0);
1672 
1673   if (RequireCompleteDeclContext(SS, DC))
1674     return ExprError();
1675 
1676   LookupResult R(*this, NameInfo, LookupOrdinaryName);
1677   LookupQualifiedName(R, DC);
1678 
1679   if (R.isAmbiguous())
1680     return ExprError();
1681 
1682   if (R.empty()) {
1683     Diag(NameInfo.getLoc(), diag::err_no_member)
1684       << NameInfo.getName() << DC << SS.getRange();
1685     return ExprError();
1686   }
1687 
1688   return BuildDeclarationNameExpr(SS, R, /*ADL*/ false);
1689 }
1690 
1691 /// LookupInObjCMethod - The parser has read a name in, and Sema has
1692 /// detected that we're currently inside an ObjC method.  Perform some
1693 /// additional lookup.
1694 ///
1695 /// Ideally, most of this would be done by lookup, but there's
1696 /// actually quite a lot of extra work involved.
1697 ///
1698 /// Returns a null sentinel to indicate trivial success.
1699 ExprResult
1700 Sema::LookupInObjCMethod(LookupResult &Lookup, Scope *S,
1701                          IdentifierInfo *II, bool AllowBuiltinCreation) {
1702   SourceLocation Loc = Lookup.getNameLoc();
1703   ObjCMethodDecl *CurMethod = getCurMethodDecl();
1704 
1705   // There are two cases to handle here.  1) scoped lookup could have failed,
1706   // in which case we should look for an ivar.  2) scoped lookup could have
1707   // found a decl, but that decl is outside the current instance method (i.e.
1708   // a global variable).  In these two cases, we do a lookup for an ivar with
1709   // this name, if the lookup sucedes, we replace it our current decl.
1710 
1711   // If we're in a class method, we don't normally want to look for
1712   // ivars.  But if we don't find anything else, and there's an
1713   // ivar, that's an error.
1714   bool IsClassMethod = CurMethod->isClassMethod();
1715 
1716   bool LookForIvars;
1717   if (Lookup.empty())
1718     LookForIvars = true;
1719   else if (IsClassMethod)
1720     LookForIvars = false;
1721   else
1722     LookForIvars = (Lookup.isSingleResult() &&
1723                     Lookup.getFoundDecl()->isDefinedOutsideFunctionOrMethod());
1724   ObjCInterfaceDecl *IFace = 0;
1725   if (LookForIvars) {
1726     IFace = CurMethod->getClassInterface();
1727     ObjCInterfaceDecl *ClassDeclared;
1728     ObjCIvarDecl *IV = 0;
1729     if (IFace && (IV = IFace->lookupInstanceVariable(II, ClassDeclared))) {
1730       // Diagnose using an ivar in a class method.
1731       if (IsClassMethod)
1732         return ExprError(Diag(Loc, diag::error_ivar_use_in_class_method)
1733                          << IV->getDeclName());
1734 
1735       // If we're referencing an invalid decl, just return this as a silent
1736       // error node.  The error diagnostic was already emitted on the decl.
1737       if (IV->isInvalidDecl())
1738         return ExprError();
1739 
1740       // Check if referencing a field with __attribute__((deprecated)).
1741       if (DiagnoseUseOfDecl(IV, Loc))
1742         return ExprError();
1743 
1744       // Diagnose the use of an ivar outside of the declaring class.
1745       if (IV->getAccessControl() == ObjCIvarDecl::Private &&
1746           !declaresSameEntity(ClassDeclared, IFace))
1747         Diag(Loc, diag::error_private_ivar_access) << IV->getDeclName();
1748 
1749       // FIXME: This should use a new expr for a direct reference, don't
1750       // turn this into Self->ivar, just return a BareIVarExpr or something.
1751       IdentifierInfo &II = Context.Idents.get("self");
1752       UnqualifiedId SelfName;
1753       SelfName.setIdentifier(&II, SourceLocation());
1754       SelfName.setKind(UnqualifiedId::IK_ImplicitSelfParam);
1755       CXXScopeSpec SelfScopeSpec;
1756       SourceLocation TemplateKWLoc;
1757       ExprResult SelfExpr = ActOnIdExpression(S, SelfScopeSpec, TemplateKWLoc,
1758                                               SelfName, false, false);
1759       if (SelfExpr.isInvalid())
1760         return ExprError();
1761 
1762       SelfExpr = DefaultLvalueConversion(SelfExpr.take());
1763       if (SelfExpr.isInvalid())
1764         return ExprError();
1765 
1766       MarkAnyDeclReferenced(Loc, IV);
1767       return Owned(new (Context)
1768                    ObjCIvarRefExpr(IV, IV->getType(), Loc,
1769                                    SelfExpr.take(), true, true));
1770     }
1771   } else if (CurMethod->isInstanceMethod()) {
1772     // We should warn if a local variable hides an ivar.
1773     if (ObjCInterfaceDecl *IFace = CurMethod->getClassInterface()) {
1774       ObjCInterfaceDecl *ClassDeclared;
1775       if (ObjCIvarDecl *IV = IFace->lookupInstanceVariable(II, ClassDeclared)) {
1776         if (IV->getAccessControl() != ObjCIvarDecl::Private ||
1777             declaresSameEntity(IFace, ClassDeclared))
1778           Diag(Loc, diag::warn_ivar_use_hidden) << IV->getDeclName();
1779       }
1780     }
1781   } else if (Lookup.isSingleResult() &&
1782              Lookup.getFoundDecl()->isDefinedOutsideFunctionOrMethod()) {
1783     // If accessing a stand-alone ivar in a class method, this is an error.
1784     if (const ObjCIvarDecl *IV = dyn_cast<ObjCIvarDecl>(Lookup.getFoundDecl()))
1785       return ExprError(Diag(Loc, diag::error_ivar_use_in_class_method)
1786                        << IV->getDeclName());
1787   }
1788 
1789   if (Lookup.empty() && II && AllowBuiltinCreation) {
1790     // FIXME. Consolidate this with similar code in LookupName.
1791     if (unsigned BuiltinID = II->getBuiltinID()) {
1792       if (!(getLangOptions().CPlusPlus &&
1793             Context.BuiltinInfo.isPredefinedLibFunction(BuiltinID))) {
1794         NamedDecl *D = LazilyCreateBuiltin((IdentifierInfo *)II, BuiltinID,
1795                                            S, Lookup.isForRedeclaration(),
1796                                            Lookup.getNameLoc());
1797         if (D) Lookup.addDecl(D);
1798       }
1799     }
1800   }
1801   // Sentinel value saying that we didn't do anything special.
1802   return Owned((Expr*) 0);
1803 }
1804 
1805 /// \brief Cast a base object to a member's actual type.
1806 ///
1807 /// Logically this happens in three phases:
1808 ///
1809 /// * First we cast from the base type to the naming class.
1810 ///   The naming class is the class into which we were looking
1811 ///   when we found the member;  it's the qualifier type if a
1812 ///   qualifier was provided, and otherwise it's the base type.
1813 ///
1814 /// * Next we cast from the naming class to the declaring class.
1815 ///   If the member we found was brought into a class's scope by
1816 ///   a using declaration, this is that class;  otherwise it's
1817 ///   the class declaring the member.
1818 ///
1819 /// * Finally we cast from the declaring class to the "true"
1820 ///   declaring class of the member.  This conversion does not
1821 ///   obey access control.
1822 ExprResult
1823 Sema::PerformObjectMemberConversion(Expr *From,
1824                                     NestedNameSpecifier *Qualifier,
1825                                     NamedDecl *FoundDecl,
1826                                     NamedDecl *Member) {
1827   CXXRecordDecl *RD = dyn_cast<CXXRecordDecl>(Member->getDeclContext());
1828   if (!RD)
1829     return Owned(From);
1830 
1831   QualType DestRecordType;
1832   QualType DestType;
1833   QualType FromRecordType;
1834   QualType FromType = From->getType();
1835   bool PointerConversions = false;
1836   if (isa<FieldDecl>(Member)) {
1837     DestRecordType = Context.getCanonicalType(Context.getTypeDeclType(RD));
1838 
1839     if (FromType->getAs<PointerType>()) {
1840       DestType = Context.getPointerType(DestRecordType);
1841       FromRecordType = FromType->getPointeeType();
1842       PointerConversions = true;
1843     } else {
1844       DestType = DestRecordType;
1845       FromRecordType = FromType;
1846     }
1847   } else if (CXXMethodDecl *Method = dyn_cast<CXXMethodDecl>(Member)) {
1848     if (Method->isStatic())
1849       return Owned(From);
1850 
1851     DestType = Method->getThisType(Context);
1852     DestRecordType = DestType->getPointeeType();
1853 
1854     if (FromType->getAs<PointerType>()) {
1855       FromRecordType = FromType->getPointeeType();
1856       PointerConversions = true;
1857     } else {
1858       FromRecordType = FromType;
1859       DestType = DestRecordType;
1860     }
1861   } else {
1862     // No conversion necessary.
1863     return Owned(From);
1864   }
1865 
1866   if (DestType->isDependentType() || FromType->isDependentType())
1867     return Owned(From);
1868 
1869   // If the unqualified types are the same, no conversion is necessary.
1870   if (Context.hasSameUnqualifiedType(FromRecordType, DestRecordType))
1871     return Owned(From);
1872 
1873   SourceRange FromRange = From->getSourceRange();
1874   SourceLocation FromLoc = FromRange.getBegin();
1875 
1876   ExprValueKind VK = From->getValueKind();
1877 
1878   // C++ [class.member.lookup]p8:
1879   //   [...] Ambiguities can often be resolved by qualifying a name with its
1880   //   class name.
1881   //
1882   // If the member was a qualified name and the qualified referred to a
1883   // specific base subobject type, we'll cast to that intermediate type
1884   // first and then to the object in which the member is declared. That allows
1885   // one to resolve ambiguities in, e.g., a diamond-shaped hierarchy such as:
1886   //
1887   //   class Base { public: int x; };
1888   //   class Derived1 : public Base { };
1889   //   class Derived2 : public Base { };
1890   //   class VeryDerived : public Derived1, public Derived2 { void f(); };
1891   //
1892   //   void VeryDerived::f() {
1893   //     x = 17; // error: ambiguous base subobjects
1894   //     Derived1::x = 17; // okay, pick the Base subobject of Derived1
1895   //   }
1896   if (Qualifier) {
1897     QualType QType = QualType(Qualifier->getAsType(), 0);
1898     assert(!QType.isNull() && "lookup done with dependent qualifier?");
1899     assert(QType->isRecordType() && "lookup done with non-record type");
1900 
1901     QualType QRecordType = QualType(QType->getAs<RecordType>(), 0);
1902 
1903     // In C++98, the qualifier type doesn't actually have to be a base
1904     // type of the object type, in which case we just ignore it.
1905     // Otherwise build the appropriate casts.
1906     if (IsDerivedFrom(FromRecordType, QRecordType)) {
1907       CXXCastPath BasePath;
1908       if (CheckDerivedToBaseConversion(FromRecordType, QRecordType,
1909                                        FromLoc, FromRange, &BasePath))
1910         return ExprError();
1911 
1912       if (PointerConversions)
1913         QType = Context.getPointerType(QType);
1914       From = ImpCastExprToType(From, QType, CK_UncheckedDerivedToBase,
1915                                VK, &BasePath).take();
1916 
1917       FromType = QType;
1918       FromRecordType = QRecordType;
1919 
1920       // If the qualifier type was the same as the destination type,
1921       // we're done.
1922       if (Context.hasSameUnqualifiedType(FromRecordType, DestRecordType))
1923         return Owned(From);
1924     }
1925   }
1926 
1927   bool IgnoreAccess = false;
1928 
1929   // If we actually found the member through a using declaration, cast
1930   // down to the using declaration's type.
1931   //
1932   // Pointer equality is fine here because only one declaration of a
1933   // class ever has member declarations.
1934   if (FoundDecl->getDeclContext() != Member->getDeclContext()) {
1935     assert(isa<UsingShadowDecl>(FoundDecl));
1936     QualType URecordType = Context.getTypeDeclType(
1937                            cast<CXXRecordDecl>(FoundDecl->getDeclContext()));
1938 
1939     // We only need to do this if the naming-class to declaring-class
1940     // conversion is non-trivial.
1941     if (!Context.hasSameUnqualifiedType(FromRecordType, URecordType)) {
1942       assert(IsDerivedFrom(FromRecordType, URecordType));
1943       CXXCastPath BasePath;
1944       if (CheckDerivedToBaseConversion(FromRecordType, URecordType,
1945                                        FromLoc, FromRange, &BasePath))
1946         return ExprError();
1947 
1948       QualType UType = URecordType;
1949       if (PointerConversions)
1950         UType = Context.getPointerType(UType);
1951       From = ImpCastExprToType(From, UType, CK_UncheckedDerivedToBase,
1952                                VK, &BasePath).take();
1953       FromType = UType;
1954       FromRecordType = URecordType;
1955     }
1956 
1957     // We don't do access control for the conversion from the
1958     // declaring class to the true declaring class.
1959     IgnoreAccess = true;
1960   }
1961 
1962   CXXCastPath BasePath;
1963   if (CheckDerivedToBaseConversion(FromRecordType, DestRecordType,
1964                                    FromLoc, FromRange, &BasePath,
1965                                    IgnoreAccess))
1966     return ExprError();
1967 
1968   return ImpCastExprToType(From, DestType, CK_UncheckedDerivedToBase,
1969                            VK, &BasePath);
1970 }
1971 
1972 bool Sema::UseArgumentDependentLookup(const CXXScopeSpec &SS,
1973                                       const LookupResult &R,
1974                                       bool HasTrailingLParen) {
1975   // Only when used directly as the postfix-expression of a call.
1976   if (!HasTrailingLParen)
1977     return false;
1978 
1979   // Never if a scope specifier was provided.
1980   if (SS.isSet())
1981     return false;
1982 
1983   // Only in C++ or ObjC++.
1984   if (!getLangOptions().CPlusPlus)
1985     return false;
1986 
1987   // Turn off ADL when we find certain kinds of declarations during
1988   // normal lookup:
1989   for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I) {
1990     NamedDecl *D = *I;
1991 
1992     // C++0x [basic.lookup.argdep]p3:
1993     //     -- a declaration of a class member
1994     // Since using decls preserve this property, we check this on the
1995     // original decl.
1996     if (D->isCXXClassMember())
1997       return false;
1998 
1999     // C++0x [basic.lookup.argdep]p3:
2000     //     -- a block-scope function declaration that is not a
2001     //        using-declaration
2002     // NOTE: we also trigger this for function templates (in fact, we
2003     // don't check the decl type at all, since all other decl types
2004     // turn off ADL anyway).
2005     if (isa<UsingShadowDecl>(D))
2006       D = cast<UsingShadowDecl>(D)->getTargetDecl();
2007     else if (D->getDeclContext()->isFunctionOrMethod())
2008       return false;
2009 
2010     // C++0x [basic.lookup.argdep]p3:
2011     //     -- a declaration that is neither a function or a function
2012     //        template
2013     // And also for builtin functions.
2014     if (isa<FunctionDecl>(D)) {
2015       FunctionDecl *FDecl = cast<FunctionDecl>(D);
2016 
2017       // But also builtin functions.
2018       if (FDecl->getBuiltinID() && FDecl->isImplicit())
2019         return false;
2020     } else if (!isa<FunctionTemplateDecl>(D))
2021       return false;
2022   }
2023 
2024   return true;
2025 }
2026 
2027 
2028 /// Diagnoses obvious problems with the use of the given declaration
2029 /// as an expression.  This is only actually called for lookups that
2030 /// were not overloaded, and it doesn't promise that the declaration
2031 /// will in fact be used.
2032 static bool CheckDeclInExpr(Sema &S, SourceLocation Loc, NamedDecl *D) {
2033   if (isa<TypedefNameDecl>(D)) {
2034     S.Diag(Loc, diag::err_unexpected_typedef) << D->getDeclName();
2035     return true;
2036   }
2037 
2038   if (isa<ObjCInterfaceDecl>(D)) {
2039     S.Diag(Loc, diag::err_unexpected_interface) << D->getDeclName();
2040     return true;
2041   }
2042 
2043   if (isa<NamespaceDecl>(D)) {
2044     S.Diag(Loc, diag::err_unexpected_namespace) << D->getDeclName();
2045     return true;
2046   }
2047 
2048   return false;
2049 }
2050 
2051 ExprResult
2052 Sema::BuildDeclarationNameExpr(const CXXScopeSpec &SS,
2053                                LookupResult &R,
2054                                bool NeedsADL) {
2055   // If this is a single, fully-resolved result and we don't need ADL,
2056   // just build an ordinary singleton decl ref.
2057   if (!NeedsADL && R.isSingleResult() && !R.getAsSingle<FunctionTemplateDecl>())
2058     return BuildDeclarationNameExpr(SS, R.getLookupNameInfo(),
2059                                     R.getFoundDecl());
2060 
2061   // We only need to check the declaration if there's exactly one
2062   // result, because in the overloaded case the results can only be
2063   // functions and function templates.
2064   if (R.isSingleResult() &&
2065       CheckDeclInExpr(*this, R.getNameLoc(), R.getFoundDecl()))
2066     return ExprError();
2067 
2068   // Otherwise, just build an unresolved lookup expression.  Suppress
2069   // any lookup-related diagnostics; we'll hash these out later, when
2070   // we've picked a target.
2071   R.suppressDiagnostics();
2072 
2073   UnresolvedLookupExpr *ULE
2074     = UnresolvedLookupExpr::Create(Context, R.getNamingClass(),
2075                                    SS.getWithLocInContext(Context),
2076                                    R.getLookupNameInfo(),
2077                                    NeedsADL, R.isOverloadedResult(),
2078                                    R.begin(), R.end());
2079 
2080   return Owned(ULE);
2081 }
2082 
2083 static bool shouldBuildBlockDeclRef(ValueDecl *D, Sema &S) {
2084   // Check for a variable with local storage not from the current scope;
2085   // we need to create BlockDeclRefExprs for these.
2086   // FIXME: BlockDeclRefExpr shouldn't exist!
2087   VarDecl *var = dyn_cast<VarDecl>(D);
2088   if (!var)
2089     return false;
2090   if (var->getDeclContext() == S.CurContext)
2091     return false;
2092   if (!var->hasLocalStorage())
2093     return false;
2094   return S.getCurBlock() != 0;
2095 }
2096 
2097 static ExprResult BuildBlockDeclRefExpr(Sema &S, ValueDecl *VD,
2098                                         const DeclarationNameInfo &NameInfo) {
2099   VarDecl *var = cast<VarDecl>(VD);
2100   QualType exprType = var->getType().getNonReferenceType();
2101 
2102   bool HasBlockAttr = var->hasAttr<BlocksAttr>();
2103   bool ConstAdded = false;
2104   if (!HasBlockAttr) {
2105     ConstAdded = !exprType.isConstQualified();
2106     exprType.addConst();
2107   }
2108 
2109   BlockDeclRefExpr *BDRE =
2110       new (S.Context) BlockDeclRefExpr(var, exprType, VK_LValue,
2111                                        NameInfo.getLoc(), HasBlockAttr,
2112                                        ConstAdded);
2113 
2114   S.MarkBlockDeclRefReferenced(BDRE);
2115 
2116   return S.Owned(BDRE);
2117 }
2118 
2119 /// \brief Complete semantic analysis for a reference to the given declaration.
2120 ExprResult
2121 Sema::BuildDeclarationNameExpr(const CXXScopeSpec &SS,
2122                                const DeclarationNameInfo &NameInfo,
2123                                NamedDecl *D) {
2124   assert(D && "Cannot refer to a NULL declaration");
2125   assert(!isa<FunctionTemplateDecl>(D) &&
2126          "Cannot refer unambiguously to a function template");
2127 
2128   SourceLocation Loc = NameInfo.getLoc();
2129   if (CheckDeclInExpr(*this, Loc, D))
2130     return ExprError();
2131 
2132   if (TemplateDecl *Template = dyn_cast<TemplateDecl>(D)) {
2133     // Specifically diagnose references to class templates that are missing
2134     // a template argument list.
2135     Diag(Loc, diag::err_template_decl_ref)
2136       << Template << SS.getRange();
2137     Diag(Template->getLocation(), diag::note_template_decl_here);
2138     return ExprError();
2139   }
2140 
2141   // Make sure that we're referring to a value.
2142   ValueDecl *VD = dyn_cast<ValueDecl>(D);
2143   if (!VD) {
2144     Diag(Loc, diag::err_ref_non_value)
2145       << D << SS.getRange();
2146     Diag(D->getLocation(), diag::note_declared_at);
2147     return ExprError();
2148   }
2149 
2150   // Check whether this declaration can be used. Note that we suppress
2151   // this check when we're going to perform argument-dependent lookup
2152   // on this function name, because this might not be the function
2153   // that overload resolution actually selects.
2154   if (DiagnoseUseOfDecl(VD, Loc))
2155     return ExprError();
2156 
2157   // Only create DeclRefExpr's for valid Decl's.
2158   if (VD->isInvalidDecl())
2159     return ExprError();
2160 
2161   // Handle members of anonymous structs and unions.  If we got here,
2162   // and the reference is to a class member indirect field, then this
2163   // must be the subject of a pointer-to-member expression.
2164   if (IndirectFieldDecl *indirectField = dyn_cast<IndirectFieldDecl>(VD))
2165     if (!indirectField->isCXXClassMember())
2166       return BuildAnonymousStructUnionMemberReference(SS, NameInfo.getLoc(),
2167                                                       indirectField);
2168 
2169   {
2170     QualType type = VD->getType();
2171     ExprValueKind valueKind = VK_RValue;
2172 
2173     switch (D->getKind()) {
2174     // Ignore all the non-ValueDecl kinds.
2175 #define ABSTRACT_DECL(kind)
2176 #define VALUE(type, base)
2177 #define DECL(type, base) \
2178     case Decl::type:
2179 #include "clang/AST/DeclNodes.inc"
2180       llvm_unreachable("invalid value decl kind");
2181 
2182     // These shouldn't make it here.
2183     case Decl::ObjCAtDefsField:
2184     case Decl::ObjCIvar:
2185       llvm_unreachable("forming non-member reference to ivar?");
2186 
2187     // Enum constants are always r-values and never references.
2188     // Unresolved using declarations are dependent.
2189     case Decl::EnumConstant:
2190     case Decl::UnresolvedUsingValue:
2191       valueKind = VK_RValue;
2192       break;
2193 
2194     // Fields and indirect fields that got here must be for
2195     // pointer-to-member expressions; we just call them l-values for
2196     // internal consistency, because this subexpression doesn't really
2197     // exist in the high-level semantics.
2198     case Decl::Field:
2199     case Decl::IndirectField:
2200       assert(getLangOptions().CPlusPlus &&
2201              "building reference to field in C?");
2202 
2203       // These can't have reference type in well-formed programs, but
2204       // for internal consistency we do this anyway.
2205       type = type.getNonReferenceType();
2206       valueKind = VK_LValue;
2207       break;
2208 
2209     // Non-type template parameters are either l-values or r-values
2210     // depending on the type.
2211     case Decl::NonTypeTemplateParm: {
2212       if (const ReferenceType *reftype = type->getAs<ReferenceType>()) {
2213         type = reftype->getPointeeType();
2214         valueKind = VK_LValue; // even if the parameter is an r-value reference
2215         break;
2216       }
2217 
2218       // For non-references, we need to strip qualifiers just in case
2219       // the template parameter was declared as 'const int' or whatever.
2220       valueKind = VK_RValue;
2221       type = type.getUnqualifiedType();
2222       break;
2223     }
2224 
2225     case Decl::Var:
2226       // In C, "extern void blah;" is valid and is an r-value.
2227       if (!getLangOptions().CPlusPlus &&
2228           !type.hasQualifiers() &&
2229           type->isVoidType()) {
2230         valueKind = VK_RValue;
2231         break;
2232       }
2233       // fallthrough
2234 
2235     case Decl::ImplicitParam:
2236     case Decl::ParmVar: {
2237       // These are always l-values.
2238       valueKind = VK_LValue;
2239       type = type.getNonReferenceType();
2240 
2241       if (shouldBuildBlockDeclRef(VD, *this))
2242         return BuildBlockDeclRefExpr(*this, VD, NameInfo);
2243 
2244       // FIXME: Does the addition of const really only apply in
2245       // potentially-evaluated contexts? Since the variable isn't actually
2246       // captured in an unevaluated context, it seems that the answer is no.
2247       if (ExprEvalContexts.back().Context != Sema::Unevaluated) {
2248         QualType CapturedType = getCapturedDeclRefType(cast<VarDecl>(VD), Loc);
2249         if (!CapturedType.isNull())
2250           type = CapturedType;
2251       }
2252 
2253       break;
2254     }
2255 
2256     case Decl::Function: {
2257       const FunctionType *fty = type->castAs<FunctionType>();
2258 
2259       // If we're referring to a function with an __unknown_anytype
2260       // result type, make the entire expression __unknown_anytype.
2261       if (fty->getResultType() == Context.UnknownAnyTy) {
2262         type = Context.UnknownAnyTy;
2263         valueKind = VK_RValue;
2264         break;
2265       }
2266 
2267       // Functions are l-values in C++.
2268       if (getLangOptions().CPlusPlus) {
2269         valueKind = VK_LValue;
2270         break;
2271       }
2272 
2273       // C99 DR 316 says that, if a function type comes from a
2274       // function definition (without a prototype), that type is only
2275       // used for checking compatibility. Therefore, when referencing
2276       // the function, we pretend that we don't have the full function
2277       // type.
2278       if (!cast<FunctionDecl>(VD)->hasPrototype() &&
2279           isa<FunctionProtoType>(fty))
2280         type = Context.getFunctionNoProtoType(fty->getResultType(),
2281                                               fty->getExtInfo());
2282 
2283       // Functions are r-values in C.
2284       valueKind = VK_RValue;
2285       break;
2286     }
2287 
2288     case Decl::CXXMethod:
2289       // If we're referring to a method with an __unknown_anytype
2290       // result type, make the entire expression __unknown_anytype.
2291       // This should only be possible with a type written directly.
2292       if (const FunctionProtoType *proto
2293             = dyn_cast<FunctionProtoType>(VD->getType()))
2294         if (proto->getResultType() == Context.UnknownAnyTy) {
2295           type = Context.UnknownAnyTy;
2296           valueKind = VK_RValue;
2297           break;
2298         }
2299 
2300       // C++ methods are l-values if static, r-values if non-static.
2301       if (cast<CXXMethodDecl>(VD)->isStatic()) {
2302         valueKind = VK_LValue;
2303         break;
2304       }
2305       // fallthrough
2306 
2307     case Decl::CXXConversion:
2308     case Decl::CXXDestructor:
2309     case Decl::CXXConstructor:
2310       valueKind = VK_RValue;
2311       break;
2312     }
2313 
2314     return BuildDeclRefExpr(VD, type, valueKind, NameInfo, &SS);
2315   }
2316 }
2317 
2318 ExprResult Sema::ActOnPredefinedExpr(SourceLocation Loc, tok::TokenKind Kind) {
2319   PredefinedExpr::IdentType IT;
2320 
2321   switch (Kind) {
2322   default: llvm_unreachable("Unknown simple primary expr!");
2323   case tok::kw___func__: IT = PredefinedExpr::Func; break; // [C99 6.4.2.2]
2324   case tok::kw___FUNCTION__: IT = PredefinedExpr::Function; break;
2325   case tok::kw___PRETTY_FUNCTION__: IT = PredefinedExpr::PrettyFunction; break;
2326   }
2327 
2328   // Pre-defined identifiers are of type char[x], where x is the length of the
2329   // string.
2330 
2331   Decl *currentDecl = getCurFunctionOrMethodDecl();
2332   if (!currentDecl && getCurBlock())
2333     currentDecl = getCurBlock()->TheDecl;
2334   if (!currentDecl) {
2335     Diag(Loc, diag::ext_predef_outside_function);
2336     currentDecl = Context.getTranslationUnitDecl();
2337   }
2338 
2339   QualType ResTy;
2340   if (cast<DeclContext>(currentDecl)->isDependentContext()) {
2341     ResTy = Context.DependentTy;
2342   } else {
2343     unsigned Length = PredefinedExpr::ComputeName(IT, currentDecl).length();
2344 
2345     llvm::APInt LengthI(32, Length + 1);
2346     ResTy = Context.CharTy.withConst();
2347     ResTy = Context.getConstantArrayType(ResTy, LengthI, ArrayType::Normal, 0);
2348   }
2349   return Owned(new (Context) PredefinedExpr(Loc, ResTy, IT));
2350 }
2351 
2352 ExprResult Sema::ActOnCharacterConstant(const Token &Tok) {
2353   SmallString<16> CharBuffer;
2354   bool Invalid = false;
2355   StringRef ThisTok = PP.getSpelling(Tok, CharBuffer, &Invalid);
2356   if (Invalid)
2357     return ExprError();
2358 
2359   CharLiteralParser Literal(ThisTok.begin(), ThisTok.end(), Tok.getLocation(),
2360                             PP, Tok.getKind());
2361   if (Literal.hadError())
2362     return ExprError();
2363 
2364   QualType Ty;
2365   if (Literal.isWide())
2366     Ty = Context.WCharTy; // L'x' -> wchar_t in C and C++.
2367   else if (Literal.isUTF16())
2368     Ty = Context.Char16Ty; // u'x' -> char16_t in C11 and C++11.
2369   else if (Literal.isUTF32())
2370     Ty = Context.Char32Ty; // U'x' -> char32_t in C11 and C++11.
2371   else if (!getLangOptions().CPlusPlus || Literal.isMultiChar())
2372     Ty = Context.IntTy;   // 'x' -> int in C, 'wxyz' -> int in C++.
2373   else
2374     Ty = Context.CharTy;  // 'x' -> char in C++
2375 
2376   CharacterLiteral::CharacterKind Kind = CharacterLiteral::Ascii;
2377   if (Literal.isWide())
2378     Kind = CharacterLiteral::Wide;
2379   else if (Literal.isUTF16())
2380     Kind = CharacterLiteral::UTF16;
2381   else if (Literal.isUTF32())
2382     Kind = CharacterLiteral::UTF32;
2383 
2384   return Owned(new (Context) CharacterLiteral(Literal.getValue(), Kind, Ty,
2385                                               Tok.getLocation()));
2386 }
2387 
2388 ExprResult Sema::ActOnNumericConstant(const Token &Tok) {
2389   // Fast path for a single digit (which is quite common).  A single digit
2390   // cannot have a trigraph, escaped newline, radix prefix, or type suffix.
2391   if (Tok.getLength() == 1) {
2392     const char Val = PP.getSpellingOfSingleCharacterNumericConstant(Tok);
2393     unsigned IntSize = Context.getTargetInfo().getIntWidth();
2394     return Owned(IntegerLiteral::Create(Context, llvm::APInt(IntSize, Val-'0'),
2395                     Context.IntTy, Tok.getLocation()));
2396   }
2397 
2398   SmallString<512> IntegerBuffer;
2399   // Add padding so that NumericLiteralParser can overread by one character.
2400   IntegerBuffer.resize(Tok.getLength()+1);
2401   const char *ThisTokBegin = &IntegerBuffer[0];
2402 
2403   // Get the spelling of the token, which eliminates trigraphs, etc.
2404   bool Invalid = false;
2405   unsigned ActualLength = PP.getSpelling(Tok, ThisTokBegin, &Invalid);
2406   if (Invalid)
2407     return ExprError();
2408 
2409   NumericLiteralParser Literal(ThisTokBegin, ThisTokBegin+ActualLength,
2410                                Tok.getLocation(), PP);
2411   if (Literal.hadError)
2412     return ExprError();
2413 
2414   Expr *Res;
2415 
2416   if (Literal.isFloatingLiteral()) {
2417     QualType Ty;
2418     if (Literal.isFloat)
2419       Ty = Context.FloatTy;
2420     else if (!Literal.isLong)
2421       Ty = Context.DoubleTy;
2422     else
2423       Ty = Context.LongDoubleTy;
2424 
2425     const llvm::fltSemantics &Format = Context.getFloatTypeSemantics(Ty);
2426 
2427     using llvm::APFloat;
2428     APFloat Val(Format);
2429 
2430     APFloat::opStatus result = Literal.GetFloatValue(Val);
2431 
2432     // Overflow is always an error, but underflow is only an error if
2433     // we underflowed to zero (APFloat reports denormals as underflow).
2434     if ((result & APFloat::opOverflow) ||
2435         ((result & APFloat::opUnderflow) && Val.isZero())) {
2436       unsigned diagnostic;
2437       SmallString<20> buffer;
2438       if (result & APFloat::opOverflow) {
2439         diagnostic = diag::warn_float_overflow;
2440         APFloat::getLargest(Format).toString(buffer);
2441       } else {
2442         diagnostic = diag::warn_float_underflow;
2443         APFloat::getSmallest(Format).toString(buffer);
2444       }
2445 
2446       Diag(Tok.getLocation(), diagnostic)
2447         << Ty
2448         << StringRef(buffer.data(), buffer.size());
2449     }
2450 
2451     bool isExact = (result == APFloat::opOK);
2452     Res = FloatingLiteral::Create(Context, Val, isExact, Ty, Tok.getLocation());
2453 
2454     if (Ty == Context.DoubleTy) {
2455       if (getLangOptions().SinglePrecisionConstants) {
2456         Res = ImpCastExprToType(Res, Context.FloatTy, CK_FloatingCast).take();
2457       } else if (getLangOptions().OpenCL && !getOpenCLOptions().cl_khr_fp64) {
2458         Diag(Tok.getLocation(), diag::warn_double_const_requires_fp64);
2459         Res = ImpCastExprToType(Res, Context.FloatTy, CK_FloatingCast).take();
2460       }
2461     }
2462   } else if (!Literal.isIntegerLiteral()) {
2463     return ExprError();
2464   } else {
2465     QualType Ty;
2466 
2467     // long long is a C99 feature.
2468     if (!getLangOptions().C99 && Literal.isLongLong)
2469       Diag(Tok.getLocation(),
2470            getLangOptions().CPlusPlus0x ?
2471              diag::warn_cxx98_compat_longlong : diag::ext_longlong);
2472 
2473     // Get the value in the widest-possible width.
2474     llvm::APInt ResultVal(Context.getTargetInfo().getIntMaxTWidth(), 0);
2475 
2476     if (Literal.GetIntegerValue(ResultVal)) {
2477       // If this value didn't fit into uintmax_t, warn and force to ull.
2478       Diag(Tok.getLocation(), diag::warn_integer_too_large);
2479       Ty = Context.UnsignedLongLongTy;
2480       assert(Context.getTypeSize(Ty) == ResultVal.getBitWidth() &&
2481              "long long is not intmax_t?");
2482     } else {
2483       // If this value fits into a ULL, try to figure out what else it fits into
2484       // according to the rules of C99 6.4.4.1p5.
2485 
2486       // Octal, Hexadecimal, and integers with a U suffix are allowed to
2487       // be an unsigned int.
2488       bool AllowUnsigned = Literal.isUnsigned || Literal.getRadix() != 10;
2489 
2490       // Check from smallest to largest, picking the smallest type we can.
2491       unsigned Width = 0;
2492       if (!Literal.isLong && !Literal.isLongLong) {
2493         // Are int/unsigned possibilities?
2494         unsigned IntSize = Context.getTargetInfo().getIntWidth();
2495 
2496         // Does it fit in a unsigned int?
2497         if (ResultVal.isIntN(IntSize)) {
2498           // Does it fit in a signed int?
2499           if (!Literal.isUnsigned && ResultVal[IntSize-1] == 0)
2500             Ty = Context.IntTy;
2501           else if (AllowUnsigned)
2502             Ty = Context.UnsignedIntTy;
2503           Width = IntSize;
2504         }
2505       }
2506 
2507       // Are long/unsigned long possibilities?
2508       if (Ty.isNull() && !Literal.isLongLong) {
2509         unsigned LongSize = Context.getTargetInfo().getLongWidth();
2510 
2511         // Does it fit in a unsigned long?
2512         if (ResultVal.isIntN(LongSize)) {
2513           // Does it fit in a signed long?
2514           if (!Literal.isUnsigned && ResultVal[LongSize-1] == 0)
2515             Ty = Context.LongTy;
2516           else if (AllowUnsigned)
2517             Ty = Context.UnsignedLongTy;
2518           Width = LongSize;
2519         }
2520       }
2521 
2522       // Finally, check long long if needed.
2523       if (Ty.isNull()) {
2524         unsigned LongLongSize = Context.getTargetInfo().getLongLongWidth();
2525 
2526         // Does it fit in a unsigned long long?
2527         if (ResultVal.isIntN(LongLongSize)) {
2528           // Does it fit in a signed long long?
2529           // To be compatible with MSVC, hex integer literals ending with the
2530           // LL or i64 suffix are always signed in Microsoft mode.
2531           if (!Literal.isUnsigned && (ResultVal[LongLongSize-1] == 0 ||
2532               (getLangOptions().MicrosoftExt && Literal.isLongLong)))
2533             Ty = Context.LongLongTy;
2534           else if (AllowUnsigned)
2535             Ty = Context.UnsignedLongLongTy;
2536           Width = LongLongSize;
2537         }
2538       }
2539 
2540       // If we still couldn't decide a type, we probably have something that
2541       // does not fit in a signed long long, but has no U suffix.
2542       if (Ty.isNull()) {
2543         Diag(Tok.getLocation(), diag::warn_integer_too_large_for_signed);
2544         Ty = Context.UnsignedLongLongTy;
2545         Width = Context.getTargetInfo().getLongLongWidth();
2546       }
2547 
2548       if (ResultVal.getBitWidth() != Width)
2549         ResultVal = ResultVal.trunc(Width);
2550     }
2551     Res = IntegerLiteral::Create(Context, ResultVal, Ty, Tok.getLocation());
2552   }
2553 
2554   // If this is an imaginary literal, create the ImaginaryLiteral wrapper.
2555   if (Literal.isImaginary)
2556     Res = new (Context) ImaginaryLiteral(Res,
2557                                         Context.getComplexType(Res->getType()));
2558 
2559   return Owned(Res);
2560 }
2561 
2562 ExprResult Sema::ActOnParenExpr(SourceLocation L, SourceLocation R, Expr *E) {
2563   assert((E != 0) && "ActOnParenExpr() missing expr");
2564   return Owned(new (Context) ParenExpr(L, R, E));
2565 }
2566 
2567 static bool CheckVecStepTraitOperandType(Sema &S, QualType T,
2568                                          SourceLocation Loc,
2569                                          SourceRange ArgRange) {
2570   // [OpenCL 1.1 6.11.12] "The vec_step built-in function takes a built-in
2571   // scalar or vector data type argument..."
2572   // Every built-in scalar type (OpenCL 1.1 6.1.1) is either an arithmetic
2573   // type (C99 6.2.5p18) or void.
2574   if (!(T->isArithmeticType() || T->isVoidType() || T->isVectorType())) {
2575     S.Diag(Loc, diag::err_vecstep_non_scalar_vector_type)
2576       << T << ArgRange;
2577     return true;
2578   }
2579 
2580   assert((T->isVoidType() || !T->isIncompleteType()) &&
2581          "Scalar types should always be complete");
2582   return false;
2583 }
2584 
2585 static bool CheckExtensionTraitOperandType(Sema &S, QualType T,
2586                                            SourceLocation Loc,
2587                                            SourceRange ArgRange,
2588                                            UnaryExprOrTypeTrait TraitKind) {
2589   // C99 6.5.3.4p1:
2590   if (T->isFunctionType()) {
2591     // alignof(function) is allowed as an extension.
2592     if (TraitKind == UETT_SizeOf)
2593       S.Diag(Loc, diag::ext_sizeof_function_type) << ArgRange;
2594     return false;
2595   }
2596 
2597   // Allow sizeof(void)/alignof(void) as an extension.
2598   if (T->isVoidType()) {
2599     S.Diag(Loc, diag::ext_sizeof_void_type) << TraitKind << ArgRange;
2600     return false;
2601   }
2602 
2603   return true;
2604 }
2605 
2606 static bool CheckObjCTraitOperandConstraints(Sema &S, QualType T,
2607                                              SourceLocation Loc,
2608                                              SourceRange ArgRange,
2609                                              UnaryExprOrTypeTrait TraitKind) {
2610   // Reject sizeof(interface) and sizeof(interface<proto>) in 64-bit mode.
2611   if (S.LangOpts.ObjCNonFragileABI && T->isObjCObjectType()) {
2612     S.Diag(Loc, diag::err_sizeof_nonfragile_interface)
2613       << T << (TraitKind == UETT_SizeOf)
2614       << ArgRange;
2615     return true;
2616   }
2617 
2618   return false;
2619 }
2620 
2621 /// \brief Check the constrains on expression operands to unary type expression
2622 /// and type traits.
2623 ///
2624 /// Completes any types necessary and validates the constraints on the operand
2625 /// expression. The logic mostly mirrors the type-based overload, but may modify
2626 /// the expression as it completes the type for that expression through template
2627 /// instantiation, etc.
2628 bool Sema::CheckUnaryExprOrTypeTraitOperand(Expr *E,
2629                                             UnaryExprOrTypeTrait ExprKind) {
2630   QualType ExprTy = E->getType();
2631 
2632   // C++ [expr.sizeof]p2: "When applied to a reference or a reference type,
2633   //   the result is the size of the referenced type."
2634   // C++ [expr.alignof]p3: "When alignof is applied to a reference type, the
2635   //   result shall be the alignment of the referenced type."
2636   if (const ReferenceType *Ref = ExprTy->getAs<ReferenceType>())
2637     ExprTy = Ref->getPointeeType();
2638 
2639   if (ExprKind == UETT_VecStep)
2640     return CheckVecStepTraitOperandType(*this, ExprTy, E->getExprLoc(),
2641                                         E->getSourceRange());
2642 
2643   // Whitelist some types as extensions
2644   if (!CheckExtensionTraitOperandType(*this, ExprTy, E->getExprLoc(),
2645                                       E->getSourceRange(), ExprKind))
2646     return false;
2647 
2648   if (RequireCompleteExprType(E,
2649                               PDiag(diag::err_sizeof_alignof_incomplete_type)
2650                               << ExprKind << E->getSourceRange(),
2651                               std::make_pair(SourceLocation(), PDiag(0))))
2652     return true;
2653 
2654   // Completeing the expression's type may have changed it.
2655   ExprTy = E->getType();
2656   if (const ReferenceType *Ref = ExprTy->getAs<ReferenceType>())
2657     ExprTy = Ref->getPointeeType();
2658 
2659   if (CheckObjCTraitOperandConstraints(*this, ExprTy, E->getExprLoc(),
2660                                        E->getSourceRange(), ExprKind))
2661     return true;
2662 
2663   if (ExprKind == UETT_SizeOf) {
2664     if (DeclRefExpr *DeclRef = dyn_cast<DeclRefExpr>(E->IgnoreParens())) {
2665       if (ParmVarDecl *PVD = dyn_cast<ParmVarDecl>(DeclRef->getFoundDecl())) {
2666         QualType OType = PVD->getOriginalType();
2667         QualType Type = PVD->getType();
2668         if (Type->isPointerType() && OType->isArrayType()) {
2669           Diag(E->getExprLoc(), diag::warn_sizeof_array_param)
2670             << Type << OType;
2671           Diag(PVD->getLocation(), diag::note_declared_at);
2672         }
2673       }
2674     }
2675   }
2676 
2677   return false;
2678 }
2679 
2680 /// \brief Check the constraints on operands to unary expression and type
2681 /// traits.
2682 ///
2683 /// This will complete any types necessary, and validate the various constraints
2684 /// on those operands.
2685 ///
2686 /// The UsualUnaryConversions() function is *not* called by this routine.
2687 /// C99 6.3.2.1p[2-4] all state:
2688 ///   Except when it is the operand of the sizeof operator ...
2689 ///
2690 /// C++ [expr.sizeof]p4
2691 ///   The lvalue-to-rvalue, array-to-pointer, and function-to-pointer
2692 ///   standard conversions are not applied to the operand of sizeof.
2693 ///
2694 /// This policy is followed for all of the unary trait expressions.
2695 bool Sema::CheckUnaryExprOrTypeTraitOperand(QualType ExprType,
2696                                             SourceLocation OpLoc,
2697                                             SourceRange ExprRange,
2698                                             UnaryExprOrTypeTrait ExprKind) {
2699   if (ExprType->isDependentType())
2700     return false;
2701 
2702   // C++ [expr.sizeof]p2: "When applied to a reference or a reference type,
2703   //   the result is the size of the referenced type."
2704   // C++ [expr.alignof]p3: "When alignof is applied to a reference type, the
2705   //   result shall be the alignment of the referenced type."
2706   if (const ReferenceType *Ref = ExprType->getAs<ReferenceType>())
2707     ExprType = Ref->getPointeeType();
2708 
2709   if (ExprKind == UETT_VecStep)
2710     return CheckVecStepTraitOperandType(*this, ExprType, OpLoc, ExprRange);
2711 
2712   // Whitelist some types as extensions
2713   if (!CheckExtensionTraitOperandType(*this, ExprType, OpLoc, ExprRange,
2714                                       ExprKind))
2715     return false;
2716 
2717   if (RequireCompleteType(OpLoc, ExprType,
2718                           PDiag(diag::err_sizeof_alignof_incomplete_type)
2719                           << ExprKind << ExprRange))
2720     return true;
2721 
2722   if (CheckObjCTraitOperandConstraints(*this, ExprType, OpLoc, ExprRange,
2723                                        ExprKind))
2724     return true;
2725 
2726   return false;
2727 }
2728 
2729 static bool CheckAlignOfExpr(Sema &S, Expr *E) {
2730   E = E->IgnoreParens();
2731 
2732   // alignof decl is always ok.
2733   if (isa<DeclRefExpr>(E))
2734     return false;
2735 
2736   // Cannot know anything else if the expression is dependent.
2737   if (E->isTypeDependent())
2738     return false;
2739 
2740   if (E->getBitField()) {
2741     S.Diag(E->getExprLoc(), diag::err_sizeof_alignof_bitfield)
2742        << 1 << E->getSourceRange();
2743     return true;
2744   }
2745 
2746   // Alignment of a field access is always okay, so long as it isn't a
2747   // bit-field.
2748   if (MemberExpr *ME = dyn_cast<MemberExpr>(E))
2749     if (isa<FieldDecl>(ME->getMemberDecl()))
2750       return false;
2751 
2752   return S.CheckUnaryExprOrTypeTraitOperand(E, UETT_AlignOf);
2753 }
2754 
2755 bool Sema::CheckVecStepExpr(Expr *E) {
2756   E = E->IgnoreParens();
2757 
2758   // Cannot know anything else if the expression is dependent.
2759   if (E->isTypeDependent())
2760     return false;
2761 
2762   return CheckUnaryExprOrTypeTraitOperand(E, UETT_VecStep);
2763 }
2764 
2765 /// \brief Build a sizeof or alignof expression given a type operand.
2766 ExprResult
2767 Sema::CreateUnaryExprOrTypeTraitExpr(TypeSourceInfo *TInfo,
2768                                      SourceLocation OpLoc,
2769                                      UnaryExprOrTypeTrait ExprKind,
2770                                      SourceRange R) {
2771   if (!TInfo)
2772     return ExprError();
2773 
2774   QualType T = TInfo->getType();
2775 
2776   if (!T->isDependentType() &&
2777       CheckUnaryExprOrTypeTraitOperand(T, OpLoc, R, ExprKind))
2778     return ExprError();
2779 
2780   // C99 6.5.3.4p4: the type (an unsigned integer type) is size_t.
2781   return Owned(new (Context) UnaryExprOrTypeTraitExpr(ExprKind, TInfo,
2782                                                       Context.getSizeType(),
2783                                                       OpLoc, R.getEnd()));
2784 }
2785 
2786 /// \brief Build a sizeof or alignof expression given an expression
2787 /// operand.
2788 ExprResult
2789 Sema::CreateUnaryExprOrTypeTraitExpr(Expr *E, SourceLocation OpLoc,
2790                                      UnaryExprOrTypeTrait ExprKind) {
2791   ExprResult PE = CheckPlaceholderExpr(E);
2792   if (PE.isInvalid())
2793     return ExprError();
2794 
2795   E = PE.get();
2796 
2797   // Verify that the operand is valid.
2798   bool isInvalid = false;
2799   if (E->isTypeDependent()) {
2800     // Delay type-checking for type-dependent expressions.
2801   } else if (ExprKind == UETT_AlignOf) {
2802     isInvalid = CheckAlignOfExpr(*this, E);
2803   } else if (ExprKind == UETT_VecStep) {
2804     isInvalid = CheckVecStepExpr(E);
2805   } else if (E->getBitField()) {  // C99 6.5.3.4p1.
2806     Diag(E->getExprLoc(), diag::err_sizeof_alignof_bitfield) << 0;
2807     isInvalid = true;
2808   } else {
2809     isInvalid = CheckUnaryExprOrTypeTraitOperand(E, UETT_SizeOf);
2810   }
2811 
2812   if (isInvalid)
2813     return ExprError();
2814 
2815   if (ExprKind == UETT_SizeOf && E->getType()->isVariableArrayType()) {
2816     PE = TranformToPotentiallyEvaluated(E);
2817     if (PE.isInvalid()) return ExprError();
2818     E = PE.take();
2819   }
2820 
2821   // C99 6.5.3.4p4: the type (an unsigned integer type) is size_t.
2822   return Owned(new (Context) UnaryExprOrTypeTraitExpr(
2823       ExprKind, E, Context.getSizeType(), OpLoc,
2824       E->getSourceRange().getEnd()));
2825 }
2826 
2827 /// ActOnUnaryExprOrTypeTraitExpr - Handle @c sizeof(type) and @c sizeof @c
2828 /// expr and the same for @c alignof and @c __alignof
2829 /// Note that the ArgRange is invalid if isType is false.
2830 ExprResult
2831 Sema::ActOnUnaryExprOrTypeTraitExpr(SourceLocation OpLoc,
2832                                     UnaryExprOrTypeTrait ExprKind, bool IsType,
2833                                     void *TyOrEx, const SourceRange &ArgRange) {
2834   // If error parsing type, ignore.
2835   if (TyOrEx == 0) return ExprError();
2836 
2837   if (IsType) {
2838     TypeSourceInfo *TInfo;
2839     (void) GetTypeFromParser(ParsedType::getFromOpaquePtr(TyOrEx), &TInfo);
2840     return CreateUnaryExprOrTypeTraitExpr(TInfo, OpLoc, ExprKind, ArgRange);
2841   }
2842 
2843   Expr *ArgEx = (Expr *)TyOrEx;
2844   ExprResult Result = CreateUnaryExprOrTypeTraitExpr(ArgEx, OpLoc, ExprKind);
2845   return move(Result);
2846 }
2847 
2848 static QualType CheckRealImagOperand(Sema &S, ExprResult &V, SourceLocation Loc,
2849                                      bool IsReal) {
2850   if (V.get()->isTypeDependent())
2851     return S.Context.DependentTy;
2852 
2853   // _Real and _Imag are only l-values for normal l-values.
2854   if (V.get()->getObjectKind() != OK_Ordinary) {
2855     V = S.DefaultLvalueConversion(V.take());
2856     if (V.isInvalid())
2857       return QualType();
2858   }
2859 
2860   // These operators return the element type of a complex type.
2861   if (const ComplexType *CT = V.get()->getType()->getAs<ComplexType>())
2862     return CT->getElementType();
2863 
2864   // Otherwise they pass through real integer and floating point types here.
2865   if (V.get()->getType()->isArithmeticType())
2866     return V.get()->getType();
2867 
2868   // Test for placeholders.
2869   ExprResult PR = S.CheckPlaceholderExpr(V.get());
2870   if (PR.isInvalid()) return QualType();
2871   if (PR.get() != V.get()) {
2872     V = move(PR);
2873     return CheckRealImagOperand(S, V, Loc, IsReal);
2874   }
2875 
2876   // Reject anything else.
2877   S.Diag(Loc, diag::err_realimag_invalid_type) << V.get()->getType()
2878     << (IsReal ? "__real" : "__imag");
2879   return QualType();
2880 }
2881 
2882 
2883 
2884 ExprResult
2885 Sema::ActOnPostfixUnaryOp(Scope *S, SourceLocation OpLoc,
2886                           tok::TokenKind Kind, Expr *Input) {
2887   UnaryOperatorKind Opc;
2888   switch (Kind) {
2889   default: llvm_unreachable("Unknown unary op!");
2890   case tok::plusplus:   Opc = UO_PostInc; break;
2891   case tok::minusminus: Opc = UO_PostDec; break;
2892   }
2893 
2894   // Since this might is a postfix expression, get rid of ParenListExprs.
2895   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Input);
2896   if (Result.isInvalid()) return ExprError();
2897   Input = Result.take();
2898 
2899   return BuildUnaryOp(S, OpLoc, Opc, Input);
2900 }
2901 
2902 ExprResult
2903 Sema::ActOnArraySubscriptExpr(Scope *S, Expr *Base, SourceLocation LLoc,
2904                               Expr *Idx, SourceLocation RLoc) {
2905   // Since this might be a postfix expression, get rid of ParenListExprs.
