1 //===--- SemaExprMember.cpp - Semantic Analysis for Expressions -----------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements semantic analysis member access expressions.
11 //
12 //===----------------------------------------------------------------------===//
13 #include "clang/Sema/Overload.h"
14 #include "clang/AST/ASTLambda.h"
15 #include "clang/AST/DeclCXX.h"
16 #include "clang/AST/DeclObjC.h"
17 #include "clang/AST/DeclTemplate.h"
18 #include "clang/AST/ExprCXX.h"
19 #include "clang/AST/ExprObjC.h"
20 #include "clang/Lex/Preprocessor.h"
21 #include "clang/Sema/Lookup.h"
22 #include "clang/Sema/Scope.h"
23 #include "clang/Sema/ScopeInfo.h"
24 #include "clang/Sema/SemaInternal.h"
25 
26 using namespace clang;
27 using namespace sema;
28 
29 typedef llvm::SmallPtrSet<const CXXRecordDecl*, 4> BaseSet;
30 static bool BaseIsNotInSet(const CXXRecordDecl *Base, void *BasesPtr) {
31   const BaseSet &Bases = *reinterpret_cast<const BaseSet*>(BasesPtr);
32   return !Bases.count(Base->getCanonicalDecl());
33 }
34 
35 /// Determines if the given class is provably not derived from all of
36 /// the prospective base classes.
37 static bool isProvablyNotDerivedFrom(Sema &SemaRef, CXXRecordDecl *Record,
38                                      const BaseSet &Bases) {
39   void *BasesPtr = const_cast<void*>(reinterpret_cast<const void*>(&Bases));
40   return BaseIsNotInSet(Record, BasesPtr) &&
41          Record->forallBases(BaseIsNotInSet, BasesPtr);
42 }
43 
44 enum IMAKind {
45   /// The reference is definitely not an instance member access.
46   IMA_Static,
47 
48   /// The reference may be an implicit instance member access.
49   IMA_Mixed,
50 
51   /// The reference may be to an instance member, but it might be invalid if
52   /// so, because the context is not an instance method.
53   IMA_Mixed_StaticContext,
54 
55   /// The reference may be to an instance member, but it is invalid if
56   /// so, because the context is from an unrelated class.
57   IMA_Mixed_Unrelated,
58 
59   /// The reference is definitely an implicit instance member access.
60   IMA_Instance,
61 
62   /// The reference may be to an unresolved using declaration.
63   IMA_Unresolved,
64 
65   /// The reference is a contextually-permitted abstract member reference.
66   IMA_Abstract,
67 
68   /// The reference may be to an unresolved using declaration and the
69   /// context is not an instance method.
70   IMA_Unresolved_StaticContext,
71 
72   // The reference refers to a field which is not a member of the containing
73   // class, which is allowed because we're in C++11 mode and the context is
74   // unevaluated.
75   IMA_Field_Uneval_Context,
76 
77   /// All possible referrents are instance members and the current
78   /// context is not an instance method.
79   IMA_Error_StaticContext,
80 
81   /// All possible referrents are instance members of an unrelated
82   /// class.
83   IMA_Error_Unrelated
84 };
85 
86 /// The given lookup names class member(s) and is not being used for
87 /// an address-of-member expression.  Classify the type of access
88 /// according to whether it's possible that this reference names an
89 /// instance member.  This is best-effort in dependent contexts; it is okay to
90 /// conservatively answer "yes", in which case some errors will simply
91 /// not be caught until template-instantiation.
92 static IMAKind ClassifyImplicitMemberAccess(Sema &SemaRef,
93                                             const LookupResult &R) {
94   assert(!R.empty() && (*R.begin())->isCXXClassMember());
95 
96   DeclContext *DC = SemaRef.getFunctionLevelDeclContext();
97 
98   bool isStaticContext = SemaRef.CXXThisTypeOverride.isNull() &&
99     (!isa<CXXMethodDecl>(DC) || cast<CXXMethodDecl>(DC)->isStatic());
100 
101   if (R.isUnresolvableResult())
102     return isStaticContext ? IMA_Unresolved_StaticContext : IMA_Unresolved;
103 
104   // Collect all the declaring classes of instance members we find.
105   bool hasNonInstance = false;
106   bool isField = false;
107   BaseSet Classes;
108   for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I) {
109     NamedDecl *D = *I;
110 
111     if (D->isCXXInstanceMember()) {
112       if (dyn_cast<FieldDecl>(D) || dyn_cast<MSPropertyDecl>(D)
113           || dyn_cast<IndirectFieldDecl>(D))
114         isField = true;
115 
116       CXXRecordDecl *R = cast<CXXRecordDecl>(D->getDeclContext());
117       Classes.insert(R->getCanonicalDecl());
118     }
119     else
120       hasNonInstance = true;
121   }
122 
123   // If we didn't find any instance members, it can't be an implicit
124   // member reference.
125   if (Classes.empty())
126     return IMA_Static;
127 
128   // C++11 [expr.prim.general]p12:
129   //   An id-expression that denotes a non-static data member or non-static
130   //   member function of a class can only be used:
131   //   (...)
132   //   - if that id-expression denotes a non-static data member and it
133   //     appears in an unevaluated operand.
134   //
135   // This rule is specific to C++11.  However, we also permit this form
136   // in unevaluated inline assembly operands, like the operand to a SIZE.
137   IMAKind AbstractInstanceResult = IMA_Static; // happens to be 'false'
138   assert(!AbstractInstanceResult);
139   switch (SemaRef.ExprEvalContexts.back().Context) {
140   case Sema::Unevaluated:
141     if (isField && SemaRef.getLangOpts().CPlusPlus11)
142       AbstractInstanceResult = IMA_Field_Uneval_Context;
143     break;
144 
145   case Sema::UnevaluatedAbstract:
146     AbstractInstanceResult = IMA_Abstract;
147     break;
148 
149   case Sema::ConstantEvaluated:
150   case Sema::PotentiallyEvaluated:
151   case Sema::PotentiallyEvaluatedIfUsed:
152     break;
153   }
154 
155   // If the current context is not an instance method, it can't be
156   // an implicit member reference.
157   if (isStaticContext) {
158     if (hasNonInstance)
159       return IMA_Mixed_StaticContext;
160 
161     return AbstractInstanceResult ? AbstractInstanceResult
162                                   : IMA_Error_StaticContext;
163   }
164 
165   CXXRecordDecl *contextClass;
166   if (CXXMethodDecl *MD = dyn_cast<CXXMethodDecl>(DC))
167     contextClass = MD->getParent()->getCanonicalDecl();
168   else
169     contextClass = cast<CXXRecordDecl>(DC);
170 
171   // [class.mfct.non-static]p3:
172   // ...is used in the body of a non-static member function of class X,
173   // if name lookup (3.4.1) resolves the name in the id-expression to a
174   // non-static non-type member of some class C [...]
175   // ...if C is not X or a base class of X, the class member access expression
176   // is ill-formed.
177   if (R.getNamingClass() &&
178       contextClass->getCanonicalDecl() !=
179         R.getNamingClass()->getCanonicalDecl()) {
180     // If the naming class is not the current context, this was a qualified
181     // member name lookup, and it's sufficient to check that we have the naming
182     // class as a base class.
183     Classes.clear();
184     Classes.insert(R.getNamingClass()->getCanonicalDecl());
185   }
186 
187   // If we can prove that the current context is unrelated to all the
188   // declaring classes, it can't be an implicit member reference (in
189   // which case it's an error if any of those members are selected).
190   if (isProvablyNotDerivedFrom(SemaRef, contextClass, Classes))
191     return hasNonInstance ? IMA_Mixed_Unrelated :
192            AbstractInstanceResult ? AbstractInstanceResult :
193                                     IMA_Error_Unrelated;
194 
195   return (hasNonInstance ? IMA_Mixed : IMA_Instance);
196 }
197 
198 /// Diagnose a reference to a field with no object available.
199 static void diagnoseInstanceReference(Sema &SemaRef,
200                                       const CXXScopeSpec &SS,
201                                       NamedDecl *Rep,
202                                       const DeclarationNameInfo &nameInfo) {
203   SourceLocation Loc = nameInfo.getLoc();
204   SourceRange Range(Loc);
205   if (SS.isSet()) Range.setBegin(SS.getRange().getBegin());
206 
207   // Look through using shadow decls and aliases.
208   Rep = Rep->getUnderlyingDecl();
209 
210   DeclContext *FunctionLevelDC = SemaRef.getFunctionLevelDeclContext();
211   CXXMethodDecl *Method = dyn_cast<CXXMethodDecl>(FunctionLevelDC);
212   CXXRecordDecl *ContextClass = Method ? Method->getParent() : nullptr;
213   CXXRecordDecl *RepClass = dyn_cast<CXXRecordDecl>(Rep->getDeclContext());
214 
215   bool InStaticMethod = Method && Method->isStatic();
216   bool IsField = isa<FieldDecl>(Rep) || isa<IndirectFieldDecl>(Rep);
217 
218   if (IsField && InStaticMethod)
219     // "invalid use of member 'x' in static member function"
220     SemaRef.Diag(Loc, diag::err_invalid_member_use_in_static_method)
221         << Range << nameInfo.getName();
222   else if (ContextClass && RepClass && SS.isEmpty() && !InStaticMethod &&
223            !RepClass->Equals(ContextClass) && RepClass->Encloses(ContextClass))
224     // Unqualified lookup in a non-static member function found a member of an
225     // enclosing class.
226     SemaRef.Diag(Loc, diag::err_nested_non_static_member_use)
227       << IsField << RepClass << nameInfo.getName() << ContextClass << Range;
228   else if (IsField)
229     SemaRef.Diag(Loc, diag::err_invalid_non_static_member_use)
230       << nameInfo.getName() << Range;
231   else
232     SemaRef.Diag(Loc, diag::err_member_call_without_object)
233       << Range;
234 }
235 
236 /// Builds an expression which might be an implicit member expression.
