1 //===--- SemaExprObjC.cpp - Semantic Analysis for ObjC Expressions --------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements semantic analysis for Objective-C expressions.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "clang/Sema/SemaInternal.h"
15 #include "clang/AST/ASTContext.h"
16 #include "clang/AST/DeclObjC.h"
17 #include "clang/AST/ExprObjC.h"
18 #include "clang/AST/StmtVisitor.h"
19 #include "clang/AST/TypeLoc.h"
20 #include "clang/Analysis/DomainSpecific/CocoaConventions.h"
21 #include "clang/Edit/Commit.h"
22 #include "clang/Edit/Rewriters.h"
23 #include "clang/Lex/Preprocessor.h"
24 #include "clang/Sema/Initialization.h"
25 #include "clang/Sema/Lookup.h"
26 #include "clang/Sema/Scope.h"
27 #include "clang/Sema/ScopeInfo.h"
28 #include "llvm/ADT/SmallString.h"
29 
30 using namespace clang;
31 using namespace sema;
32 using llvm::makeArrayRef;
33 
34 ExprResult Sema::ParseObjCStringLiteral(SourceLocation *AtLocs,
35                                         ArrayRef<Expr *> Strings) {
36   // Most ObjC strings are formed out of a single piece.  However, we *can*
37   // have strings formed out of multiple @ strings with multiple pptokens in
38   // each one, e.g. @"foo" "bar" @"baz" "qux"   which need to be turned into one
39   // StringLiteral for ObjCStringLiteral to hold onto.
40   StringLiteral *S = cast<StringLiteral>(Strings[0]);
41 
42   // If we have a multi-part string, merge it all together.
43   if (Strings.size() != 1) {
44     // Concatenate objc strings.
45     SmallString<128> StrBuf;
46     SmallVector<SourceLocation, 8> StrLocs;
47 
48     for (Expr *E : Strings) {
49       S = cast<StringLiteral>(E);
50 
51       // ObjC strings can't be wide or UTF.
52       if (!S->isAscii()) {
53         Diag(S->getLocStart(), diag::err_cfstring_literal_not_string_constant)
54           << S->getSourceRange();
55         return true;
56       }
57 
58       // Append the string.
59       StrBuf += S->getString();
60 
61       // Get the locations of the string tokens.
62       StrLocs.append(S->tokloc_begin(), S->tokloc_end());
63     }
64 
65     // Create the aggregate string with the appropriate content and location
66     // information.
67     const ConstantArrayType *CAT = Context.getAsConstantArrayType(S->getType());
68     assert(CAT && "String literal not of constant array type!");
69     QualType StrTy = Context.getConstantArrayType(
70         CAT->getElementType(), llvm::APInt(32, StrBuf.size() + 1),
71         CAT->getSizeModifier(), CAT->getIndexTypeCVRQualifiers());
72     S = StringLiteral::Create(Context, StrBuf, StringLiteral::Ascii,
73                               /*Pascal=*/false, StrTy, &StrLocs[0],
74                               StrLocs.size());
75   }
76 
77   return BuildObjCStringLiteral(AtLocs[0], S);
78 }
79 
80 ExprResult Sema::BuildObjCStringLiteral(SourceLocation AtLoc, StringLiteral *S){
81   // Verify that this composite string is acceptable for ObjC strings.
82   if (CheckObjCString(S))
83     return true;
84 
85   // Initialize the constant string interface lazily. This assumes
86   // the NSString interface is seen in this translation unit. Note: We
87   // don't use NSConstantString, since the runtime team considers this
88   // interface private (even though it appears in the header files).
89   QualType Ty = Context.getObjCConstantStringInterface();
90   if (!Ty.isNull()) {
91     Ty = Context.getObjCObjectPointerType(Ty);
92   } else if (getLangOpts().NoConstantCFStrings) {
93     IdentifierInfo *NSIdent=nullptr;
94     std::string StringClass(getLangOpts().ObjCConstantStringClass);
95 
96     if (StringClass.empty())
97       NSIdent = &Context.Idents.get("NSConstantString");
98     else
99       NSIdent = &Context.Idents.get(StringClass);
100 
101     NamedDecl *IF = LookupSingleName(TUScope, NSIdent, AtLoc,
102                                      LookupOrdinaryName);
103     if (ObjCInterfaceDecl *StrIF = dyn_cast_or_null<ObjCInterfaceDecl>(IF)) {
104       Context.setObjCConstantStringInterface(StrIF);
105       Ty = Context.getObjCConstantStringInterface();
106       Ty = Context.getObjCObjectPointerType(Ty);
107     } else {
108       // If there is no NSConstantString interface defined then treat this
109       // as error and recover from it.
110       Diag(S->getLocStart(), diag::err_no_nsconstant_string_class) << NSIdent
111         << S->getSourceRange();
112       Ty = Context.getObjCIdType();
113     }
114   } else {
115     IdentifierInfo *NSIdent = NSAPIObj->getNSClassId(NSAPI::ClassId_NSString);
116     NamedDecl *IF = LookupSingleName(TUScope, NSIdent, AtLoc,
117                                      LookupOrdinaryName);
118     if (ObjCInterfaceDecl *StrIF = dyn_cast_or_null<ObjCInterfaceDecl>(IF)) {
119       Context.setObjCConstantStringInterface(StrIF);
120       Ty = Context.getObjCConstantStringInterface();
121       Ty = Context.getObjCObjectPointerType(Ty);
122     } else {
123       // If there is no NSString interface defined, implicitly declare
124       // a @class NSString; and use that instead. This is to make sure
125       // type of an NSString literal is represented correctly, instead of
126       // being an 'id' type.
127       Ty = Context.getObjCNSStringType();
128       if (Ty.isNull()) {
129         ObjCInterfaceDecl *NSStringIDecl =
130           ObjCInterfaceDecl::Create (Context,
131                                      Context.getTranslationUnitDecl(),
132                                      SourceLocation(), NSIdent,
133                                      nullptr, nullptr, SourceLocation());
134         Ty = Context.getObjCInterfaceType(NSStringIDecl);
135         Context.setObjCNSStringType(Ty);
136       }
137       Ty = Context.getObjCObjectPointerType(Ty);
138     }
139   }
140 
141   return new (Context) ObjCStringLiteral(S, Ty, AtLoc);
142 }
143 
144 /// \brief Emits an error if the given method does not exist, or if the return
145 /// type is not an Objective-C object.
146 static bool validateBoxingMethod(Sema &S, SourceLocation Loc,
147                                  const ObjCInterfaceDecl *Class,
148                                  Selector Sel, const ObjCMethodDecl *Method) {
149   if (!Method) {
150     // FIXME: Is there a better way to avoid quotes than using getName()?
151     S.Diag(Loc, diag::err_undeclared_boxing_method) << Sel << Class->getName();
152     return false;
153   }
154 
155   // Make sure the return type is reasonable.
156   QualType ReturnType = Method->getReturnType();
157   if (!ReturnType->isObjCObjectPointerType()) {
158     S.Diag(Loc, diag::err_objc_literal_method_sig)
159       << Sel;
160     S.Diag(Method->getLocation(), diag::note_objc_literal_method_return)
161       << ReturnType;
162     return false;
163   }
164 
165   return true;
166 }
167 
168 /// \brief Maps ObjCLiteralKind to NSClassIdKindKind
169 static NSAPI::NSClassIdKindKind ClassKindFromLiteralKind(
170                                             Sema::ObjCLiteralKind LiteralKind) {
171   switch (LiteralKind) {
172     case Sema::LK_Array:
173       return NSAPI::ClassId_NSArray;
174     case Sema::LK_Dictionary:
175       return NSAPI::ClassId_NSDictionary;
176     case Sema::LK_Numeric:
177       return NSAPI::ClassId_NSNumber;
178     case Sema::LK_String:
179       return NSAPI::ClassId_NSString;
180     case Sema::LK_Boxed:
181       return NSAPI::ClassId_NSValue;
182 
183     // there is no corresponding matching
184     // between LK_None/LK_Block and NSClassIdKindKind
185     case Sema::LK_Block:
186     case Sema::LK_None:
187       break;
188   }
189   llvm_unreachable("LiteralKind can't be converted into a ClassKind");
190 }
191 
192 /// \brief Validates ObjCInterfaceDecl availability.
193 /// ObjCInterfaceDecl, used to create ObjC literals, should be defined
194 /// if clang not in a debugger mode.
195 static bool ValidateObjCLiteralInterfaceDecl(Sema &S, ObjCInterfaceDecl *Decl,
196                                             SourceLocation Loc,
197                                             Sema::ObjCLiteralKind LiteralKind) {
198   if (!Decl) {
199     NSAPI::NSClassIdKindKind Kind = ClassKindFromLiteralKind(LiteralKind);
200     IdentifierInfo *II = S.NSAPIObj->getNSClassId(Kind);
201     S.Diag(Loc, diag::err_undeclared_objc_literal_class)
202       << II->getName() << LiteralKind;
203     return false;
204   } else if (!Decl->hasDefinition() && !S.getLangOpts().DebuggerObjCLiteral) {
205     S.Diag(Loc, diag::err_undeclared_objc_literal_class)
206       << Decl->getName() << LiteralKind;
207     S.Diag(Decl->getLocation(), diag::note_forward_class);
208     return false;
209   }
210 
211   return true;
212 }
213 
214 /// \brief Looks up ObjCInterfaceDecl of a given NSClassIdKindKind.