2906   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Base);
2907   if (Result.isInvalid()) return ExprError();
2908   Base = Result.take();
2909 
2910   Expr *LHSExp = Base, *RHSExp = Idx;
2911 
2912   if (getLangOptions().CPlusPlus &&
2913       (LHSExp->isTypeDependent() || RHSExp->isTypeDependent())) {
2914     return Owned(new (Context) ArraySubscriptExpr(LHSExp, RHSExp,
2915                                                   Context.DependentTy,
2916                                                   VK_LValue, OK_Ordinary,
2917                                                   RLoc));
2918   }
2919 
2920   if (getLangOptions().CPlusPlus &&
2921       (LHSExp->getType()->isRecordType() ||
2922        LHSExp->getType()->isEnumeralType() ||
2923        RHSExp->getType()->isRecordType() ||
2924        RHSExp->getType()->isEnumeralType())) {
2925     return CreateOverloadedArraySubscriptExpr(LLoc, RLoc, Base, Idx);
2926   }
2927 
2928   return CreateBuiltinArraySubscriptExpr(Base, LLoc, Idx, RLoc);
2929 }
2930 
2931 
2932 ExprResult
2933 Sema::CreateBuiltinArraySubscriptExpr(Expr *Base, SourceLocation LLoc,
2934                                       Expr *Idx, SourceLocation RLoc) {
2935   Expr *LHSExp = Base;
2936   Expr *RHSExp = Idx;
2937 
2938   // Perform default conversions.
2939   if (!LHSExp->getType()->getAs<VectorType>()) {
2940     ExprResult Result = DefaultFunctionArrayLvalueConversion(LHSExp);
2941     if (Result.isInvalid())
2942       return ExprError();
2943     LHSExp = Result.take();
2944   }
2945   ExprResult Result = DefaultFunctionArrayLvalueConversion(RHSExp);
2946   if (Result.isInvalid())
2947     return ExprError();
2948   RHSExp = Result.take();
2949 
2950   QualType LHSTy = LHSExp->getType(), RHSTy = RHSExp->getType();
2951   ExprValueKind VK = VK_LValue;
2952   ExprObjectKind OK = OK_Ordinary;
2953 
2954   // C99 6.5.2.1p2: the expression e1[e2] is by definition precisely equivalent
2955   // to the expression *((e1)+(e2)). This means the array "Base" may actually be
2956   // in the subscript position. As a result, we need to derive the array base
2957   // and index from the expression types.
2958   Expr *BaseExpr, *IndexExpr;
2959   QualType ResultType;
2960   if (LHSTy->isDependentType() || RHSTy->isDependentType()) {
2961     BaseExpr = LHSExp;
2962     IndexExpr = RHSExp;
2963     ResultType = Context.DependentTy;
2964   } else if (const PointerType *PTy = LHSTy->getAs<PointerType>()) {
2965     BaseExpr = LHSExp;
2966     IndexExpr = RHSExp;
2967     ResultType = PTy->getPointeeType();
2968   } else if (const PointerType *PTy = RHSTy->getAs<PointerType>()) {
2969      // Handle the uncommon case of "123[Ptr]".
2970     BaseExpr = RHSExp;
2971     IndexExpr = LHSExp;
2972     ResultType = PTy->getPointeeType();
2973   } else if (const ObjCObjectPointerType *PTy =
2974                LHSTy->getAs<ObjCObjectPointerType>()) {
2975     BaseExpr = LHSExp;
2976     IndexExpr = RHSExp;
2977     ResultType = PTy->getPointeeType();
2978   } else if (const ObjCObjectPointerType *PTy =
2979                RHSTy->getAs<ObjCObjectPointerType>()) {
2980      // Handle the uncommon case of "123[Ptr]".
2981     BaseExpr = RHSExp;
2982     IndexExpr = LHSExp;
2983     ResultType = PTy->getPointeeType();
2984   } else if (const VectorType *VTy = LHSTy->getAs<VectorType>()) {
2985     BaseExpr = LHSExp;    // vectors: V[123]
2986     IndexExpr = RHSExp;
2987     VK = LHSExp->getValueKind();
2988     if (VK != VK_RValue)
2989       OK = OK_VectorComponent;
2990 
2991     // FIXME: need to deal with const...
2992     ResultType = VTy->getElementType();
2993   } else if (LHSTy->isArrayType()) {
2994     // If we see an array that wasn't promoted by
2995     // DefaultFunctionArrayLvalueConversion, it must be an array that
2996     // wasn't promoted because of the C90 rule that doesn't
2997     // allow promoting non-lvalue arrays.  Warn, then
2998     // force the promotion here.
2999     Diag(LHSExp->getLocStart(), diag::ext_subscript_non_lvalue) <<
3000         LHSExp->getSourceRange();
3001     LHSExp = ImpCastExprToType(LHSExp, Context.getArrayDecayedType(LHSTy),
3002                                CK_ArrayToPointerDecay).take();
3003     LHSTy = LHSExp->getType();
3004 
3005     BaseExpr = LHSExp;
3006     IndexExpr = RHSExp;
3007     ResultType = LHSTy->getAs<PointerType>()->getPointeeType();
3008   } else if (RHSTy->isArrayType()) {
3009     // Same as previous, except for 123[f().a] case
3010     Diag(RHSExp->getLocStart(), diag::ext_subscript_non_lvalue) <<
3011         RHSExp->getSourceRange();
3012     RHSExp = ImpCastExprToType(RHSExp, Context.getArrayDecayedType(RHSTy),
3013                                CK_ArrayToPointerDecay).take();
3014     RHSTy = RHSExp->getType();
3015 
3016     BaseExpr = RHSExp;
3017     IndexExpr = LHSExp;
3018     ResultType = RHSTy->getAs<PointerType>()->getPointeeType();
3019   } else {
3020     return ExprError(Diag(LLoc, diag::err_typecheck_subscript_value)
3021        << LHSExp->getSourceRange() << RHSExp->getSourceRange());
3022   }
3023   // C99 6.5.2.1p1
3024   if (!IndexExpr->getType()->isIntegerType() && !IndexExpr->isTypeDependent())
3025     return ExprError(Diag(LLoc, diag::err_typecheck_subscript_not_integer)
3026                      << IndexExpr->getSourceRange());
3027 
3028   if ((IndexExpr->getType()->isSpecificBuiltinType(BuiltinType::Char_S) ||
3029        IndexExpr->getType()->isSpecificBuiltinType(BuiltinType::Char_U))
3030          && !IndexExpr->isTypeDependent())
3031     Diag(LLoc, diag::warn_subscript_is_char) << IndexExpr->getSourceRange();
3032 
3033   // C99 6.5.2.1p1: "shall have type "pointer to *object* type". Similarly,
3034   // C++ [expr.sub]p1: The type "T" shall be a completely-defined object
3035   // type. Note that Functions are not objects, and that (in C99 parlance)
3036   // incomplete types are not object types.
3037   if (ResultType->isFunctionType()) {
3038     Diag(BaseExpr->getLocStart(), diag::err_subscript_function_type)
3039       << ResultType << BaseExpr->getSourceRange();
3040     return ExprError();
3041   }
3042 
3043   if (ResultType->isVoidType() && !getLangOptions().CPlusPlus) {
3044     // GNU extension: subscripting on pointer to void
3045     Diag(LLoc, diag::ext_gnu_subscript_void_type)
3046       << BaseExpr->getSourceRange();
3047 
3048     // C forbids expressions of unqualified void type from being l-values.
3049     // See IsCForbiddenLValueType.
3050     if (!ResultType.hasQualifiers()) VK = VK_RValue;
3051   } else if (!ResultType->isDependentType() &&
3052       RequireCompleteType(LLoc, ResultType,
3053                           PDiag(diag::err_subscript_incomplete_type)
3054                             << BaseExpr->getSourceRange()))
3055     return ExprError();
3056 
3057   // Diagnose bad cases where we step over interface counts.
3058   if (ResultType->isObjCObjectType() && LangOpts.ObjCNonFragileABI) {
3059     Diag(LLoc, diag::err_subscript_nonfragile_interface)
3060       << ResultType << BaseExpr->getSourceRange();
3061     return ExprError();
3062   }
3063 
3064   assert(VK == VK_RValue || LangOpts.CPlusPlus ||
3065          !ResultType.isCForbiddenLValueType());
3066 
3067   return Owned(new (Context) ArraySubscriptExpr(LHSExp, RHSExp,
3068                                                 ResultType, VK, OK, RLoc));
3069 }
3070 
3071 ExprResult Sema::BuildCXXDefaultArgExpr(SourceLocation CallLoc,
3072                                         FunctionDecl *FD,
3073                                         ParmVarDecl *Param) {
3074   if (Param->hasUnparsedDefaultArg()) {
3075     Diag(CallLoc,
3076          diag::err_use_of_default_argument_to_function_declared_later) <<
3077       FD << cast<CXXRecordDecl>(FD->getDeclContext())->getDeclName();
3078     Diag(UnparsedDefaultArgLocs[Param],
3079          diag::note_default_argument_declared_here);
3080     return ExprError();
3081   }
3082 
3083   if (Param->hasUninstantiatedDefaultArg()) {
3084     Expr *UninstExpr = Param->getUninstantiatedDefaultArg();
3085 
3086     // Instantiate the expression.
3087     MultiLevelTemplateArgumentList ArgList
3088       = getTemplateInstantiationArgs(FD, 0, /*RelativeToPrimary=*/true);
3089 
3090     std::pair<const TemplateArgument *, unsigned> Innermost
3091       = ArgList.getInnermost();
3092     InstantiatingTemplate Inst(*this, CallLoc, Param, Innermost.first,
3093                                Innermost.second);
3094 
3095     ExprResult Result;
3096     {
3097       // C++ [dcl.fct.default]p5:
3098       //   The names in the [default argument] expression are bound, and
3099       //   the semantic constraints are checked, at the point where the
3100       //   default argument expression appears.
3101       ContextRAII SavedContext(*this, FD);
3102       LocalInstantiationScope Local(*this);
3103       Result = SubstExpr(UninstExpr, ArgList);
3104     }
3105     if (Result.isInvalid())
3106       return ExprError();
3107 
3108     // Check the expression as an initializer for the parameter.
3109     InitializedEntity Entity
3110       = InitializedEntity::InitializeParameter(Context, Param);
3111     InitializationKind Kind
3112       = InitializationKind::CreateCopy(Param->getLocation(),
3113              /*FIXME:EqualLoc*/UninstExpr->getSourceRange().getBegin());
3114     Expr *ResultE = Result.takeAs<Expr>();
3115 
3116     InitializationSequence InitSeq(*this, Entity, Kind, &ResultE, 1);
3117     Result = InitSeq.Perform(*this, Entity, Kind,
3118                              MultiExprArg(*this, &ResultE, 1));
3119     if (Result.isInvalid())
3120       return ExprError();
3121 
3122     // Build the default argument expression.
3123     return Owned(CXXDefaultArgExpr::Create(Context, CallLoc, Param,
3124                                            Result.takeAs<Expr>()));
3125   }
3126 
3127   // If the default expression creates temporaries, we need to
3128   // push them to the current stack of expression temporaries so they'll
3129   // be properly destroyed.
3130   // FIXME: We should really be rebuilding the default argument with new
3131   // bound temporaries; see the comment in PR5810.
3132   // We don't need to do that with block decls, though, because
3133   // blocks in default argument expression can never capture anything.
3134   if (isa<ExprWithCleanups>(Param->getInit())) {
3135     // Set the "needs cleanups" bit regardless of whether there are
3136     // any explicit objects.
3137     ExprNeedsCleanups = true;
3138 
3139     // Append all the objects to the cleanup list.  Right now, this
3140     // should always be a no-op, because blocks in default argument
3141     // expressions should never be able to capture anything.
3142     assert(!cast<ExprWithCleanups>(Param->getInit())->getNumObjects() &&
3143            "default argument expression has capturing blocks?");
3144   }
3145 
3146   // We already type-checked the argument, so we know it works.
3147   // Just mark all of the declarations in this potentially-evaluated expression
3148   // as being "referenced".
3149   MarkDeclarationsReferencedInExpr(Param->getDefaultArg(),
3150                                    /*SkipLocalVariables=*/true);
3151   return Owned(CXXDefaultArgExpr::Create(Context, CallLoc, Param));
3152 }
3153 
3154 /// ConvertArgumentsForCall - Converts the arguments specified in
3155 /// Args/NumArgs to the parameter types of the function FDecl with
3156 /// function prototype Proto. Call is the call expression itself, and
3157 /// Fn is the function expression. For a C++ member function, this
3158 /// routine does not attempt to convert the object argument. Returns
3159 /// true if the call is ill-formed.
3160 bool
3161 Sema::ConvertArgumentsForCall(CallExpr *Call, Expr *Fn,
3162                               FunctionDecl *FDecl,
3163                               const FunctionProtoType *Proto,
3164                               Expr **Args, unsigned NumArgs,
3165                               SourceLocation RParenLoc,
3166                               bool IsExecConfig) {
3167   // Bail out early if calling a builtin with custom typechecking.
3168   // We don't need to do this in the
3169   if (FDecl)
3170     if (unsigned ID = FDecl->getBuiltinID())
3171       if (Context.BuiltinInfo.hasCustomTypechecking(ID))
3172         return false;
3173 
3174   // C99 6.5.2.2p7 - the arguments are implicitly converted, as if by
3175   // assignment, to the types of the corresponding parameter, ...
3176   unsigned NumArgsInProto = Proto->getNumArgs();
3177   bool Invalid = false;
3178   unsigned MinArgs = FDecl ? FDecl->getMinRequiredArguments() : NumArgsInProto;
3179   unsigned FnKind = Fn->getType()->isBlockPointerType()
3180                        ? 1 /* block */
3181                        : (IsExecConfig ? 3 /* kernel function (exec config) */
3182                                        : 0 /* function */);
3183 
3184   // If too few arguments are available (and we don't have default
3185   // arguments for the remaining parameters), don't make the call.
3186   if (NumArgs < NumArgsInProto) {
3187     if (NumArgs < MinArgs) {
3188       Diag(RParenLoc, MinArgs == NumArgsInProto
3189                         ? diag::err_typecheck_call_too_few_args
3190                         : diag::err_typecheck_call_too_few_args_at_least)
3191         << FnKind
3192         << MinArgs << NumArgs << Fn->getSourceRange();
3193 
3194       // Emit the location of the prototype.
3195       if (FDecl && !FDecl->getBuiltinID() && !IsExecConfig)
3196         Diag(FDecl->getLocStart(), diag::note_callee_decl)
3197           << FDecl;
3198 
3199       return true;
3200     }
3201     Call->setNumArgs(Context, NumArgsInProto);
3202   }
3203 
3204   // If too many are passed and not variadic, error on the extras and drop
3205   // them.
3206   if (NumArgs > NumArgsInProto) {
3207     if (!Proto->isVariadic()) {
3208       Diag(Args[NumArgsInProto]->getLocStart(),
3209            MinArgs == NumArgsInProto
3210              ? diag::err_typecheck_call_too_many_args
3211              : diag::err_typecheck_call_too_many_args_at_most)
3212         << FnKind
3213         << NumArgsInProto << NumArgs << Fn->getSourceRange()
3214         << SourceRange(Args[NumArgsInProto]->getLocStart(),
3215                        Args[NumArgs-1]->getLocEnd());
3216 
3217       // Emit the location of the prototype.
3218       if (FDecl && !FDecl->getBuiltinID() && !IsExecConfig)
3219         Diag(FDecl->getLocStart(), diag::note_callee_decl)
3220           << FDecl;
3221 
3222       // This deletes the extra arguments.
3223       Call->setNumArgs(Context, NumArgsInProto);
3224       return true;
3225     }
3226   }
3227   SmallVector<Expr *, 8> AllArgs;
3228   VariadicCallType CallType =
3229     Proto->isVariadic() ? VariadicFunction : VariadicDoesNotApply;
3230   if (Fn->getType()->isBlockPointerType())
3231     CallType = VariadicBlock; // Block
3232   else if (isa<MemberExpr>(Fn))
3233     CallType = VariadicMethod;
3234   Invalid = GatherArgumentsForCall(Call->getSourceRange().getBegin(), FDecl,
3235                                    Proto, 0, Args, NumArgs, AllArgs, CallType);
3236   if (Invalid)
3237     return true;
3238   unsigned TotalNumArgs = AllArgs.size();
3239   for (unsigned i = 0; i < TotalNumArgs; ++i)
3240     Call->setArg(i, AllArgs[i]);
3241 
3242   return false;
3243 }
3244 
3245 bool Sema::GatherArgumentsForCall(SourceLocation CallLoc,
3246                                   FunctionDecl *FDecl,
3247                                   const FunctionProtoType *Proto,
3248                                   unsigned FirstProtoArg,
3249                                   Expr **Args, unsigned NumArgs,
3250                                   SmallVector<Expr *, 8> &AllArgs,
3251                                   VariadicCallType CallType) {
3252   unsigned NumArgsInProto = Proto->getNumArgs();
3253   unsigned NumArgsToCheck = NumArgs;
3254   bool Invalid = false;
3255   if (NumArgs != NumArgsInProto)
3256     // Use default arguments for missing arguments
3257     NumArgsToCheck = NumArgsInProto;
3258   unsigned ArgIx = 0;
3259   // Continue to check argument types (even if we have too few/many args).
3260   for (unsigned i = FirstProtoArg; i != NumArgsToCheck; i++) {
3261     QualType ProtoArgType = Proto->getArgType(i);
3262 
3263     Expr *Arg;
3264     ParmVarDecl *Param;
3265     if (ArgIx < NumArgs) {
3266       Arg = Args[ArgIx++];
3267 
3268       if (RequireCompleteType(Arg->getSourceRange().getBegin(),
3269                               ProtoArgType,
3270                               PDiag(diag::err_call_incomplete_argument)
3271                               << Arg->getSourceRange()))
3272         return true;
3273 
3274       // Pass the argument
3275       Param = 0;
3276       if (FDecl && i < FDecl->getNumParams())
3277         Param = FDecl->getParamDecl(i);
3278 
3279       // Strip the unbridged-cast placeholder expression off, if applicable.
3280       if (Arg->getType() == Context.ARCUnbridgedCastTy &&
3281           FDecl && FDecl->hasAttr<CFAuditedTransferAttr>() &&
3282           (!Param || !Param->hasAttr<CFConsumedAttr>()))
3283         Arg = stripARCUnbridgedCast(Arg);
3284 
3285       InitializedEntity Entity =
3286         Param? InitializedEntity::InitializeParameter(Context, Param)
3287              : InitializedEntity::InitializeParameter(Context, ProtoArgType,
3288                                                       Proto->isArgConsumed(i));
3289       ExprResult ArgE = PerformCopyInitialization(Entity,
3290                                                   SourceLocation(),
3291                                                   Owned(Arg));
3292       if (ArgE.isInvalid())
3293         return true;
3294 
3295       Arg = ArgE.takeAs<Expr>();
3296     } else {
3297       Param = FDecl->getParamDecl(i);
3298 
3299       ExprResult ArgExpr =
3300         BuildCXXDefaultArgExpr(CallLoc, FDecl, Param);
3301       if (ArgExpr.isInvalid())
3302         return true;
3303 
3304       Arg = ArgExpr.takeAs<Expr>();
3305     }
3306 
3307     // Check for array bounds violations for each argument to the call. This
3308     // check only triggers warnings when the argument isn't a more complex Expr
3309     // with its own checking, such as a BinaryOperator.
3310     CheckArrayAccess(Arg);
3311 
3312     // Check for violations of C99 static array rules (C99 6.7.5.3p7).
3313     CheckStaticArrayArgument(CallLoc, Param, Arg);
3314 
3315     AllArgs.push_back(Arg);
3316   }
3317 
3318   // If this is a variadic call, handle args passed through "...".
3319   if (CallType != VariadicDoesNotApply) {
3320 
3321     // Assume that extern "C" functions with variadic arguments that
3322     // return __unknown_anytype aren't *really* variadic.
3323     if (Proto->getResultType() == Context.UnknownAnyTy &&
3324         FDecl && FDecl->isExternC()) {
3325       for (unsigned i = ArgIx; i != NumArgs; ++i) {
3326         ExprResult arg;
3327         if (isa<ExplicitCastExpr>(Args[i]->IgnoreParens()))
3328           arg = DefaultFunctionArrayLvalueConversion(Args[i]);
3329         else
3330           arg = DefaultVariadicArgumentPromotion(Args[i], CallType, FDecl);
3331         Invalid |= arg.isInvalid();
3332         AllArgs.push_back(arg.take());
3333       }
3334 
3335     // Otherwise do argument promotion, (C99 6.5.2.2p7).
3336     } else {
3337       for (unsigned i = ArgIx; i != NumArgs; ++i) {
3338         ExprResult Arg = DefaultVariadicArgumentPromotion(Args[i], CallType,
3339                                                           FDecl);
3340         Invalid |= Arg.isInvalid();
3341         AllArgs.push_back(Arg.take());
3342       }
3343     }
3344 
3345     // Check for array bounds violations.
3346     for (unsigned i = ArgIx; i != NumArgs; ++i)
3347       CheckArrayAccess(Args[i]);
3348   }
3349   return Invalid;
3350 }
3351 
3352 static void DiagnoseCalleeStaticArrayParam(Sema &S, ParmVarDecl *PVD) {
3353   TypeLoc TL = PVD->getTypeSourceInfo()->getTypeLoc();
3354   if (ArrayTypeLoc *ATL = dyn_cast<ArrayTypeLoc>(&TL))
3355     S.Diag(PVD->getLocation(), diag::note_callee_static_array)
3356       << ATL->getLocalSourceRange();
3357 }
3358 
3359 /// CheckStaticArrayArgument - If the given argument corresponds to a static
3360 /// array parameter, check that it is non-null, and that if it is formed by
3361 /// array-to-pointer decay, the underlying array is sufficiently large.
3362 ///
3363 /// C99 6.7.5.3p7: If the keyword static also appears within the [ and ] of the
3364 /// array type derivation, then for each call to the function, the value of the
3365 /// corresponding actual argument shall provide access to the first element of
3366 /// an array with at least as many elements as specified by the size expression.
3367 void
3368 Sema::CheckStaticArrayArgument(SourceLocation CallLoc,
3369                                ParmVarDecl *Param,
3370                                const Expr *ArgExpr) {
3371   // Static array parameters are not supported in C++.
3372   if (!Param || getLangOptions().CPlusPlus)
3373     return;
3374 
3375   QualType OrigTy = Param->getOriginalType();
3376 
3377   const ArrayType *AT = Context.getAsArrayType(OrigTy);
3378   if (!AT || AT->getSizeModifier() != ArrayType::Static)
3379     return;
3380 
3381   if (ArgExpr->isNullPointerConstant(Context,
3382                                      Expr::NPC_NeverValueDependent)) {
3383     Diag(CallLoc, diag::warn_null_arg) << ArgExpr->getSourceRange();
3384     DiagnoseCalleeStaticArrayParam(*this, Param);
3385     return;
3386   }
3387 
3388   const ConstantArrayType *CAT = dyn_cast<ConstantArrayType>(AT);
3389   if (!CAT)
3390     return;
3391 
3392   const ConstantArrayType *ArgCAT =
3393     Context.getAsConstantArrayType(ArgExpr->IgnoreParenImpCasts()->getType());
3394   if (!ArgCAT)
3395     return;
3396 
3397   if (ArgCAT->getSize().ult(CAT->getSize())) {
3398     Diag(CallLoc, diag::warn_static_array_too_small)
3399       << ArgExpr->getSourceRange()
3400       << (unsigned) ArgCAT->getSize().getZExtValue()
3401       << (unsigned) CAT->getSize().getZExtValue();
3402     DiagnoseCalleeStaticArrayParam(*this, Param);
3403   }
3404 }
3405 
3406 /// Given a function expression of unknown-any type, try to rebuild it
3407 /// to have a function type.
3408 static ExprResult rebuildUnknownAnyFunction(Sema &S, Expr *fn);
3409 
3410 /// ActOnCallExpr - Handle a call to Fn with the specified array of arguments.
3411 /// This provides the location of the left/right parens and a list of comma
3412 /// locations.
3413 ExprResult
3414 Sema::ActOnCallExpr(Scope *S, Expr *Fn, SourceLocation LParenLoc,
3415                     MultiExprArg ArgExprs, SourceLocation RParenLoc,
3416                     Expr *ExecConfig, bool IsExecConfig) {
3417   unsigned NumArgs = ArgExprs.size();
3418 
3419   // Since this might be a postfix expression, get rid of ParenListExprs.
3420   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Fn);
3421   if (Result.isInvalid()) return ExprError();
3422   Fn = Result.take();
3423 
3424   Expr **Args = ArgExprs.release();
3425 
3426   if (getLangOptions().CPlusPlus) {
3427     // If this is a pseudo-destructor expression, build the call immediately.
3428     if (isa<CXXPseudoDestructorExpr>(Fn)) {
3429       if (NumArgs > 0) {
3430         // Pseudo-destructor calls should not have any arguments.
3431         Diag(Fn->getLocStart(), diag::err_pseudo_dtor_call_with_args)
3432           << FixItHint::CreateRemoval(
3433                                     SourceRange(Args[0]->getLocStart(),
3434                                                 Args[NumArgs-1]->getLocEnd()));
3435 
3436         NumArgs = 0;
3437       }
3438 
3439       return Owned(new (Context) CallExpr(Context, Fn, 0, 0, Context.VoidTy,
3440                                           VK_RValue, RParenLoc));
3441     }
3442 
3443     // Determine whether this is a dependent call inside a C++ template,
3444     // in which case we won't do any semantic analysis now.
3445     // FIXME: Will need to cache the results of name lookup (including ADL) in
3446     // Fn.
3447     bool Dependent = false;
3448     if (Fn->isTypeDependent())
3449       Dependent = true;
3450     else if (Expr::hasAnyTypeDependentArguments(Args, NumArgs))
3451       Dependent = true;
3452 
3453     if (Dependent) {
3454       if (ExecConfig) {
3455         return Owned(new (Context) CUDAKernelCallExpr(
3456             Context, Fn, cast<CallExpr>(ExecConfig), Args, NumArgs,
3457             Context.DependentTy, VK_RValue, RParenLoc));
3458       } else {
3459         return Owned(new (Context) CallExpr(Context, Fn, Args, NumArgs,
3460                                             Context.DependentTy, VK_RValue,
3461                                             RParenLoc));
3462       }
3463     }
3464 
3465     // Determine whether this is a call to an object (C++ [over.call.object]).
3466     if (Fn->getType()->isRecordType())
3467       return Owned(BuildCallToObjectOfClassType(S, Fn, LParenLoc, Args, NumArgs,
3468                                                 RParenLoc));
3469 
3470     if (Fn->getType() == Context.UnknownAnyTy) {
3471       ExprResult result = rebuildUnknownAnyFunction(*this, Fn);
3472       if (result.isInvalid()) return ExprError();
3473       Fn = result.take();
3474     }
3475 
3476     if (Fn->getType() == Context.BoundMemberTy) {
3477       return BuildCallToMemberFunction(S, Fn, LParenLoc, Args, NumArgs,
3478                                        RParenLoc);
3479     }
3480   }
3481 
3482   // Check for overloaded calls.  This can happen even in C due to extensions.
3483   if (Fn->getType() == Context.OverloadTy) {
3484     OverloadExpr::FindResult find = OverloadExpr::find(Fn);
3485 
3486     // We aren't supposed to apply this logic for if there's an '&' involved.
3487     if (!find.HasFormOfMemberPointer) {
3488       OverloadExpr *ovl = find.Expression;
3489       if (isa<UnresolvedLookupExpr>(ovl)) {
3490         UnresolvedLookupExpr *ULE = cast<UnresolvedLookupExpr>(ovl);
3491         return BuildOverloadedCallExpr(S, Fn, ULE, LParenLoc, Args, NumArgs,
3492                                        RParenLoc, ExecConfig);
3493       } else {
3494         return BuildCallToMemberFunction(S, Fn, LParenLoc, Args, NumArgs,
3495                                          RParenLoc);
3496       }
3497     }
3498   }
3499 
3500   // If we're directly calling a function, get the appropriate declaration.
3501   if (Fn->getType() == Context.UnknownAnyTy) {
3502     ExprResult result = rebuildUnknownAnyFunction(*this, Fn);
3503     if (result.isInvalid()) return ExprError();
3504     Fn = result.take();
3505   }
3506 
3507   Expr *NakedFn = Fn->IgnoreParens();
3508 
3509   NamedDecl *NDecl = 0;
3510   if (UnaryOperator *UnOp = dyn_cast<UnaryOperator>(NakedFn))
3511     if (UnOp->getOpcode() == UO_AddrOf)
3512       NakedFn = UnOp->getSubExpr()->IgnoreParens();
3513 
3514   if (isa<DeclRefExpr>(NakedFn))
3515     NDecl = cast<DeclRefExpr>(NakedFn)->getDecl();
3516   else if (isa<MemberExpr>(NakedFn))
3517     NDecl = cast<MemberExpr>(NakedFn)->getMemberDecl();
3518 
3519   return BuildResolvedCallExpr(Fn, NDecl, LParenLoc, Args, NumArgs, RParenLoc,
3520                                ExecConfig, IsExecConfig);
3521 }
3522 
3523 ExprResult
3524 Sema::ActOnCUDAExecConfigExpr(Scope *S, SourceLocation LLLLoc,
3525                               MultiExprArg ExecConfig, SourceLocation GGGLoc) {
3526   FunctionDecl *ConfigDecl = Context.getcudaConfigureCallDecl();
3527   if (!ConfigDecl)
3528     return ExprError(Diag(LLLLoc, diag::err_undeclared_var_use)
3529                           << "cudaConfigureCall");
3530   QualType ConfigQTy = ConfigDecl->getType();
3531 
3532   DeclRefExpr *ConfigDR = new (Context) DeclRefExpr(
3533       ConfigDecl, ConfigQTy, VK_LValue, LLLLoc);
3534   MarkFunctionReferenced(LLLLoc, ConfigDecl);
3535 
3536   return ActOnCallExpr(S, ConfigDR, LLLLoc, ExecConfig, GGGLoc, 0,
3537                        /*IsExecConfig=*/true);
3538 }
3539 
3540 /// ActOnAsTypeExpr - create a new asType (bitcast) from the arguments.
3541 ///
3542 /// __builtin_astype( value, dst type )
3543 ///
3544 ExprResult Sema::ActOnAsTypeExpr(Expr *E, ParsedType ParsedDestTy,
3545                                  SourceLocation BuiltinLoc,
3546                                  SourceLocation RParenLoc) {
3547   ExprValueKind VK = VK_RValue;
3548   ExprObjectKind OK = OK_Ordinary;
3549   QualType DstTy = GetTypeFromParser(ParsedDestTy);
3550   QualType SrcTy = E->getType();
3551   if (Context.getTypeSize(DstTy) != Context.getTypeSize(SrcTy))
3552     return ExprError(Diag(BuiltinLoc,
3553                           diag::err_invalid_astype_of_different_size)
3554                      << DstTy
3555                      << SrcTy
3556                      << E->getSourceRange());
3557   return Owned(new (Context) AsTypeExpr(E, DstTy, VK, OK, BuiltinLoc,
3558                RParenLoc));
3559 }
3560 
3561 /// BuildResolvedCallExpr - Build a call to a resolved expression,
3562 /// i.e. an expression not of \p OverloadTy.  The expression should
3563 /// unary-convert to an expression of function-pointer or
3564 /// block-pointer type.
3565 ///
3566 /// \param NDecl the declaration being called, if available
3567 ExprResult
3568 Sema::BuildResolvedCallExpr(Expr *Fn, NamedDecl *NDecl,
3569                             SourceLocation LParenLoc,
3570                             Expr **Args, unsigned NumArgs,
3571                             SourceLocation RParenLoc,
3572                             Expr *Config, bool IsExecConfig) {
3573   FunctionDecl *FDecl = dyn_cast_or_null<FunctionDecl>(NDecl);
3574 
3575   // Promote the function operand.
3576   ExprResult Result = UsualUnaryConversions(Fn);
3577   if (Result.isInvalid())
3578     return ExprError();
3579   Fn = Result.take();
3580 
3581   // Make the call expr early, before semantic checks.  This guarantees cleanup
3582   // of arguments and function on error.
3583   CallExpr *TheCall;
3584   if (Config) {
3585     TheCall = new (Context) CUDAKernelCallExpr(Context, Fn,
3586                                                cast<CallExpr>(Config),
3587                                                Args, NumArgs,
3588                                                Context.BoolTy,
3589                                                VK_RValue,
3590                                                RParenLoc);
3591   } else {
3592     TheCall = new (Context) CallExpr(Context, Fn,
3593                                      Args, NumArgs,
3594                                      Context.BoolTy,
3595                                      VK_RValue,
3596                                      RParenLoc);
3597   }
3598 
3599   unsigned BuiltinID = (FDecl ? FDecl->getBuiltinID() : 0);
3600 
3601   // Bail out early if calling a builtin with custom typechecking.
3602   if (BuiltinID && Context.BuiltinInfo.hasCustomTypechecking(BuiltinID))
3603     return CheckBuiltinFunctionCall(BuiltinID, TheCall);
3604 
3605  retry:
3606   const FunctionType *FuncT;
3607   if (const PointerType *PT = Fn->getType()->getAs<PointerType>()) {
3608     // C99 6.5.2.2p1 - "The expression that denotes the called function shall
3609     // have type pointer to function".
3610     FuncT = PT->getPointeeType()->getAs<FunctionType>();
3611     if (FuncT == 0)
3612       return ExprError(Diag(LParenLoc, diag::err_typecheck_call_not_function)
3613                          << Fn->getType() << Fn->getSourceRange());
3614   } else if (const BlockPointerType *BPT =
3615                Fn->getType()->getAs<BlockPointerType>()) {
3616     FuncT = BPT->getPointeeType()->castAs<FunctionType>();
3617   } else {
3618     // Handle calls to expressions of unknown-any type.
3619     if (Fn->getType() == Context.UnknownAnyTy) {
3620       ExprResult rewrite = rebuildUnknownAnyFunction(*this, Fn);
3621       if (rewrite.isInvalid()) return ExprError();
3622       Fn = rewrite.take();
3623       TheCall->setCallee(Fn);
3624       goto retry;
3625     }
3626 
3627     return ExprError(Diag(LParenLoc, diag::err_typecheck_call_not_function)
3628       << Fn->getType() << Fn->getSourceRange());
3629   }
3630 
3631   if (getLangOptions().CUDA) {
3632     if (Config) {
3633       // CUDA: Kernel calls must be to global functions
3634       if (FDecl && !FDecl->hasAttr<CUDAGlobalAttr>())
3635         return ExprError(Diag(LParenLoc,diag::err_kern_call_not_global_function)
3636             << FDecl->getName() << Fn->getSourceRange());
3637 
3638       // CUDA: Kernel function must have 'void' return type
3639       if (!FuncT->getResultType()->isVoidType())
3640         return ExprError(Diag(LParenLoc, diag::err_kern_type_not_void_return)
3641             << Fn->getType() << Fn->getSourceRange());
3642     } else {
3643       // CUDA: Calls to global functions must be configured
3644       if (FDecl && FDecl->hasAttr<CUDAGlobalAttr>())
3645         return ExprError(Diag(LParenLoc, diag::err_global_call_not_config)
3646             << FDecl->getName() << Fn->getSourceRange());
3647     }
3648   }
3649 
3650   // Check for a valid return type
3651   if (CheckCallReturnType(FuncT->getResultType(),
3652                           Fn->getSourceRange().getBegin(), TheCall,
3653                           FDecl))
3654     return ExprError();
3655 
3656   // We know the result type of the call, set it.
3657   TheCall->setType(FuncT->getCallResultType(Context));
3658   TheCall->setValueKind(Expr::getValueKindForType(FuncT->getResultType()));
3659 
3660   if (const FunctionProtoType *Proto = dyn_cast<FunctionProtoType>(FuncT)) {
3661     if (ConvertArgumentsForCall(TheCall, Fn, FDecl, Proto, Args, NumArgs,
3662                                 RParenLoc, IsExecConfig))
3663       return ExprError();
3664   } else {
3665     assert(isa<FunctionNoProtoType>(FuncT) && "Unknown FunctionType!");
3666 
3667     if (FDecl) {
3668       // Check if we have too few/too many template arguments, based
3669       // on our knowledge of the function definition.
3670       const FunctionDecl *Def = 0;
3671       if (FDecl->hasBody(Def) && NumArgs != Def->param_size()) {
3672         const FunctionProtoType *Proto
3673           = Def->getType()->getAs<FunctionProtoType>();
3674         if (!Proto || !(Proto->isVariadic() && NumArgs >= Def->param_size()))
3675           Diag(RParenLoc, diag::warn_call_wrong_number_of_arguments)
3676             << (NumArgs > Def->param_size()) << FDecl << Fn->getSourceRange();
3677       }
3678 
3679       // If the function we're calling isn't a function prototype, but we have
3680       // a function prototype from a prior declaratiom, use that prototype.
3681       if (!FDecl->hasPrototype())
3682         Proto = FDecl->getType()->getAs<FunctionProtoType>();
3683     }
3684 
3685     // Promote the arguments (C99 6.5.2.2p6).
3686     for (unsigned i = 0; i != NumArgs; i++) {
3687       Expr *Arg = Args[i];
3688 
3689       if (Proto && i < Proto->getNumArgs()) {
3690         InitializedEntity Entity
3691           = InitializedEntity::InitializeParameter(Context,
3692                                                    Proto->getArgType(i),
3693                                                    Proto->isArgConsumed(i));
3694         ExprResult ArgE = PerformCopyInitialization(Entity,
3695                                                     SourceLocation(),
3696                                                     Owned(Arg));
3697         if (ArgE.isInvalid())
3698           return true;
3699 
3700         Arg = ArgE.takeAs<Expr>();
3701 
3702       } else {
3703         ExprResult ArgE = DefaultArgumentPromotion(Arg);
3704 
3705         if (ArgE.isInvalid())
3706           return true;
3707 
3708         Arg = ArgE.takeAs<Expr>();
3709       }
3710 
3711       if (RequireCompleteType(Arg->getSourceRange().getBegin(),
3712                               Arg->getType(),
3713                               PDiag(diag::err_call_incomplete_argument)
3714                                 << Arg->getSourceRange()))
3715         return ExprError();
3716 
3717       TheCall->setArg(i, Arg);
3718     }
3719   }
3720 
3721   if (CXXMethodDecl *Method = dyn_cast_or_null<CXXMethodDecl>(FDecl))
3722     if (!Method->isStatic())
3723       return ExprError(Diag(LParenLoc, diag::err_member_call_without_object)
3724         << Fn->getSourceRange());
3725 
3726   // Check for sentinels
3727   if (NDecl)
3728     DiagnoseSentinelCalls(NDecl, LParenLoc, Args, NumArgs);
3729 
3730   // Do special checking on direct calls to functions.
3731   if (FDecl) {
3732     if (CheckFunctionCall(FDecl, TheCall))
3733       return ExprError();
3734 
3735     if (BuiltinID)
3736       return CheckBuiltinFunctionCall(BuiltinID, TheCall);
3737   } else if (NDecl) {
3738     if (CheckBlockCall(NDecl, TheCall))
3739       return ExprError();
3740   }
3741 
3742   return MaybeBindToTemporary(TheCall);
3743 }
3744 
3745 ExprResult
3746 Sema::ActOnCompoundLiteral(SourceLocation LParenLoc, ParsedType Ty,
3747                            SourceLocation RParenLoc, Expr *InitExpr) {
3748   assert((Ty != 0) && "ActOnCompoundLiteral(): missing type");
3749   // FIXME: put back this assert when initializers are worked out.
3750   //assert((InitExpr != 0) && "ActOnCompoundLiteral(): missing expression");
3751 
3752   TypeSourceInfo *TInfo;
3753   QualType literalType = GetTypeFromParser(Ty, &TInfo);
3754   if (!TInfo)
3755     TInfo = Context.getTrivialTypeSourceInfo(literalType);
3756 
3757   return BuildCompoundLiteralExpr(LParenLoc, TInfo, RParenLoc, InitExpr);
3758 }
3759 
3760 ExprResult
3761 Sema::BuildCompoundLiteralExpr(SourceLocation LParenLoc, TypeSourceInfo *TInfo,
3762                                SourceLocation RParenLoc, Expr *LiteralExpr) {
3763   QualType literalType = TInfo->getType();
3764 
3765   if (literalType->isArrayType()) {
3766     if (RequireCompleteType(LParenLoc, Context.getBaseElementType(literalType),
3767              PDiag(diag::err_illegal_decl_array_incomplete_type)
3768                << SourceRange(LParenLoc,
3769                               LiteralExpr->getSourceRange().getEnd())))
3770       return ExprError();
3771     if (literalType->isVariableArrayType())
3772       return ExprError(Diag(LParenLoc, diag::err_variable_object_no_init)
3773         << SourceRange(LParenLoc, LiteralExpr->getSourceRange().getEnd()));
3774   } else if (!literalType->isDependentType() &&
3775              RequireCompleteType(LParenLoc, literalType,
3776                       PDiag(diag::err_typecheck_decl_incomplete_type)
3777                         << SourceRange(LParenLoc,
3778                                        LiteralExpr->getSourceRange().getEnd())))
3779     return ExprError();
3780 
3781   InitializedEntity Entity
3782     = InitializedEntity::InitializeTemporary(literalType);
3783   InitializationKind Kind
3784     = InitializationKind::CreateCStyleCast(LParenLoc,
3785                                            SourceRange(LParenLoc, RParenLoc),
3786                                            /*InitList=*/true);
3787   InitializationSequence InitSeq(*this, Entity, Kind, &LiteralExpr, 1);
3788   ExprResult Result = InitSeq.Perform(*this, Entity, Kind,
3789                                        MultiExprArg(*this, &LiteralExpr, 1),
3790                                             &literalType);
3791   if (Result.isInvalid())
3792     return ExprError();
3793   LiteralExpr = Result.get();
3794 
3795   bool isFileScope = getCurFunctionOrMethodDecl() == 0;
3796   if (isFileScope) { // 6.5.2.5p3
3797     if (CheckForConstantInitializer(LiteralExpr, literalType))
3798       return ExprError();
3799   }
3800 
3801   // In C, compound literals are l-values for some reason.
3802   ExprValueKind VK = getLangOptions().CPlusPlus ? VK_RValue : VK_LValue;
3803 
3804   return MaybeBindToTemporary(
3805            new (Context) CompoundLiteralExpr(LParenLoc, TInfo, literalType,
3806                                              VK, LiteralExpr, isFileScope));
3807 }
3808 
3809 ExprResult
3810 Sema::ActOnInitList(SourceLocation LBraceLoc, MultiExprArg InitArgList,
3811                     SourceLocation RBraceLoc) {
3812   unsigned NumInit = InitArgList.size();
3813   Expr **InitList = InitArgList.release();
3814 
3815   // Immediately handle non-overload placeholders.  Overloads can be
3816   // resolved contextually, but everything else here can't.
3817   for (unsigned I = 0; I != NumInit; ++I) {
3818     if (InitList[I]->getType()->isNonOverloadPlaceholderType()) {
3819       ExprResult result = CheckPlaceholderExpr(InitList[I]);
3820 
3821       // Ignore failures; dropping the entire initializer list because
3822       // of one failure would be terrible for indexing/etc.
3823       if (result.isInvalid()) continue;
3824 
3825       InitList[I] = result.take();
3826     }
3827   }
3828 
3829   // Semantic analysis for initializers is done by ActOnDeclarator() and
3830   // CheckInitializer() - it requires knowledge of the object being intialized.
3831 
3832   InitListExpr *E = new (Context) InitListExpr(Context, LBraceLoc, InitList,
3833                                                NumInit, RBraceLoc);
3834   E->setType(Context.VoidTy); // FIXME: just a place holder for now.
3835   return Owned(E);
3836 }
3837 
3838 /// Do an explicit extend of the given block pointer if we're in ARC.
3839 static void maybeExtendBlockObject(Sema &S, ExprResult &E) {
3840   assert(E.get()->getType()->isBlockPointerType());
3841   assert(E.get()->isRValue());
3842 
3843   // Only do this in an r-value context.
3844   if (!S.getLangOptions().ObjCAutoRefCount) return;
3845 
3846   E = ImplicitCastExpr::Create(S.Context, E.get()->getType(),
3847                                CK_ARCExtendBlockObject, E.get(),
3848                                /*base path*/ 0, VK_RValue);
3849   S.ExprNeedsCleanups = true;
3850 }
3851 
3852 /// Prepare a conversion of the given expression to an ObjC object
3853 /// pointer type.
3854 CastKind Sema::PrepareCastToObjCObjectPointer(ExprResult &E) {
3855   QualType type = E.get()->getType();
3856   if (type->isObjCObjectPointerType()) {
3857     return CK_BitCast;
3858   } else if (type->isBlockPointerType()) {
3859     maybeExtendBlockObject(*this, E);
3860     return CK_BlockPointerToObjCPointerCast;
3861   } else {
3862     assert(type->isPointerType());
3863     return CK_CPointerToObjCPointerCast;
3864   }
3865 }
3866 
3867 /// Prepares for a scalar cast, performing all the necessary stages
3868 /// except the final cast and returning the kind required.
3869 CastKind Sema::PrepareScalarCast(ExprResult &Src, QualType DestTy) {
3870   // Both Src and Dest are scalar types, i.e. arithmetic or pointer.
3871   // Also, callers should have filtered out the invalid cases with
3872   // pointers.  Everything else should be possible.
3873 
3874   QualType SrcTy = Src.get()->getType();
3875   if (const AtomicType *SrcAtomicTy = SrcTy->getAs<AtomicType>())
3876     SrcTy = SrcAtomicTy->getValueType();
3877   if (const AtomicType *DestAtomicTy = DestTy->getAs<AtomicType>())
3878     DestTy = DestAtomicTy->getValueType();
3879 
3880   if (Context.hasSameUnqualifiedType(SrcTy, DestTy))
3881     return CK_NoOp;
3882 
3883   switch (Type::ScalarTypeKind SrcKind = SrcTy->getScalarTypeKind()) {
3884   case Type::STK_MemberPointer:
3885     llvm_unreachable("member pointer type in C");
3886 
3887   case Type::STK_CPointer:
3888   case Type::STK_BlockPointer:
3889   case Type::STK_ObjCObjectPointer:
3890     switch (DestTy->getScalarTypeKind()) {
3891     case Type::STK_CPointer:
3892       return CK_BitCast;
3893     case Type::STK_BlockPointer:
3894       return (SrcKind == Type::STK_BlockPointer
3895                 ? CK_BitCast : CK_AnyPointerToBlockPointerCast);
3896     case Type::STK_ObjCObjectPointer:
3897       if (SrcKind == Type::STK_ObjCObjectPointer)
3898         return CK_BitCast;
3899       if (SrcKind == Type::STK_CPointer)
3900         return CK_CPointerToObjCPointerCast;
3901       maybeExtendBlockObject(*this, Src);
3902       return CK_BlockPointerToObjCPointerCast;
3903     case Type::STK_Bool:
3904       return CK_PointerToBoolean;
3905     case Type::STK_Integral:
3906       return CK_PointerToIntegral;
3907     case Type::STK_Floating:
3908     case Type::STK_FloatingComplex:
3909     case Type::STK_IntegralComplex:
3910     case Type::STK_MemberPointer:
3911       llvm_unreachable("illegal cast from pointer");
3912     }
3913     llvm_unreachable("Should have returned before this");
3914 
3915   case Type::STK_Bool: // casting from bool is like casting from an integer
3916   case Type::STK_Integral:
3917     switch (DestTy->getScalarTypeKind()) {
3918     case Type::STK_CPointer:
3919     case Type::STK_ObjCObjectPointer:
3920     case Type::STK_BlockPointer:
3921       if (Src.get()->isNullPointerConstant(Context,
3922                                            Expr::NPC_ValueDependentIsNull))
3923         return CK_NullToPointer;
3924       return CK_IntegralToPointer;
3925     case Type::STK_Bool:
3926       return CK_IntegralToBoolean;
3927     case Type::STK_Integral:
3928       return CK_IntegralCast;
3929     case Type::STK_Floating:
3930       return CK_IntegralToFloating;
3931     case Type::STK_IntegralComplex:
3932       Src = ImpCastExprToType(Src.take(),
3933                               DestTy->castAs<ComplexType>()->getElementType(),
3934                               CK_IntegralCast);
3935       return CK_IntegralRealToComplex;
3936     case Type::STK_FloatingComplex:
3937       Src = ImpCastExprToType(Src.take(),
3938                               DestTy->castAs<ComplexType>()->getElementType(),
3939                               CK_IntegralToFloating);
3940       return CK_FloatingRealToComplex;
3941     case Type::STK_MemberPointer:
3942       llvm_unreachable("member pointer type in C");
3943     }
3944     llvm_unreachable("Should have returned before this");
3945 
3946   case Type::STK_Floating:
3947     switch (DestTy->getScalarTypeKind()) {
3948     case Type::STK_Floating:
3949       return CK_FloatingCast;
3950     case Type::STK_Bool:
3951       return CK_FloatingToBoolean;
3952     case Type::STK_Integral:
3953       return CK_FloatingToIntegral;
3954     case Type::STK_FloatingComplex:
3955       Src = ImpCastExprToType(Src.take(),
3956                               DestTy->castAs<ComplexType>()->getElementType(),
3957                               CK_FloatingCast);
3958       return CK_FloatingRealToComplex;
3959     case Type::STK_IntegralComplex:
3960       Src = ImpCastExprToType(Src.take(),
3961                               DestTy->castAs<ComplexType>()->getElementType(),
3962                               CK_FloatingToIntegral);
3963       return CK_IntegralRealToComplex;
3964     case Type::STK_CPointer:
3965     case Type::STK_ObjCObjectPointer:
3966     case Type::STK_BlockPointer:
3967       llvm_unreachable("valid float->pointer cast?");
3968     case Type::STK_MemberPointer:
3969       llvm_unreachable("member pointer type in C");
3970     }
3971     llvm_unreachable("Should have returned before this");
3972 
3973   case Type::STK_FloatingComplex:
3974     switch (DestTy->getScalarTypeKind()) {
3975     case Type::STK_FloatingComplex:
3976       return CK_FloatingComplexCast;
3977     case Type::STK_IntegralComplex:
3978       return CK_FloatingComplexToIntegralComplex;
3979     case Type::STK_Floating: {
3980       QualType ET = SrcTy->castAs<ComplexType>()->getElementType();
3981       if (Context.hasSameType(ET, DestTy))
3982         return CK_FloatingComplexToReal;
3983       Src = ImpCastExprToType(Src.take(), ET, CK_FloatingComplexToReal);
3984       return CK_FloatingCast;
3985     }
3986     case Type::STK_Bool:
3987       return CK_FloatingComplexToBoolean;
3988     case Type::STK_Integral:
3989       Src = ImpCastExprToType(Src.take(),
3990                               SrcTy->castAs<ComplexType>()->getElementType(),
3991                               CK_FloatingComplexToReal);
3992       return CK_FloatingToIntegral;
3993     case Type::STK_CPointer:
3994     case Type::STK_ObjCObjectPointer:
3995     case Type::STK_BlockPointer:
3996       llvm_unreachable("valid complex float->pointer cast?");
3997     case Type::STK_MemberPointer:
3998       llvm_unreachable("member pointer type in C");
3999     }
4000     llvm_unreachable("Should have returned before this");
4001 
4002   case Type::STK_IntegralComplex:
4003     switch (DestTy->getScalarTypeKind()) {
4004     case Type::STK_FloatingComplex:
4005       return CK_IntegralComplexToFloatingComplex;
4006     case Type::STK_IntegralComplex:
4007       return CK_IntegralComplexCast;
4008     case Type::STK_Integral: {
4009       QualType ET = SrcTy->castAs<ComplexType>()->getElementType();
4010       if (Context.hasSameType(ET, DestTy))
4011         return CK_IntegralComplexToReal;
4012       Src = ImpCastExprToType(Src.take(), ET, CK_IntegralComplexToReal);
4013       return CK_IntegralCast;
4014     }
4015     case Type::STK_Bool:
4016       return CK_IntegralComplexToBoolean;
4017     case Type::STK_Floating:
4018       Src = ImpCastExprToType(Src.take(),
4019                               SrcTy->castAs<ComplexType>()->getElementType(),
4020                               CK_IntegralComplexToReal);
4021       return CK_IntegralToFloating;
4022     case Type::STK_CPointer:
4023     case Type::STK_ObjCObjectPointer:
4024     case Type::STK_BlockPointer:
4025       llvm_unreachable("valid complex int->pointer cast?");
4026     case Type::STK_MemberPointer:
4027       llvm_unreachable("member pointer type in C");
4028     }
4029     llvm_unreachable("Should have returned before this");
4030   }
4031 
4032   llvm_unreachable("Unhandled scalar cast");
4033 }
4034 
4035 bool Sema::CheckVectorCast(SourceRange R, QualType VectorTy, QualType Ty,
4036                            CastKind &Kind) {
4037   assert(VectorTy->isVectorType() && "Not a vector type!");
4038 
4039   if (Ty->isVectorType() || Ty->isIntegerType()) {
4040     if (Context.getTypeSize(VectorTy) != Context.getTypeSize(Ty))
4041       return Diag(R.getBegin(),
4042                   Ty->isVectorType() ?
4043                   diag::err_invalid_conversion_between_vectors :
4044                   diag::err_invalid_conversion_between_vector_and_integer)
4045         << VectorTy << Ty << R;
4046   } else
4047     return Diag(R.getBegin(),
4048                 diag::err_invalid_conversion_between_vector_and_scalar)
4049       << VectorTy << Ty << R;
4050 
4051   Kind = CK_BitCast;
4052   return false;
4053 }
4054 
4055 ExprResult Sema::CheckExtVectorCast(SourceRange R, QualType DestTy,
4056                                     Expr *CastExpr, CastKind &Kind) {
4057   assert(DestTy->isExtVectorType() && "Not an extended vector type!");
4058 
4059   QualType SrcTy = CastExpr->getType();
4060 
4061   // If SrcTy is a VectorType, the total size must match to explicitly cast to
4062   // an ExtVectorType.