237 ExprResult
238 Sema::BuildPossibleImplicitMemberExpr(const CXXScopeSpec &SS,
239                                       SourceLocation TemplateKWLoc,
240                                       LookupResult &R,
241                                 const TemplateArgumentListInfo *TemplateArgs) {
242   switch (ClassifyImplicitMemberAccess(*this, R)) {
243   case IMA_Instance:
244     return BuildImplicitMemberExpr(SS, TemplateKWLoc, R, TemplateArgs, true);
245 
246   case IMA_Mixed:
247   case IMA_Mixed_Unrelated:
248   case IMA_Unresolved:
249     return BuildImplicitMemberExpr(SS, TemplateKWLoc, R, TemplateArgs, false);
250 
251   case IMA_Field_Uneval_Context:
252     Diag(R.getNameLoc(), diag::warn_cxx98_compat_non_static_member_use)
253       << R.getLookupNameInfo().getName();
254     // Fall through.
255   case IMA_Static:
256   case IMA_Abstract:
257   case IMA_Mixed_StaticContext:
258   case IMA_Unresolved_StaticContext:
259     if (TemplateArgs || TemplateKWLoc.isValid())
260       return BuildTemplateIdExpr(SS, TemplateKWLoc, R, false, TemplateArgs);
261     return BuildDeclarationNameExpr(SS, R, false);
262 
263   case IMA_Error_StaticContext:
264   case IMA_Error_Unrelated:
265     diagnoseInstanceReference(*this, SS, R.getRepresentativeDecl(),
266                               R.getLookupNameInfo());
267     return ExprError();
268   }
269 
270   llvm_unreachable("unexpected instance member access kind");
271 }
272 
273 /// Check an ext-vector component access expression.
274 ///
275 /// VK should be set in advance to the value kind of the base
276 /// expression.
277 static QualType
278 CheckExtVectorComponent(Sema &S, QualType baseType, ExprValueKind &VK,
279                         SourceLocation OpLoc, const IdentifierInfo *CompName,
280                         SourceLocation CompLoc) {
281   // FIXME: Share logic with ExtVectorElementExpr::containsDuplicateElements,
282   // see FIXME there.
283   //
284   // FIXME: This logic can be greatly simplified by splitting it along
285   // halving/not halving and reworking the component checking.
286   const ExtVectorType *vecType = baseType->getAs<ExtVectorType>();
287 
288   // The vector accessor can't exceed the number of elements.
289   const char *compStr = CompName->getNameStart();
290 
291   // This flag determines whether or not the component is one of the four
292   // special names that indicate a subset of exactly half the elements are
293   // to be selected.
294   bool HalvingSwizzle = false;
295 
296   // This flag determines whether or not CompName has an 's' char prefix,
297   // indicating that it is a string of hex values to be used as vector indices.
298   bool HexSwizzle = (*compStr == 's' || *compStr == 'S') && compStr[1];
299 
300   bool HasRepeated = false;
301   bool HasIndex[16] = {};
302 
303   int Idx;
304 
305   // Check that we've found one of the special components, or that the component
306   // names must come from the same set.
307   if (!strcmp(compStr, "hi") || !strcmp(compStr, "lo") ||
308       !strcmp(compStr, "even") || !strcmp(compStr, "odd")) {
309     HalvingSwizzle = true;
310   } else if (!HexSwizzle &&
311              (Idx = vecType->getPointAccessorIdx(*compStr)) != -1) {
312     do {
313       if (HasIndex[Idx]) HasRepeated = true;
314       HasIndex[Idx] = true;
315       compStr++;
316     } while (*compStr && (Idx = vecType->getPointAccessorIdx(*compStr)) != -1);
317   } else {
318     if (HexSwizzle) compStr++;
319     while ((Idx = vecType->getNumericAccessorIdx(*compStr)) != -1) {
320       if (HasIndex[Idx]) HasRepeated = true;
321       HasIndex[Idx] = true;
322       compStr++;
323     }
324   }
325 
326   if (!HalvingSwizzle && *compStr) {
327     // We didn't get to the end of the string. This means the component names
328     // didn't come from the same set *or* we encountered an illegal name.
329     S.Diag(OpLoc, diag::err_ext_vector_component_name_illegal)
330       << StringRef(compStr, 1) << SourceRange(CompLoc);
331     return QualType();
332   }
333 
334   // Ensure no component accessor exceeds the width of the vector type it
335   // operates on.
336   if (!HalvingSwizzle) {
337     compStr = CompName->getNameStart();
338 
339     if (HexSwizzle)
340       compStr++;
341 
342     while (*compStr) {
343       if (!vecType->isAccessorWithinNumElements(*compStr++)) {
344         S.Diag(OpLoc, diag::err_ext_vector_component_exceeds_length)
345           << baseType << SourceRange(CompLoc);
346         return QualType();
347       }
348     }
349   }
350 
351   // The component accessor looks fine - now we need to compute the actual type.
352   // The vector type is implied by the component accessor. For example,
353   // vec4.b is a float, vec4.xy is a vec2, vec4.rgb is a vec3, etc.
354   // vec4.s0 is a float, vec4.s23 is a vec3, etc.
355   // vec4.hi, vec4.lo, vec4.e, and vec4.o all return vec2.
356   unsigned CompSize = HalvingSwizzle ? (vecType->getNumElements() + 1) / 2
357                                      : CompName->getLength();
358   if (HexSwizzle)
359     CompSize--;
360 
361   if (CompSize == 1)
362     return vecType->getElementType();
363 
364   if (HasRepeated) VK = VK_RValue;
365 
366   QualType VT = S.Context.getExtVectorType(vecType->getElementType(), CompSize);
367   // Now look up the TypeDefDecl from the vector type. Without this,
368   // diagostics look bad. We want extended vector types to appear built-in.
369   for (Sema::ExtVectorDeclsType::iterator
370          I = S.ExtVectorDecls.begin(S.getExternalSource()),
371          E = S.ExtVectorDecls.end();
372        I != E; ++I) {
373     if ((*I)->getUnderlyingType() == VT)
374       return S.Context.getTypedefType(*I);
375   }
376 
377   return VT; // should never get here (a typedef type should always be found).
378 }
379 
380 static Decl *FindGetterSetterNameDeclFromProtocolList(const ObjCProtocolDecl*PDecl,
381                                                 IdentifierInfo *Member,
382                                                 const Selector &Sel,
383                                                 ASTContext &Context) {
384   if (Member)
385     if (ObjCPropertyDecl *PD = PDecl->FindPropertyDeclaration(Member))
386       return PD;
387   if (ObjCMethodDecl *OMD = PDecl->getInstanceMethod(Sel))
388     return OMD;
389 
390   for (const auto *I : PDecl->protocols()) {
391     if (Decl *D = FindGetterSetterNameDeclFromProtocolList(I, Member, Sel,
392                                                            Context))
393       return D;
394   }
395   return nullptr;
396 }
397 
398 static Decl *FindGetterSetterNameDecl(const ObjCObjectPointerType *QIdTy,
399                                       IdentifierInfo *Member,
400                                       const Selector &Sel,
401                                       ASTContext &Context) {
402   // Check protocols on qualified interfaces.
403   Decl *GDecl = nullptr;
404   for (const auto *I : QIdTy->quals()) {
405     if (Member)
406       if (ObjCPropertyDecl *PD = I->FindPropertyDeclaration(Member)) {
407         GDecl = PD;
408         break;
409       }
410     // Also must look for a getter or setter name which uses property syntax.
411     if (ObjCMethodDecl *OMD = I->getInstanceMethod(Sel)) {
412       GDecl = OMD;
413       break;
414     }
415   }
416   if (!GDecl) {
417     for (const auto *I : QIdTy->quals()) {
418       // Search in the protocol-qualifier list of current protocol.
419       GDecl = FindGetterSetterNameDeclFromProtocolList(I, Member, Sel, Context);
420       if (GDecl)
421         return GDecl;
422     }
423   }
424   return GDecl;
425 }
426 
427 ExprResult
428 Sema::ActOnDependentMemberExpr(Expr *BaseExpr, QualType BaseType,
429                                bool IsArrow, SourceLocation OpLoc,
430                                const CXXScopeSpec &SS,
431                                SourceLocation TemplateKWLoc,
432                                NamedDecl *FirstQualifierInScope,
433                                const DeclarationNameInfo &NameInfo,
434                                const TemplateArgumentListInfo *TemplateArgs) {
435   // Even in dependent contexts, try to diagnose base expressions with
436   // obviously wrong types, e.g.:
437   //
438   // T* t;
439   // t.f;
440   //
441   // In Obj-C++, however, the above expression is valid, since it could be
442   // accessing the 'f' property if T is an Obj-C interface. The extra check
443   // allows this, while still reporting an error if T is a struct pointer.
444   if (!IsArrow) {
445     const PointerType *PT = BaseType->getAs<PointerType>();
446     if (PT && (!getLangOpts().ObjC1 ||
447                PT->getPointeeType()->isRecordType())) {
448       assert(BaseExpr && "cannot happen with implicit member accesses");
449       Diag(OpLoc, diag::err_typecheck_member_reference_struct_union)
450         << BaseType << BaseExpr->getSourceRange() << NameInfo.getSourceRange();
451       return ExprError();
452     }
453   }
454 
455   assert(BaseType->isDependentType() ||
456          NameInfo.getName().isDependentName() ||
457          isDependentScopeSpecifier(SS));
458 
459   // Get the type being accessed in BaseType.  If this is an arrow, the BaseExpr
460   // must have pointer type, and the accessed type is the pointee.
461   return CXXDependentScopeMemberExpr::Create(
462       Context, BaseExpr, BaseType, IsArrow, OpLoc,
463       SS.getWithLocInContext(Context), TemplateKWLoc, FirstQualifierInScope,
464       NameInfo, TemplateArgs);
465 }
466 
467 /// We know that the given qualified member reference points only to
468 /// declarations which do not belong to the static type of the base
469 /// expression.  Diagnose the problem.