215 /// Used to create ObjC literals, such as NSDictionary (@{}),
216 /// NSArray (@[]) and Boxed Expressions (@())
217 static ObjCInterfaceDecl *LookupObjCInterfaceDeclForLiteral(Sema &S,
218                                             SourceLocation Loc,
219                                             Sema::ObjCLiteralKind LiteralKind) {
220   NSAPI::NSClassIdKindKind ClassKind = ClassKindFromLiteralKind(LiteralKind);
221   IdentifierInfo *II = S.NSAPIObj->getNSClassId(ClassKind);
222   NamedDecl *IF = S.LookupSingleName(S.TUScope, II, Loc,
223                                      Sema::LookupOrdinaryName);
224   ObjCInterfaceDecl *ID = dyn_cast_or_null<ObjCInterfaceDecl>(IF);
225   if (!ID && S.getLangOpts().DebuggerObjCLiteral) {
226     ASTContext &Context = S.Context;
227     TranslationUnitDecl *TU = Context.getTranslationUnitDecl();
228     ID = ObjCInterfaceDecl::Create (Context, TU, SourceLocation(), II,
229                                     nullptr, nullptr, SourceLocation());
230   }
231 
232   if (!ValidateObjCLiteralInterfaceDecl(S, ID, Loc, LiteralKind)) {
233     ID = nullptr;
234   }
235 
236   return ID;
237 }
238 
239 /// \brief Retrieve the NSNumber factory method that should be used to create
240 /// an Objective-C literal for the given type.
241 static ObjCMethodDecl *getNSNumberFactoryMethod(Sema &S, SourceLocation Loc,
242                                                 QualType NumberType,
243                                                 bool isLiteral = false,
244                                                 SourceRange R = SourceRange()) {
245   Optional<NSAPI::NSNumberLiteralMethodKind> Kind =
246       S.NSAPIObj->getNSNumberFactoryMethodKind(NumberType);
247 
248   if (!Kind) {
249     if (isLiteral) {
250       S.Diag(Loc, diag::err_invalid_nsnumber_type)
251         << NumberType << R;
252     }
253     return nullptr;
254   }
255 
256   // If we already looked up this method, we're done.
257   if (S.NSNumberLiteralMethods[*Kind])
258     return S.NSNumberLiteralMethods[*Kind];
259 
260   Selector Sel = S.NSAPIObj->getNSNumberLiteralSelector(*Kind,
261                                                         /*Instance=*/false);
262 
263   ASTContext &CX = S.Context;
264 
265   // Look up the NSNumber class, if we haven't done so already. It's cached
266   // in the Sema instance.
267   if (!S.NSNumberDecl) {
268     S.NSNumberDecl = LookupObjCInterfaceDeclForLiteral(S, Loc,
269                                                        Sema::LK_Numeric);
270     if (!S.NSNumberDecl) {
271       return nullptr;
272     }
273   }
274 
275   if (S.NSNumberPointer.isNull()) {
276     // generate the pointer to NSNumber type.
277     QualType NSNumberObject = CX.getObjCInterfaceType(S.NSNumberDecl);
278     S.NSNumberPointer = CX.getObjCObjectPointerType(NSNumberObject);
279   }
280 
281   // Look for the appropriate method within NSNumber.
282   ObjCMethodDecl *Method = S.NSNumberDecl->lookupClassMethod(Sel);
283   if (!Method && S.getLangOpts().DebuggerObjCLiteral) {
284     // create a stub definition this NSNumber factory method.
285     TypeSourceInfo *ReturnTInfo = nullptr;
286     Method =
287         ObjCMethodDecl::Create(CX, SourceLocation(), SourceLocation(), Sel,
288                                S.NSNumberPointer, ReturnTInfo, S.NSNumberDecl,
289                                /*isInstance=*/false, /*isVariadic=*/false,
290                                /*isPropertyAccessor=*/false,
291                                /*isImplicitlyDeclared=*/true,
292                                /*isDefined=*/false, ObjCMethodDecl::Required,
293                                /*HasRelatedResultType=*/false);
294     ParmVarDecl *value = ParmVarDecl::Create(S.Context, Method,
295                                              SourceLocation(), SourceLocation(),
296                                              &CX.Idents.get("value"),
297                                              NumberType, /*TInfo=*/nullptr,
298                                              SC_None, nullptr);
299     Method->setMethodParams(S.Context, value, None);
300   }
301 
302   if (!validateBoxingMethod(S, Loc, S.NSNumberDecl, Sel, Method))
303     return nullptr;
304 
305   // Note: if the parameter type is out-of-line, we'll catch it later in the
306   // implicit conversion.
307 
308   S.NSNumberLiteralMethods[*Kind] = Method;
309   return Method;
310 }
311 
312 /// BuildObjCNumericLiteral - builds an ObjCBoxedExpr AST node for the
313 /// numeric literal expression. Type of the expression will be "NSNumber *".
314 ExprResult Sema::BuildObjCNumericLiteral(SourceLocation AtLoc, Expr *Number) {
315   // Determine the type of the literal.
316   QualType NumberType = Number->getType();
317   if (CharacterLiteral *Char = dyn_cast<CharacterLiteral>(Number)) {
318     // In C, character literals have type 'int'. That's not the type we want
319     // to use to determine the Objective-c literal kind.
320     switch (Char->getKind()) {
321     case CharacterLiteral::Ascii:
322     case CharacterLiteral::UTF8:
323       NumberType = Context.CharTy;
324       break;
325 
326     case CharacterLiteral::Wide:
327       NumberType = Context.getWideCharType();
328       break;
329 
330     case CharacterLiteral::UTF16:
331       NumberType = Context.Char16Ty;
332       break;
333 
334     case CharacterLiteral::UTF32:
335       NumberType = Context.Char32Ty;
336       break;
337     }
338   }
339 
340   // Look for the appropriate method within NSNumber.
341   // Construct the literal.
342   SourceRange NR(Number->getSourceRange());
343   ObjCMethodDecl *Method = getNSNumberFactoryMethod(*this, AtLoc, NumberType,
344                                                     true, NR);
345   if (!Method)
346     return ExprError();
347 
348   // Convert the number to the type that the parameter expects.
349   ParmVarDecl *ParamDecl = Method->parameters()[0];
350   InitializedEntity Entity = InitializedEntity::InitializeParameter(Context,
351                                                                     ParamDecl);
352   ExprResult ConvertedNumber = PerformCopyInitialization(Entity,
353                                                          SourceLocation(),
354                                                          Number);
355   if (ConvertedNumber.isInvalid())
356     return ExprError();
357   Number = ConvertedNumber.get();
358 
359   // Use the effective source range of the literal, including the leading '@'.
360   return MaybeBindToTemporary(
361            new (Context) ObjCBoxedExpr(Number, NSNumberPointer, Method,
362                                        SourceRange(AtLoc, NR.getEnd())));
363 }
364 
365 ExprResult Sema::ActOnObjCBoolLiteral(SourceLocation AtLoc,
366                                       SourceLocation ValueLoc,
367                                       bool Value) {
368   ExprResult Inner;
369   if (getLangOpts().CPlusPlus) {
370     Inner = ActOnCXXBoolLiteral(ValueLoc, Value? tok::kw_true : tok::kw_false);
371   } else {
372     // C doesn't actually have a way to represent literal values of type
373     // _Bool. So, we'll use 0/1 and implicit cast to _Bool.
374     Inner = ActOnIntegerConstant(ValueLoc, Value? 1 : 0);
375     Inner = ImpCastExprToType(Inner.get(), Context.BoolTy,
376                               CK_IntegralToBoolean);
377   }
378 
379   return BuildObjCNumericLiteral(AtLoc, Inner.get());
380 }
381 
382 /// \brief Check that the given expression is a valid element of an Objective-C
383 /// collection literal.
384 static ExprResult CheckObjCCollectionLiteralElement(Sema &S, Expr *Element,
385                                                     QualType T,
386                                                     bool ArrayLiteral = false) {
387   // If the expression is type-dependent, there's nothing for us to do.
388   if (Element->isTypeDependent())
389     return Element;
390 
391   ExprResult Result = S.CheckPlaceholderExpr(Element);
392   if (Result.isInvalid())
393     return ExprError();
394   Element = Result.get();
395 
396   // In C++, check for an implicit conversion to an Objective-C object pointer
397   // type.
398   if (S.getLangOpts().CPlusPlus && Element->getType()->isRecordType()) {
399     InitializedEntity Entity
400       = InitializedEntity::InitializeParameter(S.Context, T,
401                                                /*Consumed=*/false);
402     InitializationKind Kind
403       = InitializationKind::CreateCopy(Element->getLocStart(),
404                                        SourceLocation());
405     InitializationSequence Seq(S, Entity, Kind, Element);
406     if (!Seq.Failed())
407       return Seq.Perform(S, Entity, Kind, Element);
408   }
409 
410   Expr *OrigElement = Element;
411 
412   // Perform lvalue-to-rvalue conversion.
413   Result = S.DefaultLvalueConversion(Element);
414   if (Result.isInvalid())
415     return ExprError();
416   Element = Result.get();
417 
418   // Make sure that we have an Objective-C pointer type or block.
419   if (!Element->getType()->isObjCObjectPointerType() &&
420       !Element->getType()->isBlockPointerType()) {
421     bool Recovered = false;
422 
423     // If this is potentially an Objective-C numeric literal, add the '@'.
424     if (isa<IntegerLiteral>(OrigElement) ||
425         isa<CharacterLiteral>(OrigElement) ||
426         isa<FloatingLiteral>(OrigElement) ||
427         isa<ObjCBoolLiteralExpr>(OrigElement) ||
428         isa<CXXBoolLiteralExpr>(OrigElement)) {
429       if (S.NSAPIObj->getNSNumberFactoryMethodKind(OrigElement->getType())) {
430         int Which = isa<CharacterLiteral>(OrigElement) ? 1
431                   : (isa<CXXBoolLiteralExpr>(OrigElement) ||
432                      isa<ObjCBoolLiteralExpr>(OrigElement)) ? 2
433                   : 3;
434 
435         S.Diag(OrigElement->getLocStart(), diag::err_box_literal_collection)
436           << Which << OrigElement->getSourceRange()
437           << FixItHint::CreateInsertion(OrigElement->getLocStart(), "@");
438 
439         Result = S.BuildObjCNumericLiteral(OrigElement->getLocStart(),
440                                            OrigElement);
441         if (Result.isInvalid())
442           return ExprError();
443 
444         Element = Result.get();
445         Recovered = true;
446       }
447     }
448     // If this is potentially an Objective-C string literal, add the '@'.