4063   // In OpenCL, casts between vectors of different types are not allowed.
4064   // (See OpenCL 6.2).
4065   if (SrcTy->isVectorType()) {
4066     if (Context.getTypeSize(DestTy) != Context.getTypeSize(SrcTy)
4067         || (getLangOptions().OpenCL &&
4068             (DestTy.getCanonicalType() != SrcTy.getCanonicalType()))) {
4069       Diag(R.getBegin(),diag::err_invalid_conversion_between_ext_vectors)
4070         << DestTy << SrcTy << R;
4071       return ExprError();
4072     }
4073     Kind = CK_BitCast;
4074     return Owned(CastExpr);
4075   }
4076 
4077   // All non-pointer scalars can be cast to ExtVector type.  The appropriate
4078   // conversion will take place first from scalar to elt type, and then
4079   // splat from elt type to vector.
4080   if (SrcTy->isPointerType())
4081     return Diag(R.getBegin(),
4082                 diag::err_invalid_conversion_between_vector_and_scalar)
4083       << DestTy << SrcTy << R;
4084 
4085   QualType DestElemTy = DestTy->getAs<ExtVectorType>()->getElementType();
4086   ExprResult CastExprRes = Owned(CastExpr);
4087   CastKind CK = PrepareScalarCast(CastExprRes, DestElemTy);
4088   if (CastExprRes.isInvalid())
4089     return ExprError();
4090   CastExpr = ImpCastExprToType(CastExprRes.take(), DestElemTy, CK).take();
4091 
4092   Kind = CK_VectorSplat;
4093   return Owned(CastExpr);
4094 }
4095 
4096 ExprResult
4097 Sema::ActOnCastExpr(Scope *S, SourceLocation LParenLoc,
4098                     Declarator &D, ParsedType &Ty,
4099                     SourceLocation RParenLoc, Expr *CastExpr) {
4100   assert(!D.isInvalidType() && (CastExpr != 0) &&
4101          "ActOnCastExpr(): missing type or expr");
4102 
4103   TypeSourceInfo *castTInfo = GetTypeForDeclaratorCast(D, CastExpr->getType());
4104   if (D.isInvalidType())
4105     return ExprError();
4106 
4107   if (getLangOptions().CPlusPlus) {
4108     // Check that there are no default arguments (C++ only).
4109     CheckExtraCXXDefaultArguments(D);
4110   }
4111 
4112   checkUnusedDeclAttributes(D);
4113 
4114   QualType castType = castTInfo->getType();
4115   Ty = CreateParsedType(castType, castTInfo);
4116 
4117   bool isVectorLiteral = false;
4118 
4119   // Check for an altivec or OpenCL literal,
4120   // i.e. all the elements are integer constants.
4121   ParenExpr *PE = dyn_cast<ParenExpr>(CastExpr);
4122   ParenListExpr *PLE = dyn_cast<ParenListExpr>(CastExpr);
4123   if ((getLangOptions().AltiVec || getLangOptions().OpenCL)
4124        && castType->isVectorType() && (PE || PLE)) {
4125     if (PLE && PLE->getNumExprs() == 0) {
4126       Diag(PLE->getExprLoc(), diag::err_altivec_empty_initializer);
4127       return ExprError();
4128     }
4129     if (PE || PLE->getNumExprs() == 1) {
4130       Expr *E = (PE ? PE->getSubExpr() : PLE->getExpr(0));
4131       if (!E->getType()->isVectorType())
4132         isVectorLiteral = true;
4133     }
4134     else
4135       isVectorLiteral = true;
4136   }
4137 
4138   // If this is a vector initializer, '(' type ')' '(' init, ..., init ')'
4139   // then handle it as such.
4140   if (isVectorLiteral)
4141     return BuildVectorLiteral(LParenLoc, RParenLoc, CastExpr, castTInfo);
4142 
4143   // If the Expr being casted is a ParenListExpr, handle it specially.
4144   // This is not an AltiVec-style cast, so turn the ParenListExpr into a
4145   // sequence of BinOp comma operators.
4146   if (isa<ParenListExpr>(CastExpr)) {
4147     ExprResult Result = MaybeConvertParenListExprToParenExpr(S, CastExpr);
4148     if (Result.isInvalid()) return ExprError();
4149     CastExpr = Result.take();
4150   }
4151 
4152   return BuildCStyleCastExpr(LParenLoc, castTInfo, RParenLoc, CastExpr);
4153 }
4154 
4155 ExprResult Sema::BuildVectorLiteral(SourceLocation LParenLoc,
4156                                     SourceLocation RParenLoc, Expr *E,
4157                                     TypeSourceInfo *TInfo) {
4158   assert((isa<ParenListExpr>(E) || isa<ParenExpr>(E)) &&
4159          "Expected paren or paren list expression");
4160 
4161   Expr **exprs;
4162   unsigned numExprs;
4163   Expr *subExpr;
4164   if (ParenListExpr *PE = dyn_cast<ParenListExpr>(E)) {
4165     exprs = PE->getExprs();
4166     numExprs = PE->getNumExprs();
4167   } else {
4168     subExpr = cast<ParenExpr>(E)->getSubExpr();
4169     exprs = &subExpr;
4170     numExprs = 1;
4171   }
4172 
4173   QualType Ty = TInfo->getType();
4174   assert(Ty->isVectorType() && "Expected vector type");
4175 
4176   SmallVector<Expr *, 8> initExprs;
4177   const VectorType *VTy = Ty->getAs<VectorType>();
4178   unsigned numElems = Ty->getAs<VectorType>()->getNumElements();
4179 
4180   // '(...)' form of vector initialization in AltiVec: the number of
4181   // initializers must be one or must match the size of the vector.
4182   // If a single value is specified in the initializer then it will be
4183   // replicated to all the components of the vector
4184   if (VTy->getVectorKind() == VectorType::AltiVecVector) {
4185     // The number of initializers must be one or must match the size of the
4186     // vector. If a single value is specified in the initializer then it will
4187     // be replicated to all the components of the vector
4188     if (numExprs == 1) {
4189       QualType ElemTy = Ty->getAs<VectorType>()->getElementType();
4190       ExprResult Literal = DefaultLvalueConversion(exprs[0]);
4191       if (Literal.isInvalid())
4192         return ExprError();
4193       Literal = ImpCastExprToType(Literal.take(), ElemTy,
4194                                   PrepareScalarCast(Literal, ElemTy));
4195       return BuildCStyleCastExpr(LParenLoc, TInfo, RParenLoc, Literal.take());
4196     }
4197     else if (numExprs < numElems) {
4198       Diag(E->getExprLoc(),
4199            diag::err_incorrect_number_of_vector_initializers);
4200       return ExprError();
4201     }
4202     else
4203       initExprs.append(exprs, exprs + numExprs);
4204   }
4205   else {
4206     // For OpenCL, when the number of initializers is a single value,
4207     // it will be replicated to all components of the vector.
4208     if (getLangOptions().OpenCL &&
4209         VTy->getVectorKind() == VectorType::GenericVector &&
4210         numExprs == 1) {
4211         QualType ElemTy = Ty->getAs<VectorType>()->getElementType();
4212         ExprResult Literal = DefaultLvalueConversion(exprs[0]);
4213         if (Literal.isInvalid())
4214           return ExprError();
4215         Literal = ImpCastExprToType(Literal.take(), ElemTy,
4216                                     PrepareScalarCast(Literal, ElemTy));
4217         return BuildCStyleCastExpr(LParenLoc, TInfo, RParenLoc, Literal.take());
4218     }
4219 
4220     initExprs.append(exprs, exprs + numExprs);
4221   }
4222   // FIXME: This means that pretty-printing the final AST will produce curly
4223   // braces instead of the original commas.
4224   InitListExpr *initE = new (Context) InitListExpr(Context, LParenLoc,
4225                                                    &initExprs[0],
4226                                                    initExprs.size(), RParenLoc);
4227   initE->setType(Ty);
4228   return BuildCompoundLiteralExpr(LParenLoc, TInfo, RParenLoc, initE);
4229 }
4230 
4231 /// This is not an AltiVec-style cast or or C++ direct-initialization, so turn
4232 /// the ParenListExpr into a sequence of comma binary operators.
4233 ExprResult
4234 Sema::MaybeConvertParenListExprToParenExpr(Scope *S, Expr *OrigExpr) {
4235   ParenListExpr *E = dyn_cast<ParenListExpr>(OrigExpr);
4236   if (!E)
4237     return Owned(OrigExpr);
4238 
4239   ExprResult Result(E->getExpr(0));
4240 
4241   for (unsigned i = 1, e = E->getNumExprs(); i != e && !Result.isInvalid(); ++i)
4242     Result = ActOnBinOp(S, E->getExprLoc(), tok::comma, Result.get(),
4243                         E->getExpr(i));
4244 
4245   if (Result.isInvalid()) return ExprError();
4246 
4247   return ActOnParenExpr(E->getLParenLoc(), E->getRParenLoc(), Result.get());
4248 }
4249 
4250 ExprResult Sema::ActOnParenListExpr(SourceLocation L,
4251                                     SourceLocation R,
4252                                     MultiExprArg Val) {
4253   unsigned nexprs = Val.size();
4254   Expr **exprs = reinterpret_cast<Expr**>(Val.release());
4255   assert((exprs != 0) && "ActOnParenOrParenListExpr() missing expr list");
4256   Expr *expr = new (Context) ParenListExpr(Context, L, exprs, nexprs, R);
4257   return Owned(expr);
4258 }
4259 
4260 /// \brief Emit a specialized diagnostic when one expression is a null pointer
4261 /// constant and the other is not a pointer.  Returns true if a diagnostic is
4262 /// emitted.
4263 bool Sema::DiagnoseConditionalForNull(Expr *LHSExpr, Expr *RHSExpr,
4264                                       SourceLocation QuestionLoc) {
4265   Expr *NullExpr = LHSExpr;
4266   Expr *NonPointerExpr = RHSExpr;
4267   Expr::NullPointerConstantKind NullKind =
4268       NullExpr->isNullPointerConstant(Context,
4269                                       Expr::NPC_ValueDependentIsNotNull);
4270 
4271   if (NullKind == Expr::NPCK_NotNull) {
4272     NullExpr = RHSExpr;
4273     NonPointerExpr = LHSExpr;
4274     NullKind =
4275         NullExpr->isNullPointerConstant(Context,
4276                                         Expr::NPC_ValueDependentIsNotNull);
4277   }
4278 
4279   if (NullKind == Expr::NPCK_NotNull)
4280     return false;
4281 
4282   if (NullKind == Expr::NPCK_ZeroInteger) {
4283     // In this case, check to make sure that we got here from a "NULL"
4284     // string in the source code.
4285     NullExpr = NullExpr->IgnoreParenImpCasts();
4286     SourceLocation loc = NullExpr->getExprLoc();
4287     if (!findMacroSpelling(loc, "NULL"))
4288       return false;
4289   }
4290 
4291   int DiagType = (NullKind == Expr::NPCK_CXX0X_nullptr);
4292   Diag(QuestionLoc, diag::err_typecheck_cond_incompatible_operands_null)
4293       << NonPointerExpr->getType() << DiagType
4294       << NonPointerExpr->getSourceRange();
4295   return true;
4296 }
4297 
4298 /// \brief Return false if the condition expression is valid, true otherwise.
4299 static bool checkCondition(Sema &S, Expr *Cond) {
4300   QualType CondTy = Cond->getType();
4301 
4302   // C99 6.5.15p2
4303   if (CondTy->isScalarType()) return false;
4304 
4305   // OpenCL: Sec 6.3.i says the condition is allowed to be a vector or scalar.
4306   if (S.getLangOptions().OpenCL && CondTy->isVectorType())
4307     return false;
4308 
4309   // Emit the proper error message.
4310   S.Diag(Cond->getLocStart(), S.getLangOptions().OpenCL ?
4311                               diag::err_typecheck_cond_expect_scalar :
4312                               diag::err_typecheck_cond_expect_scalar_or_vector)
4313     << CondTy;
4314   return true;
4315 }
4316 
4317 /// \brief Return false if the two expressions can be converted to a vector,
4318 /// true otherwise
4319 static bool checkConditionalConvertScalarsToVectors(Sema &S, ExprResult &LHS,
4320                                                     ExprResult &RHS,
4321                                                     QualType CondTy) {
4322   // Both operands should be of scalar type.
4323   if (!LHS.get()->getType()->isScalarType()) {
4324     S.Diag(LHS.get()->getLocStart(), diag::err_typecheck_cond_expect_scalar)
4325       << CondTy;
4326     return true;
4327   }
4328   if (!RHS.get()->getType()->isScalarType()) {
4329     S.Diag(RHS.get()->getLocStart(), diag::err_typecheck_cond_expect_scalar)
4330       << CondTy;
4331     return true;
4332   }
4333 
4334   // Implicity convert these scalars to the type of the condition.
4335   LHS = S.ImpCastExprToType(LHS.take(), CondTy, CK_IntegralCast);
4336   RHS = S.ImpCastExprToType(RHS.take(), CondTy, CK_IntegralCast);
4337   return false;
4338 }
4339 
4340 /// \brief Handle when one or both operands are void type.
4341 static QualType checkConditionalVoidType(Sema &S, ExprResult &LHS,
4342                                          ExprResult &RHS) {
4343     Expr *LHSExpr = LHS.get();
4344     Expr *RHSExpr = RHS.get();
4345 
4346     if (!LHSExpr->getType()->isVoidType())
4347       S.Diag(RHSExpr->getLocStart(), diag::ext_typecheck_cond_one_void)
4348         << RHSExpr->getSourceRange();
4349     if (!RHSExpr->getType()->isVoidType())
4350       S.Diag(LHSExpr->getLocStart(), diag::ext_typecheck_cond_one_void)
4351         << LHSExpr->getSourceRange();
4352     LHS = S.ImpCastExprToType(LHS.take(), S.Context.VoidTy, CK_ToVoid);
4353     RHS = S.ImpCastExprToType(RHS.take(), S.Context.VoidTy, CK_ToVoid);
4354     return S.Context.VoidTy;
4355 }
4356 
4357 /// \brief Return false if the NullExpr can be promoted to PointerTy,
4358 /// true otherwise.
4359 static bool checkConditionalNullPointer(Sema &S, ExprResult &NullExpr,
4360                                         QualType PointerTy) {
4361   if ((!PointerTy->isAnyPointerType() && !PointerTy->isBlockPointerType()) ||
4362       !NullExpr.get()->isNullPointerConstant(S.Context,
4363                                             Expr::NPC_ValueDependentIsNull))
4364     return true;
4365 
4366   NullExpr = S.ImpCastExprToType(NullExpr.take(), PointerTy, CK_NullToPointer);
4367   return false;
4368 }
4369 
4370 /// \brief Checks compatibility between two pointers and return the resulting
4371 /// type.
4372 static QualType checkConditionalPointerCompatibility(Sema &S, ExprResult &LHS,
4373                                                      ExprResult &RHS,
4374                                                      SourceLocation Loc) {
4375   QualType LHSTy = LHS.get()->getType();
4376   QualType RHSTy = RHS.get()->getType();
4377 
4378   if (S.Context.hasSameType(LHSTy, RHSTy)) {
4379     // Two identical pointers types are always compatible.
4380     return LHSTy;
4381   }
4382 
4383   QualType lhptee, rhptee;
4384 
4385   // Get the pointee types.
4386   if (const BlockPointerType *LHSBTy = LHSTy->getAs<BlockPointerType>()) {
4387     lhptee = LHSBTy->getPointeeType();
4388     rhptee = RHSTy->castAs<BlockPointerType>()->getPointeeType();
4389   } else {
4390     lhptee = LHSTy->castAs<PointerType>()->getPointeeType();
4391     rhptee = RHSTy->castAs<PointerType>()->getPointeeType();
4392   }
4393 
4394   if (!S.Context.typesAreCompatible(lhptee.getUnqualifiedType(),
4395                                     rhptee.getUnqualifiedType())) {
4396     S.Diag(Loc, diag::warn_typecheck_cond_incompatible_pointers)
4397       << LHSTy << RHSTy << LHS.get()->getSourceRange()
4398       << RHS.get()->getSourceRange();
4399     // In this situation, we assume void* type. No especially good
4400     // reason, but this is what gcc does, and we do have to pick
4401     // to get a consistent AST.
4402     QualType incompatTy = S.Context.getPointerType(S.Context.VoidTy);
4403     LHS = S.ImpCastExprToType(LHS.take(), incompatTy, CK_BitCast);
4404     RHS = S.ImpCastExprToType(RHS.take(), incompatTy, CK_BitCast);
4405     return incompatTy;
4406   }
4407 
4408   // The pointer types are compatible.
4409   // C99 6.5.15p6: If both operands are pointers to compatible types *or* to
4410   // differently qualified versions of compatible types, the result type is
4411   // a pointer to an appropriately qualified version of the *composite*
4412   // type.
4413   // FIXME: Need to calculate the composite type.
4414   // FIXME: Need to add qualifiers
4415 
4416   LHS = S.ImpCastExprToType(LHS.take(), LHSTy, CK_BitCast);
4417   RHS = S.ImpCastExprToType(RHS.take(), LHSTy, CK_BitCast);
4418   return LHSTy;
4419 }
4420 
4421 /// \brief Return the resulting type when the operands are both block pointers.
4422 static QualType checkConditionalBlockPointerCompatibility(Sema &S,
4423                                                           ExprResult &LHS,
4424                                                           ExprResult &RHS,
4425                                                           SourceLocation Loc) {
4426   QualType LHSTy = LHS.get()->getType();
4427   QualType RHSTy = RHS.get()->getType();
4428 
4429   if (!LHSTy->isBlockPointerType() || !RHSTy->isBlockPointerType()) {
4430     if (LHSTy->isVoidPointerType() || RHSTy->isVoidPointerType()) {
4431       QualType destType = S.Context.getPointerType(S.Context.VoidTy);
4432       LHS = S.ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4433       RHS = S.ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4434       return destType;
4435     }
4436     S.Diag(Loc, diag::err_typecheck_cond_incompatible_operands)
4437       << LHSTy << RHSTy << LHS.get()->getSourceRange()
4438       << RHS.get()->getSourceRange();
4439     return QualType();
4440   }
4441 
4442   // We have 2 block pointer types.
4443   return checkConditionalPointerCompatibility(S, LHS, RHS, Loc);
4444 }
4445 
4446 /// \brief Return the resulting type when the operands are both pointers.
4447 static QualType
4448 checkConditionalObjectPointersCompatibility(Sema &S, ExprResult &LHS,
4449                                             ExprResult &RHS,
4450                                             SourceLocation Loc) {
4451   // get the pointer types
4452   QualType LHSTy = LHS.get()->getType();
4453   QualType RHSTy = RHS.get()->getType();
4454 
4455   // get the "pointed to" types
4456   QualType lhptee = LHSTy->getAs<PointerType>()->getPointeeType();
4457   QualType rhptee = RHSTy->getAs<PointerType>()->getPointeeType();
4458 
4459   // ignore qualifiers on void (C99 6.5.15p3, clause 6)
4460   if (lhptee->isVoidType() && rhptee->isIncompleteOrObjectType()) {
4461     // Figure out necessary qualifiers (C99 6.5.15p6)
4462     QualType destPointee
4463       = S.Context.getQualifiedType(lhptee, rhptee.getQualifiers());
4464     QualType destType = S.Context.getPointerType(destPointee);
4465     // Add qualifiers if necessary.
4466     LHS = S.ImpCastExprToType(LHS.take(), destType, CK_NoOp);
4467     // Promote to void*.
4468     RHS = S.ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4469     return destType;
4470   }
4471   if (rhptee->isVoidType() && lhptee->isIncompleteOrObjectType()) {
4472     QualType destPointee
4473       = S.Context.getQualifiedType(rhptee, lhptee.getQualifiers());
4474     QualType destType = S.Context.getPointerType(destPointee);
4475     // Add qualifiers if necessary.
4476     RHS = S.ImpCastExprToType(RHS.take(), destType, CK_NoOp);
4477     // Promote to void*.
4478     LHS = S.ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4479     return destType;
4480   }
4481 
4482   return checkConditionalPointerCompatibility(S, LHS, RHS, Loc);
4483 }
4484 
4485 /// \brief Return false if the first expression is not an integer and the second
4486 /// expression is not a pointer, true otherwise.
4487 static bool checkPointerIntegerMismatch(Sema &S, ExprResult &Int,
4488                                         Expr* PointerExpr, SourceLocation Loc,
4489                                         bool IsIntFirstExpr) {
4490   if (!PointerExpr->getType()->isPointerType() ||
4491       !Int.get()->getType()->isIntegerType())
4492     return false;
4493 
4494   Expr *Expr1 = IsIntFirstExpr ? Int.get() : PointerExpr;
4495   Expr *Expr2 = IsIntFirstExpr ? PointerExpr : Int.get();
4496 
4497   S.Diag(Loc, diag::warn_typecheck_cond_pointer_integer_mismatch)
4498     << Expr1->getType() << Expr2->getType()
4499     << Expr1->getSourceRange() << Expr2->getSourceRange();
4500   Int = S.ImpCastExprToType(Int.take(), PointerExpr->getType(),
4501                             CK_IntegralToPointer);
4502   return true;
4503 }
4504 
4505 /// Note that LHS is not null here, even if this is the gnu "x ?: y" extension.
4506 /// In that case, LHS = cond.
4507 /// C99 6.5.15
4508 QualType Sema::CheckConditionalOperands(ExprResult &Cond, ExprResult &LHS,
4509                                         ExprResult &RHS, ExprValueKind &VK,
4510                                         ExprObjectKind &OK,
4511                                         SourceLocation QuestionLoc) {
4512 
4513   ExprResult LHSResult = CheckPlaceholderExpr(LHS.get());
4514   if (!LHSResult.isUsable()) return QualType();
4515   LHS = move(LHSResult);
4516 
4517   ExprResult RHSResult = CheckPlaceholderExpr(RHS.get());
4518   if (!RHSResult.isUsable()) return QualType();
4519   RHS = move(RHSResult);
4520 
4521   // C++ is sufficiently different to merit its own checker.
4522   if (getLangOptions().CPlusPlus)
4523     return CXXCheckConditionalOperands(Cond, LHS, RHS, VK, OK, QuestionLoc);
4524 
4525   VK = VK_RValue;
4526   OK = OK_Ordinary;
4527 
4528   Cond = UsualUnaryConversions(Cond.take());
4529   if (Cond.isInvalid())
4530     return QualType();
4531   LHS = UsualUnaryConversions(LHS.take());
4532   if (LHS.isInvalid())
4533     return QualType();
4534   RHS = UsualUnaryConversions(RHS.take());
4535   if (RHS.isInvalid())
4536     return QualType();
4537 
4538   QualType CondTy = Cond.get()->getType();
4539   QualType LHSTy = LHS.get()->getType();
4540   QualType RHSTy = RHS.get()->getType();
4541 
4542   // first, check the condition.
4543   if (checkCondition(*this, Cond.get()))
4544     return QualType();
4545 
4546   // Now check the two expressions.
4547   if (LHSTy->isVectorType() || RHSTy->isVectorType())
4548     return CheckVectorOperands(LHS, RHS, QuestionLoc, /*isCompAssign*/false);
4549 
4550   // OpenCL: If the condition is a vector, and both operands are scalar,
4551   // attempt to implicity convert them to the vector type to act like the
4552   // built in select.
4553   if (getLangOptions().OpenCL && CondTy->isVectorType())
4554     if (checkConditionalConvertScalarsToVectors(*this, LHS, RHS, CondTy))
4555       return QualType();
4556 
4557   // If both operands have arithmetic type, do the usual arithmetic conversions
4558   // to find a common type: C99 6.5.15p3,5.
4559   if (LHSTy->isArithmeticType() && RHSTy->isArithmeticType()) {
4560     UsualArithmeticConversions(LHS, RHS);
4561     if (LHS.isInvalid() || RHS.isInvalid())
4562       return QualType();
4563     return LHS.get()->getType();
4564   }
4565 
4566   // If both operands are the same structure or union type, the result is that
4567   // type.
4568   if (const RecordType *LHSRT = LHSTy->getAs<RecordType>()) {    // C99 6.5.15p3
4569     if (const RecordType *RHSRT = RHSTy->getAs<RecordType>())
4570       if (LHSRT->getDecl() == RHSRT->getDecl())
4571         // "If both the operands have structure or union type, the result has
4572         // that type."  This implies that CV qualifiers are dropped.
4573         return LHSTy.getUnqualifiedType();
4574     // FIXME: Type of conditional expression must be complete in C mode.
4575   }
4576 
4577   // C99 6.5.15p5: "If both operands have void type, the result has void type."
4578   // The following || allows only one side to be void (a GCC-ism).
4579   if (LHSTy->isVoidType() || RHSTy->isVoidType()) {
4580     return checkConditionalVoidType(*this, LHS, RHS);
4581   }
4582 
4583   // C99 6.5.15p6 - "if one operand is a null pointer constant, the result has
4584   // the type of the other operand."
4585   if (!checkConditionalNullPointer(*this, RHS, LHSTy)) return LHSTy;
4586   if (!checkConditionalNullPointer(*this, LHS, RHSTy)) return RHSTy;
4587 
4588   // All objective-c pointer type analysis is done here.
4589   QualType compositeType = FindCompositeObjCPointerType(LHS, RHS,
4590                                                         QuestionLoc);
4591   if (LHS.isInvalid() || RHS.isInvalid())
4592     return QualType();
4593   if (!compositeType.isNull())
4594     return compositeType;
4595 
4596 
4597   // Handle block pointer types.
4598   if (LHSTy->isBlockPointerType() || RHSTy->isBlockPointerType())
4599     return checkConditionalBlockPointerCompatibility(*this, LHS, RHS,
4600                                                      QuestionLoc);
4601 
4602   // Check constraints for C object pointers types (C99 6.5.15p3,6).
4603   if (LHSTy->isPointerType() && RHSTy->isPointerType())
4604     return checkConditionalObjectPointersCompatibility(*this, LHS, RHS,
4605                                                        QuestionLoc);
4606 
4607   // GCC compatibility: soften pointer/integer mismatch.  Note that
4608   // null pointers have been filtered out by this point.
4609   if (checkPointerIntegerMismatch(*this, LHS, RHS.get(), QuestionLoc,
4610       /*isIntFirstExpr=*/true))
4611     return RHSTy;
4612   if (checkPointerIntegerMismatch(*this, RHS, LHS.get(), QuestionLoc,
4613       /*isIntFirstExpr=*/false))
4614     return LHSTy;
4615 
4616   // Emit a better diagnostic if one of the expressions is a null pointer
4617   // constant and the other is not a pointer type. In this case, the user most
4618   // likely forgot to take the address of the other expression.
4619   if (DiagnoseConditionalForNull(LHS.get(), RHS.get(), QuestionLoc))
4620     return QualType();
4621 
4622   // Otherwise, the operands are not compatible.
4623   Diag(QuestionLoc, diag::err_typecheck_cond_incompatible_operands)
4624     << LHSTy << RHSTy << LHS.get()->getSourceRange()
4625     << RHS.get()->getSourceRange();
4626   return QualType();
4627 }
4628 
4629 /// FindCompositeObjCPointerType - Helper method to find composite type of
4630 /// two objective-c pointer types of the two input expressions.
4631 QualType Sema::FindCompositeObjCPointerType(ExprResult &LHS, ExprResult &RHS,
4632                                             SourceLocation QuestionLoc) {
4633   QualType LHSTy = LHS.get()->getType();
4634   QualType RHSTy = RHS.get()->getType();
4635 
4636   // Handle things like Class and struct objc_class*.  Here we case the result
4637   // to the pseudo-builtin, because that will be implicitly cast back to the
4638   // redefinition type if an attempt is made to access its fields.
4639   if (LHSTy->isObjCClassType() &&
4640       (Context.hasSameType(RHSTy, Context.getObjCClassRedefinitionType()))) {
4641     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_CPointerToObjCPointerCast);
4642     return LHSTy;
4643   }
4644   if (RHSTy->isObjCClassType() &&
4645       (Context.hasSameType(LHSTy, Context.getObjCClassRedefinitionType()))) {
4646     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_CPointerToObjCPointerCast);
4647     return RHSTy;
4648   }
4649   // And the same for struct objc_object* / id
4650   if (LHSTy->isObjCIdType() &&
4651       (Context.hasSameType(RHSTy, Context.getObjCIdRedefinitionType()))) {
4652     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_CPointerToObjCPointerCast);
4653     return LHSTy;
4654   }
4655   if (RHSTy->isObjCIdType() &&
4656       (Context.hasSameType(LHSTy, Context.getObjCIdRedefinitionType()))) {
4657     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_CPointerToObjCPointerCast);
4658     return RHSTy;
4659   }
4660   // And the same for struct objc_selector* / SEL
4661   if (Context.isObjCSelType(LHSTy) &&
4662       (Context.hasSameType(RHSTy, Context.getObjCSelRedefinitionType()))) {
4663     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_BitCast);
4664     return LHSTy;
4665   }
4666   if (Context.isObjCSelType(RHSTy) &&
4667       (Context.hasSameType(LHSTy, Context.getObjCSelRedefinitionType()))) {
4668     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_BitCast);
4669     return RHSTy;
4670   }
4671   // Check constraints for Objective-C object pointers types.
4672   if (LHSTy->isObjCObjectPointerType() && RHSTy->isObjCObjectPointerType()) {
4673 
4674     if (Context.getCanonicalType(LHSTy) == Context.getCanonicalType(RHSTy)) {
4675       // Two identical object pointer types are always compatible.
4676       return LHSTy;
4677     }
4678     const ObjCObjectPointerType *LHSOPT = LHSTy->castAs<ObjCObjectPointerType>();
4679     const ObjCObjectPointerType *RHSOPT = RHSTy->castAs<ObjCObjectPointerType>();
4680     QualType compositeType = LHSTy;
4681 
4682     // If both operands are interfaces and either operand can be
4683     // assigned to the other, use that type as the composite
4684     // type. This allows
4685     //   xxx ? (A*) a : (B*) b
4686     // where B is a subclass of A.
4687     //
4688     // Additionally, as for assignment, if either type is 'id'
4689     // allow silent coercion. Finally, if the types are
4690     // incompatible then make sure to use 'id' as the composite
4691     // type so the result is acceptable for sending messages to.
4692 
4693     // FIXME: Consider unifying with 'areComparableObjCPointerTypes'.
4694     // It could return the composite type.
4695     if (Context.canAssignObjCInterfaces(LHSOPT, RHSOPT)) {
4696       compositeType = RHSOPT->isObjCBuiltinType() ? RHSTy : LHSTy;
4697     } else if (Context.canAssignObjCInterfaces(RHSOPT, LHSOPT)) {
4698       compositeType = LHSOPT->isObjCBuiltinType() ? LHSTy : RHSTy;
4699     } else if ((LHSTy->isObjCQualifiedIdType() ||
4700                 RHSTy->isObjCQualifiedIdType()) &&
4701                Context.ObjCQualifiedIdTypesAreCompatible(LHSTy, RHSTy, true)) {
4702       // Need to handle "id<xx>" explicitly.
4703       // GCC allows qualified id and any Objective-C type to devolve to
4704       // id. Currently localizing to here until clear this should be
4705       // part of ObjCQualifiedIdTypesAreCompatible.
4706       compositeType = Context.getObjCIdType();
4707     } else if (LHSTy->isObjCIdType() || RHSTy->isObjCIdType()) {
4708       compositeType = Context.getObjCIdType();
4709     } else if (!(compositeType =
4710                  Context.areCommonBaseCompatible(LHSOPT, RHSOPT)).isNull())
4711       ;
4712     else {
4713       Diag(QuestionLoc, diag::ext_typecheck_cond_incompatible_operands)
4714       << LHSTy << RHSTy
4715       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
4716       QualType incompatTy = Context.getObjCIdType();
4717       LHS = ImpCastExprToType(LHS.take(), incompatTy, CK_BitCast);
4718       RHS = ImpCastExprToType(RHS.take(), incompatTy, CK_BitCast);
4719       return incompatTy;
4720     }
4721     // The object pointer types are compatible.
4722     LHS = ImpCastExprToType(LHS.take(), compositeType, CK_BitCast);
4723     RHS = ImpCastExprToType(RHS.take(), compositeType, CK_BitCast);
4724     return compositeType;
4725   }
4726   // Check Objective-C object pointer types and 'void *'
4727   if (LHSTy->isVoidPointerType() && RHSTy->isObjCObjectPointerType()) {
4728     QualType lhptee = LHSTy->getAs<PointerType>()->getPointeeType();
4729     QualType rhptee = RHSTy->getAs<ObjCObjectPointerType>()->getPointeeType();
4730     QualType destPointee
4731     = Context.getQualifiedType(lhptee, rhptee.getQualifiers());
4732     QualType destType = Context.getPointerType(destPointee);
4733     // Add qualifiers if necessary.
4734     LHS = ImpCastExprToType(LHS.take(), destType, CK_NoOp);
4735     // Promote to void*.
4736     RHS = ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4737     return destType;
4738   }
4739   if (LHSTy->isObjCObjectPointerType() && RHSTy->isVoidPointerType()) {
4740     QualType lhptee = LHSTy->getAs<ObjCObjectPointerType>()->getPointeeType();
4741     QualType rhptee = RHSTy->getAs<PointerType>()->getPointeeType();
4742     QualType destPointee
4743     = Context.getQualifiedType(rhptee, lhptee.getQualifiers());
4744     QualType destType = Context.getPointerType(destPointee);
4745     // Add qualifiers if necessary.
4746     RHS = ImpCastExprToType(RHS.take(), destType, CK_NoOp);
4747     // Promote to void*.
4748     LHS = ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4749     return destType;
4750   }
4751   return QualType();
4752 }
4753 
4754 /// SuggestParentheses - Emit a note with a fixit hint that wraps
4755 /// ParenRange in parentheses.
4756 static void SuggestParentheses(Sema &Self, SourceLocation Loc,
4757                                const PartialDiagnostic &Note,
4758                                SourceRange ParenRange) {
4759   SourceLocation EndLoc = Self.PP.getLocForEndOfToken(ParenRange.getEnd());
4760   if (ParenRange.getBegin().isFileID() && ParenRange.getEnd().isFileID() &&
4761       EndLoc.isValid()) {
4762     Self.Diag(Loc, Note)
4763       << FixItHint::CreateInsertion(ParenRange.getBegin(), "(")
4764       << FixItHint::CreateInsertion(EndLoc, ")");
4765   } else {
4766     // We can't display the parentheses, so just show the bare note.
4767     Self.Diag(Loc, Note) << ParenRange;
4768   }
4769 }
4770 
4771 static bool IsArithmeticOp(BinaryOperatorKind Opc) {
4772   return Opc >= BO_Mul && Opc <= BO_Shr;
4773 }
4774 
4775 /// IsArithmeticBinaryExpr - Returns true if E is an arithmetic binary
4776 /// expression, either using a built-in or overloaded operator,
4777 /// and sets *OpCode to the opcode and *RHSExprs to the right-hand side
4778 /// expression.
4779 static bool IsArithmeticBinaryExpr(Expr *E, BinaryOperatorKind *Opcode,
4780                                    Expr **RHSExprs) {
4781   // Don't strip parenthesis: we should not warn if E is in parenthesis.
4782   E = E->IgnoreImpCasts();
4783   E = E->IgnoreConversionOperator();
4784   E = E->IgnoreImpCasts();
4785 
4786   // Built-in binary operator.
4787   if (BinaryOperator *OP = dyn_cast<BinaryOperator>(E)) {
4788     if (IsArithmeticOp(OP->getOpcode())) {
4789       *Opcode = OP->getOpcode();
4790       *RHSExprs = OP->getRHS();
4791       return true;
4792     }
4793   }
4794 
4795   // Overloaded operator.
4796   if (CXXOperatorCallExpr *Call = dyn_cast<CXXOperatorCallExpr>(E)) {
4797     if (Call->getNumArgs() != 2)
4798       return false;
4799 
4800     // Make sure this is really a binary operator that is safe to pass into
4801     // BinaryOperator::getOverloadedOpcode(), e.g. it's not a subscript op.
4802     OverloadedOperatorKind OO = Call->getOperator();
4803     if (OO < OO_Plus || OO > OO_Arrow)
4804       return false;
4805 
4806     BinaryOperatorKind OpKind = BinaryOperator::getOverloadedOpcode(OO);
4807     if (IsArithmeticOp(OpKind)) {
4808       *Opcode = OpKind;
4809       *RHSExprs = Call->getArg(1);
4810       return true;
4811     }
4812   }
4813 
4814   return false;
4815 }
4816 
4817 static bool IsLogicOp(BinaryOperatorKind Opc) {
4818   return (Opc >= BO_LT && Opc <= BO_NE) || (Opc >= BO_LAnd && Opc <= BO_LOr);
4819 }
4820 
4821 /// ExprLooksBoolean - Returns true if E looks boolean, i.e. it has boolean type
4822 /// or is a logical expression such as (x==y) which has int type, but is
4823 /// commonly interpreted as boolean.
4824 static bool ExprLooksBoolean(Expr *E) {
4825   E = E->IgnoreParenImpCasts();
4826 
4827   if (E->getType()->isBooleanType())
4828     return true;
4829   if (BinaryOperator *OP = dyn_cast<BinaryOperator>(E))
4830     return IsLogicOp(OP->getOpcode());
4831   if (UnaryOperator *OP = dyn_cast<UnaryOperator>(E))
4832     return OP->getOpcode() == UO_LNot;
4833 
4834   return false;
4835 }
4836 
4837 /// DiagnoseConditionalPrecedence - Emit a warning when a conditional operator
4838 /// and binary operator are mixed in a way that suggests the programmer assumed
4839 /// the conditional operator has higher precedence, for example:
4840 /// "int x = a + someBinaryCondition ? 1 : 2".
4841 static void DiagnoseConditionalPrecedence(Sema &Self,
4842                                           SourceLocation OpLoc,
4843                                           Expr *Condition,
4844                                           Expr *LHSExpr,
4845                                           Expr *RHSExpr) {
4846   BinaryOperatorKind CondOpcode;
4847   Expr *CondRHS;
4848 
4849   if (!IsArithmeticBinaryExpr(Condition, &CondOpcode, &CondRHS))
4850     return;
4851   if (!ExprLooksBoolean(CondRHS))
4852     return;
4853 
4854   // The condition is an arithmetic binary expression, with a right-
4855   // hand side that looks boolean, so warn.
4856 
4857   Self.Diag(OpLoc, diag::warn_precedence_conditional)
4858       << Condition->getSourceRange()
4859       << BinaryOperator::getOpcodeStr(CondOpcode);
4860 
4861   SuggestParentheses(Self, OpLoc,
4862     Self.PDiag(diag::note_precedence_conditional_silence)
4863       << BinaryOperator::getOpcodeStr(CondOpcode),
4864     SourceRange(Condition->getLocStart(), Condition->getLocEnd()));
4865 
4866   SuggestParentheses(Self, OpLoc,
4867     Self.PDiag(diag::note_precedence_conditional_first),
4868     SourceRange(CondRHS->getLocStart(), RHSExpr->getLocEnd()));
4869 }
4870 
4871 /// ActOnConditionalOp - Parse a ?: operation.  Note that 'LHS' may be null
4872 /// in the case of a the GNU conditional expr extension.
4873 ExprResult Sema::ActOnConditionalOp(SourceLocation QuestionLoc,
4874                                     SourceLocation ColonLoc,
4875                                     Expr *CondExpr, Expr *LHSExpr,
4876                                     Expr *RHSExpr) {
4877   // If this is the gnu "x ?: y" extension, analyze the types as though the LHS
4878   // was the condition.
4879   OpaqueValueExpr *opaqueValue = 0;
4880   Expr *commonExpr = 0;
4881   if (LHSExpr == 0) {
4882     commonExpr = CondExpr;
4883 
4884     // We usually want to apply unary conversions *before* saving, except
4885     // in the special case of a C++ l-value conditional.
4886     if (!(getLangOptions().CPlusPlus
4887           && !commonExpr->isTypeDependent()
4888           && commonExpr->getValueKind() == RHSExpr->getValueKind()
4889           && commonExpr->isGLValue()
4890           && commonExpr->isOrdinaryOrBitFieldObject()
4891           && RHSExpr->isOrdinaryOrBitFieldObject()
4892           && Context.hasSameType(commonExpr->getType(), RHSExpr->getType()))) {
4893       ExprResult commonRes = UsualUnaryConversions(commonExpr);
4894       if (commonRes.isInvalid())
4895         return ExprError();
4896       commonExpr = commonRes.take();
4897     }
4898 
4899     opaqueValue = new (Context) OpaqueValueExpr(commonExpr->getExprLoc(),
4900                                                 commonExpr->getType(),
4901                                                 commonExpr->getValueKind(),
4902                                                 commonExpr->getObjectKind());
4903     LHSExpr = CondExpr = opaqueValue;
4904   }
4905 
4906   ExprValueKind VK = VK_RValue;
4907   ExprObjectKind OK = OK_Ordinary;
4908   ExprResult Cond = Owned(CondExpr), LHS = Owned(LHSExpr), RHS = Owned(RHSExpr);
4909   QualType result = CheckConditionalOperands(Cond, LHS, RHS,
4910                                              VK, OK, QuestionLoc);
4911   if (result.isNull() || Cond.isInvalid() || LHS.isInvalid() ||
4912       RHS.isInvalid())
4913     return ExprError();
4914 
4915   DiagnoseConditionalPrecedence(*this, QuestionLoc, Cond.get(), LHS.get(),
4916                                 RHS.get());
4917 
4918   if (!commonExpr)
4919     return Owned(new (Context) ConditionalOperator(Cond.take(), QuestionLoc,
4920                                                    LHS.take(), ColonLoc,
4921                                                    RHS.take(), result, VK, OK));
4922 
4923   return Owned(new (Context)
4924     BinaryConditionalOperator(commonExpr, opaqueValue, Cond.take(), LHS.take(),
4925                               RHS.take(), QuestionLoc, ColonLoc, result, VK,
4926                               OK));
4927 }
4928 
4929 // checkPointerTypesForAssignment - This is a very tricky routine (despite
4930 // being closely modeled after the C99 spec:-). The odd characteristic of this
4931 // routine is it effectively iqnores the qualifiers on the top level pointee.
4932 // This circumvents the usual type rules specified in 6.2.7p1 & 6.7.5.[1-3].
4933 // FIXME: add a couple examples in this comment.
4934 static Sema::AssignConvertType
4935 checkPointerTypesForAssignment(Sema &S, QualType LHSType, QualType RHSType) {
4936   assert(LHSType.isCanonical() && "LHS not canonicalized!");
4937   assert(RHSType.isCanonical() && "RHS not canonicalized!");
4938 
4939   // get the "pointed to" type (ignoring qualifiers at the top level)
4940   const Type *lhptee, *rhptee;
4941   Qualifiers lhq, rhq;
4942   llvm::tie(lhptee, lhq) = cast<PointerType>(LHSType)->getPointeeType().split();
4943   llvm::tie(rhptee, rhq) = cast<PointerType>(RHSType)->getPointeeType().split();
4944 
4945   Sema::AssignConvertType ConvTy = Sema::Compatible;
4946 
4947   // C99 6.5.16.1p1: This following citation is common to constraints
4948   // 3 & 4 (below). ...and the type *pointed to* by the left has all the
4949   // qualifiers of the type *pointed to* by the right;
4950   Qualifiers lq;
4951 
4952   // As a special case, 'non-__weak A *' -> 'non-__weak const *' is okay.
4953   if (lhq.getObjCLifetime() != rhq.getObjCLifetime() &&
4954       lhq.compatiblyIncludesObjCLifetime(rhq)) {
4955     // Ignore lifetime for further calculation.
4956     lhq.removeObjCLifetime();
4957     rhq.removeObjCLifetime();
4958   }
4959 
4960   if (!lhq.compatiblyIncludes(rhq)) {
4961     // Treat address-space mismatches as fatal.  TODO: address subspaces
4962     if (lhq.getAddressSpace() != rhq.getAddressSpace())
4963       ConvTy = Sema::IncompatiblePointerDiscardsQualifiers;
4964 
4965     // It's okay to add or remove GC or lifetime qualifiers when converting to
4966     // and from void*.
4967     else if (lhq.withoutObjCGCAttr().withoutObjCLifetime()
4968                         .compatiblyIncludes(
4969                                 rhq.withoutObjCGCAttr().withoutObjCLifetime())
4970              && (lhptee->isVoidType() || rhptee->isVoidType()))
4971       ; // keep old
4972 
4973     // Treat lifetime mismatches as fatal.
4974     else if (lhq.getObjCLifetime() != rhq.getObjCLifetime())
4975       ConvTy = Sema::IncompatiblePointerDiscardsQualifiers;
4976 
4977     // For GCC compatibility, other qualifier mismatches are treated
4978     // as still compatible in C.
4979     else ConvTy = Sema::CompatiblePointerDiscardsQualifiers;
4980   }
4981 
4982   // C99 6.5.16.1p1 (constraint 4): If one operand is a pointer to an object or
4983   // incomplete type and the other is a pointer to a qualified or unqualified
4984   // version of void...
4985   if (lhptee->isVoidType()) {
4986     if (rhptee->isIncompleteOrObjectType())
4987       return ConvTy;
4988 
4989     // As an extension, we allow cast to/from void* to function pointer.
4990     assert(rhptee->isFunctionType());
4991     return Sema::FunctionVoidPointer;
4992   }
4993 
4994   if (rhptee->isVoidType()) {
4995     if (lhptee->isIncompleteOrObjectType())
4996       return ConvTy;
4997 
4998     // As an extension, we allow cast to/from void* to function pointer.
4999     assert(lhptee->isFunctionType());
5000     return Sema::FunctionVoidPointer;
5001   }
5002 
5003   // C99 6.5.16.1p1 (constraint 3): both operands are pointers to qualified or
5004   // unqualified versions of compatible types, ...
5005   QualType ltrans = QualType(lhptee, 0), rtrans = QualType(rhptee, 0);
5006   if (!S.Context.typesAreCompatible(ltrans, rtrans)) {
5007     // Check if the pointee types are compatible ignoring the sign.
5008     // We explicitly check for char so that we catch "char" vs
5009     // "unsigned char" on systems where "char" is unsigned.
5010     if (lhptee->isCharType())
5011       ltrans = S.Context.UnsignedCharTy;
5012     else if (lhptee->hasSignedIntegerRepresentation())
5013       ltrans = S.Context.getCorrespondingUnsignedType(ltrans);
5014 
5015     if (rhptee->isCharType())
5016       rtrans = S.Context.UnsignedCharTy;
5017     else if (rhptee->hasSignedIntegerRepresentation())
5018       rtrans = S.Context.getCorrespondingUnsignedType(rtrans);
5019 
5020     if (ltrans == rtrans) {
5021       // Types are compatible ignoring the sign. Qualifier incompatibility
5022       // takes priority over sign incompatibility because the sign
5023       // warning can be disabled.
5024       if (ConvTy != Sema::Compatible)
5025         return ConvTy;
5026 
5027       return Sema::IncompatiblePointerSign;
5028     }
5029 
5030     // If we are a multi-level pointer, it's possible that our issue is simply
5031     // one of qualification - e.g. char ** -> const char ** is not allowed. If
5032     // the eventual target type is the same and the pointers have the same
5033     // level of indirection, this must be the issue.
5034     if (isa<PointerType>(lhptee) && isa<PointerType>(rhptee)) {
5035       do {
5036         lhptee = cast<PointerType>(lhptee)->getPointeeType().getTypePtr();
5037         rhptee = cast<PointerType>(rhptee)->getPointeeType().getTypePtr();
5038       } while (isa<PointerType>(lhptee) && isa<PointerType>(rhptee));
5039 
5040       if (lhptee == rhptee)
5041         return Sema::IncompatibleNestedPointerQualifiers;
5042     }
5043 
5044     // General pointer incompatibility takes priority over qualifiers.
5045     return Sema::IncompatiblePointer;
5046   }
5047   if (!S.getLangOptions().CPlusPlus &&
5048       S.IsNoReturnConversion(ltrans, rtrans, ltrans))
5049     return Sema::IncompatiblePointer;
5050   return ConvTy;
5051 }
5052 
5053 /// checkBlockPointerTypesForAssignment - This routine determines whether two
5054 /// block pointer types are compatible or whether a block and normal pointer
5055 /// are compatible. It is more restrict than comparing two function pointer
5056 // types.
5057 static Sema::AssignConvertType
5058 checkBlockPointerTypesForAssignment(Sema &S, QualType LHSType,
5059                                     QualType RHSType) {
5060   assert(LHSType.isCanonical() && "LHS not canonicalized!");
5061   assert(RHSType.isCanonical() && "RHS not canonicalized!");
5062 
5063   QualType lhptee, rhptee;
5064 
5065   // get the "pointed to" type (ignoring qualifiers at the top level)
5066   lhptee = cast<BlockPointerType>(LHSType)->getPointeeType();
5067   rhptee = cast<BlockPointerType>(RHSType)->getPointeeType();
5068 
5069   // In C++, the types have to match exactly.
5070   if (S.getLangOptions().CPlusPlus)
5071     return Sema::IncompatibleBlockPointer;
5072 
5073   Sema::AssignConvertType ConvTy = Sema::Compatible;
5074 
5075   // For blocks we enforce that qualifiers are identical.
5076   if (lhptee.getLocalQualifiers() != rhptee.getLocalQualifiers())
5077     ConvTy = Sema::CompatiblePointerDiscardsQualifiers;
5078 
5079   if (!S.Context.typesAreBlockPointerCompatible(LHSType, RHSType))
5080     return Sema::IncompatibleBlockPointer;
5081 
5082   return ConvTy;
5083 }
5084 
5085 /// checkObjCPointerTypesForAssignment - Compares two objective-c pointer types
5086 /// for assignment compatibility.
5087 static Sema::AssignConvertType
5088 checkObjCPointerTypesForAssignment(Sema &S, QualType LHSType,
5089                                    QualType RHSType) {
5090   assert(LHSType.isCanonical() && "LHS was not canonicalized!");
5091   assert(RHSType.isCanonical() && "RHS was not canonicalized!");
5092 
5093   if (LHSType->isObjCBuiltinType()) {
5094     // Class is not compatible with ObjC object pointers.
5095     if (LHSType->isObjCClassType() && !RHSType->isObjCBuiltinType() &&
5096         !RHSType->isObjCQualifiedClassType())
5097       return Sema::IncompatiblePointer;
5098     return Sema::Compatible;
5099   }
5100   if (RHSType->isObjCBuiltinType()) {
5101     if (RHSType->isObjCClassType() && !LHSType->isObjCBuiltinType() &&
5102         !LHSType->isObjCQualifiedClassType())
5103       return Sema::IncompatiblePointer;
5104     return Sema::Compatible;
5105   }
5106   QualType lhptee = LHSType->getAs<ObjCObjectPointerType>()->getPointeeType();
5107   QualType rhptee = RHSType->getAs<ObjCObjectPointerType>()->getPointeeType();
5108 
5109   if (!lhptee.isAtLeastAsQualifiedAs(rhptee) &&
5110       // make an exception for id<P>
5111       !LHSType->isObjCQualifiedIdType())
5112     return Sema::CompatiblePointerDiscardsQualifiers;
5113 
5114   if (S.Context.typesAreCompatible(LHSType, RHSType))
5115     return Sema::Compatible;
5116   if (LHSType->isObjCQualifiedIdType() || RHSType->isObjCQualifiedIdType())
5117     return Sema::IncompatibleObjCQualifiedId;
5118   return Sema::IncompatiblePointer;
5119 }
5120 
5121 Sema::AssignConvertType
5122 Sema::CheckAssignmentConstraints(SourceLocation Loc,
5123                                  QualType LHSType, QualType RHSType) {
5124   // Fake up an opaque expression.  We don't actually care about what
5125   // cast operations are required, so if CheckAssignmentConstraints
5126   // adds casts to this they'll be wasted, but fortunately that doesn't
5127   // usually happen on valid code.
