1 //===--- SemaExpr.cpp - Semantic Analysis for Expressions -----------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements semantic analysis for expressions.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "clang/Sema/SemaInternal.h"
15 #include "clang/Sema/Initialization.h"
16 #include "clang/Sema/Lookup.h"
17 #include "clang/Sema/AnalysisBasedWarnings.h"
18 #include "clang/AST/ASTContext.h"
19 #include "clang/AST/ASTMutationListener.h"
20 #include "clang/AST/CXXInheritance.h"
21 #include "clang/AST/DeclObjC.h"
22 #include "clang/AST/DeclTemplate.h"
23 #include "clang/AST/EvaluatedExprVisitor.h"
24 #include "clang/AST/Expr.h"
25 #include "clang/AST/ExprCXX.h"
26 #include "clang/AST/ExprObjC.h"
27 #include "clang/AST/RecursiveASTVisitor.h"
28 #include "clang/AST/TypeLoc.h"
29 #include "clang/Basic/PartialDiagnostic.h"
30 #include "clang/Basic/SourceManager.h"
31 #include "clang/Basic/TargetInfo.h"
32 #include "clang/Lex/LiteralSupport.h"
33 #include "clang/Lex/Preprocessor.h"
34 #include "clang/Sema/DeclSpec.h"
35 #include "clang/Sema/Designator.h"
36 #include "clang/Sema/Scope.h"
37 #include "clang/Sema/ScopeInfo.h"
38 #include "clang/Sema/ParsedTemplate.h"
39 #include "clang/Sema/SemaFixItUtils.h"
40 #include "clang/Sema/Template.h"
41 using namespace clang;
42 using namespace sema;
43 
44 /// \brief Determine whether the use of this declaration is valid, without
45 /// emitting diagnostics.
46 bool Sema::CanUseDecl(NamedDecl *D) {
47   // See if this is an auto-typed variable whose initializer we are parsing.
48   if (ParsingInitForAutoVars.count(D))
49     return false;
50 
51   // See if this is a deleted function.
52   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
53     if (FD->isDeleted())
54       return false;
55   }
56 
57   // See if this function is unavailable.
58   if (D->getAvailability() == AR_Unavailable &&
59       cast<Decl>(CurContext)->getAvailability() != AR_Unavailable)
60     return false;
61 
62   return true;
63 }
64 
65 static AvailabilityResult DiagnoseAvailabilityOfDecl(Sema &S,
66                               NamedDecl *D, SourceLocation Loc,
67                               const ObjCInterfaceDecl *UnknownObjCClass) {
68   // See if this declaration is unavailable or deprecated.
69   std::string Message;
70   AvailabilityResult Result = D->getAvailability(&Message);
71   switch (Result) {
72     case AR_Available:
73     case AR_NotYetIntroduced:
74       break;
75 
76     case AR_Deprecated:
77       S.EmitDeprecationWarning(D, Message, Loc, UnknownObjCClass);
78       break;
79 
80     case AR_Unavailable:
81       if (S.getCurContextAvailability() != AR_Unavailable) {
82         if (Message.empty()) {
83           if (!UnknownObjCClass)
84             S.Diag(Loc, diag::err_unavailable) << D->getDeclName();
85           else
86             S.Diag(Loc, diag::warn_unavailable_fwdclass_message)
87               << D->getDeclName();
88         }
89         else
90           S.Diag(Loc, diag::err_unavailable_message)
91             << D->getDeclName() << Message;
92           S.Diag(D->getLocation(), diag::note_unavailable_here)
93           << isa<FunctionDecl>(D) << false;
94       }
95       break;
96     }
97     return Result;
98 }
99 
100 /// \brief Determine whether the use of this declaration is valid, and
101 /// emit any corresponding diagnostics.
102 ///
103 /// This routine diagnoses various problems with referencing
104 /// declarations that can occur when using a declaration. For example,
105 /// it might warn if a deprecated or unavailable declaration is being
106 /// used, or produce an error (and return true) if a C++0x deleted
107 /// function is being used.
108 ///
109 /// \returns true if there was an error (this declaration cannot be
110 /// referenced), false otherwise.
111 ///
112 bool Sema::DiagnoseUseOfDecl(NamedDecl *D, SourceLocation Loc,
113                              const ObjCInterfaceDecl *UnknownObjCClass) {
114   if (getLangOptions().CPlusPlus && isa<FunctionDecl>(D)) {
115     // If there were any diagnostics suppressed by template argument deduction,
116     // emit them now.
117     llvm::DenseMap<Decl *, SmallVector<PartialDiagnosticAt, 1> >::iterator
118       Pos = SuppressedDiagnostics.find(D->getCanonicalDecl());
119     if (Pos != SuppressedDiagnostics.end()) {
120       SmallVectorImpl<PartialDiagnosticAt> &Suppressed = Pos->second;
121       for (unsigned I = 0, N = Suppressed.size(); I != N; ++I)
122         Diag(Suppressed[I].first, Suppressed[I].second);
123 
124       // Clear out the list of suppressed diagnostics, so that we don't emit
125       // them again for this specialization. However, we don't obsolete this
126       // entry from the table, because we want to avoid ever emitting these
127       // diagnostics again.
128       Suppressed.clear();
129     }
130   }
131 
132   // See if this is an auto-typed variable whose initializer we are parsing.
133   if (ParsingInitForAutoVars.count(D)) {
134     Diag(Loc, diag::err_auto_variable_cannot_appear_in_own_initializer)
135       << D->getDeclName();
136     return true;
137   }
138 
139   // See if this is a deleted function.
140   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
141     if (FD->isDeleted()) {
142       Diag(Loc, diag::err_deleted_function_use);
143       Diag(D->getLocation(), diag::note_unavailable_here) << 1 << true;
144       return true;
145     }
146   }
147   AvailabilityResult Result =
148     DiagnoseAvailabilityOfDecl(*this, D, Loc, UnknownObjCClass);
149 
150   // Warn if this is used but marked unused.
151   if (D->hasAttr<UnusedAttr>())
152     Diag(Loc, diag::warn_used_but_marked_unused) << D->getDeclName();
153   // For available enumerator, it will become unavailable/deprecated
154   // if its enum declaration is as such.
155   if (Result == AR_Available)
156     if (const EnumConstantDecl *ECD = dyn_cast<EnumConstantDecl>(D)) {
157       const DeclContext *DC = ECD->getDeclContext();
158       if (const EnumDecl *TheEnumDecl = dyn_cast<EnumDecl>(DC))
159         DiagnoseAvailabilityOfDecl(*this,
160                           const_cast< EnumDecl *>(TheEnumDecl),
161                           Loc, UnknownObjCClass);
162     }
163   return false;
164 }
165 
166 /// \brief Retrieve the message suffix that should be added to a
167 /// diagnostic complaining about the given function being deleted or
168 /// unavailable.
169 std::string Sema::getDeletedOrUnavailableSuffix(const FunctionDecl *FD) {
170   // FIXME: C++0x implicitly-deleted special member functions could be
171   // detected here so that we could improve diagnostics to say, e.g.,
172   // "base class 'A' had a deleted copy constructor".
173   if (FD->isDeleted())
174     return std::string();
175 
176   std::string Message;
177   if (FD->getAvailability(&Message))
178     return ": " + Message;
179 
180   return std::string();
181 }
182 
183 /// DiagnoseSentinelCalls - This routine checks whether a call or
184 /// message-send is to a declaration with the sentinel attribute, and
185 /// if so, it checks that the requirements of the sentinel are
186 /// satisfied.
187 void Sema::DiagnoseSentinelCalls(NamedDecl *D, SourceLocation Loc,
188                                  Expr **args, unsigned numArgs) {
189   const SentinelAttr *attr = D->getAttr<SentinelAttr>();
190   if (!attr)
191     return;
192 
193   // The number of formal parameters of the declaration.
194   unsigned numFormalParams;
195 
196   // The kind of declaration.  This is also an index into a %select in
197   // the diagnostic.
198   enum CalleeType { CT_Function, CT_Method, CT_Block } calleeType;
199 
200   if (ObjCMethodDecl *MD = dyn_cast<ObjCMethodDecl>(D)) {
201     numFormalParams = MD->param_size();
202     calleeType = CT_Method;
203   } else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D)) {
204     numFormalParams = FD->param_size();
205     calleeType = CT_Function;
206   } else if (isa<VarDecl>(D)) {
207     QualType type = cast<ValueDecl>(D)->getType();
208     const FunctionType *fn = 0;
209     if (const PointerType *ptr = type->getAs<PointerType>()) {
210       fn = ptr->getPointeeType()->getAs<FunctionType>();
211       if (!fn) return;
212       calleeType = CT_Function;
213     } else if (const BlockPointerType *ptr = type->getAs<BlockPointerType>()) {
214       fn = ptr->getPointeeType()->castAs<FunctionType>();
215       calleeType = CT_Block;
216     } else {
217       return;
218     }
219 
220     if (const FunctionProtoType *proto = dyn_cast<FunctionProtoType>(fn)) {
221       numFormalParams = proto->getNumArgs();
222     } else {
223       numFormalParams = 0;
224     }
225   } else {
226     return;
227   }
228 
229   // "nullPos" is the number of formal parameters at the end which
230   // effectively count as part of the variadic arguments.  This is
231   // useful if you would prefer to not have *any* formal parameters,
232   // but the language forces you to have at least one.
233   unsigned nullPos = attr->getNullPos();
234   assert((nullPos == 0 || nullPos == 1) && "invalid null position on sentinel");
235   numFormalParams = (nullPos > numFormalParams ? 0 : numFormalParams - nullPos);
236 
237   // The number of arguments which should follow the sentinel.
238   unsigned numArgsAfterSentinel = attr->getSentinel();
239 
240   // If there aren't enough arguments for all the formal parameters,
241   // the sentinel, and the args after the sentinel, complain.
242   if (numArgs < numFormalParams + numArgsAfterSentinel + 1) {
243     Diag(Loc, diag::warn_not_enough_argument) << D->getDeclName();
244     Diag(D->getLocation(), diag::note_sentinel_here) << calleeType;
245     return;
246   }
247 
248   // Otherwise, find the sentinel expression.
249   Expr *sentinelExpr = args[numArgs - numArgsAfterSentinel - 1];
250   if (!sentinelExpr) return;
251   if (sentinelExpr->isValueDependent()) return;
252 
253   // nullptr_t is always treated as null.
254   if (sentinelExpr->getType()->isNullPtrType()) return;
255 
256   if (sentinelExpr->getType()->isAnyPointerType() &&
257       sentinelExpr->IgnoreParenCasts()->isNullPointerConstant(Context,
258                                             Expr::NPC_ValueDependentIsNull))
259     return;
260 
261   // Unfortunately, __null has type 'int'.
262   if (isa<GNUNullExpr>(sentinelExpr)) return;
263 
264   // Pick a reasonable string to insert.  Optimistically use 'nil' or
265   // 'NULL' if those are actually defined in the context.  Only use
266   // 'nil' for ObjC methods, where it's much more likely that the
267   // variadic arguments form a list of object pointers.
268   SourceLocation MissingNilLoc
269     = PP.getLocForEndOfToken(sentinelExpr->getLocEnd());
270   std::string NullValue;
271   if (calleeType == CT_Method &&
272       PP.getIdentifierInfo("nil")->hasMacroDefinition())
273     NullValue = "nil";
274   else if (PP.getIdentifierInfo("NULL")->hasMacroDefinition())
275     NullValue = "NULL";
276   else
277     NullValue = "(void*) 0";
278 
279   if (MissingNilLoc.isInvalid())
280     Diag(Loc, diag::warn_missing_sentinel) << calleeType;
281   else
282     Diag(MissingNilLoc, diag::warn_missing_sentinel)
283       << calleeType
284       << FixItHint::CreateInsertion(MissingNilLoc, ", " + NullValue);
285   Diag(D->getLocation(), diag::note_sentinel_here) << calleeType;
286 }
287 
288 SourceRange Sema::getExprRange(Expr *E) const {
289   return E ? E->getSourceRange() : SourceRange();
290 }
291 
292 //===----------------------------------------------------------------------===//
293 //  Standard Promotions and Conversions
294 //===----------------------------------------------------------------------===//
295 
296 /// DefaultFunctionArrayConversion (C99 6.3.2.1p3, C99 6.3.2.1p4).
297 ExprResult Sema::DefaultFunctionArrayConversion(Expr *E) {
298   // Handle any placeholder expressions which made it here.
299   if (E->getType()->isPlaceholderType()) {
300     ExprResult result = CheckPlaceholderExpr(E);
301     if (result.isInvalid()) return ExprError();
302     E = result.take();
303   }
304 
305   QualType Ty = E->getType();
306   assert(!Ty.isNull() && "DefaultFunctionArrayConversion - missing type");
307 
308   if (Ty->isFunctionType())
309     E = ImpCastExprToType(E, Context.getPointerType(Ty),
310                           CK_FunctionToPointerDecay).take();
311   else if (Ty->isArrayType()) {
312     // In C90 mode, arrays only promote to pointers if the array expression is
313     // an lvalue.  The relevant legalese is C90 6.2.2.1p3: "an lvalue that has
314     // type 'array of type' is converted to an expression that has type 'pointer
315     // to type'...".  In C99 this was changed to: C99 6.3.2.1p3: "an expression
316     // that has type 'array of type' ...".  The relevant change is "an lvalue"
317     // (C90) to "an expression" (C99).
318     //
319     // C++ 4.2p1:
320     // An lvalue or rvalue of type "array of N T" or "array of unknown bound of
321     // T" can be converted to an rvalue of type "pointer to T".
322     //
323     if (getLangOptions().C99 || getLangOptions().CPlusPlus || E->isLValue())
324       E = ImpCastExprToType(E, Context.getArrayDecayedType(Ty),
325                             CK_ArrayToPointerDecay).take();
326   }
327   return Owned(E);
328 }
329 
330 static void CheckForNullPointerDereference(Sema &S, Expr *E) {
331   // Check to see if we are dereferencing a null pointer.  If so,
332   // and if not volatile-qualified, this is undefined behavior that the
333   // optimizer will delete, so warn about it.  People sometimes try to use this
334   // to get a deterministic trap and are surprised by clang's behavior.  This
335   // only handles the pattern "*null", which is a very syntactic check.
336   if (UnaryOperator *UO = dyn_cast<UnaryOperator>(E->IgnoreParenCasts()))
337     if (UO->getOpcode() == UO_Deref &&
338         UO->getSubExpr()->IgnoreParenCasts()->
339           isNullPointerConstant(S.Context, Expr::NPC_ValueDependentIsNotNull) &&
340         !UO->getType().isVolatileQualified()) {
341     S.DiagRuntimeBehavior(UO->getOperatorLoc(), UO,
342                           S.PDiag(diag::warn_indirection_through_null)
343                             << UO->getSubExpr()->getSourceRange());
344     S.DiagRuntimeBehavior(UO->getOperatorLoc(), UO,
345                         S.PDiag(diag::note_indirection_through_null));
346   }
347 }
348 
349 ExprResult Sema::DefaultLvalueConversion(Expr *E) {
350   // Handle any placeholder expressions which made it here.
351   if (E->getType()->isPlaceholderType()) {
352     ExprResult result = CheckPlaceholderExpr(E);
353     if (result.isInvalid()) return ExprError();
354     E = result.take();
355   }
356 
357   // C++ [conv.lval]p1:
358   //   A glvalue of a non-function, non-array type T can be
359   //   converted to a prvalue.
360   if (!E->isGLValue()) return Owned(E);
361 
362   QualType T = E->getType();
363   assert(!T.isNull() && "r-value conversion on typeless expression?");
364 
365   // We can't do lvalue-to-rvalue on atomics yet.
366   if (T->getAs<AtomicType>())
367     return Owned(E);
368 
369   // Create a load out of an ObjCProperty l-value, if necessary.
370   if (E->getObjectKind() == OK_ObjCProperty) {
371     ExprResult Res = ConvertPropertyForRValue(E);
372     if (Res.isInvalid())
373       return Owned(E);
374     E = Res.take();
375     if (!E->isGLValue())
376       return Owned(E);
377   }
378 
379   // We don't want to throw lvalue-to-rvalue casts on top of
380   // expressions of certain types in C++.
381   if (getLangOptions().CPlusPlus &&
382       (E->getType() == Context.OverloadTy ||
383        T->isDependentType() ||
384        T->isRecordType()))
385     return Owned(E);
386 
387   // The C standard is actually really unclear on this point, and
388   // DR106 tells us what the result should be but not why.  It's
389   // generally best to say that void types just doesn't undergo
390   // lvalue-to-rvalue at all.  Note that expressions of unqualified
391   // 'void' type are never l-values, but qualified void can be.
392   if (T->isVoidType())
393     return Owned(E);
394 
395   CheckForNullPointerDereference(*this, E);
396 
397   // C++ [conv.lval]p1:
398   //   [...] If T is a non-class type, the type of the prvalue is the
399   //   cv-unqualified version of T. Otherwise, the type of the
400   //   rvalue is T.
401   //
402   // C99 6.3.2.1p2:
403   //   If the lvalue has qualified type, the value has the unqualified
404   //   version of the type of the lvalue; otherwise, the value has the
405   //   type of the lvalue.
406   if (T.hasQualifiers())
407     T = T.getUnqualifiedType();
408 
409   ExprResult Res = Owned(ImplicitCastExpr::Create(Context, T, CK_LValueToRValue,
410                                                   E, 0, VK_RValue));
411 
412   return Res;
413 }
414 
415 ExprResult Sema::DefaultFunctionArrayLvalueConversion(Expr *E) {
416   ExprResult Res = DefaultFunctionArrayConversion(E);
417   if (Res.isInvalid())
418     return ExprError();
419   Res = DefaultLvalueConversion(Res.take());
420   if (Res.isInvalid())
421     return ExprError();
422   return move(Res);
423 }
424 
425 
426 /// UsualUnaryConversions - Performs various conversions that are common to most
427 /// operators (C99 6.3). The conversions of array and function types are
428 /// sometimes suppressed. For example, the array->pointer conversion doesn't
429 /// apply if the array is an argument to the sizeof or address (&) operators.
430 /// In these instances, this routine should *not* be called.
431 ExprResult Sema::UsualUnaryConversions(Expr *E) {
432   // First, convert to an r-value.
433   ExprResult Res = DefaultFunctionArrayLvalueConversion(E);
434   if (Res.isInvalid())
435     return Owned(E);
436   E = Res.take();
437 
438   QualType Ty = E->getType();
439   assert(!Ty.isNull() && "UsualUnaryConversions - missing type");
440 
441   // Half FP is a bit different: it's a storage-only type, meaning that any
442   // "use" of it should be promoted to float.
443   if (Ty->isHalfType())
444     return ImpCastExprToType(Res.take(), Context.FloatTy, CK_FloatingCast);
445 
446   // Try to perform integral promotions if the object has a theoretically
447   // promotable type.
448   if (Ty->isIntegralOrUnscopedEnumerationType()) {
449     // C99 6.3.1.1p2:
450     //
451     //   The following may be used in an expression wherever an int or
452     //   unsigned int may be used:
453     //     - an object or expression with an integer type whose integer
454     //       conversion rank is less than or equal to the rank of int
455     //       and unsigned int.
456     //     - A bit-field of type _Bool, int, signed int, or unsigned int.
457     //
458     //   If an int can represent all values of the original type, the
459     //   value is converted to an int; otherwise, it is converted to an
460     //   unsigned int. These are called the integer promotions. All
461     //   other types are unchanged by the integer promotions.
462 
463     QualType PTy = Context.isPromotableBitField(E);
464     if (!PTy.isNull()) {
465       E = ImpCastExprToType(E, PTy, CK_IntegralCast).take();
466       return Owned(E);
467     }
468     if (Ty->isPromotableIntegerType()) {
469       QualType PT = Context.getPromotedIntegerType(Ty);
470       E = ImpCastExprToType(E, PT, CK_IntegralCast).take();
471       return Owned(E);
472     }
473   }
474   return Owned(E);
475 }
476 
477 /// DefaultArgumentPromotion (C99 6.5.2.2p6). Used for function calls that
478 /// do not have a prototype. Arguments that have type float are promoted to
479 /// double. All other argument types are converted by UsualUnaryConversions().
480 ExprResult Sema::DefaultArgumentPromotion(Expr *E) {
481   QualType Ty = E->getType();
482   assert(!Ty.isNull() && "DefaultArgumentPromotion - missing type");
483 
484   ExprResult Res = UsualUnaryConversions(E);
485   if (Res.isInvalid())
486     return Owned(E);
487   E = Res.take();
488 
489   // If this is a 'float' (CVR qualified or typedef) promote to double.
490   if (Ty->isSpecificBuiltinType(BuiltinType::Float))
491     E = ImpCastExprToType(E, Context.DoubleTy, CK_FloatingCast).take();
492 
493   // C++ performs lvalue-to-rvalue conversion as a default argument
494   // promotion, even on class types, but note:
495   //   C++11 [conv.lval]p2:
496   //     When an lvalue-to-rvalue conversion occurs in an unevaluated
497   //     operand or a subexpression thereof the value contained in the
498   //     referenced object is not accessed. Otherwise, if the glvalue
499   //     has a class type, the conversion copy-initializes a temporary
500   //     of type T from the glvalue and the result of the conversion
501   //     is a prvalue for the temporary.
502   // FIXME: add some way to gate this entire thing for correctness in
503   // potentially potentially evaluated contexts.
504   if (getLangOptions().CPlusPlus && E->isGLValue() &&
505       ExprEvalContexts.back().Context != Unevaluated) {
506     ExprResult Temp = PerformCopyInitialization(
507                        InitializedEntity::InitializeTemporary(E->getType()),
508                                                 E->getExprLoc(),
509                                                 Owned(E));
510     if (Temp.isInvalid())
511       return ExprError();
512     E = Temp.get();
513   }
514 
515   return Owned(E);
516 }
517 
518 /// DefaultVariadicArgumentPromotion - Like DefaultArgumentPromotion, but
519 /// will warn if the resulting type is not a POD type, and rejects ObjC
520 /// interfaces passed by value.
521 ExprResult Sema::DefaultVariadicArgumentPromotion(Expr *E, VariadicCallType CT,
522                                                   FunctionDecl *FDecl) {
523   if (const BuiltinType *PlaceholderTy = E->getType()->getAsPlaceholderType()) {
524     // Strip the unbridged-cast placeholder expression off, if applicable.
525     if (PlaceholderTy->getKind() == BuiltinType::ARCUnbridgedCast &&
526         (CT == VariadicMethod ||
527          (FDecl && FDecl->hasAttr<CFAuditedTransferAttr>()))) {
528       E = stripARCUnbridgedCast(E);
529 
530     // Otherwise, do normal placeholder checking.
531     } else {
532       ExprResult ExprRes = CheckPlaceholderExpr(E);
533       if (ExprRes.isInvalid())
534         return ExprError();
535       E = ExprRes.take();
536     }
537   }
538 
539   ExprResult ExprRes = DefaultArgumentPromotion(E);
540   if (ExprRes.isInvalid())
541     return ExprError();
542   E = ExprRes.take();
543 
544   // Don't allow one to pass an Objective-C interface to a vararg.
545   if (E->getType()->isObjCObjectType() &&
546     DiagRuntimeBehavior(E->getLocStart(), 0,
547                         PDiag(diag::err_cannot_pass_objc_interface_to_vararg)
548                           << E->getType() << CT))
549     return ExprError();
550 
551   // Complain about passing non-POD types through varargs. However, don't
552   // perform this check for incomplete types, which we can get here when we're
553   // in an unevaluated context.
554   if (!E->getType()->isIncompleteType() && !E->getType().isPODType(Context)) {
555     // C++0x [expr.call]p7:
556     //   Passing a potentially-evaluated argument of class type (Clause 9)
557     //   having a non-trivial copy constructor, a non-trivial move constructor,
558     //   or a non-trivial destructor, with no corresponding parameter,
559     //   is conditionally-supported with implementation-defined semantics.
560     bool TrivialEnough = false;
561     if (getLangOptions().CPlusPlus0x && !E->getType()->isDependentType())  {
562       if (CXXRecordDecl *Record = E->getType()->getAsCXXRecordDecl()) {
563         if (Record->hasTrivialCopyConstructor() &&
564             Record->hasTrivialMoveConstructor() &&
565             Record->hasTrivialDestructor())
566           TrivialEnough = true;
567       }
568     }
569 
570     if (!TrivialEnough &&
571         getLangOptions().ObjCAutoRefCount &&
572         E->getType()->isObjCLifetimeType())
573       TrivialEnough = true;
574 
575     if (TrivialEnough) {
576       // Nothing to diagnose. This is okay.
577     } else if (DiagRuntimeBehavior(E->getLocStart(), 0,
578                           PDiag(diag::warn_cannot_pass_non_pod_arg_to_vararg)
579                             << getLangOptions().CPlusPlus0x << E->getType()
580                             << CT)) {
581       // Turn this into a trap.
582       CXXScopeSpec SS;
583       UnqualifiedId Name;
584       Name.setIdentifier(PP.getIdentifierInfo("__builtin_trap"),
585                          E->getLocStart());
586       ExprResult TrapFn = ActOnIdExpression(TUScope, SS, Name, true, false);
587       if (TrapFn.isInvalid())
588         return ExprError();
589 
590       ExprResult Call = ActOnCallExpr(TUScope, TrapFn.get(), E->getLocStart(),
591                                       MultiExprArg(), E->getLocEnd());
592       if (Call.isInvalid())
593         return ExprError();
594 
595       ExprResult Comma = ActOnBinOp(TUScope, E->getLocStart(), tok::comma,
596                                     Call.get(), E);
597       if (Comma.isInvalid())
598         return ExprError();
599       E = Comma.get();
600     }
601   }
602 
603   return Owned(E);
604 }
605 
606 /// \brief Converts an integer to complex float type.  Helper function of
607 /// UsualArithmeticConversions()
608 ///
609 /// \return false if the integer expression is an integer type and is
610 /// successfully converted to the complex type.
611 static bool handleIntegerToComplexFloatConversion(Sema &S, ExprResult &IntExpr,
612                                                   ExprResult &ComplexExpr,
613                                                   QualType IntTy,
614                                                   QualType ComplexTy,
615                                                   bool SkipCast) {
616   if (IntTy->isComplexType() || IntTy->isRealFloatingType()) return true;
617   if (SkipCast) return false;
618   if (IntTy->isIntegerType()) {
619     QualType fpTy = cast<ComplexType>(ComplexTy)->getElementType();
620     IntExpr = S.ImpCastExprToType(IntExpr.take(), fpTy, CK_IntegralToFloating);
621     IntExpr = S.ImpCastExprToType(IntExpr.take(), ComplexTy,
622                                   CK_FloatingRealToComplex);
623   } else {
624     assert(IntTy->isComplexIntegerType());
625     IntExpr = S.ImpCastExprToType(IntExpr.take(), ComplexTy,
626                                   CK_IntegralComplexToFloatingComplex);
627   }
628   return false;
629 }
630 
631 /// \brief Takes two complex float types and converts them to the same type.
632 /// Helper function of UsualArithmeticConversions()
633 static QualType
634 handleComplexFloatToComplexFloatConverstion(Sema &S, ExprResult &LHS,
635                                             ExprResult &RHS, QualType LHSType,
636                                             QualType RHSType,
637                                             bool IsCompAssign) {
638   int order = S.Context.getFloatingTypeOrder(LHSType, RHSType);
639 
640   if (order < 0) {
641     // _Complex float -> _Complex double
642     if (!IsCompAssign)
643       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_FloatingComplexCast);
644     return RHSType;
645   }
646   if (order > 0)
647     // _Complex float -> _Complex double
648     RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_FloatingComplexCast);
649   return LHSType;
650 }
651 
652 /// \brief Converts otherExpr to complex float and promotes complexExpr if
653 /// necessary.  Helper function of UsualArithmeticConversions()
654 static QualType handleOtherComplexFloatConversion(Sema &S,
655                                                   ExprResult &ComplexExpr,
656                                                   ExprResult &OtherExpr,
657                                                   QualType ComplexTy,
658                                                   QualType OtherTy,
659                                                   bool ConvertComplexExpr,
660                                                   bool ConvertOtherExpr) {
661   int order = S.Context.getFloatingTypeOrder(ComplexTy, OtherTy);
662 
663   // If just the complexExpr is complex, the otherExpr needs to be converted,
664   // and the complexExpr might need to be promoted.
665   if (order > 0) { // complexExpr is wider
666     // float -> _Complex double
667     if (ConvertOtherExpr) {
668       QualType fp = cast<ComplexType>(ComplexTy)->getElementType();
669       OtherExpr = S.ImpCastExprToType(OtherExpr.take(), fp, CK_FloatingCast);
670       OtherExpr = S.ImpCastExprToType(OtherExpr.take(), ComplexTy,
671                                       CK_FloatingRealToComplex);
672     }
673     return ComplexTy;
674   }
675 
676   // otherTy is at least as wide.  Find its corresponding complex type.
677   QualType result = (order == 0 ? ComplexTy :
678                                   S.Context.getComplexType(OtherTy));
679 
680   // double -> _Complex double
681   if (ConvertOtherExpr)
682     OtherExpr = S.ImpCastExprToType(OtherExpr.take(), result,
683                                     CK_FloatingRealToComplex);
684 
685   // _Complex float -> _Complex double
686   if (ConvertComplexExpr && order < 0)
687     ComplexExpr = S.ImpCastExprToType(ComplexExpr.take(), result,
688                                       CK_FloatingComplexCast);
689 
690   return result;
691 }
692 
693 /// \brief Handle arithmetic conversion with complex types.  Helper function of
694 /// UsualArithmeticConversions()
695 static QualType handleComplexFloatConversion(Sema &S, ExprResult &LHS,
696                                              ExprResult &RHS, QualType LHSType,
697                                              QualType RHSType,
698                                              bool IsCompAssign) {
699   // if we have an integer operand, the result is the complex type.
700   if (!handleIntegerToComplexFloatConversion(S, RHS, LHS, RHSType, LHSType,
701                                              /*skipCast*/false))
702     return LHSType;
703   if (!handleIntegerToComplexFloatConversion(S, LHS, RHS, LHSType, RHSType,
704                                              /*skipCast*/IsCompAssign))
705     return RHSType;
706 
707   // This handles complex/complex, complex/float, or float/complex.
708   // When both operands are complex, the shorter operand is converted to the
709   // type of the longer, and that is the type of the result. This corresponds
710   // to what is done when combining two real floating-point operands.
711   // The fun begins when size promotion occur across type domains.
712   // From H&S 6.3.4: When one operand is complex and the other is a real
713   // floating-point type, the less precise type is converted, within it's
714   // real or complex domain, to the precision of the other type. For example,
715   // when combining a "long double" with a "double _Complex", the
716   // "double _Complex" is promoted to "long double _Complex".
717 
718   bool LHSComplexFloat = LHSType->isComplexType();
719   bool RHSComplexFloat = RHSType->isComplexType();
720 
721   // If both are complex, just cast to the more precise type.
722   if (LHSComplexFloat && RHSComplexFloat)
723     return handleComplexFloatToComplexFloatConverstion(S, LHS, RHS,
724                                                        LHSType, RHSType,
725                                                        IsCompAssign);
726 
727   // If only one operand is complex, promote it if necessary and convert the
728   // other operand to complex.
729   if (LHSComplexFloat)
730     return handleOtherComplexFloatConversion(
731         S, LHS, RHS, LHSType, RHSType, /*convertComplexExpr*/!IsCompAssign,
732         /*convertOtherExpr*/ true);
733 
734   assert(RHSComplexFloat);
735   return handleOtherComplexFloatConversion(
736       S, RHS, LHS, RHSType, LHSType, /*convertComplexExpr*/true,
737       /*convertOtherExpr*/ !IsCompAssign);
738 }
739 
740 /// \brief Hande arithmetic conversion from integer to float.  Helper function
741 /// of UsualArithmeticConversions()
742 static QualType handleIntToFloatConversion(Sema &S, ExprResult &FloatExpr,
743                                            ExprResult &IntExpr,
744                                            QualType FloatTy, QualType IntTy,
745                                            bool ConvertFloat, bool ConvertInt) {
746   if (IntTy->isIntegerType()) {
747     if (ConvertInt)
748       // Convert intExpr to the lhs floating point type.
749       IntExpr = S.ImpCastExprToType(IntExpr.take(), FloatTy,
750                                     CK_IntegralToFloating);
751     return FloatTy;
752   }
753 
754   // Convert both sides to the appropriate complex float.
755   assert(IntTy->isComplexIntegerType());
756   QualType result = S.Context.getComplexType(FloatTy);
757 
758   // _Complex int -> _Complex float
759   if (ConvertInt)
760     IntExpr = S.ImpCastExprToType(IntExpr.take(), result,
761                                   CK_IntegralComplexToFloatingComplex);
762 
763   // float -> _Complex float
764   if (ConvertFloat)
765     FloatExpr = S.ImpCastExprToType(FloatExpr.take(), result,
766                                     CK_FloatingRealToComplex);
767 
768   return result;
769 }
770 
771 /// \brief Handle arithmethic conversion with floating point types.  Helper
772 /// function of UsualArithmeticConversions()
773 static QualType handleFloatConversion(Sema &S, ExprResult &LHS,
774                                       ExprResult &RHS, QualType LHSType,
775                                       QualType RHSType, bool IsCompAssign) {
776   bool LHSFloat = LHSType->isRealFloatingType();
777   bool RHSFloat = RHSType->isRealFloatingType();
778 
779   // If we have two real floating types, convert the smaller operand
780   // to the bigger result.
781   if (LHSFloat && RHSFloat) {
782     int order = S.Context.getFloatingTypeOrder(LHSType, RHSType);
783     if (order > 0) {
784       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_FloatingCast);
785       return LHSType;
786     }
787 
788     assert(order < 0 && "illegal float comparison");
789     if (!IsCompAssign)
790       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_FloatingCast);
791     return RHSType;
792   }
793 
794   if (LHSFloat)
795     return handleIntToFloatConversion(S, LHS, RHS, LHSType, RHSType,
796                                       /*convertFloat=*/!IsCompAssign,
797                                       /*convertInt=*/ true);
798   assert(RHSFloat);
799   return handleIntToFloatConversion(S, RHS, LHS, RHSType, LHSType,
800                                     /*convertInt=*/ true,
801                                     /*convertFloat=*/!IsCompAssign);
802 }
803 
804 /// \brief Handle conversions with GCC complex int extension.  Helper function
805 /// of UsualArithmeticConversions()
806 // FIXME: if the operands are (int, _Complex long), we currently
807 // don't promote the complex.  Also, signedness?
808 static QualType handleComplexIntConversion(Sema &S, ExprResult &LHS,
809                                            ExprResult &RHS, QualType LHSType,
810                                            QualType RHSType,
811                                            bool IsCompAssign) {
812   const ComplexType *LHSComplexInt = LHSType->getAsComplexIntegerType();
813   const ComplexType *RHSComplexInt = RHSType->getAsComplexIntegerType();
814 
815   if (LHSComplexInt && RHSComplexInt) {
816     int order = S.Context.getIntegerTypeOrder(LHSComplexInt->getElementType(),
817                                               RHSComplexInt->getElementType());
818     assert(order && "inequal types with equal element ordering");
819     if (order > 0) {
820       // _Complex int -> _Complex long
821       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralComplexCast);
822       return LHSType;
823     }
824 
825     if (!IsCompAssign)
826       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralComplexCast);
827     return RHSType;
828   }
829 
830   if (LHSComplexInt) {
831     // int -> _Complex int
832     RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralRealToComplex);
833     return LHSType;
834   }
835 
836   assert(RHSComplexInt);
837   // int -> _Complex int
838   if (!IsCompAssign)
839     LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralRealToComplex);
840   return RHSType;
841 }
842 
843 /// \brief Handle integer arithmetic conversions.  Helper function of
844 /// UsualArithmeticConversions()
845 static QualType handleIntegerConversion(Sema &S, ExprResult &LHS,
846                                         ExprResult &RHS, QualType LHSType,
847                                         QualType RHSType, bool IsCompAssign) {
848   // The rules for this case are in C99 6.3.1.8
849   int order = S.Context.getIntegerTypeOrder(LHSType, RHSType);
850   bool LHSSigned = LHSType->hasSignedIntegerRepresentation();
851   bool RHSSigned = RHSType->hasSignedIntegerRepresentation();
852   if (LHSSigned == RHSSigned) {
853     // Same signedness; use the higher-ranked type
854     if (order >= 0) {
855       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
856       return LHSType;
857     } else if (!IsCompAssign)
858       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
859     return RHSType;
860   } else if (order != (LHSSigned ? 1 : -1)) {
861     // The unsigned type has greater than or equal rank to the
862     // signed type, so use the unsigned type
863     if (RHSSigned) {
864       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
865       return LHSType;
866     } else if (!IsCompAssign)
867       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
868     return RHSType;
869   } else if (S.Context.getIntWidth(LHSType) != S.Context.getIntWidth(RHSType)) {
870     // The two types are different widths; if we are here, that
871     // means the signed type is larger than the unsigned type, so
872     // use the signed type.
873     if (LHSSigned) {
874       RHS = S.ImpCastExprToType(RHS.take(), LHSType, CK_IntegralCast);
875       return LHSType;
876     } else if (!IsCompAssign)
877       LHS = S.ImpCastExprToType(LHS.take(), RHSType, CK_IntegralCast);
878     return RHSType;
879   } else {
880     // The signed type is higher-ranked than the unsigned type,
881     // but isn't actually any bigger (like unsigned int and long
882     // on most 32-bit systems).  Use the unsigned type corresponding
883     // to the signed type.
884     QualType result =
885       S.Context.getCorrespondingUnsignedType(LHSSigned ? LHSType : RHSType);
886     RHS = S.ImpCastExprToType(RHS.take(), result, CK_IntegralCast);
887     if (!IsCompAssign)
888       LHS = S.ImpCastExprToType(LHS.take(), result, CK_IntegralCast);
889     return result;
890   }
891 }
892 
893 /// UsualArithmeticConversions - Performs various conversions that are common to
894 /// binary operators (C99 6.3.1.8). If both operands aren't arithmetic, this
895 /// routine returns the first non-arithmetic type found. The client is
896 /// responsible for emitting appropriate error diagnostics.
897 /// FIXME: verify the conversion rules for "complex int" are consistent with
898 /// GCC.
899 QualType Sema::UsualArithmeticConversions(ExprResult &LHS, ExprResult &RHS,
900                                           bool IsCompAssign) {
901   if (!IsCompAssign) {
902     LHS = UsualUnaryConversions(LHS.take());
903     if (LHS.isInvalid())
904       return QualType();
905   }
906 
907   RHS = UsualUnaryConversions(RHS.take());
908   if (RHS.isInvalid())
909     return QualType();
910 
911   // For conversion purposes, we ignore any qualifiers.
912   // For example, "const float" and "float" are equivalent.
913   QualType LHSType =
914     Context.getCanonicalType(LHS.get()->getType()).getUnqualifiedType();
915   QualType RHSType =
916     Context.getCanonicalType(RHS.get()->getType()).getUnqualifiedType();
917 
918   // If both types are identical, no conversion is needed.
919   if (LHSType == RHSType)
920     return LHSType;
921 
922   // If either side is a non-arithmetic type (e.g. a pointer), we are done.
923   // The caller can deal with this (e.g. pointer + int).
924   if (!LHSType->isArithmeticType() || !RHSType->isArithmeticType())
925     return LHSType;
926 
927   // Apply unary and bitfield promotions to the LHS's type.
928   QualType LHSUnpromotedType = LHSType;
929   if (LHSType->isPromotableIntegerType())
930     LHSType = Context.getPromotedIntegerType(LHSType);
931   QualType LHSBitfieldPromoteTy = Context.isPromotableBitField(LHS.get());
932   if (!LHSBitfieldPromoteTy.isNull())
933     LHSType = LHSBitfieldPromoteTy;
934   if (LHSType != LHSUnpromotedType && !IsCompAssign)
935     LHS = ImpCastExprToType(LHS.take(), LHSType, CK_IntegralCast);
936 
937   // If both types are identical, no conversion is needed.
938   if (LHSType == RHSType)
939     return LHSType;
940 
941   // At this point, we have two different arithmetic types.
942 
943   // Handle complex types first (C99 6.3.1.8p1).
944   if (LHSType->isComplexType() || RHSType->isComplexType())
945     return handleComplexFloatConversion(*this, LHS, RHS, LHSType, RHSType,
946                                         IsCompAssign);
947 
948   // Now handle "real" floating types (i.e. float, double, long double).
949   if (LHSType->isRealFloatingType() || RHSType->isRealFloatingType())
950     return handleFloatConversion(*this, LHS, RHS, LHSType, RHSType,
951                                  IsCompAssign);
952 
953   // Handle GCC complex int extension.
954   if (LHSType->isComplexIntegerType() || RHSType->isComplexIntegerType())
955     return handleComplexIntConversion(*this, LHS, RHS, LHSType, RHSType,
956                                       IsCompAssign);
957 
958   // Finally, we have two differing integer types.
959   return handleIntegerConversion(*this, LHS, RHS, LHSType, RHSType,
960                                  IsCompAssign);
961 }
962 
963 //===----------------------------------------------------------------------===//
964 //  Semantic Analysis for various Expression Types
965 //===----------------------------------------------------------------------===//
966 
967 
968 ExprResult
969 Sema::ActOnGenericSelectionExpr(SourceLocation KeyLoc,
970                                 SourceLocation DefaultLoc,
971                                 SourceLocation RParenLoc,
972                                 Expr *ControllingExpr,
973                                 MultiTypeArg ArgTypes,
974                                 MultiExprArg ArgExprs) {
975   unsigned NumAssocs = ArgTypes.size();
976   assert(NumAssocs == ArgExprs.size());
977 
978   ParsedType *ParsedTypes = ArgTypes.release();
979   Expr **Exprs = ArgExprs.release();
980 
981   TypeSourceInfo **Types = new TypeSourceInfo*[NumAssocs];
982   for (unsigned i = 0; i < NumAssocs; ++i) {
983     if (ParsedTypes[i])
984       (void) GetTypeFromParser(ParsedTypes[i], &Types[i]);
985     else
986       Types[i] = 0;
987   }
988 
989   ExprResult ER = CreateGenericSelectionExpr(KeyLoc, DefaultLoc, RParenLoc,
990                                              ControllingExpr, Types, Exprs,
991                                              NumAssocs);
992   delete [] Types;
993   return ER;
994 }
995 
996 ExprResult
997 Sema::CreateGenericSelectionExpr(SourceLocation KeyLoc,
998                                  SourceLocation DefaultLoc,
999                                  SourceLocation RParenLoc,
1000                                  Expr *ControllingExpr,
1001                                  TypeSourceInfo **Types,
1002                                  Expr **Exprs,
1003                                  unsigned NumAssocs) {
1004   bool TypeErrorFound = false,
1005        IsResultDependent = ControllingExpr->isTypeDependent(),
1006        ContainsUnexpandedParameterPack
1007          = ControllingExpr->containsUnexpandedParameterPack();
1008 
1009   for (unsigned i = 0; i < NumAssocs; ++i) {
1010     if (Exprs[i]->containsUnexpandedParameterPack())
1011       ContainsUnexpandedParameterPack = true;
1012 
1013     if (Types[i]) {
1014       if (Types[i]->getType()->containsUnexpandedParameterPack())
1015         ContainsUnexpandedParameterPack = true;
1016 
1017       if (Types[i]->getType()->isDependentType()) {
1018         IsResultDependent = true;
1019       } else {
1020         // C1X 6.5.1.1p2 "The type name in a generic association shall specify a
1021         // complete object type other than a variably modified type."
1022         unsigned D = 0;
1023         if (Types[i]->getType()->isIncompleteType())
1024           D = diag::err_assoc_type_incomplete;
1025         else if (!Types[i]->getType()->isObjectType())
1026           D = diag::err_assoc_type_nonobject;
1027         else if (Types[i]->getType()->isVariablyModifiedType())
1028           D = diag::err_assoc_type_variably_modified;
1029 
1030         if (D != 0) {
1031           Diag(Types[i]->getTypeLoc().getBeginLoc(), D)
1032             << Types[i]->getTypeLoc().getSourceRange()
1033             << Types[i]->getType();
1034           TypeErrorFound = true;
1035         }
1036 
1037         // C1X 6.5.1.1p2 "No two generic associations in the same generic
1038         // selection shall specify compatible types."
1039         for (unsigned j = i+1; j < NumAssocs; ++j)
1040           if (Types[j] && !Types[j]->getType()->isDependentType() &&
1041               Context.typesAreCompatible(Types[i]->getType(),
1042                                          Types[j]->getType())) {
1043             Diag(Types[j]->getTypeLoc().getBeginLoc(),
1044                  diag::err_assoc_compatible_types)
1045               << Types[j]->getTypeLoc().getSourceRange()
1046               << Types[j]->getType()
1047               << Types[i]->getType();
1048             Diag(Types[i]->getTypeLoc().getBeginLoc(),
1049                  diag::note_compat_assoc)
1050               << Types[i]->getTypeLoc().getSourceRange()
1051               << Types[i]->getType();
1052             TypeErrorFound = true;
1053           }
1054       }
1055     }
1056   }
1057   if (TypeErrorFound)
1058     return ExprError();
1059 
1060   // If we determined that the generic selection is result-dependent, don't
1061   // try to compute the result expression.
1062   if (IsResultDependent)
1063     return Owned(new (Context) GenericSelectionExpr(
1064                    Context, KeyLoc, ControllingExpr,
1065                    Types, Exprs, NumAssocs, DefaultLoc,
1066                    RParenLoc, ContainsUnexpandedParameterPack));
1067 
1068   SmallVector<unsigned, 1> CompatIndices;
1069   unsigned DefaultIndex = -1U;
1070   for (unsigned i = 0; i < NumAssocs; ++i) {
1071     if (!Types[i])
1072       DefaultIndex = i;
1073     else if (Context.typesAreCompatible(ControllingExpr->getType(),
1074                                         Types[i]->getType()))
1075       CompatIndices.push_back(i);
1076   }
1077 
1078   // C1X 6.5.1.1p2 "The controlling expression of a generic selection shall have
1079   // type compatible with at most one of the types named in its generic
1080   // association list."
1081   if (CompatIndices.size() > 1) {
1082     // We strip parens here because the controlling expression is typically
1083     // parenthesized in macro definitions.
1084     ControllingExpr = ControllingExpr->IgnoreParens();
1085     Diag(ControllingExpr->getLocStart(), diag::err_generic_sel_multi_match)
1086       << ControllingExpr->getSourceRange() << ControllingExpr->getType()
1087       << (unsigned) CompatIndices.size();
1088     for (SmallVector<unsigned, 1>::iterator I = CompatIndices.begin(),
1089          E = CompatIndices.end(); I != E; ++I) {
1090       Diag(Types[*I]->getTypeLoc().getBeginLoc(),
1091            diag::note_compat_assoc)
1092         << Types[*I]->getTypeLoc().getSourceRange()
1093         << Types[*I]->getType();
1094     }
1095     return ExprError();
1096   }
1097 
1098   // C1X 6.5.1.1p2 "If a generic selection has no default generic association,
1099   // its controlling expression shall have type compatible with exactly one of
1100   // the types named in its generic association list."
1101   if (DefaultIndex == -1U && CompatIndices.size() == 0) {
1102     // We strip parens here because the controlling expression is typically
1103     // parenthesized in macro definitions.
1104     ControllingExpr = ControllingExpr->IgnoreParens();
1105     Diag(ControllingExpr->getLocStart(), diag::err_generic_sel_no_match)
1106       << ControllingExpr->getSourceRange() << ControllingExpr->getType();
1107     return ExprError();
1108   }
1109 
1110   // C1X 6.5.1.1p3 "If a generic selection has a generic association with a
1111   // type name that is compatible with the type of the controlling expression,
1112   // then the result expression of the generic selection is the expression
1113   // in that generic association. Otherwise, the result expression of the
1114   // generic selection is the expression in the default generic association."
1115   unsigned ResultIndex =
1116     CompatIndices.size() ? CompatIndices[0] : DefaultIndex;
1117 
1118   return Owned(new (Context) GenericSelectionExpr(
1119                  Context, KeyLoc, ControllingExpr,
1120                  Types, Exprs, NumAssocs, DefaultLoc,
1121                  RParenLoc, ContainsUnexpandedParameterPack,
1122                  ResultIndex));
1123 }
1124 
1125 /// ActOnStringLiteral - The specified tokens were lexed as pasted string
1126 /// fragments (e.g. "foo" "bar" L"baz").  The result string has to handle string
1127 /// concatenation ([C99 5.1.1.2, translation phase #6]), so it may come from
1128 /// multiple tokens.  However, the common case is that StringToks points to one
1129 /// string.
1130 ///
1131 ExprResult
1132 Sema::ActOnStringLiteral(const Token *StringToks, unsigned NumStringToks) {
1133   assert(NumStringToks && "Must have at least one string!");
1134 
1135   StringLiteralParser Literal(StringToks, NumStringToks, PP);
1136   if (Literal.hadError)
1137     return ExprError();
1138 
1139   SmallVector<SourceLocation, 4> StringTokLocs;
1140   for (unsigned i = 0; i != NumStringToks; ++i)
1141     StringTokLocs.push_back(StringToks[i].getLocation());
1142 
1143   QualType StrTy = Context.CharTy;
1144   if (Literal.isWide())
1145     StrTy = Context.getWCharType();
1146   else if (Literal.isUTF16())
1147     StrTy = Context.Char16Ty;
1148   else if (Literal.isUTF32())
1149     StrTy = Context.Char32Ty;
1150   else if (Literal.Pascal)
1151     StrTy = Context.UnsignedCharTy;
1152 
1153   StringLiteral::StringKind Kind = StringLiteral::Ascii;
1154   if (Literal.isWide())
1155     Kind = StringLiteral::Wide;
1156   else if (Literal.isUTF8())
1157     Kind = StringLiteral::UTF8;
1158   else if (Literal.isUTF16())
1159     Kind = StringLiteral::UTF16;
1160   else if (Literal.isUTF32())
1161     Kind = StringLiteral::UTF32;
1162 
1163   // A C++ string literal has a const-qualified element type (C++ 2.13.4p1).
1164   if (getLangOptions().CPlusPlus || getLangOptions().ConstStrings)
1165     StrTy.addConst();
1166 
1167   // Get an array type for the string, according to C99 6.4.5.  This includes
1168   // the nul terminator character as well as the string length for pascal
1169   // strings.
1170   StrTy = Context.getConstantArrayType(StrTy,
1171                                  llvm::APInt(32, Literal.GetNumStringChars()+1),
1172                                        ArrayType::Normal, 0);
1173 
1174   // Pass &StringTokLocs[0], StringTokLocs.size() to factory!
1175   return Owned(StringLiteral::Create(Context, Literal.GetString(),
1176                                      Kind, Literal.Pascal, StrTy,
1177                                      &StringTokLocs[0],
1178                                      StringTokLocs.size()));
1179 }
1180 
1181 enum CaptureResult {
1182   /// No capture is required.
1183   CR_NoCapture,
1184 
1185   /// A capture is required.
1186   CR_Capture,
1187 
1188   /// A by-ref capture is required.
1189   CR_CaptureByRef,
1190 
1191   /// An error occurred when trying to capture the given variable.
1192   CR_Error
1193 };
1194 
1195 /// Diagnose an uncapturable value reference.
1196 ///
1197 /// \param var - the variable referenced
1198 /// \param DC - the context which we couldn't capture through
1199 static CaptureResult
1200 diagnoseUncapturableValueReference(Sema &S, SourceLocation loc,
1201                                    VarDecl *var, DeclContext *DC) {
1202   switch (S.ExprEvalContexts.back().Context) {
1203   case Sema::Unevaluated:
1204     // The argument will never be evaluated, so don't complain.
1205     return CR_NoCapture;
1206 
1207   case Sema::PotentiallyEvaluated:
1208   case Sema::PotentiallyEvaluatedIfUsed:
1209     break;
1210 
1211   case Sema::PotentiallyPotentiallyEvaluated:
1212     // FIXME: delay these!
1213     break;
1214   }
1215 
1216   // Don't diagnose about capture if we're not actually in code right
1217   // now; in general, there are more appropriate places that will
1218   // diagnose this.
1219   if (!S.CurContext->isFunctionOrMethod()) return CR_NoCapture;
1220 
1221   // Certain madnesses can happen with parameter declarations, which
1222   // we want to ignore.
1223   if (isa<ParmVarDecl>(var)) {
1224     // - If the parameter still belongs to the translation unit, then
1225     //   we're actually just using one parameter in the declaration of
1226     //   the next.  This is useful in e.g. VLAs.
1227     if (isa<TranslationUnitDecl>(var->getDeclContext()))
1228       return CR_NoCapture;
1229 
1230     // - This particular madness can happen in ill-formed default
1231     //   arguments; claim it's okay and let downstream code handle it.
1232     if (S.CurContext == var->getDeclContext()->getParent())
1233       return CR_NoCapture;
1234   }
1235 
1236   DeclarationName functionName;
1237   if (FunctionDecl *fn = dyn_cast<FunctionDecl>(var->getDeclContext()))
1238     functionName = fn->getDeclName();
1239   // FIXME: variable from enclosing block that we couldn't capture from!
1240 
1241   S.Diag(loc, diag::err_reference_to_local_var_in_enclosing_function)
1242     << var->getIdentifier() << functionName;
1243   S.Diag(var->getLocation(), diag::note_local_variable_declared_here)
1244     << var->getIdentifier();
1245 
1246   return CR_Error;
1247 }
1248 
1249 /// There is a well-formed capture at a particular scope level;
1250 /// propagate it through all the nested blocks.
1251 static CaptureResult propagateCapture(Sema &S, unsigned ValidScopeIndex,
1252                                       const BlockDecl::Capture &Capture) {
1253   VarDecl *var = Capture.getVariable();
1254 
1255   // Update all the inner blocks with the capture information.
1256   for (unsigned i = ValidScopeIndex + 1, e = S.FunctionScopes.size();
1257          i != e; ++i) {
1258     BlockScopeInfo *innerBlock = cast<BlockScopeInfo>(S.FunctionScopes[i]);
1259     innerBlock->Captures.push_back(
1260       BlockDecl::Capture(Capture.getVariable(), Capture.isByRef(),
1261                          /*nested*/ true, Capture.getCopyExpr()));
1262     innerBlock->CaptureMap[var] = innerBlock->Captures.size(); // +1
1263   }
1264 
1265   return Capture.isByRef() ? CR_CaptureByRef : CR_Capture;
1266 }
1267 
1268 /// shouldCaptureValueReference - Determine if a reference to the
1269 /// given value in the current context requires a variable capture.
1270 ///
1271 /// This also keeps the captures set in the BlockScopeInfo records
1272 /// up-to-date.
1273 static CaptureResult shouldCaptureValueReference(Sema &S, SourceLocation loc,
1274                                                  ValueDecl *Value) {
1275   // Only variables ever require capture.
1276   VarDecl *var = dyn_cast<VarDecl>(Value);
1277   if (!var) return CR_NoCapture;
1278 
1279   // Fast path: variables from the current context never require capture.
1280   DeclContext *DC = S.CurContext;
1281   if (var->getDeclContext() == DC) return CR_NoCapture;
1282 
1283   // Only variables with local storage require capture.
1284   // FIXME: What about 'const' variables in C++?
1285   if (!var->hasLocalStorage()) return CR_NoCapture;
1286 
1287   // Otherwise, we need to capture.
1288 
1289   unsigned functionScopesIndex = S.FunctionScopes.size() - 1;
1290   do {
1291     // Only blocks (and eventually C++0x closures) can capture; other
1292     // scopes don't work.
1293     if (!isa<BlockDecl>(DC))
1294       return diagnoseUncapturableValueReference(S, loc, var, DC);
1295 
1296     BlockScopeInfo *blockScope =
1297       cast<BlockScopeInfo>(S.FunctionScopes[functionScopesIndex]);
1298     assert(blockScope->TheDecl == static_cast<BlockDecl*>(DC));
1299 
1300     // Check whether we've already captured it in this block.  If so,
1301     // we're done.
1302     if (unsigned indexPlus1 = blockScope->CaptureMap[var])
1303       return propagateCapture(S, functionScopesIndex,
1304                               blockScope->Captures[indexPlus1 - 1]);
1305 
1306     functionScopesIndex--;
1307     DC = cast<BlockDecl>(DC)->getDeclContext();
1308   } while (var->getDeclContext() != DC);
1309 
1310   // Okay, we descended all the way to the block that defines the variable.
1311   // Actually try to capture it.
1312   QualType type = var->getType();
1313 
1314   // Prohibit variably-modified types.
1315   if (type->isVariablyModifiedType()) {
1316     S.Diag(loc, diag::err_ref_vm_type);
1317     S.Diag(var->getLocation(), diag::note_declared_at);
1318     return CR_Error;
1319   }
1320 
1321   // Prohibit arrays, even in __block variables, but not references to
1322   // them.
1323   if (type->isArrayType()) {
1324     S.Diag(loc, diag::err_ref_array_type);
1325     S.Diag(var->getLocation(), diag::note_declared_at);
1326     return CR_Error;
1327   }
1328 
1329   S.MarkDeclarationReferenced(loc, var);
1330 
1331   // The BlocksAttr indicates the variable is bound by-reference.
1332   bool byRef = var->hasAttr<BlocksAttr>();
1333 
1334   // Build a copy expression.
1335   Expr *copyExpr = 0;
1336   const RecordType *rtype;
1337   if (!byRef && S.getLangOptions().CPlusPlus && !type->isDependentType() &&
1338       (rtype = type->getAs<RecordType>())) {
1339 
1340     // The capture logic needs the destructor, so make sure we mark it.
1341     // Usually this is unnecessary because most local variables have
1342     // their destructors marked at declaration time, but parameters are
1343     // an exception because it's technically only the call site that
1344     // actually requires the destructor.