449     else if (StringLiteral *String = dyn_cast<StringLiteral>(OrigElement)) {
450       if (String->isAscii()) {
451         S.Diag(OrigElement->getLocStart(), diag::err_box_literal_collection)
452           << 0 << OrigElement->getSourceRange()
453           << FixItHint::CreateInsertion(OrigElement->getLocStart(), "@");
454 
455         Result = S.BuildObjCStringLiteral(OrigElement->getLocStart(), String);
456         if (Result.isInvalid())
457           return ExprError();
458 
459         Element = Result.get();
460         Recovered = true;
461       }
462     }
463 
464     if (!Recovered) {
465       S.Diag(Element->getLocStart(), diag::err_invalid_collection_element)
466         << Element->getType();
467       return ExprError();
468     }
469   }
470   if (ArrayLiteral)
471     if (ObjCStringLiteral *getString =
472           dyn_cast<ObjCStringLiteral>(OrigElement)) {
473       if (StringLiteral *SL = getString->getString()) {
474         unsigned numConcat = SL->getNumConcatenated();
475         if (numConcat > 1) {
476           // Only warn if the concatenated string doesn't come from a macro.
477           bool hasMacro = false;
478           for (unsigned i = 0; i < numConcat ; ++i)
479             if (SL->getStrTokenLoc(i).isMacroID()) {
480               hasMacro = true;
481               break;
482             }
483           if (!hasMacro)
484             S.Diag(Element->getLocStart(),
485                    diag::warn_concatenated_nsarray_literal)
486               << Element->getType();
487         }
488       }
489     }
490 
491   // Make sure that the element has the type that the container factory
492   // function expects.
493   return S.PerformCopyInitialization(
494            InitializedEntity::InitializeParameter(S.Context, T,
495                                                   /*Consumed=*/false),
496            Element->getLocStart(), Element);
497 }
498 
499 ExprResult Sema::BuildObjCBoxedExpr(SourceRange SR, Expr *ValueExpr) {
500   if (ValueExpr->isTypeDependent()) {
501     ObjCBoxedExpr *BoxedExpr =
502       new (Context) ObjCBoxedExpr(ValueExpr, Context.DependentTy, nullptr, SR);
503     return BoxedExpr;
504   }
505   ObjCMethodDecl *BoxingMethod = nullptr;
506   QualType BoxedType;
507   // Convert the expression to an RValue, so we can check for pointer types...
508   ExprResult RValue = DefaultFunctionArrayLvalueConversion(ValueExpr);
509   if (RValue.isInvalid()) {
510     return ExprError();
511   }
512   SourceLocation Loc = SR.getBegin();
513   ValueExpr = RValue.get();
514   QualType ValueType(ValueExpr->getType());
515   if (const PointerType *PT = ValueType->getAs<PointerType>()) {
516     QualType PointeeType = PT->getPointeeType();
517     if (Context.hasSameUnqualifiedType(PointeeType, Context.CharTy)) {
518 
519       if (!NSStringDecl) {
520         NSStringDecl = LookupObjCInterfaceDeclForLiteral(*this, Loc,
521                                                          Sema::LK_String);
522         if (!NSStringDecl) {
523           return ExprError();
524         }
525         QualType NSStringObject = Context.getObjCInterfaceType(NSStringDecl);
526         NSStringPointer = Context.getObjCObjectPointerType(NSStringObject);
527       }
528 
529       if (!StringWithUTF8StringMethod) {
530         IdentifierInfo *II = &Context.Idents.get("stringWithUTF8String");
531         Selector stringWithUTF8String = Context.Selectors.getUnarySelector(II);
532 
533         // Look for the appropriate method within NSString.
534         BoxingMethod = NSStringDecl->lookupClassMethod(stringWithUTF8String);
535         if (!BoxingMethod && getLangOpts().DebuggerObjCLiteral) {
536           // Debugger needs to work even if NSString hasn't been defined.
537           TypeSourceInfo *ReturnTInfo = nullptr;
538           ObjCMethodDecl *M = ObjCMethodDecl::Create(
539               Context, SourceLocation(), SourceLocation(), stringWithUTF8String,
540               NSStringPointer, ReturnTInfo, NSStringDecl,
541               /*isInstance=*/false, /*isVariadic=*/false,
542               /*isPropertyAccessor=*/false,
543               /*isImplicitlyDeclared=*/true,
544               /*isDefined=*/false, ObjCMethodDecl::Required,
545               /*HasRelatedResultType=*/false);
546           QualType ConstCharType = Context.CharTy.withConst();
547           ParmVarDecl *value =
548             ParmVarDecl::Create(Context, M,
549                                 SourceLocation(), SourceLocation(),
550                                 &Context.Idents.get("value"),
551                                 Context.getPointerType(ConstCharType),
552                                 /*TInfo=*/nullptr,
553                                 SC_None, nullptr);
554           M->setMethodParams(Context, value, None);
555           BoxingMethod = M;
556         }
557 
558         if (!validateBoxingMethod(*this, Loc, NSStringDecl,
559                                   stringWithUTF8String, BoxingMethod))
560            return ExprError();
561 
562         StringWithUTF8StringMethod = BoxingMethod;
563       }
564 
565       BoxingMethod = StringWithUTF8StringMethod;
566       BoxedType = NSStringPointer;
567       // Transfer the nullability from method's return type.
568       Optional<NullabilityKind> Nullability =
569           BoxingMethod->getReturnType()->getNullability(Context);
570       if (Nullability)
571         BoxedType = Context.getAttributedType(
572             AttributedType::getNullabilityAttrKind(*Nullability), BoxedType,
573             BoxedType);
574     }
575   } else if (ValueType->isBuiltinType()) {
576     // The other types we support are numeric, char and BOOL/bool. We could also
577     // provide limited support for structure types, such as NSRange, NSRect, and
578     // NSSize. See NSValue (NSValueGeometryExtensions) in <Foundation/NSGeometry.h>
579     // for more details.
580 
581     // Check for a top-level character literal.
582     if (const CharacterLiteral *Char =
583         dyn_cast<CharacterLiteral>(ValueExpr->IgnoreParens())) {
584       // In C, character literals have type 'int'. That's not the type we want
585       // to use to determine the Objective-c literal kind.
586       switch (Char->getKind()) {
587       case CharacterLiteral::Ascii:
588       case CharacterLiteral::UTF8:
589         ValueType = Context.CharTy;
590         break;
591 
592       case CharacterLiteral::Wide:
593         ValueType = Context.getWideCharType();
594         break;
595 
596       case CharacterLiteral::UTF16:
597         ValueType = Context.Char16Ty;
598         break;
599 
600       case CharacterLiteral::UTF32:
601         ValueType = Context.Char32Ty;
602         break;
603       }
604     }
605     // FIXME:  Do I need to do anything special with BoolTy expressions?
606 
607     // Look for the appropriate method within NSNumber.
608     BoxingMethod = getNSNumberFactoryMethod(*this, Loc, ValueType);
609     BoxedType = NSNumberPointer;
610   } else if (const EnumType *ET = ValueType->getAs<EnumType>()) {
611     if (!ET->getDecl()->isComplete()) {
612       Diag(Loc, diag::err_objc_incomplete_boxed_expression_type)
613         << ValueType << ValueExpr->getSourceRange();
614       return ExprError();
615     }
616 
617     BoxingMethod = getNSNumberFactoryMethod(*this, Loc,
618                                             ET->getDecl()->getIntegerType());
619     BoxedType = NSNumberPointer;
620   } else if (ValueType->isObjCBoxableRecordType()) {
621     // Support for structure types, that marked as objc_boxable
622     // struct __attribute__((objc_boxable)) s { ... };
623 
624     // Look up the NSValue class, if we haven't done so already. It's cached
625     // in the Sema instance.
626     if (!NSValueDecl) {
627       NSValueDecl = LookupObjCInterfaceDeclForLiteral(*this, Loc,
628                                                       Sema::LK_Boxed);
629       if (!NSValueDecl) {
630         return ExprError();
631       }
632 
633       // generate the pointer to NSValue type.
634       QualType NSValueObject = Context.getObjCInterfaceType(NSValueDecl);
635       NSValuePointer = Context.getObjCObjectPointerType(NSValueObject);
636     }
637 
638     if (!ValueWithBytesObjCTypeMethod) {
639       IdentifierInfo *II[] = {
640         &Context.Idents.get("valueWithBytes"),
641         &Context.Idents.get("objCType")
642       };
643       Selector ValueWithBytesObjCType = Context.Selectors.getSelector(2, II);
644 
645       // Look for the appropriate method within NSValue.
646       BoxingMethod = NSValueDecl->lookupClassMethod(ValueWithBytesObjCType);
647       if (!BoxingMethod && getLangOpts().DebuggerObjCLiteral) {
648         // Debugger needs to work even if NSValue hasn't been defined.