470 static void DiagnoseQualifiedMemberReference(Sema &SemaRef,
471                                              Expr *BaseExpr,
472                                              QualType BaseType,
473                                              const CXXScopeSpec &SS,
474                                              NamedDecl *rep,
475                                        const DeclarationNameInfo &nameInfo) {
476   // If this is an implicit member access, use a different set of
477   // diagnostics.
478   if (!BaseExpr)
479     return diagnoseInstanceReference(SemaRef, SS, rep, nameInfo);
480 
481   SemaRef.Diag(nameInfo.getLoc(), diag::err_qualified_member_of_unrelated)
482     << SS.getRange() << rep << BaseType;
483 }
484 
485 // Check whether the declarations we found through a nested-name
486 // specifier in a member expression are actually members of the base
487 // type.  The restriction here is:
488 //
489 //   C++ [expr.ref]p2:
490 //     ... In these cases, the id-expression shall name a
491 //     member of the class or of one of its base classes.
492 //
493 // So it's perfectly legitimate for the nested-name specifier to name
494 // an unrelated class, and for us to find an overload set including
495 // decls from classes which are not superclasses, as long as the decl
496 // we actually pick through overload resolution is from a superclass.
497 bool Sema::CheckQualifiedMemberReference(Expr *BaseExpr,
498                                          QualType BaseType,
499                                          const CXXScopeSpec &SS,
500                                          const LookupResult &R) {
501   CXXRecordDecl *BaseRecord =
502     cast_or_null<CXXRecordDecl>(computeDeclContext(BaseType));
503   if (!BaseRecord) {
504     // We can't check this yet because the base type is still
505     // dependent.
506     assert(BaseType->isDependentType());
507     return false;
508   }
509 
510   for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I) {
511     // If this is an implicit member reference and we find a
512     // non-instance member, it's not an error.
513     if (!BaseExpr && !(*I)->isCXXInstanceMember())
514       return false;
515 
516     // Note that we use the DC of the decl, not the underlying decl.
517     DeclContext *DC = (*I)->getDeclContext();
518     while (DC->isTransparentContext())
519       DC = DC->getParent();
520 
521     if (!DC->isRecord())
522       continue;
523 
524     CXXRecordDecl *MemberRecord = cast<CXXRecordDecl>(DC)->getCanonicalDecl();
525     if (BaseRecord->getCanonicalDecl() == MemberRecord ||
526         !BaseRecord->isProvablyNotDerivedFrom(MemberRecord))
527       return false;
528   }
529 
530   DiagnoseQualifiedMemberReference(*this, BaseExpr, BaseType, SS,
531                                    R.getRepresentativeDecl(),
532                                    R.getLookupNameInfo());
533   return true;
534 }
535 
536 namespace {
537 
538 // Callback to only accept typo corrections that are either a ValueDecl or a
539 // FunctionTemplateDecl and are declared in the current record or, for a C++
540 // classes, one of its base classes.
541 class RecordMemberExprValidatorCCC : public CorrectionCandidateCallback {
542 public:
543   explicit RecordMemberExprValidatorCCC(const RecordType *RTy)
544       : Record(RTy->getDecl()) {
545     // Don't add bare keywords to the consumer since they will always fail
546     // validation by virtue of not being associated with any decls.
547     WantTypeSpecifiers = false;
548     WantExpressionKeywords = false;
549     WantCXXNamedCasts = false;
550     WantFunctionLikeCasts = false;
551     WantRemainingKeywords = false;
552   }
553 
554   bool ValidateCandidate(const TypoCorrection &candidate) override {
555     NamedDecl *ND = candidate.getCorrectionDecl();
556     // Don't accept candidates that cannot be member functions, constants,
557     // variables, or templates.
558     if (!ND || !(isa<ValueDecl>(ND) || isa<FunctionTemplateDecl>(ND)))
559       return false;
560 
561     // Accept candidates that occur in the current record.
562     if (Record->containsDecl(ND))
563       return true;
564 
565     if (const CXXRecordDecl *RD = dyn_cast<CXXRecordDecl>(Record)) {
566       // Accept candidates that occur in any of the current class' base classes.
567       for (const auto &BS : RD->bases()) {
568         if (const RecordType *BSTy =
569                 dyn_cast_or_null<RecordType>(BS.getType().getTypePtrOrNull())) {
570           if (BSTy->getDecl()->containsDecl(ND))
571             return true;
572         }
573       }
574     }
575 
576     return false;
577   }
578 
579 private:
580   const RecordDecl *const Record;
581 };
582 
583 }
584 
585 static bool LookupMemberExprInRecord(Sema &SemaRef, LookupResult &R,
586                                      Expr *BaseExpr,
587                                      const RecordType *RTy,
588                                      SourceLocation OpLoc, bool IsArrow,
589                                      CXXScopeSpec &SS, bool HasTemplateArgs,
590                                      TypoExpr *&TE) {
591   SourceRange BaseRange = BaseExpr ? BaseExpr->getSourceRange() : SourceRange();
592   RecordDecl *RDecl = RTy->getDecl();
593   if (!SemaRef.isThisOutsideMemberFunctionBody(QualType(RTy, 0)) &&
594       SemaRef.RequireCompleteType(OpLoc, QualType(RTy, 0),
595                                   diag::err_typecheck_incomplete_tag,
596                                   BaseRange))
597     return true;
598 
599   if (HasTemplateArgs) {
600     // LookupTemplateName doesn't expect these both to exist simultaneously.
601     QualType ObjectType = SS.isSet() ? QualType() : QualType(RTy, 0);
602 
603     bool MOUS;
604     SemaRef.LookupTemplateName(R, nullptr, SS, ObjectType, false, MOUS);
605     return false;
606   }
607 
608   DeclContext *DC = RDecl;
609   if (SS.isSet()) {
610     // If the member name was a qualified-id, look into the
611     // nested-name-specifier.
612     DC = SemaRef.computeDeclContext(SS, false);
613 
614     if (SemaRef.RequireCompleteDeclContext(SS, DC)) {
615       SemaRef.Diag(SS.getRange().getEnd(), diag::err_typecheck_incomplete_tag)
616           << SS.getRange() << DC;
617       return true;
618     }
619 
620     assert(DC && "Cannot handle non-computable dependent contexts in lookup");
621 
622     if (!isa<TypeDecl>(DC)) {
623       SemaRef.Diag(R.getNameLoc(), diag::err_qualified_member_nonclass)
624           << DC << SS.getRange();
625       return true;
626     }
627   }
628 
629   // The record definition is complete, now look up the member.
630   SemaRef.LookupQualifiedName(R, DC, SS);
631 
632   if (!R.empty())
633     return false;
634 
635   DeclarationName Typo = R.getLookupName();
636   SourceLocation TypoLoc = R.getNameLoc();
637   TE = SemaRef.CorrectTypoDelayed(
638       R.getLookupNameInfo(), R.getLookupKind(), nullptr, &SS,
639       llvm::make_unique<RecordMemberExprValidatorCCC>(RTy),
640       [=, &SemaRef](const TypoCorrection &TC) {
641         if (TC) {
642           assert(!TC.isKeyword() &&
643                  "Got a keyword as a correction for a member!");
644           bool DroppedSpecifier =
645               TC.WillReplaceSpecifier() &&
646               Typo.getAsString() == TC.getAsString(SemaRef.getLangOpts());
647           SemaRef.diagnoseTypo(TC, SemaRef.PDiag(diag::err_no_member_suggest)
648                                        << Typo << DC << DroppedSpecifier
649                                        << SS.getRange());
650         } else {
651           SemaRef.Diag(TypoLoc, diag::err_no_member) << Typo << DC << BaseRange;
652         }
653       },
654       [=](Sema &SemaRef, TypoExpr *TE, TypoCorrection TC) mutable {
655         R.clear(); // Ensure there's no decls lingering in the shared state.
656         R.suppressDiagnostics();
657         R.setLookupName(TC.getCorrection());
658         for (NamedDecl *ND : TC)
659           R.addDecl(ND);
660         R.resolveKind();
661         return SemaRef.BuildMemberReferenceExpr(
662             BaseExpr, BaseExpr->getType(), OpLoc, IsArrow, SS, SourceLocation(),
663             nullptr, R, nullptr);
664       },
665       Sema::CTK_ErrorRecovery, DC);
666 
667   return false;
668 }
669 
670 static ExprResult LookupMemberExpr(Sema &S, LookupResult &R,
671                                    ExprResult &BaseExpr, bool &IsArrow,
672                                    SourceLocation OpLoc, CXXScopeSpec &SS,
673                                    Decl *ObjCImpDecl, bool HasTemplateArgs);
674 
675 ExprResult
676 Sema::BuildMemberReferenceExpr(Expr *Base, QualType BaseType,
677                                SourceLocation OpLoc, bool IsArrow,
678                                CXXScopeSpec &SS,
679                                SourceLocation TemplateKWLoc,
680                                NamedDecl *FirstQualifierInScope,
681                                const DeclarationNameInfo &NameInfo,
682                                const TemplateArgumentListInfo *TemplateArgs,
683                                ActOnMemberAccessExtraArgs *ExtraArgs) {
684   if (BaseType->isDependentType() ||
685       (SS.isSet() && isDependentScopeSpecifier(SS)))
686     return ActOnDependentMemberExpr(Base, BaseType,
687                                     IsArrow, OpLoc,
688                                     SS, TemplateKWLoc, FirstQualifierInScope,
689                                     NameInfo, TemplateArgs);
690 
691   LookupResult R(*this, NameInfo, LookupMemberName);
692 
693   // Implicit member accesses.