5128   OpaqueValueExpr RHSExpr(Loc, RHSType, VK_RValue);
5129   ExprResult RHSPtr = &RHSExpr;
5130   CastKind K = CK_Invalid;
5131 
5132   return CheckAssignmentConstraints(LHSType, RHSPtr, K);
5133 }
5134 
5135 /// CheckAssignmentConstraints (C99 6.5.16) - This routine currently
5136 /// has code to accommodate several GCC extensions when type checking
5137 /// pointers. Here are some objectionable examples that GCC considers warnings:
5138 ///
5139 ///  int a, *pint;
5140 ///  short *pshort;
5141 ///  struct foo *pfoo;
5142 ///
5143 ///  pint = pshort; // warning: assignment from incompatible pointer type
5144 ///  a = pint; // warning: assignment makes integer from pointer without a cast
5145 ///  pint = a; // warning: assignment makes pointer from integer without a cast
5146 ///  pint = pfoo; // warning: assignment from incompatible pointer type
5147 ///
5148 /// As a result, the code for dealing with pointers is more complex than the
5149 /// C99 spec dictates.
5150 ///
5151 /// Sets 'Kind' for any result kind except Incompatible.
5152 Sema::AssignConvertType
5153 Sema::CheckAssignmentConstraints(QualType LHSType, ExprResult &RHS,
5154                                  CastKind &Kind) {
5155   QualType RHSType = RHS.get()->getType();
5156   QualType OrigLHSType = LHSType;
5157 
5158   // Get canonical types.  We're not formatting these types, just comparing
5159   // them.
5160   LHSType = Context.getCanonicalType(LHSType).getUnqualifiedType();
5161   RHSType = Context.getCanonicalType(RHSType).getUnqualifiedType();
5162 
5163 
5164   // Common case: no conversion required.
5165   if (LHSType == RHSType) {
5166     Kind = CK_NoOp;
5167     return Compatible;
5168   }
5169 
5170   if (const AtomicType *AtomicTy = dyn_cast<AtomicType>(LHSType)) {
5171     if (AtomicTy->getValueType() == RHSType) {
5172       Kind = CK_NonAtomicToAtomic;
5173       return Compatible;
5174     }
5175   }
5176 
5177   if (const AtomicType *AtomicTy = dyn_cast<AtomicType>(RHSType)) {
5178     if (AtomicTy->getValueType() == LHSType) {
5179       Kind = CK_AtomicToNonAtomic;
5180       return Compatible;
5181     }
5182   }
5183 
5184 
5185   // If the left-hand side is a reference type, then we are in a
5186   // (rare!) case where we've allowed the use of references in C,
5187   // e.g., as a parameter type in a built-in function. In this case,
5188   // just make sure that the type referenced is compatible with the
5189   // right-hand side type. The caller is responsible for adjusting
5190   // LHSType so that the resulting expression does not have reference
5191   // type.
5192   if (const ReferenceType *LHSTypeRef = LHSType->getAs<ReferenceType>()) {
5193     if (Context.typesAreCompatible(LHSTypeRef->getPointeeType(), RHSType)) {
5194       Kind = CK_LValueBitCast;
5195       return Compatible;
5196     }
5197     return Incompatible;
5198   }
5199 
5200   // Allow scalar to ExtVector assignments, and assignments of an ExtVector type
5201   // to the same ExtVector type.
5202   if (LHSType->isExtVectorType()) {
5203     if (RHSType->isExtVectorType())
5204       return Incompatible;
5205     if (RHSType->isArithmeticType()) {
5206       // CK_VectorSplat does T -> vector T, so first cast to the
5207       // element type.
5208       QualType elType = cast<ExtVectorType>(LHSType)->getElementType();
5209       if (elType != RHSType) {
5210         Kind = PrepareScalarCast(RHS, elType);
5211         RHS = ImpCastExprToType(RHS.take(), elType, Kind);
5212       }
5213       Kind = CK_VectorSplat;
5214       return Compatible;
5215     }
5216   }
5217 
5218   // Conversions to or from vector type.
5219   if (LHSType->isVectorType() || RHSType->isVectorType()) {
5220     if (LHSType->isVectorType() && RHSType->isVectorType()) {
5221       // Allow assignments of an AltiVec vector type to an equivalent GCC
5222       // vector type and vice versa
5223       if (Context.areCompatibleVectorTypes(LHSType, RHSType)) {
5224         Kind = CK_BitCast;
5225         return Compatible;
5226       }
5227 
5228       // If we are allowing lax vector conversions, and LHS and RHS are both
5229       // vectors, the total size only needs to be the same. This is a bitcast;
5230       // no bits are changed but the result type is different.
5231       if (getLangOptions().LaxVectorConversions &&
5232           (Context.getTypeSize(LHSType) == Context.getTypeSize(RHSType))) {
5233         Kind = CK_BitCast;
5234         return IncompatibleVectors;
5235       }
5236     }
5237     return Incompatible;
5238   }
5239 
5240   // Arithmetic conversions.
5241   if (LHSType->isArithmeticType() && RHSType->isArithmeticType() &&
5242       !(getLangOptions().CPlusPlus && LHSType->isEnumeralType())) {
5243     Kind = PrepareScalarCast(RHS, LHSType);
5244     return Compatible;
5245   }
5246 
5247   // Conversions to normal pointers.
5248   if (const PointerType *LHSPointer = dyn_cast<PointerType>(LHSType)) {
5249     // U* -> T*
5250     if (isa<PointerType>(RHSType)) {
5251       Kind = CK_BitCast;
5252       return checkPointerTypesForAssignment(*this, LHSType, RHSType);
5253     }
5254 
5255     // int -> T*
5256     if (RHSType->isIntegerType()) {
5257       Kind = CK_IntegralToPointer; // FIXME: null?
5258       return IntToPointer;
5259     }
5260 
5261     // C pointers are not compatible with ObjC object pointers,
5262     // with two exceptions:
5263     if (isa<ObjCObjectPointerType>(RHSType)) {
5264       //  - conversions to void*
5265       if (LHSPointer->getPointeeType()->isVoidType()) {
5266         Kind = CK_BitCast;
5267         return Compatible;
5268       }
5269 
5270       //  - conversions from 'Class' to the redefinition type
5271       if (RHSType->isObjCClassType() &&
5272           Context.hasSameType(LHSType,
5273                               Context.getObjCClassRedefinitionType())) {
5274         Kind = CK_BitCast;
5275         return Compatible;
5276       }
5277 
5278       Kind = CK_BitCast;
5279       return IncompatiblePointer;
5280     }
5281 
5282     // U^ -> void*
5283     if (RHSType->getAs<BlockPointerType>()) {
5284       if (LHSPointer->getPointeeType()->isVoidType()) {
5285         Kind = CK_BitCast;
5286         return Compatible;
5287       }
5288     }
5289 
5290     return Incompatible;
5291   }
5292 
5293   // Conversions to block pointers.
5294   if (isa<BlockPointerType>(LHSType)) {
5295     // U^ -> T^
5296     if (RHSType->isBlockPointerType()) {
5297       Kind = CK_BitCast;
5298       return checkBlockPointerTypesForAssignment(*this, LHSType, RHSType);
5299     }
5300 
5301     // int or null -> T^
5302     if (RHSType->isIntegerType()) {
5303       Kind = CK_IntegralToPointer; // FIXME: null
5304       return IntToBlockPointer;
5305     }
5306 
5307     // id -> T^
5308     if (getLangOptions().ObjC1 && RHSType->isObjCIdType()) {
5309       Kind = CK_AnyPointerToBlockPointerCast;
5310       return Compatible;
5311     }
5312 
5313     // void* -> T^
5314     if (const PointerType *RHSPT = RHSType->getAs<PointerType>())
5315       if (RHSPT->getPointeeType()->isVoidType()) {
5316         Kind = CK_AnyPointerToBlockPointerCast;
5317         return Compatible;
5318       }
5319 
5320     return Incompatible;
5321   }
5322 
5323   // Conversions to Objective-C pointers.
5324   if (isa<ObjCObjectPointerType>(LHSType)) {
5325     // A* -> B*
5326     if (RHSType->isObjCObjectPointerType()) {
5327       Kind = CK_BitCast;
5328       Sema::AssignConvertType result =
5329         checkObjCPointerTypesForAssignment(*this, LHSType, RHSType);
5330       if (getLangOptions().ObjCAutoRefCount &&
5331           result == Compatible &&
5332           !CheckObjCARCUnavailableWeakConversion(OrigLHSType, RHSType))
5333         result = IncompatibleObjCWeakRef;
5334       return result;
5335     }
5336 
5337     // int or null -> A*
5338     if (RHSType->isIntegerType()) {
5339       Kind = CK_IntegralToPointer; // FIXME: null
5340       return IntToPointer;
5341     }
5342 
5343     // In general, C pointers are not compatible with ObjC object pointers,
5344     // with two exceptions:
5345     if (isa<PointerType>(RHSType)) {
5346       Kind = CK_CPointerToObjCPointerCast;
5347 
5348       //  - conversions from 'void*'
5349       if (RHSType->isVoidPointerType()) {
5350         return Compatible;
5351       }
5352 
5353       //  - conversions to 'Class' from its redefinition type
5354       if (LHSType->isObjCClassType() &&
5355           Context.hasSameType(RHSType,
5356                               Context.getObjCClassRedefinitionType())) {
5357         return Compatible;
5358       }
5359 
5360       return IncompatiblePointer;
5361     }
5362 
5363     // T^ -> A*
5364     if (RHSType->isBlockPointerType()) {
5365       maybeExtendBlockObject(*this, RHS);
5366       Kind = CK_BlockPointerToObjCPointerCast;
5367       return Compatible;
5368     }
5369 
5370     return Incompatible;
5371   }
5372 
5373   // Conversions from pointers that are not covered by the above.
5374   if (isa<PointerType>(RHSType)) {
5375     // T* -> _Bool
5376     if (LHSType == Context.BoolTy) {
5377       Kind = CK_PointerToBoolean;
5378       return Compatible;
5379     }
5380 
5381     // T* -> int
5382     if (LHSType->isIntegerType()) {
5383       Kind = CK_PointerToIntegral;
5384       return PointerToInt;
5385     }
5386 
5387     return Incompatible;
5388   }
5389 
5390   // Conversions from Objective-C pointers that are not covered by the above.
5391   if (isa<ObjCObjectPointerType>(RHSType)) {
5392     // T* -> _Bool
5393     if (LHSType == Context.BoolTy) {
5394       Kind = CK_PointerToBoolean;
5395       return Compatible;
5396     }
5397 
5398     // T* -> int
5399     if (LHSType->isIntegerType()) {
5400       Kind = CK_PointerToIntegral;
5401       return PointerToInt;
5402     }
5403 
5404     return Incompatible;
5405   }
5406 
5407   // struct A -> struct B
5408   if (isa<TagType>(LHSType) && isa<TagType>(RHSType)) {
5409     if (Context.typesAreCompatible(LHSType, RHSType)) {
5410       Kind = CK_NoOp;
5411       return Compatible;
5412     }
5413   }
5414 
5415   return Incompatible;
5416 }
5417 
5418 /// \brief Constructs a transparent union from an expression that is
5419 /// used to initialize the transparent union.
5420 static void ConstructTransparentUnion(Sema &S, ASTContext &C,
5421                                       ExprResult &EResult, QualType UnionType,
5422                                       FieldDecl *Field) {
5423   // Build an initializer list that designates the appropriate member
5424   // of the transparent union.
5425   Expr *E = EResult.take();
5426   InitListExpr *Initializer = new (C) InitListExpr(C, SourceLocation(),
5427                                                    &E, 1,
5428                                                    SourceLocation());
5429   Initializer->setType(UnionType);
5430   Initializer->setInitializedFieldInUnion(Field);
5431 
5432   // Build a compound literal constructing a value of the transparent
5433   // union type from this initializer list.
5434   TypeSourceInfo *unionTInfo = C.getTrivialTypeSourceInfo(UnionType);
5435   EResult = S.Owned(
5436     new (C) CompoundLiteralExpr(SourceLocation(), unionTInfo, UnionType,
5437                                 VK_RValue, Initializer, false));
5438 }
5439 
5440 Sema::AssignConvertType
5441 Sema::CheckTransparentUnionArgumentConstraints(QualType ArgType,
5442                                                ExprResult &RHS) {
5443   QualType RHSType = RHS.get()->getType();
5444 
5445   // If the ArgType is a Union type, we want to handle a potential
5446   // transparent_union GCC extension.
5447   const RecordType *UT = ArgType->getAsUnionType();
5448   if (!UT || !UT->getDecl()->hasAttr<TransparentUnionAttr>())
5449     return Incompatible;
5450 
5451   // The field to initialize within the transparent union.
5452   RecordDecl *UD = UT->getDecl();
5453   FieldDecl *InitField = 0;
5454   // It's compatible if the expression matches any of the fields.
5455   for (RecordDecl::field_iterator it = UD->field_begin(),
5456          itend = UD->field_end();
5457        it != itend; ++it) {
5458     if (it->getType()->isPointerType()) {
5459       // If the transparent union contains a pointer type, we allow:
5460       // 1) void pointer
5461       // 2) null pointer constant
5462       if (RHSType->isPointerType())
5463         if (RHSType->castAs<PointerType>()->getPointeeType()->isVoidType()) {
5464           RHS = ImpCastExprToType(RHS.take(), it->getType(), CK_BitCast);
5465           InitField = *it;
5466           break;
5467         }
5468 
5469       if (RHS.get()->isNullPointerConstant(Context,
5470                                            Expr::NPC_ValueDependentIsNull)) {
5471         RHS = ImpCastExprToType(RHS.take(), it->getType(),
5472                                 CK_NullToPointer);
5473         InitField = *it;
5474         break;
5475       }
5476     }
5477 
5478     CastKind Kind = CK_Invalid;
5479     if (CheckAssignmentConstraints(it->getType(), RHS, Kind)
5480           == Compatible) {
5481       RHS = ImpCastExprToType(RHS.take(), it->getType(), Kind);
5482       InitField = *it;
5483       break;
5484     }
5485   }
5486 
5487   if (!InitField)
5488     return Incompatible;
5489 
5490   ConstructTransparentUnion(*this, Context, RHS, ArgType, InitField);
5491   return Compatible;
5492 }
5493 
5494 Sema::AssignConvertType
5495 Sema::CheckSingleAssignmentConstraints(QualType LHSType, ExprResult &RHS,
5496                                        bool Diagnose) {
5497   if (getLangOptions().CPlusPlus) {
5498     if (!LHSType->isRecordType() && !LHSType->isAtomicType()) {
5499       // C++ 5.17p3: If the left operand is not of class type, the
5500       // expression is implicitly converted (C++ 4) to the
5501       // cv-unqualified type of the left operand.
5502       ExprResult Res;
5503       if (Diagnose) {
5504         Res = PerformImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5505                                         AA_Assigning);
5506       } else {
5507         ImplicitConversionSequence ICS =
5508             TryImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5509                                   /*SuppressUserConversions=*/false,
5510                                   /*AllowExplicit=*/false,
5511                                   /*InOverloadResolution=*/false,
5512                                   /*CStyle=*/false,
5513                                   /*AllowObjCWritebackConversion=*/false);
5514         if (ICS.isFailure())
5515           return Incompatible;
5516         Res = PerformImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5517                                         ICS, AA_Assigning);
5518       }
5519       if (Res.isInvalid())
5520         return Incompatible;
5521       Sema::AssignConvertType result = Compatible;
5522       if (getLangOptions().ObjCAutoRefCount &&
5523           !CheckObjCARCUnavailableWeakConversion(LHSType,
5524                                                  RHS.get()->getType()))
5525         result = IncompatibleObjCWeakRef;
5526       RHS = move(Res);
5527       return result;
5528     }
5529 
5530     // FIXME: Currently, we fall through and treat C++ classes like C
5531     // structures.
5532     // FIXME: We also fall through for atomics; not sure what should
5533     // happen there, though.
5534   }
5535 
5536   // C99 6.5.16.1p1: the left operand is a pointer and the right is
5537   // a null pointer constant.
5538   if ((LHSType->isPointerType() ||
5539        LHSType->isObjCObjectPointerType() ||
5540        LHSType->isBlockPointerType())
5541       && RHS.get()->isNullPointerConstant(Context,
5542                                           Expr::NPC_ValueDependentIsNull)) {
5543     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_NullToPointer);
5544     return Compatible;
5545   }
5546 
5547   // This check seems unnatural, however it is necessary to ensure the proper
5548   // conversion of functions/arrays. If the conversion were done for all
5549   // DeclExpr's (created by ActOnIdExpression), it would mess up the unary
5550   // expressions that suppress this implicit conversion (&, sizeof).
5551   //
5552   // Suppress this for references: C++ 8.5.3p5.
5553   if (!LHSType->isReferenceType()) {
5554     RHS = DefaultFunctionArrayLvalueConversion(RHS.take());
5555     if (RHS.isInvalid())
5556       return Incompatible;
5557   }
5558 
5559   CastKind Kind = CK_Invalid;
5560   Sema::AssignConvertType result =
5561     CheckAssignmentConstraints(LHSType, RHS, Kind);
5562 
5563   // C99 6.5.16.1p2: The value of the right operand is converted to the
5564   // type of the assignment expression.
5565   // CheckAssignmentConstraints allows the left-hand side to be a reference,
5566   // so that we can use references in built-in functions even in C.
5567   // The getNonReferenceType() call makes sure that the resulting expression
5568   // does not have reference type.
5569   if (result != Incompatible && RHS.get()->getType() != LHSType)
5570     RHS = ImpCastExprToType(RHS.take(),
5571                             LHSType.getNonLValueExprType(Context), Kind);
5572   return result;
5573 }
5574 
5575 QualType Sema::InvalidOperands(SourceLocation Loc, ExprResult &LHS,
5576                                ExprResult &RHS) {
5577   Diag(Loc, diag::err_typecheck_invalid_operands)
5578     << LHS.get()->getType() << RHS.get()->getType()
5579     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5580   return QualType();
5581 }
5582 
5583 QualType Sema::CheckVectorOperands(ExprResult &LHS, ExprResult &RHS,
5584                                    SourceLocation Loc, bool IsCompAssign) {
5585   if (!IsCompAssign) {
5586     LHS = DefaultFunctionArrayLvalueConversion(LHS.take());
5587     if (LHS.isInvalid())
5588       return QualType();
5589   }
5590   RHS = DefaultFunctionArrayLvalueConversion(RHS.take());
5591   if (RHS.isInvalid())
5592     return QualType();
5593 
5594   // For conversion purposes, we ignore any qualifiers.
5595   // For example, "const float" and "float" are equivalent.
5596   QualType LHSType =
5597     Context.getCanonicalType(LHS.get()->getType()).getUnqualifiedType();
5598   QualType RHSType =
5599     Context.getCanonicalType(RHS.get()->getType()).getUnqualifiedType();
5600 
5601   // If the vector types are identical, return.
5602   if (LHSType == RHSType)
5603     return LHSType;
5604 
5605   // Handle the case of equivalent AltiVec and GCC vector types
5606   if (LHSType->isVectorType() && RHSType->isVectorType() &&
5607       Context.areCompatibleVectorTypes(LHSType, RHSType)) {
5608     if (LHSType->isExtVectorType()) {
5609       RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
5610       return LHSType;
5611     }
5612 
5613     if (!IsCompAssign)
5614       LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
5615     return RHSType;
5616   }
5617 
5618   if (getLangOptions().LaxVectorConversions &&
5619       Context.getTypeSize(LHSType) == Context.getTypeSize(RHSType)) {
5620     // If we are allowing lax vector conversions, and LHS and RHS are both
5621     // vectors, the total size only needs to be the same. This is a
5622     // bitcast; no bits are changed but the result type is different.
5623     // FIXME: Should we really be allowing this?
5624     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
5625     return LHSType;
5626   }
5627 
5628   // Canonicalize the ExtVector to the LHS, remember if we swapped so we can
5629   // swap back (so that we don't reverse the inputs to a subtract, for instance.
5630   bool swapped = false;
5631   if (RHSType->isExtVectorType() && !IsCompAssign) {
5632     swapped = true;
5633     std::swap(RHS, LHS);
5634     std::swap(RHSType, LHSType);
5635   }
5636 
5637   // Handle the case of an ext vector and scalar.
5638   if (const ExtVectorType *LV = LHSType->getAs<ExtVectorType>()) {
5639     QualType EltTy = LV->getElementType();
5640     if (EltTy->isIntegralType(Context) && RHSType->isIntegralType(Context)) {
5641       int order = Context.getIntegerTypeOrder(EltTy, RHSType);
5642       if (order > 0)
5643         RHS = ImpCastExprToType(RHS.take(), EltTy, CK_IntegralCast);
5644       if (order >= 0) {
5645         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_VectorSplat);
5646         if (swapped) std::swap(RHS, LHS);
5647         return LHSType;
5648       }
5649     }
5650     if (EltTy->isRealFloatingType() && RHSType->isScalarType() &&
5651         RHSType->isRealFloatingType()) {
5652       int order = Context.getFloatingTypeOrder(EltTy, RHSType);
5653       if (order > 0)
5654         RHS = ImpCastExprToType(RHS.take(), EltTy, CK_FloatingCast);
5655       if (order >= 0) {
5656         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_VectorSplat);
5657         if (swapped) std::swap(RHS, LHS);
5658         return LHSType;
5659       }
5660     }
5661   }
5662 
5663   // Vectors of different size or scalar and non-ext-vector are errors.
5664   if (swapped) std::swap(RHS, LHS);
5665   Diag(Loc, diag::err_typecheck_vector_not_convertable)
5666     << LHS.get()->getType() << RHS.get()->getType()
5667     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5668   return QualType();
5669 }
5670 
5671 // checkArithmeticNull - Detect when a NULL constant is used improperly in an
5672 // expression.  These are mainly cases where the null pointer is used as an
5673 // integer instead of a pointer.
5674 static void checkArithmeticNull(Sema &S, ExprResult &LHS, ExprResult &RHS,
5675                                 SourceLocation Loc, bool IsCompare) {
5676   // The canonical way to check for a GNU null is with isNullPointerConstant,
5677   // but we use a bit of a hack here for speed; this is a relatively
5678   // hot path, and isNullPointerConstant is slow.
5679   bool LHSNull = isa<GNUNullExpr>(LHS.get()->IgnoreParenImpCasts());
5680   bool RHSNull = isa<GNUNullExpr>(RHS.get()->IgnoreParenImpCasts());
5681 
5682   QualType NonNullType = LHSNull ? RHS.get()->getType() : LHS.get()->getType();
5683 
5684   // Avoid analyzing cases where the result will either be invalid (and
5685   // diagnosed as such) or entirely valid and not something to warn about.
5686   if ((!LHSNull && !RHSNull) || NonNullType->isBlockPointerType() ||
5687       NonNullType->isMemberPointerType() || NonNullType->isFunctionType())
5688     return;
5689 
5690   // Comparison operations would not make sense with a null pointer no matter
5691   // what the other expression is.
5692   if (!IsCompare) {
5693     S.Diag(Loc, diag::warn_null_in_arithmetic_operation)
5694         << (LHSNull ? LHS.get()->getSourceRange() : SourceRange())
5695         << (RHSNull ? RHS.get()->getSourceRange() : SourceRange());
5696     return;
5697   }
5698 
5699   // The rest of the operations only make sense with a null pointer
5700   // if the other expression is a pointer.
5701   if (LHSNull == RHSNull || NonNullType->isAnyPointerType() ||
5702       NonNullType->canDecayToPointerType())
5703     return;
5704 
5705   S.Diag(Loc, diag::warn_null_in_comparison_operation)
5706       << LHSNull /* LHS is NULL */ << NonNullType
5707       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5708 }
5709 
5710 QualType Sema::CheckMultiplyDivideOperands(ExprResult &LHS, ExprResult &RHS,
5711                                            SourceLocation Loc,
5712                                            bool IsCompAssign, bool IsDiv) {
5713   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5714 
5715   if (LHS.get()->getType()->isVectorType() ||
5716       RHS.get()->getType()->isVectorType())
5717     return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
5718 
5719   QualType compType = UsualArithmeticConversions(LHS, RHS, IsCompAssign);
5720   if (LHS.isInvalid() || RHS.isInvalid())
5721     return QualType();
5722 
5723 
5724   if (!LHS.get()->getType()->isArithmeticType() ||
5725       !RHS.get()->getType()->isArithmeticType()) {
5726     if (IsCompAssign &&
5727         LHS.get()->getType()->isAtomicType() &&
5728         RHS.get()->getType()->isArithmeticType())
5729       return compType;
5730     return InvalidOperands(Loc, LHS, RHS);
5731   }
5732 
5733   // Check for division by zero.
5734   if (IsDiv &&
5735       RHS.get()->isNullPointerConstant(Context,
5736                                        Expr::NPC_ValueDependentIsNotNull))
5737     DiagRuntimeBehavior(Loc, RHS.get(), PDiag(diag::warn_division_by_zero)
5738                                           << RHS.get()->getSourceRange());
5739 
5740   return compType;
5741 }
5742 
5743 QualType Sema::CheckRemainderOperands(
5744   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, bool IsCompAssign) {
5745   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5746 
5747   if (LHS.get()->getType()->isVectorType() ||
5748       RHS.get()->getType()->isVectorType()) {
5749     if (LHS.get()->getType()->hasIntegerRepresentation() &&
5750         RHS.get()->getType()->hasIntegerRepresentation())
5751       return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
5752     return InvalidOperands(Loc, LHS, RHS);
5753   }
5754 
5755   QualType compType = UsualArithmeticConversions(LHS, RHS, IsCompAssign);
5756   if (LHS.isInvalid() || RHS.isInvalid())
5757     return QualType();
5758 
5759   if (!LHS.get()->getType()->isIntegerType() ||
5760       !RHS.get()->getType()->isIntegerType())
5761     return InvalidOperands(Loc, LHS, RHS);
5762 
5763   // Check for remainder by zero.
5764   if (RHS.get()->isNullPointerConstant(Context,
5765                                        Expr::NPC_ValueDependentIsNotNull))
5766     DiagRuntimeBehavior(Loc, RHS.get(), PDiag(diag::warn_remainder_by_zero)
5767                                  << RHS.get()->getSourceRange());
5768 
5769   return compType;
5770 }
5771 
5772 /// \brief Diagnose invalid arithmetic on two void pointers.
5773 static void diagnoseArithmeticOnTwoVoidPointers(Sema &S, SourceLocation Loc,
5774                                                 Expr *LHSExpr, Expr *RHSExpr) {
5775   S.Diag(Loc, S.getLangOptions().CPlusPlus
5776                 ? diag::err_typecheck_pointer_arith_void_type
5777                 : diag::ext_gnu_void_ptr)
5778     << 1 /* two pointers */ << LHSExpr->getSourceRange()
5779                             << RHSExpr->getSourceRange();
5780 }
5781 
5782 /// \brief Diagnose invalid arithmetic on a void pointer.
5783 static void diagnoseArithmeticOnVoidPointer(Sema &S, SourceLocation Loc,
5784                                             Expr *Pointer) {
5785   S.Diag(Loc, S.getLangOptions().CPlusPlus
5786                 ? diag::err_typecheck_pointer_arith_void_type
5787                 : diag::ext_gnu_void_ptr)
5788     << 0 /* one pointer */ << Pointer->getSourceRange();
5789 }
5790 
5791 /// \brief Diagnose invalid arithmetic on two function pointers.
5792 static void diagnoseArithmeticOnTwoFunctionPointers(Sema &S, SourceLocation Loc,
5793                                                     Expr *LHS, Expr *RHS) {
5794   assert(LHS->getType()->isAnyPointerType());
5795   assert(RHS->getType()->isAnyPointerType());
5796   S.Diag(Loc, S.getLangOptions().CPlusPlus
5797                 ? diag::err_typecheck_pointer_arith_function_type
5798                 : diag::ext_gnu_ptr_func_arith)
5799     << 1 /* two pointers */ << LHS->getType()->getPointeeType()
5800     // We only show the second type if it differs from the first.
5801     << (unsigned)!S.Context.hasSameUnqualifiedType(LHS->getType(),
5802                                                    RHS->getType())
5803     << RHS->getType()->getPointeeType()
5804     << LHS->getSourceRange() << RHS->getSourceRange();
5805 }
5806 
5807 /// \brief Diagnose invalid arithmetic on a function pointer.
5808 static void diagnoseArithmeticOnFunctionPointer(Sema &S, SourceLocation Loc,
5809                                                 Expr *Pointer) {
5810   assert(Pointer->getType()->isAnyPointerType());
5811   S.Diag(Loc, S.getLangOptions().CPlusPlus
5812                 ? diag::err_typecheck_pointer_arith_function_type
5813                 : diag::ext_gnu_ptr_func_arith)
5814     << 0 /* one pointer */ << Pointer->getType()->getPointeeType()
5815     << 0 /* one pointer, so only one type */
5816     << Pointer->getSourceRange();
5817 }
5818 
5819 /// \brief Emit error if Operand is incomplete pointer type
5820 ///
5821 /// \returns True if pointer has incomplete type
5822 static bool checkArithmeticIncompletePointerType(Sema &S, SourceLocation Loc,
5823                                                  Expr *Operand) {
5824   if ((Operand->getType()->isPointerType() &&
5825        !Operand->getType()->isDependentType()) ||
5826       Operand->getType()->isObjCObjectPointerType()) {
5827     QualType PointeeTy = Operand->getType()->getPointeeType();
5828     if (S.RequireCompleteType(
5829           Loc, PointeeTy,
5830           S.PDiag(diag::err_typecheck_arithmetic_incomplete_type)
5831             << PointeeTy << Operand->getSourceRange()))
5832       return true;
5833   }
5834   return false;
5835 }
5836 
5837 /// \brief Check the validity of an arithmetic pointer operand.
5838 ///
5839 /// If the operand has pointer type, this code will check for pointer types
5840 /// which are invalid in arithmetic operations. These will be diagnosed
5841 /// appropriately, including whether or not the use is supported as an
5842 /// extension.
5843 ///
5844 /// \returns True when the operand is valid to use (even if as an extension).
5845 static bool checkArithmeticOpPointerOperand(Sema &S, SourceLocation Loc,
5846                                             Expr *Operand) {
5847   if (!Operand->getType()->isAnyPointerType()) return true;
5848 
5849   QualType PointeeTy = Operand->getType()->getPointeeType();
5850   if (PointeeTy->isVoidType()) {
5851     diagnoseArithmeticOnVoidPointer(S, Loc, Operand);
5852     return !S.getLangOptions().CPlusPlus;
5853   }
5854   if (PointeeTy->isFunctionType()) {
5855     diagnoseArithmeticOnFunctionPointer(S, Loc, Operand);
5856     return !S.getLangOptions().CPlusPlus;
5857   }
5858 
5859   if (checkArithmeticIncompletePointerType(S, Loc, Operand)) return false;
5860 
5861   return true;
5862 }
5863 
5864 /// \brief Check the validity of a binary arithmetic operation w.r.t. pointer
5865 /// operands.
5866 ///
5867 /// This routine will diagnose any invalid arithmetic on pointer operands much
5868 /// like \see checkArithmeticOpPointerOperand. However, it has special logic
5869 /// for emitting a single diagnostic even for operations where both LHS and RHS
5870 /// are (potentially problematic) pointers.
5871 ///
5872 /// \returns True when the operand is valid to use (even if as an extension).
5873 static bool checkArithmeticBinOpPointerOperands(Sema &S, SourceLocation Loc,
5874                                                 Expr *LHSExpr, Expr *RHSExpr) {
5875   bool isLHSPointer = LHSExpr->getType()->isAnyPointerType();
5876   bool isRHSPointer = RHSExpr->getType()->isAnyPointerType();
5877   if (!isLHSPointer && !isRHSPointer) return true;
5878 
5879   QualType LHSPointeeTy, RHSPointeeTy;
5880   if (isLHSPointer) LHSPointeeTy = LHSExpr->getType()->getPointeeType();
5881   if (isRHSPointer) RHSPointeeTy = RHSExpr->getType()->getPointeeType();
5882 
5883   // Check for arithmetic on pointers to incomplete types.
5884   bool isLHSVoidPtr = isLHSPointer && LHSPointeeTy->isVoidType();
5885   bool isRHSVoidPtr = isRHSPointer && RHSPointeeTy->isVoidType();
5886   if (isLHSVoidPtr || isRHSVoidPtr) {
5887     if (!isRHSVoidPtr) diagnoseArithmeticOnVoidPointer(S, Loc, LHSExpr);
5888     else if (!isLHSVoidPtr) diagnoseArithmeticOnVoidPointer(S, Loc, RHSExpr);
5889     else diagnoseArithmeticOnTwoVoidPointers(S, Loc, LHSExpr, RHSExpr);
5890 
5891     return !S.getLangOptions().CPlusPlus;
5892   }
5893 
5894   bool isLHSFuncPtr = isLHSPointer && LHSPointeeTy->isFunctionType();
5895   bool isRHSFuncPtr = isRHSPointer && RHSPointeeTy->isFunctionType();
5896   if (isLHSFuncPtr || isRHSFuncPtr) {
5897     if (!isRHSFuncPtr) diagnoseArithmeticOnFunctionPointer(S, Loc, LHSExpr);
5898     else if (!isLHSFuncPtr) diagnoseArithmeticOnFunctionPointer(S, Loc,
5899                                                                 RHSExpr);
5900     else diagnoseArithmeticOnTwoFunctionPointers(S, Loc, LHSExpr, RHSExpr);
5901 
5902     return !S.getLangOptions().CPlusPlus;
5903   }
5904 
5905   if (checkArithmeticIncompletePointerType(S, Loc, LHSExpr)) return false;
5906   if (checkArithmeticIncompletePointerType(S, Loc, RHSExpr)) return false;
5907 
5908   return true;
5909 }
5910 
5911 /// \brief Check bad cases where we step over interface counts.
5912 static bool checkArithmethicPointerOnNonFragileABI(Sema &S,
5913                                                    SourceLocation OpLoc,
5914                                                    Expr *Op) {
5915   assert(Op->getType()->isAnyPointerType());
5916   QualType PointeeTy = Op->getType()->getPointeeType();
5917   if (!PointeeTy->isObjCObjectType() || !S.LangOpts.ObjCNonFragileABI)
5918     return true;
5919 
5920   S.Diag(OpLoc, diag::err_arithmetic_nonfragile_interface)
5921     << PointeeTy << Op->getSourceRange();
5922   return false;
5923 }
5924 
5925 /// \brief Emit error when two pointers are incompatible.
5926 static void diagnosePointerIncompatibility(Sema &S, SourceLocation Loc,
5927                                            Expr *LHSExpr, Expr *RHSExpr) {
5928   assert(LHSExpr->getType()->isAnyPointerType());
5929   assert(RHSExpr->getType()->isAnyPointerType());
5930   S.Diag(Loc, diag::err_typecheck_sub_ptr_compatible)
5931     << LHSExpr->getType() << RHSExpr->getType() << LHSExpr->getSourceRange()
5932     << RHSExpr->getSourceRange();
5933 }
5934 
5935 QualType Sema::CheckAdditionOperands( // C99 6.5.6
5936   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, QualType* CompLHSTy) {
5937   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5938 
5939   if (LHS.get()->getType()->isVectorType() ||
5940       RHS.get()->getType()->isVectorType()) {
5941     QualType compType = CheckVectorOperands(LHS, RHS, Loc, CompLHSTy);
5942     if (CompLHSTy) *CompLHSTy = compType;
5943     return compType;
5944   }
5945 
5946   QualType compType = UsualArithmeticConversions(LHS, RHS, CompLHSTy);
5947   if (LHS.isInvalid() || RHS.isInvalid())
5948     return QualType();
5949 
5950   // handle the common case first (both operands are arithmetic).
5951   if (LHS.get()->getType()->isArithmeticType() &&
5952       RHS.get()->getType()->isArithmeticType()) {
5953     if (CompLHSTy) *CompLHSTy = compType;
5954     return compType;
5955   }
5956 
5957   if (LHS.get()->getType()->isAtomicType() &&
5958       RHS.get()->getType()->isArithmeticType()) {
5959     *CompLHSTy = LHS.get()->getType();
5960     return compType;
5961   }
5962 
5963   // Put any potential pointer into PExp
5964   Expr* PExp = LHS.get(), *IExp = RHS.get();
5965   if (IExp->getType()->isAnyPointerType())
5966     std::swap(PExp, IExp);
5967 
5968   if (!PExp->getType()->isAnyPointerType())
5969     return InvalidOperands(Loc, LHS, RHS);
5970 
5971   if (!IExp->getType()->isIntegerType())
5972     return InvalidOperands(Loc, LHS, RHS);
5973 
5974   if (!checkArithmeticOpPointerOperand(*this, Loc, PExp))
5975     return QualType();
5976 
5977   // Diagnose bad cases where we step over interface counts.
5978   if (!checkArithmethicPointerOnNonFragileABI(*this, Loc, PExp))
5979     return QualType();
5980 
5981   // Check array bounds for pointer arithemtic
5982   CheckArrayAccess(PExp, IExp);
5983 
5984   if (CompLHSTy) {
5985     QualType LHSTy = Context.isPromotableBitField(LHS.get());
5986     if (LHSTy.isNull()) {
5987       LHSTy = LHS.get()->getType();
5988       if (LHSTy->isPromotableIntegerType())
5989         LHSTy = Context.getPromotedIntegerType(LHSTy);
5990     }
5991     *CompLHSTy = LHSTy;
5992   }
5993 
5994   return PExp->getType();
5995 }
5996 
5997 // C99 6.5.6
5998 QualType Sema::CheckSubtractionOperands(ExprResult &LHS, ExprResult &RHS,
5999                                         SourceLocation Loc,
6000                                         QualType* CompLHSTy) {
6001   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6002 
6003   if (LHS.get()->getType()->isVectorType() ||
6004       RHS.get()->getType()->isVectorType()) {
6005     QualType compType = CheckVectorOperands(LHS, RHS, Loc, CompLHSTy);
6006     if (CompLHSTy) *CompLHSTy = compType;
6007     return compType;
6008   }
6009 
6010   QualType compType = UsualArithmeticConversions(LHS, RHS, CompLHSTy);
6011   if (LHS.isInvalid() || RHS.isInvalid())
6012     return QualType();
6013 
6014   // Enforce type constraints: C99 6.5.6p3.
6015 
6016   // Handle the common case first (both operands are arithmetic).
6017   if (LHS.get()->getType()->isArithmeticType() &&
6018       RHS.get()->getType()->isArithmeticType()) {
6019     if (CompLHSTy) *CompLHSTy = compType;
6020     return compType;
6021   }
6022 
6023   if (LHS.get()->getType()->isAtomicType() &&
6024       RHS.get()->getType()->isArithmeticType()) {
6025     *CompLHSTy = LHS.get()->getType();
6026     return compType;
6027   }
6028 
6029   // Either ptr - int   or   ptr - ptr.
6030   if (LHS.get()->getType()->isAnyPointerType()) {
6031     QualType lpointee = LHS.get()->getType()->getPointeeType();
6032 
6033     // Diagnose bad cases where we step over interface counts.
6034     if (!checkArithmethicPointerOnNonFragileABI(*this, Loc, LHS.get()))
6035       return QualType();
6036 
6037     // The result type of a pointer-int computation is the pointer type.
6038     if (RHS.get()->getType()->isIntegerType()) {
6039       if (!checkArithmeticOpPointerOperand(*this, Loc, LHS.get()))
6040         return QualType();
6041 
6042       // Check array bounds for pointer arithemtic
6043       CheckArrayAccess(LHS.get(), RHS.get(), /*ArraySubscriptExpr*/0,
6044                        /*AllowOnePastEnd*/true, /*IndexNegated*/true);
6045 
6046       if (CompLHSTy) *CompLHSTy = LHS.get()->getType();
6047       return LHS.get()->getType();
6048     }
6049 
6050     // Handle pointer-pointer subtractions.
6051     if (const PointerType *RHSPTy
6052           = RHS.get()->getType()->getAs<PointerType>()) {
6053       QualType rpointee = RHSPTy->getPointeeType();
6054 
6055       if (getLangOptions().CPlusPlus) {
6056         // Pointee types must be the same: C++ [expr.add]
6057         if (!Context.hasSameUnqualifiedType(lpointee, rpointee)) {
6058           diagnosePointerIncompatibility(*this, Loc, LHS.get(), RHS.get());
6059         }
6060       } else {
6061         // Pointee types must be compatible C99 6.5.6p3
6062         if (!Context.typesAreCompatible(
6063                 Context.getCanonicalType(lpointee).getUnqualifiedType(),
6064                 Context.getCanonicalType(rpointee).getUnqualifiedType())) {
6065           diagnosePointerIncompatibility(*this, Loc, LHS.get(), RHS.get());
6066           return QualType();
6067         }
6068       }
6069 
6070       if (!checkArithmeticBinOpPointerOperands(*this, Loc,
6071                                                LHS.get(), RHS.get()))
6072         return QualType();
6073 
6074       if (CompLHSTy) *CompLHSTy = LHS.get()->getType();
6075       return Context.getPointerDiffType();
6076     }
6077   }
6078 
6079   return InvalidOperands(Loc, LHS, RHS);
6080 }
6081 
6082 static bool isScopedEnumerationType(QualType T) {
6083   if (const EnumType *ET = dyn_cast<EnumType>(T))
6084     return ET->getDecl()->isScoped();
6085   return false;
6086 }
6087 
6088 static void DiagnoseBadShiftValues(Sema& S, ExprResult &LHS, ExprResult &RHS,
6089                                    SourceLocation Loc, unsigned Opc,
6090                                    QualType LHSType) {
6091   llvm::APSInt Right;
6092   // Check right/shifter operand
6093   if (RHS.get()->isValueDependent() ||
6094       !RHS.get()->isIntegerConstantExpr(Right, S.Context))
6095     return;
6096 
6097   if (Right.isNegative()) {
6098     S.DiagRuntimeBehavior(Loc, RHS.get(),
6099                           S.PDiag(diag::warn_shift_negative)
6100                             << RHS.get()->getSourceRange());
6101     return;
6102   }
6103   llvm::APInt LeftBits(Right.getBitWidth(),
6104                        S.Context.getTypeSize(LHS.get()->getType()));
6105   if (Right.uge(LeftBits)) {
6106     S.DiagRuntimeBehavior(Loc, RHS.get(),
6107                           S.PDiag(diag::warn_shift_gt_typewidth)
6108                             << RHS.get()->getSourceRange());
6109     return;
6110   }
6111   if (Opc != BO_Shl)
6112     return;
6113 
6114   // When left shifting an ICE which is signed, we can check for overflow which
6115   // according to C++ has undefined behavior ([expr.shift] 5.8/2). Unsigned
6116   // integers have defined behavior modulo one more than the maximum value
6117   // representable in the result type, so never warn for those.
6118   llvm::APSInt Left;
6119   if (LHS.get()->isValueDependent() ||
6120       !LHS.get()->isIntegerConstantExpr(Left, S.Context) ||
6121       LHSType->hasUnsignedIntegerRepresentation())
6122     return;
6123   llvm::APInt ResultBits =
6124       static_cast<llvm::APInt&>(Right) + Left.getMinSignedBits();
6125   if (LeftBits.uge(ResultBits))
6126     return;
6127   llvm::APSInt Result = Left.extend(ResultBits.getLimitedValue());
6128   Result = Result.shl(Right);
6129 
6130   // Print the bit representation of the signed integer as an unsigned
6131   // hexadecimal number.
6132   SmallString<40> HexResult;
6133   Result.toString(HexResult, 16, /*Signed =*/false, /*Literal =*/true);
6134 
6135   // If we are only missing a sign bit, this is less likely to result in actual
6136   // bugs -- if the result is cast back to an unsigned type, it will have the
6137   // expected value. Thus we place this behind a different warning that can be
6138   // turned off separately if needed.
6139   if (LeftBits == ResultBits - 1) {
6140     S.Diag(Loc, diag::warn_shift_result_sets_sign_bit)
6141         << HexResult.str() << LHSType
6142         << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6143     return;
6144   }
6145 
6146   S.Diag(Loc, diag::warn_shift_result_gt_typewidth)
6147     << HexResult.str() << Result.getMinSignedBits() << LHSType
6148     << Left.getBitWidth() << LHS.get()->getSourceRange()
6149     << RHS.get()->getSourceRange();
6150 }
6151 
6152 // C99 6.5.7
6153 QualType Sema::CheckShiftOperands(ExprResult &LHS, ExprResult &RHS,
6154                                   SourceLocation Loc, unsigned Opc,
6155                                   bool IsCompAssign) {
6156   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6157 
6158   // C99 6.5.7p2: Each of the operands shall have integer type.
6159   if (!LHS.get()->getType()->hasIntegerRepresentation() ||
6160       !RHS.get()->getType()->hasIntegerRepresentation())
6161     return InvalidOperands(Loc, LHS, RHS);
6162 
6163   // C++0x: Don't allow scoped enums. FIXME: Use something better than
6164   // hasIntegerRepresentation() above instead of this.
6165   if (isScopedEnumerationType(LHS.get()->getType()) ||
6166       isScopedEnumerationType(RHS.get()->getType())) {
6167     return InvalidOperands(Loc, LHS, RHS);
6168   }
6169 
6170   // Vector shifts promote their scalar inputs to vector type.
6171   if (LHS.get()->getType()->isVectorType() ||
6172       RHS.get()->getType()->isVectorType())
6173     return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
6174 
6175   // Shifts don't perform usual arithmetic conversions, they just do integer
6176   // promotions on each operand. C99 6.5.7p3
6177 
6178   // For the LHS, do usual unary conversions, but then reset them away
6179   // if this is a compound assignment.
6180   ExprResult OldLHS = LHS;
6181   LHS = UsualUnaryConversions(LHS.take());
6182   if (LHS.isInvalid())
6183     return QualType();
6184   QualType LHSType = LHS.get()->getType();
6185   if (IsCompAssign) LHS = OldLHS;
6186 
6187   // The RHS is simpler.
6188   RHS = UsualUnaryConversions(RHS.take());
6189   if (RHS.isInvalid())
6190     return QualType();
6191 
6192   // Sanity-check shift operands
6193   DiagnoseBadShiftValues(*this, LHS, RHS, Loc, Opc, LHSType);
6194 
6195   // "The type of the result is that of the promoted left operand."
6196   return LHSType;
6197 }
6198 
6199 static bool IsWithinTemplateSpecialization(Decl *D) {
6200   if (DeclContext *DC = D->getDeclContext()) {
6201     if (isa<ClassTemplateSpecializationDecl>(DC))
6202       return true;
6203     if (FunctionDecl *FD = dyn_cast<FunctionDecl>(DC))
6204       return FD->isFunctionTemplateSpecialization();
6205   }
6206   return false;
6207 }
6208 
6209 /// If two different enums are compared, raise a warning.
6210 static void checkEnumComparison(Sema &S, SourceLocation Loc, ExprResult &LHS,
6211                                 ExprResult &RHS) {
6212   QualType LHSStrippedType = LHS.get()->IgnoreParenImpCasts()->getType();
6213   QualType RHSStrippedType = RHS.get()->IgnoreParenImpCasts()->getType();
6214 
6215   const EnumType *LHSEnumType = LHSStrippedType->getAs<EnumType>();
6216   if (!LHSEnumType)
6217     return;
6218   const EnumType *RHSEnumType = RHSStrippedType->getAs<EnumType>();
6219   if (!RHSEnumType)
6220     return;
6221 
6222   // Ignore anonymous enums.
6223   if (!LHSEnumType->getDecl()->getIdentifier())
6224     return;
6225   if (!RHSEnumType->getDecl()->getIdentifier())
6226     return;
6227 
6228   if (S.Context.hasSameUnqualifiedType(LHSStrippedType, RHSStrippedType))
6229     return;
6230 
6231   S.Diag(Loc, diag::warn_comparison_of_mixed_enum_types)
6232       << LHSStrippedType << RHSStrippedType
6233       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6234 }
6235 
6236 /// \brief Diagnose bad pointer comparisons.
6237 static void diagnoseDistinctPointerComparison(Sema &S, SourceLocation Loc,
6238                                               ExprResult &LHS, ExprResult &RHS,
6239                                               bool IsError) {
6240   S.Diag(Loc, IsError ? diag::err_typecheck_comparison_of_distinct_pointers
6241                       : diag::ext_typecheck_comparison_of_distinct_pointers)
6242     << LHS.get()->getType() << RHS.get()->getType()
6243     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6244 }
6245 
6246 /// \brief Returns false if the pointers are converted to a composite type,
6247 /// true otherwise.
6248 static bool convertPointersToCompositeType(Sema &S, SourceLocation Loc,
6249                                            ExprResult &LHS, ExprResult &RHS) {
6250   // C++ [expr.rel]p2:
6251   //   [...] Pointer conversions (4.10) and qualification
6252   //   conversions (4.4) are performed on pointer operands (or on
6253   //   a pointer operand and a null pointer constant) to bring
6254   //   them to their composite pointer type. [...]
6255   //
6256   // C++ [expr.eq]p1 uses the same notion for (in)equality
6257   // comparisons of pointers.
6258 
6259   // C++ [expr.eq]p2:
6260   //   In addition, pointers to members can be compared, or a pointer to
6261   //   member and a null pointer constant. Pointer to member conversions
6262   //   (4.11) and qualification conversions (4.4) are performed to bring
6263   //   them to a common type. If one operand is a null pointer constant,
6264   //   the common type is the type of the other operand. Otherwise, the
6265   //   common type is a pointer to member type similar (4.4) to the type
6266   //   of one of the operands, with a cv-qualification signature (4.4)
6267   //   that is the union of the cv-qualification signatures of the operand
6268   //   types.
6269 
6270   QualType LHSType = LHS.get()->getType();
6271   QualType RHSType = RHS.get()->getType();
6272   assert((LHSType->isPointerType() && RHSType->isPointerType()) ||
6273          (LHSType->isMemberPointerType() && RHSType->isMemberPointerType()));
6274 
6275   bool NonStandardCompositeType = false;
6276   bool *BoolPtr = S.isSFINAEContext() ? 0 : &NonStandardCompositeType;
6277   QualType T = S.FindCompositePointerType(Loc, LHS, RHS, BoolPtr);
6278   if (T.isNull()) {
6279     diagnoseDistinctPointerComparison(S, Loc, LHS, RHS, /*isError*/true);
6280     return true;
6281   }
6282 
6283   if (NonStandardCompositeType)
6284     S.Diag(Loc, diag::ext_typecheck_comparison_of_distinct_pointers_nonstandard)
6285       << LHSType << RHSType << T << LHS.get()->getSourceRange()
6286       << RHS.get()->getSourceRange();
6287 
6288   LHS = S.ImpCastExprToType(LHS.take(), T, CK_BitCast);
6289   RHS = S.ImpCastExprToType(RHS.take(), T, CK_BitCast);
6290   return false;
6291 }
6292 
6293 static void diagnoseFunctionPointerToVoidComparison(Sema &S, SourceLocation Loc,
6294                                                     ExprResult &LHS,
6295                                                     ExprResult &RHS,
6296                                                     bool IsError) {
6297   S.Diag(Loc, IsError ? diag::err_typecheck_comparison_of_fptr_to_void
6298                       : diag::ext_typecheck_comparison_of_fptr_to_void)
6299     << LHS.get()->getType() << RHS.get()->getType()
6300     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6301 }
6302 
6303 // C99 6.5.8, C++ [expr.rel]
6304 QualType Sema::CheckCompareOperands(ExprResult &LHS, ExprResult &RHS,
6305                                     SourceLocation Loc, unsigned OpaqueOpc,
6306                                     bool IsRelational) {
6307   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/true);
6308 
6309   BinaryOperatorKind Opc = (BinaryOperatorKind) OpaqueOpc;
6310 
6311   // Handle vector comparisons separately.
6312   if (LHS.get()->getType()->isVectorType() ||
6313       RHS.get()->getType()->isVectorType())
6314     return CheckVectorCompareOperands(LHS, RHS, Loc, IsRelational);
6315 
6316   QualType LHSType = LHS.get()->getType();
6317   QualType RHSType = RHS.get()->getType();
6318 
6319   Expr *LHSStripped = LHS.get()->IgnoreParenImpCasts();
6320   Expr *RHSStripped = RHS.get()->IgnoreParenImpCasts();
6321 
6322   checkEnumComparison(*this, Loc, LHS, RHS);
6323 
6324   if (!LHSType->hasFloatingRepresentation() &&
6325       !(LHSType->isBlockPointerType() && IsRelational) &&
6326       !LHS.get()->getLocStart().isMacroID() &&
6327       !RHS.get()->getLocStart().isMacroID()) {
6328     // For non-floating point types, check for self-comparisons of the form
6329     // x == x, x != x, x < x, etc.  These always evaluate to a constant, and
6330     // often indicate logic errors in the program.