1345     if (isa<ParmVarDecl>(var))
1346       S.FinalizeVarWithDestructor(var, rtype);
1347 
1348     // According to the blocks spec, the capture of a variable from
1349     // the stack requires a const copy constructor.  This is not true
1350     // of the copy/move done to move a __block variable to the heap.
1351     type.addConst();
1352 
1353     Expr *declRef = new (S.Context) DeclRefExpr(var, type, VK_LValue, loc);
1354     ExprResult result =
1355       S.PerformCopyInitialization(
1356                       InitializedEntity::InitializeBlock(var->getLocation(),
1357                                                          type, false),
1358                                   loc, S.Owned(declRef));
1359 
1360     // Build a full-expression copy expression if initialization
1361     // succeeded and used a non-trivial constructor.  Recover from
1362     // errors by pretending that the copy isn't necessary.
1363     if (!result.isInvalid() &&
1364         !cast<CXXConstructExpr>(result.get())->getConstructor()->isTrivial()) {
1365       result = S.MaybeCreateExprWithCleanups(result);
1366       copyExpr = result.take();
1367     }
1368   }
1369 
1370   // We're currently at the declarer; go back to the closure.
1371   functionScopesIndex++;
1372   BlockScopeInfo *blockScope =
1373     cast<BlockScopeInfo>(S.FunctionScopes[functionScopesIndex]);
1374 
1375   // Build a valid capture in this scope.
1376   blockScope->Captures.push_back(
1377                  BlockDecl::Capture(var, byRef, /*nested*/ false, copyExpr));
1378   blockScope->CaptureMap[var] = blockScope->Captures.size(); // +1
1379 
1380   // Propagate that to inner captures if necessary.
1381   return propagateCapture(S, functionScopesIndex,
1382                           blockScope->Captures.back());
1383 }
1384 
1385 static ExprResult BuildBlockDeclRefExpr(Sema &S, ValueDecl *VD,
1386                                         const DeclarationNameInfo &NameInfo,
1387                                         bool ByRef) {
1388   assert(isa<VarDecl>(VD) && "capturing non-variable");
1389 
1390   VarDecl *var = cast<VarDecl>(VD);
1391   assert(var->hasLocalStorage() && "capturing non-local");
1392   assert(ByRef == var->hasAttr<BlocksAttr>() && "byref set wrong");
1393 
1394   QualType exprType = var->getType().getNonReferenceType();
1395 
1396   BlockDeclRefExpr *BDRE;
1397   if (!ByRef) {
1398     // The variable will be bound by copy; make it const within the
1399     // closure, but record that this was done in the expression.
1400     bool constAdded = !exprType.isConstQualified();
1401     exprType.addConst();
1402 
1403     BDRE = new (S.Context) BlockDeclRefExpr(var, exprType, VK_LValue,
1404                                             NameInfo.getLoc(), false,
1405                                             constAdded);
1406   } else {
1407     BDRE = new (S.Context) BlockDeclRefExpr(var, exprType, VK_LValue,
1408                                             NameInfo.getLoc(), true);
1409   }
1410 
1411   return S.Owned(BDRE);
1412 }
1413 
1414 ExprResult
1415 Sema::BuildDeclRefExpr(ValueDecl *D, QualType Ty, ExprValueKind VK,
1416                        SourceLocation Loc,
1417                        const CXXScopeSpec *SS) {
1418   DeclarationNameInfo NameInfo(D->getDeclName(), Loc);
1419   return BuildDeclRefExpr(D, Ty, VK, NameInfo, SS);
1420 }
1421 
1422 /// BuildDeclRefExpr - Build an expression that references a
1423 /// declaration that does not require a closure capture.
1424 ExprResult
1425 Sema::BuildDeclRefExpr(ValueDecl *D, QualType Ty, ExprValueKind VK,
1426                        const DeclarationNameInfo &NameInfo,
1427                        const CXXScopeSpec *SS) {
1428   if (getLangOptions().CUDA)
1429     if (const FunctionDecl *Caller = dyn_cast<FunctionDecl>(CurContext))
1430       if (const FunctionDecl *Callee = dyn_cast<FunctionDecl>(D)) {
1431         CUDAFunctionTarget CallerTarget = IdentifyCUDATarget(Caller),
1432                            CalleeTarget = IdentifyCUDATarget(Callee);
1433         if (CheckCUDATarget(CallerTarget, CalleeTarget)) {
1434           Diag(NameInfo.getLoc(), diag::err_ref_bad_target)
1435             << CalleeTarget << D->getIdentifier() << CallerTarget;
1436           Diag(D->getLocation(), diag::note_previous_decl)
1437             << D->getIdentifier();
1438           return ExprError();
1439         }
1440       }
1441 
1442   MarkDeclarationReferenced(NameInfo.getLoc(), D);
1443 
1444   Expr *E = DeclRefExpr::Create(Context,
1445                                 SS? SS->getWithLocInContext(Context)
1446                                   : NestedNameSpecifierLoc(),
1447                                 D, NameInfo, Ty, VK);
1448 
1449   // Just in case we're building an illegal pointer-to-member.
1450   FieldDecl *FD = dyn_cast<FieldDecl>(D);
1451   if (FD && FD->isBitField())
1452     E->setObjectKind(OK_BitField);
1453 
1454   return Owned(E);
1455 }
1456 
1457 /// Decomposes the given name into a DeclarationNameInfo, its location, and
1458 /// possibly a list of template arguments.
1459 ///
1460 /// If this produces template arguments, it is permitted to call
1461 /// DecomposeTemplateName.
1462 ///
1463 /// This actually loses a lot of source location information for
1464 /// non-standard name kinds; we should consider preserving that in
1465 /// some way.
1466 void
1467 Sema::DecomposeUnqualifiedId(const UnqualifiedId &Id,
1468                              TemplateArgumentListInfo &Buffer,
1469                              DeclarationNameInfo &NameInfo,
1470                              const TemplateArgumentListInfo *&TemplateArgs) {
1471   if (Id.getKind() == UnqualifiedId::IK_TemplateId) {
1472     Buffer.setLAngleLoc(Id.TemplateId->LAngleLoc);
1473     Buffer.setRAngleLoc(Id.TemplateId->RAngleLoc);
1474 
1475     ASTTemplateArgsPtr TemplateArgsPtr(*this,
1476                                        Id.TemplateId->getTemplateArgs(),
1477                                        Id.TemplateId->NumArgs);
1478     translateTemplateArguments(TemplateArgsPtr, Buffer);
1479     TemplateArgsPtr.release();
1480 
1481     TemplateName TName = Id.TemplateId->Template.get();
1482     SourceLocation TNameLoc = Id.TemplateId->TemplateNameLoc;
1483     NameInfo = Context.getNameForTemplate(TName, TNameLoc);
1484     TemplateArgs = &Buffer;
1485   } else {
1486     NameInfo = GetNameFromUnqualifiedId(Id);
1487     TemplateArgs = 0;
1488   }
1489 }
1490 
1491 /// Diagnose an empty lookup.
1492 ///
1493 /// \return false if new lookup candidates were found
1494 bool Sema::DiagnoseEmptyLookup(Scope *S, CXXScopeSpec &SS, LookupResult &R,
1495                                CorrectTypoContext CTC,
1496                                TemplateArgumentListInfo *ExplicitTemplateArgs,
1497                                Expr **Args, unsigned NumArgs) {
1498   DeclarationName Name = R.getLookupName();
1499 
1500   unsigned diagnostic = diag::err_undeclared_var_use;
1501   unsigned diagnostic_suggest = diag::err_undeclared_var_use_suggest;
1502   if (Name.getNameKind() == DeclarationName::CXXOperatorName ||
1503       Name.getNameKind() == DeclarationName::CXXLiteralOperatorName ||
1504       Name.getNameKind() == DeclarationName::CXXConversionFunctionName) {
1505     diagnostic = diag::err_undeclared_use;
1506     diagnostic_suggest = diag::err_undeclared_use_suggest;
1507   }
1508 
1509   // If the original lookup was an unqualified lookup, fake an
1510   // unqualified lookup.  This is useful when (for example) the
1511   // original lookup would not have found something because it was a
1512   // dependent name.
1513   for (DeclContext *DC = SS.isEmpty() ? CurContext : 0;
1514        DC; DC = DC->getParent()) {
1515     if (isa<CXXRecordDecl>(DC)) {
1516       LookupQualifiedName(R, DC);
1517 
1518       if (!R.empty()) {
1519         // Don't give errors about ambiguities in this lookup.
1520         R.suppressDiagnostics();
1521 
1522         CXXMethodDecl *CurMethod = dyn_cast<CXXMethodDecl>(CurContext);
1523         bool isInstance = CurMethod &&
1524                           CurMethod->isInstance() &&
1525                           DC == CurMethod->getParent();
1526 
1527         // Give a code modification hint to insert 'this->'.
1528         // TODO: fixit for inserting 'Base<T>::' in the other cases.
1529         // Actually quite difficult!
1530         if (isInstance) {
1531           UnresolvedLookupExpr *ULE = cast<UnresolvedLookupExpr>(
1532               CallsUndergoingInstantiation.back()->getCallee());
1533           CXXMethodDecl *DepMethod = cast_or_null<CXXMethodDecl>(
1534               CurMethod->getInstantiatedFromMemberFunction());
1535           if (DepMethod) {
1536             if (getLangOptions().MicrosoftExt)
1537               diagnostic = diag::warn_found_via_dependent_bases_lookup;
1538             Diag(R.getNameLoc(), diagnostic) << Name
1539               << FixItHint::CreateInsertion(R.getNameLoc(), "this->");
1540             QualType DepThisType = DepMethod->getThisType(Context);
1541             CXXThisExpr *DepThis = new (Context) CXXThisExpr(
1542                                        R.getNameLoc(), DepThisType, false);
1543             TemplateArgumentListInfo TList;
1544             if (ULE->hasExplicitTemplateArgs())
1545               ULE->copyTemplateArgumentsInto(TList);
1546 
1547             CXXScopeSpec SS;
1548             SS.Adopt(ULE->getQualifierLoc());
1549             CXXDependentScopeMemberExpr *DepExpr =
1550                 CXXDependentScopeMemberExpr::Create(
1551                     Context, DepThis, DepThisType, true, SourceLocation(),
1552                     SS.getWithLocInContext(Context), NULL,
1553                     R.getLookupNameInfo(),
1554                     ULE->hasExplicitTemplateArgs() ? &TList : 0);
1555             CallsUndergoingInstantiation.back()->setCallee(DepExpr);
1556           } else {
1557             // FIXME: we should be able to handle this case too. It is correct
1558             // to add this-> here. This is a workaround for PR7947.
1559             Diag(R.getNameLoc(), diagnostic) << Name;
1560           }
1561         } else {
1562           Diag(R.getNameLoc(), diagnostic) << Name;
1563         }
1564 
1565         // Do we really want to note all of these?
1566         for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I)
1567           Diag((*I)->getLocation(), diag::note_dependent_var_use);
1568 
1569         // Tell the callee to try to recover.
1570         return false;
1571       }
1572 
1573       R.clear();
1574     }
1575   }
1576 
1577   // We didn't find anything, so try to correct for a typo.
1578   TypoCorrection Corrected;
1579   if (S && (Corrected = CorrectTypo(R.getLookupNameInfo(), R.getLookupKind(),
1580                                     S, &SS, NULL, false, CTC))) {
1581     std::string CorrectedStr(Corrected.getAsString(getLangOptions()));
1582     std::string CorrectedQuotedStr(Corrected.getQuoted(getLangOptions()));
1583     R.setLookupName(Corrected.getCorrection());
1584 
1585     if (NamedDecl *ND = Corrected.getCorrectionDecl()) {
1586       if (Corrected.isOverloaded()) {
1587         OverloadCandidateSet OCS(R.getNameLoc());
1588         OverloadCandidateSet::iterator Best;
1589         for (TypoCorrection::decl_iterator CD = Corrected.begin(),
1590                                         CDEnd = Corrected.end();
1591              CD != CDEnd; ++CD) {
1592           if (FunctionTemplateDecl *FTD =
1593                    dyn_cast<FunctionTemplateDecl>(*CD))
1594             AddTemplateOverloadCandidate(
1595                 FTD, DeclAccessPair::make(FTD, AS_none), ExplicitTemplateArgs,
1596                 Args, NumArgs, OCS);
1597           else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(*CD))
1598             if (!ExplicitTemplateArgs || ExplicitTemplateArgs->size() == 0)
1599               AddOverloadCandidate(FD, DeclAccessPair::make(FD, AS_none),
1600                                    Args, NumArgs, OCS);
1601         }
1602         switch (OCS.BestViableFunction(*this, R.getNameLoc(), Best)) {
1603           case OR_Success:
1604             ND = Best->Function;
1605             break;
1606           default:
1607             break;
1608         }
1609       }
1610       R.addDecl(ND);
1611       if (isa<ValueDecl>(ND) || isa<FunctionTemplateDecl>(ND)) {
1612         if (SS.isEmpty())
1613           Diag(R.getNameLoc(), diagnostic_suggest) << Name << CorrectedQuotedStr
1614             << FixItHint::CreateReplacement(R.getNameLoc(), CorrectedStr);
1615         else
1616           Diag(R.getNameLoc(), diag::err_no_member_suggest)
1617             << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1618             << SS.getRange()
1619             << FixItHint::CreateReplacement(R.getNameLoc(), CorrectedStr);
1620         if (ND)
1621           Diag(ND->getLocation(), diag::note_previous_decl)
1622             << CorrectedQuotedStr;
1623 
1624         // Tell the callee to try to recover.
1625         return false;
1626       }
1627 
1628       if (isa<TypeDecl>(ND) || isa<ObjCInterfaceDecl>(ND)) {
1629         // FIXME: If we ended up with a typo for a type name or
1630         // Objective-C class name, we're in trouble because the parser
1631         // is in the wrong place to recover. Suggest the typo
1632         // correction, but don't make it a fix-it since we're not going
1633         // to recover well anyway.
1634         if (SS.isEmpty())
1635           Diag(R.getNameLoc(), diagnostic_suggest)
1636             << Name << CorrectedQuotedStr;
1637         else
1638           Diag(R.getNameLoc(), diag::err_no_member_suggest)
1639             << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1640             << SS.getRange();
1641 
1642         // Don't try to recover; it won't work.
1643         return true;
1644       }
1645     } else {
1646       // FIXME: We found a keyword. Suggest it, but don't provide a fix-it
1647       // because we aren't able to recover.
1648       if (SS.isEmpty())
1649         Diag(R.getNameLoc(), diagnostic_suggest) << Name << CorrectedQuotedStr;
1650       else
1651         Diag(R.getNameLoc(), diag::err_no_member_suggest)
1652         << Name << computeDeclContext(SS, false) << CorrectedQuotedStr
1653         << SS.getRange();
1654       return true;
1655     }
1656   }
1657   R.clear();
1658 
1659   // Emit a special diagnostic for failed member lookups.
1660   // FIXME: computing the declaration context might fail here (?)
1661   if (!SS.isEmpty()) {
1662     Diag(R.getNameLoc(), diag::err_no_member)
1663       << Name << computeDeclContext(SS, false)
1664       << SS.getRange();
1665     return true;
1666   }
1667 
1668   // Give up, we can't recover.
1669   Diag(R.getNameLoc(), diagnostic) << Name;
1670   return true;
1671 }
1672 
1673 ExprResult Sema::ActOnIdExpression(Scope *S,
1674                                    CXXScopeSpec &SS,
1675                                    UnqualifiedId &Id,
1676                                    bool HasTrailingLParen,
1677                                    bool IsAddressOfOperand) {
1678   assert(!(IsAddressOfOperand && HasTrailingLParen) &&
1679          "cannot be direct & operand and have a trailing lparen");
1680 
1681   if (SS.isInvalid())
1682     return ExprError();
1683 
1684   TemplateArgumentListInfo TemplateArgsBuffer;
1685 
1686   // Decompose the UnqualifiedId into the following data.
1687   DeclarationNameInfo NameInfo;
1688   const TemplateArgumentListInfo *TemplateArgs;
1689   DecomposeUnqualifiedId(Id, TemplateArgsBuffer, NameInfo, TemplateArgs);
1690 
1691   DeclarationName Name = NameInfo.getName();
1692   IdentifierInfo *II = Name.getAsIdentifierInfo();
1693   SourceLocation NameLoc = NameInfo.getLoc();
1694 
1695   // C++ [temp.dep.expr]p3:
1696   //   An id-expression is type-dependent if it contains:
1697   //     -- an identifier that was declared with a dependent type,
1698   //        (note: handled after lookup)
1699   //     -- a template-id that is dependent,
1700   //        (note: handled in BuildTemplateIdExpr)
1701   //     -- a conversion-function-id that specifies a dependent type,
1702   //     -- a nested-name-specifier that contains a class-name that
1703   //        names a dependent type.
1704   // Determine whether this is a member of an unknown specialization;
1705   // we need to handle these differently.
1706   bool DependentID = false;
1707   if (Name.getNameKind() == DeclarationName::CXXConversionFunctionName &&
1708       Name.getCXXNameType()->isDependentType()) {
1709     DependentID = true;
1710   } else if (SS.isSet()) {
1711     if (DeclContext *DC = computeDeclContext(SS, false)) {
1712       if (RequireCompleteDeclContext(SS, DC))
1713         return ExprError();
1714     } else {
1715       DependentID = true;
1716     }
1717   }
1718 
1719   if (DependentID)
1720     return ActOnDependentIdExpression(SS, NameInfo, IsAddressOfOperand,
1721                                       TemplateArgs);
1722 
1723   bool IvarLookupFollowUp = false;
1724   // Perform the required lookup.
1725   LookupResult R(*this, NameInfo,
1726                  (Id.getKind() == UnqualifiedId::IK_ImplicitSelfParam)
1727                   ? LookupObjCImplicitSelfParam : LookupOrdinaryName);
1728   if (TemplateArgs) {
1729     // Lookup the template name again to correctly establish the context in
1730     // which it was found. This is really unfortunate as we already did the
1731     // lookup to determine that it was a template name in the first place. If
1732     // this becomes a performance hit, we can work harder to preserve those
1733     // results until we get here but it's likely not worth it.
1734     bool MemberOfUnknownSpecialization;
1735     LookupTemplateName(R, S, SS, QualType(), /*EnteringContext=*/false,
1736                        MemberOfUnknownSpecialization);
1737 
1738     if (MemberOfUnknownSpecialization ||
1739         (R.getResultKind() == LookupResult::NotFoundInCurrentInstantiation))
1740       return ActOnDependentIdExpression(SS, NameInfo, IsAddressOfOperand,
1741                                         TemplateArgs);
1742   } else {
1743     IvarLookupFollowUp = (!SS.isSet() && II && getCurMethodDecl());
1744     LookupParsedName(R, S, &SS, !IvarLookupFollowUp);
1745 
1746     // If the result might be in a dependent base class, this is a dependent
1747     // id-expression.
1748     if (R.getResultKind() == LookupResult::NotFoundInCurrentInstantiation)
1749       return ActOnDependentIdExpression(SS, NameInfo, IsAddressOfOperand,
1750                                         TemplateArgs);
1751 
1752     // If this reference is in an Objective-C method, then we need to do
1753     // some special Objective-C lookup, too.
1754     if (IvarLookupFollowUp) {
1755       ExprResult E(LookupInObjCMethod(R, S, II, true));
1756       if (E.isInvalid())
1757         return ExprError();
1758 
1759       if (Expr *Ex = E.takeAs<Expr>())
1760         return Owned(Ex);
1761 
1762       // for further use, this must be set to false if in class method.
1763       IvarLookupFollowUp = getCurMethodDecl()->isInstanceMethod();
1764     }
1765   }
1766 
1767   if (R.isAmbiguous())
1768     return ExprError();
1769 
1770   // Determine whether this name might be a candidate for
1771   // argument-dependent lookup.
1772   bool ADL = UseArgumentDependentLookup(SS, R, HasTrailingLParen);
1773 
1774   if (R.empty() && !ADL) {
1775     // Otherwise, this could be an implicitly declared function reference (legal
1776     // in C90, extension in C99, forbidden in C++).
1777     if (HasTrailingLParen && II && !getLangOptions().CPlusPlus) {
1778       NamedDecl *D = ImplicitlyDefineFunction(NameLoc, *II, S);
1779       if (D) R.addDecl(D);
1780     }
1781 
1782     // If this name wasn't predeclared and if this is not a function
1783     // call, diagnose the problem.
1784     if (R.empty()) {
1785 
1786       // In Microsoft mode, if we are inside a template class member function
1787       // and we can't resolve an identifier then assume the identifier is type
1788       // dependent. The goal is to postpone name lookup to instantiation time
1789       // to be able to search into type dependent base classes.
1790       if (getLangOptions().MicrosoftMode && CurContext->isDependentContext() &&
1791           isa<CXXMethodDecl>(CurContext))
1792         return ActOnDependentIdExpression(SS, NameInfo, IsAddressOfOperand,
1793                                           TemplateArgs);
1794 
1795       if (DiagnoseEmptyLookup(S, SS, R, CTC_Unknown))
1796         return ExprError();
1797 
1798       assert(!R.empty() &&
1799              "DiagnoseEmptyLookup returned false but added no results");
1800 
1801       // If we found an Objective-C instance variable, let
1802       // LookupInObjCMethod build the appropriate expression to
1803       // reference the ivar.
1804       if (ObjCIvarDecl *Ivar = R.getAsSingle<ObjCIvarDecl>()) {
1805         R.clear();
1806         ExprResult E(LookupInObjCMethod(R, S, Ivar->getIdentifier()));
1807         // In a hopelessly buggy code, Objective-C instance variable
1808         // lookup fails and no expression will be built to reference it.
1809         if (!E.isInvalid() && !E.get())
1810           return ExprError();
1811         return move(E);
1812       }
1813     }
1814   }
1815 
1816   // This is guaranteed from this point on.
1817   assert(!R.empty() || ADL);
1818 
1819   // Check whether this might be a C++ implicit instance member access.
1820   // C++ [class.mfct.non-static]p3:
1821   //   When an id-expression that is not part of a class member access
1822   //   syntax and not used to form a pointer to member is used in the
1823   //   body of a non-static member function of class X, if name lookup
1824   //   resolves the name in the id-expression to a non-static non-type
1825   //   member of some class C, the id-expression is transformed into a
1826   //   class member access expression using (*this) as the
1827   //   postfix-expression to the left of the . operator.
1828   //
1829   // But we don't actually need to do this for '&' operands if R
1830   // resolved to a function or overloaded function set, because the
1831   // expression is ill-formed if it actually works out to be a
1832   // non-static member function:
1833   //
1834   // C++ [expr.ref]p4:
1835   //   Otherwise, if E1.E2 refers to a non-static member function. . .
1836   //   [t]he expression can be used only as the left-hand operand of a
1837   //   member function call.
1838   //
1839   // There are other safeguards against such uses, but it's important
1840   // to get this right here so that we don't end up making a
1841   // spuriously dependent expression if we're inside a dependent
1842   // instance method.
1843   if (!R.empty() && (*R.begin())->isCXXClassMember()) {
1844     bool MightBeImplicitMember;
1845     if (!IsAddressOfOperand)
1846       MightBeImplicitMember = true;
1847     else if (!SS.isEmpty())
1848       MightBeImplicitMember = false;
1849     else if (R.isOverloadedResult())
1850       MightBeImplicitMember = false;
1851     else if (R.isUnresolvableResult())
1852       MightBeImplicitMember = true;
1853     else
1854       MightBeImplicitMember = isa<FieldDecl>(R.getFoundDecl()) ||
1855                               isa<IndirectFieldDecl>(R.getFoundDecl());
1856 
1857     if (MightBeImplicitMember)
1858       return BuildPossibleImplicitMemberExpr(SS, R, TemplateArgs);
1859   }
1860 
1861   if (TemplateArgs)
1862     return BuildTemplateIdExpr(SS, R, ADL, *TemplateArgs);
1863 
1864   return BuildDeclarationNameExpr(SS, R, ADL);
1865 }
1866 
1867 /// BuildQualifiedDeclarationNameExpr - Build a C++ qualified
1868 /// declaration name, generally during template instantiation.
1869 /// There's a large number of things which don't need to be done along
1870 /// this path.
1871 ExprResult
1872 Sema::BuildQualifiedDeclarationNameExpr(CXXScopeSpec &SS,
1873                                         const DeclarationNameInfo &NameInfo) {
1874   DeclContext *DC;
1875   if (!(DC = computeDeclContext(SS, false)) || DC->isDependentContext())
1876     return BuildDependentDeclRefExpr(SS, NameInfo, 0);
1877 
1878   if (RequireCompleteDeclContext(SS, DC))
1879     return ExprError();
1880 
1881   LookupResult R(*this, NameInfo, LookupOrdinaryName);
1882   LookupQualifiedName(R, DC);
1883 
1884   if (R.isAmbiguous())
1885     return ExprError();
1886 
1887   if (R.empty()) {
1888     Diag(NameInfo.getLoc(), diag::err_no_member)
1889       << NameInfo.getName() << DC << SS.getRange();
1890     return ExprError();
1891   }
1892 
1893   return BuildDeclarationNameExpr(SS, R, /*ADL*/ false);
1894 }
1895 
1896 /// LookupInObjCMethod - The parser has read a name in, and Sema has
1897 /// detected that we're currently inside an ObjC method.  Perform some
1898 /// additional lookup.
1899 ///
1900 /// Ideally, most of this would be done by lookup, but there's
1901 /// actually quite a lot of extra work involved.
1902 ///
1903 /// Returns a null sentinel to indicate trivial success.
1904 ExprResult
1905 Sema::LookupInObjCMethod(LookupResult &Lookup, Scope *S,
1906                          IdentifierInfo *II, bool AllowBuiltinCreation) {
1907   SourceLocation Loc = Lookup.getNameLoc();
1908   ObjCMethodDecl *CurMethod = getCurMethodDecl();
1909 
1910   // There are two cases to handle here.  1) scoped lookup could have failed,
1911   // in which case we should look for an ivar.  2) scoped lookup could have
1912   // found a decl, but that decl is outside the current instance method (i.e.
1913   // a global variable).  In these two cases, we do a lookup for an ivar with
1914   // this name, if the lookup sucedes, we replace it our current decl.
1915 
1916   // If we're in a class method, we don't normally want to look for
1917   // ivars.  But if we don't find anything else, and there's an
1918   // ivar, that's an error.
1919   bool IsClassMethod = CurMethod->isClassMethod();
1920 
1921   bool LookForIvars;
1922   if (Lookup.empty())
1923     LookForIvars = true;
1924   else if (IsClassMethod)
1925     LookForIvars = false;
1926   else
1927     LookForIvars = (Lookup.isSingleResult() &&
1928                     Lookup.getFoundDecl()->isDefinedOutsideFunctionOrMethod());
1929   ObjCInterfaceDecl *IFace = 0;
1930   if (LookForIvars) {
1931     IFace = CurMethod->getClassInterface();
1932     ObjCInterfaceDecl *ClassDeclared;
1933     if (ObjCIvarDecl *IV = IFace->lookupInstanceVariable(II, ClassDeclared)) {
1934       // Diagnose using an ivar in a class method.
1935       if (IsClassMethod)
1936         return ExprError(Diag(Loc, diag::error_ivar_use_in_class_method)
1937                          << IV->getDeclName());
1938 
1939       // If we're referencing an invalid decl, just return this as a silent
1940       // error node.  The error diagnostic was already emitted on the decl.
1941       if (IV->isInvalidDecl())
1942         return ExprError();
1943 
1944       // Check if referencing a field with __attribute__((deprecated)).
1945       if (DiagnoseUseOfDecl(IV, Loc))
1946         return ExprError();
1947 
1948       // Diagnose the use of an ivar outside of the declaring class.
1949       if (IV->getAccessControl() == ObjCIvarDecl::Private &&
1950           ClassDeclared != IFace)
1951         Diag(Loc, diag::error_private_ivar_access) << IV->getDeclName();
1952 
1953       // FIXME: This should use a new expr for a direct reference, don't
1954       // turn this into Self->ivar, just return a BareIVarExpr or something.
1955       IdentifierInfo &II = Context.Idents.get("self");
1956       UnqualifiedId SelfName;
1957       SelfName.setIdentifier(&II, SourceLocation());
1958       SelfName.setKind(UnqualifiedId::IK_ImplicitSelfParam);
1959       CXXScopeSpec SelfScopeSpec;
1960       ExprResult SelfExpr = ActOnIdExpression(S, SelfScopeSpec,
1961                                               SelfName, false, false);
1962       if (SelfExpr.isInvalid())
1963         return ExprError();
1964 
1965       SelfExpr = DefaultLvalueConversion(SelfExpr.take());
1966       if (SelfExpr.isInvalid())
1967         return ExprError();
1968 
1969       MarkDeclarationReferenced(Loc, IV);
1970       return Owned(new (Context)
1971                    ObjCIvarRefExpr(IV, IV->getType(), Loc,
1972                                    SelfExpr.take(), true, true));
1973     }
1974   } else if (CurMethod->isInstanceMethod()) {
1975     // We should warn if a local variable hides an ivar.
1976     ObjCInterfaceDecl *IFace = CurMethod->getClassInterface();
1977     ObjCInterfaceDecl *ClassDeclared;
1978     if (ObjCIvarDecl *IV = IFace->lookupInstanceVariable(II, ClassDeclared)) {
1979       if (IV->getAccessControl() != ObjCIvarDecl::Private ||
1980           IFace == ClassDeclared)
1981         Diag(Loc, diag::warn_ivar_use_hidden) << IV->getDeclName();
1982     }
1983   }
1984 
1985   if (Lookup.empty() && II && AllowBuiltinCreation) {
1986     // FIXME. Consolidate this with similar code in LookupName.
1987     if (unsigned BuiltinID = II->getBuiltinID()) {
1988       if (!(getLangOptions().CPlusPlus &&
1989             Context.BuiltinInfo.isPredefinedLibFunction(BuiltinID))) {
1990         NamedDecl *D = LazilyCreateBuiltin((IdentifierInfo *)II, BuiltinID,
1991                                            S, Lookup.isForRedeclaration(),
1992                                            Lookup.getNameLoc());
1993         if (D) Lookup.addDecl(D);
1994       }
1995     }
1996   }
1997   // Sentinel value saying that we didn't do anything special.
1998   return Owned((Expr*) 0);
1999 }
2000 
2001 /// \brief Cast a base object to a member's actual type.
2002 ///
2003 /// Logically this happens in three phases:
2004 ///
2005 /// * First we cast from the base type to the naming class.
2006 ///   The naming class is the class into which we were looking
2007 ///   when we found the member;  it's the qualifier type if a
2008 ///   qualifier was provided, and otherwise it's the base type.
2009 ///
2010 /// * Next we cast from the naming class to the declaring class.
2011 ///   If the member we found was brought into a class's scope by
2012 ///   a using declaration, this is that class;  otherwise it's
2013 ///   the class declaring the member.
2014 ///
2015 /// * Finally we cast from the declaring class to the "true"
2016 ///   declaring class of the member.  This conversion does not
2017 ///   obey access control.
2018 ExprResult
2019 Sema::PerformObjectMemberConversion(Expr *From,
2020                                     NestedNameSpecifier *Qualifier,
2021                                     NamedDecl *FoundDecl,
2022                                     NamedDecl *Member) {
2023   CXXRecordDecl *RD = dyn_cast<CXXRecordDecl>(Member->getDeclContext());
2024   if (!RD)
2025     return Owned(From);
2026 
2027   QualType DestRecordType;
2028   QualType DestType;
2029   QualType FromRecordType;
2030   QualType FromType = From->getType();
2031   bool PointerConversions = false;
2032   if (isa<FieldDecl>(Member)) {
2033     DestRecordType = Context.getCanonicalType(Context.getTypeDeclType(RD));
2034 
2035     if (FromType->getAs<PointerType>()) {
2036       DestType = Context.getPointerType(DestRecordType);
2037       FromRecordType = FromType->getPointeeType();
2038       PointerConversions = true;
2039     } else {
2040       DestType = DestRecordType;
2041       FromRecordType = FromType;
2042     }
2043   } else if (CXXMethodDecl *Method = dyn_cast<CXXMethodDecl>(Member)) {
2044     if (Method->isStatic())
2045       return Owned(From);
2046 
2047     DestType = Method->getThisType(Context);
2048     DestRecordType = DestType->getPointeeType();
2049 
2050     if (FromType->getAs<PointerType>()) {
2051       FromRecordType = FromType->getPointeeType();
2052       PointerConversions = true;
2053     } else {
2054       FromRecordType = FromType;
2055       DestType = DestRecordType;
2056     }
2057   } else {
2058     // No conversion necessary.
2059     return Owned(From);
2060   }
2061 
2062   if (DestType->isDependentType() || FromType->isDependentType())
2063     return Owned(From);
2064 
2065   // If the unqualified types are the same, no conversion is necessary.
2066   if (Context.hasSameUnqualifiedType(FromRecordType, DestRecordType))
2067     return Owned(From);
2068 
2069   SourceRange FromRange = From->getSourceRange();
2070   SourceLocation FromLoc = FromRange.getBegin();
2071 
2072   ExprValueKind VK = From->getValueKind();
2073 
2074   // C++ [class.member.lookup]p8:
2075   //   [...] Ambiguities can often be resolved by qualifying a name with its
2076   //   class name.
2077   //
2078   // If the member was a qualified name and the qualified referred to a
2079   // specific base subobject type, we'll cast to that intermediate type
2080   // first and then to the object in which the member is declared. That allows
2081   // one to resolve ambiguities in, e.g., a diamond-shaped hierarchy such as:
2082   //
2083   //   class Base { public: int x; };
2084   //   class Derived1 : public Base { };
2085   //   class Derived2 : public Base { };
2086   //   class VeryDerived : public Derived1, public Derived2 { void f(); };
2087   //
2088   //   void VeryDerived::f() {
2089   //     x = 17; // error: ambiguous base subobjects
2090   //     Derived1::x = 17; // okay, pick the Base subobject of Derived1
2091   //   }
2092   if (Qualifier) {
2093     QualType QType = QualType(Qualifier->getAsType(), 0);
2094     assert(!QType.isNull() && "lookup done with dependent qualifier?");
2095     assert(QType->isRecordType() && "lookup done with non-record type");
2096 
2097     QualType QRecordType = QualType(QType->getAs<RecordType>(), 0);
2098 
2099     // In C++98, the qualifier type doesn't actually have to be a base
2100     // type of the object type, in which case we just ignore it.
2101     // Otherwise build the appropriate casts.
2102     if (IsDerivedFrom(FromRecordType, QRecordType)) {
2103       CXXCastPath BasePath;
2104       if (CheckDerivedToBaseConversion(FromRecordType, QRecordType,
2105                                        FromLoc, FromRange, &BasePath))
2106         return ExprError();
2107 
2108       if (PointerConversions)
2109         QType = Context.getPointerType(QType);
2110       From = ImpCastExprToType(From, QType, CK_UncheckedDerivedToBase,
2111                                VK, &BasePath).take();
2112 
2113       FromType = QType;
2114       FromRecordType = QRecordType;
2115 
2116       // If the qualifier type was the same as the destination type,
2117       // we're done.
2118       if (Context.hasSameUnqualifiedType(FromRecordType, DestRecordType))
2119         return Owned(From);
2120     }
2121   }
2122 
2123   bool IgnoreAccess = false;
2124 
2125   // If we actually found the member through a using declaration, cast
2126   // down to the using declaration's type.
2127   //
2128   // Pointer equality is fine here because only one declaration of a
2129   // class ever has member declarations.
2130   if (FoundDecl->getDeclContext() != Member->getDeclContext()) {
2131     assert(isa<UsingShadowDecl>(FoundDecl));
2132     QualType URecordType = Context.getTypeDeclType(
2133                            cast<CXXRecordDecl>(FoundDecl->getDeclContext()));
2134 
2135     // We only need to do this if the naming-class to declaring-class
2136     // conversion is non-trivial.
2137     if (!Context.hasSameUnqualifiedType(FromRecordType, URecordType)) {
2138       assert(IsDerivedFrom(FromRecordType, URecordType));
2139       CXXCastPath BasePath;
2140       if (CheckDerivedToBaseConversion(FromRecordType, URecordType,
2141                                        FromLoc, FromRange, &BasePath))
2142         return ExprError();
2143 
2144       QualType UType = URecordType;
2145       if (PointerConversions)
2146         UType = Context.getPointerType(UType);
2147       From = ImpCastExprToType(From, UType, CK_UncheckedDerivedToBase,
2148                                VK, &BasePath).take();
2149       FromType = UType;
2150       FromRecordType = URecordType;
2151     }
2152 
2153     // We don't do access control for the conversion from the
2154     // declaring class to the true declaring class.
2155     IgnoreAccess = true;
2156   }
2157 
2158   CXXCastPath BasePath;
2159   if (CheckDerivedToBaseConversion(FromRecordType, DestRecordType,
2160                                    FromLoc, FromRange, &BasePath,
2161                                    IgnoreAccess))
2162     return ExprError();
2163 
2164   return ImpCastExprToType(From, DestType, CK_UncheckedDerivedToBase,
2165                            VK, &BasePath);
2166 }
2167 
2168 bool Sema::UseArgumentDependentLookup(const CXXScopeSpec &SS,
2169                                       const LookupResult &R,
2170                                       bool HasTrailingLParen) {
2171   // Only when used directly as the postfix-expression of a call.
2172   if (!HasTrailingLParen)
2173     return false;
2174 
2175   // Never if a scope specifier was provided.
2176   if (SS.isSet())
2177     return false;
2178 
2179   // Only in C++ or ObjC++.
2180   if (!getLangOptions().CPlusPlus)
2181     return false;
2182 
2183   // Turn off ADL when we find certain kinds of declarations during
2184   // normal lookup:
2185   for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I) {
2186     NamedDecl *D = *I;
2187 
2188     // C++0x [basic.lookup.argdep]p3:
2189     //     -- a declaration of a class member
2190     // Since using decls preserve this property, we check this on the
2191     // original decl.
2192     if (D->isCXXClassMember())
2193       return false;
2194 
2195     // C++0x [basic.lookup.argdep]p3:
2196     //     -- a block-scope function declaration that is not a
2197     //        using-declaration
2198     // NOTE: we also trigger this for function templates (in fact, we
2199     // don't check the decl type at all, since all other decl types
2200     // turn off ADL anyway).
2201     if (isa<UsingShadowDecl>(D))
2202       D = cast<UsingShadowDecl>(D)->getTargetDecl();
2203     else if (D->getDeclContext()->isFunctionOrMethod())
2204       return false;
2205 
2206     // C++0x [basic.lookup.argdep]p3:
2207     //     -- a declaration that is neither a function or a function
2208     //        template
2209     // And also for builtin functions.
2210     if (isa<FunctionDecl>(D)) {
2211       FunctionDecl *FDecl = cast<FunctionDecl>(D);
2212 
2213       // But also builtin functions.
2214       if (FDecl->getBuiltinID() && FDecl->isImplicit())
2215         return false;
2216     } else if (!isa<FunctionTemplateDecl>(D))
2217       return false;
2218   }
2219 
2220   return true;
2221 }
2222 
2223 
2224 /// Diagnoses obvious problems with the use of the given declaration
2225 /// as an expression.  This is only actually called for lookups that
2226 /// were not overloaded, and it doesn't promise that the declaration
2227 /// will in fact be used.
2228 static bool CheckDeclInExpr(Sema &S, SourceLocation Loc, NamedDecl *D) {
2229   if (isa<TypedefNameDecl>(D)) {
2230     S.Diag(Loc, diag::err_unexpected_typedef) << D->getDeclName();
2231     return true;
2232   }
2233 
2234   if (isa<ObjCInterfaceDecl>(D)) {
2235     S.Diag(Loc, diag::err_unexpected_interface) << D->getDeclName();
2236     return true;
2237   }
2238 
2239   if (isa<NamespaceDecl>(D)) {
2240     S.Diag(Loc, diag::err_unexpected_namespace) << D->getDeclName();
2241     return true;
2242   }
2243 
2244   return false;
2245 }
2246 
2247 ExprResult
2248 Sema::BuildDeclarationNameExpr(const CXXScopeSpec &SS,
2249                                LookupResult &R,
2250                                bool NeedsADL) {
2251   // If this is a single, fully-resolved result and we don't need ADL,
2252   // just build an ordinary singleton decl ref.
2253   if (!NeedsADL && R.isSingleResult() && !R.getAsSingle<FunctionTemplateDecl>())
2254     return BuildDeclarationNameExpr(SS, R.getLookupNameInfo(),
2255                                     R.getFoundDecl());
2256 
2257   // We only need to check the declaration if there's exactly one
2258   // result, because in the overloaded case the results can only be
2259   // functions and function templates.
2260   if (R.isSingleResult() &&
2261       CheckDeclInExpr(*this, R.getNameLoc(), R.getFoundDecl()))
2262     return ExprError();
2263 
2264   // Otherwise, just build an unresolved lookup expression.  Suppress
2265   // any lookup-related diagnostics; we'll hash these out later, when
2266   // we've picked a target.
2267   R.suppressDiagnostics();
2268 
2269   UnresolvedLookupExpr *ULE
2270     = UnresolvedLookupExpr::Create(Context, R.getNamingClass(),
2271                                    SS.getWithLocInContext(Context),
2272                                    R.getLookupNameInfo(),
2273                                    NeedsADL, R.isOverloadedResult(),
2274                                    R.begin(), R.end());
2275 
2276   return Owned(ULE);
2277 }
2278 
2279 /// \brief Complete semantic analysis for a reference to the given declaration.
2280 ExprResult
2281 Sema::BuildDeclarationNameExpr(const CXXScopeSpec &SS,
2282                                const DeclarationNameInfo &NameInfo,
2283                                NamedDecl *D) {
2284   assert(D && "Cannot refer to a NULL declaration");
2285   assert(!isa<FunctionTemplateDecl>(D) &&
2286          "Cannot refer unambiguously to a function template");
2287 
2288   SourceLocation Loc = NameInfo.getLoc();
2289   if (CheckDeclInExpr(*this, Loc, D))
2290     return ExprError();
2291 
2292   if (TemplateDecl *Template = dyn_cast<TemplateDecl>(D)) {
2293     // Specifically diagnose references to class templates that are missing
2294     // a template argument list.
2295     Diag(Loc, diag::err_template_decl_ref)
2296       << Template << SS.getRange();
2297     Diag(Template->getLocation(), diag::note_template_decl_here);
2298     return ExprError();
2299   }
2300 
2301   // Make sure that we're referring to a value.
2302   ValueDecl *VD = dyn_cast<ValueDecl>(D);
2303   if (!VD) {
2304     Diag(Loc, diag::err_ref_non_value)
2305       << D << SS.getRange();
2306     Diag(D->getLocation(), diag::note_declared_at);
2307     return ExprError();
2308   }
2309 
2310   // Check whether this declaration can be used. Note that we suppress
2311   // this check when we're going to perform argument-dependent lookup
2312   // on this function name, because this might not be the function
2313   // that overload resolution actually selects.
2314   if (DiagnoseUseOfDecl(VD, Loc))
2315     return ExprError();
2316 
2317   // Only create DeclRefExpr's for valid Decl's.
2318   if (VD->isInvalidDecl())
2319     return ExprError();
2320 
2321   // Handle members of anonymous structs and unions.  If we got here,
2322   // and the reference is to a class member indirect field, then this
2323   // must be the subject of a pointer-to-member expression.
2324   if (IndirectFieldDecl *indirectField = dyn_cast<IndirectFieldDecl>(VD))
2325     if (!indirectField->isCXXClassMember())
2326       return BuildAnonymousStructUnionMemberReference(SS, NameInfo.getLoc(),
2327                                                       indirectField);
2328 
2329   // If the identifier reference is inside a block, and it refers to a value
2330   // that is outside the block, create a BlockDeclRefExpr instead of a
2331   // DeclRefExpr.  This ensures the value is treated as a copy-in snapshot when
2332   // the block is formed.
2333   //
2334   // We do not do this for things like enum constants, global variables, etc,
2335   // as they do not get snapshotted.
2336   //
2337   switch (shouldCaptureValueReference(*this, NameInfo.getLoc(), VD)) {
2338   case CR_Error:
2339     return ExprError();
2340 
2341   case CR_Capture:
2342     assert(!SS.isSet() && "referenced local variable with scope specifier?");
2343     return BuildBlockDeclRefExpr(*this, VD, NameInfo, /*byref*/ false);
2344 
2345   case CR_CaptureByRef:
2346     assert(!SS.isSet() && "referenced local variable with scope specifier?");
2347     return BuildBlockDeclRefExpr(*this, VD, NameInfo, /*byref*/ true);
2348 
2349   case CR_NoCapture: {
2350     // If this reference is not in a block or if the referenced
2351     // variable is within the block, create a normal DeclRefExpr.
2352 
2353     QualType type = VD->getType();
2354     ExprValueKind valueKind = VK_RValue;
2355 
2356     switch (D->getKind()) {
2357     // Ignore all the non-ValueDecl kinds.
2358 #define ABSTRACT_DECL(kind)
2359 #define VALUE(type, base)
2360 #define DECL(type, base) \
2361     case Decl::type:
2362 #include "clang/AST/DeclNodes.inc"
2363       llvm_unreachable("invalid value decl kind");
2364       return ExprError();
2365 
2366     // These shouldn't make it here.
2367     case Decl::ObjCAtDefsField:
2368     case Decl::ObjCIvar:
2369       llvm_unreachable("forming non-member reference to ivar?");
2370       return ExprError();
2371 
2372     // Enum constants are always r-values and never references.
2373     // Unresolved using declarations are dependent.
2374     case Decl::EnumConstant:
2375     case Decl::UnresolvedUsingValue:
2376       valueKind = VK_RValue;
2377       break;
2378 
2379     // Fields and indirect fields that got here must be for
2380     // pointer-to-member expressions; we just call them l-values for
2381     // internal consistency, because this subexpression doesn't really
2382     // exist in the high-level semantics.
2383     case Decl::Field:
2384     case Decl::IndirectField:
2385       assert(getLangOptions().CPlusPlus &&
2386              "building reference to field in C?");
2387 
2388       // These can't have reference type in well-formed programs, but
2389       // for internal consistency we do this anyway.
2390       type = type.getNonReferenceType();
2391       valueKind = VK_LValue;
2392       break;
2393 
2394     // Non-type template parameters are either l-values or r-values
2395     // depending on the type.
2396     case Decl::NonTypeTemplateParm: {
2397       if (const ReferenceType *reftype = type->getAs<ReferenceType>()) {
2398         type = reftype->getPointeeType();
2399         valueKind = VK_LValue; // even if the parameter is an r-value reference
2400         break;
2401       }
2402 
2403       // For non-references, we need to strip qualifiers just in case
2404       // the template parameter was declared as 'const int' or whatever.
2405       valueKind = VK_RValue;
2406       type = type.getUnqualifiedType();
2407       break;
2408     }
2409 
2410     case Decl::Var:
2411       // In C, "extern void blah;" is valid and is an r-value.
2412       if (!getLangOptions().CPlusPlus &&
2413           !type.hasQualifiers() &&
2414           type->isVoidType()) {
2415         valueKind = VK_RValue;
2416         break;
2417       }
2418       // fallthrough
2419 
2420     case Decl::ImplicitParam:
2421     case Decl::ParmVar:
2422       // These are always l-values.
2423       valueKind = VK_LValue;
2424       type = type.getNonReferenceType();
2425       break;
2426 
2427     case Decl::Function: {
2428       const FunctionType *fty = type->castAs<FunctionType>();
2429 
2430       // If we're referring to a function with an __unknown_anytype
2431       // result type, make the entire expression __unknown_anytype.
2432       if (fty->getResultType() == Context.UnknownAnyTy) {
2433         type = Context.UnknownAnyTy;
2434         valueKind = VK_RValue;
2435         break;
2436       }
2437 
2438       // Functions are l-values in C++.
2439       if (getLangOptions().CPlusPlus) {
2440         valueKind = VK_LValue;
2441         break;
2442       }
2443 
2444       // C99 DR 316 says that, if a function type comes from a
2445       // function definition (without a prototype), that type is only
2446       // used for checking compatibility. Therefore, when referencing
2447       // the function, we pretend that we don't have the full function
2448       // type.
2449       if (!cast<FunctionDecl>(VD)->hasPrototype() &&
2450           isa<FunctionProtoType>(fty))
2451         type = Context.getFunctionNoProtoType(fty->getResultType(),
2452                                               fty->getExtInfo());
2453 
2454       // Functions are r-values in C.
2455       valueKind = VK_RValue;
2456       break;
2457     }
2458 
2459     case Decl::CXXMethod:
2460       // If we're referring to a method with an __unknown_anytype
2461       // result type, make the entire expression __unknown_anytype.
2462       // This should only be possible with a type written directly.
2463       if (const FunctionProtoType *proto
2464             = dyn_cast<FunctionProtoType>(VD->getType()))
2465         if (proto->getResultType() == Context.UnknownAnyTy) {
2466           type = Context.UnknownAnyTy;
2467           valueKind = VK_RValue;
2468           break;
2469         }
2470 
2471       // C++ methods are l-values if static, r-values if non-static.
2472       if (cast<CXXMethodDecl>(VD)->isStatic()) {
2473         valueKind = VK_LValue;
2474         break;
2475       }
2476       // fallthrough
2477 
2478     case Decl::CXXConversion:
2479     case Decl::CXXDestructor:
2480     case Decl::CXXConstructor:
2481       valueKind = VK_RValue;
2482       break;
2483     }
2484 
2485     return BuildDeclRefExpr(VD, type, valueKind, NameInfo, &SS);
2486   }
2487 
2488   }
2489 
2490   llvm_unreachable("unknown capture result");
2491   return ExprError();
2492 }
2493 
2494 ExprResult Sema::ActOnPredefinedExpr(SourceLocation Loc, tok::TokenKind Kind) {
2495   PredefinedExpr::IdentType IT;
2496 
2497   switch (Kind) {
2498   default: llvm_unreachable("Unknown simple primary expr!");
2499   case tok::kw___func__: IT = PredefinedExpr::Func; break; // [C99 6.4.2.2]
2500   case tok::kw___FUNCTION__: IT = PredefinedExpr::Function; break;
2501   case tok::kw___PRETTY_FUNCTION__: IT = PredefinedExpr::PrettyFunction; break;
2502   }
2503 
2504   // Pre-defined identifiers are of type char[x], where x is the length of the
2505   // string.
2506 
2507   Decl *currentDecl = getCurFunctionOrMethodDecl();
2508   if (!currentDecl && getCurBlock())
2509     currentDecl = getCurBlock()->TheDecl;
2510   if (!currentDecl) {
2511     Diag(Loc, diag::ext_predef_outside_function);
2512     currentDecl = Context.getTranslationUnitDecl();
2513   }
2514 
2515   QualType ResTy;
2516   if (cast<DeclContext>(currentDecl)->isDependentContext()) {
2517     ResTy = Context.DependentTy;
2518   } else {
2519     unsigned Length = PredefinedExpr::ComputeName(IT, currentDecl).length();
2520 
2521     llvm::APInt LengthI(32, Length + 1);
2522     ResTy = Context.CharTy.withConst();
2523     ResTy = Context.getConstantArrayType(ResTy, LengthI, ArrayType::Normal, 0);
2524   }
2525   return Owned(new (Context) PredefinedExpr(Loc, ResTy, IT));
2526 }
2527 
2528 ExprResult Sema::ActOnCharacterConstant(const Token &Tok) {
2529   llvm::SmallString<16> CharBuffer;
2530   bool Invalid = false;
2531   StringRef ThisTok = PP.getSpelling(Tok, CharBuffer, &Invalid);
2532   if (Invalid)
2533     return ExprError();
2534 
2535   CharLiteralParser Literal(ThisTok.begin(), ThisTok.end(), Tok.getLocation(),
2536                             PP, Tok.getKind());
2537   if (Literal.hadError())
2538     return ExprError();
2539 
2540   QualType Ty;
2541   if (!getLangOptions().CPlusPlus)
2542     Ty = Context.IntTy;   // 'x' and L'x' -> int in C.
2543   else if (Literal.isWide())
2544     Ty = Context.WCharTy; // L'x' -> wchar_t in C++.
2545   else if (Literal.isUTF16())
2546     Ty = Context.Char16Ty; // u'x' -> char16_t in C++0x.
2547   else if (Literal.isUTF32())
2548     Ty = Context.Char32Ty; // U'x' -> char32_t in C++0x.
2549   else if (Literal.isMultiChar())
2550     Ty = Context.IntTy;   // 'wxyz' -> int in C++.
2551   else
2552     Ty = Context.CharTy;  // 'x' -> char in C++
2553 
2554   CharacterLiteral::CharacterKind Kind = CharacterLiteral::Ascii;
2555   if (Literal.isWide())
2556     Kind = CharacterLiteral::Wide;
2557   else if (Literal.isUTF16())
2558     Kind = CharacterLiteral::UTF16;
2559   else if (Literal.isUTF32())
2560     Kind = CharacterLiteral::UTF32;
2561 
2562   return Owned(new (Context) CharacterLiteral(Literal.getValue(), Kind, Ty,
2563                                               Tok.getLocation()));
2564 }
2565 
2566 ExprResult Sema::ActOnNumericConstant(const Token &Tok) {
2567   // Fast path for a single digit (which is quite common).  A single digit
2568   // cannot have a trigraph, escaped newline, radix prefix, or type suffix.
2569   if (Tok.getLength() == 1) {
2570     const char Val = PP.getSpellingOfSingleCharacterNumericConstant(Tok);
2571     unsigned IntSize = Context.getTargetInfo().getIntWidth();
2572     return Owned(IntegerLiteral::Create(Context, llvm::APInt(IntSize, Val-'0'),
2573                     Context.IntTy, Tok.getLocation()));
2574   }
2575 
2576   llvm::SmallString<512> IntegerBuffer;
2577   // Add padding so that NumericLiteralParser can overread by one character.
2578   IntegerBuffer.resize(Tok.getLength()+1);
2579   const char *ThisTokBegin = &IntegerBuffer[0];
2580 
2581   // Get the spelling of the token, which eliminates trigraphs, etc.
2582   bool Invalid = false;
2583   unsigned ActualLength = PP.getSpelling(Tok, ThisTokBegin, &Invalid);
2584   if (Invalid)
2585     return ExprError();
2586 
2587   NumericLiteralParser Literal(ThisTokBegin, ThisTokBegin+ActualLength,
2588                                Tok.getLocation(), PP);
2589   if (Literal.hadError)
2590     return ExprError();
2591 
2592   Expr *Res;
2593 
2594   if (Literal.isFloatingLiteral()) {
2595     QualType Ty;
2596     if (Literal.isFloat)
2597       Ty = Context.FloatTy;
2598     else if (!Literal.isLong)
2599       Ty = Context.DoubleTy;
2600     else
2601       Ty = Context.LongDoubleTy;
2602 
2603     const llvm::fltSemantics &Format = Context.getFloatTypeSemantics(Ty);
2604 
2605     using llvm::APFloat;
2606     APFloat Val(Format);
2607 
2608     APFloat::opStatus result = Literal.GetFloatValue(Val);
2609 
2610     // Overflow is always an error, but underflow is only an error if
2611     // we underflowed to zero (APFloat reports denormals as underflow).
2612     if ((result & APFloat::opOverflow) ||
2613         ((result & APFloat::opUnderflow) && Val.isZero())) {
2614       unsigned diagnostic;
2615       llvm::SmallString<20> buffer;
2616       if (result & APFloat::opOverflow) {
2617         diagnostic = diag::warn_float_overflow;
2618         APFloat::getLargest(Format).toString(buffer);
2619       } else {
2620         diagnostic = diag::warn_float_underflow;
2621         APFloat::getSmallest(Format).toString(buffer);
2622       }
2623 
2624       Diag(Tok.getLocation(), diagnostic)
2625         << Ty
2626         << StringRef(buffer.data(), buffer.size());
2627     }
2628 
2629     bool isExact = (result == APFloat::opOK);
2630     Res = FloatingLiteral::Create(Context, Val, isExact, Ty, Tok.getLocation());
2631 
2632     if (Ty == Context.DoubleTy) {
2633       if (getLangOptions().SinglePrecisionConstants) {
2634         Res = ImpCastExprToType(Res, Context.FloatTy, CK_FloatingCast).take();
2635       } else if (getLangOptions().OpenCL && !getOpenCLOptions().cl_khr_fp64) {
2636         Diag(Tok.getLocation(), diag::warn_double_const_requires_fp64);
2637         Res = ImpCastExprToType(Res, Context.FloatTy, CK_FloatingCast).take();
2638       }
2639     }
2640   } else if (!Literal.isIntegerLiteral()) {
2641     return ExprError();
2642   } else {
2643     QualType Ty;
2644 
2645     // long long is a C99 feature.
2646     if (!getLangOptions().C99 && !getLangOptions().CPlusPlus0x &&
2647         Literal.isLongLong)
2648       Diag(Tok.getLocation(), diag::ext_longlong);
2649 
2650     // Get the value in the widest-possible width.
2651     llvm::APInt ResultVal(Context.getTargetInfo().getIntMaxTWidth(), 0);
2652 
2653     if (Literal.GetIntegerValue(ResultVal)) {
2654       // If this value didn't fit into uintmax_t, warn and force to ull.
2655       Diag(Tok.getLocation(), diag::warn_integer_too_large);
2656       Ty = Context.UnsignedLongLongTy;
2657       assert(Context.getTypeSize(Ty) == ResultVal.getBitWidth() &&
2658              "long long is not intmax_t?");
2659     } else {
2660       // If this value fits into a ULL, try to figure out what else it fits into
2661       // according to the rules of C99 6.4.4.1p5.
2662 
2663       // Octal, Hexadecimal, and integers with a U suffix are allowed to
2664       // be an unsigned int.