694   if (!Base) {
695     TypoExpr *TE = nullptr;
696     QualType RecordTy = BaseType;
697     if (IsArrow) RecordTy = RecordTy->getAs<PointerType>()->getPointeeType();
698     if (LookupMemberExprInRecord(*this, R, nullptr,
699                                  RecordTy->getAs<RecordType>(), OpLoc, IsArrow,
700                                  SS, TemplateArgs != nullptr, TE))
701       return ExprError();
702     if (TE)
703       return TE;
704 
705   // Explicit member accesses.
706   } else {
707     ExprResult BaseResult = Base;
708     ExprResult Result = LookupMemberExpr(
709         *this, R, BaseResult, IsArrow, OpLoc, SS,
710         ExtraArgs ? ExtraArgs->ObjCImpDecl : nullptr,
711         TemplateArgs != nullptr);
712 
713     if (BaseResult.isInvalid())
714       return ExprError();
715     Base = BaseResult.get();
716 
717     if (Result.isInvalid())
718       return ExprError();
719 
720     if (Result.get())
721       return Result;
722 
723     // LookupMemberExpr can modify Base, and thus change BaseType
724     BaseType = Base->getType();
725   }
726 
727   return BuildMemberReferenceExpr(Base, BaseType,
728                                   OpLoc, IsArrow, SS, TemplateKWLoc,
729                                   FirstQualifierInScope, R, TemplateArgs,
730                                   false, ExtraArgs);
731 }
732 
733 static ExprResult
734 BuildFieldReferenceExpr(Sema &S, Expr *BaseExpr, bool IsArrow,
735                         SourceLocation OpLoc, const CXXScopeSpec &SS,
736                         FieldDecl *Field, DeclAccessPair FoundDecl,
737                         const DeclarationNameInfo &MemberNameInfo);
738 
739 ExprResult
740 Sema::BuildAnonymousStructUnionMemberReference(const CXXScopeSpec &SS,
741                                                SourceLocation loc,
742                                                IndirectFieldDecl *indirectField,
743                                                DeclAccessPair foundDecl,
744                                                Expr *baseObjectExpr,
745                                                SourceLocation opLoc) {
746   // First, build the expression that refers to the base object.
747 
748   bool baseObjectIsPointer = false;
749   Qualifiers baseQuals;
750 
751   // Case 1:  the base of the indirect field is not a field.
752   VarDecl *baseVariable = indirectField->getVarDecl();
753   CXXScopeSpec EmptySS;
754   if (baseVariable) {
755     assert(baseVariable->getType()->isRecordType());
756 
757     // In principle we could have a member access expression that
758     // accesses an anonymous struct/union that's a static member of
759     // the base object's class.  However, under the current standard,
760     // static data members cannot be anonymous structs or unions.
761     // Supporting this is as easy as building a MemberExpr here.
762     assert(!baseObjectExpr && "anonymous struct/union is static data member?");
763 
764     DeclarationNameInfo baseNameInfo(DeclarationName(), loc);
765 
766     ExprResult result
767       = BuildDeclarationNameExpr(EmptySS, baseNameInfo, baseVariable);
768     if (result.isInvalid()) return ExprError();
769 
770     baseObjectExpr = result.get();
771     baseObjectIsPointer = false;
772     baseQuals = baseObjectExpr->getType().getQualifiers();
773 
774     // Case 2: the base of the indirect field is a field and the user
775     // wrote a member expression.
776   } else if (baseObjectExpr) {
777     // The caller provided the base object expression. Determine
778     // whether its a pointer and whether it adds any qualifiers to the
779     // anonymous struct/union fields we're looking into.
780     QualType objectType = baseObjectExpr->getType();
781 
782     if (const PointerType *ptr = objectType->getAs<PointerType>()) {
783       baseObjectIsPointer = true;
784       objectType = ptr->getPointeeType();
785     } else {
786       baseObjectIsPointer = false;
787     }
788     baseQuals = objectType.getQualifiers();
789 
790     // Case 3: the base of the indirect field is a field and we should
791     // build an implicit member access.
792   } else {
793     // We've found a member of an anonymous struct/union that is
794     // inside a non-anonymous struct/union, so in a well-formed
795     // program our base object expression is "this".
796     QualType ThisTy = getCurrentThisType();
797     if (ThisTy.isNull()) {
798       Diag(loc, diag::err_invalid_member_use_in_static_method)
799         << indirectField->getDeclName();
800       return ExprError();
801     }
802 
803     // Our base object expression is "this".
804     CheckCXXThisCapture(loc);
805     baseObjectExpr
806       = new (Context) CXXThisExpr(loc, ThisTy, /*isImplicit=*/ true);
807     baseObjectIsPointer = true;
808     baseQuals = ThisTy->castAs<PointerType>()->getPointeeType().getQualifiers();
809   }
810 
811   // Build the implicit member references to the field of the
812   // anonymous struct/union.
813   Expr *result = baseObjectExpr;
814   IndirectFieldDecl::chain_iterator
815   FI = indirectField->chain_begin(), FEnd = indirectField->chain_end();
816 
817   // Build the first member access in the chain with full information.
818   if (!baseVariable) {
819     FieldDecl *field = cast<FieldDecl>(*FI);
820 
821     // Make a nameInfo that properly uses the anonymous name.
822     DeclarationNameInfo memberNameInfo(field->getDeclName(), loc);
823 
824     result = BuildFieldReferenceExpr(*this, result, baseObjectIsPointer,
825                                      SourceLocation(), EmptySS, field,
826                                      foundDecl, memberNameInfo).get();
827     if (!result)
828       return ExprError();
829 
830     // FIXME: check qualified member access
831   }
832 
833   // In all cases, we should now skip the first declaration in the chain.
834   ++FI;
835 
836   while (FI != FEnd) {
837     FieldDecl *field = cast<FieldDecl>(*FI++);
838 
839     // FIXME: these are somewhat meaningless
840     DeclarationNameInfo memberNameInfo(field->getDeclName(), loc);
841     DeclAccessPair fakeFoundDecl =
842         DeclAccessPair::make(field, field->getAccess());
843 
844     result =
845         BuildFieldReferenceExpr(*this, result, /*isarrow*/ false,
846                                 SourceLocation(), (FI == FEnd ? SS : EmptySS),
847                                 field, fakeFoundDecl, memberNameInfo).get();
848   }
849 
850   return result;
851 }
852 
853 static ExprResult
854 BuildMSPropertyRefExpr(Sema &S, Expr *BaseExpr, bool IsArrow,
855                        const CXXScopeSpec &SS,
856                        MSPropertyDecl *PD,
857                        const DeclarationNameInfo &NameInfo) {
858   // Property names are always simple identifiers and therefore never
859   // require any interesting additional storage.
860   return new (S.Context) MSPropertyRefExpr(BaseExpr, PD, IsArrow,
861                                            S.Context.PseudoObjectTy, VK_LValue,
862                                            SS.getWithLocInContext(S.Context),
863                                            NameInfo.getLoc());
864 }
865 
866 /// \brief Build a MemberExpr AST node.
867 static MemberExpr *BuildMemberExpr(
868     Sema &SemaRef, ASTContext &C, Expr *Base, bool isArrow,
869     SourceLocation OpLoc, const CXXScopeSpec &SS, SourceLocation TemplateKWLoc,
870     ValueDecl *Member, DeclAccessPair FoundDecl,
871     const DeclarationNameInfo &MemberNameInfo, QualType Ty, ExprValueKind VK,
872     ExprObjectKind OK, const TemplateArgumentListInfo *TemplateArgs = nullptr) {
873   assert((!isArrow || Base->isRValue()) && "-> base must be a pointer rvalue");
874   MemberExpr *E = MemberExpr::Create(
875       C, Base, isArrow, OpLoc, SS.getWithLocInContext(C), TemplateKWLoc, Member,
876       FoundDecl, MemberNameInfo, TemplateArgs, Ty, VK, OK);
877   SemaRef.MarkMemberReferenced(E);
878   return E;
879 }
880 
881 ExprResult
882 Sema::BuildMemberReferenceExpr(Expr *BaseExpr, QualType BaseExprType,
883                                SourceLocation OpLoc, bool IsArrow,
884                                const CXXScopeSpec &SS,
885                                SourceLocation TemplateKWLoc,
886                                NamedDecl *FirstQualifierInScope,
887                                LookupResult &R,
888                                const TemplateArgumentListInfo *TemplateArgs,
889                                bool SuppressQualifierCheck,
890                                ActOnMemberAccessExtraArgs *ExtraArgs) {
891   QualType BaseType = BaseExprType;
892   if (IsArrow) {
893     assert(BaseType->isPointerType());
894     BaseType = BaseType->castAs<PointerType>()->getPointeeType();
895   }
896   R.setBaseObjectType(BaseType);
897 
898   LambdaScopeInfo *const CurLSI = getCurLambda();
899   // If this is an implicit member reference and the overloaded
900   // name refers to both static and non-static member functions
901   // (i.e. BaseExpr is null) and if we are currently processing a lambda,
902   // check if we should/can capture 'this'...
903   // Keep this example in mind:
904   //  struct X {
905   //   void f(int) { }
906   //   static void f(double) { }
907   //
908   //   int g() {
909   //     auto L = [=](auto a) {
910   //       return [](int i) {
911   //         return [=](auto b) {
912   //           f(b);
913   //           //f(decltype(a){});
914   //         };
915   //       };
916   //     };
917   //     auto M = L(0.0);
918   //     auto N = M(3);
919   //     N(5.32); // OK, must not error.
920   //     return 0;
921   //   }
922   //  };
923   //
924   if (!BaseExpr && CurLSI) {
925     SourceLocation Loc = R.getNameLoc();
926     if (SS.getRange().isValid())
927       Loc = SS.getRange().getBegin();
928     DeclContext *EnclosingFunctionCtx = CurContext->getParent()->getParent();
929     // If the enclosing function is not dependent, then this lambda is
930     // capture ready, so if we can capture this, do so.