649         TypeSourceInfo *ReturnTInfo = nullptr;
650         ObjCMethodDecl *M = ObjCMethodDecl::Create(
651                                                Context,
652                                                SourceLocation(),
653                                                SourceLocation(),
654                                                ValueWithBytesObjCType,
655                                                NSValuePointer,
656                                                ReturnTInfo,
657                                                NSValueDecl,
658                                                /*isInstance=*/false,
659                                                /*isVariadic=*/false,
660                                                /*isPropertyAccessor=*/false,
661                                                /*isImplicitlyDeclared=*/true,
662                                                /*isDefined=*/false,
663                                                ObjCMethodDecl::Required,
664                                                /*HasRelatedResultType=*/false);
665 
666         SmallVector<ParmVarDecl *, 2> Params;
667 
668         ParmVarDecl *bytes =
669         ParmVarDecl::Create(Context, M,
670                             SourceLocation(), SourceLocation(),
671                             &Context.Idents.get("bytes"),
672                             Context.VoidPtrTy.withConst(),
673                             /*TInfo=*/nullptr,
674                             SC_None, nullptr);
675         Params.push_back(bytes);
676 
677         QualType ConstCharType = Context.CharTy.withConst();
678         ParmVarDecl *type =
679         ParmVarDecl::Create(Context, M,
680                             SourceLocation(), SourceLocation(),
681                             &Context.Idents.get("type"),
682                             Context.getPointerType(ConstCharType),
683                             /*TInfo=*/nullptr,
684                             SC_None, nullptr);
685         Params.push_back(type);
686 
687         M->setMethodParams(Context, Params, None);
688         BoxingMethod = M;
689       }
690 
691       if (!validateBoxingMethod(*this, Loc, NSValueDecl,
692                                 ValueWithBytesObjCType, BoxingMethod))
693         return ExprError();
694 
695       ValueWithBytesObjCTypeMethod = BoxingMethod;
696     }
697 
698     if (!ValueType.isTriviallyCopyableType(Context)) {
699       Diag(Loc, diag::err_objc_non_trivially_copyable_boxed_expression_type)
700         << ValueType << ValueExpr->getSourceRange();
701       return ExprError();
702     }
703 
704     BoxingMethod = ValueWithBytesObjCTypeMethod;
705     BoxedType = NSValuePointer;
706   }
707 
708   if (!BoxingMethod) {
709     Diag(Loc, diag::err_objc_illegal_boxed_expression_type)
710       << ValueType << ValueExpr->getSourceRange();
711     return ExprError();
712   }
713 
714   DiagnoseUseOfDecl(BoxingMethod, Loc);
715 
716   ExprResult ConvertedValueExpr;
717   if (ValueType->isObjCBoxableRecordType()) {
718     InitializedEntity IE = InitializedEntity::InitializeTemporary(ValueType);
719     ConvertedValueExpr = PerformCopyInitialization(IE, ValueExpr->getExprLoc(),
720                                                    ValueExpr);
721   } else {
722     // Convert the expression to the type that the parameter requires.
723     ParmVarDecl *ParamDecl = BoxingMethod->parameters()[0];
724     InitializedEntity IE = InitializedEntity::InitializeParameter(Context,
725                                                                   ParamDecl);
726     ConvertedValueExpr = PerformCopyInitialization(IE, SourceLocation(),
727                                                    ValueExpr);
728   }
729 
730   if (ConvertedValueExpr.isInvalid())
731     return ExprError();
732   ValueExpr = ConvertedValueExpr.get();
733 
734   ObjCBoxedExpr *BoxedExpr =
735     new (Context) ObjCBoxedExpr(ValueExpr, BoxedType,
736                                       BoxingMethod, SR);
737   return MaybeBindToTemporary(BoxedExpr);
738 }
739 
740 /// Build an ObjC subscript pseudo-object expression, given that
741 /// that's supported by the runtime.
742 ExprResult Sema::BuildObjCSubscriptExpression(SourceLocation RB, Expr *BaseExpr,
743                                         Expr *IndexExpr,
744                                         ObjCMethodDecl *getterMethod,
745                                         ObjCMethodDecl *setterMethod) {
746   assert(!LangOpts.isSubscriptPointerArithmetic());
747 
748   // We can't get dependent types here; our callers should have
749   // filtered them out.
750   assert((!BaseExpr->isTypeDependent() && !IndexExpr->isTypeDependent()) &&
751          "base or index cannot have dependent type here");
752 
753   // Filter out placeholders in the index.  In theory, overloads could
754   // be preserved here, although that might not actually work correctly.
755   ExprResult Result = CheckPlaceholderExpr(IndexExpr);
756   if (Result.isInvalid())
757     return ExprError();
758   IndexExpr = Result.get();
759 
760   // Perform lvalue-to-rvalue conversion on the base.
761   Result = DefaultLvalueConversion(BaseExpr);
762   if (Result.isInvalid())
763     return ExprError();
764   BaseExpr = Result.get();
765 
766   // Build the pseudo-object expression.
767   return new (Context) ObjCSubscriptRefExpr(
768       BaseExpr, IndexExpr, Context.PseudoObjectTy, VK_LValue, OK_ObjCSubscript,
769       getterMethod, setterMethod, RB);
770 }
771 
772 ExprResult Sema::BuildObjCArrayLiteral(SourceRange SR, MultiExprArg Elements) {
773   SourceLocation Loc = SR.getBegin();
774 
775   if (!NSArrayDecl) {
776     NSArrayDecl = LookupObjCInterfaceDeclForLiteral(*this, Loc,
777                                                     Sema::LK_Array);
778     if (!NSArrayDecl) {
779       return ExprError();
780     }
781   }
782 
783   // Find the arrayWithObjects:count: method, if we haven't done so already.
784   QualType IdT = Context.getObjCIdType();
785   if (!ArrayWithObjectsMethod) {
786     Selector
787       Sel = NSAPIObj->getNSArraySelector(NSAPI::NSArr_arrayWithObjectsCount);
788     ObjCMethodDecl *Method = NSArrayDecl->lookupClassMethod(Sel);
789     if (!Method && getLangOpts().DebuggerObjCLiteral) {
790       TypeSourceInfo *ReturnTInfo = nullptr;
791       Method = ObjCMethodDecl::Create(
792           Context, SourceLocation(), SourceLocation(), Sel, IdT, ReturnTInfo,
793           Context.getTranslationUnitDecl(), false /*Instance*/,
794           false /*isVariadic*/,
795           /*isPropertyAccessor=*/false,
796           /*isImplicitlyDeclared=*/true, /*isDefined=*/false,
797           ObjCMethodDecl::Required, false);
798       SmallVector<ParmVarDecl *, 2> Params;
799       ParmVarDecl *objects = ParmVarDecl::Create(Context, Method,
800                                                  SourceLocation(),
801                                                  SourceLocation(),
802                                                  &Context.Idents.get("objects"),
803                                                  Context.getPointerType(IdT),
804                                                  /*TInfo=*/nullptr,
805                                                  SC_None, nullptr);
806       Params.push_back(objects);
807       ParmVarDecl *cnt = ParmVarDecl::Create(Context, Method,
808                                              SourceLocation(),
809                                              SourceLocation(),
810                                              &Context.Idents.get("cnt"),
811                                              Context.UnsignedLongTy,
812                                              /*TInfo=*/nullptr, SC_None,
813                                              nullptr);
814       Params.push_back(cnt);
815       Method->setMethodParams(Context, Params, None);
816     }
817 
818     if (!validateBoxingMethod(*this, Loc, NSArrayDecl, Sel, Method))
819       return ExprError();
820 
821     // Dig out the type that all elements should be converted to.
822     QualType T = Method->parameters()[0]->getType();
823     const PointerType *PtrT = T->getAs<PointerType>();
824     if (!PtrT ||
825         !Context.hasSameUnqualifiedType(PtrT->getPointeeType(), IdT)) {
826       Diag(SR.getBegin(), diag::err_objc_literal_method_sig)
827         << Sel;
828       Diag(Method->parameters()[0]->getLocation(),
829            diag::note_objc_literal_method_param)
830         << 0 << T
831         << Context.getPointerType(IdT.withConst());
832       return ExprError();
833     }
834 
835     // Check that the 'count' parameter is integral.
836     if (!Method->parameters()[1]->getType()->isIntegerType()) {
837       Diag(SR.getBegin(), diag::err_objc_literal_method_sig)
838         << Sel;
839       Diag(Method->parameters()[1]->getLocation(),
840            diag::note_objc_literal_method_param)
841         << 1
842         << Method->parameters()[1]->getType()
843         << "integral";
844       return ExprError();
845     }
846 
847     // We've found a good +arrayWithObjects:count: method. Save it!
848     ArrayWithObjectsMethod = Method;
849   }
850 
851   QualType ObjectsType = ArrayWithObjectsMethod->parameters()[0]->getType();
852   QualType RequiredType = ObjectsType->castAs<PointerType>()->getPointeeType();
853 
854   // Check that each of the elements provided is valid in a collection literal,
855   // performing conversions as necessary.
856   Expr **ElementsBuffer = Elements.data();
857   for (unsigned I = 0, N = Elements.size(); I != N; ++I) {
858     ExprResult Converted = CheckObjCCollectionLiteralElement(*this,
859                                                              ElementsBuffer[I],
860                                                              RequiredType, true);
861     if (Converted.isInvalid())
862       return ExprError();
863 
864     ElementsBuffer[I] = Converted.get();
865   }
866 
867   QualType Ty
868     = Context.getObjCObjectPointerType(
869                                     Context.getObjCInterfaceType(NSArrayDecl));
870 
871   return MaybeBindToTemporary(
872            ObjCArrayLiteral::Create(Context, Elements, Ty,
873                                     ArrayWithObjectsMethod, SR));
874 }
875 
876 ExprResult Sema::BuildObjCDictionaryLiteral(SourceRange SR,
877                               MutableArrayRef<ObjCDictionaryElement> Elements) {
878   SourceLocation Loc = SR.getBegin();
879 
880   if (!NSDictionaryDecl) {
881     NSDictionaryDecl = LookupObjCInterfaceDeclForLiteral(*this, Loc,
882                                                          Sema::LK_Dictionary);
883     if (!NSDictionaryDecl) {
884       return ExprError();
885     }
886   }
887 
888   // Find the dictionaryWithObjects:forKeys:count: method, if we haven't done
889   // so already.