2665       bool AllowUnsigned = Literal.isUnsigned || Literal.getRadix() != 10;
2666 
2667       // Check from smallest to largest, picking the smallest type we can.
2668       unsigned Width = 0;
2669       if (!Literal.isLong && !Literal.isLongLong) {
2670         // Are int/unsigned possibilities?
2671         unsigned IntSize = Context.getTargetInfo().getIntWidth();
2672 
2673         // Does it fit in a unsigned int?
2674         if (ResultVal.isIntN(IntSize)) {
2675           // Does it fit in a signed int?
2676           if (!Literal.isUnsigned && ResultVal[IntSize-1] == 0)
2677             Ty = Context.IntTy;
2678           else if (AllowUnsigned)
2679             Ty = Context.UnsignedIntTy;
2680           Width = IntSize;
2681         }
2682       }
2683 
2684       // Are long/unsigned long possibilities?
2685       if (Ty.isNull() && !Literal.isLongLong) {
2686         unsigned LongSize = Context.getTargetInfo().getLongWidth();
2687 
2688         // Does it fit in a unsigned long?
2689         if (ResultVal.isIntN(LongSize)) {
2690           // Does it fit in a signed long?
2691           if (!Literal.isUnsigned && ResultVal[LongSize-1] == 0)
2692             Ty = Context.LongTy;
2693           else if (AllowUnsigned)
2694             Ty = Context.UnsignedLongTy;
2695           Width = LongSize;
2696         }
2697       }
2698 
2699       // Finally, check long long if needed.
2700       if (Ty.isNull()) {
2701         unsigned LongLongSize = Context.getTargetInfo().getLongLongWidth();
2702 
2703         // Does it fit in a unsigned long long?
2704         if (ResultVal.isIntN(LongLongSize)) {
2705           // Does it fit in a signed long long?
2706           // To be compatible with MSVC, hex integer literals ending with the
2707           // LL or i64 suffix are always signed in Microsoft mode.
2708           if (!Literal.isUnsigned && (ResultVal[LongLongSize-1] == 0 ||
2709               (getLangOptions().MicrosoftExt && Literal.isLongLong)))
2710             Ty = Context.LongLongTy;
2711           else if (AllowUnsigned)
2712             Ty = Context.UnsignedLongLongTy;
2713           Width = LongLongSize;
2714         }
2715       }
2716 
2717       // If we still couldn't decide a type, we probably have something that
2718       // does not fit in a signed long long, but has no U suffix.
2719       if (Ty.isNull()) {
2720         Diag(Tok.getLocation(), diag::warn_integer_too_large_for_signed);
2721         Ty = Context.UnsignedLongLongTy;
2722         Width = Context.getTargetInfo().getLongLongWidth();
2723       }
2724 
2725       if (ResultVal.getBitWidth() != Width)
2726         ResultVal = ResultVal.trunc(Width);
2727     }
2728     Res = IntegerLiteral::Create(Context, ResultVal, Ty, Tok.getLocation());
2729   }
2730 
2731   // If this is an imaginary literal, create the ImaginaryLiteral wrapper.
2732   if (Literal.isImaginary)
2733     Res = new (Context) ImaginaryLiteral(Res,
2734                                         Context.getComplexType(Res->getType()));
2735 
2736   return Owned(Res);
2737 }
2738 
2739 ExprResult Sema::ActOnParenExpr(SourceLocation L, SourceLocation R, Expr *E) {
2740   assert((E != 0) && "ActOnParenExpr() missing expr");
2741   return Owned(new (Context) ParenExpr(L, R, E));
2742 }
2743 
2744 static bool CheckVecStepTraitOperandType(Sema &S, QualType T,
2745                                          SourceLocation Loc,
2746                                          SourceRange ArgRange) {
2747   // [OpenCL 1.1 6.11.12] "The vec_step built-in function takes a built-in
2748   // scalar or vector data type argument..."
2749   // Every built-in scalar type (OpenCL 1.1 6.1.1) is either an arithmetic
2750   // type (C99 6.2.5p18) or void.
2751   if (!(T->isArithmeticType() || T->isVoidType() || T->isVectorType())) {
2752     S.Diag(Loc, diag::err_vecstep_non_scalar_vector_type)
2753       << T << ArgRange;
2754     return true;
2755   }
2756 
2757   assert((T->isVoidType() || !T->isIncompleteType()) &&
2758          "Scalar types should always be complete");
2759   return false;
2760 }
2761 
2762 static bool CheckExtensionTraitOperandType(Sema &S, QualType T,
2763                                            SourceLocation Loc,
2764                                            SourceRange ArgRange,
2765                                            UnaryExprOrTypeTrait TraitKind) {
2766   // C99 6.5.3.4p1:
2767   if (T->isFunctionType()) {
2768     // alignof(function) is allowed as an extension.
2769     if (TraitKind == UETT_SizeOf)
2770       S.Diag(Loc, diag::ext_sizeof_function_type) << ArgRange;
2771     return false;
2772   }
2773 
2774   // Allow sizeof(void)/alignof(void) as an extension.
2775   if (T->isVoidType()) {
2776     S.Diag(Loc, diag::ext_sizeof_void_type) << TraitKind << ArgRange;
2777     return false;
2778   }
2779 
2780   return true;
2781 }
2782 
2783 static bool CheckObjCTraitOperandConstraints(Sema &S, QualType T,
2784                                              SourceLocation Loc,
2785                                              SourceRange ArgRange,
2786                                              UnaryExprOrTypeTrait TraitKind) {
2787   // Reject sizeof(interface) and sizeof(interface<proto>) in 64-bit mode.
2788   if (S.LangOpts.ObjCNonFragileABI && T->isObjCObjectType()) {
2789     S.Diag(Loc, diag::err_sizeof_nonfragile_interface)
2790       << T << (TraitKind == UETT_SizeOf)
2791       << ArgRange;
2792     return true;
2793   }
2794 
2795   return false;
2796 }
2797 
2798 /// \brief Check the constrains on expression operands to unary type expression
2799 /// and type traits.
2800 ///
2801 /// Completes any types necessary and validates the constraints on the operand
2802 /// expression. The logic mostly mirrors the type-based overload, but may modify
2803 /// the expression as it completes the type for that expression through template
2804 /// instantiation, etc.
2805 bool Sema::CheckUnaryExprOrTypeTraitOperand(Expr *E,
2806                                             UnaryExprOrTypeTrait ExprKind) {
2807   QualType ExprTy = E->getType();
2808 
2809   // C++ [expr.sizeof]p2: "When applied to a reference or a reference type,
2810   //   the result is the size of the referenced type."
2811   // C++ [expr.alignof]p3: "When alignof is applied to a reference type, the
2812   //   result shall be the alignment of the referenced type."
2813   if (const ReferenceType *Ref = ExprTy->getAs<ReferenceType>())
2814     ExprTy = Ref->getPointeeType();
2815 
2816   if (ExprKind == UETT_VecStep)
2817     return CheckVecStepTraitOperandType(*this, ExprTy, E->getExprLoc(),
2818                                         E->getSourceRange());
2819 
2820   // Whitelist some types as extensions
2821   if (!CheckExtensionTraitOperandType(*this, ExprTy, E->getExprLoc(),
2822                                       E->getSourceRange(), ExprKind))
2823     return false;
2824 
2825   if (RequireCompleteExprType(E,
2826                               PDiag(diag::err_sizeof_alignof_incomplete_type)
2827                               << ExprKind << E->getSourceRange(),
2828                               std::make_pair(SourceLocation(), PDiag(0))))
2829     return true;
2830 
2831   // Completeing the expression's type may have changed it.
2832   ExprTy = E->getType();
2833   if (const ReferenceType *Ref = ExprTy->getAs<ReferenceType>())
2834     ExprTy = Ref->getPointeeType();
2835 
2836   if (CheckObjCTraitOperandConstraints(*this, ExprTy, E->getExprLoc(),
2837                                        E->getSourceRange(), ExprKind))
2838     return true;
2839 
2840   if (ExprKind == UETT_SizeOf) {
2841     if (DeclRefExpr *DeclRef = dyn_cast<DeclRefExpr>(E->IgnoreParens())) {
2842       if (ParmVarDecl *PVD = dyn_cast<ParmVarDecl>(DeclRef->getFoundDecl())) {
2843         QualType OType = PVD->getOriginalType();
2844         QualType Type = PVD->getType();
2845         if (Type->isPointerType() && OType->isArrayType()) {
2846           Diag(E->getExprLoc(), diag::warn_sizeof_array_param)
2847             << Type << OType;
2848           Diag(PVD->getLocation(), diag::note_declared_at);
2849         }
2850       }
2851     }
2852   }
2853 
2854   return false;
2855 }
2856 
2857 /// \brief Check the constraints on operands to unary expression and type
2858 /// traits.
2859 ///
2860 /// This will complete any types necessary, and validate the various constraints
2861 /// on those operands.
2862 ///
2863 /// The UsualUnaryConversions() function is *not* called by this routine.
2864 /// C99 6.3.2.1p[2-4] all state:
2865 ///   Except when it is the operand of the sizeof operator ...
2866 ///
2867 /// C++ [expr.sizeof]p4
2868 ///   The lvalue-to-rvalue, array-to-pointer, and function-to-pointer
2869 ///   standard conversions are not applied to the operand of sizeof.
2870 ///
2871 /// This policy is followed for all of the unary trait expressions.
2872 bool Sema::CheckUnaryExprOrTypeTraitOperand(QualType ExprType,
2873                                             SourceLocation OpLoc,
2874                                             SourceRange ExprRange,
2875                                             UnaryExprOrTypeTrait ExprKind) {
2876   if (ExprType->isDependentType())
2877     return false;
2878 
2879   // C++ [expr.sizeof]p2: "When applied to a reference or a reference type,
2880   //   the result is the size of the referenced type."
2881   // C++ [expr.alignof]p3: "When alignof is applied to a reference type, the
2882   //   result shall be the alignment of the referenced type."
2883   if (const ReferenceType *Ref = ExprType->getAs<ReferenceType>())
2884     ExprType = Ref->getPointeeType();
2885 
2886   if (ExprKind == UETT_VecStep)
2887     return CheckVecStepTraitOperandType(*this, ExprType, OpLoc, ExprRange);
2888 
2889   // Whitelist some types as extensions
2890   if (!CheckExtensionTraitOperandType(*this, ExprType, OpLoc, ExprRange,
2891                                       ExprKind))
2892     return false;
2893 
2894   if (RequireCompleteType(OpLoc, ExprType,
2895                           PDiag(diag::err_sizeof_alignof_incomplete_type)
2896                           << ExprKind << ExprRange))
2897     return true;
2898 
2899   if (CheckObjCTraitOperandConstraints(*this, ExprType, OpLoc, ExprRange,
2900                                        ExprKind))
2901     return true;
2902 
2903   return false;
2904 }
2905 
2906 static bool CheckAlignOfExpr(Sema &S, Expr *E) {
2907   E = E->IgnoreParens();
2908 
2909   // alignof decl is always ok.
2910   if (isa<DeclRefExpr>(E))
2911     return false;
2912 
2913   // Cannot know anything else if the expression is dependent.
2914   if (E->isTypeDependent())
2915     return false;
2916 
2917   if (E->getBitField()) {
2918     S.Diag(E->getExprLoc(), diag::err_sizeof_alignof_bitfield)
2919        << 1 << E->getSourceRange();
2920     return true;
2921   }
2922 
2923   // Alignment of a field access is always okay, so long as it isn't a
2924   // bit-field.
2925   if (MemberExpr *ME = dyn_cast<MemberExpr>(E))
2926     if (isa<FieldDecl>(ME->getMemberDecl()))
2927       return false;
2928 
2929   return S.CheckUnaryExprOrTypeTraitOperand(E, UETT_AlignOf);
2930 }
2931 
2932 bool Sema::CheckVecStepExpr(Expr *E) {
2933   E = E->IgnoreParens();
2934 
2935   // Cannot know anything else if the expression is dependent.
2936   if (E->isTypeDependent())
2937     return false;
2938 
2939   return CheckUnaryExprOrTypeTraitOperand(E, UETT_VecStep);
2940 }
2941 
2942 /// \brief Build a sizeof or alignof expression given a type operand.
2943 ExprResult
2944 Sema::CreateUnaryExprOrTypeTraitExpr(TypeSourceInfo *TInfo,
2945                                      SourceLocation OpLoc,
2946                                      UnaryExprOrTypeTrait ExprKind,
2947                                      SourceRange R) {
2948   if (!TInfo)
2949     return ExprError();
2950 
2951   QualType T = TInfo->getType();
2952 
2953   if (!T->isDependentType() &&
2954       CheckUnaryExprOrTypeTraitOperand(T, OpLoc, R, ExprKind))
2955     return ExprError();
2956 
2957   // C99 6.5.3.4p4: the type (an unsigned integer type) is size_t.
2958   return Owned(new (Context) UnaryExprOrTypeTraitExpr(ExprKind, TInfo,
2959                                                       Context.getSizeType(),
2960                                                       OpLoc, R.getEnd()));
2961 }
2962 
2963 /// \brief Build a sizeof or alignof expression given an expression
2964 /// operand.
2965 ExprResult
2966 Sema::CreateUnaryExprOrTypeTraitExpr(Expr *E, SourceLocation OpLoc,
2967                                      UnaryExprOrTypeTrait ExprKind) {
2968   ExprResult PE = CheckPlaceholderExpr(E);
2969   if (PE.isInvalid())
2970     return ExprError();
2971 
2972   E = PE.get();
2973 
2974   // Verify that the operand is valid.
2975   bool isInvalid = false;
2976   if (E->isTypeDependent()) {
2977     // Delay type-checking for type-dependent expressions.
2978   } else if (ExprKind == UETT_AlignOf) {
2979     isInvalid = CheckAlignOfExpr(*this, E);
2980   } else if (ExprKind == UETT_VecStep) {
2981     isInvalid = CheckVecStepExpr(E);
2982   } else if (E->getBitField()) {  // C99 6.5.3.4p1.
2983     Diag(E->getExprLoc(), diag::err_sizeof_alignof_bitfield) << 0;
2984     isInvalid = true;
2985   } else {
2986     isInvalid = CheckUnaryExprOrTypeTraitOperand(E, UETT_SizeOf);
2987   }
2988 
2989   if (isInvalid)
2990     return ExprError();
2991 
2992   // C99 6.5.3.4p4: the type (an unsigned integer type) is size_t.
2993   return Owned(new (Context) UnaryExprOrTypeTraitExpr(
2994       ExprKind, E, Context.getSizeType(), OpLoc,
2995       E->getSourceRange().getEnd()));
2996 }
2997 
2998 /// ActOnUnaryExprOrTypeTraitExpr - Handle @c sizeof(type) and @c sizeof @c
2999 /// expr and the same for @c alignof and @c __alignof
3000 /// Note that the ArgRange is invalid if isType is false.
3001 ExprResult
3002 Sema::ActOnUnaryExprOrTypeTraitExpr(SourceLocation OpLoc,
3003                                     UnaryExprOrTypeTrait ExprKind, bool IsType,
3004                                     void *TyOrEx, const SourceRange &ArgRange) {
3005   // If error parsing type, ignore.
3006   if (TyOrEx == 0) return ExprError();
3007 
3008   if (IsType) {
3009     TypeSourceInfo *TInfo;
3010     (void) GetTypeFromParser(ParsedType::getFromOpaquePtr(TyOrEx), &TInfo);
3011     return CreateUnaryExprOrTypeTraitExpr(TInfo, OpLoc, ExprKind, ArgRange);
3012   }
3013 
3014   Expr *ArgEx = (Expr *)TyOrEx;
3015   ExprResult Result = CreateUnaryExprOrTypeTraitExpr(ArgEx, OpLoc, ExprKind);
3016   return move(Result);
3017 }
3018 
3019 static QualType CheckRealImagOperand(Sema &S, ExprResult &V, SourceLocation Loc,
3020                                      bool IsReal) {
3021   if (V.get()->isTypeDependent())
3022     return S.Context.DependentTy;
3023 
3024   // _Real and _Imag are only l-values for normal l-values.
3025   if (V.get()->getObjectKind() != OK_Ordinary) {
3026     V = S.DefaultLvalueConversion(V.take());
3027     if (V.isInvalid())
3028       return QualType();
3029   }
3030 
3031   // These operators return the element type of a complex type.
3032   if (const ComplexType *CT = V.get()->getType()->getAs<ComplexType>())
3033     return CT->getElementType();
3034 
3035   // Otherwise they pass through real integer and floating point types here.
3036   if (V.get()->getType()->isArithmeticType())
3037     return V.get()->getType();
3038 
3039   // Test for placeholders.
3040   ExprResult PR = S.CheckPlaceholderExpr(V.get());
3041   if (PR.isInvalid()) return QualType();
3042   if (PR.get() != V.get()) {
3043     V = move(PR);
3044     return CheckRealImagOperand(S, V, Loc, IsReal);
3045   }
3046 
3047   // Reject anything else.
3048   S.Diag(Loc, diag::err_realimag_invalid_type) << V.get()->getType()
3049     << (IsReal ? "__real" : "__imag");
3050   return QualType();
3051 }
3052 
3053 
3054 
3055 ExprResult
3056 Sema::ActOnPostfixUnaryOp(Scope *S, SourceLocation OpLoc,
3057                           tok::TokenKind Kind, Expr *Input) {
3058   UnaryOperatorKind Opc;
3059   switch (Kind) {
3060   default: llvm_unreachable("Unknown unary op!");
3061   case tok::plusplus:   Opc = UO_PostInc; break;
3062   case tok::minusminus: Opc = UO_PostDec; break;
3063   }
3064 
3065   return BuildUnaryOp(S, OpLoc, Opc, Input);
3066 }
3067 
3068 ExprResult
3069 Sema::ActOnArraySubscriptExpr(Scope *S, Expr *Base, SourceLocation LLoc,
3070                               Expr *Idx, SourceLocation RLoc) {
3071   // Since this might be a postfix expression, get rid of ParenListExprs.
3072   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Base);
3073   if (Result.isInvalid()) return ExprError();
3074   Base = Result.take();
3075 
3076   Expr *LHSExp = Base, *RHSExp = Idx;
3077 
3078   if (getLangOptions().CPlusPlus &&
3079       (LHSExp->isTypeDependent() || RHSExp->isTypeDependent())) {
3080     return Owned(new (Context) ArraySubscriptExpr(LHSExp, RHSExp,
3081                                                   Context.DependentTy,
3082                                                   VK_LValue, OK_Ordinary,
3083                                                   RLoc));
3084   }
3085 
3086   if (getLangOptions().CPlusPlus &&
3087       (LHSExp->getType()->isRecordType() ||
3088        LHSExp->getType()->isEnumeralType() ||
3089        RHSExp->getType()->isRecordType() ||
3090        RHSExp->getType()->isEnumeralType())) {
3091     return CreateOverloadedArraySubscriptExpr(LLoc, RLoc, Base, Idx);
3092   }
3093 
3094   return CreateBuiltinArraySubscriptExpr(Base, LLoc, Idx, RLoc);
3095 }
3096 
3097 
3098 ExprResult
3099 Sema::CreateBuiltinArraySubscriptExpr(Expr *Base, SourceLocation LLoc,
3100                                       Expr *Idx, SourceLocation RLoc) {
3101   Expr *LHSExp = Base;
3102   Expr *RHSExp = Idx;
3103 
3104   // Perform default conversions.
3105   if (!LHSExp->getType()->getAs<VectorType>()) {
3106     ExprResult Result = DefaultFunctionArrayLvalueConversion(LHSExp);
3107     if (Result.isInvalid())
3108       return ExprError();
3109     LHSExp = Result.take();
3110   }
3111   ExprResult Result = DefaultFunctionArrayLvalueConversion(RHSExp);
3112   if (Result.isInvalid())
3113     return ExprError();
3114   RHSExp = Result.take();
3115 
3116   QualType LHSTy = LHSExp->getType(), RHSTy = RHSExp->getType();
3117   ExprValueKind VK = VK_LValue;
3118   ExprObjectKind OK = OK_Ordinary;
3119 
3120   // C99 6.5.2.1p2: the expression e1[e2] is by definition precisely equivalent
3121   // to the expression *((e1)+(e2)). This means the array "Base" may actually be
3122   // in the subscript position. As a result, we need to derive the array base
3123   // and index from the expression types.
3124   Expr *BaseExpr, *IndexExpr;
3125   QualType ResultType;
3126   if (LHSTy->isDependentType() || RHSTy->isDependentType()) {
3127     BaseExpr = LHSExp;
3128     IndexExpr = RHSExp;
3129     ResultType = Context.DependentTy;
3130   } else if (const PointerType *PTy = LHSTy->getAs<PointerType>()) {
3131     BaseExpr = LHSExp;
3132     IndexExpr = RHSExp;
3133     ResultType = PTy->getPointeeType();
3134   } else if (const PointerType *PTy = RHSTy->getAs<PointerType>()) {
3135      // Handle the uncommon case of "123[Ptr]".
3136     BaseExpr = RHSExp;
3137     IndexExpr = LHSExp;
3138     ResultType = PTy->getPointeeType();
3139   } else if (const ObjCObjectPointerType *PTy =
3140                LHSTy->getAs<ObjCObjectPointerType>()) {
3141     BaseExpr = LHSExp;
3142     IndexExpr = RHSExp;
3143     ResultType = PTy->getPointeeType();
3144   } else if (const ObjCObjectPointerType *PTy =
3145                RHSTy->getAs<ObjCObjectPointerType>()) {
3146      // Handle the uncommon case of "123[Ptr]".
3147     BaseExpr = RHSExp;
3148     IndexExpr = LHSExp;
3149     ResultType = PTy->getPointeeType();
3150   } else if (const VectorType *VTy = LHSTy->getAs<VectorType>()) {
3151     BaseExpr = LHSExp;    // vectors: V[123]
3152     IndexExpr = RHSExp;
3153     VK = LHSExp->getValueKind();
3154     if (VK != VK_RValue)
3155       OK = OK_VectorComponent;
3156 
3157     // FIXME: need to deal with const...
3158     ResultType = VTy->getElementType();
3159   } else if (LHSTy->isArrayType()) {
3160     // If we see an array that wasn't promoted by
3161     // DefaultFunctionArrayLvalueConversion, it must be an array that
3162     // wasn't promoted because of the C90 rule that doesn't
3163     // allow promoting non-lvalue arrays.  Warn, then
3164     // force the promotion here.
3165     Diag(LHSExp->getLocStart(), diag::ext_subscript_non_lvalue) <<
3166         LHSExp->getSourceRange();
3167     LHSExp = ImpCastExprToType(LHSExp, Context.getArrayDecayedType(LHSTy),
3168                                CK_ArrayToPointerDecay).take();
3169     LHSTy = LHSExp->getType();
3170 
3171     BaseExpr = LHSExp;
3172     IndexExpr = RHSExp;
3173     ResultType = LHSTy->getAs<PointerType>()->getPointeeType();
3174   } else if (RHSTy->isArrayType()) {
3175     // Same as previous, except for 123[f().a] case
3176     Diag(RHSExp->getLocStart(), diag::ext_subscript_non_lvalue) <<
3177         RHSExp->getSourceRange();
3178     RHSExp = ImpCastExprToType(RHSExp, Context.getArrayDecayedType(RHSTy),
3179                                CK_ArrayToPointerDecay).take();
3180     RHSTy = RHSExp->getType();
3181 
3182     BaseExpr = RHSExp;
3183     IndexExpr = LHSExp;
3184     ResultType = RHSTy->getAs<PointerType>()->getPointeeType();
3185   } else {
3186     return ExprError(Diag(LLoc, diag::err_typecheck_subscript_value)
3187        << LHSExp->getSourceRange() << RHSExp->getSourceRange());
3188   }
3189   // C99 6.5.2.1p1
3190   if (!IndexExpr->getType()->isIntegerType() && !IndexExpr->isTypeDependent())
3191     return ExprError(Diag(LLoc, diag::err_typecheck_subscript_not_integer)
3192                      << IndexExpr->getSourceRange());
3193 
3194   if ((IndexExpr->getType()->isSpecificBuiltinType(BuiltinType::Char_S) ||
3195        IndexExpr->getType()->isSpecificBuiltinType(BuiltinType::Char_U))
3196          && !IndexExpr->isTypeDependent())
3197     Diag(LLoc, diag::warn_subscript_is_char) << IndexExpr->getSourceRange();
3198 
3199   // C99 6.5.2.1p1: "shall have type "pointer to *object* type". Similarly,
3200   // C++ [expr.sub]p1: The type "T" shall be a completely-defined object
3201   // type. Note that Functions are not objects, and that (in C99 parlance)
3202   // incomplete types are not object types.
3203   if (ResultType->isFunctionType()) {
3204     Diag(BaseExpr->getLocStart(), diag::err_subscript_function_type)
3205       << ResultType << BaseExpr->getSourceRange();
3206     return ExprError();
3207   }
3208 
3209   if (ResultType->isVoidType() && !getLangOptions().CPlusPlus) {
3210     // GNU extension: subscripting on pointer to void
3211     Diag(LLoc, diag::ext_gnu_subscript_void_type)
3212       << BaseExpr->getSourceRange();
3213 
3214     // C forbids expressions of unqualified void type from being l-values.
3215     // See IsCForbiddenLValueType.
3216     if (!ResultType.hasQualifiers()) VK = VK_RValue;
3217   } else if (!ResultType->isDependentType() &&
3218       RequireCompleteType(LLoc, ResultType,
3219                           PDiag(diag::err_subscript_incomplete_type)
3220                             << BaseExpr->getSourceRange()))
3221     return ExprError();
3222 
3223   // Diagnose bad cases where we step over interface counts.
3224   if (ResultType->isObjCObjectType() && LangOpts.ObjCNonFragileABI) {
3225     Diag(LLoc, diag::err_subscript_nonfragile_interface)
3226       << ResultType << BaseExpr->getSourceRange();
3227     return ExprError();
3228   }
3229 
3230   assert(VK == VK_RValue || LangOpts.CPlusPlus ||
3231          !ResultType.isCForbiddenLValueType());
3232 
3233   return Owned(new (Context) ArraySubscriptExpr(LHSExp, RHSExp,
3234                                                 ResultType, VK, OK, RLoc));
3235 }
3236 
3237 ExprResult Sema::BuildCXXDefaultArgExpr(SourceLocation CallLoc,
3238                                         FunctionDecl *FD,
3239                                         ParmVarDecl *Param) {
3240   if (Param->hasUnparsedDefaultArg()) {
3241     Diag(CallLoc,
3242          diag::err_use_of_default_argument_to_function_declared_later) <<
3243       FD << cast<CXXRecordDecl>(FD->getDeclContext())->getDeclName();
3244     Diag(UnparsedDefaultArgLocs[Param],
3245          diag::note_default_argument_declared_here);
3246     return ExprError();
3247   }
3248 
3249   if (Param->hasUninstantiatedDefaultArg()) {
3250     Expr *UninstExpr = Param->getUninstantiatedDefaultArg();
3251 
3252     // Instantiate the expression.
3253     MultiLevelTemplateArgumentList ArgList
3254       = getTemplateInstantiationArgs(FD, 0, /*RelativeToPrimary=*/true);
3255 
3256     std::pair<const TemplateArgument *, unsigned> Innermost
3257       = ArgList.getInnermost();
3258     InstantiatingTemplate Inst(*this, CallLoc, Param, Innermost.first,
3259                                Innermost.second);
3260 
3261     ExprResult Result;
3262     {
3263       // C++ [dcl.fct.default]p5:
3264       //   The names in the [default argument] expression are bound, and
3265       //   the semantic constraints are checked, at the point where the
3266       //   default argument expression appears.
3267       ContextRAII SavedContext(*this, FD);
3268       Result = SubstExpr(UninstExpr, ArgList);
3269     }
3270     if (Result.isInvalid())
3271       return ExprError();
3272 
3273     // Check the expression as an initializer for the parameter.
3274     InitializedEntity Entity
3275       = InitializedEntity::InitializeParameter(Context, Param);
3276     InitializationKind Kind
3277       = InitializationKind::CreateCopy(Param->getLocation(),
3278              /*FIXME:EqualLoc*/UninstExpr->getSourceRange().getBegin());
3279     Expr *ResultE = Result.takeAs<Expr>();
3280 
3281     InitializationSequence InitSeq(*this, Entity, Kind, &ResultE, 1);
3282     Result = InitSeq.Perform(*this, Entity, Kind,
3283                              MultiExprArg(*this, &ResultE, 1));
3284     if (Result.isInvalid())
3285       return ExprError();
3286 
3287     // Build the default argument expression.
3288     return Owned(CXXDefaultArgExpr::Create(Context, CallLoc, Param,
3289                                            Result.takeAs<Expr>()));
3290   }
3291 
3292   // If the default expression creates temporaries, we need to
3293   // push them to the current stack of expression temporaries so they'll
3294   // be properly destroyed.
3295   // FIXME: We should really be rebuilding the default argument with new
3296   // bound temporaries; see the comment in PR5810.
3297   for (unsigned i = 0, e = Param->getNumDefaultArgTemporaries(); i != e; ++i) {
3298     CXXTemporary *Temporary = Param->getDefaultArgTemporary(i);
3299     MarkDeclarationReferenced(Param->getDefaultArg()->getLocStart(),
3300                     const_cast<CXXDestructorDecl*>(Temporary->getDestructor()));
3301     ExprTemporaries.push_back(Temporary);
3302     ExprNeedsCleanups = true;
3303   }
3304 
3305   // We already type-checked the argument, so we know it works.
3306   // Just mark all of the declarations in this potentially-evaluated expression
3307   // as being "referenced".
3308   MarkDeclarationsReferencedInExpr(Param->getDefaultArg());
3309   return Owned(CXXDefaultArgExpr::Create(Context, CallLoc, Param));
3310 }
3311 
3312 /// ConvertArgumentsForCall - Converts the arguments specified in
3313 /// Args/NumArgs to the parameter types of the function FDecl with
3314 /// function prototype Proto. Call is the call expression itself, and
3315 /// Fn is the function expression. For a C++ member function, this
3316 /// routine does not attempt to convert the object argument. Returns
3317 /// true if the call is ill-formed.
3318 bool
3319 Sema::ConvertArgumentsForCall(CallExpr *Call, Expr *Fn,
3320                               FunctionDecl *FDecl,
3321                               const FunctionProtoType *Proto,
3322                               Expr **Args, unsigned NumArgs,
3323                               SourceLocation RParenLoc,
3324                               bool IsExecConfig) {
3325   // Bail out early if calling a builtin with custom typechecking.
3326   // We don't need to do this in the
3327   if (FDecl)
3328     if (unsigned ID = FDecl->getBuiltinID())
3329       if (Context.BuiltinInfo.hasCustomTypechecking(ID))
3330         return false;
3331 
3332   // C99 6.5.2.2p7 - the arguments are implicitly converted, as if by
3333   // assignment, to the types of the corresponding parameter, ...
3334   unsigned NumArgsInProto = Proto->getNumArgs();
3335   bool Invalid = false;
3336   unsigned MinArgs = FDecl ? FDecl->getMinRequiredArguments() : NumArgsInProto;
3337   unsigned FnKind = Fn->getType()->isBlockPointerType()
3338                        ? 1 /* block */
3339                        : (IsExecConfig ? 3 /* kernel function (exec config) */
3340                                        : 0 /* function */);
3341 
3342   // If too few arguments are available (and we don't have default
3343   // arguments for the remaining parameters), don't make the call.
3344   if (NumArgs < NumArgsInProto) {
3345     if (NumArgs < MinArgs) {
3346       Diag(RParenLoc, MinArgs == NumArgsInProto
3347                         ? diag::err_typecheck_call_too_few_args
3348                         : diag::err_typecheck_call_too_few_args_at_least)
3349         << FnKind
3350         << MinArgs << NumArgs << Fn->getSourceRange();
3351 
3352       // Emit the location of the prototype.
3353       if (FDecl && !FDecl->getBuiltinID() && !IsExecConfig)
3354         Diag(FDecl->getLocStart(), diag::note_callee_decl)
3355           << FDecl;
3356 
3357       return true;
3358     }
3359     Call->setNumArgs(Context, NumArgsInProto);
3360   }
3361 
3362   // If too many are passed and not variadic, error on the extras and drop
3363   // them.
3364   if (NumArgs > NumArgsInProto) {
3365     if (!Proto->isVariadic()) {
3366       Diag(Args[NumArgsInProto]->getLocStart(),
3367            MinArgs == NumArgsInProto
3368              ? diag::err_typecheck_call_too_many_args
3369              : diag::err_typecheck_call_too_many_args_at_most)
3370         << FnKind
3371         << NumArgsInProto << NumArgs << Fn->getSourceRange()
3372         << SourceRange(Args[NumArgsInProto]->getLocStart(),
3373                        Args[NumArgs-1]->getLocEnd());
3374 
3375       // Emit the location of the prototype.
3376       if (FDecl && !FDecl->getBuiltinID() && !IsExecConfig)
3377         Diag(FDecl->getLocStart(), diag::note_callee_decl)
3378           << FDecl;
3379 
3380       // This deletes the extra arguments.
3381       Call->setNumArgs(Context, NumArgsInProto);
3382       return true;
3383     }
3384   }
3385   SmallVector<Expr *, 8> AllArgs;
3386   VariadicCallType CallType =
3387     Proto->isVariadic() ? VariadicFunction : VariadicDoesNotApply;
3388   if (Fn->getType()->isBlockPointerType())
3389     CallType = VariadicBlock; // Block
3390   else if (isa<MemberExpr>(Fn))
3391     CallType = VariadicMethod;
3392   Invalid = GatherArgumentsForCall(Call->getSourceRange().getBegin(), FDecl,
3393                                    Proto, 0, Args, NumArgs, AllArgs, CallType);
3394   if (Invalid)
3395     return true;
3396   unsigned TotalNumArgs = AllArgs.size();
3397   for (unsigned i = 0; i < TotalNumArgs; ++i)
3398     Call->setArg(i, AllArgs[i]);
3399 
3400   return false;
3401 }
3402 
3403 bool Sema::GatherArgumentsForCall(SourceLocation CallLoc,
3404                                   FunctionDecl *FDecl,
3405                                   const FunctionProtoType *Proto,
3406                                   unsigned FirstProtoArg,
3407                                   Expr **Args, unsigned NumArgs,
3408                                   SmallVector<Expr *, 8> &AllArgs,
3409                                   VariadicCallType CallType) {
3410   unsigned NumArgsInProto = Proto->getNumArgs();
3411   unsigned NumArgsToCheck = NumArgs;
3412   bool Invalid = false;
3413   if (NumArgs != NumArgsInProto)
3414     // Use default arguments for missing arguments
3415     NumArgsToCheck = NumArgsInProto;
3416   unsigned ArgIx = 0;
3417   // Continue to check argument types (even if we have too few/many args).
3418   for (unsigned i = FirstProtoArg; i != NumArgsToCheck; i++) {
3419     QualType ProtoArgType = Proto->getArgType(i);
3420 
3421     Expr *Arg;
3422     if (ArgIx < NumArgs) {
3423       Arg = Args[ArgIx++];
3424 
3425       if (RequireCompleteType(Arg->getSourceRange().getBegin(),
3426                               ProtoArgType,
3427                               PDiag(diag::err_call_incomplete_argument)
3428                               << Arg->getSourceRange()))
3429         return true;
3430 
3431       // Pass the argument
3432       ParmVarDecl *Param = 0;
3433       if (FDecl && i < FDecl->getNumParams())
3434         Param = FDecl->getParamDecl(i);
3435 
3436       // Strip the unbridged-cast placeholder expression off, if applicable.
3437       if (Arg->getType() == Context.ARCUnbridgedCastTy &&
3438           FDecl && FDecl->hasAttr<CFAuditedTransferAttr>() &&
3439           (!Param || !Param->hasAttr<CFConsumedAttr>()))
3440         Arg = stripARCUnbridgedCast(Arg);
3441 
3442       InitializedEntity Entity =
3443         Param? InitializedEntity::InitializeParameter(Context, Param)
3444              : InitializedEntity::InitializeParameter(Context, ProtoArgType,
3445                                                       Proto->isArgConsumed(i));
3446       ExprResult ArgE = PerformCopyInitialization(Entity,
3447                                                   SourceLocation(),
3448                                                   Owned(Arg));
3449       if (ArgE.isInvalid())
3450         return true;
3451 
3452       Arg = ArgE.takeAs<Expr>();
3453     } else {
3454       ParmVarDecl *Param = FDecl->getParamDecl(i);
3455 
3456       ExprResult ArgExpr =
3457         BuildCXXDefaultArgExpr(CallLoc, FDecl, Param);
3458       if (ArgExpr.isInvalid())
3459         return true;
3460 
3461       Arg = ArgExpr.takeAs<Expr>();
3462     }
3463 
3464     // Check for array bounds violations for each argument to the call. This
3465     // check only triggers warnings when the argument isn't a more complex Expr
3466     // with its own checking, such as a BinaryOperator.
3467     CheckArrayAccess(Arg);
3468 
3469     AllArgs.push_back(Arg);
3470   }
3471 
3472   // If this is a variadic call, handle args passed through "...".
3473   if (CallType != VariadicDoesNotApply) {
3474 
3475     // Assume that extern "C" functions with variadic arguments that
3476     // return __unknown_anytype aren't *really* variadic.
3477     if (Proto->getResultType() == Context.UnknownAnyTy &&
3478         FDecl && FDecl->isExternC()) {
3479       for (unsigned i = ArgIx; i != NumArgs; ++i) {
3480         ExprResult arg;
3481         if (isa<ExplicitCastExpr>(Args[i]->IgnoreParens()))
3482           arg = DefaultFunctionArrayLvalueConversion(Args[i]);
3483         else
3484           arg = DefaultVariadicArgumentPromotion(Args[i], CallType, FDecl);
3485         Invalid |= arg.isInvalid();
3486         AllArgs.push_back(arg.take());
3487       }
3488 
3489     // Otherwise do argument promotion, (C99 6.5.2.2p7).
3490     } else {
3491       for (unsigned i = ArgIx; i != NumArgs; ++i) {
3492         ExprResult Arg = DefaultVariadicArgumentPromotion(Args[i], CallType,
3493                                                           FDecl);
3494         Invalid |= Arg.isInvalid();
3495         AllArgs.push_back(Arg.take());
3496       }
3497     }
3498 
3499     // Check for array bounds violations.
3500     for (unsigned i = ArgIx; i != NumArgs; ++i)
3501       CheckArrayAccess(Args[i]);
3502   }
3503   return Invalid;
3504 }
3505 
3506 /// Given a function expression of unknown-any type, try to rebuild it
3507 /// to have a function type.
3508 static ExprResult rebuildUnknownAnyFunction(Sema &S, Expr *fn);
3509 
3510 /// ActOnCallExpr - Handle a call to Fn with the specified array of arguments.
3511 /// This provides the location of the left/right parens and a list of comma
3512 /// locations.
3513 ExprResult
3514 Sema::ActOnCallExpr(Scope *S, Expr *Fn, SourceLocation LParenLoc,
3515                     MultiExprArg ArgExprs, SourceLocation RParenLoc,
3516                     Expr *ExecConfig, bool IsExecConfig) {
3517   unsigned NumArgs = ArgExprs.size();
3518 
3519   // Since this might be a postfix expression, get rid of ParenListExprs.
3520   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Fn);
3521   if (Result.isInvalid()) return ExprError();
3522   Fn = Result.take();
3523 
3524   Expr **Args = ArgExprs.release();
3525 
3526   if (getLangOptions().CPlusPlus) {
3527     // If this is a pseudo-destructor expression, build the call immediately.
3528     if (isa<CXXPseudoDestructorExpr>(Fn)) {
3529       if (NumArgs > 0) {
3530         // Pseudo-destructor calls should not have any arguments.
3531         Diag(Fn->getLocStart(), diag::err_pseudo_dtor_call_with_args)
3532           << FixItHint::CreateRemoval(
3533                                     SourceRange(Args[0]->getLocStart(),
3534                                                 Args[NumArgs-1]->getLocEnd()));
3535 
3536         NumArgs = 0;
3537       }
3538 
3539       return Owned(new (Context) CallExpr(Context, Fn, 0, 0, Context.VoidTy,
3540                                           VK_RValue, RParenLoc));
3541     }
3542 
3543     // Determine whether this is a dependent call inside a C++ template,
3544     // in which case we won't do any semantic analysis now.
3545     // FIXME: Will need to cache the results of name lookup (including ADL) in
3546     // Fn.
3547     bool Dependent = false;
3548     if (Fn->isTypeDependent())
3549       Dependent = true;
3550     else if (Expr::hasAnyTypeDependentArguments(Args, NumArgs))
3551       Dependent = true;
3552 
3553     if (Dependent) {
3554       if (ExecConfig) {
3555         return Owned(new (Context) CUDAKernelCallExpr(
3556             Context, Fn, cast<CallExpr>(ExecConfig), Args, NumArgs,
3557             Context.DependentTy, VK_RValue, RParenLoc));
3558       } else {
3559         return Owned(new (Context) CallExpr(Context, Fn, Args, NumArgs,
3560                                             Context.DependentTy, VK_RValue,
3561                                             RParenLoc));
3562       }
3563     }
3564 
3565     // Determine whether this is a call to an object (C++ [over.call.object]).
3566     if (Fn->getType()->isRecordType())
3567       return Owned(BuildCallToObjectOfClassType(S, Fn, LParenLoc, Args, NumArgs,
3568                                                 RParenLoc));
3569 
3570     if (Fn->getType() == Context.UnknownAnyTy) {
3571       ExprResult result = rebuildUnknownAnyFunction(*this, Fn);
3572       if (result.isInvalid()) return ExprError();
3573       Fn = result.take();
3574     }
3575 
3576     if (Fn->getType() == Context.BoundMemberTy) {
3577       return BuildCallToMemberFunction(S, Fn, LParenLoc, Args, NumArgs,
3578                                        RParenLoc);
3579     }
3580   }
3581 
3582   // Check for overloaded calls.  This can happen even in C due to extensions.
3583   if (Fn->getType() == Context.OverloadTy) {
3584     OverloadExpr::FindResult find = OverloadExpr::find(Fn);
3585 
3586     // We aren't supposed to apply this logic for if there's an '&' involved.
3587     if (!find.HasFormOfMemberPointer) {
3588       OverloadExpr *ovl = find.Expression;
3589       if (isa<UnresolvedLookupExpr>(ovl)) {
3590         UnresolvedLookupExpr *ULE = cast<UnresolvedLookupExpr>(ovl);
3591         return BuildOverloadedCallExpr(S, Fn, ULE, LParenLoc, Args, NumArgs,
3592                                        RParenLoc, ExecConfig);
3593       } else {
3594         return BuildCallToMemberFunction(S, Fn, LParenLoc, Args, NumArgs,
3595                                          RParenLoc);
3596       }
3597     }
3598   }
3599 
3600   // If we're directly calling a function, get the appropriate declaration.
3601 
3602   Expr *NakedFn = Fn->IgnoreParens();
3603 
3604   NamedDecl *NDecl = 0;
3605   if (UnaryOperator *UnOp = dyn_cast<UnaryOperator>(NakedFn))
3606     if (UnOp->getOpcode() == UO_AddrOf)
3607       NakedFn = UnOp->getSubExpr()->IgnoreParens();
3608 
3609   if (isa<DeclRefExpr>(NakedFn))
3610     NDecl = cast<DeclRefExpr>(NakedFn)->getDecl();
3611   else if (isa<MemberExpr>(NakedFn))
3612     NDecl = cast<MemberExpr>(NakedFn)->getMemberDecl();
3613 
3614   return BuildResolvedCallExpr(Fn, NDecl, LParenLoc, Args, NumArgs, RParenLoc,
3615                                ExecConfig, IsExecConfig);
3616 }
3617 
3618 ExprResult
3619 Sema::ActOnCUDAExecConfigExpr(Scope *S, SourceLocation LLLLoc,
3620                               MultiExprArg ExecConfig, SourceLocation GGGLoc) {
3621   FunctionDecl *ConfigDecl = Context.getcudaConfigureCallDecl();
3622   if (!ConfigDecl)
3623     return ExprError(Diag(LLLLoc, diag::err_undeclared_var_use)
3624                           << "cudaConfigureCall");
3625   QualType ConfigQTy = ConfigDecl->getType();
3626 
3627   DeclRefExpr *ConfigDR = new (Context) DeclRefExpr(
3628       ConfigDecl, ConfigQTy, VK_LValue, LLLLoc);
3629 
3630   return ActOnCallExpr(S, ConfigDR, LLLLoc, ExecConfig, GGGLoc, 0,
3631                        /*IsExecConfig=*/true);
3632 }
3633 
3634 /// ActOnAsTypeExpr - create a new asType (bitcast) from the arguments.
3635 ///
3636 /// __builtin_astype( value, dst type )
3637 ///
3638 ExprResult Sema::ActOnAsTypeExpr(Expr *E, ParsedType ParsedDestTy,
3639                                  SourceLocation BuiltinLoc,
3640                                  SourceLocation RParenLoc) {
3641   ExprValueKind VK = VK_RValue;
3642   ExprObjectKind OK = OK_Ordinary;
3643   QualType DstTy = GetTypeFromParser(ParsedDestTy);
3644   QualType SrcTy = E->getType();
3645   if (Context.getTypeSize(DstTy) != Context.getTypeSize(SrcTy))
3646     return ExprError(Diag(BuiltinLoc,
3647                           diag::err_invalid_astype_of_different_size)
3648                      << DstTy
3649                      << SrcTy
3650                      << E->getSourceRange());
3651   return Owned(new (Context) AsTypeExpr(E, DstTy, VK, OK, BuiltinLoc,
3652                RParenLoc));
3653 }
3654 
3655 /// BuildResolvedCallExpr - Build a call to a resolved expression,
3656 /// i.e. an expression not of \p OverloadTy.  The expression should
3657 /// unary-convert to an expression of function-pointer or
3658 /// block-pointer type.
3659 ///
3660 /// \param NDecl the declaration being called, if available
3661 ExprResult
3662 Sema::BuildResolvedCallExpr(Expr *Fn, NamedDecl *NDecl,
3663                             SourceLocation LParenLoc,
3664                             Expr **Args, unsigned NumArgs,
3665                             SourceLocation RParenLoc,
3666                             Expr *Config, bool IsExecConfig) {
3667   FunctionDecl *FDecl = dyn_cast_or_null<FunctionDecl>(NDecl);
3668 
3669   // Promote the function operand.
3670   ExprResult Result = UsualUnaryConversions(Fn);
3671   if (Result.isInvalid())
3672     return ExprError();
3673   Fn = Result.take();
3674 
3675   // Make the call expr early, before semantic checks.  This guarantees cleanup
3676   // of arguments and function on error.
3677   CallExpr *TheCall;
3678   if (Config) {
3679     TheCall = new (Context) CUDAKernelCallExpr(Context, Fn,
3680                                                cast<CallExpr>(Config),
3681                                                Args, NumArgs,
3682                                                Context.BoolTy,
3683                                                VK_RValue,
3684                                                RParenLoc);
3685   } else {
3686     TheCall = new (Context) CallExpr(Context, Fn,
3687                                      Args, NumArgs,
3688                                      Context.BoolTy,
3689                                      VK_RValue,
3690                                      RParenLoc);
3691   }
3692 
3693   unsigned BuiltinID = (FDecl ? FDecl->getBuiltinID() : 0);
3694 
3695   // Bail out early if calling a builtin with custom typechecking.
3696   if (BuiltinID && Context.BuiltinInfo.hasCustomTypechecking(BuiltinID))
3697     return CheckBuiltinFunctionCall(BuiltinID, TheCall);
3698 
3699  retry:
3700   const FunctionType *FuncT;
3701   if (const PointerType *PT = Fn->getType()->getAs<PointerType>()) {
3702     // C99 6.5.2.2p1 - "The expression that denotes the called function shall
3703     // have type pointer to function".
3704     FuncT = PT->getPointeeType()->getAs<FunctionType>();
3705     if (FuncT == 0)
3706       return ExprError(Diag(LParenLoc, diag::err_typecheck_call_not_function)
3707                          << Fn->getType() << Fn->getSourceRange());
3708   } else if (const BlockPointerType *BPT =
3709                Fn->getType()->getAs<BlockPointerType>()) {
3710     FuncT = BPT->getPointeeType()->castAs<FunctionType>();
3711   } else {
3712     // Handle calls to expressions of unknown-any type.
3713     if (Fn->getType() == Context.UnknownAnyTy) {
3714       ExprResult rewrite = rebuildUnknownAnyFunction(*this, Fn);
3715       if (rewrite.isInvalid()) return ExprError();
3716       Fn = rewrite.take();
3717       TheCall->setCallee(Fn);
3718       goto retry;
3719     }
3720 
3721     return ExprError(Diag(LParenLoc, diag::err_typecheck_call_not_function)
3722       << Fn->getType() << Fn->getSourceRange());
3723   }
3724 
3725   if (getLangOptions().CUDA) {
3726     if (Config) {
3727       // CUDA: Kernel calls must be to global functions
3728       if (FDecl && !FDecl->hasAttr<CUDAGlobalAttr>())
3729         return ExprError(Diag(LParenLoc,diag::err_kern_call_not_global_function)
3730             << FDecl->getName() << Fn->getSourceRange());
3731 
3732       // CUDA: Kernel function must have 'void' return type
3733       if (!FuncT->getResultType()->isVoidType())
3734         return ExprError(Diag(LParenLoc, diag::err_kern_type_not_void_return)
3735             << Fn->getType() << Fn->getSourceRange());
3736     } else {
3737       // CUDA: Calls to global functions must be configured
3738       if (FDecl && FDecl->hasAttr<CUDAGlobalAttr>())
3739         return ExprError(Diag(LParenLoc, diag::err_global_call_not_config)
3740             << FDecl->getName() << Fn->getSourceRange());
3741     }
3742   }
3743 
3744   // Check for a valid return type
3745   if (CheckCallReturnType(FuncT->getResultType(),
3746                           Fn->getSourceRange().getBegin(), TheCall,
3747                           FDecl))
3748     return ExprError();
3749 
3750   // We know the result type of the call, set it.
3751   TheCall->setType(FuncT->getCallResultType(Context));
3752   TheCall->setValueKind(Expr::getValueKindForType(FuncT->getResultType()));
3753 
3754   if (const FunctionProtoType *Proto = dyn_cast<FunctionProtoType>(FuncT)) {
3755     if (ConvertArgumentsForCall(TheCall, Fn, FDecl, Proto, Args, NumArgs,
3756                                 RParenLoc, IsExecConfig))
3757       return ExprError();
3758   } else {
3759     assert(isa<FunctionNoProtoType>(FuncT) && "Unknown FunctionType!");
3760 
3761     if (FDecl) {
3762       // Check if we have too few/too many template arguments, based
3763       // on our knowledge of the function definition.
3764       const FunctionDecl *Def = 0;
3765       if (FDecl->hasBody(Def) && NumArgs != Def->param_size()) {
3766         const FunctionProtoType *Proto
3767           = Def->getType()->getAs<FunctionProtoType>();
3768         if (!Proto || !(Proto->isVariadic() && NumArgs >= Def->param_size()))
3769           Diag(RParenLoc, diag::warn_call_wrong_number_of_arguments)
3770             << (NumArgs > Def->param_size()) << FDecl << Fn->getSourceRange();
3771       }
3772 
3773       // If the function we're calling isn't a function prototype, but we have
3774       // a function prototype from a prior declaratiom, use that prototype.
3775       if (!FDecl->hasPrototype())
3776         Proto = FDecl->getType()->getAs<FunctionProtoType>();
3777     }
3778 
3779     // Promote the arguments (C99 6.5.2.2p6).
3780     for (unsigned i = 0; i != NumArgs; i++) {
3781       Expr *Arg = Args[i];
3782 
3783       if (Proto && i < Proto->getNumArgs()) {
3784         InitializedEntity Entity
3785           = InitializedEntity::InitializeParameter(Context,
3786                                                    Proto->getArgType(i),
3787                                                    Proto->isArgConsumed(i));
3788         ExprResult ArgE = PerformCopyInitialization(Entity,
3789                                                     SourceLocation(),
3790                                                     Owned(Arg));
3791         if (ArgE.isInvalid())
3792           return true;
3793 
3794         Arg = ArgE.takeAs<Expr>();
3795 
3796       } else {
3797         ExprResult ArgE = DefaultArgumentPromotion(Arg);
3798 
3799         if (ArgE.isInvalid())
3800           return true;
3801 
3802         Arg = ArgE.takeAs<Expr>();
3803       }
3804 
3805       if (RequireCompleteType(Arg->getSourceRange().getBegin(),
3806                               Arg->getType(),
3807                               PDiag(diag::err_call_incomplete_argument)
3808                                 << Arg->getSourceRange()))
3809         return ExprError();
3810 
3811       TheCall->setArg(i, Arg);
3812     }
3813   }
3814 
3815   if (CXXMethodDecl *Method = dyn_cast_or_null<CXXMethodDecl>(FDecl))
3816     if (!Method->isStatic())
3817       return ExprError(Diag(LParenLoc, diag::err_member_call_without_object)
3818         << Fn->getSourceRange());
3819 
3820   // Check for sentinels
3821   if (NDecl)
3822     DiagnoseSentinelCalls(NDecl, LParenLoc, Args, NumArgs);
3823 
3824   // Do special checking on direct calls to functions.
3825   if (FDecl) {
3826     if (CheckFunctionCall(FDecl, TheCall))
3827       return ExprError();
3828 
3829     if (BuiltinID)
3830       return CheckBuiltinFunctionCall(BuiltinID, TheCall);
3831   } else if (NDecl) {
3832     if (CheckBlockCall(NDecl, TheCall))
3833       return ExprError();
3834   }
3835 
3836   return MaybeBindToTemporary(TheCall);
3837 }
3838 
3839 ExprResult
3840 Sema::ActOnCompoundLiteral(SourceLocation LParenLoc, ParsedType Ty,
3841                            SourceLocation RParenLoc, Expr *InitExpr) {
3842   assert((Ty != 0) && "ActOnCompoundLiteral(): missing type");
3843   // FIXME: put back this assert when initializers are worked out.
3844   //assert((InitExpr != 0) && "ActOnCompoundLiteral(): missing expression");
3845 
3846   TypeSourceInfo *TInfo;
3847   QualType literalType = GetTypeFromParser(Ty, &TInfo);
3848   if (!TInfo)
3849     TInfo = Context.getTrivialTypeSourceInfo(literalType);
3850 
3851   return BuildCompoundLiteralExpr(LParenLoc, TInfo, RParenLoc, InitExpr);
3852 }
3853 
3854 ExprResult
3855 Sema::BuildCompoundLiteralExpr(SourceLocation LParenLoc, TypeSourceInfo *TInfo,
3856                                SourceLocation RParenLoc, Expr *LiteralExpr) {
3857   QualType literalType = TInfo->getType();
3858 
3859   if (literalType->isArrayType()) {
3860     if (RequireCompleteType(LParenLoc, Context.getBaseElementType(literalType),
3861              PDiag(diag::err_illegal_decl_array_incomplete_type)
3862                << SourceRange(LParenLoc,
3863                               LiteralExpr->getSourceRange().getEnd())))
3864       return ExprError();
3865     if (literalType->isVariableArrayType())
3866       return ExprError(Diag(LParenLoc, diag::err_variable_object_no_init)
3867         << SourceRange(LParenLoc, LiteralExpr->getSourceRange().getEnd()));
3868   } else if (!literalType->isDependentType() &&
3869              RequireCompleteType(LParenLoc, literalType,
3870                       PDiag(diag::err_typecheck_decl_incomplete_type)
3871                         << SourceRange(LParenLoc,
3872                                        LiteralExpr->getSourceRange().getEnd())))
3873     return ExprError();
3874 
3875   InitializedEntity Entity
3876     = InitializedEntity::InitializeTemporary(literalType);
3877   InitializationKind Kind
3878     = InitializationKind::CreateCStyleCast(LParenLoc,
3879                                            SourceRange(LParenLoc, RParenLoc));
3880   InitializationSequence InitSeq(*this, Entity, Kind, &LiteralExpr, 1);
3881   ExprResult Result = InitSeq.Perform(*this, Entity, Kind,
3882                                        MultiExprArg(*this, &LiteralExpr, 1),
3883                                             &literalType);
3884   if (Result.isInvalid())
3885     return ExprError();
3886   LiteralExpr = Result.get();
3887 
3888   bool isFileScope = getCurFunctionOrMethodDecl() == 0;
3889   if (isFileScope) { // 6.5.2.5p3
3890     if (CheckForConstantInitializer(LiteralExpr, literalType))
3891       return ExprError();
3892   }
3893 
3894   // In C, compound literals are l-values for some reason.
3895   ExprValueKind VK = getLangOptions().CPlusPlus ? VK_RValue : VK_LValue;
3896 
3897   return MaybeBindToTemporary(
3898            new (Context) CompoundLiteralExpr(LParenLoc, TInfo, literalType,
3899                                              VK, LiteralExpr, isFileScope));
3900 }
3901 
3902 ExprResult
3903 Sema::ActOnInitList(SourceLocation LBraceLoc, MultiExprArg InitArgList,
3904                     SourceLocation RBraceLoc) {
3905   unsigned NumInit = InitArgList.size();
3906   Expr **InitList = InitArgList.release();
3907 
3908   // Semantic analysis for initializers is done by ActOnDeclarator() and
3909   // CheckInitializer() - it requires knowledge of the object being intialized.
3910 
3911   InitListExpr *E = new (Context) InitListExpr(Context, LBraceLoc, InitList,
3912                                                NumInit, RBraceLoc);
3913   E->setType(Context.VoidTy); // FIXME: just a place holder for now.
3914   return Owned(E);
3915 }
3916 
3917 /// Do an explicit extend of the given block pointer if we're in ARC.