931     if (!EnclosingFunctionCtx->isDependentContext()) {
932       // If the current lambda and all enclosing lambdas can capture 'this' -
933       // then go ahead and capture 'this' (since our unresolved overload set
934       // contains both static and non-static member functions).
935       if (!CheckCXXThisCapture(Loc, /*Explcit*/false, /*Diagnose*/false))
936         CheckCXXThisCapture(Loc);
937     } else if (CurContext->isDependentContext()) {
938       // ... since this is an implicit member reference, that might potentially
939       // involve a 'this' capture, mark 'this' for potential capture in
940       // enclosing lambdas.
941       if (CurLSI->ImpCaptureStyle != CurLSI->ImpCap_None)
942         CurLSI->addPotentialThisCapture(Loc);
943     }
944   }
945   const DeclarationNameInfo &MemberNameInfo = R.getLookupNameInfo();
946   DeclarationName MemberName = MemberNameInfo.getName();
947   SourceLocation MemberLoc = MemberNameInfo.getLoc();
948 
949   if (R.isAmbiguous())
950     return ExprError();
951 
952   if (R.empty()) {
953     // Rederive where we looked up.
954     DeclContext *DC = (SS.isSet()
955                        ? computeDeclContext(SS, false)
956                        : BaseType->getAs<RecordType>()->getDecl());
957 
958     if (ExtraArgs) {
959       ExprResult RetryExpr;
960       if (!IsArrow && BaseExpr) {
961         SFINAETrap Trap(*this, true);
962         ParsedType ObjectType;
963         bool MayBePseudoDestructor = false;
964         RetryExpr = ActOnStartCXXMemberReference(getCurScope(), BaseExpr,
965                                                  OpLoc, tok::arrow, ObjectType,
966                                                  MayBePseudoDestructor);
967         if (RetryExpr.isUsable() && !Trap.hasErrorOccurred()) {
968           CXXScopeSpec TempSS(SS);
969           RetryExpr = ActOnMemberAccessExpr(
970               ExtraArgs->S, RetryExpr.get(), OpLoc, tok::arrow, TempSS,
971               TemplateKWLoc, ExtraArgs->Id, ExtraArgs->ObjCImpDecl);
972         }
973         if (Trap.hasErrorOccurred())
974           RetryExpr = ExprError();
975       }
976       if (RetryExpr.isUsable()) {
977         Diag(OpLoc, diag::err_no_member_overloaded_arrow)
978           << MemberName << DC << FixItHint::CreateReplacement(OpLoc, "->");
979         return RetryExpr;
980       }
981     }
982 
983     Diag(R.getNameLoc(), diag::err_no_member)
984       << MemberName << DC
985       << (BaseExpr ? BaseExpr->getSourceRange() : SourceRange());
986     return ExprError();
987   }
988 
989   // Diagnose lookups that find only declarations from a non-base
990   // type.  This is possible for either qualified lookups (which may
991   // have been qualified with an unrelated type) or implicit member
992   // expressions (which were found with unqualified lookup and thus
993   // may have come from an enclosing scope).  Note that it's okay for
994   // lookup to find declarations from a non-base type as long as those
995   // aren't the ones picked by overload resolution.
996   if ((SS.isSet() || !BaseExpr ||
997        (isa<CXXThisExpr>(BaseExpr) &&
998         cast<CXXThisExpr>(BaseExpr)->isImplicit())) &&
999       !SuppressQualifierCheck &&
1000       CheckQualifiedMemberReference(BaseExpr, BaseType, SS, R))
1001     return ExprError();
1002 
1003   // Construct an unresolved result if we in fact got an unresolved
1004   // result.
1005   if (R.isOverloadedResult() || R.isUnresolvableResult()) {
1006     // Suppress any lookup-related diagnostics; we'll do these when we
1007     // pick a member.
1008     R.suppressDiagnostics();
1009 
1010     UnresolvedMemberExpr *MemExpr
1011       = UnresolvedMemberExpr::Create(Context, R.isUnresolvableResult(),
1012                                      BaseExpr, BaseExprType,
1013                                      IsArrow, OpLoc,
1014                                      SS.getWithLocInContext(Context),
1015                                      TemplateKWLoc, MemberNameInfo,
1016                                      TemplateArgs, R.begin(), R.end());
1017 
1018     return MemExpr;
1019   }
1020 
1021   assert(R.isSingleResult());
1022   DeclAccessPair FoundDecl = R.begin().getPair();
1023   NamedDecl *MemberDecl = R.getFoundDecl();
1024 
1025   // FIXME: diagnose the presence of template arguments now.
1026 
1027   // If the decl being referenced had an error, return an error for this
1028   // sub-expr without emitting another error, in order to avoid cascading
1029   // error cases.
1030   if (MemberDecl->isInvalidDecl())
1031     return ExprError();
1032 
1033   // Handle the implicit-member-access case.
1034   if (!BaseExpr) {
1035     // If this is not an instance member, convert to a non-member access.
1036     if (!MemberDecl->isCXXInstanceMember())
1037       return BuildDeclarationNameExpr(SS, R.getLookupNameInfo(), MemberDecl);
1038 
1039     SourceLocation Loc = R.getNameLoc();
1040     if (SS.getRange().isValid())
1041       Loc = SS.getRange().getBegin();
1042     CheckCXXThisCapture(Loc);
1043     BaseExpr = new (Context) CXXThisExpr(Loc, BaseExprType,/*isImplicit=*/true);
1044   }
1045 
1046   bool ShouldCheckUse = true;
1047   if (CXXMethodDecl *MD = dyn_cast<CXXMethodDecl>(MemberDecl)) {
1048     // Don't diagnose the use of a virtual member function unless it's
1049     // explicitly qualified.
1050     if (MD->isVirtual() && !SS.isSet())
1051       ShouldCheckUse = false;
1052   }
1053 
1054   // Check the use of this member.
1055   if (ShouldCheckUse && DiagnoseUseOfDecl(MemberDecl, MemberLoc))
1056     return ExprError();
1057 
1058   if (FieldDecl *FD = dyn_cast<FieldDecl>(MemberDecl))
1059     return BuildFieldReferenceExpr(*this, BaseExpr, IsArrow, OpLoc, SS, FD,
1060                                    FoundDecl, MemberNameInfo);
1061 
1062   if (MSPropertyDecl *PD = dyn_cast<MSPropertyDecl>(MemberDecl))
1063     return BuildMSPropertyRefExpr(*this, BaseExpr, IsArrow, SS, PD,
1064                                   MemberNameInfo);
1065 
1066   if (IndirectFieldDecl *FD = dyn_cast<IndirectFieldDecl>(MemberDecl))
1067     // We may have found a field within an anonymous union or struct
1068     // (C++ [class.union]).
1069     return BuildAnonymousStructUnionMemberReference(SS, MemberLoc, FD,
1070                                                     FoundDecl, BaseExpr,
1071                                                     OpLoc);
1072 
1073   if (VarDecl *Var = dyn_cast<VarDecl>(MemberDecl)) {
1074     return BuildMemberExpr(*this, Context, BaseExpr, IsArrow, OpLoc, SS,
1075                            TemplateKWLoc, Var, FoundDecl, MemberNameInfo,
1076                            Var->getType().getNonReferenceType(), VK_LValue,
1077                            OK_Ordinary);
1078   }
1079 
1080   if (CXXMethodDecl *MemberFn = dyn_cast<CXXMethodDecl>(MemberDecl)) {
1081     ExprValueKind valueKind;
1082     QualType type;
1083     if (MemberFn->isInstance()) {
1084       valueKind = VK_RValue;
1085       type = Context.BoundMemberTy;
1086     } else {
1087       valueKind = VK_LValue;
1088       type = MemberFn->getType();
1089     }
1090 
1091     return BuildMemberExpr(*this, Context, BaseExpr, IsArrow, OpLoc, SS,
1092                            TemplateKWLoc, MemberFn, FoundDecl, MemberNameInfo,
1093                            type, valueKind, OK_Ordinary);
1094   }
1095   assert(!isa<FunctionDecl>(MemberDecl) && "member function not C++ method?");
1096 
1097   if (EnumConstantDecl *Enum = dyn_cast<EnumConstantDecl>(MemberDecl)) {
1098     return BuildMemberExpr(*this, Context, BaseExpr, IsArrow, OpLoc, SS,
1099                            TemplateKWLoc, Enum, FoundDecl, MemberNameInfo,
1100                            Enum->getType(), VK_RValue, OK_Ordinary);
1101   }
1102 
1103   // We found something that we didn't expect. Complain.
1104   if (isa<TypeDecl>(MemberDecl))
1105     Diag(MemberLoc, diag::err_typecheck_member_reference_type)
1106       << MemberName << BaseType << int(IsArrow);
1107   else
1108     Diag(MemberLoc, diag::err_typecheck_member_reference_unknown)
1109       << MemberName << BaseType << int(IsArrow);
1110 
1111   Diag(MemberDecl->getLocation(), diag::note_member_declared_here)
1112     << MemberName;
1113   R.suppressDiagnostics();
1114   return ExprError();
1115 }
1116 
1117 /// Given that normal member access failed on the given expression,
1118 /// and given that the expression's type involves builtin-id or
1119 /// builtin-Class, decide whether substituting in the redefinition
1120 /// types would be profitable.  The redefinition type is whatever
1121 /// this translation unit tried to typedef to id/Class;  we store
1122 /// it to the side and then re-use it in places like this.
1123 static bool ShouldTryAgainWithRedefinitionType(Sema &S, ExprResult &base) {
1124   const ObjCObjectPointerType *opty
1125     = base.get()->getType()->getAs<ObjCObjectPointerType>();
1126   if (!opty) return false;
1127 
1128   const ObjCObjectType *ty = opty->getObjectType();
1129 
1130   QualType redef;
1131   if (ty->isObjCId()) {
1132     redef = S.Context.getObjCIdRedefinitionType();
1133   } else if (ty->isObjCClass()) {
1134     redef = S.Context.getObjCClassRedefinitionType();
1135   } else {
1136     return false;
1137   }
1138 
1139   // Do the substitution as long as the redefinition type isn't just a
1140   // possibly-qualified pointer to builtin-id or builtin-Class again.