890   QualType IdT = Context.getObjCIdType();
891   if (!DictionaryWithObjectsMethod) {
892     Selector Sel = NSAPIObj->getNSDictionarySelector(
893                                NSAPI::NSDict_dictionaryWithObjectsForKeysCount);
894     ObjCMethodDecl *Method = NSDictionaryDecl->lookupClassMethod(Sel);
895     if (!Method && getLangOpts().DebuggerObjCLiteral) {
896       Method = ObjCMethodDecl::Create(Context,
897                            SourceLocation(), SourceLocation(), Sel,
898                            IdT,
899                            nullptr /*TypeSourceInfo */,
900                            Context.getTranslationUnitDecl(),
901                            false /*Instance*/, false/*isVariadic*/,
902                            /*isPropertyAccessor=*/false,
903                            /*isImplicitlyDeclared=*/true, /*isDefined=*/false,
904                            ObjCMethodDecl::Required,
905                            false);
906       SmallVector<ParmVarDecl *, 3> Params;
907       ParmVarDecl *objects = ParmVarDecl::Create(Context, Method,
908                                                  SourceLocation(),
909                                                  SourceLocation(),
910                                                  &Context.Idents.get("objects"),
911                                                  Context.getPointerType(IdT),
912                                                  /*TInfo=*/nullptr, SC_None,
913                                                  nullptr);
914       Params.push_back(objects);
915       ParmVarDecl *keys = ParmVarDecl::Create(Context, Method,
916                                               SourceLocation(),
917                                               SourceLocation(),
918                                               &Context.Idents.get("keys"),
919                                               Context.getPointerType(IdT),
920                                               /*TInfo=*/nullptr, SC_None,
921                                               nullptr);
922       Params.push_back(keys);
923       ParmVarDecl *cnt = ParmVarDecl::Create(Context, Method,
924                                              SourceLocation(),
925                                              SourceLocation(),
926                                              &Context.Idents.get("cnt"),
927                                              Context.UnsignedLongTy,
928                                              /*TInfo=*/nullptr, SC_None,
929                                              nullptr);
930       Params.push_back(cnt);
931       Method->setMethodParams(Context, Params, None);
932     }
933 
934     if (!validateBoxingMethod(*this, SR.getBegin(), NSDictionaryDecl, Sel,
935                               Method))
936        return ExprError();
937 
938     // Dig out the type that all values should be converted to.
939     QualType ValueT = Method->parameters()[0]->getType();
940     const PointerType *PtrValue = ValueT->getAs<PointerType>();
941     if (!PtrValue ||
942         !Context.hasSameUnqualifiedType(PtrValue->getPointeeType(), IdT)) {
943       Diag(SR.getBegin(), diag::err_objc_literal_method_sig)
944         << Sel;
945       Diag(Method->parameters()[0]->getLocation(),
946            diag::note_objc_literal_method_param)
947         << 0 << ValueT
948         << Context.getPointerType(IdT.withConst());
949       return ExprError();
950     }
951 
952     // Dig out the type that all keys should be converted to.
953     QualType KeyT = Method->parameters()[1]->getType();
954     const PointerType *PtrKey = KeyT->getAs<PointerType>();
955     if (!PtrKey ||
956         !Context.hasSameUnqualifiedType(PtrKey->getPointeeType(),
957                                         IdT)) {
958       bool err = true;
959       if (PtrKey) {
960         if (QIDNSCopying.isNull()) {
961           // key argument of selector is id<NSCopying>?
962           if (ObjCProtocolDecl *NSCopyingPDecl =
963               LookupProtocol(&Context.Idents.get("NSCopying"), SR.getBegin())) {
964             ObjCProtocolDecl *PQ[] = {NSCopyingPDecl};
965             QIDNSCopying =
966               Context.getObjCObjectType(Context.ObjCBuiltinIdTy, { },
967                                         llvm::makeArrayRef(
968                                           (ObjCProtocolDecl**) PQ,
969                                           1),
970                                         false);
971             QIDNSCopying = Context.getObjCObjectPointerType(QIDNSCopying);
972           }
973         }
974         if (!QIDNSCopying.isNull())
975           err = !Context.hasSameUnqualifiedType(PtrKey->getPointeeType(),
976                                                 QIDNSCopying);
977       }
978 
979       if (err) {
980         Diag(SR.getBegin(), diag::err_objc_literal_method_sig)
981           << Sel;
982         Diag(Method->parameters()[1]->getLocation(),
983              diag::note_objc_literal_method_param)
984           << 1 << KeyT
985           << Context.getPointerType(IdT.withConst());
986         return ExprError();
987       }
988     }
989 
990     // Check that the 'count' parameter is integral.
991     QualType CountType = Method->parameters()[2]->getType();
992     if (!CountType->isIntegerType()) {
993       Diag(SR.getBegin(), diag::err_objc_literal_method_sig)
994         << Sel;
995       Diag(Method->parameters()[2]->getLocation(),
996            diag::note_objc_literal_method_param)
997         << 2 << CountType
998         << "integral";
999       return ExprError();
1000     }
1001 
1002     // We've found a good +dictionaryWithObjects:keys:count: method; save it!
1003     DictionaryWithObjectsMethod = Method;
1004   }
1005 
1006   QualType ValuesT = DictionaryWithObjectsMethod->parameters()[0]->getType();
1007   QualType ValueT = ValuesT->castAs<PointerType>()->getPointeeType();
1008   QualType KeysT = DictionaryWithObjectsMethod->parameters()[1]->getType();
1009   QualType KeyT = KeysT->castAs<PointerType>()->getPointeeType();
1010 
1011   // Check that each of the keys and values provided is valid in a collection
1012   // literal, performing conversions as necessary.
1013   bool HasPackExpansions = false;
1014   for (ObjCDictionaryElement &Element : Elements) {
1015     // Check the key.
1016     ExprResult Key = CheckObjCCollectionLiteralElement(*this, Element.Key,
1017                                                        KeyT);
1018     if (Key.isInvalid())
1019       return ExprError();
1020 
1021     // Check the value.
1022     ExprResult Value
1023       = CheckObjCCollectionLiteralElement(*this, Element.Value, ValueT);
1024     if (Value.isInvalid())
1025       return ExprError();
1026 
1027     Element.Key = Key.get();
1028     Element.Value = Value.get();
1029 
1030     if (Element.EllipsisLoc.isInvalid())
1031       continue;
1032 
1033     if (!Element.Key->containsUnexpandedParameterPack() &&
1034         !Element.Value->containsUnexpandedParameterPack()) {
1035       Diag(Element.EllipsisLoc,
1036            diag::err_pack_expansion_without_parameter_packs)
1037         << SourceRange(Element.Key->getLocStart(),
1038                        Element.Value->getLocEnd());
1039       return ExprError();
1040     }
1041 
1042     HasPackExpansions = true;
1043   }
1044 
1045   QualType Ty
1046     = Context.getObjCObjectPointerType(
1047                                 Context.getObjCInterfaceType(NSDictionaryDecl));
1048   return MaybeBindToTemporary(ObjCDictionaryLiteral::Create(
1049       Context, Elements, HasPackExpansions, Ty,
1050       DictionaryWithObjectsMethod, SR));
1051 }
1052 
1053 ExprResult Sema::BuildObjCEncodeExpression(SourceLocation AtLoc,
1054                                       TypeSourceInfo *EncodedTypeInfo,
1055                                       SourceLocation RParenLoc) {
1056   QualType EncodedType = EncodedTypeInfo->getType();
1057   QualType StrTy;
1058   if (EncodedType->isDependentType())
1059     StrTy = Context.DependentTy;
1060   else {
1061     if (!EncodedType->getAsArrayTypeUnsafe() && //// Incomplete array is handled.
1062         !EncodedType->isVoidType()) // void is handled too.
1063       if (RequireCompleteType(AtLoc, EncodedType,
1064                               diag::err_incomplete_type_objc_at_encode,
1065                               EncodedTypeInfo->getTypeLoc()))
1066         return ExprError();
1067 
1068     std::string Str;
1069     QualType NotEncodedT;
1070     Context.getObjCEncodingForType(EncodedType, Str, nullptr, &NotEncodedT);
1071     if (!NotEncodedT.isNull())
1072       Diag(AtLoc, diag::warn_incomplete_encoded_type)
1073         << EncodedType << NotEncodedT;
1074 
1075     // The type of @encode is the same as the type of the corresponding string,
1076     // which is an array type.
1077     StrTy = Context.CharTy;
1078     // A C++ string literal has a const-qualified element type (C++ 2.13.4p1).
1079     if (getLangOpts().CPlusPlus || getLangOpts().ConstStrings)
1080       StrTy.addConst();
1081     StrTy = Context.getConstantArrayType(StrTy, llvm::APInt(32, Str.size()+1),
1082                                          ArrayType::Normal, 0);
1083   }
1084 
1085   return new (Context) ObjCEncodeExpr(StrTy, EncodedTypeInfo, AtLoc, RParenLoc);
1086 }
1087 
1088 ExprResult Sema::ParseObjCEncodeExpression(SourceLocation AtLoc,
1089                                            SourceLocation EncodeLoc,
1090                                            SourceLocation LParenLoc,
1091                                            ParsedType ty,
1092                                            SourceLocation RParenLoc) {
1093   // FIXME: Preserve type source info ?