3918 static void maybeExtendBlockObject(Sema &S, ExprResult &E) {
3919   assert(E.get()->getType()->isBlockPointerType());
3920   assert(E.get()->isRValue());
3921 
3922   // Only do this in an r-value context.
3923   if (!S.getLangOptions().ObjCAutoRefCount) return;
3924 
3925   E = ImplicitCastExpr::Create(S.Context, E.get()->getType(),
3926                                CK_ARCExtendBlockObject, E.get(),
3927                                /*base path*/ 0, VK_RValue);
3928   S.ExprNeedsCleanups = true;
3929 }
3930 
3931 /// Prepare a conversion of the given expression to an ObjC object
3932 /// pointer type.
3933 CastKind Sema::PrepareCastToObjCObjectPointer(ExprResult &E) {
3934   QualType type = E.get()->getType();
3935   if (type->isObjCObjectPointerType()) {
3936     return CK_BitCast;
3937   } else if (type->isBlockPointerType()) {
3938     maybeExtendBlockObject(*this, E);
3939     return CK_BlockPointerToObjCPointerCast;
3940   } else {
3941     assert(type->isPointerType());
3942     return CK_CPointerToObjCPointerCast;
3943   }
3944 }
3945 
3946 /// Prepares for a scalar cast, performing all the necessary stages
3947 /// except the final cast and returning the kind required.
3948 CastKind Sema::PrepareScalarCast(ExprResult &Src, QualType DestTy) {
3949   // Both Src and Dest are scalar types, i.e. arithmetic or pointer.
3950   // Also, callers should have filtered out the invalid cases with
3951   // pointers.  Everything else should be possible.
3952 
3953   QualType SrcTy = Src.get()->getType();
3954   if (Context.hasSameUnqualifiedType(SrcTy, DestTy))
3955     return CK_NoOp;
3956 
3957   switch (Type::ScalarTypeKind SrcKind = SrcTy->getScalarTypeKind()) {
3958   case Type::STK_MemberPointer:
3959     llvm_unreachable("member pointer type in C");
3960 
3961   case Type::STK_CPointer:
3962   case Type::STK_BlockPointer:
3963   case Type::STK_ObjCObjectPointer:
3964     switch (DestTy->getScalarTypeKind()) {
3965     case Type::STK_CPointer:
3966       return CK_BitCast;
3967     case Type::STK_BlockPointer:
3968       return (SrcKind == Type::STK_BlockPointer
3969                 ? CK_BitCast : CK_AnyPointerToBlockPointerCast);
3970     case Type::STK_ObjCObjectPointer:
3971       if (SrcKind == Type::STK_ObjCObjectPointer)
3972         return CK_BitCast;
3973       else if (SrcKind == Type::STK_CPointer)
3974         return CK_CPointerToObjCPointerCast;
3975       else {
3976         maybeExtendBlockObject(*this, Src);
3977         return CK_BlockPointerToObjCPointerCast;
3978       }
3979     case Type::STK_Bool:
3980       return CK_PointerToBoolean;
3981     case Type::STK_Integral:
3982       return CK_PointerToIntegral;
3983     case Type::STK_Floating:
3984     case Type::STK_FloatingComplex:
3985     case Type::STK_IntegralComplex:
3986     case Type::STK_MemberPointer:
3987       llvm_unreachable("illegal cast from pointer");
3988     }
3989     break;
3990 
3991   case Type::STK_Bool: // casting from bool is like casting from an integer
3992   case Type::STK_Integral:
3993     switch (DestTy->getScalarTypeKind()) {
3994     case Type::STK_CPointer:
3995     case Type::STK_ObjCObjectPointer:
3996     case Type::STK_BlockPointer:
3997       if (Src.get()->isNullPointerConstant(Context,
3998                                            Expr::NPC_ValueDependentIsNull))
3999         return CK_NullToPointer;
4000       return CK_IntegralToPointer;
4001     case Type::STK_Bool:
4002       return CK_IntegralToBoolean;
4003     case Type::STK_Integral:
4004       return CK_IntegralCast;
4005     case Type::STK_Floating:
4006       return CK_IntegralToFloating;
4007     case Type::STK_IntegralComplex:
4008       Src = ImpCastExprToType(Src.take(),
4009                               DestTy->castAs<ComplexType>()->getElementType(),
4010                               CK_IntegralCast);
4011       return CK_IntegralRealToComplex;
4012     case Type::STK_FloatingComplex:
4013       Src = ImpCastExprToType(Src.take(),
4014                               DestTy->castAs<ComplexType>()->getElementType(),
4015                               CK_IntegralToFloating);
4016       return CK_FloatingRealToComplex;
4017     case Type::STK_MemberPointer:
4018       llvm_unreachable("member pointer type in C");
4019     }
4020     break;
4021 
4022   case Type::STK_Floating:
4023     switch (DestTy->getScalarTypeKind()) {
4024     case Type::STK_Floating:
4025       return CK_FloatingCast;
4026     case Type::STK_Bool:
4027       return CK_FloatingToBoolean;
4028     case Type::STK_Integral:
4029       return CK_FloatingToIntegral;
4030     case Type::STK_FloatingComplex:
4031       Src = ImpCastExprToType(Src.take(),
4032                               DestTy->castAs<ComplexType>()->getElementType(),
4033                               CK_FloatingCast);
4034       return CK_FloatingRealToComplex;
4035     case Type::STK_IntegralComplex:
4036       Src = ImpCastExprToType(Src.take(),
4037                               DestTy->castAs<ComplexType>()->getElementType(),
4038                               CK_FloatingToIntegral);
4039       return CK_IntegralRealToComplex;
4040     case Type::STK_CPointer:
4041     case Type::STK_ObjCObjectPointer:
4042     case Type::STK_BlockPointer:
4043       llvm_unreachable("valid float->pointer cast?");
4044     case Type::STK_MemberPointer:
4045       llvm_unreachable("member pointer type in C");
4046     }
4047     break;
4048 
4049   case Type::STK_FloatingComplex:
4050     switch (DestTy->getScalarTypeKind()) {
4051     case Type::STK_FloatingComplex:
4052       return CK_FloatingComplexCast;
4053     case Type::STK_IntegralComplex:
4054       return CK_FloatingComplexToIntegralComplex;
4055     case Type::STK_Floating: {
4056       QualType ET = SrcTy->castAs<ComplexType>()->getElementType();
4057       if (Context.hasSameType(ET, DestTy))
4058         return CK_FloatingComplexToReal;
4059       Src = ImpCastExprToType(Src.take(), ET, CK_FloatingComplexToReal);
4060       return CK_FloatingCast;
4061     }
4062     case Type::STK_Bool:
4063       return CK_FloatingComplexToBoolean;
4064     case Type::STK_Integral:
4065       Src = ImpCastExprToType(Src.take(),
4066                               SrcTy->castAs<ComplexType>()->getElementType(),
4067                               CK_FloatingComplexToReal);
4068       return CK_FloatingToIntegral;
4069     case Type::STK_CPointer:
4070     case Type::STK_ObjCObjectPointer:
4071     case Type::STK_BlockPointer:
4072       llvm_unreachable("valid complex float->pointer cast?");
4073     case Type::STK_MemberPointer:
4074       llvm_unreachable("member pointer type in C");
4075     }
4076     break;
4077 
4078   case Type::STK_IntegralComplex:
4079     switch (DestTy->getScalarTypeKind()) {
4080     case Type::STK_FloatingComplex:
4081       return CK_IntegralComplexToFloatingComplex;
4082     case Type::STK_IntegralComplex:
4083       return CK_IntegralComplexCast;
4084     case Type::STK_Integral: {
4085       QualType ET = SrcTy->castAs<ComplexType>()->getElementType();
4086       if (Context.hasSameType(ET, DestTy))
4087         return CK_IntegralComplexToReal;
4088       Src = ImpCastExprToType(Src.take(), ET, CK_IntegralComplexToReal);
4089       return CK_IntegralCast;
4090     }
4091     case Type::STK_Bool:
4092       return CK_IntegralComplexToBoolean;
4093     case Type::STK_Floating:
4094       Src = ImpCastExprToType(Src.take(),
4095                               SrcTy->castAs<ComplexType>()->getElementType(),
4096                               CK_IntegralComplexToReal);
4097       return CK_IntegralToFloating;
4098     case Type::STK_CPointer:
4099     case Type::STK_ObjCObjectPointer:
4100     case Type::STK_BlockPointer:
4101       llvm_unreachable("valid complex int->pointer cast?");
4102     case Type::STK_MemberPointer:
4103       llvm_unreachable("member pointer type in C");
4104     }
4105     break;
4106   }
4107 
4108   llvm_unreachable("Unhandled scalar cast");
4109 }
4110 
4111 bool Sema::CheckVectorCast(SourceRange R, QualType VectorTy, QualType Ty,
4112                            CastKind &Kind) {
4113   assert(VectorTy->isVectorType() && "Not a vector type!");
4114 
4115   if (Ty->isVectorType() || Ty->isIntegerType()) {
4116     if (Context.getTypeSize(VectorTy) != Context.getTypeSize(Ty))
4117       return Diag(R.getBegin(),
4118                   Ty->isVectorType() ?
4119                   diag::err_invalid_conversion_between_vectors :
4120                   diag::err_invalid_conversion_between_vector_and_integer)
4121         << VectorTy << Ty << R;
4122   } else
4123     return Diag(R.getBegin(),
4124                 diag::err_invalid_conversion_between_vector_and_scalar)
4125       << VectorTy << Ty << R;
4126 
4127   Kind = CK_BitCast;
4128   return false;
4129 }
4130 
4131 ExprResult Sema::CheckExtVectorCast(SourceRange R, QualType DestTy,
4132                                     Expr *CastExpr, CastKind &Kind) {
4133   assert(DestTy->isExtVectorType() && "Not an extended vector type!");
4134 
4135   QualType SrcTy = CastExpr->getType();
4136 
4137   // If SrcTy is a VectorType, the total size must match to explicitly cast to
4138   // an ExtVectorType.
4139   // In OpenCL, casts between vectors of different types are not allowed.
4140   // (See OpenCL 6.2).
4141   if (SrcTy->isVectorType()) {
4142     if (Context.getTypeSize(DestTy) != Context.getTypeSize(SrcTy)
4143         || (getLangOptions().OpenCL &&
4144             (DestTy.getCanonicalType() != SrcTy.getCanonicalType()))) {
4145       Diag(R.getBegin(),diag::err_invalid_conversion_between_ext_vectors)
4146         << DestTy << SrcTy << R;
4147       return ExprError();
4148     }
4149     Kind = CK_BitCast;
4150     return Owned(CastExpr);
4151   }
4152 
4153   // All non-pointer scalars can be cast to ExtVector type.  The appropriate
4154   // conversion will take place first from scalar to elt type, and then
4155   // splat from elt type to vector.
4156   if (SrcTy->isPointerType())
4157     return Diag(R.getBegin(),
4158                 diag::err_invalid_conversion_between_vector_and_scalar)
4159       << DestTy << SrcTy << R;
4160 
4161   QualType DestElemTy = DestTy->getAs<ExtVectorType>()->getElementType();
4162   ExprResult CastExprRes = Owned(CastExpr);
4163   CastKind CK = PrepareScalarCast(CastExprRes, DestElemTy);
4164   if (CastExprRes.isInvalid())
4165     return ExprError();
4166   CastExpr = ImpCastExprToType(CastExprRes.take(), DestElemTy, CK).take();
4167 
4168   Kind = CK_VectorSplat;
4169   return Owned(CastExpr);
4170 }
4171 
4172 ExprResult
4173 Sema::ActOnCastExpr(Scope *S, SourceLocation LParenLoc,
4174                     Declarator &D, ParsedType &Ty,
4175                     SourceLocation RParenLoc, Expr *CastExpr) {
4176   assert(!D.isInvalidType() && (CastExpr != 0) &&
4177          "ActOnCastExpr(): missing type or expr");
4178 
4179   TypeSourceInfo *castTInfo = GetTypeForDeclaratorCast(D, CastExpr->getType());
4180   if (D.isInvalidType())
4181     return ExprError();
4182 
4183   if (getLangOptions().CPlusPlus) {
4184     // Check that there are no default arguments (C++ only).
4185     CheckExtraCXXDefaultArguments(D);
4186   }
4187 
4188   checkUnusedDeclAttributes(D);
4189 
4190   QualType castType = castTInfo->getType();
4191   Ty = CreateParsedType(castType, castTInfo);
4192 
4193   bool isVectorLiteral = false;
4194 
4195   // Check for an altivec or OpenCL literal,
4196   // i.e. all the elements are integer constants.
4197   ParenExpr *PE = dyn_cast<ParenExpr>(CastExpr);
4198   ParenListExpr *PLE = dyn_cast<ParenListExpr>(CastExpr);
4199   if ((getLangOptions().AltiVec || getLangOptions().OpenCL)
4200        && castType->isVectorType() && (PE || PLE)) {
4201     if (PLE && PLE->getNumExprs() == 0) {
4202       Diag(PLE->getExprLoc(), diag::err_altivec_empty_initializer);
4203       return ExprError();
4204     }
4205     if (PE || PLE->getNumExprs() == 1) {
4206       Expr *E = (PE ? PE->getSubExpr() : PLE->getExpr(0));
4207       if (!E->getType()->isVectorType())
4208         isVectorLiteral = true;
4209     }
4210     else
4211       isVectorLiteral = true;
4212   }
4213 
4214   // If this is a vector initializer, '(' type ')' '(' init, ..., init ')'
4215   // then handle it as such.
4216   if (isVectorLiteral)
4217     return BuildVectorLiteral(LParenLoc, RParenLoc, CastExpr, castTInfo);
4218 
4219   // If the Expr being casted is a ParenListExpr, handle it specially.
4220   // This is not an AltiVec-style cast, so turn the ParenListExpr into a
4221   // sequence of BinOp comma operators.
4222   if (isa<ParenListExpr>(CastExpr)) {
4223     ExprResult Result = MaybeConvertParenListExprToParenExpr(S, CastExpr);
4224     if (Result.isInvalid()) return ExprError();
4225     CastExpr = Result.take();
4226   }
4227 
4228   return BuildCStyleCastExpr(LParenLoc, castTInfo, RParenLoc, CastExpr);
4229 }
4230 
4231 ExprResult Sema::BuildVectorLiteral(SourceLocation LParenLoc,
4232                                     SourceLocation RParenLoc, Expr *E,
4233                                     TypeSourceInfo *TInfo) {
4234   assert((isa<ParenListExpr>(E) || isa<ParenExpr>(E)) &&
4235          "Expected paren or paren list expression");
4236 
4237   Expr **exprs;
4238   unsigned numExprs;
4239   Expr *subExpr;
4240   if (ParenListExpr *PE = dyn_cast<ParenListExpr>(E)) {
4241     exprs = PE->getExprs();
4242     numExprs = PE->getNumExprs();
4243   } else {
4244     subExpr = cast<ParenExpr>(E)->getSubExpr();
4245     exprs = &subExpr;
4246     numExprs = 1;
4247   }
4248 
4249   QualType Ty = TInfo->getType();
4250   assert(Ty->isVectorType() && "Expected vector type");
4251 
4252   SmallVector<Expr *, 8> initExprs;
4253   const VectorType *VTy = Ty->getAs<VectorType>();
4254   unsigned numElems = Ty->getAs<VectorType>()->getNumElements();
4255 
4256   // '(...)' form of vector initialization in AltiVec: the number of
4257   // initializers must be one or must match the size of the vector.
4258   // If a single value is specified in the initializer then it will be
4259   // replicated to all the components of the vector
4260   if (VTy->getVectorKind() == VectorType::AltiVecVector) {
4261     // The number of initializers must be one or must match the size of the
4262     // vector. If a single value is specified in the initializer then it will
4263     // be replicated to all the components of the vector
4264     if (numExprs == 1) {
4265       QualType ElemTy = Ty->getAs<VectorType>()->getElementType();
4266       ExprResult Literal = Owned(exprs[0]);
4267       Literal = ImpCastExprToType(Literal.take(), ElemTy,
4268                                   PrepareScalarCast(Literal, ElemTy));
4269       return BuildCStyleCastExpr(LParenLoc, TInfo, RParenLoc, Literal.take());
4270     }
4271     else if (numExprs < numElems) {
4272       Diag(E->getExprLoc(),
4273            diag::err_incorrect_number_of_vector_initializers);
4274       return ExprError();
4275     }
4276     else
4277       for (unsigned i = 0, e = numExprs; i != e; ++i)
4278         initExprs.push_back(exprs[i]);
4279   }
4280   else {
4281     // For OpenCL, when the number of initializers is a single value,
4282     // it will be replicated to all components of the vector.
4283     if (getLangOptions().OpenCL &&
4284         VTy->getVectorKind() == VectorType::GenericVector &&
4285         numExprs == 1) {
4286         QualType ElemTy = Ty->getAs<VectorType>()->getElementType();
4287         ExprResult Literal = Owned(exprs[0]);
4288         Literal = ImpCastExprToType(Literal.take(), ElemTy,
4289                                     PrepareScalarCast(Literal, ElemTy));
4290         return BuildCStyleCastExpr(LParenLoc, TInfo, RParenLoc, Literal.take());
4291     }
4292 
4293     for (unsigned i = 0, e = numExprs; i != e; ++i)
4294       initExprs.push_back(exprs[i]);
4295   }
4296   // FIXME: This means that pretty-printing the final AST will produce curly
4297   // braces instead of the original commas.
4298   InitListExpr *initE = new (Context) InitListExpr(Context, LParenLoc,
4299                                                    &initExprs[0],
4300                                                    initExprs.size(), RParenLoc);
4301   initE->setType(Ty);
4302   return BuildCompoundLiteralExpr(LParenLoc, TInfo, RParenLoc, initE);
4303 }
4304 
4305 /// This is not an AltiVec-style cast, so turn the ParenListExpr into a sequence
4306 /// of comma binary operators.
4307 ExprResult
4308 Sema::MaybeConvertParenListExprToParenExpr(Scope *S, Expr *OrigExpr) {
4309   ParenListExpr *E = dyn_cast<ParenListExpr>(OrigExpr);
4310   if (!E)
4311     return Owned(OrigExpr);
4312 
4313   ExprResult Result(E->getExpr(0));
4314 
4315   for (unsigned i = 1, e = E->getNumExprs(); i != e && !Result.isInvalid(); ++i)
4316     Result = ActOnBinOp(S, E->getExprLoc(), tok::comma, Result.get(),
4317                         E->getExpr(i));
4318 
4319   if (Result.isInvalid()) return ExprError();
4320 
4321   return ActOnParenExpr(E->getLParenLoc(), E->getRParenLoc(), Result.get());
4322 }
4323 
4324 ExprResult Sema::ActOnParenOrParenListExpr(SourceLocation L,
4325                                            SourceLocation R,
4326                                            MultiExprArg Val) {
4327   unsigned nexprs = Val.size();
4328   Expr **exprs = reinterpret_cast<Expr**>(Val.release());
4329   assert((exprs != 0) && "ActOnParenOrParenListExpr() missing expr list");
4330   Expr *expr;
4331   if (nexprs == 1)
4332     expr = new (Context) ParenExpr(L, R, exprs[0]);
4333   else
4334     expr = new (Context) ParenListExpr(Context, L, exprs, nexprs, R,
4335                                        exprs[nexprs-1]->getType());
4336   return Owned(expr);
4337 }
4338 
4339 /// \brief Emit a specialized diagnostic when one expression is a null pointer
4340 /// constant and the other is not a pointer.  Returns true if a diagnostic is
4341 /// emitted.
4342 bool Sema::DiagnoseConditionalForNull(Expr *LHSExpr, Expr *RHSExpr,
4343                                       SourceLocation QuestionLoc) {
4344   Expr *NullExpr = LHSExpr;
4345   Expr *NonPointerExpr = RHSExpr;
4346   Expr::NullPointerConstantKind NullKind =
4347       NullExpr->isNullPointerConstant(Context,
4348                                       Expr::NPC_ValueDependentIsNotNull);
4349 
4350   if (NullKind == Expr::NPCK_NotNull) {
4351     NullExpr = RHSExpr;
4352     NonPointerExpr = LHSExpr;
4353     NullKind =
4354         NullExpr->isNullPointerConstant(Context,
4355                                         Expr::NPC_ValueDependentIsNotNull);
4356   }
4357 
4358   if (NullKind == Expr::NPCK_NotNull)
4359     return false;
4360 
4361   if (NullKind == Expr::NPCK_ZeroInteger) {
4362     // In this case, check to make sure that we got here from a "NULL"
4363     // string in the source code.
4364     NullExpr = NullExpr->IgnoreParenImpCasts();
4365     SourceLocation loc = NullExpr->getExprLoc();
4366     if (!findMacroSpelling(loc, "NULL"))
4367       return false;
4368   }
4369 
4370   int DiagType = (NullKind == Expr::NPCK_CXX0X_nullptr);
4371   Diag(QuestionLoc, diag::err_typecheck_cond_incompatible_operands_null)
4372       << NonPointerExpr->getType() << DiagType
4373       << NonPointerExpr->getSourceRange();
4374   return true;
4375 }
4376 
4377 /// \brief Return false if the condition expression is valid, true otherwise.
4378 static bool checkCondition(Sema &S, Expr *Cond) {
4379   QualType CondTy = Cond->getType();
4380 
4381   // C99 6.5.15p2
4382   if (CondTy->isScalarType()) return false;
4383 
4384   // OpenCL: Sec 6.3.i says the condition is allowed to be a vector or scalar.
4385   if (S.getLangOptions().OpenCL && CondTy->isVectorType())
4386     return false;
4387 
4388   // Emit the proper error message.
4389   S.Diag(Cond->getLocStart(), S.getLangOptions().OpenCL ?
4390                               diag::err_typecheck_cond_expect_scalar :
4391                               diag::err_typecheck_cond_expect_scalar_or_vector)
4392     << CondTy;
4393   return true;
4394 }
4395 
4396 /// \brief Return false if the two expressions can be converted to a vector,
4397 /// true otherwise
4398 static bool checkConditionalConvertScalarsToVectors(Sema &S, ExprResult &LHS,
4399                                                     ExprResult &RHS,
4400                                                     QualType CondTy) {
4401   // Both operands should be of scalar type.
4402   if (!LHS.get()->getType()->isScalarType()) {
4403     S.Diag(LHS.get()->getLocStart(), diag::err_typecheck_cond_expect_scalar)
4404       << CondTy;
4405     return true;
4406   }
4407   if (!RHS.get()->getType()->isScalarType()) {
4408     S.Diag(RHS.get()->getLocStart(), diag::err_typecheck_cond_expect_scalar)
4409       << CondTy;
4410     return true;
4411   }
4412 
4413   // Implicity convert these scalars to the type of the condition.
4414   LHS = S.ImpCastExprToType(LHS.take(), CondTy, CK_IntegralCast);
4415   RHS = S.ImpCastExprToType(RHS.take(), CondTy, CK_IntegralCast);
4416   return false;
4417 }
4418 
4419 /// \brief Handle when one or both operands are void type.
4420 static QualType checkConditionalVoidType(Sema &S, ExprResult &LHS,
4421                                          ExprResult &RHS) {
4422     Expr *LHSExpr = LHS.get();
4423     Expr *RHSExpr = RHS.get();
4424 
4425     if (!LHSExpr->getType()->isVoidType())
4426       S.Diag(RHSExpr->getLocStart(), diag::ext_typecheck_cond_one_void)
4427         << RHSExpr->getSourceRange();
4428     if (!RHSExpr->getType()->isVoidType())
4429       S.Diag(LHSExpr->getLocStart(), diag::ext_typecheck_cond_one_void)
4430         << LHSExpr->getSourceRange();
4431     LHS = S.ImpCastExprToType(LHS.take(), S.Context.VoidTy, CK_ToVoid);
4432     RHS = S.ImpCastExprToType(RHS.take(), S.Context.VoidTy, CK_ToVoid);
4433     return S.Context.VoidTy;
4434 }
4435 
4436 /// \brief Return false if the NullExpr can be promoted to PointerTy,
4437 /// true otherwise.
4438 static bool checkConditionalNullPointer(Sema &S, ExprResult &NullExpr,
4439                                         QualType PointerTy) {
4440   if ((!PointerTy->isAnyPointerType() && !PointerTy->isBlockPointerType()) ||
4441       !NullExpr.get()->isNullPointerConstant(S.Context,
4442                                             Expr::NPC_ValueDependentIsNull))
4443     return true;
4444 
4445   NullExpr = S.ImpCastExprToType(NullExpr.take(), PointerTy, CK_NullToPointer);
4446   return false;
4447 }
4448 
4449 /// \brief Checks compatibility between two pointers and return the resulting
4450 /// type.
4451 static QualType checkConditionalPointerCompatibility(Sema &S, ExprResult &LHS,
4452                                                      ExprResult &RHS,
4453                                                      SourceLocation Loc) {
4454   QualType LHSTy = LHS.get()->getType();
4455   QualType RHSTy = RHS.get()->getType();
4456 
4457   if (S.Context.hasSameType(LHSTy, RHSTy)) {
4458     // Two identical pointers types are always compatible.
4459     return LHSTy;
4460   }
4461 
4462   QualType lhptee, rhptee;
4463 
4464   // Get the pointee types.
4465   if (const BlockPointerType *LHSBTy = LHSTy->getAs<BlockPointerType>()) {
4466     lhptee = LHSBTy->getPointeeType();
4467     rhptee = RHSTy->castAs<BlockPointerType>()->getPointeeType();
4468   } else {
4469     lhptee = LHSTy->castAs<PointerType>()->getPointeeType();
4470     rhptee = RHSTy->castAs<PointerType>()->getPointeeType();
4471   }
4472 
4473   if (!S.Context.typesAreCompatible(lhptee.getUnqualifiedType(),
4474                                     rhptee.getUnqualifiedType())) {
4475     S.Diag(Loc, diag::warn_typecheck_cond_incompatible_pointers)
4476       << LHSTy << RHSTy << LHS.get()->getSourceRange()
4477       << RHS.get()->getSourceRange();
4478     // In this situation, we assume void* type. No especially good
4479     // reason, but this is what gcc does, and we do have to pick
4480     // to get a consistent AST.
4481     QualType incompatTy = S.Context.getPointerType(S.Context.VoidTy);
4482     LHS = S.ImpCastExprToType(LHS.take(), incompatTy, CK_BitCast);
4483     RHS = S.ImpCastExprToType(RHS.take(), incompatTy, CK_BitCast);
4484     return incompatTy;
4485   }
4486 
4487   // The pointer types are compatible.
4488   // C99 6.5.15p6: If both operands are pointers to compatible types *or* to
4489   // differently qualified versions of compatible types, the result type is
4490   // a pointer to an appropriately qualified version of the *composite*
4491   // type.
4492   // FIXME: Need to calculate the composite type.
4493   // FIXME: Need to add qualifiers
4494 
4495   LHS = S.ImpCastExprToType(LHS.take(), LHSTy, CK_BitCast);
4496   RHS = S.ImpCastExprToType(RHS.take(), LHSTy, CK_BitCast);
4497   return LHSTy;
4498 }
4499 
4500 /// \brief Return the resulting type when the operands are both block pointers.
4501 static QualType checkConditionalBlockPointerCompatibility(Sema &S,
4502                                                           ExprResult &LHS,
4503                                                           ExprResult &RHS,
4504                                                           SourceLocation Loc) {
4505   QualType LHSTy = LHS.get()->getType();
4506   QualType RHSTy = RHS.get()->getType();
4507 
4508   if (!LHSTy->isBlockPointerType() || !RHSTy->isBlockPointerType()) {
4509     if (LHSTy->isVoidPointerType() || RHSTy->isVoidPointerType()) {
4510       QualType destType = S.Context.getPointerType(S.Context.VoidTy);
4511       LHS = S.ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4512       RHS = S.ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4513       return destType;
4514     }
4515     S.Diag(Loc, diag::err_typecheck_cond_incompatible_operands)
4516       << LHSTy << RHSTy << LHS.get()->getSourceRange()
4517       << RHS.get()->getSourceRange();
4518     return QualType();
4519   }
4520 
4521   // We have 2 block pointer types.
4522   return checkConditionalPointerCompatibility(S, LHS, RHS, Loc);
4523 }
4524 
4525 /// \brief Return the resulting type when the operands are both pointers.
4526 static QualType
4527 checkConditionalObjectPointersCompatibility(Sema &S, ExprResult &LHS,
4528                                             ExprResult &RHS,
4529                                             SourceLocation Loc) {
4530   // get the pointer types
4531   QualType LHSTy = LHS.get()->getType();
4532   QualType RHSTy = RHS.get()->getType();
4533 
4534   // get the "pointed to" types
4535   QualType lhptee = LHSTy->getAs<PointerType>()->getPointeeType();
4536   QualType rhptee = RHSTy->getAs<PointerType>()->getPointeeType();
4537 
4538   // ignore qualifiers on void (C99 6.5.15p3, clause 6)
4539   if (lhptee->isVoidType() && rhptee->isIncompleteOrObjectType()) {
4540     // Figure out necessary qualifiers (C99 6.5.15p6)
4541     QualType destPointee
4542       = S.Context.getQualifiedType(lhptee, rhptee.getQualifiers());
4543     QualType destType = S.Context.getPointerType(destPointee);
4544     // Add qualifiers if necessary.
4545     LHS = S.ImpCastExprToType(LHS.take(), destType, CK_NoOp);
4546     // Promote to void*.
4547     RHS = S.ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4548     return destType;
4549   }
4550   if (rhptee->isVoidType() && lhptee->isIncompleteOrObjectType()) {
4551     QualType destPointee
4552       = S.Context.getQualifiedType(rhptee, lhptee.getQualifiers());
4553     QualType destType = S.Context.getPointerType(destPointee);
4554     // Add qualifiers if necessary.
4555     RHS = S.ImpCastExprToType(RHS.take(), destType, CK_NoOp);
4556     // Promote to void*.
4557     LHS = S.ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4558     return destType;
4559   }
4560 
4561   return checkConditionalPointerCompatibility(S, LHS, RHS, Loc);
4562 }
4563 
4564 /// \brief Return false if the first expression is not an integer and the second
4565 /// expression is not a pointer, true otherwise.
4566 static bool checkPointerIntegerMismatch(Sema &S, ExprResult &Int,
4567                                         Expr* PointerExpr, SourceLocation Loc,
4568                                         bool IsIntFirstExpr) {
4569   if (!PointerExpr->getType()->isPointerType() ||
4570       !Int.get()->getType()->isIntegerType())
4571     return false;
4572 
4573   Expr *Expr1 = IsIntFirstExpr ? Int.get() : PointerExpr;
4574   Expr *Expr2 = IsIntFirstExpr ? PointerExpr : Int.get();
4575 
4576   S.Diag(Loc, diag::warn_typecheck_cond_pointer_integer_mismatch)
4577     << Expr1->getType() << Expr2->getType()
4578     << Expr1->getSourceRange() << Expr2->getSourceRange();
4579   Int = S.ImpCastExprToType(Int.take(), PointerExpr->getType(),
4580                             CK_IntegralToPointer);
4581   return true;
4582 }
4583 
4584 /// Note that LHS is not null here, even if this is the gnu "x ?: y" extension.
4585 /// In that case, LHS = cond.
4586 /// C99 6.5.15
4587 QualType Sema::CheckConditionalOperands(ExprResult &Cond, ExprResult &LHS,
4588                                         ExprResult &RHS, ExprValueKind &VK,
4589                                         ExprObjectKind &OK,
4590                                         SourceLocation QuestionLoc) {
4591 
4592   ExprResult LHSResult = CheckPlaceholderExpr(LHS.get());
4593   if (!LHSResult.isUsable()) return QualType();
4594   LHS = move(LHSResult);
4595 
4596   ExprResult RHSResult = CheckPlaceholderExpr(RHS.get());
4597   if (!RHSResult.isUsable()) return QualType();
4598   RHS = move(RHSResult);
4599 
4600   // C++ is sufficiently different to merit its own checker.
4601   if (getLangOptions().CPlusPlus)
4602     return CXXCheckConditionalOperands(Cond, LHS, RHS, VK, OK, QuestionLoc);
4603 
4604   VK = VK_RValue;
4605   OK = OK_Ordinary;
4606 
4607   Cond = UsualUnaryConversions(Cond.take());
4608   if (Cond.isInvalid())
4609     return QualType();
4610   LHS = UsualUnaryConversions(LHS.take());
4611   if (LHS.isInvalid())
4612     return QualType();
4613   RHS = UsualUnaryConversions(RHS.take());
4614   if (RHS.isInvalid())
4615     return QualType();
4616 
4617   QualType CondTy = Cond.get()->getType();
4618   QualType LHSTy = LHS.get()->getType();
4619   QualType RHSTy = RHS.get()->getType();
4620 
4621   // first, check the condition.
4622   if (checkCondition(*this, Cond.get()))
4623     return QualType();
4624 
4625   // Now check the two expressions.
4626   if (LHSTy->isVectorType() || RHSTy->isVectorType())
4627     return CheckVectorOperands(LHS, RHS, QuestionLoc, /*isCompAssign*/false);
4628 
4629   // OpenCL: If the condition is a vector, and both operands are scalar,
4630   // attempt to implicity convert them to the vector type to act like the
4631   // built in select.
4632   if (getLangOptions().OpenCL && CondTy->isVectorType())
4633     if (checkConditionalConvertScalarsToVectors(*this, LHS, RHS, CondTy))
4634       return QualType();
4635 
4636   // If both operands have arithmetic type, do the usual arithmetic conversions
4637   // to find a common type: C99 6.5.15p3,5.
4638   if (LHSTy->isArithmeticType() && RHSTy->isArithmeticType()) {
4639     UsualArithmeticConversions(LHS, RHS);
4640     if (LHS.isInvalid() || RHS.isInvalid())
4641       return QualType();
4642     return LHS.get()->getType();
4643   }
4644 
4645   // If both operands are the same structure or union type, the result is that
4646   // type.
4647   if (const RecordType *LHSRT = LHSTy->getAs<RecordType>()) {    // C99 6.5.15p3
4648     if (const RecordType *RHSRT = RHSTy->getAs<RecordType>())
4649       if (LHSRT->getDecl() == RHSRT->getDecl())
4650         // "If both the operands have structure or union type, the result has
4651         // that type."  This implies that CV qualifiers are dropped.
4652         return LHSTy.getUnqualifiedType();
4653     // FIXME: Type of conditional expression must be complete in C mode.
4654   }
4655 
4656   // C99 6.5.15p5: "If both operands have void type, the result has void type."
4657   // The following || allows only one side to be void (a GCC-ism).
4658   if (LHSTy->isVoidType() || RHSTy->isVoidType()) {
4659     return checkConditionalVoidType(*this, LHS, RHS);
4660   }
4661 
4662   // C99 6.5.15p6 - "if one operand is a null pointer constant, the result has
4663   // the type of the other operand."
4664   if (!checkConditionalNullPointer(*this, RHS, LHSTy)) return LHSTy;
4665   if (!checkConditionalNullPointer(*this, LHS, RHSTy)) return RHSTy;
4666 
4667   // All objective-c pointer type analysis is done here.
4668   QualType compositeType = FindCompositeObjCPointerType(LHS, RHS,
4669                                                         QuestionLoc);
4670   if (LHS.isInvalid() || RHS.isInvalid())
4671     return QualType();
4672   if (!compositeType.isNull())
4673     return compositeType;
4674 
4675 
4676   // Handle block pointer types.
4677   if (LHSTy->isBlockPointerType() || RHSTy->isBlockPointerType())
4678     return checkConditionalBlockPointerCompatibility(*this, LHS, RHS,
4679                                                      QuestionLoc);
4680 
4681   // Check constraints for C object pointers types (C99 6.5.15p3,6).
4682   if (LHSTy->isPointerType() && RHSTy->isPointerType())
4683     return checkConditionalObjectPointersCompatibility(*this, LHS, RHS,
4684                                                        QuestionLoc);
4685 
4686   // GCC compatibility: soften pointer/integer mismatch.  Note that
4687   // null pointers have been filtered out by this point.
4688   if (checkPointerIntegerMismatch(*this, LHS, RHS.get(), QuestionLoc,
4689       /*isIntFirstExpr=*/true))
4690     return RHSTy;
4691   if (checkPointerIntegerMismatch(*this, RHS, LHS.get(), QuestionLoc,
4692       /*isIntFirstExpr=*/false))
4693     return LHSTy;
4694 
4695   // Emit a better diagnostic if one of the expressions is a null pointer
4696   // constant and the other is not a pointer type. In this case, the user most
4697   // likely forgot to take the address of the other expression.
4698   if (DiagnoseConditionalForNull(LHS.get(), RHS.get(), QuestionLoc))
4699     return QualType();
4700 
4701   // Otherwise, the operands are not compatible.
4702   Diag(QuestionLoc, diag::err_typecheck_cond_incompatible_operands)
4703     << LHSTy << RHSTy << LHS.get()->getSourceRange()
4704     << RHS.get()->getSourceRange();
4705   return QualType();
4706 }
4707 
4708 /// FindCompositeObjCPointerType - Helper method to find composite type of
4709 /// two objective-c pointer types of the two input expressions.
4710 QualType Sema::FindCompositeObjCPointerType(ExprResult &LHS, ExprResult &RHS,
4711                                             SourceLocation QuestionLoc) {
4712   QualType LHSTy = LHS.get()->getType();
4713   QualType RHSTy = RHS.get()->getType();
4714 
4715   // Handle things like Class and struct objc_class*.  Here we case the result
4716   // to the pseudo-builtin, because that will be implicitly cast back to the
4717   // redefinition type if an attempt is made to access its fields.
4718   if (LHSTy->isObjCClassType() &&
4719       (Context.hasSameType(RHSTy, Context.getObjCClassRedefinitionType()))) {
4720     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_CPointerToObjCPointerCast);
4721     return LHSTy;
4722   }
4723   if (RHSTy->isObjCClassType() &&
4724       (Context.hasSameType(LHSTy, Context.getObjCClassRedefinitionType()))) {
4725     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_CPointerToObjCPointerCast);
4726     return RHSTy;
4727   }
4728   // And the same for struct objc_object* / id
4729   if (LHSTy->isObjCIdType() &&
4730       (Context.hasSameType(RHSTy, Context.getObjCIdRedefinitionType()))) {
4731     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_CPointerToObjCPointerCast);
4732     return LHSTy;
4733   }
4734   if (RHSTy->isObjCIdType() &&
4735       (Context.hasSameType(LHSTy, Context.getObjCIdRedefinitionType()))) {
4736     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_CPointerToObjCPointerCast);
4737     return RHSTy;
4738   }
4739   // And the same for struct objc_selector* / SEL
4740   if (Context.isObjCSelType(LHSTy) &&
4741       (Context.hasSameType(RHSTy, Context.getObjCSelRedefinitionType()))) {
4742     RHS = ImpCastExprToType(RHS.take(), LHSTy, CK_BitCast);
4743     return LHSTy;
4744   }
4745   if (Context.isObjCSelType(RHSTy) &&
4746       (Context.hasSameType(LHSTy, Context.getObjCSelRedefinitionType()))) {
4747     LHS = ImpCastExprToType(LHS.take(), RHSTy, CK_BitCast);
4748     return RHSTy;
4749   }
4750   // Check constraints for Objective-C object pointers types.
4751   if (LHSTy->isObjCObjectPointerType() && RHSTy->isObjCObjectPointerType()) {
4752 
4753     if (Context.getCanonicalType(LHSTy) == Context.getCanonicalType(RHSTy)) {
4754       // Two identical object pointer types are always compatible.
4755       return LHSTy;
4756     }
4757     const ObjCObjectPointerType *LHSOPT = LHSTy->castAs<ObjCObjectPointerType>();
4758     const ObjCObjectPointerType *RHSOPT = RHSTy->castAs<ObjCObjectPointerType>();
4759     QualType compositeType = LHSTy;
4760 
4761     // If both operands are interfaces and either operand can be
4762     // assigned to the other, use that type as the composite
4763     // type. This allows
4764     //   xxx ? (A*) a : (B*) b
4765     // where B is a subclass of A.
4766     //
4767     // Additionally, as for assignment, if either type is 'id'
4768     // allow silent coercion. Finally, if the types are
4769     // incompatible then make sure to use 'id' as the composite
4770     // type so the result is acceptable for sending messages to.
4771 
4772     // FIXME: Consider unifying with 'areComparableObjCPointerTypes'.
4773     // It could return the composite type.
4774     if (Context.canAssignObjCInterfaces(LHSOPT, RHSOPT)) {
4775       compositeType = RHSOPT->isObjCBuiltinType() ? RHSTy : LHSTy;
4776     } else if (Context.canAssignObjCInterfaces(RHSOPT, LHSOPT)) {
4777       compositeType = LHSOPT->isObjCBuiltinType() ? LHSTy : RHSTy;
4778     } else if ((LHSTy->isObjCQualifiedIdType() ||
4779                 RHSTy->isObjCQualifiedIdType()) &&
4780                Context.ObjCQualifiedIdTypesAreCompatible(LHSTy, RHSTy, true)) {
4781       // Need to handle "id<xx>" explicitly.
4782       // GCC allows qualified id and any Objective-C type to devolve to
4783       // id. Currently localizing to here until clear this should be
4784       // part of ObjCQualifiedIdTypesAreCompatible.
4785       compositeType = Context.getObjCIdType();
4786     } else if (LHSTy->isObjCIdType() || RHSTy->isObjCIdType()) {
4787       compositeType = Context.getObjCIdType();
4788     } else if (!(compositeType =
4789                  Context.areCommonBaseCompatible(LHSOPT, RHSOPT)).isNull())
4790       ;
4791     else {
4792       Diag(QuestionLoc, diag::ext_typecheck_cond_incompatible_operands)
4793       << LHSTy << RHSTy
4794       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
4795       QualType incompatTy = Context.getObjCIdType();
4796       LHS = ImpCastExprToType(LHS.take(), incompatTy, CK_BitCast);
4797       RHS = ImpCastExprToType(RHS.take(), incompatTy, CK_BitCast);
4798       return incompatTy;
4799     }
4800     // The object pointer types are compatible.
4801     LHS = ImpCastExprToType(LHS.take(), compositeType, CK_BitCast);
4802     RHS = ImpCastExprToType(RHS.take(), compositeType, CK_BitCast);
4803     return compositeType;
4804   }
4805   // Check Objective-C object pointer types and 'void *'
4806   if (LHSTy->isVoidPointerType() && RHSTy->isObjCObjectPointerType()) {
4807     QualType lhptee = LHSTy->getAs<PointerType>()->getPointeeType();
4808     QualType rhptee = RHSTy->getAs<ObjCObjectPointerType>()->getPointeeType();
4809     QualType destPointee
4810     = Context.getQualifiedType(lhptee, rhptee.getQualifiers());
4811     QualType destType = Context.getPointerType(destPointee);
4812     // Add qualifiers if necessary.
4813     LHS = ImpCastExprToType(LHS.take(), destType, CK_NoOp);
4814     // Promote to void*.
4815     RHS = ImpCastExprToType(RHS.take(), destType, CK_BitCast);
4816     return destType;
4817   }
4818   if (LHSTy->isObjCObjectPointerType() && RHSTy->isVoidPointerType()) {
4819     QualType lhptee = LHSTy->getAs<ObjCObjectPointerType>()->getPointeeType();
4820     QualType rhptee = RHSTy->getAs<PointerType>()->getPointeeType();
4821     QualType destPointee
4822     = Context.getQualifiedType(rhptee, lhptee.getQualifiers());
4823     QualType destType = Context.getPointerType(destPointee);
4824     // Add qualifiers if necessary.
4825     RHS = ImpCastExprToType(RHS.take(), destType, CK_NoOp);
4826     // Promote to void*.
4827     LHS = ImpCastExprToType(LHS.take(), destType, CK_BitCast);
4828     return destType;
4829   }
4830   return QualType();
4831 }
4832 
4833 /// SuggestParentheses - Emit a note with a fixit hint that wraps
4834 /// ParenRange in parentheses.
4835 static void SuggestParentheses(Sema &Self, SourceLocation Loc,
4836                                const PartialDiagnostic &Note,
4837                                SourceRange ParenRange) {
4838   SourceLocation EndLoc = Self.PP.getLocForEndOfToken(ParenRange.getEnd());
4839   if (ParenRange.getBegin().isFileID() && ParenRange.getEnd().isFileID() &&
4840       EndLoc.isValid()) {
4841     Self.Diag(Loc, Note)
4842       << FixItHint::CreateInsertion(ParenRange.getBegin(), "(")
4843       << FixItHint::CreateInsertion(EndLoc, ")");
4844   } else {
4845     // We can't display the parentheses, so just show the bare note.
4846     Self.Diag(Loc, Note) << ParenRange;
4847   }
4848 }
4849 
4850 static bool IsArithmeticOp(BinaryOperatorKind Opc) {
4851   return Opc >= BO_Mul && Opc <= BO_Shr;
4852 }
4853 
4854 /// IsArithmeticBinaryExpr - Returns true if E is an arithmetic binary
4855 /// expression, either using a built-in or overloaded operator,
4856 /// and sets *OpCode to the opcode and *RHSExprs to the right-hand side
4857 /// expression.
4858 static bool IsArithmeticBinaryExpr(Expr *E, BinaryOperatorKind *Opcode,
4859                                    Expr **RHSExprs) {
4860   // Don't strip parenthesis: we should not warn if E is in parenthesis.
4861   E = E->IgnoreImpCasts();
4862   E = E->IgnoreConversionOperator();
4863   E = E->IgnoreImpCasts();
4864 
4865   // Built-in binary operator.
4866   if (BinaryOperator *OP = dyn_cast<BinaryOperator>(E)) {
4867     if (IsArithmeticOp(OP->getOpcode())) {
4868       *Opcode = OP->getOpcode();
4869       *RHSExprs = OP->getRHS();
4870       return true;
4871     }
4872   }
4873 
4874   // Overloaded operator.
4875   if (CXXOperatorCallExpr *Call = dyn_cast<CXXOperatorCallExpr>(E)) {
4876     if (Call->getNumArgs() != 2)
4877       return false;
4878 
4879     // Make sure this is really a binary operator that is safe to pass into
4880     // BinaryOperator::getOverloadedOpcode(), e.g. it's not a subscript op.
4881     OverloadedOperatorKind OO = Call->getOperator();
4882     if (OO < OO_Plus || OO > OO_Arrow)
4883       return false;
4884 
4885     BinaryOperatorKind OpKind = BinaryOperator::getOverloadedOpcode(OO);
4886     if (IsArithmeticOp(OpKind)) {
4887       *Opcode = OpKind;
4888       *RHSExprs = Call->getArg(1);
4889       return true;
4890     }
4891   }
4892 
4893   return false;
4894 }
4895 
4896 static bool IsLogicOp(BinaryOperatorKind Opc) {
4897   return (Opc >= BO_LT && Opc <= BO_NE) || (Opc >= BO_LAnd && Opc <= BO_LOr);
4898 }
4899 
4900 /// ExprLooksBoolean - Returns true if E looks boolean, i.e. it has boolean type
4901 /// or is a logical expression such as (x==y) which has int type, but is
4902 /// commonly interpreted as boolean.
4903 static bool ExprLooksBoolean(Expr *E) {
4904   E = E->IgnoreParenImpCasts();
4905 
4906   if (E->getType()->isBooleanType())
4907     return true;
4908   if (BinaryOperator *OP = dyn_cast<BinaryOperator>(E))
4909     return IsLogicOp(OP->getOpcode());
4910   if (UnaryOperator *OP = dyn_cast<UnaryOperator>(E))
4911     return OP->getOpcode() == UO_LNot;
4912 
4913   return false;
4914 }
4915 
4916 /// DiagnoseConditionalPrecedence - Emit a warning when a conditional operator
4917 /// and binary operator are mixed in a way that suggests the programmer assumed
4918 /// the conditional operator has higher precedence, for example:
4919 /// "int x = a + someBinaryCondition ? 1 : 2".
4920 static void DiagnoseConditionalPrecedence(Sema &Self,
4921                                           SourceLocation OpLoc,
4922                                           Expr *Condition,
4923                                           Expr *LHSExpr,
4924                                           Expr *RHSExpr) {
4925   BinaryOperatorKind CondOpcode;
4926   Expr *CondRHS;
4927 
4928   if (!IsArithmeticBinaryExpr(Condition, &CondOpcode, &CondRHS))
4929     return;
4930   if (!ExprLooksBoolean(CondRHS))
4931     return;
4932 
4933   // The condition is an arithmetic binary expression, with a right-
4934   // hand side that looks boolean, so warn.
4935 
4936   Self.Diag(OpLoc, diag::warn_precedence_conditional)
4937       << Condition->getSourceRange()
4938       << BinaryOperator::getOpcodeStr(CondOpcode);
4939 
4940   SuggestParentheses(Self, OpLoc,
4941     Self.PDiag(diag::note_precedence_conditional_silence)
4942       << BinaryOperator::getOpcodeStr(CondOpcode),
4943     SourceRange(Condition->getLocStart(), Condition->getLocEnd()));
4944 
4945   SuggestParentheses(Self, OpLoc,
4946     Self.PDiag(diag::note_precedence_conditional_first),
4947     SourceRange(CondRHS->getLocStart(), RHSExpr->getLocEnd()));
4948 }
4949 
4950 /// ActOnConditionalOp - Parse a ?: operation.  Note that 'LHS' may be null
4951 /// in the case of a the GNU conditional expr extension.
4952 ExprResult Sema::ActOnConditionalOp(SourceLocation QuestionLoc,
4953                                     SourceLocation ColonLoc,
4954                                     Expr *CondExpr, Expr *LHSExpr,
4955                                     Expr *RHSExpr) {
4956   // If this is the gnu "x ?: y" extension, analyze the types as though the LHS
4957   // was the condition.
4958   OpaqueValueExpr *opaqueValue = 0;
4959   Expr *commonExpr = 0;
4960   if (LHSExpr == 0) {
4961     commonExpr = CondExpr;
4962 
4963     // We usually want to apply unary conversions *before* saving, except
4964     // in the special case of a C++ l-value conditional.
4965     if (!(getLangOptions().CPlusPlus
4966           && !commonExpr->isTypeDependent()
4967           && commonExpr->getValueKind() == RHSExpr->getValueKind()
4968           && commonExpr->isGLValue()
4969           && commonExpr->isOrdinaryOrBitFieldObject()
4970           && RHSExpr->isOrdinaryOrBitFieldObject()
4971           && Context.hasSameType(commonExpr->getType(), RHSExpr->getType()))) {
4972       ExprResult commonRes = UsualUnaryConversions(commonExpr);
4973       if (commonRes.isInvalid())
4974         return ExprError();
4975       commonExpr = commonRes.take();
4976     }
4977 
4978     opaqueValue = new (Context) OpaqueValueExpr(commonExpr->getExprLoc(),
4979                                                 commonExpr->getType(),
4980                                                 commonExpr->getValueKind(),
4981                                                 commonExpr->getObjectKind());
4982     LHSExpr = CondExpr = opaqueValue;
4983   }
4984 
4985   ExprValueKind VK = VK_RValue;
4986   ExprObjectKind OK = OK_Ordinary;
4987   ExprResult Cond = Owned(CondExpr), LHS = Owned(LHSExpr), RHS = Owned(RHSExpr);
4988   QualType result = CheckConditionalOperands(Cond, LHS, RHS,
4989                                              VK, OK, QuestionLoc);
4990   if (result.isNull() || Cond.isInvalid() || LHS.isInvalid() ||
4991       RHS.isInvalid())
4992     return ExprError();
4993 
4994   DiagnoseConditionalPrecedence(*this, QuestionLoc, Cond.get(), LHS.get(),
4995                                 RHS.get());
4996 
4997   if (!commonExpr)
4998     return Owned(new (Context) ConditionalOperator(Cond.take(), QuestionLoc,
4999                                                    LHS.take(), ColonLoc,
5000                                                    RHS.take(), result, VK, OK));
5001 
5002   return Owned(new (Context)
5003     BinaryConditionalOperator(commonExpr, opaqueValue, Cond.take(), LHS.take(),
5004                               RHS.take(), QuestionLoc, ColonLoc, result, VK,
5005                               OK));
5006 }
5007 
5008 // checkPointerTypesForAssignment - This is a very tricky routine (despite
5009 // being closely modeled after the C99 spec:-). The odd characteristic of this
5010 // routine is it effectively iqnores the qualifiers on the top level pointee.
5011 // This circumvents the usual type rules specified in 6.2.7p1 & 6.7.5.[1-3].
5012 // FIXME: add a couple examples in this comment.
5013 static Sema::AssignConvertType
5014 checkPointerTypesForAssignment(Sema &S, QualType LHSType, QualType RHSType) {
5015   assert(LHSType.isCanonical() && "LHS not canonicalized!");
5016   assert(RHSType.isCanonical() && "RHS not canonicalized!");
5017 
5018   // get the "pointed to" type (ignoring qualifiers at the top level)
5019   const Type *lhptee, *rhptee;
5020   Qualifiers lhq, rhq;
5021   llvm::tie(lhptee, lhq) = cast<PointerType>(LHSType)->getPointeeType().split();
5022   llvm::tie(rhptee, rhq) = cast<PointerType>(RHSType)->getPointeeType().split();
5023 
5024   Sema::AssignConvertType ConvTy = Sema::Compatible;
5025 
5026   // C99 6.5.16.1p1: This following citation is common to constraints
5027   // 3 & 4 (below). ...and the type *pointed to* by the left has all the
5028   // qualifiers of the type *pointed to* by the right;
5029   Qualifiers lq;
5030 
5031   // As a special case, 'non-__weak A *' -> 'non-__weak const *' is okay.
5032   if (lhq.getObjCLifetime() != rhq.getObjCLifetime() &&
5033       lhq.compatiblyIncludesObjCLifetime(rhq)) {
5034     // Ignore lifetime for further calculation.
5035     lhq.removeObjCLifetime();
5036     rhq.removeObjCLifetime();
5037   }
5038 
5039   if (!lhq.compatiblyIncludes(rhq)) {
5040     // Treat address-space mismatches as fatal.  TODO: address subspaces
5041     if (lhq.getAddressSpace() != rhq.getAddressSpace())
5042       ConvTy = Sema::IncompatiblePointerDiscardsQualifiers;
5043 
5044     // It's okay to add or remove GC or lifetime qualifiers when converting to
5045     // and from void*.
5046     else if (lhq.withoutObjCGCAttr().withoutObjCGLifetime()
5047                         .compatiblyIncludes(
5048                                 rhq.withoutObjCGCAttr().withoutObjCGLifetime())
5049              && (lhptee->isVoidType() || rhptee->isVoidType()))
5050       ; // keep old
5051 
5052     // Treat lifetime mismatches as fatal.
5053     else if (lhq.getObjCLifetime() != rhq.getObjCLifetime())
5054       ConvTy = Sema::IncompatiblePointerDiscardsQualifiers;
5055 
5056     // For GCC compatibility, other qualifier mismatches are treated
5057     // as still compatible in C.
5058     else ConvTy = Sema::CompatiblePointerDiscardsQualifiers;
5059   }
5060 
5061   // C99 6.5.16.1p1 (constraint 4): If one operand is a pointer to an object or
5062   // incomplete type and the other is a pointer to a qualified or unqualified
5063   // version of void...
5064   if (lhptee->isVoidType()) {
5065     if (rhptee->isIncompleteOrObjectType())
5066       return ConvTy;
5067 
5068     // As an extension, we allow cast to/from void* to function pointer.
5069     assert(rhptee->isFunctionType());
5070     return Sema::FunctionVoidPointer;
5071   }
5072 
5073   if (rhptee->isVoidType()) {
5074     if (lhptee->isIncompleteOrObjectType())
5075       return ConvTy;
5076 
5077     // As an extension, we allow cast to/from void* to function pointer.
5078     assert(lhptee->isFunctionType());
5079     return Sema::FunctionVoidPointer;
5080   }
5081 
5082   // C99 6.5.16.1p1 (constraint 3): both operands are pointers to qualified or
5083   // unqualified versions of compatible types, ...
5084   QualType ltrans = QualType(lhptee, 0), rtrans = QualType(rhptee, 0);
5085   if (!S.Context.typesAreCompatible(ltrans, rtrans)) {
5086     // Check if the pointee types are compatible ignoring the sign.
5087     // We explicitly check for char so that we catch "char" vs
5088     // "unsigned char" on systems where "char" is unsigned.
5089     if (lhptee->isCharType())
5090       ltrans = S.Context.UnsignedCharTy;
5091     else if (lhptee->hasSignedIntegerRepresentation())
5092       ltrans = S.Context.getCorrespondingUnsignedType(ltrans);
5093 
5094     if (rhptee->isCharType())
5095       rtrans = S.Context.UnsignedCharTy;
5096     else if (rhptee->hasSignedIntegerRepresentation())
5097       rtrans = S.Context.getCorrespondingUnsignedType(rtrans);
5098 
5099     if (ltrans == rtrans) {
5100       // Types are compatible ignoring the sign. Qualifier incompatibility
5101       // takes priority over sign incompatibility because the sign
5102       // warning can be disabled.
5103       if (ConvTy != Sema::Compatible)
5104         return ConvTy;
5105 
5106       return Sema::IncompatiblePointerSign;
5107     }
5108 
5109     // If we are a multi-level pointer, it's possible that our issue is simply
5110     // one of qualification - e.g. char ** -> const char ** is not allowed. If
5111     // the eventual target type is the same and the pointers have the same
5112     // level of indirection, this must be the issue.
5113     if (isa<PointerType>(lhptee) && isa<PointerType>(rhptee)) {
5114       do {
5115         lhptee = cast<PointerType>(lhptee)->getPointeeType().getTypePtr();
5116         rhptee = cast<PointerType>(rhptee)->getPointeeType().getTypePtr();
5117       } while (isa<PointerType>(lhptee) && isa<PointerType>(rhptee));
5118 
5119       if (lhptee == rhptee)
5120         return Sema::IncompatibleNestedPointerQualifiers;
5121     }
5122 
5123     // General pointer incompatibility takes priority over qualifiers.