1141   opty = redef->getAs<ObjCObjectPointerType>();
1142   if (opty && !opty->getObjectType()->getInterface())
1143     return false;
1144 
1145   base = S.ImpCastExprToType(base.get(), redef, CK_BitCast);
1146   return true;
1147 }
1148 
1149 static bool isRecordType(QualType T) {
1150   return T->isRecordType();
1151 }
1152 static bool isPointerToRecordType(QualType T) {
1153   if (const PointerType *PT = T->getAs<PointerType>())
1154     return PT->getPointeeType()->isRecordType();
1155   return false;
1156 }
1157 
1158 /// Perform conversions on the LHS of a member access expression.
1159 ExprResult
1160 Sema::PerformMemberExprBaseConversion(Expr *Base, bool IsArrow) {
1161   if (IsArrow && !Base->getType()->isFunctionType())
1162     return DefaultFunctionArrayLvalueConversion(Base);
1163 
1164   return CheckPlaceholderExpr(Base);
1165 }
1166 
1167 /// Look up the given member of the given non-type-dependent
1168 /// expression.  This can return in one of two ways:
1169 ///  * If it returns a sentinel null-but-valid result, the caller will
1170 ///    assume that lookup was performed and the results written into
1171 ///    the provided structure.  It will take over from there.
1172 ///  * Otherwise, the returned expression will be produced in place of
1173 ///    an ordinary member expression.
1174 ///
1175 /// The ObjCImpDecl bit is a gross hack that will need to be properly
1176 /// fixed for ObjC++.
1177 static ExprResult LookupMemberExpr(Sema &S, LookupResult &R,
1178                                    ExprResult &BaseExpr, bool &IsArrow,
1179                                    SourceLocation OpLoc, CXXScopeSpec &SS,
1180                                    Decl *ObjCImpDecl, bool HasTemplateArgs) {
1181   assert(BaseExpr.get() && "no base expression");
1182 
1183   // Perform default conversions.
1184   BaseExpr = S.PerformMemberExprBaseConversion(BaseExpr.get(), IsArrow);
1185   if (BaseExpr.isInvalid())
1186     return ExprError();
1187 
1188   QualType BaseType = BaseExpr.get()->getType();
1189   assert(!BaseType->isDependentType());
1190 
1191   DeclarationName MemberName = R.getLookupName();
1192   SourceLocation MemberLoc = R.getNameLoc();
1193 
1194   // For later type-checking purposes, turn arrow accesses into dot
1195   // accesses.  The only access type we support that doesn't follow
1196   // the C equivalence "a->b === (*a).b" is ObjC property accesses,
1197   // and those never use arrows, so this is unaffected.
1198   if (IsArrow) {
1199     if (const PointerType *Ptr = BaseType->getAs<PointerType>())
1200       BaseType = Ptr->getPointeeType();
1201     else if (const ObjCObjectPointerType *Ptr
1202                = BaseType->getAs<ObjCObjectPointerType>())
1203       BaseType = Ptr->getPointeeType();
1204     else if (BaseType->isRecordType()) {
1205       // Recover from arrow accesses to records, e.g.:
1206       //   struct MyRecord foo;
1207       //   foo->bar
1208       // This is actually well-formed in C++ if MyRecord has an
1209       // overloaded operator->, but that should have been dealt with
1210       // by now--or a diagnostic message already issued if a problem
1211       // was encountered while looking for the overloaded operator->.
1212       if (!S.getLangOpts().CPlusPlus) {
1213         S.Diag(OpLoc, diag::err_typecheck_member_reference_suggestion)
1214           << BaseType << int(IsArrow) << BaseExpr.get()->getSourceRange()
1215           << FixItHint::CreateReplacement(OpLoc, ".");
1216       }
1217       IsArrow = false;
1218     } else if (BaseType->isFunctionType()) {
1219       goto fail;
1220     } else {
1221       S.Diag(MemberLoc, diag::err_typecheck_member_reference_arrow)
1222         << BaseType << BaseExpr.get()->getSourceRange();
1223       return ExprError();
1224     }
1225   }
1226 
1227   // Handle field access to simple records.
1228   if (const RecordType *RTy = BaseType->getAs<RecordType>()) {
1229     TypoExpr *TE = nullptr;
1230     if (LookupMemberExprInRecord(S, R, BaseExpr.get(), RTy,
1231                                  OpLoc, IsArrow, SS, HasTemplateArgs, TE))
1232       return ExprError();
1233 
1234     // Returning valid-but-null is how we indicate to the caller that
1235     // the lookup result was filled in. If typo correction was attempted and
1236     // failed, the lookup result will have been cleared--that combined with the
1237     // valid-but-null ExprResult will trigger the appropriate diagnostics.
1238     return ExprResult(TE);
1239   }
1240 
1241   // Handle ivar access to Objective-C objects.
1242   if (const ObjCObjectType *OTy = BaseType->getAs<ObjCObjectType>()) {
1243     if (!SS.isEmpty() && !SS.isInvalid()) {
1244       S.Diag(SS.getRange().getBegin(), diag::err_qualified_objc_access)
1245         << 1 << SS.getScopeRep()
1246         << FixItHint::CreateRemoval(SS.getRange());
1247       SS.clear();
1248     }
1249 
1250     IdentifierInfo *Member = MemberName.getAsIdentifierInfo();
1251 
1252     // There are three cases for the base type:
1253     //   - builtin id (qualified or unqualified)
1254     //   - builtin Class (qualified or unqualified)
1255     //   - an interface
1256     ObjCInterfaceDecl *IDecl = OTy->getInterface();
1257     if (!IDecl) {
1258       if (S.getLangOpts().ObjCAutoRefCount &&
1259           (OTy->isObjCId() || OTy->isObjCClass()))
1260         goto fail;
1261       // There's an implicit 'isa' ivar on all objects.
1262       // But we only actually find it this way on objects of type 'id',
1263       // apparently.
1264       if (OTy->isObjCId() && Member->isStr("isa"))
1265         return new (S.Context) ObjCIsaExpr(BaseExpr.get(), IsArrow, MemberLoc,
1266                                            OpLoc, S.Context.getObjCClassType());
1267       if (ShouldTryAgainWithRedefinitionType(S, BaseExpr))
1268         return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1269                                 ObjCImpDecl, HasTemplateArgs);
1270       goto fail;
1271     }
1272 
1273     if (S.RequireCompleteType(OpLoc, BaseType,
1274                               diag::err_typecheck_incomplete_tag,
1275                               BaseExpr.get()))
1276       return ExprError();
1277 
1278     ObjCInterfaceDecl *ClassDeclared = nullptr;
1279     ObjCIvarDecl *IV = IDecl->lookupInstanceVariable(Member, ClassDeclared);
1280 
1281     if (!IV) {
1282       // Attempt to correct for typos in ivar names.
1283       auto Validator = llvm::make_unique<DeclFilterCCC<ObjCIvarDecl>>();
1284       Validator->IsObjCIvarLookup = IsArrow;
1285       if (TypoCorrection Corrected = S.CorrectTypo(
1286               R.getLookupNameInfo(), Sema::LookupMemberName, nullptr, nullptr,
1287               std::move(Validator), Sema::CTK_ErrorRecovery, IDecl)) {
1288         IV = Corrected.getCorrectionDeclAs<ObjCIvarDecl>();
1289         S.diagnoseTypo(
1290             Corrected,
1291             S.PDiag(diag::err_typecheck_member_reference_ivar_suggest)
1292                 << IDecl->getDeclName() << MemberName);
1293 
1294         // Figure out the class that declares the ivar.
1295         assert(!ClassDeclared);
1296         Decl *D = cast<Decl>(IV->getDeclContext());
1297         if (ObjCCategoryDecl *CAT = dyn_cast<ObjCCategoryDecl>(D))
1298           D = CAT->getClassInterface();
1299         ClassDeclared = cast<ObjCInterfaceDecl>(D);
1300       } else {
1301         if (IsArrow && IDecl->FindPropertyDeclaration(Member)) {
1302           S.Diag(MemberLoc, diag::err_property_found_suggest)
1303               << Member << BaseExpr.get()->getType()
1304               << FixItHint::CreateReplacement(OpLoc, ".");
1305           return ExprError();
1306         }
1307 
1308         S.Diag(MemberLoc, diag::err_typecheck_member_reference_ivar)
1309             << IDecl->getDeclName() << MemberName
1310             << BaseExpr.get()->getSourceRange();
1311         return ExprError();
1312       }
1313     }
1314 
1315     assert(ClassDeclared);
1316 
1317     // If the decl being referenced had an error, return an error for this
1318     // sub-expr without emitting another error, in order to avoid cascading
1319     // error cases.
1320     if (IV->isInvalidDecl())
1321       return ExprError();
1322 
1323     // Check whether we can reference this field.
1324     if (S.DiagnoseUseOfDecl(IV, MemberLoc))
1325       return ExprError();
1326     if (IV->getAccessControl() != ObjCIvarDecl::Public &&
1327         IV->getAccessControl() != ObjCIvarDecl::Package) {
1328       ObjCInterfaceDecl *ClassOfMethodDecl = nullptr;
1329       if (ObjCMethodDecl *MD = S.getCurMethodDecl())
1330         ClassOfMethodDecl =  MD->getClassInterface();
1331       else if (ObjCImpDecl && S.getCurFunctionDecl()) {
1332         // Case of a c-function declared inside an objc implementation.
1333         // FIXME: For a c-style function nested inside an objc implementation
1334         // class, there is no implementation context available, so we pass
1335         // down the context as argument to this routine. Ideally, this context
1336         // need be passed down in the AST node and somehow calculated from the
1337         // AST for a function decl.