1094   TypeSourceInfo *TInfo;
1095   QualType EncodedType = GetTypeFromParser(ty, &TInfo);
1096   if (!TInfo)
1097     TInfo = Context.getTrivialTypeSourceInfo(EncodedType,
1098                                              getLocForEndOfToken(LParenLoc));
1099 
1100   return BuildObjCEncodeExpression(AtLoc, TInfo, RParenLoc);
1101 }
1102 
1103 static bool HelperToDiagnoseMismatchedMethodsInGlobalPool(Sema &S,
1104                                                SourceLocation AtLoc,
1105                                                SourceLocation LParenLoc,
1106                                                SourceLocation RParenLoc,
1107                                                ObjCMethodDecl *Method,
1108                                                ObjCMethodList &MethList) {
1109   ObjCMethodList *M = &MethList;
1110   bool Warned = false;
1111   for (M = M->getNext(); M; M=M->getNext()) {
1112     ObjCMethodDecl *MatchingMethodDecl = M->getMethod();
1113     if (MatchingMethodDecl == Method ||
1114         isa<ObjCImplDecl>(MatchingMethodDecl->getDeclContext()) ||
1115         MatchingMethodDecl->getSelector() != Method->getSelector())
1116       continue;
1117     if (!S.MatchTwoMethodDeclarations(Method,
1118                                       MatchingMethodDecl, Sema::MMS_loose)) {
1119       if (!Warned) {
1120         Warned = true;
1121         S.Diag(AtLoc, diag::warn_multiple_selectors)
1122           << Method->getSelector() << FixItHint::CreateInsertion(LParenLoc, "(")
1123           << FixItHint::CreateInsertion(RParenLoc, ")");
1124         S.Diag(Method->getLocation(), diag::note_method_declared_at)
1125           << Method->getDeclName();
1126       }
1127       S.Diag(MatchingMethodDecl->getLocation(), diag::note_method_declared_at)
1128         << MatchingMethodDecl->getDeclName();
1129     }
1130   }
1131   return Warned;
1132 }
1133 
1134 static void DiagnoseMismatchedSelectors(Sema &S, SourceLocation AtLoc,
1135                                         ObjCMethodDecl *Method,
1136                                         SourceLocation LParenLoc,
1137                                         SourceLocation RParenLoc,
1138                                         bool WarnMultipleSelectors) {
1139   if (!WarnMultipleSelectors ||
1140       S.Diags.isIgnored(diag::warn_multiple_selectors, SourceLocation()))
1141     return;
1142   bool Warned = false;
1143   for (Sema::GlobalMethodPool::iterator b = S.MethodPool.begin(),
1144        e = S.MethodPool.end(); b != e; b++) {
1145     // first, instance methods
1146     ObjCMethodList &InstMethList = b->second.first;
1147     if (HelperToDiagnoseMismatchedMethodsInGlobalPool(S, AtLoc, LParenLoc, RParenLoc,
1148                                                       Method, InstMethList))
1149       Warned = true;
1150 
1151     // second, class methods
1152     ObjCMethodList &ClsMethList = b->second.second;
1153     if (HelperToDiagnoseMismatchedMethodsInGlobalPool(S, AtLoc, LParenLoc, RParenLoc,
1154                                                       Method, ClsMethList) || Warned)
1155       return;
1156   }
1157 }
1158 
1159 ExprResult Sema::ParseObjCSelectorExpression(Selector Sel,
1160                                              SourceLocation AtLoc,
1161                                              SourceLocation SelLoc,
1162                                              SourceLocation LParenLoc,
1163                                              SourceLocation RParenLoc,
1164                                              bool WarnMultipleSelectors) {
1165   ObjCMethodDecl *Method = LookupInstanceMethodInGlobalPool(Sel,
1166                              SourceRange(LParenLoc, RParenLoc));
1167   if (!Method)
1168     Method = LookupFactoryMethodInGlobalPool(Sel,
1169                                           SourceRange(LParenLoc, RParenLoc));
1170   if (!Method) {
1171     if (const ObjCMethodDecl *OM = SelectorsForTypoCorrection(Sel)) {
1172       Selector MatchedSel = OM->getSelector();
1173       SourceRange SelectorRange(LParenLoc.getLocWithOffset(1),
1174                                 RParenLoc.getLocWithOffset(-1));
1175       Diag(SelLoc, diag::warn_undeclared_selector_with_typo)
1176         << Sel << MatchedSel
1177         << FixItHint::CreateReplacement(SelectorRange, MatchedSel.getAsString());
1178 
1179     } else
1180         Diag(SelLoc, diag::warn_undeclared_selector) << Sel;
1181   } else
1182     DiagnoseMismatchedSelectors(*this, AtLoc, Method, LParenLoc, RParenLoc,
1183                                 WarnMultipleSelectors);
1184 
1185   if (Method &&
1186       Method->getImplementationControl() != ObjCMethodDecl::Optional &&
1187       !getSourceManager().isInSystemHeader(Method->getLocation()))
1188     ReferencedSelectors.insert(std::make_pair(Sel, AtLoc));
1189 
1190   // In ARC, forbid the user from using @selector for
1191   // retain/release/autorelease/dealloc/retainCount.
1192   if (getLangOpts().ObjCAutoRefCount) {
1193     switch (Sel.getMethodFamily()) {
1194     case OMF_retain:
1195     case OMF_release:
1196     case OMF_autorelease:
1197     case OMF_retainCount:
1198     case OMF_dealloc:
1199       Diag(AtLoc, diag::err_arc_illegal_selector) <<
1200         Sel << SourceRange(LParenLoc, RParenLoc);
1201       break;
1202 
1203     case OMF_None:
1204     case OMF_alloc:
1205     case OMF_copy:
1206     case OMF_finalize:
1207     case OMF_init:
1208     case OMF_mutableCopy:
1209     case OMF_new:
1210     case OMF_self:
1211     case OMF_initialize:
1212     case OMF_performSelector:
1213       break;
1214     }
1215   }
1216   QualType Ty = Context.getObjCSelType();
1217   return new (Context) ObjCSelectorExpr(Ty, Sel, AtLoc, RParenLoc);
1218 }
1219 
1220 ExprResult Sema::ParseObjCProtocolExpression(IdentifierInfo *ProtocolId,
1221                                              SourceLocation AtLoc,
1222                                              SourceLocation ProtoLoc,
1223                                              SourceLocation LParenLoc,
1224                                              SourceLocation ProtoIdLoc,
1225                                              SourceLocation RParenLoc) {
1226   ObjCProtocolDecl* PDecl = LookupProtocol(ProtocolId, ProtoIdLoc);
1227   if (!PDecl) {
1228     Diag(ProtoLoc, diag::err_undeclared_protocol) << ProtocolId;
1229     return true;
1230   }
1231   if (PDecl->hasDefinition())
1232     PDecl = PDecl->getDefinition();
1233 
1234   QualType Ty = Context.getObjCProtoType();
1235   if (Ty.isNull())
1236     return true;
1237   Ty = Context.getObjCObjectPointerType(Ty);
1238   return new (Context) ObjCProtocolExpr(Ty, PDecl, AtLoc, ProtoIdLoc, RParenLoc);
1239 }
1240 
1241 /// Try to capture an implicit reference to 'self'.
1242 ObjCMethodDecl *Sema::tryCaptureObjCSelf(SourceLocation Loc) {
1243   DeclContext *DC = getFunctionLevelDeclContext();
1244 
1245   // If we're not in an ObjC method, error out.  Note that, unlike the
1246   // C++ case, we don't require an instance method --- class methods
1247   // still have a 'self', and we really do still need to capture it!
1248   ObjCMethodDecl *method = dyn_cast<ObjCMethodDecl>(DC);
1249   if (!method)
1250     return nullptr;
1251 
1252   tryCaptureVariable(method->getSelfDecl(), Loc);
1253 
1254   return method;
1255 }
1256 
1257 static QualType stripObjCInstanceType(ASTContext &Context, QualType T) {
1258   QualType origType = T;
1259   if (auto nullability = AttributedType::stripOuterNullability(T)) {
1260     if (T == Context.getObjCInstanceType()) {
1261       return Context.getAttributedType(
1262                AttributedType::getNullabilityAttrKind(*nullability),
1263                Context.getObjCIdType(),
1264                Context.getObjCIdType());
1265     }
1266 
1267     return origType;
1268   }
1269 
1270   if (T == Context.getObjCInstanceType())
1271     return Context.getObjCIdType();
1272 
1273   return origType;
1274 }
1275 
1276 /// Determine the result type of a message send based on the receiver type,
1277 /// method, and the kind of message send.
1278 ///
1279 /// This is the "base" result type, which will still need to be adjusted
1280 /// to account for nullability.
1281 static QualType getBaseMessageSendResultType(Sema &S,
1282                                              QualType ReceiverType,
1283                                              ObjCMethodDecl *Method,
1284                                              bool isClassMessage,
1285                                              bool isSuperMessage) {
1286   assert(Method && "Must have a method");
1287   if (!Method->hasRelatedResultType())
1288     return Method->getSendResultType(ReceiverType);
1289 
1290   ASTContext &Context = S.Context;
1291 
1292   // Local function that transfers the nullability of the method's
1293   // result type to the returned result.
1294   auto transferNullability = [&](QualType type) -> QualType {
1295     // If the method's result type has nullability, extract it.
1296     if (auto nullability = Method->getSendResultType(ReceiverType)
1297                              ->getNullability(Context)){
1298       // Strip off any outer nullability sugar from the provided type.
1299       (void)AttributedType::stripOuterNullability(type);
1300 
1301       // Form a new attributed type using the method result type's nullability.
1302       return Context.getAttributedType(
1303                AttributedType::getNullabilityAttrKind(*nullability),
1304                type,
1305                type);
1306     }
1307 
1308     return type;
1309   };
1310 
1311   // If a method has a related return type:
1312   //   - if the method found is an instance method, but the message send
1313   //     was a class message send, T is the declared return type of the method
1314   //     found
1315   if (Method->isInstanceMethod() && isClassMessage)
1316     return stripObjCInstanceType(Context,
1317                                  Method->getSendResultType(ReceiverType));
1318 
1319   //   - if the receiver is super, T is a pointer to the class of the
1320   //     enclosing method definition
1321   if (isSuperMessage) {
1322     if (ObjCMethodDecl *CurMethod = S.getCurMethodDecl())
1323       if (ObjCInterfaceDecl *Class = CurMethod->getClassInterface()) {
1324         return transferNullability(
1325                  Context.getObjCObjectPointerType(
1326                    Context.getObjCInterfaceType(Class)));
1327       }
1328   }
1329 
1330   //   - if the receiver is the name of a class U, T is a pointer to U
1331   if (ReceiverType->getAsObjCInterfaceType())
1332     return transferNullability(Context.getObjCObjectPointerType(ReceiverType));
1333   //   - if the receiver is of type Class or qualified Class type,
1334   //     T is the declared return type of the method.