6331     //
6332     // NOTE: Don't warn about comparison expressions resulting from macro
6333     // expansion. Also don't warn about comparisons which are only self
6334     // comparisons within a template specialization. The warnings should catch
6335     // obvious cases in the definition of the template anyways. The idea is to
6336     // warn when the typed comparison operator will always evaluate to the same
6337     // result.
6338     if (DeclRefExpr* DRL = dyn_cast<DeclRefExpr>(LHSStripped)) {
6339       if (DeclRefExpr* DRR = dyn_cast<DeclRefExpr>(RHSStripped)) {
6340         if (DRL->getDecl() == DRR->getDecl() &&
6341             !IsWithinTemplateSpecialization(DRL->getDecl())) {
6342           DiagRuntimeBehavior(Loc, 0, PDiag(diag::warn_comparison_always)
6343                               << 0 // self-
6344                               << (Opc == BO_EQ
6345                                   || Opc == BO_LE
6346                                   || Opc == BO_GE));
6347         } else if (LHSType->isArrayType() && RHSType->isArrayType() &&
6348                    !DRL->getDecl()->getType()->isReferenceType() &&
6349                    !DRR->getDecl()->getType()->isReferenceType()) {
6350             // what is it always going to eval to?
6351             char always_evals_to;
6352             switch(Opc) {
6353             case BO_EQ: // e.g. array1 == array2
6354               always_evals_to = 0; // false
6355               break;
6356             case BO_NE: // e.g. array1 != array2
6357               always_evals_to = 1; // true
6358               break;
6359             default:
6360               // best we can say is 'a constant'
6361               always_evals_to = 2; // e.g. array1 <= array2
6362               break;
6363             }
6364             DiagRuntimeBehavior(Loc, 0, PDiag(diag::warn_comparison_always)
6365                                 << 1 // array
6366                                 << always_evals_to);
6367         }
6368       }
6369     }
6370 
6371     if (isa<CastExpr>(LHSStripped))
6372       LHSStripped = LHSStripped->IgnoreParenCasts();
6373     if (isa<CastExpr>(RHSStripped))
6374       RHSStripped = RHSStripped->IgnoreParenCasts();
6375 
6376     // Warn about comparisons against a string constant (unless the other
6377     // operand is null), the user probably wants strcmp.
6378     Expr *literalString = 0;
6379     Expr *literalStringStripped = 0;
6380     if ((isa<StringLiteral>(LHSStripped) || isa<ObjCEncodeExpr>(LHSStripped)) &&
6381         !RHSStripped->isNullPointerConstant(Context,
6382                                             Expr::NPC_ValueDependentIsNull)) {
6383       literalString = LHS.get();
6384       literalStringStripped = LHSStripped;
6385     } else if ((isa<StringLiteral>(RHSStripped) ||
6386                 isa<ObjCEncodeExpr>(RHSStripped)) &&
6387                !LHSStripped->isNullPointerConstant(Context,
6388                                             Expr::NPC_ValueDependentIsNull)) {
6389       literalString = RHS.get();
6390       literalStringStripped = RHSStripped;
6391     }
6392 
6393     if (literalString) {
6394       std::string resultComparison;
6395       switch (Opc) {
6396       case BO_LT: resultComparison = ") < 0"; break;
6397       case BO_GT: resultComparison = ") > 0"; break;
6398       case BO_LE: resultComparison = ") <= 0"; break;
6399       case BO_GE: resultComparison = ") >= 0"; break;
6400       case BO_EQ: resultComparison = ") == 0"; break;
6401       case BO_NE: resultComparison = ") != 0"; break;
6402       default: llvm_unreachable("Invalid comparison operator");
6403       }
6404 
6405       DiagRuntimeBehavior(Loc, 0,
6406         PDiag(diag::warn_stringcompare)
6407           << isa<ObjCEncodeExpr>(literalStringStripped)
6408           << literalString->getSourceRange());
6409     }
6410   }
6411 
6412   // C99 6.5.8p3 / C99 6.5.9p4
6413   if (LHS.get()->getType()->isArithmeticType() &&
6414       RHS.get()->getType()->isArithmeticType()) {
6415     UsualArithmeticConversions(LHS, RHS);
6416     if (LHS.isInvalid() || RHS.isInvalid())
6417       return QualType();
6418   }
6419   else {
6420     LHS = UsualUnaryConversions(LHS.take());
6421     if (LHS.isInvalid())
6422       return QualType();
6423 
6424     RHS = UsualUnaryConversions(RHS.take());
6425     if (RHS.isInvalid())
6426       return QualType();
6427   }
6428 
6429   LHSType = LHS.get()->getType();
6430   RHSType = RHS.get()->getType();
6431 
6432   // The result of comparisons is 'bool' in C++, 'int' in C.
6433   QualType ResultTy = Context.getLogicalOperationType();
6434 
6435   if (IsRelational) {
6436     if (LHSType->isRealType() && RHSType->isRealType())
6437       return ResultTy;
6438   } else {
6439     // Check for comparisons of floating point operands using != and ==.
6440     if (LHSType->hasFloatingRepresentation())
6441       CheckFloatComparison(Loc, LHS.get(), RHS.get());
6442 
6443     if (LHSType->isArithmeticType() && RHSType->isArithmeticType())
6444       return ResultTy;
6445   }
6446 
6447   bool LHSIsNull = LHS.get()->isNullPointerConstant(Context,
6448                                               Expr::NPC_ValueDependentIsNull);
6449   bool RHSIsNull = RHS.get()->isNullPointerConstant(Context,
6450                                               Expr::NPC_ValueDependentIsNull);
6451 
6452   // All of the following pointer-related warnings are GCC extensions, except
6453   // when handling null pointer constants.
6454   if (LHSType->isPointerType() && RHSType->isPointerType()) { // C99 6.5.8p2
6455     QualType LCanPointeeTy =
6456       LHSType->castAs<PointerType>()->getPointeeType().getCanonicalType();
6457     QualType RCanPointeeTy =
6458       RHSType->castAs<PointerType>()->getPointeeType().getCanonicalType();
6459 
6460     if (getLangOptions().CPlusPlus) {
6461       if (LCanPointeeTy == RCanPointeeTy)
6462         return ResultTy;
6463       if (!IsRelational &&
6464           (LCanPointeeTy->isVoidType() || RCanPointeeTy->isVoidType())) {
6465         // Valid unless comparison between non-null pointer and function pointer
6466         // This is a gcc extension compatibility comparison.
6467         // In a SFINAE context, we treat this as a hard error to maintain
6468         // conformance with the C++ standard.
6469         if ((LCanPointeeTy->isFunctionType() || RCanPointeeTy->isFunctionType())
6470             && !LHSIsNull && !RHSIsNull) {
6471           diagnoseFunctionPointerToVoidComparison(
6472               *this, Loc, LHS, RHS, /*isError*/ isSFINAEContext());
6473 
6474           if (isSFINAEContext())
6475             return QualType();
6476 
6477           RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6478           return ResultTy;
6479         }
6480       }
6481 
6482       if (convertPointersToCompositeType(*this, Loc, LHS, RHS))
6483         return QualType();
6484       else
6485         return ResultTy;
6486     }
6487     // C99 6.5.9p2 and C99 6.5.8p2
6488     if (Context.typesAreCompatible(LCanPointeeTy.getUnqualifiedType(),
6489                                    RCanPointeeTy.getUnqualifiedType())) {
6490       // Valid unless a relational comparison of function pointers
6491       if (IsRelational && LCanPointeeTy->isFunctionType()) {
6492         Diag(Loc, diag::ext_typecheck_ordered_comparison_of_function_pointers)
6493           << LHSType << RHSType << LHS.get()->getSourceRange()
6494           << RHS.get()->getSourceRange();
6495       }
6496     } else if (!IsRelational &&
6497                (LCanPointeeTy->isVoidType() || RCanPointeeTy->isVoidType())) {
6498       // Valid unless comparison between non-null pointer and function pointer
6499       if ((LCanPointeeTy->isFunctionType() || RCanPointeeTy->isFunctionType())
6500           && !LHSIsNull && !RHSIsNull)
6501         diagnoseFunctionPointerToVoidComparison(*this, Loc, LHS, RHS,
6502                                                 /*isError*/false);
6503     } else {
6504       // Invalid
6505       diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS, /*isError*/false);
6506     }
6507     if (LCanPointeeTy != RCanPointeeTy) {
6508       if (LHSIsNull && !RHSIsNull)
6509         LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
6510       else
6511         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6512     }
6513     return ResultTy;
6514   }
6515 
6516   if (getLangOptions().CPlusPlus) {
6517     // Comparison of nullptr_t with itself.
6518     if (LHSType->isNullPtrType() && RHSType->isNullPtrType())
6519       return ResultTy;
6520 
6521     // Comparison of pointers with null pointer constants and equality
6522     // comparisons of member pointers to null pointer constants.
6523     if (RHSIsNull &&
6524         ((LHSType->isAnyPointerType() || LHSType->isNullPtrType()) ||
6525          (!IsRelational &&
6526           (LHSType->isMemberPointerType() || LHSType->isBlockPointerType())))) {
6527       RHS = ImpCastExprToType(RHS.take(), LHSType,
6528                         LHSType->isMemberPointerType()
6529                           ? CK_NullToMemberPointer
6530                           : CK_NullToPointer);
6531       return ResultTy;
6532     }
6533     if (LHSIsNull &&
6534         ((RHSType->isAnyPointerType() || RHSType->isNullPtrType()) ||
6535          (!IsRelational &&
6536           (RHSType->isMemberPointerType() || RHSType->isBlockPointerType())))) {
6537       LHS = ImpCastExprToType(LHS.take(), RHSType,
6538                         RHSType->isMemberPointerType()
6539                           ? CK_NullToMemberPointer
6540                           : CK_NullToPointer);
6541       return ResultTy;
6542     }
6543 
6544     // Comparison of member pointers.
6545     if (!IsRelational &&
6546         LHSType->isMemberPointerType() && RHSType->isMemberPointerType()) {
6547       if (convertPointersToCompositeType(*this, Loc, LHS, RHS))
6548         return QualType();
6549       else
6550         return ResultTy;
6551     }
6552 
6553     // Handle scoped enumeration types specifically, since they don't promote
6554     // to integers.
6555     if (LHS.get()->getType()->isEnumeralType() &&
6556         Context.hasSameUnqualifiedType(LHS.get()->getType(),
6557                                        RHS.get()->getType()))
6558       return ResultTy;
6559   }
6560 
6561   // Handle block pointer types.
6562   if (!IsRelational && LHSType->isBlockPointerType() &&
6563       RHSType->isBlockPointerType()) {
6564     QualType lpointee = LHSType->castAs<BlockPointerType>()->getPointeeType();
6565     QualType rpointee = RHSType->castAs<BlockPointerType>()->getPointeeType();
6566 
6567     if (!LHSIsNull && !RHSIsNull &&
6568         !Context.typesAreCompatible(lpointee, rpointee)) {
6569       Diag(Loc, diag::err_typecheck_comparison_of_distinct_blocks)
6570         << LHSType << RHSType << LHS.get()->getSourceRange()
6571         << RHS.get()->getSourceRange();
6572     }
6573     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6574     return ResultTy;
6575   }
6576 
6577   // Allow block pointers to be compared with null pointer constants.
6578   if (!IsRelational
6579       && ((LHSType->isBlockPointerType() && RHSType->isPointerType())
6580           || (LHSType->isPointerType() && RHSType->isBlockPointerType()))) {
6581     if (!LHSIsNull && !RHSIsNull) {
6582       if (!((RHSType->isPointerType() && RHSType->castAs<PointerType>()
6583              ->getPointeeType()->isVoidType())
6584             || (LHSType->isPointerType() && LHSType->castAs<PointerType>()
6585                 ->getPointeeType()->isVoidType())))
6586         Diag(Loc, diag::err_typecheck_comparison_of_distinct_blocks)
6587           << LHSType << RHSType << LHS.get()->getSourceRange()
6588           << RHS.get()->getSourceRange();
6589     }
6590     if (LHSIsNull && !RHSIsNull)
6591       LHS = ImpCastExprToType(LHS.take(), RHSType,
6592                               RHSType->isPointerType() ? CK_BitCast
6593                                 : CK_AnyPointerToBlockPointerCast);
6594     else
6595       RHS = ImpCastExprToType(RHS.take(), LHSType,
6596                               LHSType->isPointerType() ? CK_BitCast
6597                                 : CK_AnyPointerToBlockPointerCast);
6598     return ResultTy;
6599   }
6600 
6601   if (LHSType->isObjCObjectPointerType() ||
6602       RHSType->isObjCObjectPointerType()) {
6603     const PointerType *LPT = LHSType->getAs<PointerType>();
6604     const PointerType *RPT = RHSType->getAs<PointerType>();
6605     if (LPT || RPT) {
6606       bool LPtrToVoid = LPT ? LPT->getPointeeType()->isVoidType() : false;
6607       bool RPtrToVoid = RPT ? RPT->getPointeeType()->isVoidType() : false;
6608 
6609       if (!LPtrToVoid && !RPtrToVoid &&
6610           !Context.typesAreCompatible(LHSType, RHSType)) {
6611         diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS,
6612                                           /*isError*/false);
6613       }
6614       if (LHSIsNull && !RHSIsNull)
6615         LHS = ImpCastExprToType(LHS.take(), RHSType,
6616                                 RPT ? CK_BitCast :CK_CPointerToObjCPointerCast);
6617       else
6618         RHS = ImpCastExprToType(RHS.take(), LHSType,
6619                                 LPT ? CK_BitCast :CK_CPointerToObjCPointerCast);
6620       return ResultTy;
6621     }
6622     if (LHSType->isObjCObjectPointerType() &&
6623         RHSType->isObjCObjectPointerType()) {
6624       if (!Context.areComparableObjCPointerTypes(LHSType, RHSType))
6625         diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS,
6626                                           /*isError*/false);
6627       if (LHSIsNull && !RHSIsNull)
6628         LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
6629       else
6630         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6631       return ResultTy;
6632     }
6633   }
6634   if ((LHSType->isAnyPointerType() && RHSType->isIntegerType()) ||
6635       (LHSType->isIntegerType() && RHSType->isAnyPointerType())) {
6636     unsigned DiagID = 0;
6637     bool isError = false;
6638     if ((LHSIsNull && LHSType->isIntegerType()) ||
6639         (RHSIsNull && RHSType->isIntegerType())) {
6640       if (IsRelational && !getLangOptions().CPlusPlus)
6641         DiagID = diag::ext_typecheck_ordered_comparison_of_pointer_and_zero;
6642     } else if (IsRelational && !getLangOptions().CPlusPlus)
6643       DiagID = diag::ext_typecheck_ordered_comparison_of_pointer_integer;
6644     else if (getLangOptions().CPlusPlus) {
6645       DiagID = diag::err_typecheck_comparison_of_pointer_integer;
6646       isError = true;
6647     } else
6648       DiagID = diag::ext_typecheck_comparison_of_pointer_integer;
6649 
6650     if (DiagID) {
6651       Diag(Loc, DiagID)
6652         << LHSType << RHSType << LHS.get()->getSourceRange()
6653         << RHS.get()->getSourceRange();
6654       if (isError)
6655         return QualType();
6656     }
6657 
6658     if (LHSType->isIntegerType())
6659       LHS = ImpCastExprToType(LHS.take(), RHSType,
6660                         LHSIsNull ? CK_NullToPointer : CK_IntegralToPointer);
6661     else
6662       RHS = ImpCastExprToType(RHS.take(), LHSType,
6663                         RHSIsNull ? CK_NullToPointer : CK_IntegralToPointer);
6664     return ResultTy;
6665   }
6666 
6667   // Handle block pointers.
6668   if (!IsRelational && RHSIsNull
6669       && LHSType->isBlockPointerType() && RHSType->isIntegerType()) {
6670     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_NullToPointer);
6671     return ResultTy;
6672   }
6673   if (!IsRelational && LHSIsNull
6674       && LHSType->isIntegerType() && RHSType->isBlockPointerType()) {
6675     LHS = ImpCastExprToType(LHS.take(), RHSType, CK_NullToPointer);
6676     return ResultTy;
6677   }
6678 
6679   return InvalidOperands(Loc, LHS, RHS);
6680 }
6681 
6682 
6683 // Return a signed type that is of identical size and number of elements.
6684 // For floating point vectors, return an integer type of identical size
6685 // and number of elements.
6686 QualType Sema::GetSignedVectorType(QualType V) {
6687   const VectorType *VTy = V->getAs<VectorType>();
6688   unsigned TypeSize = Context.getTypeSize(VTy->getElementType());
6689   if (TypeSize == Context.getTypeSize(Context.CharTy))
6690     return Context.getExtVectorType(Context.CharTy, VTy->getNumElements());
6691   else if (TypeSize == Context.getTypeSize(Context.ShortTy))
6692     return Context.getExtVectorType(Context.ShortTy, VTy->getNumElements());
6693   else if (TypeSize == Context.getTypeSize(Context.IntTy))
6694     return Context.getExtVectorType(Context.IntTy, VTy->getNumElements());
6695   else if (TypeSize == Context.getTypeSize(Context.LongTy))
6696     return Context.getExtVectorType(Context.LongTy, VTy->getNumElements());
6697   assert(TypeSize == Context.getTypeSize(Context.LongLongTy) &&
6698          "Unhandled vector element size in vector compare");
6699   return Context.getExtVectorType(Context.LongLongTy, VTy->getNumElements());
6700 }
6701 
6702 /// CheckVectorCompareOperands - vector comparisons are a clang extension that
6703 /// operates on extended vector types.  Instead of producing an IntTy result,
6704 /// like a scalar comparison, a vector comparison produces a vector of integer
6705 /// types.
6706 QualType Sema::CheckVectorCompareOperands(ExprResult &LHS, ExprResult &RHS,
6707                                           SourceLocation Loc,
6708                                           bool IsRelational) {
6709   // Check to make sure we're operating on vectors of the same type and width,
6710   // Allowing one side to be a scalar of element type.
6711   QualType vType = CheckVectorOperands(LHS, RHS, Loc, /*isCompAssign*/false);
6712   if (vType.isNull())
6713     return vType;
6714 
6715   QualType LHSType = LHS.get()->getType();
6716 
6717   // If AltiVec, the comparison results in a numeric type, i.e.
6718   // bool for C++, int for C
6719   if (vType->getAs<VectorType>()->getVectorKind() == VectorType::AltiVecVector)
6720     return Context.getLogicalOperationType();
6721 
6722   // For non-floating point types, check for self-comparisons of the form
6723   // x == x, x != x, x < x, etc.  These always evaluate to a constant, and
6724   // often indicate logic errors in the program.
6725   if (!LHSType->hasFloatingRepresentation()) {
6726     if (DeclRefExpr* DRL
6727           = dyn_cast<DeclRefExpr>(LHS.get()->IgnoreParenImpCasts()))
6728       if (DeclRefExpr* DRR
6729             = dyn_cast<DeclRefExpr>(RHS.get()->IgnoreParenImpCasts()))
6730         if (DRL->getDecl() == DRR->getDecl())
6731           DiagRuntimeBehavior(Loc, 0,
6732                               PDiag(diag::warn_comparison_always)
6733                                 << 0 // self-
6734                                 << 2 // "a constant"
6735                               );
6736   }
6737 
6738   // Check for comparisons of floating point operands using != and ==.
6739   if (!IsRelational && LHSType->hasFloatingRepresentation()) {
6740     assert (RHS.get()->getType()->hasFloatingRepresentation());
6741     CheckFloatComparison(Loc, LHS.get(), RHS.get());
6742   }
6743 
6744   // Return a signed type for the vector.
6745   return GetSignedVectorType(LHSType);
6746 }
6747 
6748 QualType Sema::CheckVectorLogicalOperands(ExprResult &LHS, ExprResult &RHS,
6749                                           SourceLocation Loc) {
6750   // Ensure that either both operands are of the same vector type, or
6751   // one operand is of a vector type and the other is of its element type.
6752   QualType vType = CheckVectorOperands(LHS, RHS, Loc, false);
6753   if (vType.isNull() || vType->isFloatingType())
6754     return InvalidOperands(Loc, LHS, RHS);
6755 
6756   return GetSignedVectorType(LHS.get()->getType());
6757 }
6758 
6759 inline QualType Sema::CheckBitwiseOperands(
6760   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, bool IsCompAssign) {
6761   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6762 
6763   if (LHS.get()->getType()->isVectorType() ||
6764       RHS.get()->getType()->isVectorType()) {
6765     if (LHS.get()->getType()->hasIntegerRepresentation() &&
6766         RHS.get()->getType()->hasIntegerRepresentation())
6767       return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
6768 
6769     return InvalidOperands(Loc, LHS, RHS);
6770   }
6771 
6772   ExprResult LHSResult = Owned(LHS), RHSResult = Owned(RHS);
6773   QualType compType = UsualArithmeticConversions(LHSResult, RHSResult,
6774                                                  IsCompAssign);
6775   if (LHSResult.isInvalid() || RHSResult.isInvalid())
6776     return QualType();
6777   LHS = LHSResult.take();
6778   RHS = RHSResult.take();
6779 
6780   if (LHS.get()->getType()->isIntegralOrUnscopedEnumerationType() &&
6781       RHS.get()->getType()->isIntegralOrUnscopedEnumerationType())
6782     return compType;
6783   return InvalidOperands(Loc, LHS, RHS);
6784 }
6785 
6786 inline QualType Sema::CheckLogicalOperands( // C99 6.5.[13,14]
6787   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, unsigned Opc) {
6788 
6789   // Check vector operands differently.
6790   if (LHS.get()->getType()->isVectorType() || RHS.get()->getType()->isVectorType())
6791     return CheckVectorLogicalOperands(LHS, RHS, Loc);
6792 
6793   // Diagnose cases where the user write a logical and/or but probably meant a
6794   // bitwise one.  We do this when the LHS is a non-bool integer and the RHS
6795   // is a constant.
6796   if (LHS.get()->getType()->isIntegerType() &&
6797       !LHS.get()->getType()->isBooleanType() &&
6798       RHS.get()->getType()->isIntegerType() && !RHS.get()->isValueDependent() &&
6799       // Don't warn in macros or template instantiations.
6800       !Loc.isMacroID() && ActiveTemplateInstantiations.empty()) {
6801     // If the RHS can be constant folded, and if it constant folds to something
6802     // that isn't 0 or 1 (which indicate a potential logical operation that
6803     // happened to fold to true/false) then warn.
6804     // Parens on the RHS are ignored.
6805     llvm::APSInt Result;
6806     if (RHS.get()->EvaluateAsInt(Result, Context))
6807       if ((getLangOptions().Bool && !RHS.get()->getType()->isBooleanType()) ||
6808           (Result != 0 && Result != 1)) {
6809         Diag(Loc, diag::warn_logical_instead_of_bitwise)
6810           << RHS.get()->getSourceRange()
6811           << (Opc == BO_LAnd ? "&&" : "||");
6812         // Suggest replacing the logical operator with the bitwise version
6813         Diag(Loc, diag::note_logical_instead_of_bitwise_change_operator)
6814             << (Opc == BO_LAnd ? "&" : "|")
6815             << FixItHint::CreateReplacement(SourceRange(
6816                 Loc, Lexer::getLocForEndOfToken(Loc, 0, getSourceManager(),
6817                                                 getLangOptions())),
6818                                             Opc == BO_LAnd ? "&" : "|");
6819         if (Opc == BO_LAnd)
6820           // Suggest replacing "Foo() && kNonZero" with "Foo()"
6821           Diag(Loc, diag::note_logical_instead_of_bitwise_remove_constant)
6822               << FixItHint::CreateRemoval(
6823                   SourceRange(
6824                       Lexer::getLocForEndOfToken(LHS.get()->getLocEnd(),
6825                                                  0, getSourceManager(),
6826                                                  getLangOptions()),
6827                       RHS.get()->getLocEnd()));
6828       }
6829   }
6830 
6831   if (!Context.getLangOptions().CPlusPlus) {
6832     LHS = UsualUnaryConversions(LHS.take());
6833     if (LHS.isInvalid())
6834       return QualType();
6835 
6836     RHS = UsualUnaryConversions(RHS.take());
6837     if (RHS.isInvalid())
6838       return QualType();
6839 
6840     if (!LHS.get()->getType()->isScalarType() ||
6841         !RHS.get()->getType()->isScalarType())
6842       return InvalidOperands(Loc, LHS, RHS);
6843 
6844     return Context.IntTy;
6845   }
6846 
6847   // The following is safe because we only use this method for
6848   // non-overloadable operands.
6849 
6850   // C++ [expr.log.and]p1
6851   // C++ [expr.log.or]p1
6852   // The operands are both contextually converted to type bool.
6853   ExprResult LHSRes = PerformContextuallyConvertToBool(LHS.get());
6854   if (LHSRes.isInvalid())
6855     return InvalidOperands(Loc, LHS, RHS);
6856   LHS = move(LHSRes);
6857 
6858   ExprResult RHSRes = PerformContextuallyConvertToBool(RHS.get());
6859   if (RHSRes.isInvalid())
6860     return InvalidOperands(Loc, LHS, RHS);
6861   RHS = move(RHSRes);
6862 
6863   // C++ [expr.log.and]p2
6864   // C++ [expr.log.or]p2
6865   // The result is a bool.
6866   return Context.BoolTy;
6867 }
6868 
6869 /// IsReadonlyProperty - Verify that otherwise a valid l-value expression
6870 /// is a read-only property; return true if so. A readonly property expression
6871 /// depends on various declarations and thus must be treated specially.
6872 ///
6873 static bool IsReadonlyProperty(Expr *E, Sema &S) {
6874   const ObjCPropertyRefExpr *PropExpr = dyn_cast<ObjCPropertyRefExpr>(E);
6875   if (!PropExpr) return false;
6876   if (PropExpr->isImplicitProperty()) return false;
6877 
6878   ObjCPropertyDecl *PDecl = PropExpr->getExplicitProperty();
6879   QualType BaseType = PropExpr->isSuperReceiver() ?
6880                             PropExpr->getSuperReceiverType() :
6881                             PropExpr->getBase()->getType();
6882 
6883   if (const ObjCObjectPointerType *OPT =
6884       BaseType->getAsObjCInterfacePointerType())
6885     if (ObjCInterfaceDecl *IFace = OPT->getInterfaceDecl())
6886       if (S.isPropertyReadonly(PDecl, IFace))
6887         return true;
6888   return false;
6889 }
6890 
6891 static bool IsConstProperty(Expr *E, Sema &S) {
6892   const ObjCPropertyRefExpr *PropExpr = dyn_cast<ObjCPropertyRefExpr>(E);
6893   if (!PropExpr) return false;
6894   if (PropExpr->isImplicitProperty()) return false;
6895 
6896   ObjCPropertyDecl *PDecl = PropExpr->getExplicitProperty();
6897   QualType T = PDecl->getType().getNonReferenceType();
6898   return T.isConstQualified();
6899 }
6900 
6901 static bool IsReadonlyMessage(Expr *E, Sema &S) {
6902   const MemberExpr *ME = dyn_cast<MemberExpr>(E);
6903   if (!ME) return false;
6904   if (!isa<FieldDecl>(ME->getMemberDecl())) return false;
6905   ObjCMessageExpr *Base =
6906     dyn_cast<ObjCMessageExpr>(ME->getBase()->IgnoreParenImpCasts());
6907   if (!Base) return false;
6908   return Base->getMethodDecl() != 0;
6909 }
6910 
6911 /// CheckForModifiableLvalue - Verify that E is a modifiable lvalue.  If not,
6912 /// emit an error and return true.  If so, return false.
6913 static bool CheckForModifiableLvalue(Expr *E, SourceLocation Loc, Sema &S) {
6914   SourceLocation OrigLoc = Loc;
6915   Expr::isModifiableLvalueResult IsLV = E->isModifiableLvalue(S.Context,
6916                                                               &Loc);
6917   if (IsLV == Expr::MLV_Valid && IsReadonlyProperty(E, S))
6918     IsLV = Expr::MLV_ReadonlyProperty;
6919   else if (Expr::MLV_ConstQualified && IsConstProperty(E, S))
6920     IsLV = Expr::MLV_Valid;
6921   else if (IsLV == Expr::MLV_ClassTemporary && IsReadonlyMessage(E, S))
6922     IsLV = Expr::MLV_InvalidMessageExpression;
6923   if (IsLV == Expr::MLV_Valid)
6924     return false;
6925 
6926   unsigned Diag = 0;
6927   bool NeedType = false;
6928   switch (IsLV) { // C99 6.5.16p2
6929   case Expr::MLV_ConstQualified:
6930     Diag = diag::err_typecheck_assign_const;
6931 
6932     // In ARC, use some specialized diagnostics for occasions where we
6933     // infer 'const'.  These are always pseudo-strong variables.
6934     if (S.getLangOptions().ObjCAutoRefCount) {
6935       DeclRefExpr *declRef = dyn_cast<DeclRefExpr>(E->IgnoreParenCasts());
6936       if (declRef && isa<VarDecl>(declRef->getDecl())) {
6937         VarDecl *var = cast<VarDecl>(declRef->getDecl());
6938 
6939         // Use the normal diagnostic if it's pseudo-__strong but the
6940         // user actually wrote 'const'.
6941         if (var->isARCPseudoStrong() &&
6942             (!var->getTypeSourceInfo() ||
6943              !var->getTypeSourceInfo()->getType().isConstQualified())) {
6944           // There are two pseudo-strong cases:
6945           //  - self
6946           ObjCMethodDecl *method = S.getCurMethodDecl();
6947           if (method && var == method->getSelfDecl())
6948             Diag = method->isClassMethod()
6949               ? diag::err_typecheck_arc_assign_self_class_method
6950               : diag::err_typecheck_arc_assign_self;
6951 
6952           //  - fast enumeration variables
6953           else
6954             Diag = diag::err_typecheck_arr_assign_enumeration;
6955 
6956           SourceRange Assign;
6957           if (Loc != OrigLoc)
6958             Assign = SourceRange(OrigLoc, OrigLoc);
6959           S.Diag(Loc, Diag) << E->getSourceRange() << Assign;
6960           // We need to preserve the AST regardless, so migration tool
6961           // can do its job.
6962           return false;
6963         }
6964       }
6965     }
6966 
6967     break;
6968   case Expr::MLV_ArrayType:
6969     Diag = diag::err_typecheck_array_not_modifiable_lvalue;
6970     NeedType = true;
6971     break;
6972   case Expr::MLV_NotObjectType:
6973     Diag = diag::err_typecheck_non_object_not_modifiable_lvalue;
6974     NeedType = true;
6975     break;
6976   case Expr::MLV_LValueCast:
6977     Diag = diag::err_typecheck_lvalue_casts_not_supported;
6978     break;
6979   case Expr::MLV_Valid:
6980     llvm_unreachable("did not take early return for MLV_Valid");
6981   case Expr::MLV_InvalidExpression:
6982   case Expr::MLV_MemberFunction:
6983   case Expr::MLV_ClassTemporary:
6984     Diag = diag::err_typecheck_expression_not_modifiable_lvalue;
6985     break;
6986   case Expr::MLV_IncompleteType:
6987   case Expr::MLV_IncompleteVoidType:
6988     return S.RequireCompleteType(Loc, E->getType(),
6989               S.PDiag(diag::err_typecheck_incomplete_type_not_modifiable_lvalue)
6990                   << E->getSourceRange());
6991   case Expr::MLV_DuplicateVectorComponents:
6992     Diag = diag::err_typecheck_duplicate_vector_components_not_mlvalue;
6993     break;
6994   case Expr::MLV_NotBlockQualified:
6995     Diag = diag::err_block_decl_ref_not_modifiable_lvalue;
6996     break;
6997   case Expr::MLV_ReadonlyProperty:
6998   case Expr::MLV_NoSetterProperty:
6999     llvm_unreachable("readonly properties should be processed differently");
7000   case Expr::MLV_InvalidMessageExpression:
7001     Diag = diag::error_readonly_message_assignment;
7002     break;
7003   case Expr::MLV_SubObjCPropertySetting:
7004     Diag = diag::error_no_subobject_property_setting;
7005     break;
7006   }
7007 
7008   SourceRange Assign;
7009   if (Loc != OrigLoc)
7010     Assign = SourceRange(OrigLoc, OrigLoc);
7011   if (NeedType)
7012     S.Diag(Loc, Diag) << E->getType() << E->getSourceRange() << Assign;
7013   else
7014     S.Diag(Loc, Diag) << E->getSourceRange() << Assign;
7015   return true;
7016 }
7017 
7018 
7019 
7020 // C99 6.5.16.1
7021 QualType Sema::CheckAssignmentOperands(Expr *LHSExpr, ExprResult &RHS,
7022                                        SourceLocation Loc,
7023                                        QualType CompoundType) {
7024   assert(!LHSExpr->hasPlaceholderType(BuiltinType::PseudoObject));
7025 
7026   // Verify that LHS is a modifiable lvalue, and emit error if not.
7027   if (CheckForModifiableLvalue(LHSExpr, Loc, *this))
7028     return QualType();
7029 
7030   QualType LHSType = LHSExpr->getType();
7031   QualType RHSType = CompoundType.isNull() ? RHS.get()->getType() :
7032                                              CompoundType;
7033   AssignConvertType ConvTy;
7034   if (CompoundType.isNull()) {
7035     QualType LHSTy(LHSType);
7036     ConvTy = CheckSingleAssignmentConstraints(LHSTy, RHS);
7037     if (RHS.isInvalid())
7038       return QualType();
7039     // Special case of NSObject attributes on c-style pointer types.
7040     if (ConvTy == IncompatiblePointer &&
7041         ((Context.isObjCNSObjectType(LHSType) &&
7042           RHSType->isObjCObjectPointerType()) ||
7043          (Context.isObjCNSObjectType(RHSType) &&
7044           LHSType->isObjCObjectPointerType())))
7045       ConvTy = Compatible;
7046 
7047     if (ConvTy == Compatible &&
7048         LHSType->isObjCObjectType())
7049         Diag(Loc, diag::err_objc_object_assignment)
7050           << LHSType;
7051 
7052     // If the RHS is a unary plus or minus, check to see if they = and + are
7053     // right next to each other.  If so, the user may have typo'd "x =+ 4"
7054     // instead of "x += 4".
7055     Expr *RHSCheck = RHS.get();
7056     if (ImplicitCastExpr *ICE = dyn_cast<ImplicitCastExpr>(RHSCheck))
7057       RHSCheck = ICE->getSubExpr();
7058     if (UnaryOperator *UO = dyn_cast<UnaryOperator>(RHSCheck)) {
7059       if ((UO->getOpcode() == UO_Plus ||
7060            UO->getOpcode() == UO_Minus) &&
7061           Loc.isFileID() && UO->getOperatorLoc().isFileID() &&
7062           // Only if the two operators are exactly adjacent.
7063           Loc.getLocWithOffset(1) == UO->getOperatorLoc() &&
7064           // And there is a space or other character before the subexpr of the
7065           // unary +/-.  We don't want to warn on "x=-1".
7066           Loc.getLocWithOffset(2) != UO->getSubExpr()->getLocStart() &&
7067           UO->getSubExpr()->getLocStart().isFileID()) {
7068         Diag(Loc, diag::warn_not_compound_assign)
7069           << (UO->getOpcode() == UO_Plus ? "+" : "-")
7070           << SourceRange(UO->getOperatorLoc(), UO->getOperatorLoc());
7071       }
7072     }
7073 
7074     if (ConvTy == Compatible) {
7075       if (LHSType.getObjCLifetime() == Qualifiers::OCL_Strong)
7076         checkRetainCycles(LHSExpr, RHS.get());
7077       else if (getLangOptions().ObjCAutoRefCount)
7078         checkUnsafeExprAssigns(Loc, LHSExpr, RHS.get());
7079     }
7080   } else {
7081     // Compound assignment "x += y"
7082     ConvTy = CheckAssignmentConstraints(Loc, LHSType, RHSType);
7083   }
7084 
7085   if (DiagnoseAssignmentResult(ConvTy, Loc, LHSType, RHSType,
7086                                RHS.get(), AA_Assigning))
7087     return QualType();
7088 
7089   CheckForNullPointerDereference(*this, LHSExpr);
7090 
7091   // C99 6.5.16p3: The type of an assignment expression is the type of the
7092   // left operand unless the left operand has qualified type, in which case
7093   // it is the unqualified version of the type of the left operand.
7094   // C99 6.5.16.1p2: In simple assignment, the value of the right operand
7095   // is converted to the type of the assignment expression (above).
7096   // C++ 5.17p1: the type of the assignment expression is that of its left
7097   // operand.
7098   return (getLangOptions().CPlusPlus
7099           ? LHSType : LHSType.getUnqualifiedType());
7100 }
7101 
7102 // C99 6.5.17
7103 static QualType CheckCommaOperands(Sema &S, ExprResult &LHS, ExprResult &RHS,
7104                                    SourceLocation Loc) {
7105   S.DiagnoseUnusedExprResult(LHS.get());
7106 
7107   LHS = S.CheckPlaceholderExpr(LHS.take());
7108   RHS = S.CheckPlaceholderExpr(RHS.take());
7109   if (LHS.isInvalid() || RHS.isInvalid())
7110     return QualType();
7111 
7112   // C's comma performs lvalue conversion (C99 6.3.2.1) on both its
7113   // operands, but not unary promotions.
7114   // C++'s comma does not do any conversions at all (C++ [expr.comma]p1).
7115 
7116   // So we treat the LHS as a ignored value, and in C++ we allow the
7117   // containing site to determine what should be done with the RHS.
7118   LHS = S.IgnoredValueConversions(LHS.take());
7119   if (LHS.isInvalid())
7120     return QualType();
7121 
7122   if (!S.getLangOptions().CPlusPlus) {
7123     RHS = S.DefaultFunctionArrayLvalueConversion(RHS.take());
7124     if (RHS.isInvalid())
7125       return QualType();
7126     if (!RHS.get()->getType()->isVoidType())
7127       S.RequireCompleteType(Loc, RHS.get()->getType(),
7128                             diag::err_incomplete_type);
7129   }
7130 
7131   return RHS.get()->getType();
7132 }
7133 
7134 /// CheckIncrementDecrementOperand - unlike most "Check" methods, this routine
7135 /// doesn't need to call UsualUnaryConversions or UsualArithmeticConversions.
7136 static QualType CheckIncrementDecrementOperand(Sema &S, Expr *Op,
7137                                                ExprValueKind &VK,
7138                                                SourceLocation OpLoc,
7139                                                bool IsInc, bool IsPrefix) {
7140   if (Op->isTypeDependent())
7141     return S.Context.DependentTy;
7142 
7143   QualType ResType = Op->getType();
7144   // Atomic types can be used for increment / decrement where the non-atomic
7145   // versions can, so ignore the _Atomic() specifier for the purpose of
7146   // checking.
7147   if (const AtomicType *ResAtomicType = ResType->getAs<AtomicType>())
7148     ResType = ResAtomicType->getValueType();
7149 
7150   assert(!ResType.isNull() && "no type for increment/decrement expression");
7151 
7152   if (S.getLangOptions().CPlusPlus && ResType->isBooleanType()) {
7153     // Decrement of bool is not allowed.
7154     if (!IsInc) {
7155       S.Diag(OpLoc, diag::err_decrement_bool) << Op->getSourceRange();
7156       return QualType();
7157     }
7158     // Increment of bool sets it to true, but is deprecated.
7159     S.Diag(OpLoc, diag::warn_increment_bool) << Op->getSourceRange();
7160   } else if (ResType->isRealType()) {
7161     // OK!
7162   } else if (ResType->isAnyPointerType()) {
7163     // C99 6.5.2.4p2, 6.5.6p2
7164     if (!checkArithmeticOpPointerOperand(S, OpLoc, Op))
7165       return QualType();
7166 
7167     // Diagnose bad cases where we step over interface counts.
7168     else if (!checkArithmethicPointerOnNonFragileABI(S, OpLoc, Op))
7169       return QualType();
7170   } else if (ResType->isAnyComplexType()) {
7171     // C99 does not support ++/-- on complex types, we allow as an extension.
7172     S.Diag(OpLoc, diag::ext_integer_increment_complex)
7173       << ResType << Op->getSourceRange();
7174   } else if (ResType->isPlaceholderType()) {
7175     ExprResult PR = S.CheckPlaceholderExpr(Op);
7176     if (PR.isInvalid()) return QualType();
7177     return CheckIncrementDecrementOperand(S, PR.take(), VK, OpLoc,
7178                                           IsInc, IsPrefix);
7179   } else if (S.getLangOptions().AltiVec && ResType->isVectorType()) {
7180     // OK! ( C/C++ Language Extensions for CBEA(Version 2.6) 10.3 )
7181   } else {
7182     S.Diag(OpLoc, diag::err_typecheck_illegal_increment_decrement)
7183       << ResType << int(IsInc) << Op->getSourceRange();
7184     return QualType();
7185   }
7186   // At this point, we know we have a real, complex or pointer type.
7187   // Now make sure the operand is a modifiable lvalue.
7188   if (CheckForModifiableLvalue(Op, OpLoc, S))
7189     return QualType();
7190   // In C++, a prefix increment is the same type as the operand. Otherwise
7191   // (in C or with postfix), the increment is the unqualified type of the
7192   // operand.
7193   if (IsPrefix && S.getLangOptions().CPlusPlus) {
7194     VK = VK_LValue;
7195     return ResType;
7196   } else {
7197     VK = VK_RValue;
7198     return ResType.getUnqualifiedType();
7199   }
7200 }
7201 
7202 
7203 /// getPrimaryDecl - Helper function for CheckAddressOfOperand().
7204 /// This routine allows us to typecheck complex/recursive expressions
7205 /// where the declaration is needed for type checking. We only need to
7206 /// handle cases when the expression references a function designator
7207 /// or is an lvalue. Here are some examples:
7208 ///  - &(x) => x
7209 ///  - &*****f => f for f a function designator.
7210 ///  - &s.xx => s
7211 ///  - &s.zz[1].yy -> s, if zz is an array
7212 ///  - *(x + 1) -> x, if x is an array
7213 ///  - &"123"[2] -> 0
7214 ///  - & __real__ x -> x
7215 static ValueDecl *getPrimaryDecl(Expr *E) {
7216   switch (E->getStmtClass()) {
7217   case Stmt::DeclRefExprClass:
7218     return cast<DeclRefExpr>(E)->getDecl();
7219   case Stmt::MemberExprClass:
7220     // If this is an arrow operator, the address is an offset from
7221     // the base's value, so the object the base refers to is
7222     // irrelevant.
7223     if (cast<MemberExpr>(E)->isArrow())
7224       return 0;
7225     // Otherwise, the expression refers to a part of the base
7226     return getPrimaryDecl(cast<MemberExpr>(E)->getBase());
7227   case Stmt::ArraySubscriptExprClass: {
7228     // FIXME: This code shouldn't be necessary!  We should catch the implicit
7229     // promotion of register arrays earlier.
7230     Expr* Base = cast<ArraySubscriptExpr>(E)->getBase();
7231     if (ImplicitCastExpr* ICE = dyn_cast<ImplicitCastExpr>(Base)) {
7232       if (ICE->getSubExpr()->getType()->isArrayType())
7233         return getPrimaryDecl(ICE->getSubExpr());
7234     }
7235     return 0;
7236   }
7237   case Stmt::UnaryOperatorClass: {
7238     UnaryOperator *UO = cast<UnaryOperator>(E);
7239 
7240     switch(UO->getOpcode()) {
7241     case UO_Real:
7242     case UO_Imag:
7243     case UO_Extension:
7244       return getPrimaryDecl(UO->getSubExpr());
7245     default:
7246       return 0;
7247     }
7248   }
7249   case Stmt::ParenExprClass:
7250     return getPrimaryDecl(cast<ParenExpr>(E)->getSubExpr());
7251   case Stmt::ImplicitCastExprClass:
7252     // If the result of an implicit cast is an l-value, we care about
7253     // the sub-expression; otherwise, the result here doesn't matter.
7254     return getPrimaryDecl(cast<ImplicitCastExpr>(E)->getSubExpr());
7255   default:
7256     return 0;
7257   }
7258 }
7259 
7260 namespace {
7261   enum {
7262     AO_Bit_Field = 0,
7263     AO_Vector_Element = 1,
7264     AO_Property_Expansion = 2,
7265     AO_Register_Variable = 3,
7266     AO_No_Error = 4
7267   };
7268 }
7269 /// \brief Diagnose invalid operand for address of operations.
7270 ///
7271 /// \param Type The type of operand which cannot have its address taken.
7272 static void diagnoseAddressOfInvalidType(Sema &S, SourceLocation Loc,
7273                                          Expr *E, unsigned Type) {
7274   S.Diag(Loc, diag::err_typecheck_address_of) << Type << E->getSourceRange();
7275 }
7276 
7277 /// CheckAddressOfOperand - The operand of & must be either a function
7278 /// designator or an lvalue designating an object. If it is an lvalue, the
7279 /// object cannot be declared with storage class register or be a bit field.
7280 /// Note: The usual conversions are *not* applied to the operand of the &
7281 /// operator (C99 6.3.2.1p[2-4]), and its result is never an lvalue.
7282 /// In C++, the operand might be an overloaded function name, in which case
7283 /// we allow the '&' but retain the overloaded-function type.
7284 static QualType CheckAddressOfOperand(Sema &S, ExprResult &OrigOp,
7285                                       SourceLocation OpLoc) {
7286   if (const BuiltinType *PTy = OrigOp.get()->getType()->getAsPlaceholderType()){
7287     if (PTy->getKind() == BuiltinType::Overload) {
7288       if (!isa<OverloadExpr>(OrigOp.get()->IgnoreParens())) {
7289         S.Diag(OpLoc, diag::err_typecheck_invalid_lvalue_addrof)
7290           << OrigOp.get()->getSourceRange();
7291         return QualType();
7292       }
7293 
7294       return S.Context.OverloadTy;
7295     }
7296 
7297     if (PTy->getKind() == BuiltinType::UnknownAny)
7298       return S.Context.UnknownAnyTy;
7299 
7300     if (PTy->getKind() == BuiltinType::BoundMember) {
7301       S.Diag(OpLoc, diag::err_invalid_form_pointer_member_function)
7302         << OrigOp.get()->getSourceRange();
7303       return QualType();
7304     }
7305 
7306     OrigOp = S.CheckPlaceholderExpr(OrigOp.take());
7307     if (OrigOp.isInvalid()) return QualType();
7308   }
7309 
7310   if (OrigOp.get()->isTypeDependent())
7311     return S.Context.DependentTy;
7312 
7313   assert(!OrigOp.get()->getType()->isPlaceholderType());
7314 
7315   // Make sure to ignore parentheses in subsequent checks
7316   Expr *op = OrigOp.get()->IgnoreParens();
7317 
7318   if (S.getLangOptions().C99) {
7319     // Implement C99-only parts of addressof rules.
7320     if (UnaryOperator* uOp = dyn_cast<UnaryOperator>(op)) {
7321       if (uOp->getOpcode() == UO_Deref)
7322         // Per C99 6.5.3.2, the address of a deref always returns a valid result
7323         // (assuming the deref expression is valid).
7324         return uOp->getSubExpr()->getType();
7325     }
7326     // Technically, there should be a check for array subscript
7327     // expressions here, but the result of one is always an lvalue anyway.
7328   }
7329   ValueDecl *dcl = getPrimaryDecl(op);
7330   Expr::LValueClassification lval = op->ClassifyLValue(S.Context);
7331   unsigned AddressOfError = AO_No_Error;
7332 
7333   if (lval == Expr::LV_ClassTemporary) {
7334     bool sfinae = S.isSFINAEContext();
7335     S.Diag(OpLoc, sfinae ? diag::err_typecheck_addrof_class_temporary
7336                          : diag::ext_typecheck_addrof_class_temporary)
7337       << op->getType() << op->getSourceRange();
7338     if (sfinae)
7339       return QualType();
7340   } else if (isa<ObjCSelectorExpr>(op)) {
7341     return S.Context.getPointerType(op->getType());
7342   } else if (lval == Expr::LV_MemberFunction) {
7343     // If it's an instance method, make a member pointer.
7344     // The expression must have exactly the form &A::foo.
7345 
7346     // If the underlying expression isn't a decl ref, give up.
7347     if (!isa<DeclRefExpr>(op)) {
7348       S.Diag(OpLoc, diag::err_invalid_form_pointer_member_function)
7349         << OrigOp.get()->getSourceRange();
7350       return QualType();
7351     }
7352     DeclRefExpr *DRE = cast<DeclRefExpr>(op);
7353     CXXMethodDecl *MD = cast<CXXMethodDecl>(DRE->getDecl());
7354 
7355     // The id-expression was parenthesized.
7356     if (OrigOp.get() != DRE) {
7357       S.Diag(OpLoc, diag::err_parens_pointer_member_function)
7358         << OrigOp.get()->getSourceRange();
7359 
7360     // The method was named without a qualifier.
7361     } else if (!DRE->getQualifier()) {
7362       S.Diag(OpLoc, diag::err_unqualified_pointer_member_function)
7363         << op->getSourceRange();
7364     }
7365 
7366     return S.Context.getMemberPointerType(op->getType(),
7367               S.Context.getTypeDeclType(MD->getParent()).getTypePtr());
7368   } else if (lval != Expr::LV_Valid && lval != Expr::LV_IncompleteVoidType) {
7369     // C99 6.5.3.2p1
7370     // The operand must be either an l-value or a function designator
7371     if (!op->getType()->isFunctionType()) {
7372       // Use a special diagnostic for loads from property references.
7373       if (isa<PseudoObjectExpr>(op)) {
7374         AddressOfError = AO_Property_Expansion;
7375       } else {
7376         // FIXME: emit more specific diag...
7377         S.Diag(OpLoc, diag::err_typecheck_invalid_lvalue_addrof)
7378           << op->getSourceRange();
7379         return QualType();
7380       }
7381     }
7382   } else if (op->getObjectKind() == OK_BitField) { // C99 6.5.3.2p1
7383     // The operand cannot be a bit-field
7384     AddressOfError = AO_Bit_Field;
7385   } else if (op->getObjectKind() == OK_VectorComponent) {
7386     // The operand cannot be an element of a vector
7387     AddressOfError = AO_Vector_Element;
7388   } else if (dcl) { // C99 6.5.3.2p1
7389     // We have an lvalue with a decl. Make sure the decl is not declared
7390     // with the register storage-class specifier.
7391     if (const VarDecl *vd = dyn_cast<VarDecl>(dcl)) {
7392       // in C++ it is not error to take address of a register
7393       // variable (c++03 7.1.1P3)
7394       if (vd->getStorageClass() == SC_Register &&
7395           !S.getLangOptions().CPlusPlus) {
7396         AddressOfError = AO_Register_Variable;
7397       }
7398     } else if (isa<FunctionTemplateDecl>(dcl)) {
7399       return S.Context.OverloadTy;
7400     } else if (isa<FieldDecl>(dcl) || isa<IndirectFieldDecl>(dcl)) {
7401       // Okay: we can take the address of a field.
7402       // Could be a pointer to member, though, if there is an explicit
7403       // scope qualifier for the class.
7404       if (isa<DeclRefExpr>(op) && cast<DeclRefExpr>(op)->getQualifier()) {
7405         DeclContext *Ctx = dcl->getDeclContext();
7406         if (Ctx && Ctx->isRecord()) {
7407           if (dcl->getType()->isReferenceType()) {
7408             S.Diag(OpLoc,
7409                    diag::err_cannot_form_pointer_to_member_of_reference_type)
7410               << dcl->getDeclName() << dcl->getType();
7411             return QualType();
7412           }
7413 
7414           while (cast<RecordDecl>(Ctx)->isAnonymousStructOrUnion())
7415             Ctx = Ctx->getParent();
7416           return S.Context.getMemberPointerType(op->getType(),
7417                 S.Context.getTypeDeclType(cast<RecordDecl>(Ctx)).getTypePtr());
7418         }
7419       }
7420     } else if (!isa<FunctionDecl>(dcl) && !isa<NonTypeTemplateParmDecl>(dcl))
7421       llvm_unreachable("Unknown/unexpected decl type");
7422   }
7423 
7424   if (AddressOfError != AO_No_Error) {
7425     diagnoseAddressOfInvalidType(S, OpLoc, op, AddressOfError);
7426     return QualType();
7427   }
7428 
7429   if (lval == Expr::LV_IncompleteVoidType) {
7430     // Taking the address of a void variable is technically illegal, but we
7431     // allow it in cases which are otherwise valid.
7432     // Example: "extern void x; void* y = &x;".
7433     S.Diag(OpLoc, diag::ext_typecheck_addrof_void) << op->getSourceRange();
7434   }
7435 
7436   // If the operand has type "type", the result has type "pointer to type".