1338         if (ObjCImplementationDecl *IMPD =
1339               dyn_cast<ObjCImplementationDecl>(ObjCImpDecl))
1340           ClassOfMethodDecl = IMPD->getClassInterface();
1341         else if (ObjCCategoryImplDecl* CatImplClass =
1342                    dyn_cast<ObjCCategoryImplDecl>(ObjCImpDecl))
1343           ClassOfMethodDecl = CatImplClass->getClassInterface();
1344       }
1345       if (!S.getLangOpts().DebuggerSupport) {
1346         if (IV->getAccessControl() == ObjCIvarDecl::Private) {
1347           if (!declaresSameEntity(ClassDeclared, IDecl) ||
1348               !declaresSameEntity(ClassOfMethodDecl, ClassDeclared))
1349             S.Diag(MemberLoc, diag::error_private_ivar_access)
1350               << IV->getDeclName();
1351         } else if (!IDecl->isSuperClassOf(ClassOfMethodDecl))
1352           // @protected
1353           S.Diag(MemberLoc, diag::error_protected_ivar_access)
1354               << IV->getDeclName();
1355       }
1356     }
1357     bool warn = true;
1358     if (S.getLangOpts().ObjCAutoRefCount) {
1359       Expr *BaseExp = BaseExpr.get()->IgnoreParenImpCasts();
1360       if (UnaryOperator *UO = dyn_cast<UnaryOperator>(BaseExp))
1361         if (UO->getOpcode() == UO_Deref)
1362           BaseExp = UO->getSubExpr()->IgnoreParenCasts();
1363 
1364       if (DeclRefExpr *DE = dyn_cast<DeclRefExpr>(BaseExp))
1365         if (DE->getType().getObjCLifetime() == Qualifiers::OCL_Weak) {
1366           S.Diag(DE->getLocation(), diag::error_arc_weak_ivar_access);
1367           warn = false;
1368         }
1369     }
1370     if (warn) {
1371       if (ObjCMethodDecl *MD = S.getCurMethodDecl()) {
1372         ObjCMethodFamily MF = MD->getMethodFamily();
1373         warn = (MF != OMF_init && MF != OMF_dealloc &&
1374                 MF != OMF_finalize &&
1375                 !S.IvarBacksCurrentMethodAccessor(IDecl, MD, IV));
1376       }
1377       if (warn)
1378         S.Diag(MemberLoc, diag::warn_direct_ivar_access) << IV->getDeclName();
1379     }
1380 
1381     ObjCIvarRefExpr *Result = new (S.Context) ObjCIvarRefExpr(
1382         IV, IV->getType(), MemberLoc, OpLoc, BaseExpr.get(), IsArrow);
1383 
1384     if (S.getLangOpts().ObjCAutoRefCount) {
1385       if (IV->getType().getObjCLifetime() == Qualifiers::OCL_Weak) {
1386         if (!S.Diags.isIgnored(diag::warn_arc_repeated_use_of_weak, MemberLoc))
1387           S.recordUseOfEvaluatedWeak(Result);
1388       }
1389     }
1390 
1391     return Result;
1392   }
1393 
1394   // Objective-C property access.
1395   const ObjCObjectPointerType *OPT;
1396   if (!IsArrow && (OPT = BaseType->getAs<ObjCObjectPointerType>())) {
1397     if (!SS.isEmpty() && !SS.isInvalid()) {
1398       S.Diag(SS.getRange().getBegin(), diag::err_qualified_objc_access)
1399           << 0 << SS.getScopeRep() << FixItHint::CreateRemoval(SS.getRange());
1400       SS.clear();
1401     }
1402 
1403     // This actually uses the base as an r-value.
1404     BaseExpr = S.DefaultLvalueConversion(BaseExpr.get());
1405     if (BaseExpr.isInvalid())
1406       return ExprError();
1407 
1408     assert(S.Context.hasSameUnqualifiedType(BaseType,
1409                                             BaseExpr.get()->getType()));
1410 
1411     IdentifierInfo *Member = MemberName.getAsIdentifierInfo();
1412 
1413     const ObjCObjectType *OT = OPT->getObjectType();
1414 
1415     // id, with and without qualifiers.
1416     if (OT->isObjCId()) {
1417       // Check protocols on qualified interfaces.
1418       Selector Sel = S.PP.getSelectorTable().getNullarySelector(Member);
1419       if (Decl *PMDecl =
1420               FindGetterSetterNameDecl(OPT, Member, Sel, S.Context)) {
1421         if (ObjCPropertyDecl *PD = dyn_cast<ObjCPropertyDecl>(PMDecl)) {
1422           // Check the use of this declaration
1423           if (S.DiagnoseUseOfDecl(PD, MemberLoc))
1424             return ExprError();
1425 
1426           return new (S.Context)
1427               ObjCPropertyRefExpr(PD, S.Context.PseudoObjectTy, VK_LValue,
1428                                   OK_ObjCProperty, MemberLoc, BaseExpr.get());
1429         }
1430 
1431         if (ObjCMethodDecl *OMD = dyn_cast<ObjCMethodDecl>(PMDecl)) {
1432           // Check the use of this method.
1433           if (S.DiagnoseUseOfDecl(OMD, MemberLoc))
1434             return ExprError();
1435           Selector SetterSel =
1436             SelectorTable::constructSetterSelector(S.PP.getIdentifierTable(),
1437                                                    S.PP.getSelectorTable(),
1438                                                    Member);
1439           ObjCMethodDecl *SMD = nullptr;
1440           if (Decl *SDecl = FindGetterSetterNameDecl(OPT,
1441                                                      /*Property id*/ nullptr,
1442                                                      SetterSel, S.Context))
1443             SMD = dyn_cast<ObjCMethodDecl>(SDecl);
1444 
1445           return new (S.Context)
1446               ObjCPropertyRefExpr(OMD, SMD, S.Context.PseudoObjectTy, VK_LValue,
1447                                   OK_ObjCProperty, MemberLoc, BaseExpr.get());
1448         }
1449       }
1450       // Use of id.member can only be for a property reference. Do not
1451       // use the 'id' redefinition in this case.
1452       if (IsArrow && ShouldTryAgainWithRedefinitionType(S, BaseExpr))
1453         return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1454                                 ObjCImpDecl, HasTemplateArgs);
1455 
1456       return ExprError(S.Diag(MemberLoc, diag::err_property_not_found)
1457                          << MemberName << BaseType);
1458     }
1459 
1460     // 'Class', unqualified only.
1461     if (OT->isObjCClass()) {
1462       // Only works in a method declaration (??!).
1463       ObjCMethodDecl *MD = S.getCurMethodDecl();
1464       if (!MD) {
1465         if (ShouldTryAgainWithRedefinitionType(S, BaseExpr))
1466           return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1467                                   ObjCImpDecl, HasTemplateArgs);
1468 
1469         goto fail;
1470       }
1471 
1472       // Also must look for a getter name which uses property syntax.
1473       Selector Sel = S.PP.getSelectorTable().getNullarySelector(Member);
1474       ObjCInterfaceDecl *IFace = MD->getClassInterface();
1475       ObjCMethodDecl *Getter;
1476       if ((Getter = IFace->lookupClassMethod(Sel))) {
1477         // Check the use of this method.
1478         if (S.DiagnoseUseOfDecl(Getter, MemberLoc))
1479           return ExprError();
1480       } else
1481         Getter = IFace->lookupPrivateMethod(Sel, false);
1482       // If we found a getter then this may be a valid dot-reference, we
1483       // will look for the matching setter, in case it is needed.
1484       Selector SetterSel =
1485         SelectorTable::constructSetterSelector(S.PP.getIdentifierTable(),
1486                                                S.PP.getSelectorTable(),
1487                                                Member);
1488       ObjCMethodDecl *Setter = IFace->lookupClassMethod(SetterSel);
1489       if (!Setter) {
1490         // If this reference is in an @implementation, also check for 'private'
1491         // methods.
1492         Setter = IFace->lookupPrivateMethod(SetterSel, false);
1493       }
1494 
1495       if (Setter && S.DiagnoseUseOfDecl(Setter, MemberLoc))
1496         return ExprError();
1497 
1498       if (Getter || Setter) {
1499         return new (S.Context) ObjCPropertyRefExpr(
1500             Getter, Setter, S.Context.PseudoObjectTy, VK_LValue,
1501             OK_ObjCProperty, MemberLoc, BaseExpr.get());
1502       }
1503 
1504       if (ShouldTryAgainWithRedefinitionType(S, BaseExpr))
1505         return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1506                                 ObjCImpDecl, HasTemplateArgs);
1507 
1508       return ExprError(S.Diag(MemberLoc, diag::err_property_not_found)
1509                          << MemberName << BaseType);
1510     }
1511 
1512     // Normal property access.
1513     return S.HandleExprPropertyRefExpr(OPT, BaseExpr.get(), OpLoc, MemberName,
1514                                        MemberLoc, SourceLocation(), QualType(),
1515                                        false);
1516   }
1517 
1518   // Handle 'field access' to vectors, such as 'V.xx'.
1519   if (BaseType->isExtVectorType()) {
1520     // FIXME: this expr should store IsArrow.
1521     IdentifierInfo *Member = MemberName.getAsIdentifierInfo();
1522     ExprValueKind VK = (IsArrow ? VK_LValue : BaseExpr.get()->getValueKind());
1523     QualType ret = CheckExtVectorComponent(S, BaseType, VK, OpLoc,
1524                                            Member, MemberLoc);
1525     if (ret.isNull())
1526       return ExprError();
1527 
1528     return new (S.Context)
1529         ExtVectorElementExpr(ret, VK, BaseExpr.get(), *Member, MemberLoc);
1530   }
1531 
1532   // Adjust builtin-sel to the appropriate redefinition type if that's
1533   // not just a pointer to builtin-sel again.