5124     return Sema::IncompatiblePointer;
5125   }
5126   if (!S.getLangOptions().CPlusPlus &&
5127       S.IsNoReturnConversion(ltrans, rtrans, ltrans))
5128     return Sema::IncompatiblePointer;
5129   return ConvTy;
5130 }
5131 
5132 /// checkBlockPointerTypesForAssignment - This routine determines whether two
5133 /// block pointer types are compatible or whether a block and normal pointer
5134 /// are compatible. It is more restrict than comparing two function pointer
5135 // types.
5136 static Sema::AssignConvertType
5137 checkBlockPointerTypesForAssignment(Sema &S, QualType LHSType,
5138                                     QualType RHSType) {
5139   assert(LHSType.isCanonical() && "LHS not canonicalized!");
5140   assert(RHSType.isCanonical() && "RHS not canonicalized!");
5141 
5142   QualType lhptee, rhptee;
5143 
5144   // get the "pointed to" type (ignoring qualifiers at the top level)
5145   lhptee = cast<BlockPointerType>(LHSType)->getPointeeType();
5146   rhptee = cast<BlockPointerType>(RHSType)->getPointeeType();
5147 
5148   // In C++, the types have to match exactly.
5149   if (S.getLangOptions().CPlusPlus)
5150     return Sema::IncompatibleBlockPointer;
5151 
5152   Sema::AssignConvertType ConvTy = Sema::Compatible;
5153 
5154   // For blocks we enforce that qualifiers are identical.
5155   if (lhptee.getLocalQualifiers() != rhptee.getLocalQualifiers())
5156     ConvTy = Sema::CompatiblePointerDiscardsQualifiers;
5157 
5158   if (!S.Context.typesAreBlockPointerCompatible(LHSType, RHSType))
5159     return Sema::IncompatibleBlockPointer;
5160 
5161   return ConvTy;
5162 }
5163 
5164 /// checkObjCPointerTypesForAssignment - Compares two objective-c pointer types
5165 /// for assignment compatibility.
5166 static Sema::AssignConvertType
5167 checkObjCPointerTypesForAssignment(Sema &S, QualType LHSType,
5168                                    QualType RHSType) {
5169   assert(LHSType.isCanonical() && "LHS was not canonicalized!");
5170   assert(RHSType.isCanonical() && "RHS was not canonicalized!");
5171 
5172   if (LHSType->isObjCBuiltinType()) {
5173     // Class is not compatible with ObjC object pointers.
5174     if (LHSType->isObjCClassType() && !RHSType->isObjCBuiltinType() &&
5175         !RHSType->isObjCQualifiedClassType())
5176       return Sema::IncompatiblePointer;
5177     return Sema::Compatible;
5178   }
5179   if (RHSType->isObjCBuiltinType()) {
5180     if (RHSType->isObjCClassType() && !LHSType->isObjCBuiltinType() &&
5181         !LHSType->isObjCQualifiedClassType())
5182       return Sema::IncompatiblePointer;
5183     return Sema::Compatible;
5184   }
5185   QualType lhptee = LHSType->getAs<ObjCObjectPointerType>()->getPointeeType();
5186   QualType rhptee = RHSType->getAs<ObjCObjectPointerType>()->getPointeeType();
5187 
5188   if (!lhptee.isAtLeastAsQualifiedAs(rhptee))
5189     return Sema::CompatiblePointerDiscardsQualifiers;
5190 
5191   if (S.Context.typesAreCompatible(LHSType, RHSType))
5192     return Sema::Compatible;
5193   if (LHSType->isObjCQualifiedIdType() || RHSType->isObjCQualifiedIdType())
5194     return Sema::IncompatibleObjCQualifiedId;
5195   return Sema::IncompatiblePointer;
5196 }
5197 
5198 Sema::AssignConvertType
5199 Sema::CheckAssignmentConstraints(SourceLocation Loc,
5200                                  QualType LHSType, QualType RHSType) {
5201   // Fake up an opaque expression.  We don't actually care about what
5202   // cast operations are required, so if CheckAssignmentConstraints
5203   // adds casts to this they'll be wasted, but fortunately that doesn't
5204   // usually happen on valid code.
5205   OpaqueValueExpr RHSExpr(Loc, RHSType, VK_RValue);
5206   ExprResult RHSPtr = &RHSExpr;
5207   CastKind K = CK_Invalid;
5208 
5209   return CheckAssignmentConstraints(LHSType, RHSPtr, K);
5210 }
5211 
5212 /// CheckAssignmentConstraints (C99 6.5.16) - This routine currently
5213 /// has code to accommodate several GCC extensions when type checking
5214 /// pointers. Here are some objectionable examples that GCC considers warnings:
5215 ///
5216 ///  int a, *pint;
5217 ///  short *pshort;
5218 ///  struct foo *pfoo;
5219 ///
5220 ///  pint = pshort; // warning: assignment from incompatible pointer type
5221 ///  a = pint; // warning: assignment makes integer from pointer without a cast
5222 ///  pint = a; // warning: assignment makes pointer from integer without a cast
5223 ///  pint = pfoo; // warning: assignment from incompatible pointer type
5224 ///
5225 /// As a result, the code for dealing with pointers is more complex than the
5226 /// C99 spec dictates.
5227 ///
5228 /// Sets 'Kind' for any result kind except Incompatible.
5229 Sema::AssignConvertType
5230 Sema::CheckAssignmentConstraints(QualType LHSType, ExprResult &RHS,
5231                                  CastKind &Kind) {
5232   QualType RHSType = RHS.get()->getType();
5233   QualType OrigLHSType = LHSType;
5234 
5235   // Get canonical types.  We're not formatting these types, just comparing
5236   // them.
5237   LHSType = Context.getCanonicalType(LHSType).getUnqualifiedType();
5238   RHSType = Context.getCanonicalType(RHSType).getUnqualifiedType();
5239 
5240   // We can't do assignment from/to atomics yet.
5241   if (LHSType->isAtomicType())
5242     return Incompatible;
5243 
5244   // Common case: no conversion required.
5245   if (LHSType == RHSType) {
5246     Kind = CK_NoOp;
5247     return Compatible;
5248   }
5249 
5250   // If the left-hand side is a reference type, then we are in a
5251   // (rare!) case where we've allowed the use of references in C,
5252   // e.g., as a parameter type in a built-in function. In this case,
5253   // just make sure that the type referenced is compatible with the
5254   // right-hand side type. The caller is responsible for adjusting
5255   // LHSType so that the resulting expression does not have reference
5256   // type.
5257   if (const ReferenceType *LHSTypeRef = LHSType->getAs<ReferenceType>()) {
5258     if (Context.typesAreCompatible(LHSTypeRef->getPointeeType(), RHSType)) {
5259       Kind = CK_LValueBitCast;
5260       return Compatible;
5261     }
5262     return Incompatible;
5263   }
5264 
5265   // Allow scalar to ExtVector assignments, and assignments of an ExtVector type
5266   // to the same ExtVector type.
5267   if (LHSType->isExtVectorType()) {
5268     if (RHSType->isExtVectorType())
5269       return Incompatible;
5270     if (RHSType->isArithmeticType()) {
5271       // CK_VectorSplat does T -> vector T, so first cast to the
5272       // element type.
5273       QualType elType = cast<ExtVectorType>(LHSType)->getElementType();
5274       if (elType != RHSType) {
5275         Kind = PrepareScalarCast(RHS, elType);
5276         RHS = ImpCastExprToType(RHS.take(), elType, Kind);
5277       }
5278       Kind = CK_VectorSplat;
5279       return Compatible;
5280     }
5281   }
5282 
5283   // Conversions to or from vector type.
5284   if (LHSType->isVectorType() || RHSType->isVectorType()) {
5285     if (LHSType->isVectorType() && RHSType->isVectorType()) {
5286       // Allow assignments of an AltiVec vector type to an equivalent GCC
5287       // vector type and vice versa
5288       if (Context.areCompatibleVectorTypes(LHSType, RHSType)) {
5289         Kind = CK_BitCast;
5290         return Compatible;
5291       }
5292 
5293       // If we are allowing lax vector conversions, and LHS and RHS are both
5294       // vectors, the total size only needs to be the same. This is a bitcast;
5295       // no bits are changed but the result type is different.
5296       if (getLangOptions().LaxVectorConversions &&
5297           (Context.getTypeSize(LHSType) == Context.getTypeSize(RHSType))) {
5298         Kind = CK_BitCast;
5299         return IncompatibleVectors;
5300       }
5301     }
5302     return Incompatible;
5303   }
5304 
5305   // Arithmetic conversions.
5306   if (LHSType->isArithmeticType() && RHSType->isArithmeticType() &&
5307       !(getLangOptions().CPlusPlus && LHSType->isEnumeralType())) {
5308     Kind = PrepareScalarCast(RHS, LHSType);
5309     return Compatible;
5310   }
5311 
5312   // Conversions to normal pointers.
5313   if (const PointerType *LHSPointer = dyn_cast<PointerType>(LHSType)) {
5314     // U* -> T*
5315     if (isa<PointerType>(RHSType)) {
5316       Kind = CK_BitCast;
5317       return checkPointerTypesForAssignment(*this, LHSType, RHSType);
5318     }
5319 
5320     // int -> T*
5321     if (RHSType->isIntegerType()) {
5322       Kind = CK_IntegralToPointer; // FIXME: null?
5323       return IntToPointer;
5324     }
5325 
5326     // C pointers are not compatible with ObjC object pointers,
5327     // with two exceptions:
5328     if (isa<ObjCObjectPointerType>(RHSType)) {
5329       //  - conversions to void*
5330       if (LHSPointer->getPointeeType()->isVoidType()) {
5331         Kind = CK_BitCast;
5332         return Compatible;
5333       }
5334 
5335       //  - conversions from 'Class' to the redefinition type
5336       if (RHSType->isObjCClassType() &&
5337           Context.hasSameType(LHSType,
5338                               Context.getObjCClassRedefinitionType())) {
5339         Kind = CK_BitCast;
5340         return Compatible;
5341       }
5342 
5343       Kind = CK_BitCast;
5344       return IncompatiblePointer;
5345     }
5346 
5347     // U^ -> void*
5348     if (RHSType->getAs<BlockPointerType>()) {
5349       if (LHSPointer->getPointeeType()->isVoidType()) {
5350         Kind = CK_BitCast;
5351         return Compatible;
5352       }
5353     }
5354 
5355     return Incompatible;
5356   }
5357 
5358   // Conversions to block pointers.
5359   if (isa<BlockPointerType>(LHSType)) {
5360     // U^ -> T^
5361     if (RHSType->isBlockPointerType()) {
5362       Kind = CK_BitCast;
5363       return checkBlockPointerTypesForAssignment(*this, LHSType, RHSType);
5364     }
5365 
5366     // int or null -> T^
5367     if (RHSType->isIntegerType()) {
5368       Kind = CK_IntegralToPointer; // FIXME: null
5369       return IntToBlockPointer;
5370     }
5371 
5372     // id -> T^
5373     if (getLangOptions().ObjC1 && RHSType->isObjCIdType()) {
5374       Kind = CK_AnyPointerToBlockPointerCast;
5375       return Compatible;
5376     }
5377 
5378     // void* -> T^
5379     if (const PointerType *RHSPT = RHSType->getAs<PointerType>())
5380       if (RHSPT->getPointeeType()->isVoidType()) {
5381         Kind = CK_AnyPointerToBlockPointerCast;
5382         return Compatible;
5383       }
5384 
5385     return Incompatible;
5386   }
5387 
5388   // Conversions to Objective-C pointers.
5389   if (isa<ObjCObjectPointerType>(LHSType)) {
5390     // A* -> B*
5391     if (RHSType->isObjCObjectPointerType()) {
5392       Kind = CK_BitCast;
5393       Sema::AssignConvertType result =
5394         checkObjCPointerTypesForAssignment(*this, LHSType, RHSType);
5395       if (getLangOptions().ObjCAutoRefCount &&
5396           result == Compatible &&
5397           !CheckObjCARCUnavailableWeakConversion(OrigLHSType, RHSType))
5398         result = IncompatibleObjCWeakRef;
5399       return result;
5400     }
5401 
5402     // int or null -> A*
5403     if (RHSType->isIntegerType()) {
5404       Kind = CK_IntegralToPointer; // FIXME: null
5405       return IntToPointer;
5406     }
5407 
5408     // In general, C pointers are not compatible with ObjC object pointers,
5409     // with two exceptions:
5410     if (isa<PointerType>(RHSType)) {
5411       Kind = CK_CPointerToObjCPointerCast;
5412 
5413       //  - conversions from 'void*'
5414       if (RHSType->isVoidPointerType()) {
5415         return Compatible;
5416       }
5417 
5418       //  - conversions to 'Class' from its redefinition type
5419       if (LHSType->isObjCClassType() &&
5420           Context.hasSameType(RHSType,
5421                               Context.getObjCClassRedefinitionType())) {
5422         return Compatible;
5423       }
5424 
5425       return IncompatiblePointer;
5426     }
5427 
5428     // T^ -> A*
5429     if (RHSType->isBlockPointerType()) {
5430       maybeExtendBlockObject(*this, RHS);
5431       Kind = CK_BlockPointerToObjCPointerCast;
5432       return Compatible;
5433     }
5434 
5435     return Incompatible;
5436   }
5437 
5438   // Conversions from pointers that are not covered by the above.
5439   if (isa<PointerType>(RHSType)) {
5440     // T* -> _Bool
5441     if (LHSType == Context.BoolTy) {
5442       Kind = CK_PointerToBoolean;
5443       return Compatible;
5444     }
5445 
5446     // T* -> int
5447     if (LHSType->isIntegerType()) {
5448       Kind = CK_PointerToIntegral;
5449       return PointerToInt;
5450     }
5451 
5452     return Incompatible;
5453   }
5454 
5455   // Conversions from Objective-C pointers that are not covered by the above.
5456   if (isa<ObjCObjectPointerType>(RHSType)) {
5457     // T* -> _Bool
5458     if (LHSType == Context.BoolTy) {
5459       Kind = CK_PointerToBoolean;
5460       return Compatible;
5461     }
5462 
5463     // T* -> int
5464     if (LHSType->isIntegerType()) {
5465       Kind = CK_PointerToIntegral;
5466       return PointerToInt;
5467     }
5468 
5469     return Incompatible;
5470   }
5471 
5472   // struct A -> struct B
5473   if (isa<TagType>(LHSType) && isa<TagType>(RHSType)) {
5474     if (Context.typesAreCompatible(LHSType, RHSType)) {
5475       Kind = CK_NoOp;
5476       return Compatible;
5477     }
5478   }
5479 
5480   return Incompatible;
5481 }
5482 
5483 /// \brief Constructs a transparent union from an expression that is
5484 /// used to initialize the transparent union.
5485 static void ConstructTransparentUnion(Sema &S, ASTContext &C,
5486                                       ExprResult &EResult, QualType UnionType,
5487                                       FieldDecl *Field) {
5488   // Build an initializer list that designates the appropriate member
5489   // of the transparent union.
5490   Expr *E = EResult.take();
5491   InitListExpr *Initializer = new (C) InitListExpr(C, SourceLocation(),
5492                                                    &E, 1,
5493                                                    SourceLocation());
5494   Initializer->setType(UnionType);
5495   Initializer->setInitializedFieldInUnion(Field);
5496 
5497   // Build a compound literal constructing a value of the transparent
5498   // union type from this initializer list.
5499   TypeSourceInfo *unionTInfo = C.getTrivialTypeSourceInfo(UnionType);
5500   EResult = S.Owned(
5501     new (C) CompoundLiteralExpr(SourceLocation(), unionTInfo, UnionType,
5502                                 VK_RValue, Initializer, false));
5503 }
5504 
5505 Sema::AssignConvertType
5506 Sema::CheckTransparentUnionArgumentConstraints(QualType ArgType,
5507                                                ExprResult &RHS) {
5508   QualType RHSType = RHS.get()->getType();
5509 
5510   // If the ArgType is a Union type, we want to handle a potential
5511   // transparent_union GCC extension.
5512   const RecordType *UT = ArgType->getAsUnionType();
5513   if (!UT || !UT->getDecl()->hasAttr<TransparentUnionAttr>())
5514     return Incompatible;
5515 
5516   // The field to initialize within the transparent union.
5517   RecordDecl *UD = UT->getDecl();
5518   FieldDecl *InitField = 0;
5519   // It's compatible if the expression matches any of the fields.
5520   for (RecordDecl::field_iterator it = UD->field_begin(),
5521          itend = UD->field_end();
5522        it != itend; ++it) {
5523     if (it->getType()->isPointerType()) {
5524       // If the transparent union contains a pointer type, we allow:
5525       // 1) void pointer
5526       // 2) null pointer constant
5527       if (RHSType->isPointerType())
5528         if (RHSType->castAs<PointerType>()->getPointeeType()->isVoidType()) {
5529           RHS = ImpCastExprToType(RHS.take(), it->getType(), CK_BitCast);
5530           InitField = *it;
5531           break;
5532         }
5533 
5534       if (RHS.get()->isNullPointerConstant(Context,
5535                                            Expr::NPC_ValueDependentIsNull)) {
5536         RHS = ImpCastExprToType(RHS.take(), it->getType(),
5537                                 CK_NullToPointer);
5538         InitField = *it;
5539         break;
5540       }
5541     }
5542 
5543     CastKind Kind = CK_Invalid;
5544     if (CheckAssignmentConstraints(it->getType(), RHS, Kind)
5545           == Compatible) {
5546       RHS = ImpCastExprToType(RHS.take(), it->getType(), Kind);
5547       InitField = *it;
5548       break;
5549     }
5550   }
5551 
5552   if (!InitField)
5553     return Incompatible;
5554 
5555   ConstructTransparentUnion(*this, Context, RHS, ArgType, InitField);
5556   return Compatible;
5557 }
5558 
5559 Sema::AssignConvertType
5560 Sema::CheckSingleAssignmentConstraints(QualType LHSType, ExprResult &RHS,
5561                                        bool Diagnose) {
5562   if (getLangOptions().CPlusPlus) {
5563     if (!LHSType->isRecordType() && !LHSType->isAtomicType()) {
5564       // C++ 5.17p3: If the left operand is not of class type, the
5565       // expression is implicitly converted (C++ 4) to the
5566       // cv-unqualified type of the left operand.
5567       ExprResult Res;
5568       if (Diagnose) {
5569         Res = PerformImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5570                                         AA_Assigning);
5571       } else {
5572         ImplicitConversionSequence ICS =
5573             TryImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5574                                   /*SuppressUserConversions=*/false,
5575                                   /*AllowExplicit=*/false,
5576                                   /*InOverloadResolution=*/false,
5577                                   /*CStyle=*/false,
5578                                   /*AllowObjCWritebackConversion=*/false);
5579         if (ICS.isFailure())
5580           return Incompatible;
5581         Res = PerformImplicitConversion(RHS.get(), LHSType.getUnqualifiedType(),
5582                                         ICS, AA_Assigning);
5583       }
5584       if (Res.isInvalid())
5585         return Incompatible;
5586       Sema::AssignConvertType result = Compatible;
5587       if (getLangOptions().ObjCAutoRefCount &&
5588           !CheckObjCARCUnavailableWeakConversion(LHSType,
5589                                                  RHS.get()->getType()))
5590         result = IncompatibleObjCWeakRef;
5591       RHS = move(Res);
5592       return result;
5593     }
5594 
5595     // FIXME: Currently, we fall through and treat C++ classes like C
5596     // structures.
5597     // FIXME: We also fall through for atomics; not sure what should
5598     // happen there, though.
5599   }
5600 
5601   // C99 6.5.16.1p1: the left operand is a pointer and the right is
5602   // a null pointer constant.
5603   if ((LHSType->isPointerType() ||
5604        LHSType->isObjCObjectPointerType() ||
5605        LHSType->isBlockPointerType())
5606       && RHS.get()->isNullPointerConstant(Context,
5607                                           Expr::NPC_ValueDependentIsNull)) {
5608     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_NullToPointer);
5609     return Compatible;
5610   }
5611 
5612   // This check seems unnatural, however it is necessary to ensure the proper
5613   // conversion of functions/arrays. If the conversion were done for all
5614   // DeclExpr's (created by ActOnIdExpression), it would mess up the unary
5615   // expressions that suppress this implicit conversion (&, sizeof).
5616   //
5617   // Suppress this for references: C++ 8.5.3p5.
5618   if (!LHSType->isReferenceType()) {
5619     RHS = DefaultFunctionArrayLvalueConversion(RHS.take());
5620     if (RHS.isInvalid())
5621       return Incompatible;
5622   }
5623 
5624   CastKind Kind = CK_Invalid;
5625   Sema::AssignConvertType result =
5626     CheckAssignmentConstraints(LHSType, RHS, Kind);
5627 
5628   // C99 6.5.16.1p2: The value of the right operand is converted to the
5629   // type of the assignment expression.
5630   // CheckAssignmentConstraints allows the left-hand side to be a reference,
5631   // so that we can use references in built-in functions even in C.
5632   // The getNonReferenceType() call makes sure that the resulting expression
5633   // does not have reference type.
5634   if (result != Incompatible && RHS.get()->getType() != LHSType)
5635     RHS = ImpCastExprToType(RHS.take(),
5636                             LHSType.getNonLValueExprType(Context), Kind);
5637   return result;
5638 }
5639 
5640 QualType Sema::InvalidOperands(SourceLocation Loc, ExprResult &LHS,
5641                                ExprResult &RHS) {
5642   Diag(Loc, diag::err_typecheck_invalid_operands)
5643     << LHS.get()->getType() << RHS.get()->getType()
5644     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5645   return QualType();
5646 }
5647 
5648 QualType Sema::CheckVectorOperands(ExprResult &LHS, ExprResult &RHS,
5649                                    SourceLocation Loc, bool IsCompAssign) {
5650   // For conversion purposes, we ignore any qualifiers.
5651   // For example, "const float" and "float" are equivalent.
5652   QualType LHSType =
5653     Context.getCanonicalType(LHS.get()->getType()).getUnqualifiedType();
5654   QualType RHSType =
5655     Context.getCanonicalType(RHS.get()->getType()).getUnqualifiedType();
5656 
5657   // If the vector types are identical, return.
5658   if (LHSType == RHSType)
5659     return LHSType;
5660 
5661   // Handle the case of equivalent AltiVec and GCC vector types
5662   if (LHSType->isVectorType() && RHSType->isVectorType() &&
5663       Context.areCompatibleVectorTypes(LHSType, RHSType)) {
5664     if (LHSType->isExtVectorType()) {
5665       RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
5666       return LHSType;
5667     }
5668 
5669     if (!IsCompAssign)
5670       LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
5671     return RHSType;
5672   }
5673 
5674   if (getLangOptions().LaxVectorConversions &&
5675       Context.getTypeSize(LHSType) == Context.getTypeSize(RHSType)) {
5676     // If we are allowing lax vector conversions, and LHS and RHS are both
5677     // vectors, the total size only needs to be the same. This is a
5678     // bitcast; no bits are changed but the result type is different.
5679     // FIXME: Should we really be allowing this?
5680     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
5681     return LHSType;
5682   }
5683 
5684   // Canonicalize the ExtVector to the LHS, remember if we swapped so we can
5685   // swap back (so that we don't reverse the inputs to a subtract, for instance.
5686   bool swapped = false;
5687   if (RHSType->isExtVectorType() && !IsCompAssign) {
5688     swapped = true;
5689     std::swap(RHS, LHS);
5690     std::swap(RHSType, LHSType);
5691   }
5692 
5693   // Handle the case of an ext vector and scalar.
5694   if (const ExtVectorType *LV = LHSType->getAs<ExtVectorType>()) {
5695     QualType EltTy = LV->getElementType();
5696     if (EltTy->isIntegralType(Context) && RHSType->isIntegralType(Context)) {
5697       int order = Context.getIntegerTypeOrder(EltTy, RHSType);
5698       if (order > 0)
5699         RHS = ImpCastExprToType(RHS.take(), EltTy, CK_IntegralCast);
5700       if (order >= 0) {
5701         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_VectorSplat);
5702         if (swapped) std::swap(RHS, LHS);
5703         return LHSType;
5704       }
5705     }
5706     if (EltTy->isRealFloatingType() && RHSType->isScalarType() &&
5707         RHSType->isRealFloatingType()) {
5708       int order = Context.getFloatingTypeOrder(EltTy, RHSType);
5709       if (order > 0)
5710         RHS = ImpCastExprToType(RHS.take(), EltTy, CK_FloatingCast);
5711       if (order >= 0) {
5712         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_VectorSplat);
5713         if (swapped) std::swap(RHS, LHS);
5714         return LHSType;
5715       }
5716     }
5717   }
5718 
5719   // Vectors of different size or scalar and non-ext-vector are errors.
5720   if (swapped) std::swap(RHS, LHS);
5721   Diag(Loc, diag::err_typecheck_vector_not_convertable)
5722     << LHS.get()->getType() << RHS.get()->getType()
5723     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5724   return QualType();
5725 }
5726 
5727 // checkArithmeticNull - Detect when a NULL constant is used improperly in an
5728 // expression.  These are mainly cases where the null pointer is used as an
5729 // integer instead of a pointer.
5730 static void checkArithmeticNull(Sema &S, ExprResult &LHS, ExprResult &RHS,
5731                                 SourceLocation Loc, bool IsCompare) {
5732   // The canonical way to check for a GNU null is with isNullPointerConstant,
5733   // but we use a bit of a hack here for speed; this is a relatively
5734   // hot path, and isNullPointerConstant is slow.
5735   bool LHSNull = isa<GNUNullExpr>(LHS.get()->IgnoreParenImpCasts());
5736   bool RHSNull = isa<GNUNullExpr>(RHS.get()->IgnoreParenImpCasts());
5737 
5738   QualType NonNullType = LHSNull ? RHS.get()->getType() : LHS.get()->getType();
5739 
5740   // Avoid analyzing cases where the result will either be invalid (and
5741   // diagnosed as such) or entirely valid and not something to warn about.
5742   if ((!LHSNull && !RHSNull) || NonNullType->isBlockPointerType() ||
5743       NonNullType->isMemberPointerType() || NonNullType->isFunctionType())
5744     return;
5745 
5746   // Comparison operations would not make sense with a null pointer no matter
5747   // what the other expression is.
5748   if (!IsCompare) {
5749     S.Diag(Loc, diag::warn_null_in_arithmetic_operation)
5750         << (LHSNull ? LHS.get()->getSourceRange() : SourceRange())
5751         << (RHSNull ? RHS.get()->getSourceRange() : SourceRange());
5752     return;
5753   }
5754 
5755   // The rest of the operations only make sense with a null pointer
5756   // if the other expression is a pointer.
5757   if (LHSNull == RHSNull || NonNullType->isAnyPointerType() ||
5758       NonNullType->canDecayToPointerType())
5759     return;
5760 
5761   S.Diag(Loc, diag::warn_null_in_comparison_operation)
5762       << LHSNull /* LHS is NULL */ << NonNullType
5763       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
5764 }
5765 
5766 QualType Sema::CheckMultiplyDivideOperands(ExprResult &LHS, ExprResult &RHS,
5767                                            SourceLocation Loc,
5768                                            bool IsCompAssign, bool IsDiv) {
5769   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5770 
5771   if (LHS.get()->getType()->isVectorType() ||
5772       RHS.get()->getType()->isVectorType())
5773     return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
5774 
5775   QualType compType = UsualArithmeticConversions(LHS, RHS, IsCompAssign);
5776   if (LHS.isInvalid() || RHS.isInvalid())
5777     return QualType();
5778 
5779   if (!LHS.get()->getType()->isArithmeticType() ||
5780       !RHS.get()->getType()->isArithmeticType())
5781     return InvalidOperands(Loc, LHS, RHS);
5782 
5783   // Check for division by zero.
5784   if (IsDiv &&
5785       RHS.get()->isNullPointerConstant(Context,
5786                                        Expr::NPC_ValueDependentIsNotNull))
5787     DiagRuntimeBehavior(Loc, RHS.get(), PDiag(diag::warn_division_by_zero)
5788                                           << RHS.get()->getSourceRange());
5789 
5790   return compType;
5791 }
5792 
5793 QualType Sema::CheckRemainderOperands(
5794   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, bool IsCompAssign) {
5795   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5796 
5797   if (LHS.get()->getType()->isVectorType() ||
5798       RHS.get()->getType()->isVectorType()) {
5799     if (LHS.get()->getType()->hasIntegerRepresentation() &&
5800         RHS.get()->getType()->hasIntegerRepresentation())
5801       return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
5802     return InvalidOperands(Loc, LHS, RHS);
5803   }
5804 
5805   QualType compType = UsualArithmeticConversions(LHS, RHS, IsCompAssign);
5806   if (LHS.isInvalid() || RHS.isInvalid())
5807     return QualType();
5808 
5809   if (!LHS.get()->getType()->isIntegerType() ||
5810       !RHS.get()->getType()->isIntegerType())
5811     return InvalidOperands(Loc, LHS, RHS);
5812 
5813   // Check for remainder by zero.
5814   if (RHS.get()->isNullPointerConstant(Context,
5815                                        Expr::NPC_ValueDependentIsNotNull))
5816     DiagRuntimeBehavior(Loc, RHS.get(), PDiag(diag::warn_remainder_by_zero)
5817                                  << RHS.get()->getSourceRange());
5818 
5819   return compType;
5820 }
5821 
5822 /// \brief Diagnose invalid arithmetic on two void pointers.
5823 static void diagnoseArithmeticOnTwoVoidPointers(Sema &S, SourceLocation Loc,
5824                                                 Expr *LHSExpr, Expr *RHSExpr) {
5825   S.Diag(Loc, S.getLangOptions().CPlusPlus
5826                 ? diag::err_typecheck_pointer_arith_void_type
5827                 : diag::ext_gnu_void_ptr)
5828     << 1 /* two pointers */ << LHSExpr->getSourceRange()
5829                             << RHSExpr->getSourceRange();
5830 }
5831 
5832 /// \brief Diagnose invalid arithmetic on a void pointer.
5833 static void diagnoseArithmeticOnVoidPointer(Sema &S, SourceLocation Loc,
5834                                             Expr *Pointer) {
5835   S.Diag(Loc, S.getLangOptions().CPlusPlus
5836                 ? diag::err_typecheck_pointer_arith_void_type
5837                 : diag::ext_gnu_void_ptr)
5838     << 0 /* one pointer */ << Pointer->getSourceRange();
5839 }
5840 
5841 /// \brief Diagnose invalid arithmetic on two function pointers.
5842 static void diagnoseArithmeticOnTwoFunctionPointers(Sema &S, SourceLocation Loc,
5843                                                     Expr *LHS, Expr *RHS) {
5844   assert(LHS->getType()->isAnyPointerType());
5845   assert(RHS->getType()->isAnyPointerType());
5846   S.Diag(Loc, S.getLangOptions().CPlusPlus
5847                 ? diag::err_typecheck_pointer_arith_function_type
5848                 : diag::ext_gnu_ptr_func_arith)
5849     << 1 /* two pointers */ << LHS->getType()->getPointeeType()
5850     // We only show the second type if it differs from the first.
5851     << (unsigned)!S.Context.hasSameUnqualifiedType(LHS->getType(),
5852                                                    RHS->getType())
5853     << RHS->getType()->getPointeeType()
5854     << LHS->getSourceRange() << RHS->getSourceRange();
5855 }
5856 
5857 /// \brief Diagnose invalid arithmetic on a function pointer.
5858 static void diagnoseArithmeticOnFunctionPointer(Sema &S, SourceLocation Loc,
5859                                                 Expr *Pointer) {
5860   assert(Pointer->getType()->isAnyPointerType());
5861   S.Diag(Loc, S.getLangOptions().CPlusPlus
5862                 ? diag::err_typecheck_pointer_arith_function_type
5863                 : diag::ext_gnu_ptr_func_arith)
5864     << 0 /* one pointer */ << Pointer->getType()->getPointeeType()
5865     << 0 /* one pointer, so only one type */
5866     << Pointer->getSourceRange();
5867 }
5868 
5869 /// \brief Emit error if Operand is incomplete pointer type
5870 ///
5871 /// \returns True if pointer has incomplete type
5872 static bool checkArithmeticIncompletePointerType(Sema &S, SourceLocation Loc,
5873                                                  Expr *Operand) {
5874   if ((Operand->getType()->isPointerType() &&
5875        !Operand->getType()->isDependentType()) ||
5876       Operand->getType()->isObjCObjectPointerType()) {
5877     QualType PointeeTy = Operand->getType()->getPointeeType();
5878     if (S.RequireCompleteType(
5879           Loc, PointeeTy,
5880           S.PDiag(diag::err_typecheck_arithmetic_incomplete_type)
5881             << PointeeTy << Operand->getSourceRange()))
5882       return true;
5883   }
5884   return false;
5885 }
5886 
5887 /// \brief Check the validity of an arithmetic pointer operand.
5888 ///
5889 /// If the operand has pointer type, this code will check for pointer types
5890 /// which are invalid in arithmetic operations. These will be diagnosed
5891 /// appropriately, including whether or not the use is supported as an
5892 /// extension.
5893 ///
5894 /// \returns True when the operand is valid to use (even if as an extension).
5895 static bool checkArithmeticOpPointerOperand(Sema &S, SourceLocation Loc,
5896                                             Expr *Operand) {
5897   if (!Operand->getType()->isAnyPointerType()) return true;
5898 
5899   QualType PointeeTy = Operand->getType()->getPointeeType();
5900   if (PointeeTy->isVoidType()) {
5901     diagnoseArithmeticOnVoidPointer(S, Loc, Operand);
5902     return !S.getLangOptions().CPlusPlus;
5903   }
5904   if (PointeeTy->isFunctionType()) {
5905     diagnoseArithmeticOnFunctionPointer(S, Loc, Operand);
5906     return !S.getLangOptions().CPlusPlus;
5907   }
5908 
5909   if (checkArithmeticIncompletePointerType(S, Loc, Operand)) return false;
5910 
5911   return true;
5912 }
5913 
5914 /// \brief Check the validity of a binary arithmetic operation w.r.t. pointer
5915 /// operands.
5916 ///
5917 /// This routine will diagnose any invalid arithmetic on pointer operands much
5918 /// like \see checkArithmeticOpPointerOperand. However, it has special logic
5919 /// for emitting a single diagnostic even for operations where both LHS and RHS
5920 /// are (potentially problematic) pointers.
5921 ///
5922 /// \returns True when the operand is valid to use (even if as an extension).
5923 static bool checkArithmeticBinOpPointerOperands(Sema &S, SourceLocation Loc,
5924                                                 Expr *LHSExpr, Expr *RHSExpr) {
5925   bool isLHSPointer = LHSExpr->getType()->isAnyPointerType();
5926   bool isRHSPointer = RHSExpr->getType()->isAnyPointerType();
5927   if (!isLHSPointer && !isRHSPointer) return true;
5928 
5929   QualType LHSPointeeTy, RHSPointeeTy;
5930   if (isLHSPointer) LHSPointeeTy = LHSExpr->getType()->getPointeeType();
5931   if (isRHSPointer) RHSPointeeTy = RHSExpr->getType()->getPointeeType();
5932 
5933   // Check for arithmetic on pointers to incomplete types.
5934   bool isLHSVoidPtr = isLHSPointer && LHSPointeeTy->isVoidType();
5935   bool isRHSVoidPtr = isRHSPointer && RHSPointeeTy->isVoidType();
5936   if (isLHSVoidPtr || isRHSVoidPtr) {
5937     if (!isRHSVoidPtr) diagnoseArithmeticOnVoidPointer(S, Loc, LHSExpr);
5938     else if (!isLHSVoidPtr) diagnoseArithmeticOnVoidPointer(S, Loc, RHSExpr);
5939     else diagnoseArithmeticOnTwoVoidPointers(S, Loc, LHSExpr, RHSExpr);
5940 
5941     return !S.getLangOptions().CPlusPlus;
5942   }
5943 
5944   bool isLHSFuncPtr = isLHSPointer && LHSPointeeTy->isFunctionType();
5945   bool isRHSFuncPtr = isRHSPointer && RHSPointeeTy->isFunctionType();
5946   if (isLHSFuncPtr || isRHSFuncPtr) {
5947     if (!isRHSFuncPtr) diagnoseArithmeticOnFunctionPointer(S, Loc, LHSExpr);
5948     else if (!isLHSFuncPtr) diagnoseArithmeticOnFunctionPointer(S, Loc,
5949                                                                 RHSExpr);
5950     else diagnoseArithmeticOnTwoFunctionPointers(S, Loc, LHSExpr, RHSExpr);
5951 
5952     return !S.getLangOptions().CPlusPlus;
5953   }
5954 
5955   if (checkArithmeticIncompletePointerType(S, Loc, LHSExpr)) return false;
5956   if (checkArithmeticIncompletePointerType(S, Loc, RHSExpr)) return false;
5957 
5958   return true;
5959 }
5960 
5961 /// \brief Check bad cases where we step over interface counts.
5962 static bool checkArithmethicPointerOnNonFragileABI(Sema &S,
5963                                                    SourceLocation OpLoc,
5964                                                    Expr *Op) {
5965   assert(Op->getType()->isAnyPointerType());
5966   QualType PointeeTy = Op->getType()->getPointeeType();
5967   if (!PointeeTy->isObjCObjectType() || !S.LangOpts.ObjCNonFragileABI)
5968     return true;
5969 
5970   S.Diag(OpLoc, diag::err_arithmetic_nonfragile_interface)
5971     << PointeeTy << Op->getSourceRange();
5972   return false;
5973 }
5974 
5975 /// \brief Emit error when two pointers are incompatible.
5976 static void diagnosePointerIncompatibility(Sema &S, SourceLocation Loc,
5977                                            Expr *LHSExpr, Expr *RHSExpr) {
5978   assert(LHSExpr->getType()->isAnyPointerType());
5979   assert(RHSExpr->getType()->isAnyPointerType());
5980   S.Diag(Loc, diag::err_typecheck_sub_ptr_compatible)
5981     << LHSExpr->getType() << RHSExpr->getType() << LHSExpr->getSourceRange()
5982     << RHSExpr->getSourceRange();
5983 }
5984 
5985 QualType Sema::CheckAdditionOperands( // C99 6.5.6
5986   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, QualType* CompLHSTy) {
5987   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
5988 
5989   if (LHS.get()->getType()->isVectorType() ||
5990       RHS.get()->getType()->isVectorType()) {
5991     QualType compType = CheckVectorOperands(LHS, RHS, Loc, CompLHSTy);
5992     if (CompLHSTy) *CompLHSTy = compType;
5993     return compType;
5994   }
5995 
5996   QualType compType = UsualArithmeticConversions(LHS, RHS, CompLHSTy);
5997   if (LHS.isInvalid() || RHS.isInvalid())
5998     return QualType();
5999 
6000   // handle the common case first (both operands are arithmetic).
6001   if (LHS.get()->getType()->isArithmeticType() &&
6002       RHS.get()->getType()->isArithmeticType()) {
6003     if (CompLHSTy) *CompLHSTy = compType;
6004     return compType;
6005   }
6006 
6007   // Put any potential pointer into PExp
6008   Expr* PExp = LHS.get(), *IExp = RHS.get();
6009   if (IExp->getType()->isAnyPointerType())
6010     std::swap(PExp, IExp);
6011 
6012   if (!PExp->getType()->isAnyPointerType())
6013     return InvalidOperands(Loc, LHS, RHS);
6014 
6015   if (!IExp->getType()->isIntegerType())
6016     return InvalidOperands(Loc, LHS, RHS);
6017 
6018   if (!checkArithmeticOpPointerOperand(*this, Loc, PExp))
6019     return QualType();
6020 
6021   // Diagnose bad cases where we step over interface counts.
6022   if (!checkArithmethicPointerOnNonFragileABI(*this, Loc, PExp))
6023     return QualType();
6024 
6025   // Check array bounds for pointer arithemtic
6026   CheckArrayAccess(PExp, IExp);
6027 
6028   if (CompLHSTy) {
6029     QualType LHSTy = Context.isPromotableBitField(LHS.get());
6030     if (LHSTy.isNull()) {
6031       LHSTy = LHS.get()->getType();
6032       if (LHSTy->isPromotableIntegerType())
6033         LHSTy = Context.getPromotedIntegerType(LHSTy);
6034     }
6035     *CompLHSTy = LHSTy;
6036   }
6037 
6038   return PExp->getType();
6039 }
6040 
6041 // C99 6.5.6
6042 QualType Sema::CheckSubtractionOperands(ExprResult &LHS, ExprResult &RHS,
6043                                         SourceLocation Loc,
6044                                         QualType* CompLHSTy) {
6045   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6046 
6047   if (LHS.get()->getType()->isVectorType() ||
6048       RHS.get()->getType()->isVectorType()) {
6049     QualType compType = CheckVectorOperands(LHS, RHS, Loc, CompLHSTy);
6050     if (CompLHSTy) *CompLHSTy = compType;
6051     return compType;
6052   }
6053 
6054   QualType compType = UsualArithmeticConversions(LHS, RHS, CompLHSTy);
6055   if (LHS.isInvalid() || RHS.isInvalid())
6056     return QualType();
6057 
6058   // Enforce type constraints: C99 6.5.6p3.
6059 
6060   // Handle the common case first (both operands are arithmetic).
6061   if (LHS.get()->getType()->isArithmeticType() &&
6062       RHS.get()->getType()->isArithmeticType()) {
6063     if (CompLHSTy) *CompLHSTy = compType;
6064     return compType;
6065   }
6066 
6067   // Either ptr - int   or   ptr - ptr.
6068   if (LHS.get()->getType()->isAnyPointerType()) {
6069     QualType lpointee = LHS.get()->getType()->getPointeeType();
6070 
6071     // Diagnose bad cases where we step over interface counts.
6072     if (!checkArithmethicPointerOnNonFragileABI(*this, Loc, LHS.get()))
6073       return QualType();
6074 
6075     // The result type of a pointer-int computation is the pointer type.
6076     if (RHS.get()->getType()->isIntegerType()) {
6077       if (!checkArithmeticOpPointerOperand(*this, Loc, LHS.get()))
6078         return QualType();
6079 
6080       Expr *IExpr = RHS.get()->IgnoreParenCasts();
6081       UnaryOperator negRex(IExpr, UO_Minus, IExpr->getType(), VK_RValue,
6082                            OK_Ordinary, IExpr->getExprLoc());
6083       // Check array bounds for pointer arithemtic
6084       CheckArrayAccess(LHS.get()->IgnoreParenCasts(), &negRex);
6085 
6086       if (CompLHSTy) *CompLHSTy = LHS.get()->getType();
6087       return LHS.get()->getType();
6088     }
6089 
6090     // Handle pointer-pointer subtractions.
6091     if (const PointerType *RHSPTy
6092           = RHS.get()->getType()->getAs<PointerType>()) {
6093       QualType rpointee = RHSPTy->getPointeeType();
6094 
6095       if (getLangOptions().CPlusPlus) {
6096         // Pointee types must be the same: C++ [expr.add]
6097         if (!Context.hasSameUnqualifiedType(lpointee, rpointee)) {
6098           diagnosePointerIncompatibility(*this, Loc, LHS.get(), RHS.get());
6099         }
6100       } else {
6101         // Pointee types must be compatible C99 6.5.6p3
6102         if (!Context.typesAreCompatible(
6103                 Context.getCanonicalType(lpointee).getUnqualifiedType(),
6104                 Context.getCanonicalType(rpointee).getUnqualifiedType())) {
6105           diagnosePointerIncompatibility(*this, Loc, LHS.get(), RHS.get());
6106           return QualType();
6107         }
6108       }
6109 
6110       if (!checkArithmeticBinOpPointerOperands(*this, Loc,
6111                                                LHS.get(), RHS.get()))
6112         return QualType();
6113 
6114       if (CompLHSTy) *CompLHSTy = LHS.get()->getType();
6115       return Context.getPointerDiffType();
6116     }
6117   }
6118 
6119   return InvalidOperands(Loc, LHS, RHS);
6120 }
6121 
6122 static bool isScopedEnumerationType(QualType T) {
6123   if (const EnumType *ET = dyn_cast<EnumType>(T))
6124     return ET->getDecl()->isScoped();
6125   return false;
6126 }
6127 
6128 static void DiagnoseBadShiftValues(Sema& S, ExprResult &LHS, ExprResult &RHS,
6129                                    SourceLocation Loc, unsigned Opc,
6130                                    QualType LHSType) {
6131   llvm::APSInt Right;
6132   // Check right/shifter operand
6133   if (RHS.get()->isValueDependent() ||
6134       !RHS.get()->isIntegerConstantExpr(Right, S.Context))
6135     return;
6136 
6137   if (Right.isNegative()) {
6138     S.DiagRuntimeBehavior(Loc, RHS.get(),
6139                           S.PDiag(diag::warn_shift_negative)
6140                             << RHS.get()->getSourceRange());
6141     return;
6142   }
6143   llvm::APInt LeftBits(Right.getBitWidth(),
6144                        S.Context.getTypeSize(LHS.get()->getType()));
6145   if (Right.uge(LeftBits)) {
6146     S.DiagRuntimeBehavior(Loc, RHS.get(),
6147                           S.PDiag(diag::warn_shift_gt_typewidth)
6148                             << RHS.get()->getSourceRange());
6149     return;
6150   }
6151   if (Opc != BO_Shl)
6152     return;
6153 
6154   // When left shifting an ICE which is signed, we can check for overflow which
6155   // according to C++ has undefined behavior ([expr.shift] 5.8/2). Unsigned
6156   // integers have defined behavior modulo one more than the maximum value
6157   // representable in the result type, so never warn for those.
6158   llvm::APSInt Left;
6159   if (LHS.get()->isValueDependent() ||
6160       !LHS.get()->isIntegerConstantExpr(Left, S.Context) ||
6161       LHSType->hasUnsignedIntegerRepresentation())
6162     return;
6163   llvm::APInt ResultBits =
6164       static_cast<llvm::APInt&>(Right) + Left.getMinSignedBits();
6165   if (LeftBits.uge(ResultBits))
6166     return;
6167   llvm::APSInt Result = Left.extend(ResultBits.getLimitedValue());
6168   Result = Result.shl(Right);
6169 
6170   // Print the bit representation of the signed integer as an unsigned
6171   // hexadecimal number.
6172   llvm::SmallString<40> HexResult;
6173   Result.toString(HexResult, 16, /*Signed =*/false, /*Literal =*/true);
6174 
6175   // If we are only missing a sign bit, this is less likely to result in actual
6176   // bugs -- if the result is cast back to an unsigned type, it will have the
6177   // expected value. Thus we place this behind a different warning that can be
6178   // turned off separately if needed.
6179   if (LeftBits == ResultBits - 1) {
6180     S.Diag(Loc, diag::warn_shift_result_sets_sign_bit)
6181         << HexResult.str() << LHSType
6182         << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6183     return;
6184   }
6185 
6186   S.Diag(Loc, diag::warn_shift_result_gt_typewidth)
6187     << HexResult.str() << Result.getMinSignedBits() << LHSType
6188     << Left.getBitWidth() << LHS.get()->getSourceRange()
6189     << RHS.get()->getSourceRange();
6190 }
6191 
6192 // C99 6.5.7
6193 QualType Sema::CheckShiftOperands(ExprResult &LHS, ExprResult &RHS,
6194                                   SourceLocation Loc, unsigned Opc,
6195                                   bool IsCompAssign) {
6196   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6197 
6198   // C99 6.5.7p2: Each of the operands shall have integer type.
6199   if (!LHS.get()->getType()->hasIntegerRepresentation() ||
6200       !RHS.get()->getType()->hasIntegerRepresentation())
6201     return InvalidOperands(Loc, LHS, RHS);
6202 
6203   // C++0x: Don't allow scoped enums. FIXME: Use something better than
6204   // hasIntegerRepresentation() above instead of this.
6205   if (isScopedEnumerationType(LHS.get()->getType()) ||
6206       isScopedEnumerationType(RHS.get()->getType())) {
6207     return InvalidOperands(Loc, LHS, RHS);
6208   }
6209 
6210   // Vector shifts promote their scalar inputs to vector type.
6211   if (LHS.get()->getType()->isVectorType() ||
6212       RHS.get()->getType()->isVectorType())
6213     return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
6214 
6215   // Shifts don't perform usual arithmetic conversions, they just do integer
6216   // promotions on each operand. C99 6.5.7p3
6217 
6218   // For the LHS, do usual unary conversions, but then reset them away
6219   // if this is a compound assignment.
6220   ExprResult OldLHS = LHS;
6221   LHS = UsualUnaryConversions(LHS.take());
6222   if (LHS.isInvalid())
6223     return QualType();
6224   QualType LHSType = LHS.get()->getType();
6225   if (IsCompAssign) LHS = OldLHS;
6226 
6227   // The RHS is simpler.
6228   RHS = UsualUnaryConversions(RHS.take());
6229   if (RHS.isInvalid())
6230     return QualType();
6231 
6232   // Sanity-check shift operands
6233   DiagnoseBadShiftValues(*this, LHS, RHS, Loc, Opc, LHSType);
6234 
6235   // "The type of the result is that of the promoted left operand."
6236   return LHSType;
6237 }
6238 
6239 static bool IsWithinTemplateSpecialization(Decl *D) {
6240   if (DeclContext *DC = D->getDeclContext()) {
6241     if (isa<ClassTemplateSpecializationDecl>(DC))
6242       return true;
6243     if (FunctionDecl *FD = dyn_cast<FunctionDecl>(DC))
6244       return FD->isFunctionTemplateSpecialization();
6245   }
6246   return false;
6247 }
6248 
6249 /// If two different enums are compared, raise a warning.
6250 static void checkEnumComparison(Sema &S, SourceLocation Loc, ExprResult &LHS,
6251                                 ExprResult &RHS) {
6252   QualType LHSStrippedType = LHS.get()->IgnoreParenImpCasts()->getType();
6253   QualType RHSStrippedType = RHS.get()->IgnoreParenImpCasts()->getType();
6254 
6255   const EnumType *LHSEnumType = LHSStrippedType->getAs<EnumType>();
6256   if (!LHSEnumType)
6257     return;
6258   const EnumType *RHSEnumType = RHSStrippedType->getAs<EnumType>();
6259   if (!RHSEnumType)
6260     return;
6261 
6262   // Ignore anonymous enums.
6263   if (!LHSEnumType->getDecl()->getIdentifier())
6264     return;
6265   if (!RHSEnumType->getDecl()->getIdentifier())
6266     return;
6267 
6268   if (S.Context.hasSameUnqualifiedType(LHSStrippedType, RHSStrippedType))
6269     return;
6270 
6271   S.Diag(Loc, diag::warn_comparison_of_mixed_enum_types)
6272       << LHSStrippedType << RHSStrippedType
6273       << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6274 }
6275 
6276 /// \brief Diagnose bad pointer comparisons.
6277 static void diagnoseDistinctPointerComparison(Sema &S, SourceLocation Loc,
6278                                               ExprResult &LHS, ExprResult &RHS,
6279                                               bool IsError) {
6280   S.Diag(Loc, IsError ? diag::err_typecheck_comparison_of_distinct_pointers
6281                       : diag::ext_typecheck_comparison_of_distinct_pointers)
6282     << LHS.get()->getType() << RHS.get()->getType()
6283     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6284 }
6285 
6286 /// \brief Returns false if the pointers are converted to a composite type,
6287 /// true otherwise.
6288 static bool convertPointersToCompositeType(Sema &S, SourceLocation Loc,
6289                                            ExprResult &LHS, ExprResult &RHS) {
6290   // C++ [expr.rel]p2:
6291   //   [...] Pointer conversions (4.10) and qualification
6292   //   conversions (4.4) are performed on pointer operands (or on
6293   //   a pointer operand and a null pointer constant) to bring
6294   //   them to their composite pointer type. [...]
6295   //
6296   // C++ [expr.eq]p1 uses the same notion for (in)equality
6297   // comparisons of pointers.
6298 
6299   // C++ [expr.eq]p2:
6300   //   In addition, pointers to members can be compared, or a pointer to
6301   //   member and a null pointer constant. Pointer to member conversions
6302   //   (4.11) and qualification conversions (4.4) are performed to bring
6303   //   them to a common type. If one operand is a null pointer constant,
6304   //   the common type is the type of the other operand. Otherwise, the
6305   //   common type is a pointer to member type similar (4.4) to the type
6306   //   of one of the operands, with a cv-qualification signature (4.4)
6307   //   that is the union of the cv-qualification signatures of the operand
6308   //   types.
6309 
6310   QualType LHSType = LHS.get()->getType();
6311   QualType RHSType = RHS.get()->getType();
6312   assert((LHSType->isPointerType() && RHSType->isPointerType()) ||
6313          (LHSType->isMemberPointerType() && RHSType->isMemberPointerType()));
6314 
6315   bool NonStandardCompositeType = false;
6316   bool *BoolPtr = S.isSFINAEContext() ? 0 : &NonStandardCompositeType;
6317   QualType T = S.FindCompositePointerType(Loc, LHS, RHS, BoolPtr);
6318   if (T.isNull()) {
6319     diagnoseDistinctPointerComparison(S, Loc, LHS, RHS, /*isError*/true);
6320     return true;
6321   }
6322 
6323   if (NonStandardCompositeType)
6324     S.Diag(Loc, diag::ext_typecheck_comparison_of_distinct_pointers_nonstandard)
6325       << LHSType << RHSType << T << LHS.get()->getSourceRange()
6326       << RHS.get()->getSourceRange();
6327 
6328   LHS = S.ImpCastExprToType(LHS.take(), T, CK_BitCast);
6329   RHS = S.ImpCastExprToType(RHS.take(), T, CK_BitCast);
6330   return false;
6331 }
6332 
6333 static void diagnoseFunctionPointerToVoidComparison(Sema &S, SourceLocation Loc,
6334                                                     ExprResult &LHS,
6335                                                     ExprResult &RHS,
6336                                                     bool IsError) {
6337   S.Diag(Loc, IsError ? diag::err_typecheck_comparison_of_fptr_to_void
6338                       : diag::ext_typecheck_comparison_of_fptr_to_void)
6339     << LHS.get()->getType() << RHS.get()->getType()
6340     << LHS.get()->getSourceRange() << RHS.get()->getSourceRange();
6341 }
6342 
6343 // C99 6.5.8, C++ [expr.rel]
6344 QualType Sema::CheckCompareOperands(ExprResult &LHS, ExprResult &RHS,
6345                                     SourceLocation Loc, unsigned OpaqueOpc,
6346                                     bool IsRelational) {
6347   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/true);
6348 
6349   BinaryOperatorKind Opc = (BinaryOperatorKind) OpaqueOpc;
6350 
6351   // Handle vector comparisons separately.
6352   if (LHS.get()->getType()->isVectorType() ||
6353       RHS.get()->getType()->isVectorType())
6354     return CheckVectorCompareOperands(LHS, RHS, Loc, IsRelational);
6355 
6356   QualType LHSType = LHS.get()->getType();
6357   QualType RHSType = RHS.get()->getType();
6358 
6359   Expr *LHSStripped = LHS.get()->IgnoreParenImpCasts();
6360   Expr *RHSStripped = RHS.get()->IgnoreParenImpCasts();
6361 
6362   checkEnumComparison(*this, Loc, LHS, RHS);
6363 
6364   if (!LHSType->hasFloatingRepresentation() &&
6365       !(LHSType->isBlockPointerType() && IsRelational) &&
6366       !LHS.get()->getLocStart().isMacroID() &&
6367       !RHS.get()->getLocStart().isMacroID()) {
6368     // For non-floating point types, check for self-comparisons of the form
6369     // x == x, x != x, x < x, etc.  These always evaluate to a constant, and
6370     // often indicate logic errors in the program.
6371     //
6372     // NOTE: Don't warn about comparison expressions resulting from macro
6373     // expansion. Also don't warn about comparisons which are only self
6374     // comparisons within a template specialization. The warnings should catch
6375     // obvious cases in the definition of the template anyways. The idea is to
6376     // warn when the typed comparison operator will always evaluate to the same
6377     // result.
6378     if (DeclRefExpr* DRL = dyn_cast<DeclRefExpr>(LHSStripped)) {
6379       if (DeclRefExpr* DRR = dyn_cast<DeclRefExpr>(RHSStripped)) {
6380         if (DRL->getDecl() == DRR->getDecl() &&
6381             !IsWithinTemplateSpecialization(DRL->getDecl())) {
6382           DiagRuntimeBehavior(Loc, 0, PDiag(diag::warn_comparison_always)
6383                               << 0 // self-
6384                               << (Opc == BO_EQ
6385                                   || Opc == BO_LE
6386                                   || Opc == BO_GE));
6387         } else if (LHSType->isArrayType() && RHSType->isArrayType() &&
6388                    !DRL->getDecl()->getType()->isReferenceType() &&
6389                    !DRR->getDecl()->getType()->isReferenceType()) {
6390             // what is it always going to eval to?
6391             char always_evals_to;
6392             switch(Opc) {
6393             case BO_EQ: // e.g. array1 == array2
6394               always_evals_to = 0; // false
6395               break;
6396             case BO_NE: // e.g. array1 != array2
6397               always_evals_to = 1; // true
6398               break;
6399             default:
6400               // best we can say is 'a constant'
6401               always_evals_to = 2; // e.g. array1 <= array2
6402               break;
6403             }
6404             DiagRuntimeBehavior(Loc, 0, PDiag(diag::warn_comparison_always)
6405                                 << 1 // array
6406                                 << always_evals_to);
6407         }
6408       }
6409     }
6410 
6411     if (isa<CastExpr>(LHSStripped))
6412       LHSStripped = LHSStripped->IgnoreParenCasts();
6413     if (isa<CastExpr>(RHSStripped))
6414       RHSStripped = RHSStripped->IgnoreParenCasts();
6415 
6416     // Warn about comparisons against a string constant (unless the other
6417     // operand is null), the user probably wants strcmp.