7437   if (op->getType()->isObjCObjectType())
7438     return S.Context.getObjCObjectPointerType(op->getType());
7439   return S.Context.getPointerType(op->getType());
7440 }
7441 
7442 /// CheckIndirectionOperand - Type check unary indirection (prefix '*').
7443 static QualType CheckIndirectionOperand(Sema &S, Expr *Op, ExprValueKind &VK,
7444                                         SourceLocation OpLoc) {
7445   if (Op->isTypeDependent())
7446     return S.Context.DependentTy;
7447 
7448   ExprResult ConvResult = S.UsualUnaryConversions(Op);
7449   if (ConvResult.isInvalid())
7450     return QualType();
7451   Op = ConvResult.take();
7452   QualType OpTy = Op->getType();
7453   QualType Result;
7454 
7455   if (isa<CXXReinterpretCastExpr>(Op)) {
7456     QualType OpOrigType = Op->IgnoreParenCasts()->getType();
7457     S.CheckCompatibleReinterpretCast(OpOrigType, OpTy, /*IsDereference*/true,
7458                                      Op->getSourceRange());
7459   }
7460 
7461   // Note that per both C89 and C99, indirection is always legal, even if OpTy
7462   // is an incomplete type or void.  It would be possible to warn about
7463   // dereferencing a void pointer, but it's completely well-defined, and such a
7464   // warning is unlikely to catch any mistakes.
7465   if (const PointerType *PT = OpTy->getAs<PointerType>())
7466     Result = PT->getPointeeType();
7467   else if (const ObjCObjectPointerType *OPT =
7468              OpTy->getAs<ObjCObjectPointerType>())
7469     Result = OPT->getPointeeType();
7470   else {
7471     ExprResult PR = S.CheckPlaceholderExpr(Op);
7472     if (PR.isInvalid()) return QualType();
7473     if (PR.take() != Op)
7474       return CheckIndirectionOperand(S, PR.take(), VK, OpLoc);
7475   }
7476 
7477   if (Result.isNull()) {
7478     S.Diag(OpLoc, diag::err_typecheck_indirection_requires_pointer)
7479       << OpTy << Op->getSourceRange();
7480     return QualType();
7481   }
7482 
7483   // Dereferences are usually l-values...
7484   VK = VK_LValue;
7485 
7486   // ...except that certain expressions are never l-values in C.
7487   if (!S.getLangOptions().CPlusPlus && Result.isCForbiddenLValueType())
7488     VK = VK_RValue;
7489 
7490   return Result;
7491 }
7492 
7493 static inline BinaryOperatorKind ConvertTokenKindToBinaryOpcode(
7494   tok::TokenKind Kind) {
7495   BinaryOperatorKind Opc;
7496   switch (Kind) {
7497   default: llvm_unreachable("Unknown binop!");
7498   case tok::periodstar:           Opc = BO_PtrMemD; break;
7499   case tok::arrowstar:            Opc = BO_PtrMemI; break;
7500   case tok::star:                 Opc = BO_Mul; break;
7501   case tok::slash:                Opc = BO_Div; break;
7502   case tok::percent:              Opc = BO_Rem; break;
7503   case tok::plus:                 Opc = BO_Add; break;
7504   case tok::minus:                Opc = BO_Sub; break;
7505   case tok::lessless:             Opc = BO_Shl; break;
7506   case tok::greatergreater:       Opc = BO_Shr; break;
7507   case tok::lessequal:            Opc = BO_LE; break;
7508   case tok::less:                 Opc = BO_LT; break;
7509   case tok::greaterequal:         Opc = BO_GE; break;
7510   case tok::greater:              Opc = BO_GT; break;
7511   case tok::exclaimequal:         Opc = BO_NE; break;
7512   case tok::equalequal:           Opc = BO_EQ; break;
7513   case tok::amp:                  Opc = BO_And; break;
7514   case tok::caret:                Opc = BO_Xor; break;
7515   case tok::pipe:                 Opc = BO_Or; break;
7516   case tok::ampamp:               Opc = BO_LAnd; break;
7517   case tok::pipepipe:             Opc = BO_LOr; break;
7518   case tok::equal:                Opc = BO_Assign; break;
7519   case tok::starequal:            Opc = BO_MulAssign; break;
7520   case tok::slashequal:           Opc = BO_DivAssign; break;
7521   case tok::percentequal:         Opc = BO_RemAssign; break;
7522   case tok::plusequal:            Opc = BO_AddAssign; break;
7523   case tok::minusequal:           Opc = BO_SubAssign; break;
7524   case tok::lesslessequal:        Opc = BO_ShlAssign; break;
7525   case tok::greatergreaterequal:  Opc = BO_ShrAssign; break;
7526   case tok::ampequal:             Opc = BO_AndAssign; break;
7527   case tok::caretequal:           Opc = BO_XorAssign; break;
7528   case tok::pipeequal:            Opc = BO_OrAssign; break;
7529   case tok::comma:                Opc = BO_Comma; break;
7530   }
7531   return Opc;
7532 }
7533 
7534 static inline UnaryOperatorKind ConvertTokenKindToUnaryOpcode(
7535   tok::TokenKind Kind) {
7536   UnaryOperatorKind Opc;
7537   switch (Kind) {
7538   default: llvm_unreachable("Unknown unary op!");
7539   case tok::plusplus:     Opc = UO_PreInc; break;
7540   case tok::minusminus:   Opc = UO_PreDec; break;
7541   case tok::amp:          Opc = UO_AddrOf; break;
7542   case tok::star:         Opc = UO_Deref; break;
7543   case tok::plus:         Opc = UO_Plus; break;
7544   case tok::minus:        Opc = UO_Minus; break;
7545   case tok::tilde:        Opc = UO_Not; break;
7546   case tok::exclaim:      Opc = UO_LNot; break;
7547   case tok::kw___real:    Opc = UO_Real; break;
7548   case tok::kw___imag:    Opc = UO_Imag; break;
7549   case tok::kw___extension__: Opc = UO_Extension; break;
7550   }
7551   return Opc;
7552 }
7553 
7554 /// DiagnoseSelfAssignment - Emits a warning if a value is assigned to itself.
7555 /// This warning is only emitted for builtin assignment operations. It is also
7556 /// suppressed in the event of macro expansions.
7557 static void DiagnoseSelfAssignment(Sema &S, Expr *LHSExpr, Expr *RHSExpr,
7558                                    SourceLocation OpLoc) {
7559   if (!S.ActiveTemplateInstantiations.empty())
7560     return;
7561   if (OpLoc.isInvalid() || OpLoc.isMacroID())
7562     return;
7563   LHSExpr = LHSExpr->IgnoreParenImpCasts();
7564   RHSExpr = RHSExpr->IgnoreParenImpCasts();
7565   const DeclRefExpr *LHSDeclRef = dyn_cast<DeclRefExpr>(LHSExpr);
7566   const DeclRefExpr *RHSDeclRef = dyn_cast<DeclRefExpr>(RHSExpr);
7567   if (!LHSDeclRef || !RHSDeclRef ||
7568       LHSDeclRef->getLocation().isMacroID() ||
7569       RHSDeclRef->getLocation().isMacroID())
7570     return;
7571   const ValueDecl *LHSDecl =
7572     cast<ValueDecl>(LHSDeclRef->getDecl()->getCanonicalDecl());
7573   const ValueDecl *RHSDecl =
7574     cast<ValueDecl>(RHSDeclRef->getDecl()->getCanonicalDecl());
7575   if (LHSDecl != RHSDecl)
7576     return;
7577   if (LHSDecl->getType().isVolatileQualified())
7578     return;
7579   if (const ReferenceType *RefTy = LHSDecl->getType()->getAs<ReferenceType>())
7580     if (RefTy->getPointeeType().isVolatileQualified())
7581       return;
7582 
7583   S.Diag(OpLoc, diag::warn_self_assignment)
7584       << LHSDeclRef->getType()
7585       << LHSExpr->getSourceRange() << RHSExpr->getSourceRange();
7586 }
7587 
7588 /// CreateBuiltinBinOp - Creates a new built-in binary operation with
7589 /// operator @p Opc at location @c TokLoc. This routine only supports
7590 /// built-in operations; ActOnBinOp handles overloaded operators.
7591 ExprResult Sema::CreateBuiltinBinOp(SourceLocation OpLoc,
7592                                     BinaryOperatorKind Opc,
7593                                     Expr *LHSExpr, Expr *RHSExpr) {
7594   ExprResult LHS = Owned(LHSExpr), RHS = Owned(RHSExpr);
7595   QualType ResultTy;     // Result type of the binary operator.
7596   // The following two variables are used for compound assignment operators
7597   QualType CompLHSTy;    // Type of LHS after promotions for computation
7598   QualType CompResultTy; // Type of computation result
7599   ExprValueKind VK = VK_RValue;
7600   ExprObjectKind OK = OK_Ordinary;
7601 
7602   switch (Opc) {
7603   case BO_Assign:
7604     ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, QualType());
7605     if (getLangOptions().CPlusPlus &&
7606         LHS.get()->getObjectKind() != OK_ObjCProperty) {
7607       VK = LHS.get()->getValueKind();
7608       OK = LHS.get()->getObjectKind();
7609     }
7610     if (!ResultTy.isNull())
7611       DiagnoseSelfAssignment(*this, LHS.get(), RHS.get(), OpLoc);
7612     break;
7613   case BO_PtrMemD:
7614   case BO_PtrMemI:
7615     ResultTy = CheckPointerToMemberOperands(LHS, RHS, VK, OpLoc,
7616                                             Opc == BO_PtrMemI);
7617     break;
7618   case BO_Mul:
7619   case BO_Div:
7620     ResultTy = CheckMultiplyDivideOperands(LHS, RHS, OpLoc, false,
7621                                            Opc == BO_Div);
7622     break;
7623   case BO_Rem:
7624     ResultTy = CheckRemainderOperands(LHS, RHS, OpLoc);
7625     break;
7626   case BO_Add:
7627     ResultTy = CheckAdditionOperands(LHS, RHS, OpLoc);
7628     break;
7629   case BO_Sub:
7630     ResultTy = CheckSubtractionOperands(LHS, RHS, OpLoc);
7631     break;
7632   case BO_Shl:
7633   case BO_Shr:
7634     ResultTy = CheckShiftOperands(LHS, RHS, OpLoc, Opc);
7635     break;
7636   case BO_LE:
7637   case BO_LT:
7638   case BO_GE:
7639   case BO_GT:
7640     ResultTy = CheckCompareOperands(LHS, RHS, OpLoc, Opc, true);
7641     break;
7642   case BO_EQ:
7643   case BO_NE:
7644     ResultTy = CheckCompareOperands(LHS, RHS, OpLoc, Opc, false);
7645     break;
7646   case BO_And:
7647   case BO_Xor:
7648   case BO_Or:
7649     ResultTy = CheckBitwiseOperands(LHS, RHS, OpLoc);
7650     break;
7651   case BO_LAnd:
7652   case BO_LOr:
7653     ResultTy = CheckLogicalOperands(LHS, RHS, OpLoc, Opc);
7654     break;
7655   case BO_MulAssign:
7656   case BO_DivAssign:
7657     CompResultTy = CheckMultiplyDivideOperands(LHS, RHS, OpLoc, true,
7658                                                Opc == BO_DivAssign);
7659     CompLHSTy = CompResultTy;
7660     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7661       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7662     break;
7663   case BO_RemAssign:
7664     CompResultTy = CheckRemainderOperands(LHS, RHS, OpLoc, true);
7665     CompLHSTy = CompResultTy;
7666     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7667       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7668     break;
7669   case BO_AddAssign:
7670     CompResultTy = CheckAdditionOperands(LHS, RHS, OpLoc, &CompLHSTy);
7671     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7672       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7673     break;
7674   case BO_SubAssign:
7675     CompResultTy = CheckSubtractionOperands(LHS, RHS, OpLoc, &CompLHSTy);
7676     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7677       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7678     break;
7679   case BO_ShlAssign:
7680   case BO_ShrAssign:
7681     CompResultTy = CheckShiftOperands(LHS, RHS, OpLoc, Opc, true);
7682     CompLHSTy = CompResultTy;
7683     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7684       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7685     break;
7686   case BO_AndAssign:
7687   case BO_XorAssign:
7688   case BO_OrAssign:
7689     CompResultTy = CheckBitwiseOperands(LHS, RHS, OpLoc, true);
7690     CompLHSTy = CompResultTy;
7691     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7692       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7693     break;
7694   case BO_Comma:
7695     ResultTy = CheckCommaOperands(*this, LHS, RHS, OpLoc);
7696     if (getLangOptions().CPlusPlus && !RHS.isInvalid()) {
7697       VK = RHS.get()->getValueKind();
7698       OK = RHS.get()->getObjectKind();
7699     }
7700     break;
7701   }
7702   if (ResultTy.isNull() || LHS.isInvalid() || RHS.isInvalid())
7703     return ExprError();
7704 
7705   // Check for array bounds violations for both sides of the BinaryOperator
7706   CheckArrayAccess(LHS.get());
7707   CheckArrayAccess(RHS.get());
7708 
7709   if (CompResultTy.isNull())
7710     return Owned(new (Context) BinaryOperator(LHS.take(), RHS.take(), Opc,
7711                                               ResultTy, VK, OK, OpLoc));
7712   if (getLangOptions().CPlusPlus && LHS.get()->getObjectKind() !=
7713       OK_ObjCProperty) {
7714     VK = VK_LValue;
7715     OK = LHS.get()->getObjectKind();
7716   }
7717   return Owned(new (Context) CompoundAssignOperator(LHS.take(), RHS.take(), Opc,
7718                                                     ResultTy, VK, OK, CompLHSTy,
7719                                                     CompResultTy, OpLoc));
7720 }
7721 
7722 /// DiagnoseBitwisePrecedence - Emit a warning when bitwise and comparison
7723 /// operators are mixed in a way that suggests that the programmer forgot that
7724 /// comparison operators have higher precedence. The most typical example of
7725 /// such code is "flags & 0x0020 != 0", which is equivalent to "flags & 1".
7726 static void DiagnoseBitwisePrecedence(Sema &Self, BinaryOperatorKind Opc,
7727                                       SourceLocation OpLoc, Expr *LHSExpr,
7728                                       Expr *RHSExpr) {
7729   typedef BinaryOperator BinOp;
7730   BinOp::Opcode LHSopc = static_cast<BinOp::Opcode>(-1),
7731                 RHSopc = static_cast<BinOp::Opcode>(-1);
7732   if (BinOp *BO = dyn_cast<BinOp>(LHSExpr))
7733     LHSopc = BO->getOpcode();
7734   if (BinOp *BO = dyn_cast<BinOp>(RHSExpr))
7735     RHSopc = BO->getOpcode();
7736 
7737   // Subs are not binary operators.
7738   if (LHSopc == -1 && RHSopc == -1)
7739     return;
7740 
7741   // Bitwise operations are sometimes used as eager logical ops.
7742   // Don't diagnose this.
7743   if ((BinOp::isComparisonOp(LHSopc) || BinOp::isBitwiseOp(LHSopc)) &&
7744       (BinOp::isComparisonOp(RHSopc) || BinOp::isBitwiseOp(RHSopc)))
7745     return;
7746 
7747   bool isLeftComp = BinOp::isComparisonOp(LHSopc);
7748   bool isRightComp = BinOp::isComparisonOp(RHSopc);
7749   if (!isLeftComp && !isRightComp) return;
7750 
7751   SourceRange DiagRange = isLeftComp ? SourceRange(LHSExpr->getLocStart(),
7752                                                    OpLoc)
7753                                      : SourceRange(OpLoc, RHSExpr->getLocEnd());
7754   std::string OpStr = isLeftComp ? BinOp::getOpcodeStr(LHSopc)
7755                                  : BinOp::getOpcodeStr(RHSopc);
7756   SourceRange ParensRange = isLeftComp ?
7757       SourceRange(cast<BinOp>(LHSExpr)->getRHS()->getLocStart(),
7758                   RHSExpr->getLocEnd())
7759     : SourceRange(LHSExpr->getLocStart(),
7760                   cast<BinOp>(RHSExpr)->getLHS()->getLocStart());
7761 
7762   Self.Diag(OpLoc, diag::warn_precedence_bitwise_rel)
7763     << DiagRange << BinOp::getOpcodeStr(Opc) << OpStr;
7764   SuggestParentheses(Self, OpLoc,
7765     Self.PDiag(diag::note_precedence_bitwise_silence) << OpStr,
7766     RHSExpr->getSourceRange());
7767   SuggestParentheses(Self, OpLoc,
7768     Self.PDiag(diag::note_precedence_bitwise_first) << BinOp::getOpcodeStr(Opc),
7769     ParensRange);
7770 }
7771 
7772 /// \brief It accepts a '&' expr that is inside a '|' one.
7773 /// Emit a diagnostic together with a fixit hint that wraps the '&' expression
7774 /// in parentheses.
7775 static void
7776 EmitDiagnosticForBitwiseAndInBitwiseOr(Sema &Self, SourceLocation OpLoc,
7777                                        BinaryOperator *Bop) {
7778   assert(Bop->getOpcode() == BO_And);
7779   Self.Diag(Bop->getOperatorLoc(), diag::warn_bitwise_and_in_bitwise_or)
7780       << Bop->getSourceRange() << OpLoc;
7781   SuggestParentheses(Self, Bop->getOperatorLoc(),
7782     Self.PDiag(diag::note_bitwise_and_in_bitwise_or_silence),
7783     Bop->getSourceRange());
7784 }
7785 
7786 /// \brief It accepts a '&&' expr that is inside a '||' one.
7787 /// Emit a diagnostic together with a fixit hint that wraps the '&&' expression
7788 /// in parentheses.
7789 static void
7790 EmitDiagnosticForLogicalAndInLogicalOr(Sema &Self, SourceLocation OpLoc,
7791                                        BinaryOperator *Bop) {
7792   assert(Bop->getOpcode() == BO_LAnd);
7793   Self.Diag(Bop->getOperatorLoc(), diag::warn_logical_and_in_logical_or)
7794       << Bop->getSourceRange() << OpLoc;
7795   SuggestParentheses(Self, Bop->getOperatorLoc(),
7796     Self.PDiag(diag::note_logical_and_in_logical_or_silence),
7797     Bop->getSourceRange());
7798 }
7799 
7800 /// \brief Returns true if the given expression can be evaluated as a constant
7801 /// 'true'.
7802 static bool EvaluatesAsTrue(Sema &S, Expr *E) {
7803   bool Res;
7804   return E->EvaluateAsBooleanCondition(Res, S.getASTContext()) && Res;
7805 }
7806 
7807 /// \brief Returns true if the given expression can be evaluated as a constant
7808 /// 'false'.
7809 static bool EvaluatesAsFalse(Sema &S, Expr *E) {
7810   bool Res;
7811   return E->EvaluateAsBooleanCondition(Res, S.getASTContext()) && !Res;
7812 }
7813 
7814 /// \brief Look for '&&' in the left hand of a '||' expr.
7815 static void DiagnoseLogicalAndInLogicalOrLHS(Sema &S, SourceLocation OpLoc,
7816                                              Expr *LHSExpr, Expr *RHSExpr) {
7817   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(LHSExpr)) {
7818     if (Bop->getOpcode() == BO_LAnd) {
7819       // If it's "a && b || 0" don't warn since the precedence doesn't matter.
7820       if (EvaluatesAsFalse(S, RHSExpr))
7821         return;
7822       // If it's "1 && a || b" don't warn since the precedence doesn't matter.
7823       if (!EvaluatesAsTrue(S, Bop->getLHS()))
7824         return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, Bop);
7825     } else if (Bop->getOpcode() == BO_LOr) {
7826       if (BinaryOperator *RBop = dyn_cast<BinaryOperator>(Bop->getRHS())) {
7827         // If it's "a || b && 1 || c" we didn't warn earlier for
7828         // "a || b && 1", but warn now.
7829         if (RBop->getOpcode() == BO_LAnd && EvaluatesAsTrue(S, RBop->getRHS()))
7830           return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, RBop);
7831       }
7832     }
7833   }
7834 }
7835 
7836 /// \brief Look for '&&' in the right hand of a '||' expr.
7837 static void DiagnoseLogicalAndInLogicalOrRHS(Sema &S, SourceLocation OpLoc,
7838                                              Expr *LHSExpr, Expr *RHSExpr) {
7839   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(RHSExpr)) {
7840     if (Bop->getOpcode() == BO_LAnd) {
7841       // If it's "0 || a && b" don't warn since the precedence doesn't matter.
7842       if (EvaluatesAsFalse(S, LHSExpr))
7843         return;
7844       // If it's "a || b && 1" don't warn since the precedence doesn't matter.
7845       if (!EvaluatesAsTrue(S, Bop->getRHS()))
7846         return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, Bop);
7847     }
7848   }
7849 }
7850 
7851 /// \brief Look for '&' in the left or right hand of a '|' expr.
7852 static void DiagnoseBitwiseAndInBitwiseOr(Sema &S, SourceLocation OpLoc,
7853                                              Expr *OrArg) {
7854   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(OrArg)) {
7855     if (Bop->getOpcode() == BO_And)
7856       return EmitDiagnosticForBitwiseAndInBitwiseOr(S, OpLoc, Bop);
7857   }
7858 }
7859 
7860 /// DiagnoseBinOpPrecedence - Emit warnings for expressions with tricky
7861 /// precedence.
7862 static void DiagnoseBinOpPrecedence(Sema &Self, BinaryOperatorKind Opc,
7863                                     SourceLocation OpLoc, Expr *LHSExpr,
7864                                     Expr *RHSExpr){
7865   // Diagnose "arg1 'bitwise' arg2 'eq' arg3".
7866   if (BinaryOperator::isBitwiseOp(Opc))
7867     DiagnoseBitwisePrecedence(Self, Opc, OpLoc, LHSExpr, RHSExpr);
7868 
7869   // Diagnose "arg1 & arg2 | arg3"
7870   if (Opc == BO_Or && !OpLoc.isMacroID()/* Don't warn in macros. */) {
7871     DiagnoseBitwiseAndInBitwiseOr(Self, OpLoc, LHSExpr);
7872     DiagnoseBitwiseAndInBitwiseOr(Self, OpLoc, RHSExpr);
7873   }
7874 
7875   // Warn about arg1 || arg2 && arg3, as GCC 4.3+ does.
7876   // We don't warn for 'assert(a || b && "bad")' since this is safe.
7877   if (Opc == BO_LOr && !OpLoc.isMacroID()/* Don't warn in macros. */) {
7878     DiagnoseLogicalAndInLogicalOrLHS(Self, OpLoc, LHSExpr, RHSExpr);
7879     DiagnoseLogicalAndInLogicalOrRHS(Self, OpLoc, LHSExpr, RHSExpr);
7880   }
7881 }
7882 
7883 // Binary Operators.  'Tok' is the token for the operator.
7884 ExprResult Sema::ActOnBinOp(Scope *S, SourceLocation TokLoc,
7885                             tok::TokenKind Kind,
7886                             Expr *LHSExpr, Expr *RHSExpr) {
7887   BinaryOperatorKind Opc = ConvertTokenKindToBinaryOpcode(Kind);
7888   assert((LHSExpr != 0) && "ActOnBinOp(): missing left expression");
7889   assert((RHSExpr != 0) && "ActOnBinOp(): missing right expression");
7890 
7891   // Emit warnings for tricky precedence issues, e.g. "bitfield & 0x4 == 0"
7892   DiagnoseBinOpPrecedence(*this, Opc, TokLoc, LHSExpr, RHSExpr);
7893 
7894   return BuildBinOp(S, TokLoc, Opc, LHSExpr, RHSExpr);
7895 }
7896 
7897 /// Build an overloaded binary operator expression in the given scope.
7898 static ExprResult BuildOverloadedBinOp(Sema &S, Scope *Sc, SourceLocation OpLoc,
7899                                        BinaryOperatorKind Opc,
7900                                        Expr *LHS, Expr *RHS) {
7901   // Find all of the overloaded operators visible from this
7902   // point. We perform both an operator-name lookup from the local
7903   // scope and an argument-dependent lookup based on the types of
7904   // the arguments.
7905   UnresolvedSet<16> Functions;
7906   OverloadedOperatorKind OverOp
7907     = BinaryOperator::getOverloadedOperator(Opc);
7908   if (Sc && OverOp != OO_None)
7909     S.LookupOverloadedOperatorName(OverOp, Sc, LHS->getType(),
7910                                    RHS->getType(), Functions);
7911 
7912   // Build the (potentially-overloaded, potentially-dependent)
7913   // binary operation.
7914   return S.CreateOverloadedBinOp(OpLoc, Opc, Functions, LHS, RHS);
7915 }
7916 
7917 ExprResult Sema::BuildBinOp(Scope *S, SourceLocation OpLoc,
7918                             BinaryOperatorKind Opc,
7919                             Expr *LHSExpr, Expr *RHSExpr) {
7920   // We want to end up calling one of checkPseudoObjectAssignment
7921   // (if the LHS is a pseudo-object), BuildOverloadedBinOp (if
7922   // both expressions are overloadable or either is type-dependent),
7923   // or CreateBuiltinBinOp (in any other case).  We also want to get
7924   // any placeholder types out of the way.
7925 
7926   // Handle pseudo-objects in the LHS.
7927   if (const BuiltinType *pty = LHSExpr->getType()->getAsPlaceholderType()) {
7928     // Assignments with a pseudo-object l-value need special analysis.
7929     if (pty->getKind() == BuiltinType::PseudoObject &&
7930         BinaryOperator::isAssignmentOp(Opc))
7931       return checkPseudoObjectAssignment(S, OpLoc, Opc, LHSExpr, RHSExpr);
7932 
7933     // Don't resolve overloads if the other type is overloadable.
7934     if (pty->getKind() == BuiltinType::Overload) {
7935       // We can't actually test that if we still have a placeholder,
7936       // though.  Fortunately, none of the exceptions we see in that
7937       // code below are valid when the LHS is an overload set.  Note
7938       // that an overload set can be dependently-typed, but it never
7939       // instantiates to having an overloadable type.
7940       ExprResult resolvedRHS = CheckPlaceholderExpr(RHSExpr);
7941       if (resolvedRHS.isInvalid()) return ExprError();
7942       RHSExpr = resolvedRHS.take();
7943 
7944       if (RHSExpr->isTypeDependent() ||
7945           RHSExpr->getType()->isOverloadableType())
7946         return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7947     }
7948 
7949     ExprResult LHS = CheckPlaceholderExpr(LHSExpr);
7950     if (LHS.isInvalid()) return ExprError();
7951     LHSExpr = LHS.take();
7952   }
7953 
7954   // Handle pseudo-objects in the RHS.
7955   if (const BuiltinType *pty = RHSExpr->getType()->getAsPlaceholderType()) {
7956     // An overload in the RHS can potentially be resolved by the type
7957     // being assigned to.
7958     if (Opc == BO_Assign && pty->getKind() == BuiltinType::Overload) {
7959       if (LHSExpr->isTypeDependent() || RHSExpr->isTypeDependent())
7960         return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7961 
7962       if (LHSExpr->getType()->isOverloadableType())
7963         return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7964 
7965       return CreateBuiltinBinOp(OpLoc, Opc, LHSExpr, RHSExpr);
7966     }
7967 
7968     // Don't resolve overloads if the other type is overloadable.
7969     if (pty->getKind() == BuiltinType::Overload &&
7970         LHSExpr->getType()->isOverloadableType())
7971       return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7972 
7973     ExprResult resolvedRHS = CheckPlaceholderExpr(RHSExpr);
7974     if (!resolvedRHS.isUsable()) return ExprError();
7975     RHSExpr = resolvedRHS.take();
7976   }
7977 
7978   if (getLangOptions().CPlusPlus) {
7979     // If either expression is type-dependent, always build an
7980     // overloaded op.
7981     if (LHSExpr->isTypeDependent() || RHSExpr->isTypeDependent())
7982       return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7983 
7984     // Otherwise, build an overloaded op if either expression has an
7985     // overloadable type.
7986     if (LHSExpr->getType()->isOverloadableType() ||
7987         RHSExpr->getType()->isOverloadableType())
7988       return BuildOverloadedBinOp(*this, S, OpLoc, Opc, LHSExpr, RHSExpr);
7989   }
7990 
7991   // Build a built-in binary operation.
7992   return CreateBuiltinBinOp(OpLoc, Opc, LHSExpr, RHSExpr);
7993 }
7994 
7995 ExprResult Sema::CreateBuiltinUnaryOp(SourceLocation OpLoc,
7996                                       UnaryOperatorKind Opc,
7997                                       Expr *InputExpr) {
7998   ExprResult Input = Owned(InputExpr);
7999   ExprValueKind VK = VK_RValue;
8000   ExprObjectKind OK = OK_Ordinary;
8001   QualType resultType;
8002   switch (Opc) {
8003   case UO_PreInc:
8004   case UO_PreDec:
8005   case UO_PostInc:
8006   case UO_PostDec:
8007     resultType = CheckIncrementDecrementOperand(*this, Input.get(), VK, OpLoc,
8008                                                 Opc == UO_PreInc ||
8009                                                 Opc == UO_PostInc,
8010                                                 Opc == UO_PreInc ||
8011                                                 Opc == UO_PreDec);
8012     break;
8013   case UO_AddrOf:
8014     resultType = CheckAddressOfOperand(*this, Input, OpLoc);
8015     break;
8016   case UO_Deref: {
8017     Input = DefaultFunctionArrayLvalueConversion(Input.take());
8018     resultType = CheckIndirectionOperand(*this, Input.get(), VK, OpLoc);
8019     break;
8020   }
8021   case UO_Plus:
8022   case UO_Minus:
8023     Input = UsualUnaryConversions(Input.take());
8024     if (Input.isInvalid()) return ExprError();
8025     resultType = Input.get()->getType();
8026     if (resultType->isDependentType())
8027       break;
8028     if (resultType->isArithmeticType() || // C99 6.5.3.3p1
8029         resultType->isVectorType())
8030       break;
8031     else if (getLangOptions().CPlusPlus && // C++ [expr.unary.op]p6-7
8032              resultType->isEnumeralType())
8033       break;
8034     else if (getLangOptions().CPlusPlus && // C++ [expr.unary.op]p6
8035              Opc == UO_Plus &&
8036              resultType->isPointerType())
8037       break;
8038 
8039     return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8040       << resultType << Input.get()->getSourceRange());
8041 
8042   case UO_Not: // bitwise complement
8043     Input = UsualUnaryConversions(Input.take());
8044     if (Input.isInvalid()) return ExprError();
8045     resultType = Input.get()->getType();
8046     if (resultType->isDependentType())
8047       break;
8048     // C99 6.5.3.3p1. We allow complex int and float as a GCC extension.
8049     if (resultType->isComplexType() || resultType->isComplexIntegerType())
8050       // C99 does not support '~' for complex conjugation.
8051       Diag(OpLoc, diag::ext_integer_complement_complex)
8052         << resultType << Input.get()->getSourceRange();
8053     else if (resultType->hasIntegerRepresentation())
8054       break;
8055     else {
8056       return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8057         << resultType << Input.get()->getSourceRange());
8058     }
8059     break;
8060 
8061   case UO_LNot: // logical negation
8062     // Unlike +/-/~, integer promotions aren't done here (C99 6.5.3.3p5).
8063     Input = DefaultFunctionArrayLvalueConversion(Input.take());
8064     if (Input.isInvalid()) return ExprError();
8065     resultType = Input.get()->getType();
8066 
8067     // Though we still have to promote half FP to float...
8068     if (resultType->isHalfType()) {
8069       Input = ImpCastExprToType(Input.take(), Context.FloatTy, CK_FloatingCast).take();
8070       resultType = Context.FloatTy;
8071     }
8072 
8073     if (resultType->isDependentType())
8074       break;
8075     if (resultType->isScalarType()) {
8076       // C99 6.5.3.3p1: ok, fallthrough;
8077       if (Context.getLangOptions().CPlusPlus) {
8078         // C++03 [expr.unary.op]p8, C++0x [expr.unary.op]p9:
8079         // operand contextually converted to bool.
8080         Input = ImpCastExprToType(Input.take(), Context.BoolTy,
8081                                   ScalarTypeToBooleanCastKind(resultType));
8082       }
8083     } else if (resultType->isExtVectorType()) {
8084       // Vector logical not returns the signed variant of the operand type.
8085       resultType = GetSignedVectorType(resultType);
8086       break;
8087     } else {
8088       return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8089         << resultType << Input.get()->getSourceRange());
8090     }
8091 
8092     // LNot always has type int. C99 6.5.3.3p5.
8093     // In C++, it's bool. C++ 5.3.1p8
8094     resultType = Context.getLogicalOperationType();
8095     break;
8096   case UO_Real:
8097   case UO_Imag:
8098     resultType = CheckRealImagOperand(*this, Input, OpLoc, Opc == UO_Real);
8099     // _Real maps ordinary l-values into ordinary l-values. _Imag maps ordinary
8100     // complex l-values to ordinary l-values and all other values to r-values.
8101     if (Input.isInvalid()) return ExprError();
8102     if (Opc == UO_Real || Input.get()->getType()->isAnyComplexType()) {
8103       if (Input.get()->getValueKind() != VK_RValue &&
8104           Input.get()->getObjectKind() == OK_Ordinary)
8105         VK = Input.get()->getValueKind();
8106     } else if (!getLangOptions().CPlusPlus) {
8107       // In C, a volatile scalar is read by __imag. In C++, it is not.
8108       Input = DefaultLvalueConversion(Input.take());
8109     }
8110     break;
8111   case UO_Extension:
8112     resultType = Input.get()->getType();
8113     VK = Input.get()->getValueKind();
8114     OK = Input.get()->getObjectKind();
8115     break;
8116   }
8117   if (resultType.isNull() || Input.isInvalid())
8118     return ExprError();
8119 
8120   // Check for array bounds violations in the operand of the UnaryOperator,
8121   // except for the '*' and '&' operators that have to be handled specially
8122   // by CheckArrayAccess (as there are special cases like &array[arraysize]
8123   // that are explicitly defined as valid by the standard).
8124   if (Opc != UO_AddrOf && Opc != UO_Deref)
8125     CheckArrayAccess(Input.get());
8126 
8127   return Owned(new (Context) UnaryOperator(Input.take(), Opc, resultType,
8128                                            VK, OK, OpLoc));
8129 }
8130 
8131 /// \brief Determine whether the given expression is a qualified member
8132 /// access expression, of a form that could be turned into a pointer to member
8133 /// with the address-of operator.
8134 static bool isQualifiedMemberAccess(Expr *E) {
8135   if (DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(E)) {
8136     if (!DRE->getQualifier())
8137       return false;
8138 
8139     ValueDecl *VD = DRE->getDecl();
8140     if (!VD->isCXXClassMember())
8141       return false;
8142 
8143     if (isa<FieldDecl>(VD) || isa<IndirectFieldDecl>(VD))
8144       return true;
8145     if (CXXMethodDecl *Method = dyn_cast<CXXMethodDecl>(VD))
8146       return Method->isInstance();
8147 
8148     return false;
8149   }
8150 
8151   if (UnresolvedLookupExpr *ULE = dyn_cast<UnresolvedLookupExpr>(E)) {
8152     if (!ULE->getQualifier())
8153       return false;
8154 
8155     for (UnresolvedLookupExpr::decls_iterator D = ULE->decls_begin(),
8156                                            DEnd = ULE->decls_end();
8157          D != DEnd; ++D) {
8158       if (CXXMethodDecl *Method = dyn_cast<CXXMethodDecl>(*D)) {
8159         if (Method->isInstance())
8160           return true;
8161       } else {
8162         // Overload set does not contain methods.
8163         break;
8164       }
8165     }
8166 
8167     return false;
8168   }
8169 
8170   return false;
8171 }
8172 
8173 ExprResult Sema::BuildUnaryOp(Scope *S, SourceLocation OpLoc,
8174                               UnaryOperatorKind Opc, Expr *Input) {
8175   // First things first: handle placeholders so that the
8176   // overloaded-operator check considers the right type.
8177   if (const BuiltinType *pty = Input->getType()->getAsPlaceholderType()) {
8178     // Increment and decrement of pseudo-object references.
8179     if (pty->getKind() == BuiltinType::PseudoObject &&
8180         UnaryOperator::isIncrementDecrementOp(Opc))
8181       return checkPseudoObjectIncDec(S, OpLoc, Opc, Input);
8182 
8183     // extension is always a builtin operator.
8184     if (Opc == UO_Extension)
8185       return CreateBuiltinUnaryOp(OpLoc, Opc, Input);
8186 
8187     // & gets special logic for several kinds of placeholder.
8188     // The builtin code knows what to do.
8189     if (Opc == UO_AddrOf &&
8190         (pty->getKind() == BuiltinType::Overload ||
8191          pty->getKind() == BuiltinType::UnknownAny ||
8192          pty->getKind() == BuiltinType::BoundMember))
8193       return CreateBuiltinUnaryOp(OpLoc, Opc, Input);
8194 
8195     // Anything else needs to be handled now.
8196     ExprResult Result = CheckPlaceholderExpr(Input);
8197     if (Result.isInvalid()) return ExprError();
8198     Input = Result.take();
8199   }
8200 
8201   if (getLangOptions().CPlusPlus && Input->getType()->isOverloadableType() &&
8202       UnaryOperator::getOverloadedOperator(Opc) != OO_None &&
8203       !(Opc == UO_AddrOf && isQualifiedMemberAccess(Input))) {
8204     // Find all of the overloaded operators visible from this
8205     // point. We perform both an operator-name lookup from the local
8206     // scope and an argument-dependent lookup based on the types of
8207     // the arguments.
8208     UnresolvedSet<16> Functions;
8209     OverloadedOperatorKind OverOp = UnaryOperator::getOverloadedOperator(Opc);
8210     if (S && OverOp != OO_None)
8211       LookupOverloadedOperatorName(OverOp, S, Input->getType(), QualType(),
8212                                    Functions);
8213 
8214     return CreateOverloadedUnaryOp(OpLoc, Opc, Functions, Input);
8215   }
8216 
8217   return CreateBuiltinUnaryOp(OpLoc, Opc, Input);
8218 }
8219 
8220 // Unary Operators.  'Tok' is the token for the operator.
8221 ExprResult Sema::ActOnUnaryOp(Scope *S, SourceLocation OpLoc,
8222                               tok::TokenKind Op, Expr *Input) {
8223   return BuildUnaryOp(S, OpLoc, ConvertTokenKindToUnaryOpcode(Op), Input);
8224 }
8225 
8226 /// ActOnAddrLabel - Parse the GNU address of label extension: "&&foo".
8227 ExprResult Sema::ActOnAddrLabel(SourceLocation OpLoc, SourceLocation LabLoc,
8228                                 LabelDecl *TheDecl) {
8229   TheDecl->setUsed();
8230   // Create the AST node.  The address of a label always has type 'void*'.
8231   return Owned(new (Context) AddrLabelExpr(OpLoc, LabLoc, TheDecl,
8232                                        Context.getPointerType(Context.VoidTy)));
8233 }
8234 
8235 /// Given the last statement in a statement-expression, check whether
8236 /// the result is a producing expression (like a call to an
8237 /// ns_returns_retained function) and, if so, rebuild it to hoist the
8238 /// release out of the full-expression.  Otherwise, return null.
8239 /// Cannot fail.
8240 static Expr *maybeRebuildARCConsumingStmt(Stmt *Statement) {
8241   // Should always be wrapped with one of these.
8242   ExprWithCleanups *cleanups = dyn_cast<ExprWithCleanups>(Statement);
8243   if (!cleanups) return 0;
8244 
8245   ImplicitCastExpr *cast = dyn_cast<ImplicitCastExpr>(cleanups->getSubExpr());
8246   if (!cast || cast->getCastKind() != CK_ARCConsumeObject)
8247     return 0;
8248 
8249   // Splice out the cast.  This shouldn't modify any interesting
8250   // features of the statement.
8251   Expr *producer = cast->getSubExpr();
8252   assert(producer->getType() == cast->getType());
8253   assert(producer->getValueKind() == cast->getValueKind());
8254   cleanups->setSubExpr(producer);
8255   return cleanups;
8256 }
8257 
8258 ExprResult
8259 Sema::ActOnStmtExpr(SourceLocation LPLoc, Stmt *SubStmt,
8260                     SourceLocation RPLoc) { // "({..})"
8261   assert(SubStmt && isa<CompoundStmt>(SubStmt) && "Invalid action invocation!");
8262   CompoundStmt *Compound = cast<CompoundStmt>(SubStmt);
8263 
8264   bool isFileScope
8265     = (getCurFunctionOrMethodDecl() == 0) && (getCurBlock() == 0);
8266   if (isFileScope)
8267     return ExprError(Diag(LPLoc, diag::err_stmtexpr_file_scope));
8268 
8269   // FIXME: there are a variety of strange constraints to enforce here, for
8270   // example, it is not possible to goto into a stmt expression apparently.
8271   // More semantic analysis is needed.
8272 
8273   // If there are sub stmts in the compound stmt, take the type of the last one
8274   // as the type of the stmtexpr.
8275   QualType Ty = Context.VoidTy;
8276   bool StmtExprMayBindToTemp = false;
8277   if (!Compound->body_empty()) {
8278     Stmt *LastStmt = Compound->body_back();
8279     LabelStmt *LastLabelStmt = 0;
8280     // If LastStmt is a label, skip down through into the body.
8281     while (LabelStmt *Label = dyn_cast<LabelStmt>(LastStmt)) {
8282       LastLabelStmt = Label;
8283       LastStmt = Label->getSubStmt();
8284     }
8285 
8286     if (Expr *LastE = dyn_cast<Expr>(LastStmt)) {
8287       // Do function/array conversion on the last expression, but not
8288       // lvalue-to-rvalue.  However, initialize an unqualified type.
8289       ExprResult LastExpr = DefaultFunctionArrayConversion(LastE);
8290       if (LastExpr.isInvalid())
8291         return ExprError();
8292       Ty = LastExpr.get()->getType().getUnqualifiedType();
8293 
8294       if (!Ty->isDependentType() && !LastExpr.get()->isTypeDependent()) {
8295         // In ARC, if the final expression ends in a consume, splice
8296         // the consume out and bind it later.  In the alternate case
8297         // (when dealing with a retainable type), the result
8298         // initialization will create a produce.  In both cases the
8299         // result will be +1, and we'll need to balance that out with
8300         // a bind.
8301         if (Expr *rebuiltLastStmt
8302               = maybeRebuildARCConsumingStmt(LastExpr.get())) {
8303           LastExpr = rebuiltLastStmt;
8304         } else {
8305           LastExpr = PerformCopyInitialization(
8306                             InitializedEntity::InitializeResult(LPLoc,
8307                                                                 Ty,
8308                                                                 false),
8309                                                    SourceLocation(),
8310                                                LastExpr);
8311         }
8312 
8313         if (LastExpr.isInvalid())
8314           return ExprError();
8315         if (LastExpr.get() != 0) {
8316           if (!LastLabelStmt)
8317             Compound->setLastStmt(LastExpr.take());
8318           else
8319             LastLabelStmt->setSubStmt(LastExpr.take());
8320           StmtExprMayBindToTemp = true;
8321         }
8322       }
8323     }
8324   }
8325 
8326   // FIXME: Check that expression type is complete/non-abstract; statement
8327   // expressions are not lvalues.
8328   Expr *ResStmtExpr = new (Context) StmtExpr(Compound, Ty, LPLoc, RPLoc);
8329   if (StmtExprMayBindToTemp)
8330     return MaybeBindToTemporary(ResStmtExpr);
8331   return Owned(ResStmtExpr);
8332 }
8333 
8334 ExprResult Sema::BuildBuiltinOffsetOf(SourceLocation BuiltinLoc,
8335                                       TypeSourceInfo *TInfo,
8336                                       OffsetOfComponent *CompPtr,
8337                                       unsigned NumComponents,
8338                                       SourceLocation RParenLoc) {
8339   QualType ArgTy = TInfo->getType();
8340   bool Dependent = ArgTy->isDependentType();
8341   SourceRange TypeRange = TInfo->getTypeLoc().getLocalSourceRange();
8342 
8343   // We must have at least one component that refers to the type, and the first
8344   // one is known to be a field designator.  Verify that the ArgTy represents
8345   // a struct/union/class.
8346   if (!Dependent && !ArgTy->isRecordType())
8347     return ExprError(Diag(BuiltinLoc, diag::err_offsetof_record_type)
8348                        << ArgTy << TypeRange);
8349 
8350   // Type must be complete per C99 7.17p3 because a declaring a variable
8351   // with an incomplete type would be ill-formed.
8352   if (!Dependent
8353       && RequireCompleteType(BuiltinLoc, ArgTy,
8354                              PDiag(diag::err_offsetof_incomplete_type)
8355                                << TypeRange))
8356     return ExprError();
8357 
8358   // offsetof with non-identifier designators (e.g. "offsetof(x, a.b[c])") are a
8359   // GCC extension, diagnose them.
8360   // FIXME: This diagnostic isn't actually visible because the location is in
8361   // a system header!
8362   if (NumComponents != 1)
8363     Diag(BuiltinLoc, diag::ext_offsetof_extended_field_designator)
8364       << SourceRange(CompPtr[1].LocStart, CompPtr[NumComponents-1].LocEnd);
8365 
8366   bool DidWarnAboutNonPOD = false;
8367   QualType CurrentType = ArgTy;
8368   typedef OffsetOfExpr::OffsetOfNode OffsetOfNode;
8369   SmallVector<OffsetOfNode, 4> Comps;
8370   SmallVector<Expr*, 4> Exprs;
8371   for (unsigned i = 0; i != NumComponents; ++i) {
8372     const OffsetOfComponent &OC = CompPtr[i];
8373     if (OC.isBrackets) {
8374       // Offset of an array sub-field.  TODO: Should we allow vector elements?
8375       if (!CurrentType->isDependentType()) {
8376         const ArrayType *AT = Context.getAsArrayType(CurrentType);
8377         if(!AT)
8378           return ExprError(Diag(OC.LocEnd, diag::err_offsetof_array_type)
8379                            << CurrentType);
8380         CurrentType = AT->getElementType();
8381       } else
8382         CurrentType = Context.DependentTy;
8383 
8384       ExprResult IdxRval = DefaultLvalueConversion(static_cast<Expr*>(OC.U.E));
8385       if (IdxRval.isInvalid())
8386         return ExprError();
8387       Expr *Idx = IdxRval.take();
8388 
8389       // The expression must be an integral expression.
8390       // FIXME: An integral constant expression?
8391       if (!Idx->isTypeDependent() && !Idx->isValueDependent() &&
8392           !Idx->getType()->isIntegerType())
8393         return ExprError(Diag(Idx->getLocStart(),
8394                               diag::err_typecheck_subscript_not_integer)
8395                          << Idx->getSourceRange());
8396 
8397       // Record this array index.
8398       Comps.push_back(OffsetOfNode(OC.LocStart, Exprs.size(), OC.LocEnd));
8399       Exprs.push_back(Idx);
8400       continue;
8401     }
8402 
8403     // Offset of a field.
8404     if (CurrentType->isDependentType()) {
8405       // We have the offset of a field, but we can't look into the dependent
8406       // type. Just record the identifier of the field.
8407       Comps.push_back(OffsetOfNode(OC.LocStart, OC.U.IdentInfo, OC.LocEnd));
8408       CurrentType = Context.DependentTy;
8409       continue;
8410     }
8411 
8412     // We need to have a complete type to look into.
8413     if (RequireCompleteType(OC.LocStart, CurrentType,
8414                             diag::err_offsetof_incomplete_type))
8415       return ExprError();
8416 
8417     // Look for the designated field.
8418     const RecordType *RC = CurrentType->getAs<RecordType>();
8419     if (!RC)
8420       return ExprError(Diag(OC.LocEnd, diag::err_offsetof_record_type)
8421                        << CurrentType);
8422     RecordDecl *RD = RC->getDecl();
8423 
8424     // C++ [lib.support.types]p5:
8425     //   The macro offsetof accepts a restricted set of type arguments in this
8426     //   International Standard. type shall be a POD structure or a POD union
8427     //   (clause 9).
8428     if (CXXRecordDecl *CRD = dyn_cast<CXXRecordDecl>(RD)) {
8429       if (!CRD->isPOD() && !DidWarnAboutNonPOD &&
8430           DiagRuntimeBehavior(BuiltinLoc, 0,
8431                               PDiag(diag::warn_offsetof_non_pod_type)
8432                               << SourceRange(CompPtr[0].LocStart, OC.LocEnd)
8433                               << CurrentType))
8434         DidWarnAboutNonPOD = true;
8435     }
8436 
8437     // Look for the field.
8438     LookupResult R(*this, OC.U.IdentInfo, OC.LocStart, LookupMemberName);
8439     LookupQualifiedName(R, RD);
8440     FieldDecl *MemberDecl = R.getAsSingle<FieldDecl>();
8441     IndirectFieldDecl *IndirectMemberDecl = 0;
8442     if (!MemberDecl) {
8443       if ((IndirectMemberDecl = R.getAsSingle<IndirectFieldDecl>()))
8444         MemberDecl = IndirectMemberDecl->getAnonField();
8445     }
8446 
8447     if (!MemberDecl)
8448       return ExprError(Diag(BuiltinLoc, diag::err_no_member)
8449                        << OC.U.IdentInfo << RD << SourceRange(OC.LocStart,
8450                                                               OC.LocEnd));
8451 
8452     // C99 7.17p3:
8453     //   (If the specified member is a bit-field, the behavior is undefined.)
8454     //
8455     // We diagnose this as an error.
8456     if (MemberDecl->isBitField()) {
8457       Diag(OC.LocEnd, diag::err_offsetof_bitfield)
8458         << MemberDecl->getDeclName()
8459         << SourceRange(BuiltinLoc, RParenLoc);
8460       Diag(MemberDecl->getLocation(), diag::note_bitfield_decl);
8461       return ExprError();
8462     }
8463 
8464     RecordDecl *Parent = MemberDecl->getParent();
8465     if (IndirectMemberDecl)
8466       Parent = cast<RecordDecl>(IndirectMemberDecl->getDeclContext());
8467 
8468     // If the member was found in a base class, introduce OffsetOfNodes for
8469     // the base class indirections.
8470     CXXBasePaths Paths(/*FindAmbiguities=*/true, /*RecordPaths=*/true,
8471                        /*DetectVirtual=*/false);
8472     if (IsDerivedFrom(CurrentType, Context.getTypeDeclType(Parent), Paths)) {
8473       CXXBasePath &Path = Paths.front();
8474       for (CXXBasePath::iterator B = Path.begin(), BEnd = Path.end();
8475            B != BEnd; ++B)
8476         Comps.push_back(OffsetOfNode(B->Base));
8477     }
8478 
8479     if (IndirectMemberDecl) {
8480       for (IndirectFieldDecl::chain_iterator FI =
8481            IndirectMemberDecl->chain_begin(),
8482            FEnd = IndirectMemberDecl->chain_end(); FI != FEnd; FI++) {
8483         assert(isa<FieldDecl>(*FI));
8484         Comps.push_back(OffsetOfNode(OC.LocStart,
8485                                      cast<FieldDecl>(*FI), OC.LocEnd));
8486       }
8487     } else
8488       Comps.push_back(OffsetOfNode(OC.LocStart, MemberDecl, OC.LocEnd));
8489 
8490     CurrentType = MemberDecl->getType().getNonReferenceType();
8491   }
8492 
8493   return Owned(OffsetOfExpr::Create(Context, Context.getSizeType(), BuiltinLoc,
8494                                     TInfo, Comps.data(), Comps.size(),
8495                                     Exprs.data(), Exprs.size(), RParenLoc));
8496 }
8497 
8498 ExprResult Sema::ActOnBuiltinOffsetOf(Scope *S,
8499                                       SourceLocation BuiltinLoc,
8500                                       SourceLocation TypeLoc,
8501                                       ParsedType ParsedArgTy,
8502                                       OffsetOfComponent *CompPtr,
8503                                       unsigned NumComponents,
8504                                       SourceLocation RParenLoc) {
8505 
8506   TypeSourceInfo *ArgTInfo;
8507   QualType ArgTy = GetTypeFromParser(ParsedArgTy, &ArgTInfo);
8508   if (ArgTy.isNull())
8509     return ExprError();
8510 
8511   if (!ArgTInfo)
8512     ArgTInfo = Context.getTrivialTypeSourceInfo(ArgTy, TypeLoc);
8513 
8514   return BuildBuiltinOffsetOf(BuiltinLoc, ArgTInfo, CompPtr, NumComponents,
8515                               RParenLoc);
8516 }
8517 
8518 
8519 ExprResult Sema::ActOnChooseExpr(SourceLocation BuiltinLoc,
8520                                  Expr *CondExpr,
8521                                  Expr *LHSExpr, Expr *RHSExpr,
8522                                  SourceLocation RPLoc) {
8523   assert((CondExpr && LHSExpr && RHSExpr) && "Missing type argument(s)");
8524 
8525   ExprValueKind VK = VK_RValue;
8526   ExprObjectKind OK = OK_Ordinary;
8527   QualType resType;
8528   bool ValueDependent = false;
8529   if (CondExpr->isTypeDependent() || CondExpr->isValueDependent()) {
8530     resType = Context.DependentTy;
8531     ValueDependent = true;
8532   } else {
8533     // The conditional expression is required to be a constant expression.