1534   if (IsArrow && BaseType->isSpecificBuiltinType(BuiltinType::ObjCSel) &&
1535       !S.Context.getObjCSelRedefinitionType()->isObjCSelType()) {
1536     BaseExpr = S.ImpCastExprToType(
1537         BaseExpr.get(), S.Context.getObjCSelRedefinitionType(), CK_BitCast);
1538     return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1539                             ObjCImpDecl, HasTemplateArgs);
1540   }
1541 
1542   // Failure cases.
1543  fail:
1544 
1545   // Recover from dot accesses to pointers, e.g.:
1546   //   type *foo;
1547   //   foo.bar
1548   // This is actually well-formed in two cases:
1549   //   - 'type' is an Objective C type
1550   //   - 'bar' is a pseudo-destructor name which happens to refer to
1551   //     the appropriate pointer type
1552   if (const PointerType *Ptr = BaseType->getAs<PointerType>()) {
1553     if (!IsArrow && Ptr->getPointeeType()->isRecordType() &&
1554         MemberName.getNameKind() != DeclarationName::CXXDestructorName) {
1555       S.Diag(OpLoc, diag::err_typecheck_member_reference_suggestion)
1556           << BaseType << int(IsArrow) << BaseExpr.get()->getSourceRange()
1557           << FixItHint::CreateReplacement(OpLoc, "->");
1558 
1559       // Recurse as an -> access.
1560       IsArrow = true;
1561       return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1562                               ObjCImpDecl, HasTemplateArgs);
1563     }
1564   }
1565 
1566   // If the user is trying to apply -> or . to a function name, it's probably
1567   // because they forgot parentheses to call that function.
1568   if (S.tryToRecoverWithCall(
1569           BaseExpr, S.PDiag(diag::err_member_reference_needs_call),
1570           /*complain*/ false,
1571           IsArrow ? &isPointerToRecordType : &isRecordType)) {
1572     if (BaseExpr.isInvalid())
1573       return ExprError();
1574     BaseExpr = S.DefaultFunctionArrayConversion(BaseExpr.get());
1575     return LookupMemberExpr(S, R, BaseExpr, IsArrow, OpLoc, SS,
1576                             ObjCImpDecl, HasTemplateArgs);
1577   }
1578 
1579   S.Diag(OpLoc, diag::err_typecheck_member_reference_struct_union)
1580     << BaseType << BaseExpr.get()->getSourceRange() << MemberLoc;
1581 
1582   return ExprError();
1583 }
1584 
1585 /// The main callback when the parser finds something like
1586 ///   expression . [nested-name-specifier] identifier
1587 ///   expression -> [nested-name-specifier] identifier
1588 /// where 'identifier' encompasses a fairly broad spectrum of
1589 /// possibilities, including destructor and operator references.
1590 ///
1591 /// \param OpKind either tok::arrow or tok::period
1592 /// \param ObjCImpDecl the current Objective-C \@implementation
1593 ///   decl; this is an ugly hack around the fact that Objective-C
1594 ///   \@implementations aren't properly put in the context chain
1595 ExprResult Sema::ActOnMemberAccessExpr(Scope *S, Expr *Base,
1596                                        SourceLocation OpLoc,
1597                                        tok::TokenKind OpKind,
1598                                        CXXScopeSpec &SS,
1599                                        SourceLocation TemplateKWLoc,
1600                                        UnqualifiedId &Id,
1601                                        Decl *ObjCImpDecl) {
1602   if (SS.isSet() && SS.isInvalid())
1603     return ExprError();
1604 
1605   // Warn about the explicit constructor calls Microsoft extension.
1606   if (getLangOpts().MicrosoftExt &&
1607       Id.getKind() == UnqualifiedId::IK_ConstructorName)
1608     Diag(Id.getSourceRange().getBegin(),
1609          diag::ext_ms_explicit_constructor_call);
1610 
1611   TemplateArgumentListInfo TemplateArgsBuffer;
1612 
1613   // Decompose the name into its component parts.
1614   DeclarationNameInfo NameInfo;
1615   const TemplateArgumentListInfo *TemplateArgs;
1616   DecomposeUnqualifiedId(Id, TemplateArgsBuffer,
1617                          NameInfo, TemplateArgs);
1618 
1619   DeclarationName Name = NameInfo.getName();
1620   bool IsArrow = (OpKind == tok::arrow);
1621 
1622   NamedDecl *FirstQualifierInScope
1623     = (!SS.isSet() ? nullptr : FindFirstQualifierInScope(S, SS.getScopeRep()));
1624 
1625   // This is a postfix expression, so get rid of ParenListExprs.
1626   ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Base);
1627   if (Result.isInvalid()) return ExprError();
1628   Base = Result.get();
1629 
1630   if (Base->getType()->isDependentType() || Name.isDependentName() ||
1631       isDependentScopeSpecifier(SS)) {
1632     return ActOnDependentMemberExpr(Base, Base->getType(), IsArrow, OpLoc, SS,
1633                                     TemplateKWLoc, FirstQualifierInScope,
1634                                     NameInfo, TemplateArgs);
1635   }
1636 
1637   ActOnMemberAccessExtraArgs ExtraArgs = {S, Id, ObjCImpDecl};
1638   return BuildMemberReferenceExpr(Base, Base->getType(), OpLoc, IsArrow, SS,
1639                                   TemplateKWLoc, FirstQualifierInScope,
1640                                   NameInfo, TemplateArgs, &ExtraArgs);
1641 }
1642 
1643 static ExprResult
1644 BuildFieldReferenceExpr(Sema &S, Expr *BaseExpr, bool IsArrow,
1645                         SourceLocation OpLoc, const CXXScopeSpec &SS,
1646                         FieldDecl *Field, DeclAccessPair FoundDecl,
1647                         const DeclarationNameInfo &MemberNameInfo) {
1648   // x.a is an l-value if 'a' has a reference type. Otherwise:
1649   // x.a is an l-value/x-value/pr-value if the base is (and note
1650   //   that *x is always an l-value), except that if the base isn't
1651   //   an ordinary object then we must have an rvalue.
1652   ExprValueKind VK = VK_LValue;
1653   ExprObjectKind OK = OK_Ordinary;
1654   if (!IsArrow) {
1655     if (BaseExpr->getObjectKind() == OK_Ordinary)
1656       VK = BaseExpr->getValueKind();
1657     else
1658       VK = VK_RValue;
1659   }
1660   if (VK != VK_RValue && Field->isBitField())
1661     OK = OK_BitField;
1662 
1663   // Figure out the type of the member; see C99 6.5.2.3p3, C++ [expr.ref]
1664   QualType MemberType = Field->getType();
1665   if (const ReferenceType *Ref = MemberType->getAs<ReferenceType>()) {
1666     MemberType = Ref->getPointeeType();
1667     VK = VK_LValue;
1668   } else {
1669     QualType BaseType = BaseExpr->getType();
1670     if (IsArrow) BaseType = BaseType->getAs<PointerType>()->getPointeeType();
1671 
1672     Qualifiers BaseQuals = BaseType.getQualifiers();
1673 
1674     // GC attributes are never picked up by members.
1675     BaseQuals.removeObjCGCAttr();
1676 
1677     // CVR attributes from the base are picked up by members,
1678     // except that 'mutable' members don't pick up 'const'.
1679     if (Field->isMutable()) BaseQuals.removeConst();
1680 
1681     Qualifiers MemberQuals
1682     = S.Context.getCanonicalType(MemberType).getQualifiers();
1683 
1684     assert(!MemberQuals.hasAddressSpace());
1685 
1686 
1687     Qualifiers Combined = BaseQuals + MemberQuals;
1688     if (Combined != MemberQuals)
1689       MemberType = S.Context.getQualifiedType(MemberType, Combined);
1690   }
1691 
1692   S.UnusedPrivateFields.remove(Field);
1693 
1694   ExprResult Base =
1695   S.PerformObjectMemberConversion(BaseExpr, SS.getScopeRep(),
1696                                   FoundDecl, Field);
1697   if (Base.isInvalid())
1698     return ExprError();
1699   return BuildMemberExpr(S, S.Context, Base.get(), IsArrow, OpLoc, SS,
1700                          /*TemplateKWLoc=*/SourceLocation(), Field, FoundDecl,
1701                          MemberNameInfo, MemberType, VK, OK);
1702 }
1703 
1704 /// Builds an implicit member access expression.  The current context
1705 /// is known to be an instance method, and the given unqualified lookup
1706 /// set is known to contain only instance members, at least one of which
1707 /// is from an appropriate type.
1708 ExprResult
1709 Sema::BuildImplicitMemberExpr(const CXXScopeSpec &SS,
1710                               SourceLocation TemplateKWLoc,
1711                               LookupResult &R,
1712                               const TemplateArgumentListInfo *TemplateArgs,
1713                               bool IsKnownInstance) {
1714   assert(!R.empty() && !R.isAmbiguous());
1715 
1716   SourceLocation loc = R.getNameLoc();
1717 
1718   // If this is known to be an instance access, go ahead and build an
1719   // implicit 'this' expression now.
1720   // 'this' expression now.
1721   QualType ThisTy = getCurrentThisType();
1722   assert(!ThisTy.isNull() && "didn't correctly pre-flight capture of 'this'");
1723 
1724   Expr *baseExpr = nullptr; // null signifies implicit access
1725   if (IsKnownInstance) {
1726     SourceLocation Loc = R.getNameLoc();
1727     if (SS.getRange().isValid())
1728       Loc = SS.getRange().getBegin();
1729     CheckCXXThisCapture(Loc);
1730     baseExpr = new (Context) CXXThisExpr(loc, ThisTy, /*isImplicit=*/true);
1731   }
1732 
1733   return BuildMemberReferenceExpr(baseExpr, ThisTy,
1734                                   /*OpLoc*/ SourceLocation(),
1735                                   /*IsArrow*/ true,
1736                                   SS, TemplateKWLoc,
1737                                   /*FirstQualifierInScope*/ nullptr,
1738                                   R, TemplateArgs);
1739 }
1740