6418     Expr *literalString = 0;
6419     Expr *literalStringStripped = 0;
6420     if ((isa<StringLiteral>(LHSStripped) || isa<ObjCEncodeExpr>(LHSStripped)) &&
6421         !RHSStripped->isNullPointerConstant(Context,
6422                                             Expr::NPC_ValueDependentIsNull)) {
6423       literalString = LHS.get();
6424       literalStringStripped = LHSStripped;
6425     } else if ((isa<StringLiteral>(RHSStripped) ||
6426                 isa<ObjCEncodeExpr>(RHSStripped)) &&
6427                !LHSStripped->isNullPointerConstant(Context,
6428                                             Expr::NPC_ValueDependentIsNull)) {
6429       literalString = RHS.get();
6430       literalStringStripped = RHSStripped;
6431     }
6432 
6433     if (literalString) {
6434       std::string resultComparison;
6435       switch (Opc) {
6436       case BO_LT: resultComparison = ") < 0"; break;
6437       case BO_GT: resultComparison = ") > 0"; break;
6438       case BO_LE: resultComparison = ") <= 0"; break;
6439       case BO_GE: resultComparison = ") >= 0"; break;
6440       case BO_EQ: resultComparison = ") == 0"; break;
6441       case BO_NE: resultComparison = ") != 0"; break;
6442       default: llvm_unreachable("Invalid comparison operator");
6443       }
6444 
6445       DiagRuntimeBehavior(Loc, 0,
6446         PDiag(diag::warn_stringcompare)
6447           << isa<ObjCEncodeExpr>(literalStringStripped)
6448           << literalString->getSourceRange());
6449     }
6450   }
6451 
6452   // C99 6.5.8p3 / C99 6.5.9p4
6453   if (LHS.get()->getType()->isArithmeticType() &&
6454       RHS.get()->getType()->isArithmeticType()) {
6455     UsualArithmeticConversions(LHS, RHS);
6456     if (LHS.isInvalid() || RHS.isInvalid())
6457       return QualType();
6458   }
6459   else {
6460     LHS = UsualUnaryConversions(LHS.take());
6461     if (LHS.isInvalid())
6462       return QualType();
6463 
6464     RHS = UsualUnaryConversions(RHS.take());
6465     if (RHS.isInvalid())
6466       return QualType();
6467   }
6468 
6469   LHSType = LHS.get()->getType();
6470   RHSType = RHS.get()->getType();
6471 
6472   // The result of comparisons is 'bool' in C++, 'int' in C.
6473   QualType ResultTy = Context.getLogicalOperationType();
6474 
6475   if (IsRelational) {
6476     if (LHSType->isRealType() && RHSType->isRealType())
6477       return ResultTy;
6478   } else {
6479     // Check for comparisons of floating point operands using != and ==.
6480     if (LHSType->hasFloatingRepresentation())
6481       CheckFloatComparison(Loc, LHS.get(), RHS.get());
6482 
6483     if (LHSType->isArithmeticType() && RHSType->isArithmeticType())
6484       return ResultTy;
6485   }
6486 
6487   bool LHSIsNull = LHS.get()->isNullPointerConstant(Context,
6488                                               Expr::NPC_ValueDependentIsNull);
6489   bool RHSIsNull = RHS.get()->isNullPointerConstant(Context,
6490                                               Expr::NPC_ValueDependentIsNull);
6491 
6492   // All of the following pointer-related warnings are GCC extensions, except
6493   // when handling null pointer constants.
6494   if (LHSType->isPointerType() && RHSType->isPointerType()) { // C99 6.5.8p2
6495     QualType LCanPointeeTy =
6496       LHSType->castAs<PointerType>()->getPointeeType().getCanonicalType();
6497     QualType RCanPointeeTy =
6498       RHSType->castAs<PointerType>()->getPointeeType().getCanonicalType();
6499 
6500     if (getLangOptions().CPlusPlus) {
6501       if (LCanPointeeTy == RCanPointeeTy)
6502         return ResultTy;
6503       if (!IsRelational &&
6504           (LCanPointeeTy->isVoidType() || RCanPointeeTy->isVoidType())) {
6505         // Valid unless comparison between non-null pointer and function pointer
6506         // This is a gcc extension compatibility comparison.
6507         // In a SFINAE context, we treat this as a hard error to maintain
6508         // conformance with the C++ standard.
6509         if ((LCanPointeeTy->isFunctionType() || RCanPointeeTy->isFunctionType())
6510             && !LHSIsNull && !RHSIsNull) {
6511           diagnoseFunctionPointerToVoidComparison(
6512               *this, Loc, LHS, RHS, /*isError*/ isSFINAEContext());
6513 
6514           if (isSFINAEContext())
6515             return QualType();
6516 
6517           RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6518           return ResultTy;
6519         }
6520       }
6521 
6522       if (convertPointersToCompositeType(*this, Loc, LHS, RHS))
6523         return QualType();
6524       else
6525         return ResultTy;
6526     }
6527     // C99 6.5.9p2 and C99 6.5.8p2
6528     if (Context.typesAreCompatible(LCanPointeeTy.getUnqualifiedType(),
6529                                    RCanPointeeTy.getUnqualifiedType())) {
6530       // Valid unless a relational comparison of function pointers
6531       if (IsRelational && LCanPointeeTy->isFunctionType()) {
6532         Diag(Loc, diag::ext_typecheck_ordered_comparison_of_function_pointers)
6533           << LHSType << RHSType << LHS.get()->getSourceRange()
6534           << RHS.get()->getSourceRange();
6535       }
6536     } else if (!IsRelational &&
6537                (LCanPointeeTy->isVoidType() || RCanPointeeTy->isVoidType())) {
6538       // Valid unless comparison between non-null pointer and function pointer
6539       if ((LCanPointeeTy->isFunctionType() || RCanPointeeTy->isFunctionType())
6540           && !LHSIsNull && !RHSIsNull)
6541         diagnoseFunctionPointerToVoidComparison(*this, Loc, LHS, RHS,
6542                                                 /*isError*/false);
6543     } else {
6544       // Invalid
6545       diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS, /*isError*/false);
6546     }
6547     if (LCanPointeeTy != RCanPointeeTy) {
6548       if (LHSIsNull && !RHSIsNull)
6549         LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
6550       else
6551         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6552     }
6553     return ResultTy;
6554   }
6555 
6556   if (getLangOptions().CPlusPlus) {
6557     // Comparison of nullptr_t with itself.
6558     if (LHSType->isNullPtrType() && RHSType->isNullPtrType())
6559       return ResultTy;
6560 
6561     // Comparison of pointers with null pointer constants and equality
6562     // comparisons of member pointers to null pointer constants.
6563     if (RHSIsNull &&
6564         ((LHSType->isAnyPointerType() || LHSType->isNullPtrType()) ||
6565          (!IsRelational &&
6566           (LHSType->isMemberPointerType() || LHSType->isBlockPointerType())))) {
6567       RHS = ImpCastExprToType(RHS.take(), LHSType,
6568                         LHSType->isMemberPointerType()
6569                           ? CK_NullToMemberPointer
6570                           : CK_NullToPointer);
6571       return ResultTy;
6572     }
6573     if (LHSIsNull &&
6574         ((RHSType->isAnyPointerType() || RHSType->isNullPtrType()) ||
6575          (!IsRelational &&
6576           (RHSType->isMemberPointerType() || RHSType->isBlockPointerType())))) {
6577       LHS = ImpCastExprToType(LHS.take(), RHSType,
6578                         RHSType->isMemberPointerType()
6579                           ? CK_NullToMemberPointer
6580                           : CK_NullToPointer);
6581       return ResultTy;
6582     }
6583 
6584     // Comparison of member pointers.
6585     if (!IsRelational &&
6586         LHSType->isMemberPointerType() && RHSType->isMemberPointerType()) {
6587       if (convertPointersToCompositeType(*this, Loc, LHS, RHS))
6588         return QualType();
6589       else
6590         return ResultTy;
6591     }
6592 
6593     // Handle scoped enumeration types specifically, since they don't promote
6594     // to integers.
6595     if (LHS.get()->getType()->isEnumeralType() &&
6596         Context.hasSameUnqualifiedType(LHS.get()->getType(),
6597                                        RHS.get()->getType()))
6598       return ResultTy;
6599   }
6600 
6601   // Handle block pointer types.
6602   if (!IsRelational && LHSType->isBlockPointerType() &&
6603       RHSType->isBlockPointerType()) {
6604     QualType lpointee = LHSType->castAs<BlockPointerType>()->getPointeeType();
6605     QualType rpointee = RHSType->castAs<BlockPointerType>()->getPointeeType();
6606 
6607     if (!LHSIsNull && !RHSIsNull &&
6608         !Context.typesAreCompatible(lpointee, rpointee)) {
6609       Diag(Loc, diag::err_typecheck_comparison_of_distinct_blocks)
6610         << LHSType << RHSType << LHS.get()->getSourceRange()
6611         << RHS.get()->getSourceRange();
6612     }
6613     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6614     return ResultTy;
6615   }
6616 
6617   // Allow block pointers to be compared with null pointer constants.
6618   if (!IsRelational
6619       && ((LHSType->isBlockPointerType() && RHSType->isPointerType())
6620           || (LHSType->isPointerType() && RHSType->isBlockPointerType()))) {
6621     if (!LHSIsNull && !RHSIsNull) {
6622       if (!((RHSType->isPointerType() && RHSType->castAs<PointerType>()
6623              ->getPointeeType()->isVoidType())
6624             || (LHSType->isPointerType() && LHSType->castAs<PointerType>()
6625                 ->getPointeeType()->isVoidType())))
6626         Diag(Loc, diag::err_typecheck_comparison_of_distinct_blocks)
6627           << LHSType << RHSType << LHS.get()->getSourceRange()
6628           << RHS.get()->getSourceRange();
6629     }
6630     if (LHSIsNull && !RHSIsNull)
6631       LHS = ImpCastExprToType(LHS.take(), RHSType,
6632                               RHSType->isPointerType() ? CK_BitCast
6633                                 : CK_AnyPointerToBlockPointerCast);
6634     else
6635       RHS = ImpCastExprToType(RHS.take(), LHSType,
6636                               LHSType->isPointerType() ? CK_BitCast
6637                                 : CK_AnyPointerToBlockPointerCast);
6638     return ResultTy;
6639   }
6640 
6641   if (LHSType->isObjCObjectPointerType() ||
6642       RHSType->isObjCObjectPointerType()) {
6643     const PointerType *LPT = LHSType->getAs<PointerType>();
6644     const PointerType *RPT = RHSType->getAs<PointerType>();
6645     if (LPT || RPT) {
6646       bool LPtrToVoid = LPT ? LPT->getPointeeType()->isVoidType() : false;
6647       bool RPtrToVoid = RPT ? RPT->getPointeeType()->isVoidType() : false;
6648 
6649       if (!LPtrToVoid && !RPtrToVoid &&
6650           !Context.typesAreCompatible(LHSType, RHSType)) {
6651         diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS,
6652                                           /*isError*/false);
6653       }
6654       if (LHSIsNull && !RHSIsNull)
6655         LHS = ImpCastExprToType(LHS.take(), RHSType,
6656                                 RPT ? CK_BitCast :CK_CPointerToObjCPointerCast);
6657       else
6658         RHS = ImpCastExprToType(RHS.take(), LHSType,
6659                                 LPT ? CK_BitCast :CK_CPointerToObjCPointerCast);
6660       return ResultTy;
6661     }
6662     if (LHSType->isObjCObjectPointerType() &&
6663         RHSType->isObjCObjectPointerType()) {
6664       if (!Context.areComparableObjCPointerTypes(LHSType, RHSType))
6665         diagnoseDistinctPointerComparison(*this, Loc, LHS, RHS,
6666                                           /*isError*/false);
6667       if (LHSIsNull && !RHSIsNull)
6668         LHS = ImpCastExprToType(LHS.take(), RHSType, CK_BitCast);
6669       else
6670         RHS = ImpCastExprToType(RHS.take(), LHSType, CK_BitCast);
6671       return ResultTy;
6672     }
6673   }
6674   if ((LHSType->isAnyPointerType() && RHSType->isIntegerType()) ||
6675       (LHSType->isIntegerType() && RHSType->isAnyPointerType())) {
6676     unsigned DiagID = 0;
6677     bool isError = false;
6678     if ((LHSIsNull && LHSType->isIntegerType()) ||
6679         (RHSIsNull && RHSType->isIntegerType())) {
6680       if (IsRelational && !getLangOptions().CPlusPlus)
6681         DiagID = diag::ext_typecheck_ordered_comparison_of_pointer_and_zero;
6682     } else if (IsRelational && !getLangOptions().CPlusPlus)
6683       DiagID = diag::ext_typecheck_ordered_comparison_of_pointer_integer;
6684     else if (getLangOptions().CPlusPlus) {
6685       DiagID = diag::err_typecheck_comparison_of_pointer_integer;
6686       isError = true;
6687     } else
6688       DiagID = diag::ext_typecheck_comparison_of_pointer_integer;
6689 
6690     if (DiagID) {
6691       Diag(Loc, DiagID)
6692         << LHSType << RHSType << LHS.get()->getSourceRange()
6693         << RHS.get()->getSourceRange();
6694       if (isError)
6695         return QualType();
6696     }
6697 
6698     if (LHSType->isIntegerType())
6699       LHS = ImpCastExprToType(LHS.take(), RHSType,
6700                         LHSIsNull ? CK_NullToPointer : CK_IntegralToPointer);
6701     else
6702       RHS = ImpCastExprToType(RHS.take(), LHSType,
6703                         RHSIsNull ? CK_NullToPointer : CK_IntegralToPointer);
6704     return ResultTy;
6705   }
6706 
6707   // Handle block pointers.
6708   if (!IsRelational && RHSIsNull
6709       && LHSType->isBlockPointerType() && RHSType->isIntegerType()) {
6710     RHS = ImpCastExprToType(RHS.take(), LHSType, CK_NullToPointer);
6711     return ResultTy;
6712   }
6713   if (!IsRelational && LHSIsNull
6714       && LHSType->isIntegerType() && RHSType->isBlockPointerType()) {
6715     LHS = ImpCastExprToType(LHS.take(), RHSType, CK_NullToPointer);
6716     return ResultTy;
6717   }
6718 
6719   return InvalidOperands(Loc, LHS, RHS);
6720 }
6721 
6722 /// CheckVectorCompareOperands - vector comparisons are a clang extension that
6723 /// operates on extended vector types.  Instead of producing an IntTy result,
6724 /// like a scalar comparison, a vector comparison produces a vector of integer
6725 /// types.
6726 QualType Sema::CheckVectorCompareOperands(ExprResult &LHS, ExprResult &RHS,
6727                                           SourceLocation Loc,
6728                                           bool IsRelational) {
6729   // Check to make sure we're operating on vectors of the same type and width,
6730   // Allowing one side to be a scalar of element type.
6731   QualType vType = CheckVectorOperands(LHS, RHS, Loc, /*isCompAssign*/false);
6732   if (vType.isNull())
6733     return vType;
6734 
6735   QualType LHSType = LHS.get()->getType();
6736   QualType RHSType = RHS.get()->getType();
6737 
6738   // If AltiVec, the comparison results in a numeric type, i.e.
6739   // bool for C++, int for C
6740   if (vType->getAs<VectorType>()->getVectorKind() == VectorType::AltiVecVector)
6741     return Context.getLogicalOperationType();
6742 
6743   // For non-floating point types, check for self-comparisons of the form
6744   // x == x, x != x, x < x, etc.  These always evaluate to a constant, and
6745   // often indicate logic errors in the program.
6746   if (!LHSType->hasFloatingRepresentation()) {
6747     if (DeclRefExpr* DRL = dyn_cast<DeclRefExpr>(LHS.get()->IgnoreParens()))
6748       if (DeclRefExpr* DRR = dyn_cast<DeclRefExpr>(RHS.get()->IgnoreParens()))
6749         if (DRL->getDecl() == DRR->getDecl())
6750           DiagRuntimeBehavior(Loc, 0,
6751                               PDiag(diag::warn_comparison_always)
6752                                 << 0 // self-
6753                                 << 2 // "a constant"
6754                               );
6755   }
6756 
6757   // Check for comparisons of floating point operands using != and ==.
6758   if (!IsRelational && LHSType->hasFloatingRepresentation()) {
6759     assert (RHSType->hasFloatingRepresentation());
6760     CheckFloatComparison(Loc, LHS.get(), RHS.get());
6761   }
6762 
6763   // Return a signed type that is of identical size and number of elements.
6764   // For floating point vectors, return an integer type of identical size
6765   // and number of elements.
6766   const VectorType *VTy = LHSType->getAs<VectorType>();
6767   unsigned TypeSize = Context.getTypeSize(VTy->getElementType());
6768   if (TypeSize == Context.getTypeSize(Context.CharTy))
6769     return Context.getExtVectorType(Context.CharTy, VTy->getNumElements());
6770   else if (TypeSize == Context.getTypeSize(Context.ShortTy))
6771     return Context.getExtVectorType(Context.ShortTy, VTy->getNumElements());
6772   else if (TypeSize == Context.getTypeSize(Context.IntTy))
6773     return Context.getExtVectorType(Context.IntTy, VTy->getNumElements());
6774   else if (TypeSize == Context.getTypeSize(Context.LongTy))
6775     return Context.getExtVectorType(Context.LongTy, VTy->getNumElements());
6776   assert(TypeSize == Context.getTypeSize(Context.LongLongTy) &&
6777          "Unhandled vector element size in vector compare");
6778   return Context.getExtVectorType(Context.LongLongTy, VTy->getNumElements());
6779 }
6780 
6781 inline QualType Sema::CheckBitwiseOperands(
6782   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, bool IsCompAssign) {
6783   checkArithmeticNull(*this, LHS, RHS, Loc, /*isCompare=*/false);
6784 
6785   if (LHS.get()->getType()->isVectorType() ||
6786       RHS.get()->getType()->isVectorType()) {
6787     if (LHS.get()->getType()->hasIntegerRepresentation() &&
6788         RHS.get()->getType()->hasIntegerRepresentation())
6789       return CheckVectorOperands(LHS, RHS, Loc, IsCompAssign);
6790 
6791     return InvalidOperands(Loc, LHS, RHS);
6792   }
6793 
6794   ExprResult LHSResult = Owned(LHS), RHSResult = Owned(RHS);
6795   QualType compType = UsualArithmeticConversions(LHSResult, RHSResult,
6796                                                  IsCompAssign);
6797   if (LHSResult.isInvalid() || RHSResult.isInvalid())
6798     return QualType();
6799   LHS = LHSResult.take();
6800   RHS = RHSResult.take();
6801 
6802   if (LHS.get()->getType()->isIntegralOrUnscopedEnumerationType() &&
6803       RHS.get()->getType()->isIntegralOrUnscopedEnumerationType())
6804     return compType;
6805   return InvalidOperands(Loc, LHS, RHS);
6806 }
6807 
6808 inline QualType Sema::CheckLogicalOperands( // C99 6.5.[13,14]
6809   ExprResult &LHS, ExprResult &RHS, SourceLocation Loc, unsigned Opc) {
6810 
6811   // Diagnose cases where the user write a logical and/or but probably meant a
6812   // bitwise one.  We do this when the LHS is a non-bool integer and the RHS
6813   // is a constant.
6814   if (LHS.get()->getType()->isIntegerType() &&
6815       !LHS.get()->getType()->isBooleanType() &&
6816       RHS.get()->getType()->isIntegerType() && !RHS.get()->isValueDependent() &&
6817       // Don't warn in macros or template instantiations.
6818       !Loc.isMacroID() && ActiveTemplateInstantiations.empty()) {
6819     // If the RHS can be constant folded, and if it constant folds to something
6820     // that isn't 0 or 1 (which indicate a potential logical operation that
6821     // happened to fold to true/false) then warn.
6822     // Parens on the RHS are ignored.
6823     llvm::APSInt Result;
6824     if (RHS.get()->EvaluateAsInt(Result, Context))
6825       if ((getLangOptions().Bool && !RHS.get()->getType()->isBooleanType()) ||
6826           (Result != 0 && Result != 1)) {
6827         Diag(Loc, diag::warn_logical_instead_of_bitwise)
6828           << RHS.get()->getSourceRange()
6829           << (Opc == BO_LAnd ? "&&" : "||");
6830         // Suggest replacing the logical operator with the bitwise version
6831         Diag(Loc, diag::note_logical_instead_of_bitwise_change_operator)
6832             << (Opc == BO_LAnd ? "&" : "|")
6833             << FixItHint::CreateReplacement(SourceRange(
6834                 Loc, Lexer::getLocForEndOfToken(Loc, 0, getSourceManager(),
6835                                                 getLangOptions())),
6836                                             Opc == BO_LAnd ? "&" : "|");
6837         if (Opc == BO_LAnd)
6838           // Suggest replacing "Foo() && kNonZero" with "Foo()"
6839           Diag(Loc, diag::note_logical_instead_of_bitwise_remove_constant)
6840               << FixItHint::CreateRemoval(
6841                   SourceRange(
6842                       Lexer::getLocForEndOfToken(LHS.get()->getLocEnd(),
6843                                                  0, getSourceManager(),
6844                                                  getLangOptions()),
6845                       RHS.get()->getLocEnd()));
6846       }
6847   }
6848 
6849   if (!Context.getLangOptions().CPlusPlus) {
6850     LHS = UsualUnaryConversions(LHS.take());
6851     if (LHS.isInvalid())
6852       return QualType();
6853 
6854     RHS = UsualUnaryConversions(RHS.take());
6855     if (RHS.isInvalid())
6856       return QualType();
6857 
6858     if (!LHS.get()->getType()->isScalarType() ||
6859         !RHS.get()->getType()->isScalarType())
6860       return InvalidOperands(Loc, LHS, RHS);
6861 
6862     return Context.IntTy;
6863   }
6864 
6865   // The following is safe because we only use this method for
6866   // non-overloadable operands.
6867 
6868   // C++ [expr.log.and]p1
6869   // C++ [expr.log.or]p1
6870   // The operands are both contextually converted to type bool.
6871   ExprResult LHSRes = PerformContextuallyConvertToBool(LHS.get());
6872   if (LHSRes.isInvalid())
6873     return InvalidOperands(Loc, LHS, RHS);
6874   LHS = move(LHSRes);
6875 
6876   ExprResult RHSRes = PerformContextuallyConvertToBool(RHS.get());
6877   if (RHSRes.isInvalid())
6878     return InvalidOperands(Loc, LHS, RHS);
6879   RHS = move(RHSRes);
6880 
6881   // C++ [expr.log.and]p2
6882   // C++ [expr.log.or]p2
6883   // The result is a bool.
6884   return Context.BoolTy;
6885 }
6886 
6887 /// IsReadonlyProperty - Verify that otherwise a valid l-value expression
6888 /// is a read-only property; return true if so. A readonly property expression
6889 /// depends on various declarations and thus must be treated specially.
6890 ///
6891 static bool IsReadonlyProperty(Expr *E, Sema &S) {
6892   if (E->getStmtClass() == Expr::ObjCPropertyRefExprClass) {
6893     const ObjCPropertyRefExpr* PropExpr = cast<ObjCPropertyRefExpr>(E);
6894     if (PropExpr->isImplicitProperty()) return false;
6895 
6896     ObjCPropertyDecl *PDecl = PropExpr->getExplicitProperty();
6897     QualType BaseType = PropExpr->isSuperReceiver() ?
6898                             PropExpr->getSuperReceiverType() :
6899                             PropExpr->getBase()->getType();
6900 
6901     if (const ObjCObjectPointerType *OPT =
6902           BaseType->getAsObjCInterfacePointerType())
6903       if (ObjCInterfaceDecl *IFace = OPT->getInterfaceDecl())
6904         if (S.isPropertyReadonly(PDecl, IFace))
6905           return true;
6906   }
6907   return false;
6908 }
6909 
6910 static bool IsConstProperty(Expr *E, Sema &S) {
6911   if (E->getStmtClass() == Expr::ObjCPropertyRefExprClass) {
6912     const ObjCPropertyRefExpr* PropExpr = cast<ObjCPropertyRefExpr>(E);
6913     if (PropExpr->isImplicitProperty()) return false;
6914 
6915     ObjCPropertyDecl *PDecl = PropExpr->getExplicitProperty();
6916     QualType T = PDecl->getType();
6917     if (T->isReferenceType())
6918       T = T->getAs<ReferenceType>()->getPointeeType();
6919     CanQualType CT = S.Context.getCanonicalType(T);
6920     return CT.isConstQualified();
6921   }
6922   return false;
6923 }
6924 
6925 static bool IsReadonlyMessage(Expr *E, Sema &S) {
6926   if (E->getStmtClass() != Expr::MemberExprClass)
6927     return false;
6928   const MemberExpr *ME = cast<MemberExpr>(E);
6929   NamedDecl *Member = ME->getMemberDecl();
6930   if (isa<FieldDecl>(Member)) {
6931     Expr *Base = ME->getBase()->IgnoreParenImpCasts();
6932     if (Base->getStmtClass() != Expr::ObjCMessageExprClass)
6933       return false;
6934     return cast<ObjCMessageExpr>(Base)->getMethodDecl() != 0;
6935   }
6936   return false;
6937 }
6938 
6939 /// CheckForModifiableLvalue - Verify that E is a modifiable lvalue.  If not,
6940 /// emit an error and return true.  If so, return false.
6941 static bool CheckForModifiableLvalue(Expr *E, SourceLocation Loc, Sema &S) {
6942   SourceLocation OrigLoc = Loc;
6943   Expr::isModifiableLvalueResult IsLV = E->isModifiableLvalue(S.Context,
6944                                                               &Loc);
6945   if (IsLV == Expr::MLV_Valid && IsReadonlyProperty(E, S))
6946     IsLV = Expr::MLV_ReadonlyProperty;
6947   else if (Expr::MLV_ConstQualified && IsConstProperty(E, S))
6948     IsLV = Expr::MLV_Valid;
6949   else if (IsLV == Expr::MLV_ClassTemporary && IsReadonlyMessage(E, S))
6950     IsLV = Expr::MLV_InvalidMessageExpression;
6951   if (IsLV == Expr::MLV_Valid)
6952     return false;
6953 
6954   unsigned Diag = 0;
6955   bool NeedType = false;
6956   switch (IsLV) { // C99 6.5.16p2
6957   case Expr::MLV_ConstQualified:
6958     Diag = diag::err_typecheck_assign_const;
6959 
6960     // In ARC, use some specialized diagnostics for occasions where we
6961     // infer 'const'.  These are always pseudo-strong variables.
6962     if (S.getLangOptions().ObjCAutoRefCount) {
6963       DeclRefExpr *declRef = dyn_cast<DeclRefExpr>(E->IgnoreParenCasts());
6964       if (declRef && isa<VarDecl>(declRef->getDecl())) {
6965         VarDecl *var = cast<VarDecl>(declRef->getDecl());
6966 
6967         // Use the normal diagnostic if it's pseudo-__strong but the
6968         // user actually wrote 'const'.
6969         if (var->isARCPseudoStrong() &&
6970             (!var->getTypeSourceInfo() ||
6971              !var->getTypeSourceInfo()->getType().isConstQualified())) {
6972           // There are two pseudo-strong cases:
6973           //  - self
6974           ObjCMethodDecl *method = S.getCurMethodDecl();
6975           if (method && var == method->getSelfDecl())
6976             Diag = diag::err_typecheck_arr_assign_self;
6977 
6978           //  - fast enumeration variables
6979           else
6980             Diag = diag::err_typecheck_arr_assign_enumeration;
6981 
6982           SourceRange Assign;
6983           if (Loc != OrigLoc)
6984             Assign = SourceRange(OrigLoc, OrigLoc);
6985           S.Diag(Loc, Diag) << E->getSourceRange() << Assign;
6986           // We need to preserve the AST regardless, so migration tool
6987           // can do its job.
6988           return false;
6989         }
6990       }
6991     }
6992 
6993     break;
6994   case Expr::MLV_ArrayType:
6995     Diag = diag::err_typecheck_array_not_modifiable_lvalue;
6996     NeedType = true;
6997     break;
6998   case Expr::MLV_NotObjectType:
6999     Diag = diag::err_typecheck_non_object_not_modifiable_lvalue;
7000     NeedType = true;
7001     break;
7002   case Expr::MLV_LValueCast:
7003     Diag = diag::err_typecheck_lvalue_casts_not_supported;
7004     break;
7005   case Expr::MLV_Valid:
7006     llvm_unreachable("did not take early return for MLV_Valid");
7007   case Expr::MLV_InvalidExpression:
7008   case Expr::MLV_MemberFunction:
7009   case Expr::MLV_ClassTemporary:
7010     Diag = diag::err_typecheck_expression_not_modifiable_lvalue;
7011     break;
7012   case Expr::MLV_IncompleteType:
7013   case Expr::MLV_IncompleteVoidType:
7014     return S.RequireCompleteType(Loc, E->getType(),
7015               S.PDiag(diag::err_typecheck_incomplete_type_not_modifiable_lvalue)
7016                   << E->getSourceRange());
7017   case Expr::MLV_DuplicateVectorComponents:
7018     Diag = diag::err_typecheck_duplicate_vector_components_not_mlvalue;
7019     break;
7020   case Expr::MLV_NotBlockQualified:
7021     Diag = diag::err_block_decl_ref_not_modifiable_lvalue;
7022     break;
7023   case Expr::MLV_ReadonlyProperty:
7024     Diag = diag::error_readonly_property_assignment;
7025     break;
7026   case Expr::MLV_NoSetterProperty:
7027     Diag = diag::error_nosetter_property_assignment;
7028     break;
7029   case Expr::MLV_InvalidMessageExpression:
7030     Diag = diag::error_readonly_message_assignment;
7031     break;
7032   case Expr::MLV_SubObjCPropertySetting:
7033     Diag = diag::error_no_subobject_property_setting;
7034     break;
7035   }
7036 
7037   SourceRange Assign;
7038   if (Loc != OrigLoc)
7039     Assign = SourceRange(OrigLoc, OrigLoc);
7040   if (NeedType)
7041     S.Diag(Loc, Diag) << E->getType() << E->getSourceRange() << Assign;
7042   else
7043     S.Diag(Loc, Diag) << E->getSourceRange() << Assign;
7044   return true;
7045 }
7046 
7047 
7048 
7049 // C99 6.5.16.1
7050 QualType Sema::CheckAssignmentOperands(Expr *LHSExpr, ExprResult &RHS,
7051                                        SourceLocation Loc,
7052                                        QualType CompoundType) {
7053   // Verify that LHS is a modifiable lvalue, and emit error if not.
7054   if (CheckForModifiableLvalue(LHSExpr, Loc, *this))
7055     return QualType();
7056 
7057   QualType LHSType = LHSExpr->getType();
7058   QualType RHSType = CompoundType.isNull() ? RHS.get()->getType() :
7059                                              CompoundType;
7060   AssignConvertType ConvTy;
7061   if (CompoundType.isNull()) {
7062     QualType LHSTy(LHSType);
7063     // Simple assignment "x = y".
7064     if (LHSExpr->getObjectKind() == OK_ObjCProperty) {
7065       ExprResult LHSResult = Owned(LHSExpr);
7066       ConvertPropertyForLValue(LHSResult, RHS, LHSTy);
7067       if (LHSResult.isInvalid())
7068         return QualType();
7069       LHSExpr = LHSResult.take();
7070     }
7071     ConvTy = CheckSingleAssignmentConstraints(LHSTy, RHS);
7072     if (RHS.isInvalid())
7073       return QualType();
7074     // Special case of NSObject attributes on c-style pointer types.
7075     if (ConvTy == IncompatiblePointer &&
7076         ((Context.isObjCNSObjectType(LHSType) &&
7077           RHSType->isObjCObjectPointerType()) ||
7078          (Context.isObjCNSObjectType(RHSType) &&
7079           LHSType->isObjCObjectPointerType())))
7080       ConvTy = Compatible;
7081 
7082     if (ConvTy == Compatible &&
7083         getLangOptions().ObjCNonFragileABI &&
7084         LHSType->isObjCObjectType())
7085       Diag(Loc, diag::err_assignment_requires_nonfragile_object)
7086         << LHSType;
7087 
7088     // If the RHS is a unary plus or minus, check to see if they = and + are
7089     // right next to each other.  If so, the user may have typo'd "x =+ 4"
7090     // instead of "x += 4".
7091     Expr *RHSCheck = RHS.get();
7092     if (ImplicitCastExpr *ICE = dyn_cast<ImplicitCastExpr>(RHSCheck))
7093       RHSCheck = ICE->getSubExpr();
7094     if (UnaryOperator *UO = dyn_cast<UnaryOperator>(RHSCheck)) {
7095       if ((UO->getOpcode() == UO_Plus ||
7096            UO->getOpcode() == UO_Minus) &&
7097           Loc.isFileID() && UO->getOperatorLoc().isFileID() &&
7098           // Only if the two operators are exactly adjacent.
7099           Loc.getLocWithOffset(1) == UO->getOperatorLoc() &&
7100           // And there is a space or other character before the subexpr of the
7101           // unary +/-.  We don't want to warn on "x=-1".
7102           Loc.getLocWithOffset(2) != UO->getSubExpr()->getLocStart() &&
7103           UO->getSubExpr()->getLocStart().isFileID()) {
7104         Diag(Loc, diag::warn_not_compound_assign)
7105           << (UO->getOpcode() == UO_Plus ? "+" : "-")
7106           << SourceRange(UO->getOperatorLoc(), UO->getOperatorLoc());
7107       }
7108     }
7109 
7110     if (ConvTy == Compatible) {
7111       if (LHSType.getObjCLifetime() == Qualifiers::OCL_Strong)
7112         checkRetainCycles(LHSExpr, RHS.get());
7113       else if (getLangOptions().ObjCAutoRefCount)
7114         checkUnsafeExprAssigns(Loc, LHSExpr, RHS.get());
7115     }
7116   } else {
7117     // Compound assignment "x += y"
7118     ConvTy = CheckAssignmentConstraints(Loc, LHSType, RHSType);
7119   }
7120 
7121   if (DiagnoseAssignmentResult(ConvTy, Loc, LHSType, RHSType,
7122                                RHS.get(), AA_Assigning))
7123     return QualType();
7124 
7125   CheckForNullPointerDereference(*this, LHSExpr);
7126 
7127   // C99 6.5.16p3: The type of an assignment expression is the type of the
7128   // left operand unless the left operand has qualified type, in which case
7129   // it is the unqualified version of the type of the left operand.
7130   // C99 6.5.16.1p2: In simple assignment, the value of the right operand
7131   // is converted to the type of the assignment expression (above).
7132   // C++ 5.17p1: the type of the assignment expression is that of its left
7133   // operand.
7134   return (getLangOptions().CPlusPlus
7135           ? LHSType : LHSType.getUnqualifiedType());
7136 }
7137 
7138 // C99 6.5.17
7139 static QualType CheckCommaOperands(Sema &S, ExprResult &LHS, ExprResult &RHS,
7140                                    SourceLocation Loc) {
7141   S.DiagnoseUnusedExprResult(LHS.get());
7142 
7143   LHS = S.CheckPlaceholderExpr(LHS.take());
7144   RHS = S.CheckPlaceholderExpr(RHS.take());
7145   if (LHS.isInvalid() || RHS.isInvalid())
7146     return QualType();
7147 
7148   // C's comma performs lvalue conversion (C99 6.3.2.1) on both its
7149   // operands, but not unary promotions.
7150   // C++'s comma does not do any conversions at all (C++ [expr.comma]p1).
7151 
7152   // So we treat the LHS as a ignored value, and in C++ we allow the
7153   // containing site to determine what should be done with the RHS.
7154   LHS = S.IgnoredValueConversions(LHS.take());
7155   if (LHS.isInvalid())
7156     return QualType();
7157 
7158   if (!S.getLangOptions().CPlusPlus) {
7159     RHS = S.DefaultFunctionArrayLvalueConversion(RHS.take());
7160     if (RHS.isInvalid())
7161       return QualType();
7162     if (!RHS.get()->getType()->isVoidType())
7163       S.RequireCompleteType(Loc, RHS.get()->getType(),
7164                             diag::err_incomplete_type);
7165   }
7166 
7167   return RHS.get()->getType();
7168 }
7169 
7170 /// CheckIncrementDecrementOperand - unlike most "Check" methods, this routine
7171 /// doesn't need to call UsualUnaryConversions or UsualArithmeticConversions.
7172 static QualType CheckIncrementDecrementOperand(Sema &S, Expr *Op,
7173                                                ExprValueKind &VK,
7174                                                SourceLocation OpLoc,
7175                                                bool IsInc, bool IsPrefix) {
7176   if (Op->isTypeDependent())
7177     return S.Context.DependentTy;
7178 
7179   QualType ResType = Op->getType();
7180   assert(!ResType.isNull() && "no type for increment/decrement expression");
7181 
7182   if (S.getLangOptions().CPlusPlus && ResType->isBooleanType()) {
7183     // Decrement of bool is not allowed.
7184     if (!IsInc) {
7185       S.Diag(OpLoc, diag::err_decrement_bool) << Op->getSourceRange();
7186       return QualType();
7187     }
7188     // Increment of bool sets it to true, but is deprecated.
7189     S.Diag(OpLoc, diag::warn_increment_bool) << Op->getSourceRange();
7190   } else if (ResType->isRealType()) {
7191     // OK!
7192   } else if (ResType->isAnyPointerType()) {
7193     // C99 6.5.2.4p2, 6.5.6p2
7194     if (!checkArithmeticOpPointerOperand(S, OpLoc, Op))
7195       return QualType();
7196 
7197     // Diagnose bad cases where we step over interface counts.
7198     else if (!checkArithmethicPointerOnNonFragileABI(S, OpLoc, Op))
7199       return QualType();
7200   } else if (ResType->isAnyComplexType()) {
7201     // C99 does not support ++/-- on complex types, we allow as an extension.
7202     S.Diag(OpLoc, diag::ext_integer_increment_complex)
7203       << ResType << Op->getSourceRange();
7204   } else if (ResType->isPlaceholderType()) {
7205     ExprResult PR = S.CheckPlaceholderExpr(Op);
7206     if (PR.isInvalid()) return QualType();
7207     return CheckIncrementDecrementOperand(S, PR.take(), VK, OpLoc,
7208                                           IsInc, IsPrefix);
7209   } else if (S.getLangOptions().AltiVec && ResType->isVectorType()) {
7210     // OK! ( C/C++ Language Extensions for CBEA(Version 2.6) 10.3 )
7211   } else {
7212     S.Diag(OpLoc, diag::err_typecheck_illegal_increment_decrement)
7213       << ResType << int(IsInc) << Op->getSourceRange();
7214     return QualType();
7215   }
7216   // At this point, we know we have a real, complex or pointer type.
7217   // Now make sure the operand is a modifiable lvalue.
7218   if (CheckForModifiableLvalue(Op, OpLoc, S))
7219     return QualType();
7220   // In C++, a prefix increment is the same type as the operand. Otherwise
7221   // (in C or with postfix), the increment is the unqualified type of the
7222   // operand.
7223   if (IsPrefix && S.getLangOptions().CPlusPlus) {
7224     VK = VK_LValue;
7225     return ResType;
7226   } else {
7227     VK = VK_RValue;
7228     return ResType.getUnqualifiedType();
7229   }
7230 }
7231 
7232 ExprResult Sema::ConvertPropertyForRValue(Expr *E) {
7233   assert(E->getValueKind() == VK_LValue &&
7234          E->getObjectKind() == OK_ObjCProperty);
7235   const ObjCPropertyRefExpr *PRE = E->getObjCProperty();
7236 
7237   QualType T = E->getType();
7238   QualType ReceiverType;
7239   if (PRE->isObjectReceiver())
7240     ReceiverType = PRE->getBase()->getType();
7241   else if (PRE->isSuperReceiver())
7242     ReceiverType = PRE->getSuperReceiverType();
7243   else
7244     ReceiverType = Context.getObjCInterfaceType(PRE->getClassReceiver());
7245 
7246   ExprValueKind VK = VK_RValue;
7247   if (PRE->isImplicitProperty()) {
7248     if (ObjCMethodDecl *GetterMethod =
7249           PRE->getImplicitPropertyGetter()) {
7250       T = getMessageSendResultType(ReceiverType, GetterMethod,
7251                                    PRE->isClassReceiver(),
7252                                    PRE->isSuperReceiver());
7253       VK = Expr::getValueKindForType(GetterMethod->getResultType());
7254     }
7255     else {
7256       Diag(PRE->getLocation(), diag::err_getter_not_found)
7257             << PRE->getBase()->getType();
7258     }
7259   }
7260   else {
7261     // lvalue-ness of an explicit property is determined by
7262     // getter type.
7263     QualType ResT = PRE->getGetterResultType();
7264     VK = Expr::getValueKindForType(ResT);
7265   }
7266 
7267   E = ImplicitCastExpr::Create(Context, T, CK_GetObjCProperty,
7268                                E, 0, VK);
7269 
7270   ExprResult Result = MaybeBindToTemporary(E);
7271   if (!Result.isInvalid())
7272     E = Result.take();
7273 
7274   return Owned(E);
7275 }
7276 
7277 void Sema::ConvertPropertyForLValue(ExprResult &LHS, ExprResult &RHS,
7278                                     QualType &LHSTy) {
7279   assert(LHS.get()->getValueKind() == VK_LValue &&
7280          LHS.get()->getObjectKind() == OK_ObjCProperty);
7281   const ObjCPropertyRefExpr *PropRef = LHS.get()->getObjCProperty();
7282 
7283   bool Consumed = false;
7284 
7285   if (PropRef->isImplicitProperty()) {
7286     // If using property-dot syntax notation for assignment, and there is a
7287     // setter, RHS expression is being passed to the setter argument. So,
7288     // type conversion (and comparison) is RHS to setter's argument type.
7289     if (const ObjCMethodDecl *SetterMD = PropRef->getImplicitPropertySetter()) {
7290       ObjCMethodDecl::param_const_iterator P = SetterMD->param_begin();
7291       LHSTy = (*P)->getType();
7292       Consumed = (getLangOptions().ObjCAutoRefCount &&
7293                   (*P)->hasAttr<NSConsumedAttr>());
7294 
7295     // Otherwise, if the getter returns an l-value, just call that.
7296     } else {
7297       QualType Result = PropRef->getImplicitPropertyGetter()->getResultType();
7298       ExprValueKind VK = Expr::getValueKindForType(Result);
7299       if (VK == VK_LValue) {
7300         LHS = ImplicitCastExpr::Create(Context, LHS.get()->getType(),
7301                                         CK_GetObjCProperty, LHS.take(), 0, VK);
7302         return;
7303       }
7304     }
7305   } else {
7306     const ObjCMethodDecl *setter
7307       = PropRef->getExplicitProperty()->getSetterMethodDecl();
7308     if (setter) {
7309       ObjCMethodDecl::param_const_iterator P = setter->param_begin();
7310       LHSTy = (*P)->getType();
7311       if (getLangOptions().ObjCAutoRefCount)
7312         Consumed = (*P)->hasAttr<NSConsumedAttr>();
7313     }
7314   }
7315 
7316   if ((getLangOptions().CPlusPlus && LHSTy->isRecordType()) ||
7317       getLangOptions().ObjCAutoRefCount) {
7318     InitializedEntity Entity =
7319       InitializedEntity::InitializeParameter(Context, LHSTy, Consumed);
7320     ExprResult ArgE = PerformCopyInitialization(Entity, SourceLocation(), RHS);
7321     if (!ArgE.isInvalid()) {
7322       RHS = ArgE;
7323       if (getLangOptions().ObjCAutoRefCount && !PropRef->isSuperReceiver())
7324         checkRetainCycles(const_cast<Expr*>(PropRef->getBase()), RHS.get());
7325     }
7326   }
7327   LHSTy = LHSTy.getNonReferenceType();
7328 }
7329 
7330 
7331 /// getPrimaryDecl - Helper function for CheckAddressOfOperand().
7332 /// This routine allows us to typecheck complex/recursive expressions
7333 /// where the declaration is needed for type checking. We only need to
7334 /// handle cases when the expression references a function designator
7335 /// or is an lvalue. Here are some examples:
7336 ///  - &(x) => x
7337 ///  - &*****f => f for f a function designator.
7338 ///  - &s.xx => s
7339 ///  - &s.zz[1].yy -> s, if zz is an array
7340 ///  - *(x + 1) -> x, if x is an array
7341 ///  - &"123"[2] -> 0
7342 ///  - & __real__ x -> x
7343 static ValueDecl *getPrimaryDecl(Expr *E) {
7344   switch (E->getStmtClass()) {
7345   case Stmt::DeclRefExprClass:
7346     return cast<DeclRefExpr>(E)->getDecl();
7347   case Stmt::MemberExprClass:
7348     // If this is an arrow operator, the address is an offset from
7349     // the base's value, so the object the base refers to is
7350     // irrelevant.
7351     if (cast<MemberExpr>(E)->isArrow())
7352       return 0;
7353     // Otherwise, the expression refers to a part of the base
7354     return getPrimaryDecl(cast<MemberExpr>(E)->getBase());
7355   case Stmt::ArraySubscriptExprClass: {
7356     // FIXME: This code shouldn't be necessary!  We should catch the implicit
7357     // promotion of register arrays earlier.
7358     Expr* Base = cast<ArraySubscriptExpr>(E)->getBase();
7359     if (ImplicitCastExpr* ICE = dyn_cast<ImplicitCastExpr>(Base)) {
7360       if (ICE->getSubExpr()->getType()->isArrayType())
7361         return getPrimaryDecl(ICE->getSubExpr());
7362     }
7363     return 0;
7364   }
7365   case Stmt::UnaryOperatorClass: {
7366     UnaryOperator *UO = cast<UnaryOperator>(E);
7367 
7368     switch(UO->getOpcode()) {
7369     case UO_Real:
7370     case UO_Imag:
7371     case UO_Extension:
7372       return getPrimaryDecl(UO->getSubExpr());
7373     default:
7374       return 0;
7375     }
7376   }
7377   case Stmt::ParenExprClass:
7378     return getPrimaryDecl(cast<ParenExpr>(E)->getSubExpr());
7379   case Stmt::ImplicitCastExprClass:
7380     // If the result of an implicit cast is an l-value, we care about
7381     // the sub-expression; otherwise, the result here doesn't matter.
7382     return getPrimaryDecl(cast<ImplicitCastExpr>(E)->getSubExpr());
7383   default:
7384     return 0;
7385   }
7386 }
7387 
7388 namespace {
7389   enum {
7390     AO_Bit_Field = 0,
7391     AO_Vector_Element = 1,
7392     AO_Property_Expansion = 2,
7393     AO_Register_Variable = 3,
7394     AO_No_Error = 4
7395   };
7396 }
7397 /// \brief Diagnose invalid operand for address of operations.
7398 ///
7399 /// \param Type The type of operand which cannot have its address taken.
7400 static void diagnoseAddressOfInvalidType(Sema &S, SourceLocation Loc,
7401                                          Expr *E, unsigned Type) {
7402   S.Diag(Loc, diag::err_typecheck_address_of) << Type << E->getSourceRange();
7403 }
7404 
7405 /// CheckAddressOfOperand - The operand of & must be either a function
7406 /// designator or an lvalue designating an object. If it is an lvalue, the
7407 /// object cannot be declared with storage class register or be a bit field.
7408 /// Note: The usual conversions are *not* applied to the operand of the &
7409 /// operator (C99 6.3.2.1p[2-4]), and its result is never an lvalue.
7410 /// In C++, the operand might be an overloaded function name, in which case
7411 /// we allow the '&' but retain the overloaded-function type.
7412 static QualType CheckAddressOfOperand(Sema &S, Expr *OrigOp,
7413                                       SourceLocation OpLoc) {
7414   if (OrigOp->isTypeDependent())
7415     return S.Context.DependentTy;
7416   if (OrigOp->getType() == S.Context.OverloadTy) {
7417     if (!isa<OverloadExpr>(OrigOp->IgnoreParens())) {
7418       S.Diag(OpLoc, diag::err_typecheck_invalid_lvalue_addrof)
7419         << OrigOp->getSourceRange();
7420       return QualType();
7421     }
7422 
7423     return S.Context.OverloadTy;
7424   }
7425   if (OrigOp->getType() == S.Context.UnknownAnyTy)
7426     return S.Context.UnknownAnyTy;
7427   if (OrigOp->getType() == S.Context.BoundMemberTy) {
7428     S.Diag(OpLoc, diag::err_invalid_form_pointer_member_function)
7429       << OrigOp->getSourceRange();
7430     return QualType();
7431   }
7432 
7433   assert(!OrigOp->getType()->isPlaceholderType());
7434 
7435   // Make sure to ignore parentheses in subsequent checks
7436   Expr *op = OrigOp->IgnoreParens();
7437 
7438   if (S.getLangOptions().C99) {
7439     // Implement C99-only parts of addressof rules.
7440     if (UnaryOperator* uOp = dyn_cast<UnaryOperator>(op)) {
7441       if (uOp->getOpcode() == UO_Deref)
7442         // Per C99 6.5.3.2, the address of a deref always returns a valid result
7443         // (assuming the deref expression is valid).
7444         return uOp->getSubExpr()->getType();
7445     }
7446     // Technically, there should be a check for array subscript
7447     // expressions here, but the result of one is always an lvalue anyway.
7448   }
7449   ValueDecl *dcl = getPrimaryDecl(op);
7450   Expr::LValueClassification lval = op->ClassifyLValue(S.Context);
7451   unsigned AddressOfError = AO_No_Error;
7452 
7453   if (lval == Expr::LV_ClassTemporary) {
7454     bool sfinae = S.isSFINAEContext();
7455     S.Diag(OpLoc, sfinae ? diag::err_typecheck_addrof_class_temporary
7456                          : diag::ext_typecheck_addrof_class_temporary)
7457       << op->getType() << op->getSourceRange();
7458     if (sfinae)
7459       return QualType();
7460   } else if (isa<ObjCSelectorExpr>(op)) {
7461     return S.Context.getPointerType(op->getType());
7462   } else if (lval == Expr::LV_MemberFunction) {
7463     // If it's an instance method, make a member pointer.
7464     // The expression must have exactly the form &A::foo.
7465 
7466     // If the underlying expression isn't a decl ref, give up.
7467     if (!isa<DeclRefExpr>(op)) {
7468       S.Diag(OpLoc, diag::err_invalid_form_pointer_member_function)
7469         << OrigOp->getSourceRange();
7470       return QualType();
7471     }
7472     DeclRefExpr *DRE = cast<DeclRefExpr>(op);
7473     CXXMethodDecl *MD = cast<CXXMethodDecl>(DRE->getDecl());
7474 
7475     // The id-expression was parenthesized.
7476     if (OrigOp != DRE) {
7477       S.Diag(OpLoc, diag::err_parens_pointer_member_function)
7478         << OrigOp->getSourceRange();
7479 
7480     // The method was named without a qualifier.
7481     } else if (!DRE->getQualifier()) {
7482       S.Diag(OpLoc, diag::err_unqualified_pointer_member_function)
7483         << op->getSourceRange();
7484     }
7485 
7486     return S.Context.getMemberPointerType(op->getType(),
7487               S.Context.getTypeDeclType(MD->getParent()).getTypePtr());
7488   } else if (lval != Expr::LV_Valid && lval != Expr::LV_IncompleteVoidType) {
7489     // C99 6.5.3.2p1
7490     // The operand must be either an l-value or a function designator
7491     if (!op->getType()->isFunctionType()) {
7492       // FIXME: emit more specific diag...
7493       S.Diag(OpLoc, diag::err_typecheck_invalid_lvalue_addrof)
7494         << op->getSourceRange();
7495       return QualType();
7496     }
7497   } else if (op->getObjectKind() == OK_BitField) { // C99 6.5.3.2p1
7498     // The operand cannot be a bit-field
7499     AddressOfError = AO_Bit_Field;
7500   } else if (op->getObjectKind() == OK_VectorComponent) {
7501     // The operand cannot be an element of a vector
7502     AddressOfError = AO_Vector_Element;
7503   } else if (op->getObjectKind() == OK_ObjCProperty) {
7504     // cannot take address of a property expression.
7505     AddressOfError = AO_Property_Expansion;
7506   } else if (dcl) { // C99 6.5.3.2p1
7507     // We have an lvalue with a decl. Make sure the decl is not declared
7508     // with the register storage-class specifier.
7509     if (const VarDecl *vd = dyn_cast<VarDecl>(dcl)) {
7510       // in C++ it is not error to take address of a register
7511       // variable (c++03 7.1.1P3)
7512       if (vd->getStorageClass() == SC_Register &&
7513           !S.getLangOptions().CPlusPlus) {
7514         AddressOfError = AO_Register_Variable;
7515       }
7516     } else if (isa<FunctionTemplateDecl>(dcl)) {
7517       return S.Context.OverloadTy;
7518     } else if (isa<FieldDecl>(dcl) || isa<IndirectFieldDecl>(dcl)) {
7519       // Okay: we can take the address of a field.
7520       // Could be a pointer to member, though, if there is an explicit
7521       // scope qualifier for the class.
7522       if (isa<DeclRefExpr>(op) && cast<DeclRefExpr>(op)->getQualifier()) {
7523         DeclContext *Ctx = dcl->getDeclContext();
7524         if (Ctx && Ctx->isRecord()) {
7525           if (dcl->getType()->isReferenceType()) {
7526             S.Diag(OpLoc,
7527                    diag::err_cannot_form_pointer_to_member_of_reference_type)
7528               << dcl->getDeclName() << dcl->getType();
7529             return QualType();
7530           }
7531 
7532           while (cast<RecordDecl>(Ctx)->isAnonymousStructOrUnion())
7533             Ctx = Ctx->getParent();
7534           return S.Context.getMemberPointerType(op->getType(),
7535                 S.Context.getTypeDeclType(cast<RecordDecl>(Ctx)).getTypePtr());
7536         }
7537       }
7538     } else if (!isa<FunctionDecl>(dcl) && !isa<NonTypeTemplateParmDecl>(dcl))
7539       llvm_unreachable("Unknown/unexpected decl type");
7540   }
7541 
7542   if (AddressOfError != AO_No_Error) {
7543     diagnoseAddressOfInvalidType(S, OpLoc, op, AddressOfError);
7544     return QualType();
7545   }
7546 
7547   if (lval == Expr::LV_IncompleteVoidType) {
7548     // Taking the address of a void variable is technically illegal, but we
7549     // allow it in cases which are otherwise valid.
7550     // Example: "extern void x; void* y = &x;".
7551     S.Diag(OpLoc, diag::ext_typecheck_addrof_void) << op->getSourceRange();
7552   }
7553 
7554   // If the operand has type "type", the result has type "pointer to type".
7555   if (op->getType()->isObjCObjectType())
7556     return S.Context.getObjCObjectPointerType(op->getType());
7557   return S.Context.getPointerType(op->getType());
7558 }
7559 
7560 /// CheckIndirectionOperand - Type check unary indirection (prefix '*').
7561 static QualType CheckIndirectionOperand(Sema &S, Expr *Op, ExprValueKind &VK,
7562                                         SourceLocation OpLoc) {
7563   if (Op->isTypeDependent())
7564     return S.Context.DependentTy;
7565 
7566   ExprResult ConvResult = S.UsualUnaryConversions(Op);
7567   if (ConvResult.isInvalid())
7568     return QualType();
7569   Op = ConvResult.take();
7570   QualType OpTy = Op->getType();
7571   QualType Result;
7572 
7573   if (isa<CXXReinterpretCastExpr>(Op)) {
7574     QualType OpOrigType = Op->IgnoreParenCasts()->getType();
7575     S.CheckCompatibleReinterpretCast(OpOrigType, OpTy, /*IsDereference*/true,
7576                                      Op->getSourceRange());
7577   }
7578 
7579   // Note that per both C89 and C99, indirection is always legal, even if OpTy
7580   // is an incomplete type or void.  It would be possible to warn about
7581   // dereferencing a void pointer, but it's completely well-defined, and such a
7582   // warning is unlikely to catch any mistakes.
7583   if (const PointerType *PT = OpTy->getAs<PointerType>())
7584     Result = PT->getPointeeType();
7585   else if (const ObjCObjectPointerType *OPT =
7586              OpTy->getAs<ObjCObjectPointerType>())
7587     Result = OPT->getPointeeType();
7588   else {
7589     ExprResult PR = S.CheckPlaceholderExpr(Op);
7590     if (PR.isInvalid()) return QualType();
7591     if (PR.take() != Op)
7592       return CheckIndirectionOperand(S, PR.take(), VK, OpLoc);
7593   }
7594 
7595   if (Result.isNull()) {
7596     S.Diag(OpLoc, diag::err_typecheck_indirection_requires_pointer)
7597       << OpTy << Op->getSourceRange();
7598     return QualType();
7599   }
7600 
7601   // Dereferences are usually l-values...
7602   VK = VK_LValue;
7603 
7604   // ...except that certain expressions are never l-values in C.