1335   if (ReceiverType->isObjCClassType() ||
1336       ReceiverType->isObjCQualifiedClassType())
1337     return stripObjCInstanceType(Context,
1338                                  Method->getSendResultType(ReceiverType));
1339 
1340   //   - if the receiver is id, qualified id, Class, or qualified Class, T
1341   //     is the receiver type, otherwise
1342   //   - T is the type of the receiver expression.
1343   return transferNullability(ReceiverType);
1344 }
1345 
1346 QualType Sema::getMessageSendResultType(QualType ReceiverType,
1347                                         ObjCMethodDecl *Method,
1348                                         bool isClassMessage,
1349                                         bool isSuperMessage) {
1350   // Produce the result type.
1351   QualType resultType = getBaseMessageSendResultType(*this, ReceiverType,
1352                                                      Method,
1353                                                      isClassMessage,
1354                                                      isSuperMessage);
1355 
1356   // If this is a class message, ignore the nullability of the receiver.
1357   if (isClassMessage)
1358     return resultType;
1359 
1360   // Map the nullability of the result into a table index.
1361   unsigned receiverNullabilityIdx = 0;
1362   if (auto nullability = ReceiverType->getNullability(Context))
1363     receiverNullabilityIdx = 1 + static_cast<unsigned>(*nullability);
1364 
1365   unsigned resultNullabilityIdx = 0;
1366   if (auto nullability = resultType->getNullability(Context))
1367     resultNullabilityIdx = 1 + static_cast<unsigned>(*nullability);
1368 
1369   // The table of nullability mappings, indexed by the receiver's nullability
1370   // and then the result type's nullability.
1371   static const uint8_t None = 0;
1372   static const uint8_t NonNull = 1;
1373   static const uint8_t Nullable = 2;
1374   static const uint8_t Unspecified = 3;
1375   static const uint8_t nullabilityMap[4][4] = {
1376     //                  None        NonNull       Nullable    Unspecified
1377     /* None */        { None,       None,         Nullable,   None },
1378     /* NonNull */     { None,       NonNull,      Nullable,   Unspecified },
1379     /* Nullable */    { Nullable,   Nullable,     Nullable,   Nullable },
1380     /* Unspecified */ { None,       Unspecified,  Nullable,   Unspecified }
1381   };
1382 
1383   unsigned newResultNullabilityIdx
1384     = nullabilityMap[receiverNullabilityIdx][resultNullabilityIdx];
1385   if (newResultNullabilityIdx == resultNullabilityIdx)
1386     return resultType;
1387 
1388   // Strip off the existing nullability. This removes as little type sugar as
1389   // possible.
1390   do {
1391     if (auto attributed = dyn_cast<AttributedType>(resultType.getTypePtr())) {
1392       resultType = attributed->getModifiedType();
1393     } else {
1394       resultType = resultType.getDesugaredType(Context);
1395     }
1396   } while (resultType->getNullability(Context));
1397 
1398   // Add nullability back if needed.
1399   if (newResultNullabilityIdx > 0) {
1400     auto newNullability
1401       = static_cast<NullabilityKind>(newResultNullabilityIdx-1);
1402     return Context.getAttributedType(
1403              AttributedType::getNullabilityAttrKind(newNullability),
1404              resultType, resultType);
1405   }
1406 
1407   return resultType;
1408 }
1409 
1410 /// Look for an ObjC method whose result type exactly matches the given type.
1411 static const ObjCMethodDecl *
1412 findExplicitInstancetypeDeclarer(const ObjCMethodDecl *MD,
1413                                  QualType instancetype) {
1414   if (MD->getReturnType() == instancetype)
1415     return MD;
1416 
1417   // For these purposes, a method in an @implementation overrides a
1418   // declaration in the @interface.
1419   if (const ObjCImplDecl *impl =
1420         dyn_cast<ObjCImplDecl>(MD->getDeclContext())) {
1421     const ObjCContainerDecl *iface;
1422     if (const ObjCCategoryImplDecl *catImpl =
1423           dyn_cast<ObjCCategoryImplDecl>(impl)) {
1424       iface = catImpl->getCategoryDecl();
1425     } else {
1426       iface = impl->getClassInterface();
1427     }
1428 
1429     const ObjCMethodDecl *ifaceMD =
1430       iface->getMethod(MD->getSelector(), MD->isInstanceMethod());
1431     if (ifaceMD) return findExplicitInstancetypeDeclarer(ifaceMD, instancetype);
1432   }
1433 
1434   SmallVector<const ObjCMethodDecl *, 4> overrides;
1435   MD->getOverriddenMethods(overrides);
1436   for (unsigned i = 0, e = overrides.size(); i != e; ++i) {
1437     if (const ObjCMethodDecl *result =
1438           findExplicitInstancetypeDeclarer(overrides[i], instancetype))
1439       return result;
1440   }
1441 
1442   return nullptr;
1443 }
1444 
1445 void Sema::EmitRelatedResultTypeNoteForReturn(QualType destType) {
1446   // Only complain if we're in an ObjC method and the required return
1447   // type doesn't match the method's declared return type.
1448   ObjCMethodDecl *MD = dyn_cast<ObjCMethodDecl>(CurContext);
1449   if (!MD || !MD->hasRelatedResultType() ||
1450       Context.hasSameUnqualifiedType(destType, MD->getReturnType()))
1451     return;
1452 
1453   // Look for a method overridden by this method which explicitly uses
1454   // 'instancetype'.
1455   if (const ObjCMethodDecl *overridden =
1456         findExplicitInstancetypeDeclarer(MD, Context.getObjCInstanceType())) {
1457     SourceRange range = overridden->getReturnTypeSourceRange();
1458     SourceLocation loc = range.getBegin();
1459     if (loc.isInvalid())
1460       loc = overridden->getLocation();
1461     Diag(loc, diag::note_related_result_type_explicit)
1462       << /*current method*/ 1 << range;
1463     return;
1464   }
1465 
1466   // Otherwise, if we have an interesting method family, note that.
1467   // This should always trigger if the above didn't.
1468   if (ObjCMethodFamily family = MD->getMethodFamily())
1469     Diag(MD->getLocation(), diag::note_related_result_type_family)
1470       << /*current method*/ 1
1471       << family;
1472 }
1473 
1474 void Sema::EmitRelatedResultTypeNote(const Expr *E) {
1475   E = E->IgnoreParenImpCasts();
1476   const ObjCMessageExpr *MsgSend = dyn_cast<ObjCMessageExpr>(E);
1477   if (!MsgSend)
1478     return;
1479 
1480   const ObjCMethodDecl *Method = MsgSend->getMethodDecl();
1481   if (!Method)
1482     return;
1483 
1484   if (!Method->hasRelatedResultType())
1485     return;
1486 
1487   if (Context.hasSameUnqualifiedType(
1488           Method->getReturnType().getNonReferenceType(), MsgSend->getType()))
1489     return;
1490 
1491   if (!Context.hasSameUnqualifiedType(Method->getReturnType(),
1492                                       Context.getObjCInstanceType()))
1493     return;
1494 
1495   Diag(Method->getLocation(), diag::note_related_result_type_inferred)
1496     << Method->isInstanceMethod() << Method->getSelector()
1497     << MsgSend->getType();
1498 }
1499 
1500 bool Sema::CheckMessageArgumentTypes(QualType ReceiverType,
1501                                      MultiExprArg Args,
1502                                      Selector Sel,
1503                                      ArrayRef<SourceLocation> SelectorLocs,
1504                                      ObjCMethodDecl *Method,
1505                                      bool isClassMessage, bool isSuperMessage,
1506                                      SourceLocation lbrac, SourceLocation rbrac,
1507                                      SourceRange RecRange,
1508                                      QualType &ReturnType, ExprValueKind &VK) {
1509   SourceLocation SelLoc;
1510   if (!SelectorLocs.empty() && SelectorLocs.front().isValid())
1511     SelLoc = SelectorLocs.front();
1512   else
1513     SelLoc = lbrac;
1514 
1515   if (!Method) {
1516     // Apply default argument promotion as for (C99 6.5.2.2p6).
1517     for (unsigned i = 0, e = Args.size(); i != e; i++) {
1518       if (Args[i]->isTypeDependent())
1519         continue;
1520 
1521       ExprResult result;
1522       if (getLangOpts().DebuggerSupport) {
1523         QualType paramTy; // ignored
1524         result = checkUnknownAnyArg(SelLoc, Args[i], paramTy);
1525       } else {
1526         result = DefaultArgumentPromotion(Args[i]);
1527       }
1528       if (result.isInvalid())
1529         return true;
1530       Args[i] = result.get();
1531     }
1532 
1533     unsigned DiagID;
1534     if (getLangOpts().ObjCAutoRefCount)
1535       DiagID = diag::err_arc_method_not_found;
1536     else
1537       DiagID = isClassMessage ? diag::warn_class_method_not_found
1538                               : diag::warn_inst_method_not_found;
1539     if (!getLangOpts().DebuggerSupport) {
1540       const ObjCMethodDecl *OMD = SelectorsForTypoCorrection(Sel, ReceiverType);
1541       if (OMD && !OMD->isInvalidDecl()) {
1542         if (getLangOpts().ObjCAutoRefCount)
1543           DiagID = diag::err_method_not_found_with_typo;
1544         else
1545           DiagID = isClassMessage ? diag::warn_class_method_not_found_with_typo
1546                                   : diag::warn_instance_method_not_found_with_typo;
1547         Selector MatchedSel = OMD->getSelector();
1548         SourceRange SelectorRange(SelectorLocs.front(), SelectorLocs.back());
1549         if (MatchedSel.isUnarySelector())
1550           Diag(SelLoc, DiagID)
1551             << Sel<< isClassMessage << MatchedSel
1552             << FixItHint::CreateReplacement(SelectorRange, MatchedSel.getAsString());
1553         else
1554           Diag(SelLoc, DiagID) << Sel<< isClassMessage << MatchedSel;
1555       }
1556       else
1557         Diag(SelLoc, DiagID)
1558           << Sel << isClassMessage << SourceRange(SelectorLocs.front(),
1559                                                 SelectorLocs.back());
1560       // Find the class to which we are sending this message.