8534     llvm::APSInt condEval(32);
8535     ExprResult CondICE = VerifyIntegerConstantExpression(CondExpr, &condEval,
8536       PDiag(diag::err_typecheck_choose_expr_requires_constant), false);
8537     if (CondICE.isInvalid())
8538       return ExprError();
8539     CondExpr = CondICE.take();
8540 
8541     // If the condition is > zero, then the AST type is the same as the LSHExpr.
8542     Expr *ActiveExpr = condEval.getZExtValue() ? LHSExpr : RHSExpr;
8543 
8544     resType = ActiveExpr->getType();
8545     ValueDependent = ActiveExpr->isValueDependent();
8546     VK = ActiveExpr->getValueKind();
8547     OK = ActiveExpr->getObjectKind();
8548   }
8549 
8550   return Owned(new (Context) ChooseExpr(BuiltinLoc, CondExpr, LHSExpr, RHSExpr,
8551                                         resType, VK, OK, RPLoc,
8552                                         resType->isDependentType(),
8553                                         ValueDependent));
8554 }
8555 
8556 //===----------------------------------------------------------------------===//
8557 // Clang Extensions.
8558 //===----------------------------------------------------------------------===//
8559 
8560 /// ActOnBlockStart - This callback is invoked when a block literal is started.
8561 void Sema::ActOnBlockStart(SourceLocation CaretLoc, Scope *CurScope) {
8562   BlockDecl *Block = BlockDecl::Create(Context, CurContext, CaretLoc);
8563   PushBlockScope(CurScope, Block);
8564   CurContext->addDecl(Block);
8565   if (CurScope)
8566     PushDeclContext(CurScope, Block);
8567   else
8568     CurContext = Block;
8569 
8570   getCurBlock()->HasImplicitReturnType = true;
8571 
8572   // Enter a new evaluation context to insulate the block from any
8573   // cleanups from the enclosing full-expression.
8574   PushExpressionEvaluationContext(PotentiallyEvaluated);
8575 }
8576 
8577 void Sema::ActOnBlockArguments(Declarator &ParamInfo, Scope *CurScope) {
8578   assert(ParamInfo.getIdentifier()==0 && "block-id should have no identifier!");
8579   assert(ParamInfo.getContext() == Declarator::BlockLiteralContext);
8580   BlockScopeInfo *CurBlock = getCurBlock();
8581 
8582   TypeSourceInfo *Sig = GetTypeForDeclarator(ParamInfo, CurScope);
8583   QualType T = Sig->getType();
8584 
8585   // GetTypeForDeclarator always produces a function type for a block
8586   // literal signature.  Furthermore, it is always a FunctionProtoType
8587   // unless the function was written with a typedef.
8588   assert(T->isFunctionType() &&
8589          "GetTypeForDeclarator made a non-function block signature");
8590 
8591   // Look for an explicit signature in that function type.
8592   FunctionProtoTypeLoc ExplicitSignature;
8593 
8594   TypeLoc tmp = Sig->getTypeLoc().IgnoreParens();
8595   if (isa<FunctionProtoTypeLoc>(tmp)) {
8596     ExplicitSignature = cast<FunctionProtoTypeLoc>(tmp);
8597 
8598     // Check whether that explicit signature was synthesized by
8599     // GetTypeForDeclarator.  If so, don't save that as part of the
8600     // written signature.
8601     if (ExplicitSignature.getLocalRangeBegin() ==
8602         ExplicitSignature.getLocalRangeEnd()) {
8603       // This would be much cheaper if we stored TypeLocs instead of
8604       // TypeSourceInfos.
8605       TypeLoc Result = ExplicitSignature.getResultLoc();
8606       unsigned Size = Result.getFullDataSize();
8607       Sig = Context.CreateTypeSourceInfo(Result.getType(), Size);
8608       Sig->getTypeLoc().initializeFullCopy(Result, Size);
8609 
8610       ExplicitSignature = FunctionProtoTypeLoc();
8611     }
8612   }
8613 
8614   CurBlock->TheDecl->setSignatureAsWritten(Sig);
8615   CurBlock->FunctionType = T;
8616 
8617   const FunctionType *Fn = T->getAs<FunctionType>();
8618   QualType RetTy = Fn->getResultType();
8619   bool isVariadic =
8620     (isa<FunctionProtoType>(Fn) && cast<FunctionProtoType>(Fn)->isVariadic());
8621 
8622   CurBlock->TheDecl->setIsVariadic(isVariadic);
8623 
8624   // Don't allow returning a objc interface by value.
8625   if (RetTy->isObjCObjectType()) {
8626     Diag(ParamInfo.getSourceRange().getBegin(),
8627          diag::err_object_cannot_be_passed_returned_by_value) << 0 << RetTy;
8628     return;
8629   }
8630 
8631   // Context.DependentTy is used as a placeholder for a missing block
8632   // return type.  TODO:  what should we do with declarators like:
8633   //   ^ * { ... }
8634   // If the answer is "apply template argument deduction"....
8635   if (RetTy != Context.DependentTy) {
8636     CurBlock->ReturnType = RetTy;
8637     CurBlock->TheDecl->setBlockMissingReturnType(false);
8638     CurBlock->HasImplicitReturnType = false;
8639   }
8640 
8641   // Push block parameters from the declarator if we had them.
8642   SmallVector<ParmVarDecl*, 8> Params;
8643   if (ExplicitSignature) {
8644     for (unsigned I = 0, E = ExplicitSignature.getNumArgs(); I != E; ++I) {
8645       ParmVarDecl *Param = ExplicitSignature.getArg(I);
8646       if (Param->getIdentifier() == 0 &&
8647           !Param->isImplicit() &&
8648           !Param->isInvalidDecl() &&
8649           !getLangOptions().CPlusPlus)
8650         Diag(Param->getLocation(), diag::err_parameter_name_omitted);
8651       Params.push_back(Param);
8652     }
8653 
8654   // Fake up parameter variables if we have a typedef, like
8655   //   ^ fntype { ... }
8656   } else if (const FunctionProtoType *Fn = T->getAs<FunctionProtoType>()) {
8657     for (FunctionProtoType::arg_type_iterator
8658            I = Fn->arg_type_begin(), E = Fn->arg_type_end(); I != E; ++I) {
8659       ParmVarDecl *Param =
8660         BuildParmVarDeclForTypedef(CurBlock->TheDecl,
8661                                    ParamInfo.getSourceRange().getBegin(),
8662                                    *I);
8663       Params.push_back(Param);
8664     }
8665   }
8666 
8667   // Set the parameters on the block decl.
8668   if (!Params.empty()) {
8669     CurBlock->TheDecl->setParams(Params);
8670     CheckParmsForFunctionDef(CurBlock->TheDecl->param_begin(),
8671                              CurBlock->TheDecl->param_end(),
8672                              /*CheckParameterNames=*/false);
8673   }
8674 
8675   // Finally we can process decl attributes.
8676   ProcessDeclAttributes(CurScope, CurBlock->TheDecl, ParamInfo);
8677 
8678   // Put the parameter variables in scope.  We can bail out immediately
8679   // if we don't have any.
8680   if (Params.empty())
8681     return;
8682 
8683   for (BlockDecl::param_iterator AI = CurBlock->TheDecl->param_begin(),
8684          E = CurBlock->TheDecl->param_end(); AI != E; ++AI) {
8685     (*AI)->setOwningFunction(CurBlock->TheDecl);
8686 
8687     // If this has an identifier, add it to the scope stack.
8688     if ((*AI)->getIdentifier()) {
8689       CheckShadow(CurBlock->TheScope, *AI);
8690 
8691       PushOnScopeChains(*AI, CurBlock->TheScope);
8692     }
8693   }
8694 }
8695 
8696 /// ActOnBlockError - If there is an error parsing a block, this callback
8697 /// is invoked to pop the information about the block from the action impl.
8698 void Sema::ActOnBlockError(SourceLocation CaretLoc, Scope *CurScope) {
8699   // Leave the expression-evaluation context.
8700   DiscardCleanupsInEvaluationContext();
8701   PopExpressionEvaluationContext();
8702 
8703   // Pop off CurBlock, handle nested blocks.
8704   PopDeclContext();
8705   PopFunctionScopeInfo();
8706 }
8707 
8708 /// ActOnBlockStmtExpr - This is called when the body of a block statement
8709 /// literal was successfully completed.  ^(int x){...}
8710 ExprResult Sema::ActOnBlockStmtExpr(SourceLocation CaretLoc,
8711                                     Stmt *Body, Scope *CurScope) {
8712   // If blocks are disabled, emit an error.
8713   if (!LangOpts.Blocks)
8714     Diag(CaretLoc, diag::err_blocks_disable);
8715 
8716   // Leave the expression-evaluation context.
8717   assert(!ExprNeedsCleanups && "cleanups within block not correctly bound!");
8718   PopExpressionEvaluationContext();
8719 
8720   BlockScopeInfo *BSI = cast<BlockScopeInfo>(FunctionScopes.back());
8721 
8722   PopDeclContext();
8723 
8724   QualType RetTy = Context.VoidTy;
8725   if (!BSI->ReturnType.isNull())
8726     RetTy = BSI->ReturnType;
8727 
8728   bool NoReturn = BSI->TheDecl->getAttr<NoReturnAttr>();
8729   QualType BlockTy;
8730 
8731   // Set the captured variables on the block.
8732   // FIXME: Share capture structure between BlockDecl and CapturingScopeInfo!
8733   SmallVector<BlockDecl::Capture, 4> Captures;
8734   for (unsigned i = 0, e = BSI->Captures.size(); i != e; i++) {
8735     CapturingScopeInfo::Capture &Cap = BSI->Captures[i];
8736     if (Cap.isThisCapture())
8737       continue;
8738     BlockDecl::Capture NewCap(Cap.getVariable(), Cap.isBlockCapture(),
8739                               Cap.isNested(), Cap.getCopyExpr());
8740     Captures.push_back(NewCap);
8741   }
8742   BSI->TheDecl->setCaptures(Context, Captures.begin(), Captures.end(),
8743                             BSI->CXXThisCaptureIndex != 0);
8744 
8745   // If the user wrote a function type in some form, try to use that.
8746   if (!BSI->FunctionType.isNull()) {
8747     const FunctionType *FTy = BSI->FunctionType->getAs<FunctionType>();
8748 
8749     FunctionType::ExtInfo Ext = FTy->getExtInfo();
8750     if (NoReturn && !Ext.getNoReturn()) Ext = Ext.withNoReturn(true);
8751 
8752     // Turn protoless block types into nullary block types.
8753     if (isa<FunctionNoProtoType>(FTy)) {
8754       FunctionProtoType::ExtProtoInfo EPI;
8755       EPI.ExtInfo = Ext;
8756       BlockTy = Context.getFunctionType(RetTy, 0, 0, EPI);
8757 
8758     // Otherwise, if we don't need to change anything about the function type,
8759     // preserve its sugar structure.
8760     } else if (FTy->getResultType() == RetTy &&
8761                (!NoReturn || FTy->getNoReturnAttr())) {
8762       BlockTy = BSI->FunctionType;
8763 
8764     // Otherwise, make the minimal modifications to the function type.
8765     } else {
8766       const FunctionProtoType *FPT = cast<FunctionProtoType>(FTy);
8767       FunctionProtoType::ExtProtoInfo EPI = FPT->getExtProtoInfo();
8768       EPI.TypeQuals = 0; // FIXME: silently?
8769       EPI.ExtInfo = Ext;
8770       BlockTy = Context.getFunctionType(RetTy,
8771                                         FPT->arg_type_begin(),
8772                                         FPT->getNumArgs(),
8773                                         EPI);
8774     }
8775 
8776   // If we don't have a function type, just build one from nothing.
8777   } else {
8778     FunctionProtoType::ExtProtoInfo EPI;
8779     EPI.ExtInfo = FunctionType::ExtInfo().withNoReturn(NoReturn);
8780     BlockTy = Context.getFunctionType(RetTy, 0, 0, EPI);
8781   }
8782 
8783   DiagnoseUnusedParameters(BSI->TheDecl->param_begin(),
8784                            BSI->TheDecl->param_end());
8785   BlockTy = Context.getBlockPointerType(BlockTy);
8786 
8787   // If needed, diagnose invalid gotos and switches in the block.
8788   if (getCurFunction()->NeedsScopeChecking() &&
8789       !hasAnyUnrecoverableErrorsInThisFunction())
8790     DiagnoseInvalidJumps(cast<CompoundStmt>(Body));
8791 
8792   BSI->TheDecl->setBody(cast<CompoundStmt>(Body));
8793 
8794   for (BlockDecl::capture_const_iterator ci = BSI->TheDecl->capture_begin(),
8795        ce = BSI->TheDecl->capture_end(); ci != ce; ++ci) {
8796     const VarDecl *variable = ci->getVariable();
8797     QualType T = variable->getType();
8798     QualType::DestructionKind destructKind = T.isDestructedType();
8799     if (destructKind != QualType::DK_none)
8800       getCurFunction()->setHasBranchProtectedScope();
8801   }
8802 
8803   computeNRVO(Body, getCurBlock());
8804 
8805   BlockExpr *Result = new (Context) BlockExpr(BSI->TheDecl, BlockTy);
8806   const AnalysisBasedWarnings::Policy &WP = AnalysisWarnings.getDefaultPolicy();
8807   PopFunctionScopeInfo(&WP, Result->getBlockDecl(), Result);
8808 
8809   // If the block isn't obviously global, i.e. it captures anything at
8810   // all, mark this full-expression as needing a cleanup.
8811   if (Result->getBlockDecl()->hasCaptures()) {
8812     ExprCleanupObjects.push_back(Result->getBlockDecl());
8813     ExprNeedsCleanups = true;
8814   }
8815 
8816   return Owned(Result);
8817 }
8818 
8819 ExprResult Sema::ActOnVAArg(SourceLocation BuiltinLoc,
8820                                         Expr *E, ParsedType Ty,
8821                                         SourceLocation RPLoc) {
8822   TypeSourceInfo *TInfo;
8823   GetTypeFromParser(Ty, &TInfo);
8824   return BuildVAArgExpr(BuiltinLoc, E, TInfo, RPLoc);
8825 }
8826 
8827 ExprResult Sema::BuildVAArgExpr(SourceLocation BuiltinLoc,
8828                                 Expr *E, TypeSourceInfo *TInfo,
8829                                 SourceLocation RPLoc) {
8830   Expr *OrigExpr = E;
8831 
8832   // Get the va_list type
8833   QualType VaListType = Context.getBuiltinVaListType();
8834   if (VaListType->isArrayType()) {
8835     // Deal with implicit array decay; for example, on x86-64,
8836     // va_list is an array, but it's supposed to decay to
8837     // a pointer for va_arg.
8838     VaListType = Context.getArrayDecayedType(VaListType);
8839     // Make sure the input expression also decays appropriately.
8840     ExprResult Result = UsualUnaryConversions(E);
8841     if (Result.isInvalid())
8842       return ExprError();
8843     E = Result.take();
8844   } else {
8845     // Otherwise, the va_list argument must be an l-value because
8846     // it is modified by va_arg.
8847     if (!E->isTypeDependent() &&
8848         CheckForModifiableLvalue(E, BuiltinLoc, *this))
8849       return ExprError();
8850   }
8851 
8852   if (!E->isTypeDependent() &&
8853       !Context.hasSameType(VaListType, E->getType())) {
8854     return ExprError(Diag(E->getLocStart(),
8855                          diag::err_first_argument_to_va_arg_not_of_type_va_list)
8856       << OrigExpr->getType() << E->getSourceRange());
8857   }
8858 
8859   if (!TInfo->getType()->isDependentType()) {
8860     if (RequireCompleteType(TInfo->getTypeLoc().getBeginLoc(), TInfo->getType(),
8861           PDiag(diag::err_second_parameter_to_va_arg_incomplete)
8862           << TInfo->getTypeLoc().getSourceRange()))
8863       return ExprError();
8864 
8865     if (RequireNonAbstractType(TInfo->getTypeLoc().getBeginLoc(),
8866           TInfo->getType(),
8867           PDiag(diag::err_second_parameter_to_va_arg_abstract)
8868           << TInfo->getTypeLoc().getSourceRange()))
8869       return ExprError();
8870 
8871     if (!TInfo->getType().isPODType(Context)) {
8872       Diag(TInfo->getTypeLoc().getBeginLoc(),
8873            TInfo->getType()->isObjCLifetimeType()
8874              ? diag::warn_second_parameter_to_va_arg_ownership_qualified
8875              : diag::warn_second_parameter_to_va_arg_not_pod)
8876         << TInfo->getType()
8877         << TInfo->getTypeLoc().getSourceRange();
8878     }
8879 
8880     // Check for va_arg where arguments of the given type will be promoted
8881     // (i.e. this va_arg is guaranteed to have undefined behavior).
8882     QualType PromoteType;
8883     if (TInfo->getType()->isPromotableIntegerType()) {
8884       PromoteType = Context.getPromotedIntegerType(TInfo->getType());
8885       if (Context.typesAreCompatible(PromoteType, TInfo->getType()))
8886         PromoteType = QualType();
8887     }
8888     if (TInfo->getType()->isSpecificBuiltinType(BuiltinType::Float))
8889       PromoteType = Context.DoubleTy;
8890     if (!PromoteType.isNull())
8891       Diag(TInfo->getTypeLoc().getBeginLoc(),
8892           diag::warn_second_parameter_to_va_arg_never_compatible)
8893         << TInfo->getType()
8894         << PromoteType
8895         << TInfo->getTypeLoc().getSourceRange();
8896   }
8897 
8898   QualType T = TInfo->getType().getNonLValueExprType(Context);
8899   return Owned(new (Context) VAArgExpr(BuiltinLoc, E, TInfo, RPLoc, T));
8900 }
8901 
8902 ExprResult Sema::ActOnGNUNullExpr(SourceLocation TokenLoc) {
8903   // The type of __null will be int or long, depending on the size of
8904   // pointers on the target.
8905   QualType Ty;
8906   unsigned pw = Context.getTargetInfo().getPointerWidth(0);
8907   if (pw == Context.getTargetInfo().getIntWidth())
8908     Ty = Context.IntTy;
8909   else if (pw == Context.getTargetInfo().getLongWidth())
8910     Ty = Context.LongTy;
8911   else if (pw == Context.getTargetInfo().getLongLongWidth())
8912     Ty = Context.LongLongTy;
8913   else {
8914     llvm_unreachable("I don't know size of pointer!");
8915   }
8916 
8917   return Owned(new (Context) GNUNullExpr(Ty, TokenLoc));
8918 }
8919 
8920 static void MakeObjCStringLiteralFixItHint(Sema& SemaRef, QualType DstType,
8921                                            Expr *SrcExpr, FixItHint &Hint) {
8922   if (!SemaRef.getLangOptions().ObjC1)
8923     return;
8924 
8925   const ObjCObjectPointerType *PT = DstType->getAs<ObjCObjectPointerType>();
8926   if (!PT)
8927     return;
8928 
8929   // Check if the destination is of type 'id'.
8930   if (!PT->isObjCIdType()) {
8931     // Check if the destination is the 'NSString' interface.
8932     const ObjCInterfaceDecl *ID = PT->getInterfaceDecl();
8933     if (!ID || !ID->getIdentifier()->isStr("NSString"))
8934       return;
8935   }
8936 
8937   // Ignore any parens, implicit casts (should only be
8938   // array-to-pointer decays), and not-so-opaque values.  The last is
8939   // important for making this trigger for property assignments.
8940   SrcExpr = SrcExpr->IgnoreParenImpCasts();
8941   if (OpaqueValueExpr *OV = dyn_cast<OpaqueValueExpr>(SrcExpr))
8942     if (OV->getSourceExpr())
8943       SrcExpr = OV->getSourceExpr()->IgnoreParenImpCasts();
8944 
8945   StringLiteral *SL = dyn_cast<StringLiteral>(SrcExpr);
8946   if (!SL || !SL->isAscii())
8947     return;
8948 
8949   Hint = FixItHint::CreateInsertion(SL->getLocStart(), "@");
8950 }
8951 
8952 bool Sema::DiagnoseAssignmentResult(AssignConvertType ConvTy,
8953                                     SourceLocation Loc,
8954                                     QualType DstType, QualType SrcType,
8955                                     Expr *SrcExpr, AssignmentAction Action,
8956                                     bool *Complained) {
8957   if (Complained)
8958     *Complained = false;
8959 
8960   // Decode the result (notice that AST's are still created for extensions).
8961   bool CheckInferredResultType = false;
8962   bool isInvalid = false;
8963   unsigned DiagKind;
8964   FixItHint Hint;
8965   ConversionFixItGenerator ConvHints;
8966   bool MayHaveConvFixit = false;
8967   bool MayHaveFunctionDiff = false;
8968 
8969   switch (ConvTy) {
8970   case Compatible: return false;
8971   case PointerToInt:
8972     DiagKind = diag::ext_typecheck_convert_pointer_int;
8973     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8974     MayHaveConvFixit = true;
8975     break;
8976   case IntToPointer:
8977     DiagKind = diag::ext_typecheck_convert_int_pointer;
8978     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8979     MayHaveConvFixit = true;
8980     break;
8981   case IncompatiblePointer:
8982     MakeObjCStringLiteralFixItHint(*this, DstType, SrcExpr, Hint);
8983     DiagKind = diag::ext_typecheck_convert_incompatible_pointer;
8984     CheckInferredResultType = DstType->isObjCObjectPointerType() &&
8985       SrcType->isObjCObjectPointerType();
8986     if (Hint.isNull() && !CheckInferredResultType) {
8987       ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8988     }
8989     MayHaveConvFixit = true;
8990     break;
8991   case IncompatiblePointerSign:
8992     DiagKind = diag::ext_typecheck_convert_incompatible_pointer_sign;
8993     break;
8994   case FunctionVoidPointer:
8995     DiagKind = diag::ext_typecheck_convert_pointer_void_func;
8996     break;
8997   case IncompatiblePointerDiscardsQualifiers: {
8998     // Perform array-to-pointer decay if necessary.
8999     if (SrcType->isArrayType()) SrcType = Context.getArrayDecayedType(SrcType);
9000 
9001     Qualifiers lhq = SrcType->getPointeeType().getQualifiers();
9002     Qualifiers rhq = DstType->getPointeeType().getQualifiers();
9003     if (lhq.getAddressSpace() != rhq.getAddressSpace()) {
9004       DiagKind = diag::err_typecheck_incompatible_address_space;
9005       break;
9006 
9007 
9008     } else if (lhq.getObjCLifetime() != rhq.getObjCLifetime()) {
9009       DiagKind = diag::err_typecheck_incompatible_ownership;
9010       break;
9011     }
9012 
9013     llvm_unreachable("unknown error case for discarding qualifiers!");
9014     // fallthrough
9015   }
9016   case CompatiblePointerDiscardsQualifiers:
9017     // If the qualifiers lost were because we were applying the
9018     // (deprecated) C++ conversion from a string literal to a char*
9019     // (or wchar_t*), then there was no error (C++ 4.2p2).  FIXME:
9020     // Ideally, this check would be performed in
9021     // checkPointerTypesForAssignment. However, that would require a
9022     // bit of refactoring (so that the second argument is an
9023     // expression, rather than a type), which should be done as part
9024     // of a larger effort to fix checkPointerTypesForAssignment for
9025     // C++ semantics.
9026     if (getLangOptions().CPlusPlus &&
9027         IsStringLiteralToNonConstPointerConversion(SrcExpr, DstType))
9028       return false;
9029     DiagKind = diag::ext_typecheck_convert_discards_qualifiers;
9030     break;
9031   case IncompatibleNestedPointerQualifiers:
9032     DiagKind = diag::ext_nested_pointer_qualifier_mismatch;
9033     break;
9034   case IntToBlockPointer:
9035     DiagKind = diag::err_int_to_block_pointer;
9036     break;
9037   case IncompatibleBlockPointer:
9038     DiagKind = diag::err_typecheck_convert_incompatible_block_pointer;
9039     break;
9040   case IncompatibleObjCQualifiedId:
9041     // FIXME: Diagnose the problem in ObjCQualifiedIdTypesAreCompatible, since
9042     // it can give a more specific diagnostic.
9043     DiagKind = diag::warn_incompatible_qualified_id;
9044     break;
9045   case IncompatibleVectors:
9046     DiagKind = diag::warn_incompatible_vectors;
9047     break;
9048   case IncompatibleObjCWeakRef:
9049     DiagKind = diag::err_arc_weak_unavailable_assign;
9050     break;
9051   case Incompatible:
9052     DiagKind = diag::err_typecheck_convert_incompatible;
9053     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
9054     MayHaveConvFixit = true;
9055     isInvalid = true;
9056     MayHaveFunctionDiff = true;
9057     break;
9058   }
9059 
9060   QualType FirstType, SecondType;
9061   switch (Action) {
9062   case AA_Assigning:
9063   case AA_Initializing:
9064     // The destination type comes first.
9065     FirstType = DstType;
9066     SecondType = SrcType;
9067     break;
9068 
9069   case AA_Returning:
9070   case AA_Passing:
9071   case AA_Converting:
9072   case AA_Sending:
9073   case AA_Casting:
9074     // The source type comes first.
9075     FirstType = SrcType;
9076     SecondType = DstType;
9077     break;
9078   }
9079 
9080   PartialDiagnostic FDiag = PDiag(DiagKind);
9081   FDiag << FirstType << SecondType << Action << SrcExpr->getSourceRange();
9082 
9083   // If we can fix the conversion, suggest the FixIts.
9084   assert(ConvHints.isNull() || Hint.isNull());
9085   if (!ConvHints.isNull()) {
9086     for (std::vector<FixItHint>::iterator HI = ConvHints.Hints.begin(),
9087          HE = ConvHints.Hints.end(); HI != HE; ++HI)
9088       FDiag << *HI;
9089   } else {
9090     FDiag << Hint;
9091   }
9092   if (MayHaveConvFixit) { FDiag << (unsigned) (ConvHints.Kind); }
9093 
9094   if (MayHaveFunctionDiff)
9095     HandleFunctionTypeMismatch(FDiag, SecondType, FirstType);
9096 
9097   Diag(Loc, FDiag);
9098 
9099   if (SecondType == Context.OverloadTy)
9100     NoteAllOverloadCandidates(OverloadExpr::find(SrcExpr).Expression,
9101                               FirstType);
9102 
9103   if (CheckInferredResultType)
9104     EmitRelatedResultTypeNote(SrcExpr);
9105 
9106   if (Complained)
9107     *Complained = true;
9108   return isInvalid;
9109 }
9110 
9111 ExprResult Sema::VerifyIntegerConstantExpression(Expr *E,
9112                                                  llvm::APSInt *Result) {
9113   return VerifyIntegerConstantExpression(E, Result,
9114       PDiag(diag::err_expr_not_ice) << LangOpts.CPlusPlus);
9115 }
9116 
9117 ExprResult Sema::VerifyIntegerConstantExpression(Expr *E, llvm::APSInt *Result,
9118                                                  PartialDiagnostic NotIceDiag,
9119                                                  bool AllowFold,
9120                                                  PartialDiagnostic FoldDiag) {
9121   SourceLocation DiagLoc = E->getSourceRange().getBegin();
9122 
9123   if (getLangOptions().CPlusPlus0x) {
9124     // C++11 [expr.const]p5:
9125     //   If an expression of literal class type is used in a context where an
9126     //   integral constant expression is required, then that class type shall
9127     //   have a single non-explicit conversion function to an integral or
9128     //   unscoped enumeration type
9129     ExprResult Converted;
9130     if (NotIceDiag.getDiagID()) {
9131       Converted = ConvertToIntegralOrEnumerationType(
9132         DiagLoc, E,
9133         PDiag(diag::err_ice_not_integral),
9134         PDiag(diag::err_ice_incomplete_type),
9135         PDiag(diag::err_ice_explicit_conversion),
9136         PDiag(diag::note_ice_conversion_here),
9137         PDiag(diag::err_ice_ambiguous_conversion),
9138         PDiag(diag::note_ice_conversion_here),
9139         PDiag(0),
9140         /*AllowScopedEnumerations*/ false);
9141     } else {
9142       // The caller wants to silently enquire whether this is an ICE. Don't
9143       // produce any diagnostics if it isn't.
9144       Converted = ConvertToIntegralOrEnumerationType(
9145         DiagLoc, E, PDiag(), PDiag(), PDiag(), PDiag(),
9146         PDiag(), PDiag(), PDiag(), false);
9147     }
9148     if (Converted.isInvalid())
9149       return Converted;
9150     E = Converted.take();
9151     if (!E->getType()->isIntegralOrUnscopedEnumerationType())
9152       return ExprError();
9153   } else if (!E->getType()->isIntegralOrUnscopedEnumerationType()) {
9154     // An ICE must be of integral or unscoped enumeration type.
9155     if (NotIceDiag.getDiagID())
9156       Diag(DiagLoc, NotIceDiag) << E->getSourceRange();
9157     return ExprError();
9158   }
9159 
9160   // Circumvent ICE checking in C++11 to avoid evaluating the expression twice
9161   // in the non-ICE case.
9162   if (!getLangOptions().CPlusPlus0x && E->isIntegerConstantExpr(Context)) {
9163     if (Result)
9164       *Result = E->EvaluateKnownConstInt(Context);
9165     return Owned(E);
9166   }
9167 
9168   Expr::EvalResult EvalResult;
9169   llvm::SmallVector<PartialDiagnosticAt, 8> Notes;
9170   EvalResult.Diag = &Notes;
9171 
9172   // Try to evaluate the expression, and produce diagnostics explaining why it's
9173   // not a constant expression as a side-effect.
9174   bool Folded = E->EvaluateAsRValue(EvalResult, Context) &&
9175                 EvalResult.Val.isInt() && !EvalResult.HasSideEffects;
9176 
9177   // In C++11, we can rely on diagnostics being produced for any expression
9178   // which is not a constant expression. If no diagnostics were produced, then
9179   // this is a constant expression.
9180   if (Folded && getLangOptions().CPlusPlus0x && Notes.empty()) {
9181     if (Result)
9182       *Result = EvalResult.Val.getInt();
9183     return Owned(E);
9184   }
9185 
9186   // If our only note is the usual "invalid subexpression" note, just point
9187   // the caret at its location rather than producing an essentially
9188   // redundant note.
9189   if (Notes.size() == 1 && Notes[0].second.getDiagID() ==
9190         diag::note_invalid_subexpr_in_const_expr) {
9191     DiagLoc = Notes[0].first;
9192     Notes.clear();
9193   }
9194 
9195   if (!Folded || !AllowFold) {
9196     if (NotIceDiag.getDiagID()) {
9197       Diag(DiagLoc, NotIceDiag) << E->getSourceRange();
9198       for (unsigned I = 0, N = Notes.size(); I != N; ++I)
9199         Diag(Notes[I].first, Notes[I].second);
9200     }
9201 
9202     return ExprError();
9203   }
9204 
9205   if (FoldDiag.getDiagID())
9206     Diag(DiagLoc, FoldDiag) << E->getSourceRange();
9207   else
9208     Diag(DiagLoc, diag::ext_expr_not_ice)
9209       << E->getSourceRange() << LangOpts.CPlusPlus;
9210   for (unsigned I = 0, N = Notes.size(); I != N; ++I)
9211     Diag(Notes[I].first, Notes[I].second);
9212 
9213   if (Result)
9214     *Result = EvalResult.Val.getInt();
9215   return Owned(E);
9216 }
9217 
9218 namespace {
9219   // Handle the case where we conclude a expression which we speculatively
9220   // considered to be unevaluated is actually evaluated.
9221   class TransformToPE : public TreeTransform<TransformToPE> {
9222     typedef TreeTransform<TransformToPE> BaseTransform;
9223 
9224   public:
9225     TransformToPE(Sema &SemaRef) : BaseTransform(SemaRef) { }
9226 
9227     // Make sure we redo semantic analysis
9228     bool AlwaysRebuild() { return true; }
9229 
9230     // Make sure we handle LabelStmts correctly.
9231     // FIXME: This does the right thing, but maybe we need a more general
9232     // fix to TreeTransform?
9233     StmtResult TransformLabelStmt(LabelStmt *S) {
9234       S->getDecl()->setStmt(0);
9235       return BaseTransform::TransformLabelStmt(S);
9236     }
9237 
9238     // We need to special-case DeclRefExprs referring to FieldDecls which
9239     // are not part of a member pointer formation; normal TreeTransforming
9240     // doesn't catch this case because of the way we represent them in the AST.
9241     // FIXME: This is a bit ugly; is it really the best way to handle this
9242     // case?
9243     //
9244     // Error on DeclRefExprs referring to FieldDecls.
9245     ExprResult TransformDeclRefExpr(DeclRefExpr *E) {
9246       if (isa<FieldDecl>(E->getDecl()) &&
9247           SemaRef.ExprEvalContexts.back().Context != Sema::Unevaluated)
9248         return SemaRef.Diag(E->getLocation(),
9249                             diag::err_invalid_non_static_member_use)
9250             << E->getDecl() << E->getSourceRange();
9251 
9252       return BaseTransform::TransformDeclRefExpr(E);
9253     }
9254 
9255     // Exception: filter out member pointer formation
9256     ExprResult TransformUnaryOperator(UnaryOperator *E) {
9257       if (E->getOpcode() == UO_AddrOf && E->getType()->isMemberPointerType())
9258         return E;
9259 
9260       return BaseTransform::TransformUnaryOperator(E);
9261     }
9262 
9263     ExprResult TransformLambdaExpr(LambdaExpr *E) {
9264       // Lambdas never need to be transformed.
9265       return E;
9266     }
9267   };
9268 }
9269 
9270 ExprResult Sema::TranformToPotentiallyEvaluated(Expr *E) {
9271   ExprEvalContexts.back().Context =
9272       ExprEvalContexts[ExprEvalContexts.size()-2].Context;
9273   if (ExprEvalContexts.back().Context == Unevaluated)
9274     return E;
9275   return TransformToPE(*this).TransformExpr(E);
9276 }
9277 
9278 void
9279 Sema::PushExpressionEvaluationContext(ExpressionEvaluationContext NewContext,
9280                                       Decl *LambdaContextDecl,
9281                                       bool IsDecltype) {
9282   ExprEvalContexts.push_back(
9283              ExpressionEvaluationContextRecord(NewContext,
9284                                                ExprCleanupObjects.size(),
9285                                                ExprNeedsCleanups,
9286                                                LambdaContextDecl,
9287                                                IsDecltype));
9288   ExprNeedsCleanups = false;
9289   if (!MaybeODRUseExprs.empty())
9290     std::swap(MaybeODRUseExprs, ExprEvalContexts.back().SavedMaybeODRUseExprs);
9291 }
9292 
9293 void Sema::PopExpressionEvaluationContext() {
9294   ExpressionEvaluationContextRecord& Rec = ExprEvalContexts.back();
9295 
9296   if (!Rec.Lambdas.empty()) {
9297     if (Rec.Context == Unevaluated) {
9298       // C++11 [expr.prim.lambda]p2:
9299       //   A lambda-expression shall not appear in an unevaluated operand
9300       //   (Clause 5).
9301       for (unsigned I = 0, N = Rec.Lambdas.size(); I != N; ++I)
9302         Diag(Rec.Lambdas[I]->getLocStart(),
9303              diag::err_lambda_unevaluated_operand);
9304     } else {
9305       // Mark the capture expressions odr-used. This was deferred
9306       // during lambda expression creation.
9307       for (unsigned I = 0, N = Rec.Lambdas.size(); I != N; ++I) {
9308         LambdaExpr *Lambda = Rec.Lambdas[I];
9309         for (LambdaExpr::capture_init_iterator
9310                   C = Lambda->capture_init_begin(),
9311                CEnd = Lambda->capture_init_end();
9312              C != CEnd; ++C) {
9313           MarkDeclarationsReferencedInExpr(*C);
9314         }
9315       }
9316     }
9317   }
9318 
9319   // When are coming out of an unevaluated context, clear out any
9320   // temporaries that we may have created as part of the evaluation of
9321   // the expression in that context: they aren't relevant because they
9322   // will never be constructed.
9323   if (Rec.Context == Unevaluated || Rec.Context == ConstantEvaluated) {
9324     ExprCleanupObjects.erase(ExprCleanupObjects.begin() + Rec.NumCleanupObjects,
9325                              ExprCleanupObjects.end());
9326     ExprNeedsCleanups = Rec.ParentNeedsCleanups;
9327     CleanupVarDeclMarking();
9328     std::swap(MaybeODRUseExprs, Rec.SavedMaybeODRUseExprs);
9329   // Otherwise, merge the contexts together.
9330   } else {
9331     ExprNeedsCleanups |= Rec.ParentNeedsCleanups;
9332     MaybeODRUseExprs.insert(Rec.SavedMaybeODRUseExprs.begin(),
9333                             Rec.SavedMaybeODRUseExprs.end());
9334   }
9335 
9336   // Pop the current expression evaluation context off the stack.
9337   ExprEvalContexts.pop_back();
9338 }
9339 
9340 void Sema::DiscardCleanupsInEvaluationContext() {
9341   ExprCleanupObjects.erase(
9342          ExprCleanupObjects.begin() + ExprEvalContexts.back().NumCleanupObjects,
9343          ExprCleanupObjects.end());
9344   ExprNeedsCleanups = false;
9345   MaybeODRUseExprs.clear();
9346 }
9347 
9348 ExprResult Sema::HandleExprEvaluationContextForTypeof(Expr *E) {
9349   if (!E->getType()->isVariablyModifiedType())
9350     return E;
9351   return TranformToPotentiallyEvaluated(E);
9352 }
9353 
9354 static bool IsPotentiallyEvaluatedContext(Sema &SemaRef) {
9355   // Do not mark anything as "used" within a dependent context; wait for
9356   // an instantiation.
9357   if (SemaRef.CurContext->isDependentContext())
9358     return false;
9359 
9360   switch (SemaRef.ExprEvalContexts.back().Context) {
9361     case Sema::Unevaluated:
9362       // We are in an expression that is not potentially evaluated; do nothing.
9363       // (Depending on how you read the standard, we actually do need to do
9364       // something here for null pointer constants, but the standard's
9365       // definition of a null pointer constant is completely crazy.)
9366       return false;
9367 
9368     case Sema::ConstantEvaluated:
9369     case Sema::PotentiallyEvaluated:
9370       // We are in a potentially evaluated expression (or a constant-expression
9371       // in C++03); we need to do implicit template instantiation, implicitly
9372       // define class members, and mark most declarations as used.
9373       return true;
9374 
9375     case Sema::PotentiallyEvaluatedIfUsed:
9376       // Referenced declarations will only be used if the construct in the
9377       // containing expression is used.
9378       return false;
9379   }
9380   llvm_unreachable("Invalid context");
9381 }
9382 
9383 /// \brief Mark a function referenced, and check whether it is odr-used
9384 /// (C++ [basic.def.odr]p2, C99 6.9p3)
9385 void Sema::MarkFunctionReferenced(SourceLocation Loc, FunctionDecl *Func) {
9386   assert(Func && "No function?");
9387 
9388   Func->setReferenced();
9389 
9390   // Don't mark this function as used multiple times, unless it's a constexpr
9391   // function which we need to instantiate.
9392   if (Func->isUsed(false) &&
9393       !(Func->isConstexpr() && !Func->getBody() &&
9394         Func->isImplicitlyInstantiable()))
9395     return;
9396 
9397   if (!IsPotentiallyEvaluatedContext(*this))
9398     return;
9399 
9400   // Note that this declaration has been used.
9401   if (CXXConstructorDecl *Constructor = dyn_cast<CXXConstructorDecl>(Func)) {
9402     if (Constructor->isDefaulted()) {
9403       if (Constructor->isDefaultConstructor()) {
9404         if (Constructor->isTrivial())
9405           return;
9406         if (!Constructor->isUsed(false))
9407           DefineImplicitDefaultConstructor(Loc, Constructor);
9408       } else if (Constructor->isCopyConstructor()) {
9409         if (!Constructor->isUsed(false))
9410           DefineImplicitCopyConstructor(Loc, Constructor);
9411       } else if (Constructor->isMoveConstructor()) {
9412         if (!Constructor->isUsed(false))
9413           DefineImplicitMoveConstructor(Loc, Constructor);
9414       }
9415     }
9416 
9417     MarkVTableUsed(Loc, Constructor->getParent());
9418   } else if (CXXDestructorDecl *Destructor =
9419                  dyn_cast<CXXDestructorDecl>(Func)) {
9420     if (Destructor->isDefaulted() && !Destructor->isUsed(false))
9421       DefineImplicitDestructor(Loc, Destructor);
9422     if (Destructor->isVirtual())
9423       MarkVTableUsed(Loc, Destructor->getParent());
9424   } else if (CXXMethodDecl *MethodDecl = dyn_cast<CXXMethodDecl>(Func)) {
9425     if (MethodDecl->isDefaulted() && MethodDecl->isOverloadedOperator() &&
9426         MethodDecl->getOverloadedOperator() == OO_Equal) {
9427       if (!MethodDecl->isUsed(false)) {
9428         if (MethodDecl->isCopyAssignmentOperator())
9429           DefineImplicitCopyAssignment(Loc, MethodDecl);
9430         else
9431           DefineImplicitMoveAssignment(Loc, MethodDecl);
9432       }
9433     } else if (isa<CXXConversionDecl>(MethodDecl) &&
9434                MethodDecl->getParent()->isLambda()) {
9435       CXXConversionDecl *Conversion = cast<CXXConversionDecl>(MethodDecl);
9436       if (Conversion->isLambdaToBlockPointerConversion())
9437         DefineImplicitLambdaToBlockPointerConversion(Loc, Conversion);
9438       else
9439         DefineImplicitLambdaToFunctionPointerConversion(Loc, Conversion);
9440     } else if (MethodDecl->isVirtual())
9441       MarkVTableUsed(Loc, MethodDecl->getParent());
9442   }
9443 
9444   // Recursive functions should be marked when used from another function.
9445   // FIXME: Is this really right?
9446   if (CurContext == Func) return;
9447 
9448   // Implicit instantiation of function templates and member functions of
9449   // class templates.
9450   if (Func->isImplicitlyInstantiable()) {
9451     bool AlreadyInstantiated = false;
9452     SourceLocation PointOfInstantiation = Loc;
9453     if (FunctionTemplateSpecializationInfo *SpecInfo
9454                               = Func->getTemplateSpecializationInfo()) {
9455       if (SpecInfo->getPointOfInstantiation().isInvalid())
9456         SpecInfo->setPointOfInstantiation(Loc);
9457       else if (SpecInfo->getTemplateSpecializationKind()
9458                  == TSK_ImplicitInstantiation) {
9459         AlreadyInstantiated = true;
9460         PointOfInstantiation = SpecInfo->getPointOfInstantiation();
9461       }
9462     } else if (MemberSpecializationInfo *MSInfo
9463                                 = Func->getMemberSpecializationInfo()) {
9464       if (MSInfo->getPointOfInstantiation().isInvalid())
9465         MSInfo->setPointOfInstantiation(Loc);
9466       else if (MSInfo->getTemplateSpecializationKind()
9467                  == TSK_ImplicitInstantiation) {
9468         AlreadyInstantiated = true;
9469         PointOfInstantiation = MSInfo->getPointOfInstantiation();
9470       }
9471     }
9472 
9473     if (!AlreadyInstantiated || Func->isConstexpr()) {
9474       if (isa<CXXRecordDecl>(Func->getDeclContext()) &&
9475           cast<CXXRecordDecl>(Func->getDeclContext())->isLocalClass())
9476         PendingLocalImplicitInstantiations.push_back(
9477             std::make_pair(Func, PointOfInstantiation));
9478       else if (Func->isConstexpr())
9479         // Do not defer instantiations of constexpr functions, to avoid the
9480         // expression evaluator needing to call back into Sema if it sees a
9481         // call to such a function.
9482         InstantiateFunctionDefinition(PointOfInstantiation, Func);
9483       else {
9484         PendingInstantiations.push_back(std::make_pair(Func,
9485                                                        PointOfInstantiation));
9486         // Notify the consumer that a function was implicitly instantiated.
9487         Consumer.HandleCXXImplicitFunctionInstantiation(Func);
9488       }
9489     }
9490   } else {
9491     // Walk redefinitions, as some of them may be instantiable.
9492     for (FunctionDecl::redecl_iterator i(Func->redecls_begin()),
9493          e(Func->redecls_end()); i != e; ++i) {
9494       if (!i->isUsed(false) && i->isImplicitlyInstantiable())
9495         MarkFunctionReferenced(Loc, *i);
9496     }
9497   }
9498 
9499   // Keep track of used but undefined functions.
9500   if (!Func->isPure() && !Func->hasBody() &&
9501       Func->getLinkage() != ExternalLinkage) {
9502     SourceLocation &old = UndefinedInternals[Func->getCanonicalDecl()];
9503     if (old.isInvalid()) old = Loc;
9504   }
9505 
9506   Func->setUsed(true);
9507 }
9508 
9509 static void
9510 diagnoseUncapturableValueReference(Sema &S, SourceLocation loc,
9511                                    VarDecl *var, DeclContext *DC) {
9512   DeclContext *VarDC = var->getDeclContext();
9513 
9514   //  If the parameter still belongs to the translation unit, then
9515   //  we're actually just using one parameter in the declaration of
9516   //  the next.
9517   if (isa<ParmVarDecl>(var) &&
9518       isa<TranslationUnitDecl>(VarDC))
9519     return;
9520 
9521   // For C code, don't diagnose about capture if we're not actually in code
9522   // right now; it's impossible to write a non-constant expression outside of
9523   // function context, so we'll get other (more useful) diagnostics later.
9524   //
9525   // For C++, things get a bit more nasty... it would be nice to suppress this
9526   // diagnostic for certain cases like using a local variable in an array bound
9527   // for a member of a local class, but the correct predicate is not obvious.
9528   if (!S.getLangOptions().CPlusPlus && !S.CurContext->isFunctionOrMethod())
9529     return;
9530 
9531   if (isa<CXXMethodDecl>(VarDC) &&
9532       cast<CXXRecordDecl>(VarDC->getParent())->isLambda()) {
9533     S.Diag(loc, diag::err_reference_to_local_var_in_enclosing_lambda)
9534       << var->getIdentifier();
9535   } else if (FunctionDecl *fn = dyn_cast<FunctionDecl>(VarDC)) {
9536     S.Diag(loc, diag::err_reference_to_local_var_in_enclosing_function)
9537       << var->getIdentifier() << fn->getDeclName();
9538   } else if (isa<BlockDecl>(VarDC)) {
9539     S.Diag(loc, diag::err_reference_to_local_var_in_enclosing_block)
9540       << var->getIdentifier();
9541   } else {
9542     // FIXME: Is there any other context where a local variable can be
9543     // declared?
9544     S.Diag(loc, diag::err_reference_to_local_var_in_enclosing_context)
9545       << var->getIdentifier();
9546   }
9547 
9548   S.Diag(var->getLocation(), diag::note_local_variable_declared_here)
9549     << var->getIdentifier();
9550 
9551   // FIXME: Add additional diagnostic info about class etc. which prevents
9552   // capture.
9553 }
9554 
9555 /// \brief Capture the given variable in the given lambda expression.
9556 static ExprResult captureInLambda(Sema &S, LambdaScopeInfo *LSI,
9557                                   VarDecl *Var, QualType FieldType,
9558                                   QualType DeclRefType,
9559                                   SourceLocation Loc) {
9560   CXXRecordDecl *Lambda = LSI->Lambda;
9561 
9562   // Build the non-static data member.
9563   FieldDecl *Field
9564     = FieldDecl::Create(S.Context, Lambda, Loc, Loc, 0, FieldType,
9565                         S.Context.getTrivialTypeSourceInfo(FieldType, Loc),
9566                         0, false, false);
9567   Field->setImplicit(true);
9568   Field->setAccess(AS_private);
9569   Lambda->addDecl(Field);
9570 
9571   // C++11 [expr.prim.lambda]p21:
9572   //   When the lambda-expression is evaluated, the entities that
9573   //   are captured by copy are used to direct-initialize each
9574   //   corresponding non-static data member of the resulting closure
9575   //   object. (For array members, the array elements are
9576   //   direct-initialized in increasing subscript order.) These
9577   //   initializations are performed in the (unspecified) order in
9578   //   which the non-static data members are declared.
9579 
9580   // Introduce a new evaluation context for the initialization, so
9581   // that temporaries introduced as part of the capture are retained
9582   // to be re-"exported" from the lambda expression itself.
9583   S.PushExpressionEvaluationContext(Sema::PotentiallyEvaluated);
9584 
9585   // C++ [expr.prim.labda]p12:
9586   //   An entity captured by a lambda-expression is odr-used (3.2) in
9587   //   the scope containing the lambda-expression.
9588   Expr *Ref = new (S.Context) DeclRefExpr(Var, DeclRefType, VK_LValue, Loc);
9589   Var->setUsed(true);
9590 
9591   // When the field has array type, create index variables for each
9592   // dimension of the array. We use these index variables to subscript
9593   // the source array, and other clients (e.g., CodeGen) will perform
9594   // the necessary iteration with these index variables.
9595   SmallVector<VarDecl *, 4> IndexVariables;
9596   QualType BaseType = FieldType;
9597   QualType SizeType = S.Context.getSizeType();
9598   LSI->ArrayIndexStarts.push_back(LSI->ArrayIndexVars.size());
9599   while (const ConstantArrayType *Array
9600                         = S.Context.getAsConstantArrayType(BaseType)) {
9601     // Create the iteration variable for this array index.
9602     IdentifierInfo *IterationVarName = 0;
9603     {
9604       SmallString<8> Str;
9605       llvm::raw_svector_ostream OS(Str);
9606       OS << "__i" << IndexVariables.size();
9607       IterationVarName = &S.Context.Idents.get(OS.str());
9608     }
9609     VarDecl *IterationVar
9610       = VarDecl::Create(S.Context, S.CurContext, Loc, Loc,
9611                         IterationVarName, SizeType,
9612                         S.Context.getTrivialTypeSourceInfo(SizeType, Loc),
9613                         SC_None, SC_None);
9614     IndexVariables.push_back(IterationVar);
9615     LSI->ArrayIndexVars.push_back(IterationVar);
9616 
9617     // Create a reference to the iteration variable.
9618     ExprResult IterationVarRef
9619       = S.BuildDeclRefExpr(IterationVar, SizeType, VK_LValue, Loc);
9620     assert(!IterationVarRef.isInvalid() &&
9621            "Reference to invented variable cannot fail!");
9622     IterationVarRef = S.DefaultLvalueConversion(IterationVarRef.take());
9623     assert(!IterationVarRef.isInvalid() &&
9624            "Conversion of invented variable cannot fail!");
9625 
9626     // Subscript the array with this iteration variable.
9627     ExprResult Subscript = S.CreateBuiltinArraySubscriptExpr(
9628                              Ref, Loc, IterationVarRef.take(), Loc);
9629     if (Subscript.isInvalid()) {
9630       S.CleanupVarDeclMarking();
9631       S.DiscardCleanupsInEvaluationContext();
9632       S.PopExpressionEvaluationContext();
9633       return ExprError();
9634     }
9635 
9636     Ref = Subscript.take();
9637     BaseType = Array->getElementType();
9638   }
9639 
9640   // Construct the entity that we will be initializing. For an array, this
9641   // will be first element in the array, which may require several levels
9642   // of array-subscript entities.
9643   SmallVector<InitializedEntity, 4> Entities;
9644   Entities.reserve(1 + IndexVariables.size());
9645   Entities.push_back(
9646     InitializedEntity::InitializeLambdaCapture(Var, Field, Loc));
9647   for (unsigned I = 0, N = IndexVariables.size(); I != N; ++I)
9648     Entities.push_back(InitializedEntity::InitializeElement(S.Context,
9649                                                             0,
9650                                                             Entities.back()));
9651 
9652   InitializationKind InitKind
9653     = InitializationKind::CreateDirect(Loc, Loc, Loc);
9654   InitializationSequence Init(S, Entities.back(), InitKind, &Ref, 1);
9655   ExprResult Result(true);
9656   if (!Init.Diagnose(S, Entities.back(), InitKind, &Ref, 1))
9657     Result = Init.Perform(S, Entities.back(), InitKind,
9658                           MultiExprArg(S, &Ref, 1));
9659 
9660   // If this initialization requires any cleanups (e.g., due to a
9661   // default argument to a copy constructor), note that for the
9662   // lambda.
9663   if (S.ExprNeedsCleanups)
9664     LSI->ExprNeedsCleanups = true;
9665 
9666   // Exit the expression evaluation context used for the capture.