7605   if (!S.getLangOptions().CPlusPlus && Result.isCForbiddenLValueType())
7606     VK = VK_RValue;
7607 
7608   return Result;
7609 }
7610 
7611 static inline BinaryOperatorKind ConvertTokenKindToBinaryOpcode(
7612   tok::TokenKind Kind) {
7613   BinaryOperatorKind Opc;
7614   switch (Kind) {
7615   default: llvm_unreachable("Unknown binop!");
7616   case tok::periodstar:           Opc = BO_PtrMemD; break;
7617   case tok::arrowstar:            Opc = BO_PtrMemI; break;
7618   case tok::star:                 Opc = BO_Mul; break;
7619   case tok::slash:                Opc = BO_Div; break;
7620   case tok::percent:              Opc = BO_Rem; break;
7621   case tok::plus:                 Opc = BO_Add; break;
7622   case tok::minus:                Opc = BO_Sub; break;
7623   case tok::lessless:             Opc = BO_Shl; break;
7624   case tok::greatergreater:       Opc = BO_Shr; break;
7625   case tok::lessequal:            Opc = BO_LE; break;
7626   case tok::less:                 Opc = BO_LT; break;
7627   case tok::greaterequal:         Opc = BO_GE; break;
7628   case tok::greater:              Opc = BO_GT; break;
7629   case tok::exclaimequal:         Opc = BO_NE; break;
7630   case tok::equalequal:           Opc = BO_EQ; break;
7631   case tok::amp:                  Opc = BO_And; break;
7632   case tok::caret:                Opc = BO_Xor; break;
7633   case tok::pipe:                 Opc = BO_Or; break;
7634   case tok::ampamp:               Opc = BO_LAnd; break;
7635   case tok::pipepipe:             Opc = BO_LOr; break;
7636   case tok::equal:                Opc = BO_Assign; break;
7637   case tok::starequal:            Opc = BO_MulAssign; break;
7638   case tok::slashequal:           Opc = BO_DivAssign; break;
7639   case tok::percentequal:         Opc = BO_RemAssign; break;
7640   case tok::plusequal:            Opc = BO_AddAssign; break;
7641   case tok::minusequal:           Opc = BO_SubAssign; break;
7642   case tok::lesslessequal:        Opc = BO_ShlAssign; break;
7643   case tok::greatergreaterequal:  Opc = BO_ShrAssign; break;
7644   case tok::ampequal:             Opc = BO_AndAssign; break;
7645   case tok::caretequal:           Opc = BO_XorAssign; break;
7646   case tok::pipeequal:            Opc = BO_OrAssign; break;
7647   case tok::comma:                Opc = BO_Comma; break;
7648   }
7649   return Opc;
7650 }
7651 
7652 static inline UnaryOperatorKind ConvertTokenKindToUnaryOpcode(
7653   tok::TokenKind Kind) {
7654   UnaryOperatorKind Opc;
7655   switch (Kind) {
7656   default: llvm_unreachable("Unknown unary op!");
7657   case tok::plusplus:     Opc = UO_PreInc; break;
7658   case tok::minusminus:   Opc = UO_PreDec; break;
7659   case tok::amp:          Opc = UO_AddrOf; break;
7660   case tok::star:         Opc = UO_Deref; break;
7661   case tok::plus:         Opc = UO_Plus; break;
7662   case tok::minus:        Opc = UO_Minus; break;
7663   case tok::tilde:        Opc = UO_Not; break;
7664   case tok::exclaim:      Opc = UO_LNot; break;
7665   case tok::kw___real:    Opc = UO_Real; break;
7666   case tok::kw___imag:    Opc = UO_Imag; break;
7667   case tok::kw___extension__: Opc = UO_Extension; break;
7668   }
7669   return Opc;
7670 }
7671 
7672 /// DiagnoseSelfAssignment - Emits a warning if a value is assigned to itself.
7673 /// This warning is only emitted for builtin assignment operations. It is also
7674 /// suppressed in the event of macro expansions.
7675 static void DiagnoseSelfAssignment(Sema &S, Expr *LHSExpr, Expr *RHSExpr,
7676                                    SourceLocation OpLoc) {
7677   if (!S.ActiveTemplateInstantiations.empty())
7678     return;
7679   if (OpLoc.isInvalid() || OpLoc.isMacroID())
7680     return;
7681   LHSExpr = LHSExpr->IgnoreParenImpCasts();
7682   RHSExpr = RHSExpr->IgnoreParenImpCasts();
7683   const DeclRefExpr *LHSDeclRef = dyn_cast<DeclRefExpr>(LHSExpr);
7684   const DeclRefExpr *RHSDeclRef = dyn_cast<DeclRefExpr>(RHSExpr);
7685   if (!LHSDeclRef || !RHSDeclRef ||
7686       LHSDeclRef->getLocation().isMacroID() ||
7687       RHSDeclRef->getLocation().isMacroID())
7688     return;
7689   const ValueDecl *LHSDecl =
7690     cast<ValueDecl>(LHSDeclRef->getDecl()->getCanonicalDecl());
7691   const ValueDecl *RHSDecl =
7692     cast<ValueDecl>(RHSDeclRef->getDecl()->getCanonicalDecl());
7693   if (LHSDecl != RHSDecl)
7694     return;
7695   if (LHSDecl->getType().isVolatileQualified())
7696     return;
7697   if (const ReferenceType *RefTy = LHSDecl->getType()->getAs<ReferenceType>())
7698     if (RefTy->getPointeeType().isVolatileQualified())
7699       return;
7700 
7701   S.Diag(OpLoc, diag::warn_self_assignment)
7702       << LHSDeclRef->getType()
7703       << LHSExpr->getSourceRange() << RHSExpr->getSourceRange();
7704 }
7705 
7706 /// CreateBuiltinBinOp - Creates a new built-in binary operation with
7707 /// operator @p Opc at location @c TokLoc. This routine only supports
7708 /// built-in operations; ActOnBinOp handles overloaded operators.
7709 ExprResult Sema::CreateBuiltinBinOp(SourceLocation OpLoc,
7710                                     BinaryOperatorKind Opc,
7711                                     Expr *LHSExpr, Expr *RHSExpr) {
7712   ExprResult LHS = Owned(LHSExpr), RHS = Owned(RHSExpr);
7713   QualType ResultTy;     // Result type of the binary operator.
7714   // The following two variables are used for compound assignment operators
7715   QualType CompLHSTy;    // Type of LHS after promotions for computation
7716   QualType CompResultTy; // Type of computation result
7717   ExprValueKind VK = VK_RValue;
7718   ExprObjectKind OK = OK_Ordinary;
7719 
7720   // Check if a 'foo<int>' involved in a binary op, identifies a single
7721   // function unambiguously (i.e. an lvalue ala 13.4)
7722   // But since an assignment can trigger target based overload, exclude it in
7723   // our blind search. i.e:
7724   // template<class T> void f(); template<class T, class U> void f(U);
7725   // f<int> == 0;  // resolve f<int> blindly
7726   // void (*p)(int); p = f<int>;  // resolve f<int> using target
7727   if (Opc != BO_Assign) {
7728     ExprResult resolvedLHS = CheckPlaceholderExpr(LHS.get());
7729     if (!resolvedLHS.isUsable()) return ExprError();
7730     LHS = move(resolvedLHS);
7731 
7732     ExprResult resolvedRHS = CheckPlaceholderExpr(RHS.get());
7733     if (!resolvedRHS.isUsable()) return ExprError();
7734     RHS = move(resolvedRHS);
7735   }
7736 
7737   switch (Opc) {
7738   case BO_Assign:
7739     ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, QualType());
7740     if (getLangOptions().CPlusPlus &&
7741         LHS.get()->getObjectKind() != OK_ObjCProperty) {
7742       VK = LHS.get()->getValueKind();
7743       OK = LHS.get()->getObjectKind();
7744     }
7745     if (!ResultTy.isNull())
7746       DiagnoseSelfAssignment(*this, LHS.get(), RHS.get(), OpLoc);
7747     break;
7748   case BO_PtrMemD:
7749   case BO_PtrMemI:
7750     ResultTy = CheckPointerToMemberOperands(LHS, RHS, VK, OpLoc,
7751                                             Opc == BO_PtrMemI);
7752     break;
7753   case BO_Mul:
7754   case BO_Div:
7755     ResultTy = CheckMultiplyDivideOperands(LHS, RHS, OpLoc, false,
7756                                            Opc == BO_Div);
7757     break;
7758   case BO_Rem:
7759     ResultTy = CheckRemainderOperands(LHS, RHS, OpLoc);
7760     break;
7761   case BO_Add:
7762     ResultTy = CheckAdditionOperands(LHS, RHS, OpLoc);
7763     break;
7764   case BO_Sub:
7765     ResultTy = CheckSubtractionOperands(LHS, RHS, OpLoc);
7766     break;
7767   case BO_Shl:
7768   case BO_Shr:
7769     ResultTy = CheckShiftOperands(LHS, RHS, OpLoc, Opc);
7770     break;
7771   case BO_LE:
7772   case BO_LT:
7773   case BO_GE:
7774   case BO_GT:
7775     ResultTy = CheckCompareOperands(LHS, RHS, OpLoc, Opc, true);
7776     break;
7777   case BO_EQ:
7778   case BO_NE:
7779     ResultTy = CheckCompareOperands(LHS, RHS, OpLoc, Opc, false);
7780     break;
7781   case BO_And:
7782   case BO_Xor:
7783   case BO_Or:
7784     ResultTy = CheckBitwiseOperands(LHS, RHS, OpLoc);
7785     break;
7786   case BO_LAnd:
7787   case BO_LOr:
7788     ResultTy = CheckLogicalOperands(LHS, RHS, OpLoc, Opc);
7789     break;
7790   case BO_MulAssign:
7791   case BO_DivAssign:
7792     CompResultTy = CheckMultiplyDivideOperands(LHS, RHS, OpLoc, true,
7793                                                Opc == BO_DivAssign);
7794     CompLHSTy = CompResultTy;
7795     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7796       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7797     break;
7798   case BO_RemAssign:
7799     CompResultTy = CheckRemainderOperands(LHS, RHS, OpLoc, true);
7800     CompLHSTy = CompResultTy;
7801     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7802       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7803     break;
7804   case BO_AddAssign:
7805     CompResultTy = CheckAdditionOperands(LHS, RHS, OpLoc, &CompLHSTy);
7806     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7807       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7808     break;
7809   case BO_SubAssign:
7810     CompResultTy = CheckSubtractionOperands(LHS, RHS, OpLoc, &CompLHSTy);
7811     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7812       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7813     break;
7814   case BO_ShlAssign:
7815   case BO_ShrAssign:
7816     CompResultTy = CheckShiftOperands(LHS, RHS, OpLoc, Opc, true);
7817     CompLHSTy = CompResultTy;
7818     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7819       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7820     break;
7821   case BO_AndAssign:
7822   case BO_XorAssign:
7823   case BO_OrAssign:
7824     CompResultTy = CheckBitwiseOperands(LHS, RHS, OpLoc, true);
7825     CompLHSTy = CompResultTy;
7826     if (!CompResultTy.isNull() && !LHS.isInvalid() && !RHS.isInvalid())
7827       ResultTy = CheckAssignmentOperands(LHS.get(), RHS, OpLoc, CompResultTy);
7828     break;
7829   case BO_Comma:
7830     ResultTy = CheckCommaOperands(*this, LHS, RHS, OpLoc);
7831     if (getLangOptions().CPlusPlus && !RHS.isInvalid()) {
7832       VK = RHS.get()->getValueKind();
7833       OK = RHS.get()->getObjectKind();
7834     }
7835     break;
7836   }
7837   if (ResultTy.isNull() || LHS.isInvalid() || RHS.isInvalid())
7838     return ExprError();
7839 
7840   // Check for array bounds violations for both sides of the BinaryOperator
7841   CheckArrayAccess(LHS.get());
7842   CheckArrayAccess(RHS.get());
7843 
7844   if (CompResultTy.isNull())
7845     return Owned(new (Context) BinaryOperator(LHS.take(), RHS.take(), Opc,
7846                                               ResultTy, VK, OK, OpLoc));
7847   if (getLangOptions().CPlusPlus && LHS.get()->getObjectKind() !=
7848       OK_ObjCProperty) {
7849     VK = VK_LValue;
7850     OK = LHS.get()->getObjectKind();
7851   }
7852   return Owned(new (Context) CompoundAssignOperator(LHS.take(), RHS.take(), Opc,
7853                                                     ResultTy, VK, OK, CompLHSTy,
7854                                                     CompResultTy, OpLoc));
7855 }
7856 
7857 /// DiagnoseBitwisePrecedence - Emit a warning when bitwise and comparison
7858 /// operators are mixed in a way that suggests that the programmer forgot that
7859 /// comparison operators have higher precedence. The most typical example of
7860 /// such code is "flags & 0x0020 != 0", which is equivalent to "flags & 1".
7861 static void DiagnoseBitwisePrecedence(Sema &Self, BinaryOperatorKind Opc,
7862                                       SourceLocation OpLoc, Expr *LHSExpr,
7863                                       Expr *RHSExpr) {
7864   typedef BinaryOperator BinOp;
7865   BinOp::Opcode LHSopc = static_cast<BinOp::Opcode>(-1),
7866                 RHSopc = static_cast<BinOp::Opcode>(-1);
7867   if (BinOp *BO = dyn_cast<BinOp>(LHSExpr))
7868     LHSopc = BO->getOpcode();
7869   if (BinOp *BO = dyn_cast<BinOp>(RHSExpr))
7870     RHSopc = BO->getOpcode();
7871 
7872   // Subs are not binary operators.
7873   if (LHSopc == -1 && RHSopc == -1)
7874     return;
7875 
7876   // Bitwise operations are sometimes used as eager logical ops.
7877   // Don't diagnose this.
7878   if ((BinOp::isComparisonOp(LHSopc) || BinOp::isBitwiseOp(LHSopc)) &&
7879       (BinOp::isComparisonOp(RHSopc) || BinOp::isBitwiseOp(RHSopc)))
7880     return;
7881 
7882   bool isLeftComp = BinOp::isComparisonOp(LHSopc);
7883   bool isRightComp = BinOp::isComparisonOp(RHSopc);
7884   if (!isLeftComp && !isRightComp) return;
7885 
7886   SourceRange DiagRange = isLeftComp ? SourceRange(LHSExpr->getLocStart(),
7887                                                    OpLoc)
7888                                      : SourceRange(OpLoc, RHSExpr->getLocEnd());
7889   std::string OpStr = isLeftComp ? BinOp::getOpcodeStr(LHSopc)
7890                                  : BinOp::getOpcodeStr(RHSopc);
7891   SourceRange ParensRange = isLeftComp ?
7892       SourceRange(cast<BinOp>(LHSExpr)->getRHS()->getLocStart(),
7893                   RHSExpr->getLocEnd())
7894     : SourceRange(LHSExpr->getLocStart(),
7895                   cast<BinOp>(RHSExpr)->getLHS()->getLocStart());
7896 
7897   Self.Diag(OpLoc, diag::warn_precedence_bitwise_rel)
7898     << DiagRange << BinOp::getOpcodeStr(Opc) << OpStr;
7899   SuggestParentheses(Self, OpLoc,
7900     Self.PDiag(diag::note_precedence_bitwise_silence) << OpStr,
7901     RHSExpr->getSourceRange());
7902   SuggestParentheses(Self, OpLoc,
7903     Self.PDiag(diag::note_precedence_bitwise_first) << BinOp::getOpcodeStr(Opc),
7904     ParensRange);
7905 }
7906 
7907 /// \brief It accepts a '&' expr that is inside a '|' one.
7908 /// Emit a diagnostic together with a fixit hint that wraps the '&' expression
7909 /// in parentheses.
7910 static void
7911 EmitDiagnosticForBitwiseAndInBitwiseOr(Sema &Self, SourceLocation OpLoc,
7912                                        BinaryOperator *Bop) {
7913   assert(Bop->getOpcode() == BO_And);
7914   Self.Diag(Bop->getOperatorLoc(), diag::warn_bitwise_and_in_bitwise_or)
7915       << Bop->getSourceRange() << OpLoc;
7916   SuggestParentheses(Self, Bop->getOperatorLoc(),
7917     Self.PDiag(diag::note_bitwise_and_in_bitwise_or_silence),
7918     Bop->getSourceRange());
7919 }
7920 
7921 /// \brief It accepts a '&&' expr that is inside a '||' one.
7922 /// Emit a diagnostic together with a fixit hint that wraps the '&&' expression
7923 /// in parentheses.
7924 static void
7925 EmitDiagnosticForLogicalAndInLogicalOr(Sema &Self, SourceLocation OpLoc,
7926                                        BinaryOperator *Bop) {
7927   assert(Bop->getOpcode() == BO_LAnd);
7928   Self.Diag(Bop->getOperatorLoc(), diag::warn_logical_and_in_logical_or)
7929       << Bop->getSourceRange() << OpLoc;
7930   SuggestParentheses(Self, Bop->getOperatorLoc(),
7931     Self.PDiag(diag::note_logical_and_in_logical_or_silence),
7932     Bop->getSourceRange());
7933 }
7934 
7935 /// \brief Returns true if the given expression can be evaluated as a constant
7936 /// 'true'.
7937 static bool EvaluatesAsTrue(Sema &S, Expr *E) {
7938   bool Res;
7939   return E->EvaluateAsBooleanCondition(Res, S.getASTContext()) && Res;
7940 }
7941 
7942 /// \brief Returns true if the given expression can be evaluated as a constant
7943 /// 'false'.
7944 static bool EvaluatesAsFalse(Sema &S, Expr *E) {
7945   bool Res;
7946   return E->EvaluateAsBooleanCondition(Res, S.getASTContext()) && !Res;
7947 }
7948 
7949 /// \brief Look for '&&' in the left hand of a '||' expr.
7950 static void DiagnoseLogicalAndInLogicalOrLHS(Sema &S, SourceLocation OpLoc,
7951                                              Expr *LHSExpr, Expr *RHSExpr) {
7952   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(LHSExpr)) {
7953     if (Bop->getOpcode() == BO_LAnd) {
7954       // If it's "a && b || 0" don't warn since the precedence doesn't matter.
7955       if (EvaluatesAsFalse(S, RHSExpr))
7956         return;
7957       // If it's "1 && a || b" don't warn since the precedence doesn't matter.
7958       if (!EvaluatesAsTrue(S, Bop->getLHS()))
7959         return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, Bop);
7960     } else if (Bop->getOpcode() == BO_LOr) {
7961       if (BinaryOperator *RBop = dyn_cast<BinaryOperator>(Bop->getRHS())) {
7962         // If it's "a || b && 1 || c" we didn't warn earlier for
7963         // "a || b && 1", but warn now.
7964         if (RBop->getOpcode() == BO_LAnd && EvaluatesAsTrue(S, RBop->getRHS()))
7965           return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, RBop);
7966       }
7967     }
7968   }
7969 }
7970 
7971 /// \brief Look for '&&' in the right hand of a '||' expr.
7972 static void DiagnoseLogicalAndInLogicalOrRHS(Sema &S, SourceLocation OpLoc,
7973                                              Expr *LHSExpr, Expr *RHSExpr) {
7974   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(RHSExpr)) {
7975     if (Bop->getOpcode() == BO_LAnd) {
7976       // If it's "0 || a && b" don't warn since the precedence doesn't matter.
7977       if (EvaluatesAsFalse(S, LHSExpr))
7978         return;
7979       // If it's "a || b && 1" don't warn since the precedence doesn't matter.
7980       if (!EvaluatesAsTrue(S, Bop->getRHS()))
7981         return EmitDiagnosticForLogicalAndInLogicalOr(S, OpLoc, Bop);
7982     }
7983   }
7984 }
7985 
7986 /// \brief Look for '&' in the left or right hand of a '|' expr.
7987 static void DiagnoseBitwiseAndInBitwiseOr(Sema &S, SourceLocation OpLoc,
7988                                              Expr *OrArg) {
7989   if (BinaryOperator *Bop = dyn_cast<BinaryOperator>(OrArg)) {
7990     if (Bop->getOpcode() == BO_And)
7991       return EmitDiagnosticForBitwiseAndInBitwiseOr(S, OpLoc, Bop);
7992   }
7993 }
7994 
7995 /// DiagnoseBinOpPrecedence - Emit warnings for expressions with tricky
7996 /// precedence.
7997 static void DiagnoseBinOpPrecedence(Sema &Self, BinaryOperatorKind Opc,
7998                                     SourceLocation OpLoc, Expr *LHSExpr,
7999                                     Expr *RHSExpr){
8000   // Diagnose "arg1 'bitwise' arg2 'eq' arg3".
8001   if (BinaryOperator::isBitwiseOp(Opc))
8002     DiagnoseBitwisePrecedence(Self, Opc, OpLoc, LHSExpr, RHSExpr);
8003 
8004   // Diagnose "arg1 & arg2 | arg3"
8005   if (Opc == BO_Or && !OpLoc.isMacroID()/* Don't warn in macros. */) {
8006     DiagnoseBitwiseAndInBitwiseOr(Self, OpLoc, LHSExpr);
8007     DiagnoseBitwiseAndInBitwiseOr(Self, OpLoc, RHSExpr);
8008   }
8009 
8010   // Warn about arg1 || arg2 && arg3, as GCC 4.3+ does.
8011   // We don't warn for 'assert(a || b && "bad")' since this is safe.
8012   if (Opc == BO_LOr && !OpLoc.isMacroID()/* Don't warn in macros. */) {
8013     DiagnoseLogicalAndInLogicalOrLHS(Self, OpLoc, LHSExpr, RHSExpr);
8014     DiagnoseLogicalAndInLogicalOrRHS(Self, OpLoc, LHSExpr, RHSExpr);
8015   }
8016 }
8017 
8018 // Binary Operators.  'Tok' is the token for the operator.
8019 ExprResult Sema::ActOnBinOp(Scope *S, SourceLocation TokLoc,
8020                             tok::TokenKind Kind,
8021                             Expr *LHSExpr, Expr *RHSExpr) {
8022   BinaryOperatorKind Opc = ConvertTokenKindToBinaryOpcode(Kind);
8023   assert((LHSExpr != 0) && "ActOnBinOp(): missing left expression");
8024   assert((RHSExpr != 0) && "ActOnBinOp(): missing right expression");
8025 
8026   // Emit warnings for tricky precedence issues, e.g. "bitfield & 0x4 == 0"
8027   DiagnoseBinOpPrecedence(*this, Opc, TokLoc, LHSExpr, RHSExpr);
8028 
8029   return BuildBinOp(S, TokLoc, Opc, LHSExpr, RHSExpr);
8030 }
8031 
8032 ExprResult Sema::BuildBinOp(Scope *S, SourceLocation OpLoc,
8033                             BinaryOperatorKind Opc,
8034                             Expr *LHSExpr, Expr *RHSExpr) {
8035   if (getLangOptions().CPlusPlus) {
8036     bool UseBuiltinOperator;
8037 
8038     if (LHSExpr->isTypeDependent() || RHSExpr->isTypeDependent()) {
8039       UseBuiltinOperator = false;
8040     } else if (Opc == BO_Assign &&
8041                LHSExpr->getObjectKind() == OK_ObjCProperty) {
8042       UseBuiltinOperator = true;
8043     } else {
8044       UseBuiltinOperator = !LHSExpr->getType()->isOverloadableType() &&
8045                            !RHSExpr->getType()->isOverloadableType();
8046     }
8047 
8048     if (!UseBuiltinOperator) {
8049       // Find all of the overloaded operators visible from this
8050       // point. We perform both an operator-name lookup from the local
8051       // scope and an argument-dependent lookup based on the types of
8052       // the arguments.
8053       UnresolvedSet<16> Functions;
8054       OverloadedOperatorKind OverOp
8055         = BinaryOperator::getOverloadedOperator(Opc);
8056       if (S && OverOp != OO_None)
8057         LookupOverloadedOperatorName(OverOp, S, LHSExpr->getType(),
8058                                      RHSExpr->getType(), Functions);
8059 
8060       // Build the (potentially-overloaded, potentially-dependent)
8061       // binary operation.
8062       return CreateOverloadedBinOp(OpLoc, Opc, Functions, LHSExpr, RHSExpr);
8063     }
8064   }
8065 
8066   // Build a built-in binary operation.
8067   return CreateBuiltinBinOp(OpLoc, Opc, LHSExpr, RHSExpr);
8068 }
8069 
8070 ExprResult Sema::CreateBuiltinUnaryOp(SourceLocation OpLoc,
8071                                       UnaryOperatorKind Opc,
8072                                       Expr *InputExpr) {
8073   ExprResult Input = Owned(InputExpr);
8074   ExprValueKind VK = VK_RValue;
8075   ExprObjectKind OK = OK_Ordinary;
8076   QualType resultType;
8077   switch (Opc) {
8078   case UO_PreInc:
8079   case UO_PreDec:
8080   case UO_PostInc:
8081   case UO_PostDec:
8082     resultType = CheckIncrementDecrementOperand(*this, Input.get(), VK, OpLoc,
8083                                                 Opc == UO_PreInc ||
8084                                                 Opc == UO_PostInc,
8085                                                 Opc == UO_PreInc ||
8086                                                 Opc == UO_PreDec);
8087     break;
8088   case UO_AddrOf:
8089     resultType = CheckAddressOfOperand(*this, Input.get(), OpLoc);
8090     break;
8091   case UO_Deref: {
8092     ExprResult resolved = CheckPlaceholderExpr(Input.get());
8093     if (!resolved.isUsable()) return ExprError();
8094     Input = move(resolved);
8095     Input = DefaultFunctionArrayLvalueConversion(Input.take());
8096     resultType = CheckIndirectionOperand(*this, Input.get(), VK, OpLoc);
8097     break;
8098   }
8099   case UO_Plus:
8100   case UO_Minus:
8101     Input = UsualUnaryConversions(Input.take());
8102     if (Input.isInvalid()) return ExprError();
8103     resultType = Input.get()->getType();
8104     if (resultType->isDependentType())
8105       break;
8106     if (resultType->isArithmeticType() || // C99 6.5.3.3p1
8107         resultType->isVectorType())
8108       break;
8109     else if (getLangOptions().CPlusPlus && // C++ [expr.unary.op]p6-7
8110              resultType->isEnumeralType())
8111       break;
8112     else if (getLangOptions().CPlusPlus && // C++ [expr.unary.op]p6
8113              Opc == UO_Plus &&
8114              resultType->isPointerType())
8115       break;
8116     else if (resultType->isPlaceholderType()) {
8117       Input = CheckPlaceholderExpr(Input.take());
8118       if (Input.isInvalid()) return ExprError();
8119       return CreateBuiltinUnaryOp(OpLoc, Opc, Input.take());
8120     }
8121 
8122     return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8123       << resultType << Input.get()->getSourceRange());
8124 
8125   case UO_Not: // bitwise complement
8126     Input = UsualUnaryConversions(Input.take());
8127     if (Input.isInvalid()) return ExprError();
8128     resultType = Input.get()->getType();
8129     if (resultType->isDependentType())
8130       break;
8131     // C99 6.5.3.3p1. We allow complex int and float as a GCC extension.
8132     if (resultType->isComplexType() || resultType->isComplexIntegerType())
8133       // C99 does not support '~' for complex conjugation.
8134       Diag(OpLoc, diag::ext_integer_complement_complex)
8135         << resultType << Input.get()->getSourceRange();
8136     else if (resultType->hasIntegerRepresentation())
8137       break;
8138     else if (resultType->isPlaceholderType()) {
8139       Input = CheckPlaceholderExpr(Input.take());
8140       if (Input.isInvalid()) return ExprError();
8141       return CreateBuiltinUnaryOp(OpLoc, Opc, Input.take());
8142     } else {
8143       return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8144         << resultType << Input.get()->getSourceRange());
8145     }
8146     break;
8147 
8148   case UO_LNot: // logical negation
8149     // Unlike +/-/~, integer promotions aren't done here (C99 6.5.3.3p5).
8150     Input = DefaultFunctionArrayLvalueConversion(Input.take());
8151     if (Input.isInvalid()) return ExprError();
8152     resultType = Input.get()->getType();
8153 
8154     // Though we still have to promote half FP to float...
8155     if (resultType->isHalfType()) {
8156       Input = ImpCastExprToType(Input.take(), Context.FloatTy, CK_FloatingCast).take();
8157       resultType = Context.FloatTy;
8158     }
8159 
8160     if (resultType->isDependentType())
8161       break;
8162     if (resultType->isScalarType()) {
8163       // C99 6.5.3.3p1: ok, fallthrough;
8164       if (Context.getLangOptions().CPlusPlus) {
8165         // C++03 [expr.unary.op]p8, C++0x [expr.unary.op]p9:
8166         // operand contextually converted to bool.
8167         Input = ImpCastExprToType(Input.take(), Context.BoolTy,
8168                                   ScalarTypeToBooleanCastKind(resultType));
8169       }
8170     } else if (resultType->isPlaceholderType()) {
8171       Input = CheckPlaceholderExpr(Input.take());
8172       if (Input.isInvalid()) return ExprError();
8173       return CreateBuiltinUnaryOp(OpLoc, Opc, Input.take());
8174     } else {
8175       return ExprError(Diag(OpLoc, diag::err_typecheck_unary_expr)
8176         << resultType << Input.get()->getSourceRange());
8177     }
8178 
8179     // LNot always has type int. C99 6.5.3.3p5.
8180     // In C++, it's bool. C++ 5.3.1p8
8181     resultType = Context.getLogicalOperationType();
8182     break;
8183   case UO_Real:
8184   case UO_Imag:
8185     resultType = CheckRealImagOperand(*this, Input, OpLoc, Opc == UO_Real);
8186     // _Real and _Imag map ordinary l-values into ordinary l-values.
8187     if (Input.isInvalid()) return ExprError();
8188     if (Input.get()->getValueKind() != VK_RValue &&
8189         Input.get()->getObjectKind() == OK_Ordinary)
8190       VK = Input.get()->getValueKind();
8191     break;
8192   case UO_Extension:
8193     resultType = Input.get()->getType();
8194     VK = Input.get()->getValueKind();
8195     OK = Input.get()->getObjectKind();
8196     break;
8197   }
8198   if (resultType.isNull() || Input.isInvalid())
8199     return ExprError();
8200 
8201   // Check for array bounds violations in the operand of the UnaryOperator,
8202   // except for the '*' and '&' operators that have to be handled specially
8203   // by CheckArrayAccess (as there are special cases like &array[arraysize]
8204   // that are explicitly defined as valid by the standard).
8205   if (Opc != UO_AddrOf && Opc != UO_Deref)
8206     CheckArrayAccess(Input.get());
8207 
8208   return Owned(new (Context) UnaryOperator(Input.take(), Opc, resultType,
8209                                            VK, OK, OpLoc));
8210 }
8211 
8212 ExprResult Sema::BuildUnaryOp(Scope *S, SourceLocation OpLoc,
8213                               UnaryOperatorKind Opc, Expr *Input) {
8214   if (getLangOptions().CPlusPlus && Input->getType()->isOverloadableType() &&
8215       UnaryOperator::getOverloadedOperator(Opc) != OO_None) {
8216     // Find all of the overloaded operators visible from this
8217     // point. We perform both an operator-name lookup from the local
8218     // scope and an argument-dependent lookup based on the types of
8219     // the arguments.
8220     UnresolvedSet<16> Functions;
8221     OverloadedOperatorKind OverOp = UnaryOperator::getOverloadedOperator(Opc);
8222     if (S && OverOp != OO_None)
8223       LookupOverloadedOperatorName(OverOp, S, Input->getType(), QualType(),
8224                                    Functions);
8225 
8226     return CreateOverloadedUnaryOp(OpLoc, Opc, Functions, Input);
8227   }
8228 
8229   return CreateBuiltinUnaryOp(OpLoc, Opc, Input);
8230 }
8231 
8232 // Unary Operators.  'Tok' is the token for the operator.
8233 ExprResult Sema::ActOnUnaryOp(Scope *S, SourceLocation OpLoc,
8234                               tok::TokenKind Op, Expr *Input) {
8235   return BuildUnaryOp(S, OpLoc, ConvertTokenKindToUnaryOpcode(Op), Input);
8236 }
8237 
8238 /// ActOnAddrLabel - Parse the GNU address of label extension: "&&foo".
8239 ExprResult Sema::ActOnAddrLabel(SourceLocation OpLoc, SourceLocation LabLoc,
8240                                 LabelDecl *TheDecl) {
8241   TheDecl->setUsed();
8242   // Create the AST node.  The address of a label always has type 'void*'.
8243   return Owned(new (Context) AddrLabelExpr(OpLoc, LabLoc, TheDecl,
8244                                        Context.getPointerType(Context.VoidTy)));
8245 }
8246 
8247 /// Given the last statement in a statement-expression, check whether
8248 /// the result is a producing expression (like a call to an
8249 /// ns_returns_retained function) and, if so, rebuild it to hoist the
8250 /// release out of the full-expression.  Otherwise, return null.
8251 /// Cannot fail.
8252 static Expr *maybeRebuildARCConsumingStmt(Stmt *Statement) {
8253   // Should always be wrapped with one of these.
8254   ExprWithCleanups *cleanups = dyn_cast<ExprWithCleanups>(Statement);
8255   if (!cleanups) return 0;
8256 
8257   ImplicitCastExpr *cast = dyn_cast<ImplicitCastExpr>(cleanups->getSubExpr());
8258   if (!cast || cast->getCastKind() != CK_ARCConsumeObject)
8259     return 0;
8260 
8261   // Splice out the cast.  This shouldn't modify any interesting
8262   // features of the statement.
8263   Expr *producer = cast->getSubExpr();
8264   assert(producer->getType() == cast->getType());
8265   assert(producer->getValueKind() == cast->getValueKind());
8266   cleanups->setSubExpr(producer);
8267   return cleanups;
8268 }
8269 
8270 ExprResult
8271 Sema::ActOnStmtExpr(SourceLocation LPLoc, Stmt *SubStmt,
8272                     SourceLocation RPLoc) { // "({..})"
8273   assert(SubStmt && isa<CompoundStmt>(SubStmt) && "Invalid action invocation!");
8274   CompoundStmt *Compound = cast<CompoundStmt>(SubStmt);
8275 
8276   bool isFileScope
8277     = (getCurFunctionOrMethodDecl() == 0) && (getCurBlock() == 0);
8278   if (isFileScope)
8279     return ExprError(Diag(LPLoc, diag::err_stmtexpr_file_scope));
8280 
8281   // FIXME: there are a variety of strange constraints to enforce here, for
8282   // example, it is not possible to goto into a stmt expression apparently.
8283   // More semantic analysis is needed.
8284 
8285   // If there are sub stmts in the compound stmt, take the type of the last one
8286   // as the type of the stmtexpr.
8287   QualType Ty = Context.VoidTy;
8288   bool StmtExprMayBindToTemp = false;
8289   if (!Compound->body_empty()) {
8290     Stmt *LastStmt = Compound->body_back();
8291     LabelStmt *LastLabelStmt = 0;
8292     // If LastStmt is a label, skip down through into the body.
8293     while (LabelStmt *Label = dyn_cast<LabelStmt>(LastStmt)) {
8294       LastLabelStmt = Label;
8295       LastStmt = Label->getSubStmt();
8296     }
8297 
8298     if (Expr *LastE = dyn_cast<Expr>(LastStmt)) {
8299       // Do function/array conversion on the last expression, but not
8300       // lvalue-to-rvalue.  However, initialize an unqualified type.
8301       ExprResult LastExpr = DefaultFunctionArrayConversion(LastE);
8302       if (LastExpr.isInvalid())
8303         return ExprError();
8304       Ty = LastExpr.get()->getType().getUnqualifiedType();
8305 
8306       if (!Ty->isDependentType() && !LastExpr.get()->isTypeDependent()) {
8307         // In ARC, if the final expression ends in a consume, splice
8308         // the consume out and bind it later.  In the alternate case
8309         // (when dealing with a retainable type), the result
8310         // initialization will create a produce.  In both cases the
8311         // result will be +1, and we'll need to balance that out with
8312         // a bind.
8313         if (Expr *rebuiltLastStmt
8314               = maybeRebuildARCConsumingStmt(LastExpr.get())) {
8315           LastExpr = rebuiltLastStmt;
8316         } else {
8317           LastExpr = PerformCopyInitialization(
8318                             InitializedEntity::InitializeResult(LPLoc,
8319                                                                 Ty,
8320                                                                 false),
8321                                                    SourceLocation(),
8322                                                LastExpr);
8323         }
8324 
8325         if (LastExpr.isInvalid())
8326           return ExprError();
8327         if (LastExpr.get() != 0) {
8328           if (!LastLabelStmt)
8329             Compound->setLastStmt(LastExpr.take());
8330           else
8331             LastLabelStmt->setSubStmt(LastExpr.take());
8332           StmtExprMayBindToTemp = true;
8333         }
8334       }
8335     }
8336   }
8337 
8338   // FIXME: Check that expression type is complete/non-abstract; statement
8339   // expressions are not lvalues.
8340   Expr *ResStmtExpr = new (Context) StmtExpr(Compound, Ty, LPLoc, RPLoc);
8341   if (StmtExprMayBindToTemp)
8342     return MaybeBindToTemporary(ResStmtExpr);
8343   return Owned(ResStmtExpr);
8344 }
8345 
8346 ExprResult Sema::BuildBuiltinOffsetOf(SourceLocation BuiltinLoc,
8347                                       TypeSourceInfo *TInfo,
8348                                       OffsetOfComponent *CompPtr,
8349                                       unsigned NumComponents,
8350                                       SourceLocation RParenLoc) {
8351   QualType ArgTy = TInfo->getType();
8352   bool Dependent = ArgTy->isDependentType();
8353   SourceRange TypeRange = TInfo->getTypeLoc().getLocalSourceRange();
8354 
8355   // We must have at least one component that refers to the type, and the first
8356   // one is known to be a field designator.  Verify that the ArgTy represents
8357   // a struct/union/class.
8358   if (!Dependent && !ArgTy->isRecordType())
8359     return ExprError(Diag(BuiltinLoc, diag::err_offsetof_record_type)
8360                        << ArgTy << TypeRange);
8361 
8362   // Type must be complete per C99 7.17p3 because a declaring a variable
8363   // with an incomplete type would be ill-formed.
8364   if (!Dependent
8365       && RequireCompleteType(BuiltinLoc, ArgTy,
8366                              PDiag(diag::err_offsetof_incomplete_type)
8367                                << TypeRange))
8368     return ExprError();
8369 
8370   // offsetof with non-identifier designators (e.g. "offsetof(x, a.b[c])") are a
8371   // GCC extension, diagnose them.
8372   // FIXME: This diagnostic isn't actually visible because the location is in
8373   // a system header!
8374   if (NumComponents != 1)
8375     Diag(BuiltinLoc, diag::ext_offsetof_extended_field_designator)
8376       << SourceRange(CompPtr[1].LocStart, CompPtr[NumComponents-1].LocEnd);
8377 
8378   bool DidWarnAboutNonPOD = false;
8379   QualType CurrentType = ArgTy;
8380   typedef OffsetOfExpr::OffsetOfNode OffsetOfNode;
8381   SmallVector<OffsetOfNode, 4> Comps;
8382   SmallVector<Expr*, 4> Exprs;
8383   for (unsigned i = 0; i != NumComponents; ++i) {
8384     const OffsetOfComponent &OC = CompPtr[i];
8385     if (OC.isBrackets) {
8386       // Offset of an array sub-field.  TODO: Should we allow vector elements?
8387       if (!CurrentType->isDependentType()) {
8388         const ArrayType *AT = Context.getAsArrayType(CurrentType);
8389         if(!AT)
8390           return ExprError(Diag(OC.LocEnd, diag::err_offsetof_array_type)
8391                            << CurrentType);
8392         CurrentType = AT->getElementType();
8393       } else
8394         CurrentType = Context.DependentTy;
8395 
8396       ExprResult IdxRval = DefaultLvalueConversion(static_cast<Expr*>(OC.U.E));
8397       if (IdxRval.isInvalid())
8398         return ExprError();
8399       Expr *Idx = IdxRval.take();
8400 
8401       // The expression must be an integral expression.
8402       // FIXME: An integral constant expression?
8403       if (!Idx->isTypeDependent() && !Idx->isValueDependent() &&
8404           !Idx->getType()->isIntegerType())
8405         return ExprError(Diag(Idx->getLocStart(),
8406                               diag::err_typecheck_subscript_not_integer)
8407                          << Idx->getSourceRange());
8408 
8409       // Record this array index.
8410       Comps.push_back(OffsetOfNode(OC.LocStart, Exprs.size(), OC.LocEnd));
8411       Exprs.push_back(Idx);
8412       continue;
8413     }
8414 
8415     // Offset of a field.
8416     if (CurrentType->isDependentType()) {
8417       // We have the offset of a field, but we can't look into the dependent
8418       // type. Just record the identifier of the field.
8419       Comps.push_back(OffsetOfNode(OC.LocStart, OC.U.IdentInfo, OC.LocEnd));
8420       CurrentType = Context.DependentTy;
8421       continue;
8422     }
8423 
8424     // We need to have a complete type to look into.
8425     if (RequireCompleteType(OC.LocStart, CurrentType,
8426                             diag::err_offsetof_incomplete_type))
8427       return ExprError();
8428 
8429     // Look for the designated field.
8430     const RecordType *RC = CurrentType->getAs<RecordType>();
8431     if (!RC)
8432       return ExprError(Diag(OC.LocEnd, diag::err_offsetof_record_type)
8433                        << CurrentType);
8434     RecordDecl *RD = RC->getDecl();
8435 
8436     // C++ [lib.support.types]p5:
8437     //   The macro offsetof accepts a restricted set of type arguments in this
8438     //   International Standard. type shall be a POD structure or a POD union
8439     //   (clause 9).
8440     if (CXXRecordDecl *CRD = dyn_cast<CXXRecordDecl>(RD)) {
8441       if (!CRD->isPOD() && !DidWarnAboutNonPOD &&
8442           DiagRuntimeBehavior(BuiltinLoc, 0,
8443                               PDiag(diag::warn_offsetof_non_pod_type)
8444                               << SourceRange(CompPtr[0].LocStart, OC.LocEnd)
8445                               << CurrentType))
8446         DidWarnAboutNonPOD = true;
8447     }
8448 
8449     // Look for the field.
8450     LookupResult R(*this, OC.U.IdentInfo, OC.LocStart, LookupMemberName);
8451     LookupQualifiedName(R, RD);
8452     FieldDecl *MemberDecl = R.getAsSingle<FieldDecl>();
8453     IndirectFieldDecl *IndirectMemberDecl = 0;
8454     if (!MemberDecl) {
8455       if ((IndirectMemberDecl = R.getAsSingle<IndirectFieldDecl>()))
8456         MemberDecl = IndirectMemberDecl->getAnonField();
8457     }
8458 
8459     if (!MemberDecl)
8460       return ExprError(Diag(BuiltinLoc, diag::err_no_member)
8461                        << OC.U.IdentInfo << RD << SourceRange(OC.LocStart,
8462                                                               OC.LocEnd));
8463 
8464     // C99 7.17p3:
8465     //   (If the specified member is a bit-field, the behavior is undefined.)
8466     //
8467     // We diagnose this as an error.
8468     if (MemberDecl->isBitField()) {
8469       Diag(OC.LocEnd, diag::err_offsetof_bitfield)
8470         << MemberDecl->getDeclName()
8471         << SourceRange(BuiltinLoc, RParenLoc);
8472       Diag(MemberDecl->getLocation(), diag::note_bitfield_decl);
8473       return ExprError();
8474     }
8475 
8476     RecordDecl *Parent = MemberDecl->getParent();
8477     if (IndirectMemberDecl)
8478       Parent = cast<RecordDecl>(IndirectMemberDecl->getDeclContext());
8479 
8480     // If the member was found in a base class, introduce OffsetOfNodes for
8481     // the base class indirections.
8482     CXXBasePaths Paths(/*FindAmbiguities=*/true, /*RecordPaths=*/true,
8483                        /*DetectVirtual=*/false);
8484     if (IsDerivedFrom(CurrentType, Context.getTypeDeclType(Parent), Paths)) {
8485       CXXBasePath &Path = Paths.front();
8486       for (CXXBasePath::iterator B = Path.begin(), BEnd = Path.end();
8487            B != BEnd; ++B)
8488         Comps.push_back(OffsetOfNode(B->Base));
8489     }
8490 
8491     if (IndirectMemberDecl) {
8492       for (IndirectFieldDecl::chain_iterator FI =
8493            IndirectMemberDecl->chain_begin(),
8494            FEnd = IndirectMemberDecl->chain_end(); FI != FEnd; FI++) {
8495         assert(isa<FieldDecl>(*FI));
8496         Comps.push_back(OffsetOfNode(OC.LocStart,
8497                                      cast<FieldDecl>(*FI), OC.LocEnd));
8498       }
8499     } else
8500       Comps.push_back(OffsetOfNode(OC.LocStart, MemberDecl, OC.LocEnd));
8501 
8502     CurrentType = MemberDecl->getType().getNonReferenceType();
8503   }
8504 
8505   return Owned(OffsetOfExpr::Create(Context, Context.getSizeType(), BuiltinLoc,
8506                                     TInfo, Comps.data(), Comps.size(),
8507                                     Exprs.data(), Exprs.size(), RParenLoc));
8508 }
8509 
8510 ExprResult Sema::ActOnBuiltinOffsetOf(Scope *S,
8511                                       SourceLocation BuiltinLoc,
8512                                       SourceLocation TypeLoc,
8513                                       ParsedType ParsedArgTy,
8514                                       OffsetOfComponent *CompPtr,
8515                                       unsigned NumComponents,
8516                                       SourceLocation RParenLoc) {
8517 
8518   TypeSourceInfo *ArgTInfo;
8519   QualType ArgTy = GetTypeFromParser(ParsedArgTy, &ArgTInfo);
8520   if (ArgTy.isNull())
8521     return ExprError();
8522 
8523   if (!ArgTInfo)
8524     ArgTInfo = Context.getTrivialTypeSourceInfo(ArgTy, TypeLoc);
8525 
8526   return BuildBuiltinOffsetOf(BuiltinLoc, ArgTInfo, CompPtr, NumComponents,
8527                               RParenLoc);
8528 }
8529 
8530 
8531 ExprResult Sema::ActOnChooseExpr(SourceLocation BuiltinLoc,
8532                                  Expr *CondExpr,
8533                                  Expr *LHSExpr, Expr *RHSExpr,
8534                                  SourceLocation RPLoc) {
8535   assert((CondExpr && LHSExpr && RHSExpr) && "Missing type argument(s)");
8536 
8537   ExprValueKind VK = VK_RValue;
8538   ExprObjectKind OK = OK_Ordinary;
8539   QualType resType;
8540   bool ValueDependent = false;
8541   if (CondExpr->isTypeDependent() || CondExpr->isValueDependent()) {
8542     resType = Context.DependentTy;
8543     ValueDependent = true;
8544   } else {
8545     // The conditional expression is required to be a constant expression.
8546     llvm::APSInt condEval(32);
8547     SourceLocation ExpLoc;
8548     if (!CondExpr->isIntegerConstantExpr(condEval, Context, &ExpLoc))
8549       return ExprError(Diag(ExpLoc,
8550                        diag::err_typecheck_choose_expr_requires_constant)
8551         << CondExpr->getSourceRange());
8552 
8553     // If the condition is > zero, then the AST type is the same as the LSHExpr.
8554     Expr *ActiveExpr = condEval.getZExtValue() ? LHSExpr : RHSExpr;
8555 
8556     resType = ActiveExpr->getType();
8557     ValueDependent = ActiveExpr->isValueDependent();
8558     VK = ActiveExpr->getValueKind();
8559     OK = ActiveExpr->getObjectKind();
8560   }
8561 
8562   return Owned(new (Context) ChooseExpr(BuiltinLoc, CondExpr, LHSExpr, RHSExpr,
8563                                         resType, VK, OK, RPLoc,
8564                                         resType->isDependentType(),
8565                                         ValueDependent));
8566 }
8567 
8568 //===----------------------------------------------------------------------===//
8569 // Clang Extensions.
8570 //===----------------------------------------------------------------------===//
8571 
8572 /// ActOnBlockStart - This callback is invoked when a block literal is started.
8573 void Sema::ActOnBlockStart(SourceLocation CaretLoc, Scope *CurScope) {
8574   BlockDecl *Block = BlockDecl::Create(Context, CurContext, CaretLoc);
8575   PushBlockScope(CurScope, Block);
8576   CurContext->addDecl(Block);
8577   if (CurScope)
8578     PushDeclContext(CurScope, Block);
8579   else
8580     CurContext = Block;
8581 }
8582 
8583 void Sema::ActOnBlockArguments(Declarator &ParamInfo, Scope *CurScope) {
8584   assert(ParamInfo.getIdentifier()==0 && "block-id should have no identifier!");
8585   assert(ParamInfo.getContext() == Declarator::BlockLiteralContext);
8586   BlockScopeInfo *CurBlock = getCurBlock();
8587 
8588   TypeSourceInfo *Sig = GetTypeForDeclarator(ParamInfo, CurScope);
8589   QualType T = Sig->getType();
8590 
8591   // GetTypeForDeclarator always produces a function type for a block
8592   // literal signature.  Furthermore, it is always a FunctionProtoType
8593   // unless the function was written with a typedef.
8594   assert(T->isFunctionType() &&
8595          "GetTypeForDeclarator made a non-function block signature");
8596 
8597   // Look for an explicit signature in that function type.
8598   FunctionProtoTypeLoc ExplicitSignature;
8599 
8600   TypeLoc tmp = Sig->getTypeLoc().IgnoreParens();
8601   if (isa<FunctionProtoTypeLoc>(tmp)) {
8602     ExplicitSignature = cast<FunctionProtoTypeLoc>(tmp);
8603 
8604     // Check whether that explicit signature was synthesized by
8605     // GetTypeForDeclarator.  If so, don't save that as part of the
8606     // written signature.
8607     if (ExplicitSignature.getLocalRangeBegin() ==
8608         ExplicitSignature.getLocalRangeEnd()) {
8609       // This would be much cheaper if we stored TypeLocs instead of
8610       // TypeSourceInfos.
8611       TypeLoc Result = ExplicitSignature.getResultLoc();
8612       unsigned Size = Result.getFullDataSize();
8613       Sig = Context.CreateTypeSourceInfo(Result.getType(), Size);
8614       Sig->getTypeLoc().initializeFullCopy(Result, Size);
8615 
8616       ExplicitSignature = FunctionProtoTypeLoc();
8617     }
8618   }
8619 
8620   CurBlock->TheDecl->setSignatureAsWritten(Sig);
8621   CurBlock->FunctionType = T;
8622 
8623   const FunctionType *Fn = T->getAs<FunctionType>();
8624   QualType RetTy = Fn->getResultType();
8625   bool isVariadic =
8626     (isa<FunctionProtoType>(Fn) && cast<FunctionProtoType>(Fn)->isVariadic());
8627 
8628   CurBlock->TheDecl->setIsVariadic(isVariadic);
8629 
8630   // Don't allow returning a objc interface by value.
8631   if (RetTy->isObjCObjectType()) {
8632     Diag(ParamInfo.getSourceRange().getBegin(),
8633          diag::err_object_cannot_be_passed_returned_by_value) << 0 << RetTy;
8634     return;
8635   }
8636 
8637   // Context.DependentTy is used as a placeholder for a missing block
8638   // return type.  TODO:  what should we do with declarators like:
8639   //   ^ * { ... }
8640   // If the answer is "apply template argument deduction"....
8641   if (RetTy != Context.DependentTy)
8642     CurBlock->ReturnType = RetTy;
8643 
8644   // Push block parameters from the declarator if we had them.
8645   SmallVector<ParmVarDecl*, 8> Params;
8646   if (ExplicitSignature) {
8647     for (unsigned I = 0, E = ExplicitSignature.getNumArgs(); I != E; ++I) {
8648       ParmVarDecl *Param = ExplicitSignature.getArg(I);
8649       if (Param->getIdentifier() == 0 &&
8650           !Param->isImplicit() &&
8651           !Param->isInvalidDecl() &&
8652           !getLangOptions().CPlusPlus)
8653         Diag(Param->getLocation(), diag::err_parameter_name_omitted);
8654       Params.push_back(Param);
8655     }
8656 
8657   // Fake up parameter variables if we have a typedef, like
8658   //   ^ fntype { ... }
8659   } else if (const FunctionProtoType *Fn = T->getAs<FunctionProtoType>()) {
8660     for (FunctionProtoType::arg_type_iterator
8661            I = Fn->arg_type_begin(), E = Fn->arg_type_end(); I != E; ++I) {
8662       ParmVarDecl *Param =
8663         BuildParmVarDeclForTypedef(CurBlock->TheDecl,
8664                                    ParamInfo.getSourceRange().getBegin(),
8665                                    *I);
8666       Params.push_back(Param);
8667     }
8668   }
8669 
8670   // Set the parameters on the block decl.
8671   if (!Params.empty()) {
8672     CurBlock->TheDecl->setParams(Params);
8673     CheckParmsForFunctionDef(CurBlock->TheDecl->param_begin(),
8674                              CurBlock->TheDecl->param_end(),
8675                              /*CheckParameterNames=*/false);
8676   }
8677 
8678   // Finally we can process decl attributes.
8679   ProcessDeclAttributes(CurScope, CurBlock->TheDecl, ParamInfo);
8680 
8681   if (!isVariadic && CurBlock->TheDecl->getAttr<SentinelAttr>()) {
8682     Diag(ParamInfo.getAttributes()->getLoc(),
8683          diag::warn_attribute_sentinel_not_variadic) << 1;
8684     // FIXME: remove the attribute.
8685   }
8686 
8687   // Put the parameter variables in scope.  We can bail out immediately
8688   // if we don't have any.
8689   if (Params.empty())
8690     return;
8691 
8692   for (BlockDecl::param_iterator AI = CurBlock->TheDecl->param_begin(),
8693          E = CurBlock->TheDecl->param_end(); AI != E; ++AI) {
8694     (*AI)->setOwningFunction(CurBlock->TheDecl);
8695 
8696     // If this has an identifier, add it to the scope stack.
8697     if ((*AI)->getIdentifier()) {
8698       CheckShadow(CurBlock->TheScope, *AI);
8699 
8700       PushOnScopeChains(*AI, CurBlock->TheScope);
8701     }
8702   }
8703 }
8704 
8705 /// ActOnBlockError - If there is an error parsing a block, this callback
8706 /// is invoked to pop the information about the block from the action impl.
8707 void Sema::ActOnBlockError(SourceLocation CaretLoc, Scope *CurScope) {
8708   // Pop off CurBlock, handle nested blocks.
8709   PopDeclContext();
8710   PopFunctionOrBlockScope();
8711 }
8712 
8713 /// ActOnBlockStmtExpr - This is called when the body of a block statement
8714 /// literal was successfully completed.  ^(int x){...}
8715 ExprResult Sema::ActOnBlockStmtExpr(SourceLocation CaretLoc,
8716                                     Stmt *Body, Scope *CurScope) {
8717   // If blocks are disabled, emit an error.
8718   if (!LangOpts.Blocks)
8719     Diag(CaretLoc, diag::err_blocks_disable);
8720 
8721   BlockScopeInfo *BSI = cast<BlockScopeInfo>(FunctionScopes.back());
8722 
8723   PopDeclContext();
8724 
8725   QualType RetTy = Context.VoidTy;
8726   if (!BSI->ReturnType.isNull())
8727     RetTy = BSI->ReturnType;
8728 
8729   bool NoReturn = BSI->TheDecl->getAttr<NoReturnAttr>();
8730   QualType BlockTy;
8731 
8732   // Set the captured variables on the block.
8733   BSI->TheDecl->setCaptures(Context, BSI->Captures.begin(), BSI->Captures.end(),
8734                             BSI->CapturesCXXThis);
8735 
8736   // If the user wrote a function type in some form, try to use that.
8737   if (!BSI->FunctionType.isNull()) {
8738     const FunctionType *FTy = BSI->FunctionType->getAs<FunctionType>();
8739 
8740     FunctionType::ExtInfo Ext = FTy->getExtInfo();
8741     if (NoReturn && !Ext.getNoReturn()) Ext = Ext.withNoReturn(true);
8742 
8743     // Turn protoless block types into nullary block types.
8744     if (isa<FunctionNoProtoType>(FTy)) {
8745       FunctionProtoType::ExtProtoInfo EPI;
8746       EPI.ExtInfo = Ext;
8747       BlockTy = Context.getFunctionType(RetTy, 0, 0, EPI);
8748 
8749     // Otherwise, if we don't need to change anything about the function type,
8750     // preserve its sugar structure.
8751     } else if (FTy->getResultType() == RetTy &&
8752                (!NoReturn || FTy->getNoReturnAttr())) {
8753       BlockTy = BSI->FunctionType;
8754 
8755     // Otherwise, make the minimal modifications to the function type.
8756     } else {
8757       const FunctionProtoType *FPT = cast<FunctionProtoType>(FTy);
8758       FunctionProtoType::ExtProtoInfo EPI = FPT->getExtProtoInfo();
8759       EPI.TypeQuals = 0; // FIXME: silently?
8760       EPI.ExtInfo = Ext;
8761       BlockTy = Context.getFunctionType(RetTy,
8762                                         FPT->arg_type_begin(),
8763                                         FPT->getNumArgs(),
8764                                         EPI);
8765     }
8766 
8767   // If we don't have a function type, just build one from nothing.
8768   } else {
8769     FunctionProtoType::ExtProtoInfo EPI;
8770     EPI.ExtInfo = FunctionType::ExtInfo().withNoReturn(NoReturn);
8771     BlockTy = Context.getFunctionType(RetTy, 0, 0, EPI);
8772   }
8773 
8774   DiagnoseUnusedParameters(BSI->TheDecl->param_begin(),
8775                            BSI->TheDecl->param_end());
8776   BlockTy = Context.getBlockPointerType(BlockTy);
8777 
8778   // If needed, diagnose invalid gotos and switches in the block.