9667   S.CleanupVarDeclMarking();
9668   S.DiscardCleanupsInEvaluationContext();
9669   S.PopExpressionEvaluationContext();
9670   return Result;
9671 }
9672 
9673 bool Sema::tryCaptureVariable(VarDecl *Var, SourceLocation Loc,
9674                               TryCaptureKind Kind, SourceLocation EllipsisLoc,
9675                               bool BuildAndDiagnose,
9676                               QualType &CaptureType,
9677                               QualType &DeclRefType) {
9678   bool Nested = false;
9679 
9680   DeclContext *DC = CurContext;
9681   if (Var->getDeclContext() == DC) return true;
9682   if (!Var->hasLocalStorage()) return true;
9683 
9684   bool HasBlocksAttr = Var->hasAttr<BlocksAttr>();
9685 
9686   // Walk up the stack to determine whether we can capture the variable,
9687   // performing the "simple" checks that don't depend on type. We stop when
9688   // we've either hit the declared scope of the variable or find an existing
9689   // capture of that variable.
9690   CaptureType = Var->getType();
9691   DeclRefType = CaptureType.getNonReferenceType();
9692   bool Explicit = (Kind != TryCapture_Implicit);
9693   unsigned FunctionScopesIndex = FunctionScopes.size() - 1;
9694   do {
9695     // Only block literals and lambda expressions can capture; other
9696     // scopes don't work.
9697     DeclContext *ParentDC;
9698     if (isa<BlockDecl>(DC))
9699       ParentDC = DC->getParent();
9700     else if (isa<CXXMethodDecl>(DC) &&
9701              cast<CXXMethodDecl>(DC)->getOverloadedOperator() == OO_Call &&
9702              cast<CXXRecordDecl>(DC->getParent())->isLambda())
9703       ParentDC = DC->getParent()->getParent();
9704     else {
9705       if (BuildAndDiagnose)
9706         diagnoseUncapturableValueReference(*this, Loc, Var, DC);
9707       return true;
9708     }
9709 
9710     CapturingScopeInfo *CSI =
9711       cast<CapturingScopeInfo>(FunctionScopes[FunctionScopesIndex]);
9712 
9713     // Check whether we've already captured it.
9714     if (CSI->CaptureMap.count(Var)) {
9715       // If we found a capture, any subcaptures are nested.
9716       Nested = true;
9717 
9718       // Retrieve the capture type for this variable.
9719       CaptureType = CSI->getCapture(Var).getCaptureType();
9720 
9721       // Compute the type of an expression that refers to this variable.
9722       DeclRefType = CaptureType.getNonReferenceType();
9723 
9724       const CapturingScopeInfo::Capture &Cap = CSI->getCapture(Var);
9725       if (Cap.isCopyCapture() &&
9726           !(isa<LambdaScopeInfo>(CSI) && cast<LambdaScopeInfo>(CSI)->Mutable))
9727         DeclRefType.addConst();
9728       break;
9729     }
9730 
9731     bool IsBlock = isa<BlockScopeInfo>(CSI);
9732     bool IsLambda = !IsBlock;
9733 
9734     // Lambdas are not allowed to capture unnamed variables
9735     // (e.g. anonymous unions).
9736     // FIXME: The C++11 rule don't actually state this explicitly, but I'm
9737     // assuming that's the intent.
9738     if (IsLambda && !Var->getDeclName()) {
9739       if (BuildAndDiagnose) {
9740         Diag(Loc, diag::err_lambda_capture_anonymous_var);
9741         Diag(Var->getLocation(), diag::note_declared_at);
9742       }
9743       return true;
9744     }
9745 
9746     // Prohibit variably-modified types; they're difficult to deal with.
9747     if (Var->getType()->isVariablyModifiedType()) {
9748       if (BuildAndDiagnose) {
9749         if (IsBlock)
9750           Diag(Loc, diag::err_ref_vm_type);
9751         else
9752           Diag(Loc, diag::err_lambda_capture_vm_type) << Var->getDeclName();
9753         Diag(Var->getLocation(), diag::note_previous_decl)
9754           << Var->getDeclName();
9755       }
9756       return true;
9757     }
9758 
9759     // Lambdas are not allowed to capture __block variables; they don't
9760     // support the expected semantics.
9761     if (IsLambda && HasBlocksAttr) {
9762       if (BuildAndDiagnose) {
9763         Diag(Loc, diag::err_lambda_capture_block)
9764           << Var->getDeclName();
9765         Diag(Var->getLocation(), diag::note_previous_decl)
9766           << Var->getDeclName();
9767       }
9768       return true;
9769     }
9770 
9771     if (CSI->ImpCaptureStyle == CapturingScopeInfo::ImpCap_None && !Explicit) {
9772       // No capture-default
9773       if (BuildAndDiagnose) {
9774         Diag(Loc, diag::err_lambda_impcap) << Var->getDeclName();
9775         Diag(Var->getLocation(), diag::note_previous_decl)
9776           << Var->getDeclName();
9777         Diag(cast<LambdaScopeInfo>(CSI)->Lambda->getLocStart(),
9778              diag::note_lambda_decl);
9779       }
9780       return true;
9781     }
9782 
9783     FunctionScopesIndex--;
9784     DC = ParentDC;
9785     Explicit = false;
9786   } while (!Var->getDeclContext()->Equals(DC));
9787 
9788   // Walk back down the scope stack, computing the type of the capture at
9789   // each step, checking type-specific requirements, and adding captures if
9790   // requested.
9791   for (unsigned I = ++FunctionScopesIndex, N = FunctionScopes.size(); I != N;
9792        ++I) {
9793     CapturingScopeInfo *CSI = cast<CapturingScopeInfo>(FunctionScopes[I]);
9794 
9795     // Compute the type of the capture and of a reference to the capture within
9796     // this scope.
9797     if (isa<BlockScopeInfo>(CSI)) {
9798       Expr *CopyExpr = 0;
9799       bool ByRef = false;
9800 
9801       // Blocks are not allowed to capture arrays.
9802       if (CaptureType->isArrayType()) {
9803         if (BuildAndDiagnose) {
9804           Diag(Loc, diag::err_ref_array_type);
9805           Diag(Var->getLocation(), diag::note_previous_decl)
9806           << Var->getDeclName();
9807         }
9808         return true;
9809       }
9810 
9811       if (HasBlocksAttr || CaptureType->isReferenceType()) {
9812         // Block capture by reference does not change the capture or
9813         // declaration reference types.
9814         ByRef = true;
9815       } else {
9816         // Block capture by copy introduces 'const'.
9817         CaptureType = CaptureType.getNonReferenceType().withConst();
9818         DeclRefType = CaptureType;
9819 
9820         if (getLangOptions().CPlusPlus && BuildAndDiagnose) {
9821           if (const RecordType *Record = DeclRefType->getAs<RecordType>()) {
9822             // The capture logic needs the destructor, so make sure we mark it.
9823             // Usually this is unnecessary because most local variables have
9824             // their destructors marked at declaration time, but parameters are
9825             // an exception because it's technically only the call site that
9826             // actually requires the destructor.
9827             if (isa<ParmVarDecl>(Var))
9828               FinalizeVarWithDestructor(Var, Record);
9829 
9830             // According to the blocks spec, the capture of a variable from
9831             // the stack requires a const copy constructor.  This is not true
9832             // of the copy/move done to move a __block variable to the heap.
9833             Expr *DeclRef = new (Context) DeclRefExpr(Var,
9834                                                       DeclRefType.withConst(),
9835                                                       VK_LValue, Loc);
9836             ExprResult Result
9837               = PerformCopyInitialization(
9838                   InitializedEntity::InitializeBlock(Var->getLocation(),
9839                                                      CaptureType, false),
9840                   Loc, Owned(DeclRef));
9841 
9842             // Build a full-expression copy expression if initialization
9843             // succeeded and used a non-trivial constructor.  Recover from
9844             // errors by pretending that the copy isn't necessary.
9845             if (!Result.isInvalid() &&
9846                 !cast<CXXConstructExpr>(Result.get())->getConstructor()
9847                    ->isTrivial()) {
9848               Result = MaybeCreateExprWithCleanups(Result);
9849               CopyExpr = Result.take();
9850             }
9851           }
9852         }
9853       }
9854 
9855       // Actually capture the variable.
9856       if (BuildAndDiagnose)
9857         CSI->addCapture(Var, HasBlocksAttr, ByRef, Nested, Loc,
9858                         SourceLocation(), CaptureType, CopyExpr);
9859       Nested = true;
9860       continue;
9861     }
9862 
9863     LambdaScopeInfo *LSI = cast<LambdaScopeInfo>(CSI);
9864 
9865     // Determine whether we are capturing by reference or by value.
9866     bool ByRef = false;
9867     if (I == N - 1 && Kind != TryCapture_Implicit) {
9868       ByRef = (Kind == TryCapture_ExplicitByRef);
9869     } else {
9870       ByRef = (LSI->ImpCaptureStyle == LambdaScopeInfo::ImpCap_LambdaByref);
9871     }
9872 
9873     // Compute the type of the field that will capture this variable.
9874     if (ByRef) {
9875       // C++11 [expr.prim.lambda]p15:
9876       //   An entity is captured by reference if it is implicitly or
9877       //   explicitly captured but not captured by copy. It is
9878       //   unspecified whether additional unnamed non-static data
9879       //   members are declared in the closure type for entities
9880       //   captured by reference.
9881       //
9882       // FIXME: It is not clear whether we want to build an lvalue reference
9883       // to the DeclRefType or to CaptureType.getNonReferenceType(). GCC appears
9884       // to do the former, while EDG does the latter. Core issue 1249 will
9885       // clarify, but for now we follow GCC because it's a more permissive and
9886       // easily defensible position.
9887       CaptureType = Context.getLValueReferenceType(DeclRefType);
9888     } else {
9889       // C++11 [expr.prim.lambda]p14:
9890       //   For each entity captured by copy, an unnamed non-static
9891       //   data member is declared in the closure type. The
9892       //   declaration order of these members is unspecified. The type
9893       //   of such a data member is the type of the corresponding
9894       //   captured entity if the entity is not a reference to an
9895       //   object, or the referenced type otherwise. [Note: If the
9896       //   captured entity is a reference to a function, the
9897       //   corresponding data member is also a reference to a
9898       //   function. - end note ]
9899       if (const ReferenceType *RefType = CaptureType->getAs<ReferenceType>()){
9900         if (!RefType->getPointeeType()->isFunctionType())
9901           CaptureType = RefType->getPointeeType();
9902       }
9903     }
9904 
9905     // Capture this variable in the lambda.
9906     Expr *CopyExpr = 0;
9907     if (BuildAndDiagnose) {
9908       ExprResult Result = captureInLambda(*this, LSI, Var, CaptureType,
9909                                           DeclRefType, Loc);
9910       if (!Result.isInvalid())
9911         CopyExpr = Result.take();
9912     }
9913 
9914     // Compute the type of a reference to this captured variable.
9915     if (ByRef)
9916       DeclRefType = CaptureType.getNonReferenceType();
9917     else {
9918       // C++ [expr.prim.lambda]p5:
9919       //   The closure type for a lambda-expression has a public inline
9920       //   function call operator [...]. This function call operator is
9921       //   declared const (9.3.1) if and only if the lambda-expression’s
9922       //   parameter-declaration-clause is not followed by mutable.
9923       DeclRefType = CaptureType.getNonReferenceType();
9924       if (!LSI->Mutable && !CaptureType->isReferenceType())
9925         DeclRefType.addConst();
9926     }
9927 
9928     // Add the capture.
9929     if (BuildAndDiagnose)
9930       CSI->addCapture(Var, /*IsBlock=*/false, ByRef, Nested, Loc,
9931                       EllipsisLoc, CaptureType, CopyExpr);
9932     Nested = true;
9933   }
9934 
9935   return false;
9936 }
9937 
9938 bool Sema::tryCaptureVariable(VarDecl *Var, SourceLocation Loc,
9939                               TryCaptureKind Kind, SourceLocation EllipsisLoc) {
9940   QualType CaptureType;
9941   QualType DeclRefType;
9942   return tryCaptureVariable(Var, Loc, Kind, EllipsisLoc,
9943                             /*BuildAndDiagnose=*/true, CaptureType,
9944                             DeclRefType);
9945 }
9946 
9947 QualType Sema::getCapturedDeclRefType(VarDecl *Var, SourceLocation Loc) {
9948   QualType CaptureType;
9949   QualType DeclRefType;
9950 
9951   // Determine whether we can capture this variable.
9952   if (tryCaptureVariable(Var, Loc, TryCapture_Implicit, SourceLocation(),
9953                          /*BuildAndDiagnose=*/false, CaptureType, DeclRefType))
9954     return QualType();
9955 
9956   return DeclRefType;
9957 }
9958 
9959 static void MarkVarDeclODRUsed(Sema &SemaRef, VarDecl *Var,
9960                                SourceLocation Loc) {
9961   // Keep track of used but undefined variables.
9962   // FIXME: We shouldn't suppress this warning for static data members.
9963   if (Var->hasDefinition() == VarDecl::DeclarationOnly &&
9964       Var->getLinkage() != ExternalLinkage &&
9965       !(Var->isStaticDataMember() && Var->hasInit())) {
9966     SourceLocation &old = SemaRef.UndefinedInternals[Var->getCanonicalDecl()];
9967     if (old.isInvalid()) old = Loc;
9968   }
9969 
9970   SemaRef.tryCaptureVariable(Var, Loc);
9971 
9972   Var->setUsed(true);
9973 }
9974 
9975 void Sema::UpdateMarkingForLValueToRValue(Expr *E) {
9976   // Per C++11 [basic.def.odr], a variable is odr-used "unless it is
9977   // an object that satisfies the requirements for appearing in a
9978   // constant expression (5.19) and the lvalue-to-rvalue conversion (4.1)
9979   // is immediately applied."  This function handles the lvalue-to-rvalue
9980   // conversion part.
9981   MaybeODRUseExprs.erase(E->IgnoreParens());
9982 }
9983 
9984 void Sema::CleanupVarDeclMarking() {
9985   for (llvm::SmallPtrSetIterator<Expr*> i = MaybeODRUseExprs.begin(),
9986                                         e = MaybeODRUseExprs.end();
9987        i != e; ++i) {
9988     VarDecl *Var;
9989     SourceLocation Loc;
9990     if (BlockDeclRefExpr *BDRE = dyn_cast<BlockDeclRefExpr>(*i)) {
9991       Var = BDRE->getDecl();
9992       Loc = BDRE->getLocation();
9993     } else if (DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(*i)) {
9994       Var = cast<VarDecl>(DRE->getDecl());
9995       Loc = DRE->getLocation();
9996     } else if (MemberExpr *ME = dyn_cast<MemberExpr>(*i)) {
9997       Var = cast<VarDecl>(ME->getMemberDecl());
9998       Loc = ME->getMemberLoc();
9999     } else {
10000       llvm_unreachable("Unexpcted expression");
10001     }
10002 
10003     MarkVarDeclODRUsed(*this, Var, Loc);
10004   }
10005 
10006   MaybeODRUseExprs.clear();
10007 }
10008 
10009 // Mark a VarDecl referenced, and perform the necessary handling to compute
10010 // odr-uses.
10011 static void DoMarkVarDeclReferenced(Sema &SemaRef, SourceLocation Loc,
10012                                     VarDecl *Var, Expr *E) {
10013   Var->setReferenced();
10014 
10015   if (!IsPotentiallyEvaluatedContext(SemaRef))
10016     return;
10017 
10018   // Implicit instantiation of static data members of class templates.
10019   if (Var->isStaticDataMember() && Var->getInstantiatedFromStaticDataMember()) {
10020     MemberSpecializationInfo *MSInfo = Var->getMemberSpecializationInfo();
10021     assert(MSInfo && "Missing member specialization information?");
10022     bool AlreadyInstantiated = !MSInfo->getPointOfInstantiation().isInvalid();
10023     if (MSInfo->getTemplateSpecializationKind() == TSK_ImplicitInstantiation &&
10024         (!AlreadyInstantiated || Var->isUsableInConstantExpressions())) {
10025       if (!AlreadyInstantiated) {
10026         // This is a modification of an existing AST node. Notify listeners.
10027         if (ASTMutationListener *L = SemaRef.getASTMutationListener())
10028           L->StaticDataMemberInstantiated(Var);
10029         MSInfo->setPointOfInstantiation(Loc);
10030       }
10031       SourceLocation PointOfInstantiation = MSInfo->getPointOfInstantiation();
10032       if (Var->isUsableInConstantExpressions())
10033         // Do not defer instantiations of variables which could be used in a
10034         // constant expression.
10035         SemaRef.InstantiateStaticDataMemberDefinition(PointOfInstantiation,Var);
10036       else
10037         SemaRef.PendingInstantiations.push_back(
10038             std::make_pair(Var, PointOfInstantiation));
10039     }
10040   }
10041 
10042   // Per C++11 [basic.def.odr], a variable is odr-used "unless it is
10043   // an object that satisfies the requirements for appearing in a
10044   // constant expression (5.19) and the lvalue-to-rvalue conversion (4.1)
10045   // is immediately applied."  We check the first part here, and
10046   // Sema::UpdateMarkingForLValueToRValue deals with the second part.
10047   // Note that we use the C++11 definition everywhere because nothing in
10048   // C++03 depends on whether we get the C++03 version correct.
10049   const VarDecl *DefVD;
10050   if (E && !isa<ParmVarDecl>(Var) &&
10051       Var->isUsableInConstantExpressions() &&
10052       Var->getAnyInitializer(DefVD) && DefVD->checkInitIsICE())
10053     SemaRef.MaybeODRUseExprs.insert(E);
10054   else
10055     MarkVarDeclODRUsed(SemaRef, Var, Loc);
10056 }
10057 
10058 /// \brief Mark a variable referenced, and check whether it is odr-used
10059 /// (C++ [basic.def.odr]p2, C99 6.9p3).  Note that this should not be
10060 /// used directly for normal expressions referring to VarDecl.
10061 void Sema::MarkVariableReferenced(SourceLocation Loc, VarDecl *Var) {
10062   DoMarkVarDeclReferenced(*this, Loc, Var, 0);
10063 }
10064 
10065 static void MarkExprReferenced(Sema &SemaRef, SourceLocation Loc,
10066                                Decl *D, Expr *E) {
10067   if (VarDecl *Var = dyn_cast<VarDecl>(D)) {
10068     DoMarkVarDeclReferenced(SemaRef, Loc, Var, E);
10069     return;
10070   }
10071 
10072   SemaRef.MarkAnyDeclReferenced(Loc, D);
10073 }
10074 
10075 /// \brief Perform reference-marking and odr-use handling for a
10076 /// BlockDeclRefExpr.
10077 void Sema::MarkBlockDeclRefReferenced(BlockDeclRefExpr *E) {
10078   MarkExprReferenced(*this, E->getLocation(), E->getDecl(), E);
10079 }
10080 
10081 /// \brief Perform reference-marking and odr-use handling for a DeclRefExpr.
10082 void Sema::MarkDeclRefReferenced(DeclRefExpr *E) {
10083   MarkExprReferenced(*this, E->getLocation(), E->getDecl(), E);
10084 }
10085 
10086 /// \brief Perform reference-marking and odr-use handling for a MemberExpr.
10087 void Sema::MarkMemberReferenced(MemberExpr *E) {
10088   MarkExprReferenced(*this, E->getMemberLoc(), E->getMemberDecl(), E);
10089 }
10090 
10091 /// \brief Perform marking for a reference to an arbitrary declaration.  It
10092 /// marks the declaration referenced, and performs odr-use checking for functions
10093 /// and variables. This method should not be used when building an normal
10094 /// expression which refers to a variable.
10095 void Sema::MarkAnyDeclReferenced(SourceLocation Loc, Decl *D) {
10096   if (VarDecl *VD = dyn_cast<VarDecl>(D))
10097     MarkVariableReferenced(Loc, VD);
10098   else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D))
10099     MarkFunctionReferenced(Loc, FD);
10100   else
10101     D->setReferenced();
10102 }
10103 
10104 namespace {
10105   // Mark all of the declarations referenced
10106   // FIXME: Not fully implemented yet! We need to have a better understanding
10107   // of when we're entering
10108   class MarkReferencedDecls : public RecursiveASTVisitor<MarkReferencedDecls> {
10109     Sema &S;
10110     SourceLocation Loc;
10111 
10112   public:
10113     typedef RecursiveASTVisitor<MarkReferencedDecls> Inherited;
10114 
10115     MarkReferencedDecls(Sema &S, SourceLocation Loc) : S(S), Loc(Loc) { }
10116 
10117     bool TraverseTemplateArgument(const TemplateArgument &Arg);
10118     bool TraverseRecordType(RecordType *T);
10119   };
10120 }
10121 
10122 bool MarkReferencedDecls::TraverseTemplateArgument(
10123   const TemplateArgument &Arg) {
10124   if (Arg.getKind() == TemplateArgument::Declaration) {
10125     S.MarkAnyDeclReferenced(Loc, Arg.getAsDecl());
10126   }
10127 
10128   return Inherited::TraverseTemplateArgument(Arg);
10129 }
10130 
10131 bool MarkReferencedDecls::TraverseRecordType(RecordType *T) {
10132   if (ClassTemplateSpecializationDecl *Spec
10133                   = dyn_cast<ClassTemplateSpecializationDecl>(T->getDecl())) {
10134     const TemplateArgumentList &Args = Spec->getTemplateArgs();
10135     return TraverseTemplateArguments(Args.data(), Args.size());
10136   }
10137 
10138   return true;
10139 }
10140 
10141 void Sema::MarkDeclarationsReferencedInType(SourceLocation Loc, QualType T) {
10142   MarkReferencedDecls Marker(*this, Loc);
10143   Marker.TraverseType(Context.getCanonicalType(T));
10144 }
10145 
10146 namespace {
10147   /// \brief Helper class that marks all of the declarations referenced by
10148   /// potentially-evaluated subexpressions as "referenced".
10149   class EvaluatedExprMarker : public EvaluatedExprVisitor<EvaluatedExprMarker> {
10150     Sema &S;
10151     bool SkipLocalVariables;
10152 
10153   public:
10154     typedef EvaluatedExprVisitor<EvaluatedExprMarker> Inherited;
10155 
10156     EvaluatedExprMarker(Sema &S, bool SkipLocalVariables)
10157       : Inherited(S.Context), S(S), SkipLocalVariables(SkipLocalVariables) { }
10158 
10159     void VisitDeclRefExpr(DeclRefExpr *E) {
10160       // If we were asked not to visit local variables, don't.
10161       if (SkipLocalVariables) {
10162         if (VarDecl *VD = dyn_cast<VarDecl>(E->getDecl()))
10163           if (VD->hasLocalStorage())
10164             return;
10165       }
10166 
10167       S.MarkDeclRefReferenced(E);
10168     }
10169 
10170     void VisitMemberExpr(MemberExpr *E) {
10171       S.MarkMemberReferenced(E);
10172       Inherited::VisitMemberExpr(E);
10173     }
10174 
10175     void VisitCXXBindTemporaryExpr(CXXBindTemporaryExpr *E) {
10176       S.MarkFunctionReferenced(E->getLocStart(),
10177             const_cast<CXXDestructorDecl*>(E->getTemporary()->getDestructor()));
10178       Visit(E->getSubExpr());
10179     }
10180 
10181     void VisitCXXNewExpr(CXXNewExpr *E) {
10182       if (E->getOperatorNew())
10183         S.MarkFunctionReferenced(E->getLocStart(), E->getOperatorNew());
10184       if (E->getOperatorDelete())
10185         S.MarkFunctionReferenced(E->getLocStart(), E->getOperatorDelete());
10186       Inherited::VisitCXXNewExpr(E);
10187     }
10188 
10189     void VisitCXXDeleteExpr(CXXDeleteExpr *E) {
10190       if (E->getOperatorDelete())
10191         S.MarkFunctionReferenced(E->getLocStart(), E->getOperatorDelete());
10192       QualType Destroyed = S.Context.getBaseElementType(E->getDestroyedType());
10193       if (const RecordType *DestroyedRec = Destroyed->getAs<RecordType>()) {
10194         CXXRecordDecl *Record = cast<CXXRecordDecl>(DestroyedRec->getDecl());
10195         S.MarkFunctionReferenced(E->getLocStart(),
10196                                     S.LookupDestructor(Record));
10197       }
10198 
10199       Inherited::VisitCXXDeleteExpr(E);
10200     }
10201 
10202     void VisitCXXConstructExpr(CXXConstructExpr *E) {
10203       S.MarkFunctionReferenced(E->getLocStart(), E->getConstructor());
10204       Inherited::VisitCXXConstructExpr(E);
10205     }
10206 
10207     void VisitBlockDeclRefExpr(BlockDeclRefExpr *E) {
10208       // If we were asked not to visit local variables, don't.
10209       if (SkipLocalVariables && E->getDecl()->hasLocalStorage())
10210           return;
10211 
10212       S.MarkBlockDeclRefReferenced(E);
10213     }
10214 
10215     void VisitCXXDefaultArgExpr(CXXDefaultArgExpr *E) {
10216       Visit(E->getExpr());
10217     }
10218 
10219     void VisitImplicitCastExpr(ImplicitCastExpr *E) {
10220       Inherited::VisitImplicitCastExpr(E);
10221 
10222       if (E->getCastKind() == CK_LValueToRValue)
10223         S.UpdateMarkingForLValueToRValue(E->getSubExpr());
10224     }
10225   };
10226 }
10227 
10228 /// \brief Mark any declarations that appear within this expression or any
10229 /// potentially-evaluated subexpressions as "referenced".
10230 ///
10231 /// \param SkipLocalVariables If true, don't mark local variables as
10232 /// 'referenced'.
10233 void Sema::MarkDeclarationsReferencedInExpr(Expr *E,
10234                                             bool SkipLocalVariables) {
10235   EvaluatedExprMarker(*this, SkipLocalVariables).Visit(E);
10236 }
10237 
10238 /// \brief Emit a diagnostic that describes an effect on the run-time behavior
10239 /// of the program being compiled.
10240 ///
10241 /// This routine emits the given diagnostic when the code currently being
10242 /// type-checked is "potentially evaluated", meaning that there is a
10243 /// possibility that the code will actually be executable. Code in sizeof()
10244 /// expressions, code used only during overload resolution, etc., are not
10245 /// potentially evaluated. This routine will suppress such diagnostics or,
10246 /// in the absolutely nutty case of potentially potentially evaluated
10247 /// expressions (C++ typeid), queue the diagnostic to potentially emit it
10248 /// later.
10249 ///
10250 /// This routine should be used for all diagnostics that describe the run-time
10251 /// behavior of a program, such as passing a non-POD value through an ellipsis.
10252 /// Failure to do so will likely result in spurious diagnostics or failures
10253 /// during overload resolution or within sizeof/alignof/typeof/typeid.
10254 bool Sema::DiagRuntimeBehavior(SourceLocation Loc, const Stmt *Statement,
10255                                const PartialDiagnostic &PD) {
10256   switch (ExprEvalContexts.back().Context) {
10257   case Unevaluated:
10258     // The argument will never be evaluated, so don't complain.
10259     break;
10260 
10261   case ConstantEvaluated:
10262     // Relevant diagnostics should be produced by constant evaluation.
10263     break;
10264 
10265   case PotentiallyEvaluated:
10266   case PotentiallyEvaluatedIfUsed:
10267     if (Statement && getCurFunctionOrMethodDecl()) {
10268       FunctionScopes.back()->PossiblyUnreachableDiags.
10269         push_back(sema::PossiblyUnreachableDiag(PD, Loc, Statement));
10270     }
10271     else
10272       Diag(Loc, PD);
10273 
10274     return true;
10275   }
10276 
10277   return false;
10278 }
10279 
10280 bool Sema::CheckCallReturnType(QualType ReturnType, SourceLocation Loc,
10281                                CallExpr *CE, FunctionDecl *FD) {
10282   if (ReturnType->isVoidType() || !ReturnType->isIncompleteType())
10283     return false;
10284 
10285   // If we're inside a decltype's expression, don't check for a valid return
10286   // type or construct temporaries until we know whether this is the last call.
10287   if (ExprEvalContexts.back().IsDecltype) {
10288     ExprEvalContexts.back().DelayedDecltypeCalls.push_back(CE);
10289     return false;
10290   }
10291 
10292   PartialDiagnostic Note =
10293     FD ? PDiag(diag::note_function_with_incomplete_return_type_declared_here)
10294     << FD->getDeclName() : PDiag();
10295   SourceLocation NoteLoc = FD ? FD->getLocation() : SourceLocation();
10296 
10297   if (RequireCompleteType(Loc, ReturnType,
10298                           FD ?
10299                           PDiag(diag::err_call_function_incomplete_return)
10300                             << CE->getSourceRange() << FD->getDeclName() :
10301                           PDiag(diag::err_call_incomplete_return)
10302                             << CE->getSourceRange(),
10303                           std::make_pair(NoteLoc, Note)))
10304     return true;
10305 
10306   return false;
10307 }
10308 
10309 // Diagnose the s/=/==/ and s/\|=/!=/ typos. Note that adding parentheses
10310 // will prevent this condition from triggering, which is what we want.
10311 void Sema::DiagnoseAssignmentAsCondition(Expr *E) {
10312   SourceLocation Loc;
10313 
10314   unsigned diagnostic = diag::warn_condition_is_assignment;
10315   bool IsOrAssign = false;
10316 
10317   if (BinaryOperator *Op = dyn_cast<BinaryOperator>(E)) {
10318     if (Op->getOpcode() != BO_Assign && Op->getOpcode() != BO_OrAssign)
10319       return;
10320 
10321     IsOrAssign = Op->getOpcode() == BO_OrAssign;
10322 
10323     // Greylist some idioms by putting them into a warning subcategory.
10324     if (ObjCMessageExpr *ME
10325           = dyn_cast<ObjCMessageExpr>(Op->getRHS()->IgnoreParenCasts())) {
10326       Selector Sel = ME->getSelector();
10327 
10328       // self = [<foo> init...]
10329       if (isSelfExpr(Op->getLHS()) && Sel.getNameForSlot(0).startswith("init"))
10330         diagnostic = diag::warn_condition_is_idiomatic_assignment;
10331 
10332       // <foo> = [<bar> nextObject]
10333       else if (Sel.isUnarySelector() && Sel.getNameForSlot(0) == "nextObject")
10334         diagnostic = diag::warn_condition_is_idiomatic_assignment;
10335     }
10336 
10337     Loc = Op->getOperatorLoc();
10338   } else if (CXXOperatorCallExpr *Op = dyn_cast<CXXOperatorCallExpr>(E)) {
10339     if (Op->getOperator() != OO_Equal && Op->getOperator() != OO_PipeEqual)
10340       return;
10341 
10342     IsOrAssign = Op->getOperator() == OO_PipeEqual;
10343     Loc = Op->getOperatorLoc();
10344   } else {
10345     // Not an assignment.
10346     return;
10347   }
10348 
10349   Diag(Loc, diagnostic) << E->getSourceRange();
10350 
10351   SourceLocation Open = E->getSourceRange().getBegin();
10352   SourceLocation Close = PP.getLocForEndOfToken(E->getSourceRange().getEnd());
10353   Diag(Loc, diag::note_condition_assign_silence)
10354         << FixItHint::CreateInsertion(Open, "(")
10355         << FixItHint::CreateInsertion(Close, ")");
10356 
10357   if (IsOrAssign)
10358     Diag(Loc, diag::note_condition_or_assign_to_comparison)
10359       << FixItHint::CreateReplacement(Loc, "!=");
10360   else
10361     Diag(Loc, diag::note_condition_assign_to_comparison)
10362       << FixItHint::CreateReplacement(Loc, "==");
10363 }
10364 
10365 /// \brief Redundant parentheses over an equality comparison can indicate
10366 /// that the user intended an assignment used as condition.
10367 void Sema::DiagnoseEqualityWithExtraParens(ParenExpr *ParenE) {
10368   // Don't warn if the parens came from a macro.
10369   SourceLocation parenLoc = ParenE->getLocStart();
10370   if (parenLoc.isInvalid() || parenLoc.isMacroID())
10371     return;
10372   // Don't warn for dependent expressions.
10373   if (ParenE->isTypeDependent())
10374     return;
10375 
10376   Expr *E = ParenE->IgnoreParens();
10377 
10378   if (BinaryOperator *opE = dyn_cast<BinaryOperator>(E))
10379     if (opE->getOpcode() == BO_EQ &&
10380         opE->getLHS()->IgnoreParenImpCasts()->isModifiableLvalue(Context)
10381                                                            == Expr::MLV_Valid) {
10382       SourceLocation Loc = opE->getOperatorLoc();
10383 
10384       Diag(Loc, diag::warn_equality_with_extra_parens) << E->getSourceRange();
10385       Diag(Loc, diag::note_equality_comparison_silence)
10386         << FixItHint::CreateRemoval(ParenE->getSourceRange().getBegin())
10387         << FixItHint::CreateRemoval(ParenE->getSourceRange().getEnd());
10388       Diag(Loc, diag::note_equality_comparison_to_assign)
10389         << FixItHint::CreateReplacement(Loc, "=");
10390     }
10391 }
10392 
10393 ExprResult Sema::CheckBooleanCondition(Expr *E, SourceLocation Loc) {
10394   DiagnoseAssignmentAsCondition(E);
10395   if (ParenExpr *parenE = dyn_cast<ParenExpr>(E))
10396     DiagnoseEqualityWithExtraParens(parenE);
10397 
10398   ExprResult result = CheckPlaceholderExpr(E);
10399   if (result.isInvalid()) return ExprError();
10400   E = result.take();
10401 
10402   if (!E->isTypeDependent()) {
10403     if (getLangOptions().CPlusPlus)
10404       return CheckCXXBooleanCondition(E); // C++ 6.4p4
10405 
10406     ExprResult ERes = DefaultFunctionArrayLvalueConversion(E);
10407     if (ERes.isInvalid())
10408       return ExprError();
10409     E = ERes.take();
10410 
10411     QualType T = E->getType();
10412     if (!T->isScalarType()) { // C99 6.8.4.1p1
10413       Diag(Loc, diag::err_typecheck_statement_requires_scalar)
10414         << T << E->getSourceRange();
10415       return ExprError();
10416     }
10417   }
10418 
10419   return Owned(E);
10420 }
10421 
10422 ExprResult Sema::ActOnBooleanCondition(Scope *S, SourceLocation Loc,
10423                                        Expr *SubExpr) {
10424   if (!SubExpr)
10425     return ExprError();
10426 
10427   return CheckBooleanCondition(SubExpr, Loc);
10428 }
10429 
10430 namespace {
10431   /// A visitor for rebuilding a call to an __unknown_any expression
10432   /// to have an appropriate type.
10433   struct RebuildUnknownAnyFunction
10434     : StmtVisitor<RebuildUnknownAnyFunction, ExprResult> {
10435 
10436     Sema &S;
10437 
10438     RebuildUnknownAnyFunction(Sema &S) : S(S) {}
10439 
10440     ExprResult VisitStmt(Stmt *S) {
10441       llvm_unreachable("unexpected statement!");
10442     }
10443 
10444     ExprResult VisitExpr(Expr *E) {
10445       S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_call)
10446         << E->getSourceRange();
10447       return ExprError();
10448     }
10449 
10450     /// Rebuild an expression which simply semantically wraps another
10451     /// expression which it shares the type and value kind of.
10452     template <class T> ExprResult rebuildSugarExpr(T *E) {
10453       ExprResult SubResult = Visit(E->getSubExpr());
10454       if (SubResult.isInvalid()) return ExprError();
10455 
10456       Expr *SubExpr = SubResult.take();
10457       E->setSubExpr(SubExpr);
10458       E->setType(SubExpr->getType());
10459       E->setValueKind(SubExpr->getValueKind());
10460       assert(E->getObjectKind() == OK_Ordinary);
10461       return E;
10462     }
10463 
10464     ExprResult VisitParenExpr(ParenExpr *E) {
10465       return rebuildSugarExpr(E);
10466     }
10467 
10468     ExprResult VisitUnaryExtension(UnaryOperator *E) {
10469       return rebuildSugarExpr(E);
10470     }
10471 
10472     ExprResult VisitUnaryAddrOf(UnaryOperator *E) {
10473       ExprResult SubResult = Visit(E->getSubExpr());
10474       if (SubResult.isInvalid()) return ExprError();
10475 
10476       Expr *SubExpr = SubResult.take();
10477       E->setSubExpr(SubExpr);
10478       E->setType(S.Context.getPointerType(SubExpr->getType()));
10479       assert(E->getValueKind() == VK_RValue);
10480       assert(E->getObjectKind() == OK_Ordinary);
10481       return E;
10482     }
10483 
10484     ExprResult resolveDecl(Expr *E, ValueDecl *VD) {
10485       if (!isa<FunctionDecl>(VD)) return VisitExpr(E);
10486 
10487       E->setType(VD->getType());
10488 
10489       assert(E->getValueKind() == VK_RValue);
10490       if (S.getLangOptions().CPlusPlus &&
10491           !(isa<CXXMethodDecl>(VD) &&
10492             cast<CXXMethodDecl>(VD)->isInstance()))
10493         E->setValueKind(VK_LValue);
10494 
10495       return E;
10496     }
10497 
10498     ExprResult VisitMemberExpr(MemberExpr *E) {
10499       return resolveDecl(E, E->getMemberDecl());
10500     }
10501 
10502     ExprResult VisitDeclRefExpr(DeclRefExpr *E) {
10503       return resolveDecl(E, E->getDecl());
10504     }
10505   };
10506 }
10507 
10508 /// Given a function expression of unknown-any type, try to rebuild it
10509 /// to have a function type.
10510 static ExprResult rebuildUnknownAnyFunction(Sema &S, Expr *FunctionExpr) {
10511   ExprResult Result = RebuildUnknownAnyFunction(S).Visit(FunctionExpr);
10512   if (Result.isInvalid()) return ExprError();
10513   return S.DefaultFunctionArrayConversion(Result.take());
10514 }
10515 
10516 namespace {
10517   /// A visitor for rebuilding an expression of type __unknown_anytype
10518   /// into one which resolves the type directly on the referring
10519   /// expression.  Strict preservation of the original source
10520   /// structure is not a goal.
10521   struct RebuildUnknownAnyExpr
10522     : StmtVisitor<RebuildUnknownAnyExpr, ExprResult> {
10523 
10524     Sema &S;
10525 
10526     /// The current destination type.
10527     QualType DestType;
10528 
10529     RebuildUnknownAnyExpr(Sema &S, QualType CastType)
10530       : S(S), DestType(CastType) {}
10531 
10532     ExprResult VisitStmt(Stmt *S) {
10533       llvm_unreachable("unexpected statement!");
10534     }
10535 
10536     ExprResult VisitExpr(Expr *E) {
10537       S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_expr)
10538         << E->getSourceRange();
10539       return ExprError();
10540     }
10541 
10542     ExprResult VisitCallExpr(CallExpr *E);
10543     ExprResult VisitObjCMessageExpr(ObjCMessageExpr *E);
10544 
10545     /// Rebuild an expression which simply semantically wraps another
10546     /// expression which it shares the type and value kind of.
10547     template <class T> ExprResult rebuildSugarExpr(T *E) {
10548       ExprResult SubResult = Visit(E->getSubExpr());
10549       if (SubResult.isInvalid()) return ExprError();
10550       Expr *SubExpr = SubResult.take();
10551       E->setSubExpr(SubExpr);
10552       E->setType(SubExpr->getType());
10553       E->setValueKind(SubExpr->getValueKind());
10554       assert(E->getObjectKind() == OK_Ordinary);
10555       return E;
10556     }
10557 
10558     ExprResult VisitParenExpr(ParenExpr *E) {
10559       return rebuildSugarExpr(E);
10560     }
10561 
10562     ExprResult VisitUnaryExtension(UnaryOperator *E) {
10563       return rebuildSugarExpr(E);
10564     }
10565 
10566     ExprResult VisitUnaryAddrOf(UnaryOperator *E) {
10567       const PointerType *Ptr = DestType->getAs<PointerType>();
10568       if (!Ptr) {
10569         S.Diag(E->getOperatorLoc(), diag::err_unknown_any_addrof)
10570           << E->getSourceRange();
10571         return ExprError();
10572       }
10573       assert(E->getValueKind() == VK_RValue);
10574       assert(E->getObjectKind() == OK_Ordinary);
10575       E->setType(DestType);
10576 
10577       // Build the sub-expression as if it were an object of the pointee type.
10578       DestType = Ptr->getPointeeType();
10579       ExprResult SubResult = Visit(E->getSubExpr());
10580       if (SubResult.isInvalid()) return ExprError();
10581       E->setSubExpr(SubResult.take());
10582       return E;
10583     }
10584 
10585     ExprResult VisitImplicitCastExpr(ImplicitCastExpr *E);
10586 
10587     ExprResult resolveDecl(Expr *E, ValueDecl *VD);
10588 
10589     ExprResult VisitMemberExpr(MemberExpr *E) {
10590       return resolveDecl(E, E->getMemberDecl());
10591     }
10592 
10593     ExprResult VisitDeclRefExpr(DeclRefExpr *E) {
10594       return resolveDecl(E, E->getDecl());
10595     }
10596   };
10597 }
10598 
10599 /// Rebuilds a call expression which yielded __unknown_anytype.
10600 ExprResult RebuildUnknownAnyExpr::VisitCallExpr(CallExpr *E) {
10601   Expr *CalleeExpr = E->getCallee();
10602 
10603   enum FnKind {
10604     FK_MemberFunction,
10605     FK_FunctionPointer,
10606     FK_BlockPointer
10607   };
10608 
10609   FnKind Kind;
10610   QualType CalleeType = CalleeExpr->getType();
10611   if (CalleeType == S.Context.BoundMemberTy) {
10612     assert(isa<CXXMemberCallExpr>(E) || isa<CXXOperatorCallExpr>(E));
10613     Kind = FK_MemberFunction;
10614     CalleeType = Expr::findBoundMemberType(CalleeExpr);
10615   } else if (const PointerType *Ptr = CalleeType->getAs<PointerType>()) {
10616     CalleeType = Ptr->getPointeeType();
10617     Kind = FK_FunctionPointer;
10618   } else {
10619     CalleeType = CalleeType->castAs<BlockPointerType>()->getPointeeType();
10620     Kind = FK_BlockPointer;
10621   }
10622   const FunctionType *FnType = CalleeType->castAs<FunctionType>();
10623 
10624   // Verify that this is a legal result type of a function.
10625   if (DestType->isArrayType() || DestType->isFunctionType()) {
10626     unsigned diagID = diag::err_func_returning_array_function;
10627     if (Kind == FK_BlockPointer)
10628       diagID = diag::err_block_returning_array_function;
10629 
10630     S.Diag(E->getExprLoc(), diagID)
10631       << DestType->isFunctionType() << DestType;
10632     return ExprError();
10633   }
10634 
10635   // Otherwise, go ahead and set DestType as the call's result.
10636   E->setType(DestType.getNonLValueExprType(S.Context));
10637   E->setValueKind(Expr::getValueKindForType(DestType));
10638   assert(E->getObjectKind() == OK_Ordinary);
10639 
10640   // Rebuild the function type, replacing the result type with DestType.
10641   if (const FunctionProtoType *Proto = dyn_cast<FunctionProtoType>(FnType))
10642     DestType = S.Context.getFunctionType(DestType,
10643                                          Proto->arg_type_begin(),
10644                                          Proto->getNumArgs(),
10645                                          Proto->getExtProtoInfo());
10646   else
10647     DestType = S.Context.getFunctionNoProtoType(DestType,
10648                                                 FnType->getExtInfo());
10649 
10650   // Rebuild the appropriate pointer-to-function type.
10651   switch (Kind) {
10652   case FK_MemberFunction:
10653     // Nothing to do.
10654     break;
10655 
10656   case FK_FunctionPointer:
10657     DestType = S.Context.getPointerType(DestType);
10658     break;
10659 
10660   case FK_BlockPointer:
10661     DestType = S.Context.getBlockPointerType(DestType);
10662     break;
10663   }
10664 
10665   // Finally, we can recurse.
10666   ExprResult CalleeResult = Visit(CalleeExpr);
10667   if (!CalleeResult.isUsable()) return ExprError();
10668   E->setCallee(CalleeResult.take());
10669 
10670   // Bind a temporary if necessary.
10671   return S.MaybeBindToTemporary(E);
10672 }
10673 
10674 ExprResult RebuildUnknownAnyExpr::VisitObjCMessageExpr(ObjCMessageExpr *E) {
10675   // Verify that this is a legal result type of a call.
10676   if (DestType->isArrayType() || DestType->isFunctionType()) {
10677     S.Diag(E->getExprLoc(), diag::err_func_returning_array_function)
10678       << DestType->isFunctionType() << DestType;
10679     return ExprError();
10680   }
10681 
10682   // Rewrite the method result type if available.
10683   if (ObjCMethodDecl *Method = E->getMethodDecl()) {
10684     assert(Method->getResultType() == S.Context.UnknownAnyTy);
10685     Method->setResultType(DestType);
10686   }
10687 
10688   // Change the type of the message.
10689   E->setType(DestType.getNonReferenceType());
10690   E->setValueKind(Expr::getValueKindForType(DestType));
10691 
10692   return S.MaybeBindToTemporary(E);
10693 }
10694 
10695 ExprResult RebuildUnknownAnyExpr::VisitImplicitCastExpr(ImplicitCastExpr *E) {
10696   // The only case we should ever see here is a function-to-pointer decay.
10697   assert(E->getCastKind() == CK_FunctionToPointerDecay);
10698   assert(E->getValueKind() == VK_RValue);
10699   assert(E->getObjectKind() == OK_Ordinary);
10700 
10701   E->setType(DestType);
10702 
10703   // Rebuild the sub-expression as the pointee (function) type.
10704   DestType = DestType->castAs<PointerType>()->getPointeeType();
10705 
10706   ExprResult Result = Visit(E->getSubExpr());
10707   if (!Result.isUsable()) return ExprError();
10708 
10709   E->setSubExpr(Result.take());
10710   return S.Owned(E);
10711 }
10712 
10713 ExprResult RebuildUnknownAnyExpr::resolveDecl(Expr *E, ValueDecl *VD) {
10714   ExprValueKind ValueKind = VK_LValue;
10715   QualType Type = DestType;
10716 
10717   // We know how to make this work for certain kinds of decls:
10718 
10719   //  - functions
10720   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(VD)) {
10721     if (const PointerType *Ptr = Type->getAs<PointerType>()) {
10722       DestType = Ptr->getPointeeType();
10723       ExprResult Result = resolveDecl(E, VD);
10724       if (Result.isInvalid()) return ExprError();
10725       return S.ImpCastExprToType(Result.take(), Type,
10726                                  CK_FunctionToPointerDecay, VK_RValue);
10727     }
10728 
10729     if (!Type->isFunctionType()) {
10730       S.Diag(E->getExprLoc(), diag::err_unknown_any_function)
10731         << VD << E->getSourceRange();
10732       return ExprError();
10733     }
10734 
10735     if (CXXMethodDecl *MD = dyn_cast<CXXMethodDecl>(FD))
10736       if (MD->isInstance()) {
10737         ValueKind = VK_RValue;
10738         Type = S.Context.BoundMemberTy;
10739       }
10740 
10741     // Function references aren't l-values in C.
10742     if (!S.getLangOptions().CPlusPlus)
10743       ValueKind = VK_RValue;
10744 
10745   //  - variables
10746   } else if (isa<VarDecl>(VD)) {
10747     if (const ReferenceType *RefTy = Type->getAs<ReferenceType>()) {
10748       Type = RefTy->getPointeeType();
10749     } else if (Type->isFunctionType()) {
10750       S.Diag(E->getExprLoc(), diag::err_unknown_any_var_function_type)
10751         << VD << E->getSourceRange();
10752       return ExprError();
10753     }
10754 
10755   //  - nothing else
10756   } else {
10757     S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_decl)
10758       << VD << E->getSourceRange();
10759     return ExprError();
10760   }
10761 
10762   VD->setType(DestType);
10763   E->setType(Type);
10764   E->setValueKind(ValueKind);
10765   return S.Owned(E);
10766 }
10767 
10768 /// Check a cast of an unknown-any type.  We intentionally only
10769 /// trigger this for C-style casts.
10770 ExprResult Sema::checkUnknownAnyCast(SourceRange TypeRange, QualType CastType,
10771                                      Expr *CastExpr, CastKind &CastKind,
10772                                      ExprValueKind &VK, CXXCastPath &Path) {
10773   // Rewrite the casted expression from scratch.
10774   ExprResult result = RebuildUnknownAnyExpr(*this, CastType).Visit(CastExpr);
10775   if (!result.isUsable()) return ExprError();
10776 
10777   CastExpr = result.take();
10778   VK = CastExpr->getValueKind();
10779   CastKind = CK_NoOp;
10780 
10781   return CastExpr;
10782 }
10783 
10784 ExprResult Sema::forceUnknownAnyToType(Expr *E, QualType ToType) {
10785   return RebuildUnknownAnyExpr(*this, ToType).Visit(E);
10786 }
10787 
10788 static ExprResult diagnoseUnknownAnyExpr(Sema &S, Expr *E) {
10789   Expr *orig = E;
10790   unsigned diagID = diag::err_uncasted_use_of_unknown_any;
10791   while (true) {
10792     E = E->IgnoreParenImpCasts();
10793     if (CallExpr *call = dyn_cast<CallExpr>(E)) {
10794       E = call->getCallee();
10795       diagID = diag::err_uncasted_call_of_unknown_any;
10796     } else {
10797       break;
10798     }
10799   }
10800 
10801   SourceLocation loc;
10802   NamedDecl *d;
10803   if (DeclRefExpr *ref = dyn_cast<DeclRefExpr>(E)) {
10804     loc = ref->getLocation();
10805     d = ref->getDecl();
10806   } else if (MemberExpr *mem = dyn_cast<MemberExpr>(E)) {
10807     loc = mem->getMemberLoc();
10808     d = mem->getMemberDecl();
10809   } else if (ObjCMessageExpr *msg = dyn_cast<ObjCMessageExpr>(E)) {
10810     diagID = diag::err_uncasted_call_of_unknown_any;
10811     loc = msg->getSelectorStartLoc();
10812     d = msg->getMethodDecl();
10813     if (!d) {
10814       S.Diag(loc, diag::err_uncasted_send_to_unknown_any_method)
10815         << static_cast<unsigned>(msg->isClassMessage()) << msg->getSelector()
10816         << orig->getSourceRange();
10817       return ExprError();
10818     }
10819   } else {
10820     S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_expr)
10821       << E->getSourceRange();
10822     return ExprError();
10823   }
10824 
10825   S.Diag(loc, diagID) << d << orig->getSourceRange();
10826 
10827   // Never recoverable.
10828   return ExprError();
10829 }
10830 
10831 /// Check for operands with placeholder types and complain if found.
10832 /// Returns true if there was an error and no recovery was possible.
10833 ExprResult Sema::CheckPlaceholderExpr(Expr *E) {
10834   const BuiltinType *placeholderType = E->getType()->getAsPlaceholderType();
10835   if (!placeholderType) return Owned(E);
10836 
10837   switch (placeholderType->getKind()) {
10838 
10839   // Overloaded expressions.
10840   case BuiltinType::Overload: {
10841     // Try to resolve a single function template specialization.
10842     // This is obligatory.
10843     ExprResult result = Owned(E);
10844     if (ResolveAndFixSingleFunctionTemplateSpecialization(result, false)) {
10845       return result;
10846 
10847     // If that failed, try to recover with a call.
10848     } else {
10849       tryToRecoverWithCall(result, PDiag(diag::err_ovl_unresolvable),
10850                            /*complain*/ true);
10851       return result;
10852     }
10853   }
10854 
10855   // Bound member functions.
10856   case BuiltinType::BoundMember: {
10857     ExprResult result = Owned(E);
10858     tryToRecoverWithCall(result, PDiag(diag::err_bound_member_function),
10859                          /*complain*/ true);
10860     return result;
10861   }
10862 
10863   // ARC unbridged casts.
10864   case BuiltinType::ARCUnbridgedCast: {
10865     Expr *realCast = stripARCUnbridgedCast(E);
10866     diagnoseARCUnbridgedCast(realCast);
10867     return Owned(realCast);
10868   }
10869 
10870   // Expressions of unknown type.
10871   case BuiltinType::UnknownAny:
10872     return diagnoseUnknownAnyExpr(*this, E);
10873 
10874   // Pseudo-objects.
10875   case BuiltinType::PseudoObject:
10876     return checkPseudoObjectRValue(E);
10877 
10878   // Everything else should be impossible.
10879 #define BUILTIN_TYPE(Id, SingletonId) \
10880   case BuiltinType::Id:
10881 #define PLACEHOLDER_TYPE(Id, SingletonId)
10882 #include "clang/AST/BuiltinTypes.def"
10883     break;
10884   }
10885 
10886   llvm_unreachable("invalid placeholder type!");
10887 }
10888 
10889 bool Sema::CheckCaseExpression(Expr *E) {
10890   if (E->isTypeDependent())
10891     return true;
10892   if (E->isValueDependent() || E->isIntegerConstantExpr(Context))
10893     return E->getType()->isIntegralOrEnumerationType();
10894   return false;
10895 }
10896