8779   if (getCurFunction()->NeedsScopeChecking() &&
8780       !hasAnyUnrecoverableErrorsInThisFunction())
8781     DiagnoseInvalidJumps(cast<CompoundStmt>(Body));
8782 
8783   BSI->TheDecl->setBody(cast<CompoundStmt>(Body));
8784 
8785   for (BlockDecl::capture_const_iterator ci = BSI->TheDecl->capture_begin(),
8786        ce = BSI->TheDecl->capture_end(); ci != ce; ++ci) {
8787     const VarDecl *variable = ci->getVariable();
8788     QualType T = variable->getType();
8789     QualType::DestructionKind destructKind = T.isDestructedType();
8790     if (destructKind != QualType::DK_none)
8791       getCurFunction()->setHasBranchProtectedScope();
8792   }
8793 
8794   computeNRVO(Body, getCurBlock());
8795 
8796   BlockExpr *Result = new (Context) BlockExpr(BSI->TheDecl, BlockTy);
8797   const AnalysisBasedWarnings::Policy &WP = AnalysisWarnings.getDefaultPolicy();
8798   PopFunctionOrBlockScope(&WP, Result->getBlockDecl(), Result);
8799 
8800   return Owned(Result);
8801 }
8802 
8803 ExprResult Sema::ActOnVAArg(SourceLocation BuiltinLoc,
8804                                         Expr *E, ParsedType Ty,
8805                                         SourceLocation RPLoc) {
8806   TypeSourceInfo *TInfo;
8807   GetTypeFromParser(Ty, &TInfo);
8808   return BuildVAArgExpr(BuiltinLoc, E, TInfo, RPLoc);
8809 }
8810 
8811 ExprResult Sema::BuildVAArgExpr(SourceLocation BuiltinLoc,
8812                                 Expr *E, TypeSourceInfo *TInfo,
8813                                 SourceLocation RPLoc) {
8814   Expr *OrigExpr = E;
8815 
8816   // Get the va_list type
8817   QualType VaListType = Context.getBuiltinVaListType();
8818   if (VaListType->isArrayType()) {
8819     // Deal with implicit array decay; for example, on x86-64,
8820     // va_list is an array, but it's supposed to decay to
8821     // a pointer for va_arg.
8822     VaListType = Context.getArrayDecayedType(VaListType);
8823     // Make sure the input expression also decays appropriately.
8824     ExprResult Result = UsualUnaryConversions(E);
8825     if (Result.isInvalid())
8826       return ExprError();
8827     E = Result.take();
8828   } else {
8829     // Otherwise, the va_list argument must be an l-value because
8830     // it is modified by va_arg.
8831     if (!E->isTypeDependent() &&
8832         CheckForModifiableLvalue(E, BuiltinLoc, *this))
8833       return ExprError();
8834   }
8835 
8836   if (!E->isTypeDependent() &&
8837       !Context.hasSameType(VaListType, E->getType())) {
8838     return ExprError(Diag(E->getLocStart(),
8839                          diag::err_first_argument_to_va_arg_not_of_type_va_list)
8840       << OrigExpr->getType() << E->getSourceRange());
8841   }
8842 
8843   if (!TInfo->getType()->isDependentType()) {
8844     if (RequireCompleteType(TInfo->getTypeLoc().getBeginLoc(), TInfo->getType(),
8845           PDiag(diag::err_second_parameter_to_va_arg_incomplete)
8846           << TInfo->getTypeLoc().getSourceRange()))
8847       return ExprError();
8848 
8849     if (RequireNonAbstractType(TInfo->getTypeLoc().getBeginLoc(),
8850           TInfo->getType(),
8851           PDiag(diag::err_second_parameter_to_va_arg_abstract)
8852           << TInfo->getTypeLoc().getSourceRange()))
8853       return ExprError();
8854 
8855     if (!TInfo->getType().isPODType(Context)) {
8856       Diag(TInfo->getTypeLoc().getBeginLoc(),
8857            TInfo->getType()->isObjCLifetimeType()
8858              ? diag::warn_second_parameter_to_va_arg_ownership_qualified
8859              : diag::warn_second_parameter_to_va_arg_not_pod)
8860         << TInfo->getType()
8861         << TInfo->getTypeLoc().getSourceRange();
8862     }
8863 
8864     // Check for va_arg where arguments of the given type will be promoted
8865     // (i.e. this va_arg is guaranteed to have undefined behavior).
8866     QualType PromoteType;
8867     if (TInfo->getType()->isPromotableIntegerType()) {
8868       PromoteType = Context.getPromotedIntegerType(TInfo->getType());
8869       if (Context.typesAreCompatible(PromoteType, TInfo->getType()))
8870         PromoteType = QualType();
8871     }
8872     if (TInfo->getType()->isSpecificBuiltinType(BuiltinType::Float))
8873       PromoteType = Context.DoubleTy;
8874     if (!PromoteType.isNull())
8875       Diag(TInfo->getTypeLoc().getBeginLoc(),
8876           diag::warn_second_parameter_to_va_arg_never_compatible)
8877         << TInfo->getType()
8878         << PromoteType
8879         << TInfo->getTypeLoc().getSourceRange();
8880   }
8881 
8882   QualType T = TInfo->getType().getNonLValueExprType(Context);
8883   return Owned(new (Context) VAArgExpr(BuiltinLoc, E, TInfo, RPLoc, T));
8884 }
8885 
8886 ExprResult Sema::ActOnGNUNullExpr(SourceLocation TokenLoc) {
8887   // The type of __null will be int or long, depending on the size of
8888   // pointers on the target.
8889   QualType Ty;
8890   unsigned pw = Context.getTargetInfo().getPointerWidth(0);
8891   if (pw == Context.getTargetInfo().getIntWidth())
8892     Ty = Context.IntTy;
8893   else if (pw == Context.getTargetInfo().getLongWidth())
8894     Ty = Context.LongTy;
8895   else if (pw == Context.getTargetInfo().getLongLongWidth())
8896     Ty = Context.LongLongTy;
8897   else {
8898     llvm_unreachable("I don't know size of pointer!");
8899   }
8900 
8901   return Owned(new (Context) GNUNullExpr(Ty, TokenLoc));
8902 }
8903 
8904 static void MakeObjCStringLiteralFixItHint(Sema& SemaRef, QualType DstType,
8905                                            Expr *SrcExpr, FixItHint &Hint) {
8906   if (!SemaRef.getLangOptions().ObjC1)
8907     return;
8908 
8909   const ObjCObjectPointerType *PT = DstType->getAs<ObjCObjectPointerType>();
8910   if (!PT)
8911     return;
8912 
8913   // Check if the destination is of type 'id'.
8914   if (!PT->isObjCIdType()) {
8915     // Check if the destination is the 'NSString' interface.
8916     const ObjCInterfaceDecl *ID = PT->getInterfaceDecl();
8917     if (!ID || !ID->getIdentifier()->isStr("NSString"))
8918       return;
8919   }
8920 
8921   // Strip off any parens and casts.
8922   StringLiteral *SL = dyn_cast<StringLiteral>(SrcExpr->IgnoreParenCasts());
8923   if (!SL || !SL->isAscii())
8924     return;
8925 
8926   Hint = FixItHint::CreateInsertion(SL->getLocStart(), "@");
8927 }
8928 
8929 bool Sema::DiagnoseAssignmentResult(AssignConvertType ConvTy,
8930                                     SourceLocation Loc,
8931                                     QualType DstType, QualType SrcType,
8932                                     Expr *SrcExpr, AssignmentAction Action,
8933                                     bool *Complained) {
8934   if (Complained)
8935     *Complained = false;
8936 
8937   // Decode the result (notice that AST's are still created for extensions).
8938   bool CheckInferredResultType = false;
8939   bool isInvalid = false;
8940   unsigned DiagKind;
8941   FixItHint Hint;
8942   ConversionFixItGenerator ConvHints;
8943   bool MayHaveConvFixit = false;
8944 
8945   switch (ConvTy) {
8946   default: llvm_unreachable("Unknown conversion type");
8947   case Compatible: return false;
8948   case PointerToInt:
8949     DiagKind = diag::ext_typecheck_convert_pointer_int;
8950     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8951     MayHaveConvFixit = true;
8952     break;
8953   case IntToPointer:
8954     DiagKind = diag::ext_typecheck_convert_int_pointer;
8955     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8956     MayHaveConvFixit = true;
8957     break;
8958   case IncompatiblePointer:
8959     MakeObjCStringLiteralFixItHint(*this, DstType, SrcExpr, Hint);
8960     DiagKind = diag::ext_typecheck_convert_incompatible_pointer;
8961     CheckInferredResultType = DstType->isObjCObjectPointerType() &&
8962       SrcType->isObjCObjectPointerType();
8963     if (Hint.isNull() && !CheckInferredResultType) {
8964       ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
8965     }
8966     MayHaveConvFixit = true;
8967     break;
8968   case IncompatiblePointerSign:
8969     DiagKind = diag::ext_typecheck_convert_incompatible_pointer_sign;
8970     break;
8971   case FunctionVoidPointer:
8972     DiagKind = diag::ext_typecheck_convert_pointer_void_func;
8973     break;
8974   case IncompatiblePointerDiscardsQualifiers: {
8975     // Perform array-to-pointer decay if necessary.
8976     if (SrcType->isArrayType()) SrcType = Context.getArrayDecayedType(SrcType);
8977 
8978     Qualifiers lhq = SrcType->getPointeeType().getQualifiers();
8979     Qualifiers rhq = DstType->getPointeeType().getQualifiers();
8980     if (lhq.getAddressSpace() != rhq.getAddressSpace()) {
8981       DiagKind = diag::err_typecheck_incompatible_address_space;
8982       break;
8983 
8984 
8985     } else if (lhq.getObjCLifetime() != rhq.getObjCLifetime()) {
8986       DiagKind = diag::err_typecheck_incompatible_ownership;
8987       break;
8988     }
8989 
8990     llvm_unreachable("unknown error case for discarding qualifiers!");
8991     // fallthrough
8992   }
8993   case CompatiblePointerDiscardsQualifiers:
8994     // If the qualifiers lost were because we were applying the
8995     // (deprecated) C++ conversion from a string literal to a char*
8996     // (or wchar_t*), then there was no error (C++ 4.2p2).  FIXME:
8997     // Ideally, this check would be performed in
8998     // checkPointerTypesForAssignment. However, that would require a
8999     // bit of refactoring (so that the second argument is an
9000     // expression, rather than a type), which should be done as part
9001     // of a larger effort to fix checkPointerTypesForAssignment for
9002     // C++ semantics.
9003     if (getLangOptions().CPlusPlus &&
9004         IsStringLiteralToNonConstPointerConversion(SrcExpr, DstType))
9005       return false;
9006     DiagKind = diag::ext_typecheck_convert_discards_qualifiers;
9007     break;
9008   case IncompatibleNestedPointerQualifiers:
9009     DiagKind = diag::ext_nested_pointer_qualifier_mismatch;
9010     break;
9011   case IntToBlockPointer:
9012     DiagKind = diag::err_int_to_block_pointer;
9013     break;
9014   case IncompatibleBlockPointer:
9015     DiagKind = diag::err_typecheck_convert_incompatible_block_pointer;
9016     break;
9017   case IncompatibleObjCQualifiedId:
9018     // FIXME: Diagnose the problem in ObjCQualifiedIdTypesAreCompatible, since
9019     // it can give a more specific diagnostic.
9020     DiagKind = diag::warn_incompatible_qualified_id;
9021     break;
9022   case IncompatibleVectors:
9023     DiagKind = diag::warn_incompatible_vectors;
9024     break;
9025   case IncompatibleObjCWeakRef:
9026     DiagKind = diag::err_arc_weak_unavailable_assign;
9027     break;
9028   case Incompatible:
9029     DiagKind = diag::err_typecheck_convert_incompatible;
9030     ConvHints.tryToFixConversion(SrcExpr, SrcType, DstType, *this);
9031     MayHaveConvFixit = true;
9032     isInvalid = true;
9033     break;
9034   }
9035 
9036   QualType FirstType, SecondType;
9037   switch (Action) {
9038   case AA_Assigning:
9039   case AA_Initializing:
9040     // The destination type comes first.
9041     FirstType = DstType;
9042     SecondType = SrcType;
9043     break;
9044 
9045   case AA_Returning:
9046   case AA_Passing:
9047   case AA_Converting:
9048   case AA_Sending:
9049   case AA_Casting:
9050     // The source type comes first.
9051     FirstType = SrcType;
9052     SecondType = DstType;
9053     break;
9054   }
9055 
9056   PartialDiagnostic FDiag = PDiag(DiagKind);
9057   FDiag << FirstType << SecondType << Action << SrcExpr->getSourceRange();
9058 
9059   // If we can fix the conversion, suggest the FixIts.
9060   assert(ConvHints.isNull() || Hint.isNull());
9061   if (!ConvHints.isNull()) {
9062     for (llvm::SmallVector<FixItHint, 1>::iterator
9063         HI = ConvHints.Hints.begin(), HE = ConvHints.Hints.end();
9064         HI != HE; ++HI)
9065       FDiag << *HI;
9066   } else {
9067     FDiag << Hint;
9068   }
9069   if (MayHaveConvFixit) { FDiag << (unsigned) (ConvHints.Kind); }
9070 
9071   Diag(Loc, FDiag);
9072 
9073   if (CheckInferredResultType)
9074     EmitRelatedResultTypeNote(SrcExpr);
9075 
9076   if (Complained)
9077     *Complained = true;
9078   return isInvalid;
9079 }
9080 
9081 bool Sema::VerifyIntegerConstantExpression(const Expr *E, llvm::APSInt *Result){
9082   llvm::APSInt ICEResult;
9083   if (E->isIntegerConstantExpr(ICEResult, Context)) {
9084     if (Result)
9085       *Result = ICEResult;
9086     return false;
9087   }
9088 
9089   Expr::EvalResult EvalResult;
9090 
9091   if (!E->Evaluate(EvalResult, Context) || !EvalResult.Val.isInt() ||
9092       EvalResult.HasSideEffects) {
9093     Diag(E->getExprLoc(), diag::err_expr_not_ice) << E->getSourceRange();
9094 
9095     if (EvalResult.Diag) {
9096       // We only show the note if it's not the usual "invalid subexpression"
9097       // or if it's actually in a subexpression.
9098       if (EvalResult.Diag != diag::note_invalid_subexpr_in_ice ||
9099           E->IgnoreParens() != EvalResult.DiagExpr->IgnoreParens())
9100         Diag(EvalResult.DiagLoc, EvalResult.Diag);
9101     }
9102 
9103     return true;
9104   }
9105 
9106   Diag(E->getExprLoc(), diag::ext_expr_not_ice) <<
9107     E->getSourceRange();
9108 
9109   if (EvalResult.Diag &&
9110       Diags.getDiagnosticLevel(diag::ext_expr_not_ice, EvalResult.DiagLoc)
9111           != DiagnosticsEngine::Ignored)
9112     Diag(EvalResult.DiagLoc, EvalResult.Diag);
9113 
9114   if (Result)
9115     *Result = EvalResult.Val.getInt();
9116   return false;
9117 }
9118 
9119 void
9120 Sema::PushExpressionEvaluationContext(ExpressionEvaluationContext NewContext) {
9121   ExprEvalContexts.push_back(
9122              ExpressionEvaluationContextRecord(NewContext,
9123                                                ExprTemporaries.size(),
9124                                                ExprNeedsCleanups));
9125   ExprNeedsCleanups = false;
9126 }
9127 
9128 void Sema::PopExpressionEvaluationContext() {
9129   // Pop the current expression evaluation context off the stack.
9130   ExpressionEvaluationContextRecord Rec = ExprEvalContexts.back();
9131   ExprEvalContexts.pop_back();
9132 
9133   if (Rec.Context == PotentiallyPotentiallyEvaluated) {
9134     if (Rec.PotentiallyReferenced) {
9135       // Mark any remaining declarations in the current position of the stack
9136       // as "referenced". If they were not meant to be referenced, semantic
9137       // analysis would have eliminated them (e.g., in ActOnCXXTypeId).
9138       for (PotentiallyReferencedDecls::iterator
9139              I = Rec.PotentiallyReferenced->begin(),
9140              IEnd = Rec.PotentiallyReferenced->end();
9141            I != IEnd; ++I)
9142         MarkDeclarationReferenced(I->first, I->second);
9143     }
9144 
9145     if (Rec.PotentiallyDiagnosed) {
9146       // Emit any pending diagnostics.
9147       for (PotentiallyEmittedDiagnostics::iterator
9148                 I = Rec.PotentiallyDiagnosed->begin(),
9149              IEnd = Rec.PotentiallyDiagnosed->end();
9150            I != IEnd; ++I)
9151         Diag(I->first, I->second);
9152     }
9153   }
9154 
9155   // When are coming out of an unevaluated context, clear out any
9156   // temporaries that we may have created as part of the evaluation of
9157   // the expression in that context: they aren't relevant because they
9158   // will never be constructed.
9159   if (Rec.Context == Unevaluated) {
9160     ExprTemporaries.erase(ExprTemporaries.begin() + Rec.NumTemporaries,
9161                           ExprTemporaries.end());
9162     ExprNeedsCleanups = Rec.ParentNeedsCleanups;
9163 
9164   // Otherwise, merge the contexts together.
9165   } else {
9166     ExprNeedsCleanups |= Rec.ParentNeedsCleanups;
9167   }
9168 
9169   // Destroy the popped expression evaluation record.
9170   Rec.Destroy();
9171 }
9172 
9173 void Sema::DiscardCleanupsInEvaluationContext() {
9174   ExprTemporaries.erase(
9175               ExprTemporaries.begin() + ExprEvalContexts.back().NumTemporaries,
9176               ExprTemporaries.end());
9177   ExprNeedsCleanups = false;
9178 }
9179 
9180 /// \brief Note that the given declaration was referenced in the source code.
9181 ///
9182 /// This routine should be invoke whenever a given declaration is referenced
9183 /// in the source code, and where that reference occurred. If this declaration
9184 /// reference means that the the declaration is used (C++ [basic.def.odr]p2,
9185 /// C99 6.9p3), then the declaration will be marked as used.
9186 ///
9187 /// \param Loc the location where the declaration was referenced.
9188 ///
9189 /// \param D the declaration that has been referenced by the source code.
9190 void Sema::MarkDeclarationReferenced(SourceLocation Loc, Decl *D) {
9191   assert(D && "No declaration?");
9192 
9193   D->setReferenced();
9194 
9195   if (D->isUsed(false))
9196     return;
9197 
9198   // Mark a parameter or variable declaration "used", regardless of whether
9199   // we're in a template or not. The reason for this is that unevaluated
9200   // expressions (e.g. (void)sizeof()) constitute a use for warning purposes
9201   // (-Wunused-variables and -Wunused-parameters)
9202   if (isa<ParmVarDecl>(D) ||
9203       (isa<VarDecl>(D) && D->getDeclContext()->isFunctionOrMethod())) {
9204     D->setUsed();
9205     return;
9206   }
9207 
9208   if (!isa<VarDecl>(D) && !isa<FunctionDecl>(D))
9209     return;
9210 
9211   // Do not mark anything as "used" within a dependent context; wait for
9212   // an instantiation.
9213   if (CurContext->isDependentContext())
9214     return;
9215 
9216   switch (ExprEvalContexts.back().Context) {
9217     case Unevaluated:
9218       // We are in an expression that is not potentially evaluated; do nothing.
9219       return;
9220 
9221     case PotentiallyEvaluated:
9222       // We are in a potentially-evaluated expression, so this declaration is
9223       // "used"; handle this below.
9224       break;
9225 
9226     case PotentiallyPotentiallyEvaluated:
9227       // We are in an expression that may be potentially evaluated; queue this
9228       // declaration reference until we know whether the expression is
9229       // potentially evaluated.
9230       ExprEvalContexts.back().addReferencedDecl(Loc, D);
9231       return;
9232 
9233     case PotentiallyEvaluatedIfUsed:
9234       // Referenced declarations will only be used if the construct in the
9235       // containing expression is used.
9236       return;
9237   }
9238 
9239   // Note that this declaration has been used.
9240   if (CXXConstructorDecl *Constructor = dyn_cast<CXXConstructorDecl>(D)) {
9241     if (Constructor->isDefaulted()) {
9242       if (Constructor->isDefaultConstructor()) {
9243         if (Constructor->isTrivial())
9244           return;
9245         if (!Constructor->isUsed(false))
9246           DefineImplicitDefaultConstructor(Loc, Constructor);
9247       } else if (Constructor->isCopyConstructor()) {
9248         if (!Constructor->isUsed(false))
9249           DefineImplicitCopyConstructor(Loc, Constructor);
9250       } else if (Constructor->isMoveConstructor()) {
9251         if (!Constructor->isUsed(false))
9252           DefineImplicitMoveConstructor(Loc, Constructor);
9253       }
9254     }
9255 
9256     MarkVTableUsed(Loc, Constructor->getParent());
9257   } else if (CXXDestructorDecl *Destructor = dyn_cast<CXXDestructorDecl>(D)) {
9258     if (Destructor->isDefaulted() && !Destructor->isUsed(false))
9259       DefineImplicitDestructor(Loc, Destructor);
9260     if (Destructor->isVirtual())
9261       MarkVTableUsed(Loc, Destructor->getParent());
9262   } else if (CXXMethodDecl *MethodDecl = dyn_cast<CXXMethodDecl>(D)) {
9263     if (MethodDecl->isDefaulted() && MethodDecl->isOverloadedOperator() &&
9264         MethodDecl->getOverloadedOperator() == OO_Equal) {
9265       if (!MethodDecl->isUsed(false)) {
9266         if (MethodDecl->isCopyAssignmentOperator())
9267           DefineImplicitCopyAssignment(Loc, MethodDecl);
9268         else
9269           DefineImplicitMoveAssignment(Loc, MethodDecl);
9270       }
9271     } else if (MethodDecl->isVirtual())
9272       MarkVTableUsed(Loc, MethodDecl->getParent());
9273   }
9274   if (FunctionDecl *Function = dyn_cast<FunctionDecl>(D)) {
9275     // Recursive functions should be marked when used from another function.
9276     if (CurContext == Function) return;
9277 
9278     // Implicit instantiation of function templates and member functions of
9279     // class templates.
9280     if (Function->isImplicitlyInstantiable()) {
9281       bool AlreadyInstantiated = false;
9282       if (FunctionTemplateSpecializationInfo *SpecInfo
9283                                 = Function->getTemplateSpecializationInfo()) {
9284         if (SpecInfo->getPointOfInstantiation().isInvalid())
9285           SpecInfo->setPointOfInstantiation(Loc);
9286         else if (SpecInfo->getTemplateSpecializationKind()
9287                    == TSK_ImplicitInstantiation)
9288           AlreadyInstantiated = true;
9289       } else if (MemberSpecializationInfo *MSInfo
9290                                   = Function->getMemberSpecializationInfo()) {
9291         if (MSInfo->getPointOfInstantiation().isInvalid())
9292           MSInfo->setPointOfInstantiation(Loc);
9293         else if (MSInfo->getTemplateSpecializationKind()
9294                    == TSK_ImplicitInstantiation)
9295           AlreadyInstantiated = true;
9296       }
9297 
9298       if (!AlreadyInstantiated) {
9299         if (isa<CXXRecordDecl>(Function->getDeclContext()) &&
9300             cast<CXXRecordDecl>(Function->getDeclContext())->isLocalClass())
9301           PendingLocalImplicitInstantiations.push_back(std::make_pair(Function,
9302                                                                       Loc));
9303         else
9304           PendingInstantiations.push_back(std::make_pair(Function, Loc));
9305       }
9306     } else {
9307       // Walk redefinitions, as some of them may be instantiable.
9308       for (FunctionDecl::redecl_iterator i(Function->redecls_begin()),
9309            e(Function->redecls_end()); i != e; ++i) {
9310         if (!i->isUsed(false) && i->isImplicitlyInstantiable())
9311           MarkDeclarationReferenced(Loc, *i);
9312       }
9313     }
9314 
9315     // Keep track of used but undefined functions.
9316     if (!Function->isPure() && !Function->hasBody() &&
9317         Function->getLinkage() != ExternalLinkage) {
9318       SourceLocation &old = UndefinedInternals[Function->getCanonicalDecl()];
9319       if (old.isInvalid()) old = Loc;
9320     }
9321 
9322     Function->setUsed(true);
9323     return;
9324   }
9325 
9326   if (VarDecl *Var = dyn_cast<VarDecl>(D)) {
9327     // Implicit instantiation of static data members of class templates.
9328     if (Var->isStaticDataMember() &&
9329         Var->getInstantiatedFromStaticDataMember()) {
9330       MemberSpecializationInfo *MSInfo = Var->getMemberSpecializationInfo();
9331       assert(MSInfo && "Missing member specialization information?");
9332       if (MSInfo->getPointOfInstantiation().isInvalid() &&
9333           MSInfo->getTemplateSpecializationKind()== TSK_ImplicitInstantiation) {
9334         MSInfo->setPointOfInstantiation(Loc);
9335         // This is a modification of an existing AST node. Notify listeners.
9336         if (ASTMutationListener *L = getASTMutationListener())
9337           L->StaticDataMemberInstantiated(Var);
9338         PendingInstantiations.push_back(std::make_pair(Var, Loc));
9339       }
9340     }
9341 
9342     // Keep track of used but undefined variables.  We make a hole in
9343     // the warning for static const data members with in-line
9344     // initializers.
9345     if (Var->hasDefinition() == VarDecl::DeclarationOnly
9346         && Var->getLinkage() != ExternalLinkage
9347         && !(Var->isStaticDataMember() && Var->hasInit())) {
9348       SourceLocation &old = UndefinedInternals[Var->getCanonicalDecl()];
9349       if (old.isInvalid()) old = Loc;
9350     }
9351 
9352     D->setUsed(true);
9353     return;
9354   }
9355 }
9356 
9357 namespace {
9358   // Mark all of the declarations referenced
9359   // FIXME: Not fully implemented yet! We need to have a better understanding
9360   // of when we're entering
9361   class MarkReferencedDecls : public RecursiveASTVisitor<MarkReferencedDecls> {
9362     Sema &S;
9363     SourceLocation Loc;
9364 
9365   public:
9366     typedef RecursiveASTVisitor<MarkReferencedDecls> Inherited;
9367 
9368     MarkReferencedDecls(Sema &S, SourceLocation Loc) : S(S), Loc(Loc) { }
9369 
9370     bool TraverseTemplateArgument(const TemplateArgument &Arg);
9371     bool TraverseRecordType(RecordType *T);
9372   };
9373 }
9374 
9375 bool MarkReferencedDecls::TraverseTemplateArgument(
9376   const TemplateArgument &Arg) {
9377   if (Arg.getKind() == TemplateArgument::Declaration) {
9378     S.MarkDeclarationReferenced(Loc, Arg.getAsDecl());
9379   }
9380 
9381   return Inherited::TraverseTemplateArgument(Arg);
9382 }
9383 
9384 bool MarkReferencedDecls::TraverseRecordType(RecordType *T) {
9385   if (ClassTemplateSpecializationDecl *Spec
9386                   = dyn_cast<ClassTemplateSpecializationDecl>(T->getDecl())) {
9387     const TemplateArgumentList &Args = Spec->getTemplateArgs();
9388     return TraverseTemplateArguments(Args.data(), Args.size());
9389   }
9390 
9391   return true;
9392 }
9393 
9394 void Sema::MarkDeclarationsReferencedInType(SourceLocation Loc, QualType T) {
9395   MarkReferencedDecls Marker(*this, Loc);
9396   Marker.TraverseType(Context.getCanonicalType(T));
9397 }
9398 
9399 namespace {
9400   /// \brief Helper class that marks all of the declarations referenced by
9401   /// potentially-evaluated subexpressions as "referenced".
9402   class EvaluatedExprMarker : public EvaluatedExprVisitor<EvaluatedExprMarker> {
9403     Sema &S;
9404 
9405   public:
9406     typedef EvaluatedExprVisitor<EvaluatedExprMarker> Inherited;
9407 
9408     explicit EvaluatedExprMarker(Sema &S) : Inherited(S.Context), S(S) { }
9409 
9410     void VisitDeclRefExpr(DeclRefExpr *E) {
9411       S.MarkDeclarationReferenced(E->getLocation(), E->getDecl());
9412     }
9413 
9414     void VisitMemberExpr(MemberExpr *E) {
9415       S.MarkDeclarationReferenced(E->getMemberLoc(), E->getMemberDecl());
9416       Inherited::VisitMemberExpr(E);
9417     }
9418 
9419     void VisitCXXNewExpr(CXXNewExpr *E) {
9420       if (E->getConstructor())
9421         S.MarkDeclarationReferenced(E->getLocStart(), E->getConstructor());
9422       if (E->getOperatorNew())
9423         S.MarkDeclarationReferenced(E->getLocStart(), E->getOperatorNew());
9424       if (E->getOperatorDelete())
9425         S.MarkDeclarationReferenced(E->getLocStart(), E->getOperatorDelete());
9426       Inherited::VisitCXXNewExpr(E);
9427     }
9428 
9429     void VisitCXXDeleteExpr(CXXDeleteExpr *E) {
9430       if (E->getOperatorDelete())
9431         S.MarkDeclarationReferenced(E->getLocStart(), E->getOperatorDelete());
9432       QualType Destroyed = S.Context.getBaseElementType(E->getDestroyedType());
9433       if (const RecordType *DestroyedRec = Destroyed->getAs<RecordType>()) {
9434         CXXRecordDecl *Record = cast<CXXRecordDecl>(DestroyedRec->getDecl());
9435         S.MarkDeclarationReferenced(E->getLocStart(),
9436                                     S.LookupDestructor(Record));
9437       }
9438 
9439       Inherited::VisitCXXDeleteExpr(E);
9440     }
9441 
9442     void VisitCXXConstructExpr(CXXConstructExpr *E) {
9443       S.MarkDeclarationReferenced(E->getLocStart(), E->getConstructor());
9444       Inherited::VisitCXXConstructExpr(E);
9445     }
9446 
9447     void VisitBlockDeclRefExpr(BlockDeclRefExpr *E) {
9448       S.MarkDeclarationReferenced(E->getLocation(), E->getDecl());
9449     }
9450 
9451     void VisitCXXDefaultArgExpr(CXXDefaultArgExpr *E) {
9452       Visit(E->getExpr());
9453     }
9454   };
9455 }
9456 
9457 /// \brief Mark any declarations that appear within this expression or any
9458 /// potentially-evaluated subexpressions as "referenced".
9459 void Sema::MarkDeclarationsReferencedInExpr(Expr *E) {
9460   EvaluatedExprMarker(*this).Visit(E);
9461 }
9462 
9463 /// \brief Emit a diagnostic that describes an effect on the run-time behavior
9464 /// of the program being compiled.
9465 ///
9466 /// This routine emits the given diagnostic when the code currently being
9467 /// type-checked is "potentially evaluated", meaning that there is a
9468 /// possibility that the code will actually be executable. Code in sizeof()
9469 /// expressions, code used only during overload resolution, etc., are not
9470 /// potentially evaluated. This routine will suppress such diagnostics or,
9471 /// in the absolutely nutty case of potentially potentially evaluated
9472 /// expressions (C++ typeid), queue the diagnostic to potentially emit it
9473 /// later.
9474 ///
9475 /// This routine should be used for all diagnostics that describe the run-time
9476 /// behavior of a program, such as passing a non-POD value through an ellipsis.
9477 /// Failure to do so will likely result in spurious diagnostics or failures
9478 /// during overload resolution or within sizeof/alignof/typeof/typeid.
9479 bool Sema::DiagRuntimeBehavior(SourceLocation Loc, const Stmt *Statement,
9480                                const PartialDiagnostic &PD) {
9481   switch (ExprEvalContexts.back().Context) {
9482   case Unevaluated:
9483     // The argument will never be evaluated, so don't complain.
9484     break;
9485 
9486   case PotentiallyEvaluated:
9487   case PotentiallyEvaluatedIfUsed:
9488     if (Statement && getCurFunctionOrMethodDecl()) {
9489       FunctionScopes.back()->PossiblyUnreachableDiags.
9490         push_back(sema::PossiblyUnreachableDiag(PD, Loc, Statement));
9491     }
9492     else
9493       Diag(Loc, PD);
9494 
9495     return true;
9496 
9497   case PotentiallyPotentiallyEvaluated:
9498     ExprEvalContexts.back().addDiagnostic(Loc, PD);
9499     break;
9500   }
9501 
9502   return false;
9503 }
9504 
9505 bool Sema::CheckCallReturnType(QualType ReturnType, SourceLocation Loc,
9506                                CallExpr *CE, FunctionDecl *FD) {
9507   if (ReturnType->isVoidType() || !ReturnType->isIncompleteType())
9508     return false;
9509 
9510   PartialDiagnostic Note =
9511     FD ? PDiag(diag::note_function_with_incomplete_return_type_declared_here)
9512     << FD->getDeclName() : PDiag();
9513   SourceLocation NoteLoc = FD ? FD->getLocation() : SourceLocation();
9514 
9515   if (RequireCompleteType(Loc, ReturnType,
9516                           FD ?
9517                           PDiag(diag::err_call_function_incomplete_return)
9518                             << CE->getSourceRange() << FD->getDeclName() :
9519                           PDiag(diag::err_call_incomplete_return)
9520                             << CE->getSourceRange(),
9521                           std::make_pair(NoteLoc, Note)))
9522     return true;
9523 
9524   return false;
9525 }
9526 
9527 // Diagnose the s/=/==/ and s/\|=/!=/ typos. Note that adding parentheses
9528 // will prevent this condition from triggering, which is what we want.
9529 void Sema::DiagnoseAssignmentAsCondition(Expr *E) {
9530   SourceLocation Loc;
9531 
9532   unsigned diagnostic = diag::warn_condition_is_assignment;
9533   bool IsOrAssign = false;
9534 
9535   if (BinaryOperator *Op = dyn_cast<BinaryOperator>(E)) {
9536     if (Op->getOpcode() != BO_Assign && Op->getOpcode() != BO_OrAssign)
9537       return;
9538 
9539     IsOrAssign = Op->getOpcode() == BO_OrAssign;
9540 
9541     // Greylist some idioms by putting them into a warning subcategory.
9542     if (ObjCMessageExpr *ME
9543           = dyn_cast<ObjCMessageExpr>(Op->getRHS()->IgnoreParenCasts())) {
9544       Selector Sel = ME->getSelector();
9545 
9546       // self = [<foo> init...]
9547       if (isSelfExpr(Op->getLHS()) && Sel.getNameForSlot(0).startswith("init"))
9548         diagnostic = diag::warn_condition_is_idiomatic_assignment;
9549 
9550       // <foo> = [<bar> nextObject]
9551       else if (Sel.isUnarySelector() && Sel.getNameForSlot(0) == "nextObject")
9552         diagnostic = diag::warn_condition_is_idiomatic_assignment;
9553     }
9554 
9555     Loc = Op->getOperatorLoc();
9556   } else if (CXXOperatorCallExpr *Op = dyn_cast<CXXOperatorCallExpr>(E)) {
9557     if (Op->getOperator() != OO_Equal && Op->getOperator() != OO_PipeEqual)
9558       return;
9559 
9560     IsOrAssign = Op->getOperator() == OO_PipeEqual;
9561     Loc = Op->getOperatorLoc();
9562   } else {
9563     // Not an assignment.
9564     return;
9565   }
9566 
9567   Diag(Loc, diagnostic) << E->getSourceRange();
9568 
9569   SourceLocation Open = E->getSourceRange().getBegin();
9570   SourceLocation Close = PP.getLocForEndOfToken(E->getSourceRange().getEnd());
9571   Diag(Loc, diag::note_condition_assign_silence)
9572         << FixItHint::CreateInsertion(Open, "(")
9573         << FixItHint::CreateInsertion(Close, ")");
9574 
9575   if (IsOrAssign)
9576     Diag(Loc, diag::note_condition_or_assign_to_comparison)
9577       << FixItHint::CreateReplacement(Loc, "!=");
9578   else
9579     Diag(Loc, diag::note_condition_assign_to_comparison)
9580       << FixItHint::CreateReplacement(Loc, "==");
9581 }
9582 
9583 /// \brief Redundant parentheses over an equality comparison can indicate
9584 /// that the user intended an assignment used as condition.
9585 void Sema::DiagnoseEqualityWithExtraParens(ParenExpr *ParenE) {
9586   // Don't warn if the parens came from a macro.
9587   SourceLocation parenLoc = ParenE->getLocStart();
9588   if (parenLoc.isInvalid() || parenLoc.isMacroID())
9589     return;
9590   // Don't warn for dependent expressions.
9591   if (ParenE->isTypeDependent())
9592     return;
9593 
9594   Expr *E = ParenE->IgnoreParens();
9595 
9596   if (BinaryOperator *opE = dyn_cast<BinaryOperator>(E))
9597     if (opE->getOpcode() == BO_EQ &&
9598         opE->getLHS()->IgnoreParenImpCasts()->isModifiableLvalue(Context)
9599                                                            == Expr::MLV_Valid) {
9600       SourceLocation Loc = opE->getOperatorLoc();
9601 
9602       Diag(Loc, diag::warn_equality_with_extra_parens) << E->getSourceRange();
9603       Diag(Loc, diag::note_equality_comparison_silence)
9604         << FixItHint::CreateRemoval(ParenE->getSourceRange().getBegin())
9605         << FixItHint::CreateRemoval(ParenE->getSourceRange().getEnd());
9606       Diag(Loc, diag::note_equality_comparison_to_assign)
9607         << FixItHint::CreateReplacement(Loc, "=");
9608     }
9609 }
9610 
9611 ExprResult Sema::CheckBooleanCondition(Expr *E, SourceLocation Loc) {
9612   DiagnoseAssignmentAsCondition(E);
9613   if (ParenExpr *parenE = dyn_cast<ParenExpr>(E))
9614     DiagnoseEqualityWithExtraParens(parenE);
9615 
9616   ExprResult result = CheckPlaceholderExpr(E);
9617   if (result.isInvalid()) return ExprError();
9618   E = result.take();
9619 
9620   if (!E->isTypeDependent()) {
9621     if (getLangOptions().CPlusPlus)
9622       return CheckCXXBooleanCondition(E); // C++ 6.4p4
9623 
9624     ExprResult ERes = DefaultFunctionArrayLvalueConversion(E);
9625     if (ERes.isInvalid())
9626       return ExprError();
9627     E = ERes.take();
9628 
9629     QualType T = E->getType();
9630     if (!T->isScalarType()) { // C99 6.8.4.1p1
9631       Diag(Loc, diag::err_typecheck_statement_requires_scalar)
9632         << T << E->getSourceRange();
9633       return ExprError();
9634     }
9635   }
9636 
9637   return Owned(E);
9638 }
9639 
9640 ExprResult Sema::ActOnBooleanCondition(Scope *S, SourceLocation Loc,
9641                                        Expr *SubExpr) {
9642   if (!SubExpr)
9643     return ExprError();
9644 
9645   return CheckBooleanCondition(SubExpr, Loc);
9646 }
9647 
9648 namespace {
9649   /// A visitor for rebuilding a call to an __unknown_any expression
9650   /// to have an appropriate type.
9651   struct RebuildUnknownAnyFunction
9652     : StmtVisitor<RebuildUnknownAnyFunction, ExprResult> {
9653 
9654     Sema &S;
9655 
9656     RebuildUnknownAnyFunction(Sema &S) : S(S) {}
9657 
9658     ExprResult VisitStmt(Stmt *S) {
9659       llvm_unreachable("unexpected statement!");
9660       return ExprError();
9661     }
9662 
9663     ExprResult VisitExpr(Expr *E) {
9664       S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_call)
9665         << E->getSourceRange();
9666       return ExprError();
9667     }
9668 
9669     /// Rebuild an expression which simply semantically wraps another
9670     /// expression which it shares the type and value kind of.
9671     template <class T> ExprResult rebuildSugarExpr(T *E) {
9672       ExprResult SubResult = Visit(E->getSubExpr());
9673       if (SubResult.isInvalid()) return ExprError();
9674 
9675       Expr *SubExpr = SubResult.take();
9676       E->setSubExpr(SubExpr);
9677       E->setType(SubExpr->getType());
9678       E->setValueKind(SubExpr->getValueKind());
9679       assert(E->getObjectKind() == OK_Ordinary);
9680       return E;
9681     }
9682 
9683     ExprResult VisitParenExpr(ParenExpr *E) {
9684       return rebuildSugarExpr(E);
9685     }
9686 
9687     ExprResult VisitUnaryExtension(UnaryOperator *E) {
9688       return rebuildSugarExpr(E);
9689     }
9690 
9691     ExprResult VisitUnaryAddrOf(UnaryOperator *E) {
9692       ExprResult SubResult = Visit(E->getSubExpr());
9693       if (SubResult.isInvalid()) return ExprError();
9694 
9695       Expr *SubExpr = SubResult.take();
9696       E->setSubExpr(SubExpr);
9697       E->setType(S.Context.getPointerType(SubExpr->getType()));
9698       assert(E->getValueKind() == VK_RValue);
9699       assert(E->getObjectKind() == OK_Ordinary);
9700       return E;
9701     }
9702 
9703     ExprResult resolveDecl(Expr *E, ValueDecl *VD) {
9704       if (!isa<FunctionDecl>(VD)) return VisitExpr(E);
9705 
9706       E->setType(VD->getType());
9707 
9708       assert(E->getValueKind() == VK_RValue);
9709       if (S.getLangOptions().CPlusPlus &&
9710           !(isa<CXXMethodDecl>(VD) &&
9711             cast<CXXMethodDecl>(VD)->isInstance()))
9712         E->setValueKind(VK_LValue);
9713 
9714       return E;
9715     }
9716 
9717     ExprResult VisitMemberExpr(MemberExpr *E) {
9718       return resolveDecl(E, E->getMemberDecl());
9719     }
9720 
9721     ExprResult VisitDeclRefExpr(DeclRefExpr *E) {
9722       return resolveDecl(E, E->getDecl());
9723     }
9724   };
9725 }
9726 
9727 /// Given a function expression of unknown-any type, try to rebuild it
9728 /// to have a function type.
9729 static ExprResult rebuildUnknownAnyFunction(Sema &S, Expr *FunctionExpr) {
9730   ExprResult Result = RebuildUnknownAnyFunction(S).Visit(FunctionExpr);
9731   if (Result.isInvalid()) return ExprError();
9732   return S.DefaultFunctionArrayConversion(Result.take());
9733 }
9734 
9735 namespace {
9736   /// A visitor for rebuilding an expression of type __unknown_anytype
9737   /// into one which resolves the type directly on the referring
9738   /// expression.  Strict preservation of the original source
9739   /// structure is not a goal.
9740   struct RebuildUnknownAnyExpr
9741     : StmtVisitor<RebuildUnknownAnyExpr, ExprResult> {
9742 
9743     Sema &S;
9744 
9745     /// The current destination type.
9746     QualType DestType;
9747 
9748     RebuildUnknownAnyExpr(Sema &S, QualType CastType)
9749       : S(S), DestType(CastType) {}
9750 
9751     ExprResult VisitStmt(Stmt *S) {
9752       llvm_unreachable("unexpected statement!");
9753       return ExprError();
9754     }
9755 
9756     ExprResult VisitExpr(Expr *E) {
9757       S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_expr)
9758         << E->getSourceRange();
9759       return ExprError();
9760     }
9761 
9762     ExprResult VisitCallExpr(CallExpr *E);
9763     ExprResult VisitObjCMessageExpr(ObjCMessageExpr *E);
9764 
9765     /// Rebuild an expression which simply semantically wraps another
9766     /// expression which it shares the type and value kind of.
9767     template <class T> ExprResult rebuildSugarExpr(T *E) {
9768       ExprResult SubResult = Visit(E->getSubExpr());
9769       if (SubResult.isInvalid()) return ExprError();
9770       Expr *SubExpr = SubResult.take();
9771       E->setSubExpr(SubExpr);
9772       E->setType(SubExpr->getType());
9773       E->setValueKind(SubExpr->getValueKind());
9774       assert(E->getObjectKind() == OK_Ordinary);
9775       return E;
9776     }
9777 
9778     ExprResult VisitParenExpr(ParenExpr *E) {
9779       return rebuildSugarExpr(E);
9780     }
9781 
9782     ExprResult VisitUnaryExtension(UnaryOperator *E) {
9783       return rebuildSugarExpr(E);
9784     }
9785 
9786     ExprResult VisitUnaryAddrOf(UnaryOperator *E) {
9787       const PointerType *Ptr = DestType->getAs<PointerType>();
9788       if (!Ptr) {
9789         S.Diag(E->getOperatorLoc(), diag::err_unknown_any_addrof)
9790           << E->getSourceRange();
9791         return ExprError();
9792       }
9793       assert(E->getValueKind() == VK_RValue);
9794       assert(E->getObjectKind() == OK_Ordinary);
9795       E->setType(DestType);
9796 
9797       // Build the sub-expression as if it were an object of the pointee type.
9798       DestType = Ptr->getPointeeType();
9799       ExprResult SubResult = Visit(E->getSubExpr());
9800       if (SubResult.isInvalid()) return ExprError();
9801       E->setSubExpr(SubResult.take());
9802       return E;
9803     }
9804 
9805     ExprResult VisitImplicitCastExpr(ImplicitCastExpr *E);
9806 
9807     ExprResult resolveDecl(Expr *E, ValueDecl *VD);
9808 
9809     ExprResult VisitMemberExpr(MemberExpr *E) {
9810       return resolveDecl(E, E->getMemberDecl());
9811     }
9812 
9813     ExprResult VisitDeclRefExpr(DeclRefExpr *E) {
9814       return resolveDecl(E, E->getDecl());
9815     }
9816   };
9817 }
9818 
9819 /// Rebuilds a call expression which yielded __unknown_anytype.
9820 ExprResult RebuildUnknownAnyExpr::VisitCallExpr(CallExpr *E) {
9821   Expr *CalleeExpr = E->getCallee();
9822 
9823   enum FnKind {
9824     FK_MemberFunction,
9825     FK_FunctionPointer,
9826     FK_BlockPointer
9827   };
9828 
9829   FnKind Kind;
9830   QualType CalleeType = CalleeExpr->getType();
9831   if (CalleeType == S.Context.BoundMemberTy) {
9832     assert(isa<CXXMemberCallExpr>(E) || isa<CXXOperatorCallExpr>(E));
9833     Kind = FK_MemberFunction;
9834     CalleeType = Expr::findBoundMemberType(CalleeExpr);
9835   } else if (const PointerType *Ptr = CalleeType->getAs<PointerType>()) {
9836     CalleeType = Ptr->getPointeeType();
9837     Kind = FK_FunctionPointer;
9838   } else {
9839     CalleeType = CalleeType->castAs<BlockPointerType>()->getPointeeType();
9840     Kind = FK_BlockPointer;
9841   }
9842   const FunctionType *FnType = CalleeType->castAs<FunctionType>();
9843 
9844   // Verify that this is a legal result type of a function.
9845   if (DestType->isArrayType() || DestType->isFunctionType()) {
9846     unsigned diagID = diag::err_func_returning_array_function;
9847     if (Kind == FK_BlockPointer)
9848       diagID = diag::err_block_returning_array_function;
9849 
9850     S.Diag(E->getExprLoc(), diagID)
9851       << DestType->isFunctionType() << DestType;
9852     return ExprError();
9853   }
9854 
9855   // Otherwise, go ahead and set DestType as the call's result.
9856   E->setType(DestType.getNonLValueExprType(S.Context));
9857   E->setValueKind(Expr::getValueKindForType(DestType));
9858   assert(E->getObjectKind() == OK_Ordinary);
9859 
9860   // Rebuild the function type, replacing the result type with DestType.
9861   if (const FunctionProtoType *Proto = dyn_cast<FunctionProtoType>(FnType))
9862     DestType = S.Context.getFunctionType(DestType,
9863                                          Proto->arg_type_begin(),
9864                                          Proto->getNumArgs(),
9865                                          Proto->getExtProtoInfo());
9866   else
9867     DestType = S.Context.getFunctionNoProtoType(DestType,
9868                                                 FnType->getExtInfo());
9869 
9870   // Rebuild the appropriate pointer-to-function type.
9871   switch (Kind) {
9872   case FK_MemberFunction:
9873     // Nothing to do.
9874     break;
9875 
9876   case FK_FunctionPointer:
9877     DestType = S.Context.getPointerType(DestType);
9878     break;
9879 
9880   case FK_BlockPointer:
9881     DestType = S.Context.getBlockPointerType(DestType);
9882     break;
9883   }
9884 
9885   // Finally, we can recurse.
9886   ExprResult CalleeResult = Visit(CalleeExpr);
9887   if (!CalleeResult.isUsable()) return ExprError();
9888   E->setCallee(CalleeResult.take());
9889 
9890   // Bind a temporary if necessary.
9891   return S.MaybeBindToTemporary(E);
9892 }
9893 
9894 ExprResult RebuildUnknownAnyExpr::VisitObjCMessageExpr(ObjCMessageExpr *E) {
9895   // Verify that this is a legal result type of a call.
9896   if (DestType->isArrayType() || DestType->isFunctionType()) {
9897     S.Diag(E->getExprLoc(), diag::err_func_returning_array_function)
9898       << DestType->isFunctionType() << DestType;
9899     return ExprError();
9900   }
9901 
9902   // Rewrite the method result type if available.
9903   if (ObjCMethodDecl *Method = E->getMethodDecl()) {
9904     assert(Method->getResultType() == S.Context.UnknownAnyTy);
9905     Method->setResultType(DestType);
9906   }
9907 
9908   // Change the type of the message.
9909   E->setType(DestType.getNonReferenceType());
9910   E->setValueKind(Expr::getValueKindForType(DestType));
9911 
9912   return S.MaybeBindToTemporary(E);
9913 }
9914 
9915 ExprResult RebuildUnknownAnyExpr::VisitImplicitCastExpr(ImplicitCastExpr *E) {
9916   // The only case we should ever see here is a function-to-pointer decay.
9917   assert(E->getCastKind() == CK_FunctionToPointerDecay);
9918   assert(E->getValueKind() == VK_RValue);
9919   assert(E->getObjectKind() == OK_Ordinary);
9920 
9921   E->setType(DestType);
9922 
9923   // Rebuild the sub-expression as the pointee (function) type.
9924   DestType = DestType->castAs<PointerType>()->getPointeeType();
9925 
9926   ExprResult Result = Visit(E->getSubExpr());
9927   if (!Result.isUsable()) return ExprError();
9928 
9929   E->setSubExpr(Result.take());
9930   return S.Owned(E);
9931 }
9932 
9933 ExprResult RebuildUnknownAnyExpr::resolveDecl(Expr *E, ValueDecl *VD) {
9934   ExprValueKind ValueKind = VK_LValue;
9935   QualType Type = DestType;
9936 
9937   // We know how to make this work for certain kinds of decls:
9938 
9939   //  - functions
9940   if (FunctionDecl *FD = dyn_cast<FunctionDecl>(VD)) {
9941     if (const PointerType *Ptr = Type->getAs<PointerType>()) {
9942       DestType = Ptr->getPointeeType();
9943       ExprResult Result = resolveDecl(E, VD);
9944       if (Result.isInvalid()) return ExprError();
9945       return S.ImpCastExprToType(Result.take(), Type,
9946                                  CK_FunctionToPointerDecay, VK_RValue);
9947     }
9948 
9949     if (!Type->isFunctionType()) {
9950       S.Diag(E->getExprLoc(), diag::err_unknown_any_function)
9951         << VD << E->getSourceRange();
9952       return ExprError();
9953     }
9954 
9955     if (CXXMethodDecl *MD = dyn_cast<CXXMethodDecl>(FD))
9956       if (MD->isInstance()) {
9957         ValueKind = VK_RValue;
9958         Type = S.Context.BoundMemberTy;
9959       }
9960 
9961     // Function references aren't l-values in C.
9962     if (!S.getLangOptions().CPlusPlus)
9963       ValueKind = VK_RValue;
9964 
9965   //  - variables
9966   } else if (isa<VarDecl>(VD)) {
9967     if (const ReferenceType *RefTy = Type->getAs<ReferenceType>()) {
9968       Type = RefTy->getPointeeType();
9969     } else if (Type->isFunctionType()) {
9970       S.Diag(E->getExprLoc(), diag::err_unknown_any_var_function_type)
9971         << VD << E->getSourceRange();
9972       return ExprError();
9973     }
9974 
9975   //  - nothing else
9976   } else {
9977     S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_decl)
9978       << VD << E->getSourceRange();
9979     return ExprError();
9980   }
9981 
9982   VD->setType(DestType);
9983   E->setType(Type);
9984   E->setValueKind(ValueKind);
9985   return S.Owned(E);
9986 }
9987 
9988 /// Check a cast of an unknown-any type.  We intentionally only
9989 /// trigger this for C-style casts.
9990 ExprResult Sema::checkUnknownAnyCast(SourceRange TypeRange, QualType CastType,
9991                                      Expr *CastExpr, CastKind &CastKind,
9992                                      ExprValueKind &VK, CXXCastPath &Path) {
9993   // Rewrite the casted expression from scratch.
9994   ExprResult result = RebuildUnknownAnyExpr(*this, CastType).Visit(CastExpr);
9995   if (!result.isUsable()) return ExprError();
9996 
9997   CastExpr = result.take();
9998   VK = CastExpr->getValueKind();
9999   CastKind = CK_NoOp;
10000 
10001   return CastExpr;
10002 }
10003 
10004 static ExprResult diagnoseUnknownAnyExpr(Sema &S, Expr *E) {
10005   Expr *orig = E;
10006   unsigned diagID = diag::err_uncasted_use_of_unknown_any;
10007   while (true) {
10008     E = E->IgnoreParenImpCasts();
10009     if (CallExpr *call = dyn_cast<CallExpr>(E)) {
10010       E = call->getCallee();
10011       diagID = diag::err_uncasted_call_of_unknown_any;
10012     } else {
10013       break;
10014     }
10015   }
10016 
10017   SourceLocation loc;
10018   NamedDecl *d;
10019   if (DeclRefExpr *ref = dyn_cast<DeclRefExpr>(E)) {
10020     loc = ref->getLocation();
10021     d = ref->getDecl();
10022   } else if (MemberExpr *mem = dyn_cast<MemberExpr>(E)) {
10023     loc = mem->getMemberLoc();
10024     d = mem->getMemberDecl();
10025   } else if (ObjCMessageExpr *msg = dyn_cast<ObjCMessageExpr>(E)) {
10026     diagID = diag::err_uncasted_call_of_unknown_any;
10027     loc = msg->getSelectorStartLoc();
10028     d = msg->getMethodDecl();
10029     if (!d) {
10030       S.Diag(loc, diag::err_uncasted_send_to_unknown_any_method)
10031         << static_cast<unsigned>(msg->isClassMessage()) << msg->getSelector()
10032         << orig->getSourceRange();
10033       return ExprError();
10034     }
10035   } else {
10036     S.Diag(E->getExprLoc(), diag::err_unsupported_unknown_any_expr)
10037       << E->getSourceRange();
10038     return ExprError();
10039   }
10040 
10041   S.Diag(loc, diagID) << d << orig->getSourceRange();
10042 
10043   // Never recoverable.
10044   return ExprError();
10045 }
10046 
10047 /// Check for operands with placeholder types and complain if found.
10048 /// Returns true if there was an error and no recovery was possible.
10049 ExprResult Sema::CheckPlaceholderExpr(Expr *E) {
10050   const BuiltinType *placeholderType = E->getType()->getAsPlaceholderType();
10051   if (!placeholderType) return Owned(E);
10052 
10053   switch (placeholderType->getKind()) {
10054 
10055   // Overloaded expressions.
10056   case BuiltinType::Overload: {
10057     // Try to resolve a single function template specialization.
10058     // This is obligatory.
10059     ExprResult result = Owned(E);
10060     if (ResolveAndFixSingleFunctionTemplateSpecialization(result, false)) {
10061       return result;
10062 
10063     // If that failed, try to recover with a call.
10064     } else {
10065       tryToRecoverWithCall(result, PDiag(diag::err_ovl_unresolvable),
10066                            /*complain*/ true);
10067       return result;
10068     }
10069   }
10070 
10071   // Bound member functions.
10072   case BuiltinType::BoundMember: {
10073     ExprResult result = Owned(E);
10074     tryToRecoverWithCall(result, PDiag(diag::err_bound_member_function),
10075                          /*complain*/ true);
10076     return result;
10077   }
10078 
10079   // ARC unbridged casts.
10080   case BuiltinType::ARCUnbridgedCast: {
10081     Expr *realCast = stripARCUnbridgedCast(E);
10082     diagnoseARCUnbridgedCast(realCast);
10083     return Owned(realCast);
10084   }
10085 
10086   // Expressions of unknown type.
10087   case BuiltinType::UnknownAny:
10088     return diagnoseUnknownAnyExpr(*this, E);
10089 
10090   // Everything else should be impossible.  TODO: metaprogram this.
10091   case BuiltinType::Void:
10092   case BuiltinType::Bool:
10093   case BuiltinType::Char_U:
10094   case BuiltinType::UChar:
10095   case BuiltinType::WChar_U:
10096   case BuiltinType::Char16:
10097   case BuiltinType::Char32:
10098   case BuiltinType::UShort:
10099   case BuiltinType::UInt:
10100   case BuiltinType::ULong:
10101   case BuiltinType::ULongLong:
10102   case BuiltinType::UInt128:
10103   case BuiltinType::Char_S:
10104   case BuiltinType::SChar:
10105   case BuiltinType::WChar_S:
10106   case BuiltinType::Short:
10107   case BuiltinType::Int:
10108   case BuiltinType::Long:
10109   case BuiltinType::LongLong:
10110   case BuiltinType::Int128:
10111   case BuiltinType::Half:
10112   case BuiltinType::Float:
10113   case BuiltinType::Double:
10114   case BuiltinType::LongDouble:
10115   case BuiltinType::NullPtr:
10116   case BuiltinType::ObjCId:
10117   case BuiltinType::ObjCClass:
10118   case BuiltinType::ObjCSel:
10119   case BuiltinType::Dependent:
10120     break;
10121   }
10122 
10123   llvm_unreachable("invalid placeholder type!");
10124 }
10125 
10126 bool Sema::CheckCaseExpression(Expr *E) {
10127   if (E->isTypeDependent())
10128     return true;
10129   if (E->isValueDependent() || E->isIntegerConstantExpr(Context))
10130     return E->getType()->isIntegralOrEnumerationType();
10131   return false;
10132 }
10133