1561       if (ReceiverType->isObjCObjectPointerType()) {
1562         if (ObjCInterfaceDecl *ThisClass =
1563             ReceiverType->getAs<ObjCObjectPointerType>()->getInterfaceDecl()) {
1564           Diag(ThisClass->getLocation(), diag::note_receiver_class_declared);
1565           if (!RecRange.isInvalid())
1566             if (ThisClass->lookupClassMethod(Sel))
1567               Diag(RecRange.getBegin(),diag::note_receiver_expr_here)
1568                 << FixItHint::CreateReplacement(RecRange,
1569                                                 ThisClass->getNameAsString());
1570         }
1571       }
1572     }
1573 
1574     // In debuggers, we want to use __unknown_anytype for these
1575     // results so that clients can cast them.
1576     if (getLangOpts().DebuggerSupport) {
1577       ReturnType = Context.UnknownAnyTy;
1578     } else {
1579       ReturnType = Context.getObjCIdType();
1580     }
1581     VK = VK_RValue;
1582     return false;
1583   }
1584 
1585   ReturnType = getMessageSendResultType(ReceiverType, Method, isClassMessage,
1586                                         isSuperMessage);
1587   VK = Expr::getValueKindForType(Method->getReturnType());
1588 
1589   unsigned NumNamedArgs = Sel.getNumArgs();
1590   // Method might have more arguments than selector indicates. This is due
1591   // to addition of c-style arguments in method.
1592   if (Method->param_size() > Sel.getNumArgs())
1593     NumNamedArgs = Method->param_size();
1594   // FIXME. This need be cleaned up.
1595   if (Args.size() < NumNamedArgs) {
1596     Diag(SelLoc, diag::err_typecheck_call_too_few_args)
1597       << 2 << NumNamedArgs << static_cast<unsigned>(Args.size());
1598     return false;
1599   }
1600 
1601   // Compute the set of type arguments to be substituted into each parameter
1602   // type.
1603   Optional<ArrayRef<QualType>> typeArgs
1604     = ReceiverType->getObjCSubstitutions(Method->getDeclContext());
1605   bool IsError = false;
1606   for (unsigned i = 0; i < NumNamedArgs; i++) {
1607     // We can't do any type-checking on a type-dependent argument.
1608     if (Args[i]->isTypeDependent())
1609       continue;
1610 
1611     Expr *argExpr = Args[i];
1612 
1613     ParmVarDecl *param = Method->parameters()[i];
1614     assert(argExpr && "CheckMessageArgumentTypes(): missing expression");
1615 
1616     if (param->hasAttr<NoEscapeAttr>())
1617       if (auto *BE = dyn_cast<BlockExpr>(
1618               argExpr->IgnoreParenNoopCasts(Context)))
1619         BE->getBlockDecl()->setDoesNotEscape();
1620 
1621     // Strip the unbridged-cast placeholder expression off unless it's
1622     // a consumed argument.
1623     if (argExpr->hasPlaceholderType(BuiltinType::ARCUnbridgedCast) &&
1624         !param->hasAttr<CFConsumedAttr>())
1625       argExpr = stripARCUnbridgedCast(argExpr);
1626 
1627     // If the parameter is __unknown_anytype, infer its type
1628     // from the argument.
1629     if (param->getType() == Context.UnknownAnyTy) {
1630       QualType paramType;
1631       ExprResult argE = checkUnknownAnyArg(SelLoc, argExpr, paramType);
1632       if (argE.isInvalid()) {
1633         IsError = true;
1634       } else {
1635         Args[i] = argE.get();
1636 
1637         // Update the parameter type in-place.
1638         param->setType(paramType);
1639       }
1640       continue;
1641     }
1642 
1643     QualType origParamType = param->getType();
1644     QualType paramType = param->getType();
1645     if (typeArgs)
1646       paramType = paramType.substObjCTypeArgs(
1647                     Context,
1648                     *typeArgs,
1649                     ObjCSubstitutionContext::Parameter);
1650 
1651     if (RequireCompleteType(argExpr->getSourceRange().getBegin(),
1652                             paramType,
1653                             diag::err_call_incomplete_argument, argExpr))
1654       return true;
1655 
1656     InitializedEntity Entity
1657       = InitializedEntity::InitializeParameter(Context, param, paramType);
1658     ExprResult ArgE = PerformCopyInitialization(Entity, SourceLocation(), argExpr);
1659     if (ArgE.isInvalid())
1660       IsError = true;
1661     else {
1662       Args[i] = ArgE.getAs<Expr>();
1663 
1664       // If we are type-erasing a block to a block-compatible
1665       // Objective-C pointer type, we may need to extend the lifetime
1666       // of the block object.
1667       if (typeArgs && Args[i]->isRValue() && paramType->isBlockPointerType() &&
1668           Args[i]->getType()->isBlockPointerType() &&
1669           origParamType->isObjCObjectPointerType()) {
1670         ExprResult arg = Args[i];
1671         maybeExtendBlockObject(arg);
1672         Args[i] = arg.get();
1673       }
1674     }
1675   }
1676 
1677   // Promote additional arguments to variadic methods.
1678   if (Method->isVariadic()) {
1679     for (unsigned i = NumNamedArgs, e = Args.size(); i < e; ++i) {
1680       if (Args[i]->isTypeDependent())
1681         continue;
1682 
1683       ExprResult Arg = DefaultVariadicArgumentPromotion(Args[i], VariadicMethod,
1684                                                         nullptr);
1685       IsError |= Arg.isInvalid();
1686       Args[i] = Arg.get();
1687     }
1688   } else {
1689     // Check for extra arguments to non-variadic methods.
1690     if (Args.size() != NumNamedArgs) {
1691       Diag(Args[NumNamedArgs]->getLocStart(),
1692            diag::err_typecheck_call_too_many_args)
1693         << 2 /*method*/ << NumNamedArgs << static_cast<unsigned>(Args.size())
1694         << Method->getSourceRange()
1695         << SourceRange(Args[NumNamedArgs]->getLocStart(),
1696                        Args.back()->getLocEnd());
1697     }
1698   }
1699 
1700   DiagnoseSentinelCalls(Method, SelLoc, Args);
1701 
1702   // Do additional checkings on method.
1703   IsError |= CheckObjCMethodCall(
1704       Method, SelLoc, makeArrayRef(Args.data(), Args.size()));
1705 
1706   return IsError;
1707 }
1708 
1709 bool Sema::isSelfExpr(Expr *RExpr) {
1710   // 'self' is objc 'self' in an objc method only.
1711   ObjCMethodDecl *Method =
1712       dyn_cast_or_null<ObjCMethodDecl>(CurContext->getNonClosureAncestor());
1713   return isSelfExpr(RExpr, Method);
1714 }
1715 
1716 bool Sema::isSelfExpr(Expr *receiver, const ObjCMethodDecl *method) {
1717   if (!method) return false;
1718 
1719   receiver = receiver->IgnoreParenLValueCasts();
1720   if (DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(receiver))
1721     if (DRE->getDecl() == method->getSelfDecl())
1722       return true;
1723   return false;
1724 }
1725 
1726 /// LookupMethodInType - Look up a method in an ObjCObjectType.
1727 ObjCMethodDecl *Sema::LookupMethodInObjectType(Selector sel, QualType type,
1728                                                bool isInstance) {
1729   const ObjCObjectType *objType = type->castAs<ObjCObjectType>();
1730   if (ObjCInterfaceDecl *iface = objType->getInterface()) {
1731     // Look it up in the main interface (and categories, etc.)
1732     if (ObjCMethodDecl *method = iface->lookupMethod(sel, isInstance))
1733       return method;
1734 
1735     // Okay, look for "private" methods declared in any
1736     // @implementations we've seen.
1737     if (ObjCMethodDecl *method = iface->lookupPrivateMethod(sel, isInstance))
1738       return method;
1739   }
1740 
1741   // Check qualifiers.
1742   for (const auto *I : objType->quals())
1743     if (ObjCMethodDecl *method = I->lookupMethod(sel, isInstance))
1744       return method;
1745 
1746   return nullptr;
1747 }
1748 
1749 /// LookupMethodInQualifiedType - Lookups up a method in protocol qualifier
1750 /// list of a qualified objective pointer type.
1751 ObjCMethodDecl *Sema::LookupMethodInQualifiedType(Selector Sel,
1752                                               const ObjCObjectPointerType *OPT,
1753                                               bool Instance)
1754 {
1755   ObjCMethodDecl *MD = nullptr;
1756   for (const auto *PROTO : OPT->quals()) {
1757     if ((MD = PROTO->lookupMethod(Sel, Instance))) {
1758       return MD;
1759     }
1760   }
1761   return nullptr;
1762 }
1763 
1764 /// HandleExprPropertyRefExpr - Handle foo.bar where foo is a pointer to an
1765 /// objective C interface.  This is a property reference expression.
1766 ExprResult Sema::
1767 HandleExprPropertyRefExpr(const ObjCObjectPointerType *OPT,
1768                           Expr *BaseExpr, SourceLocation OpLoc,
1769                           DeclarationName MemberName,
1770                           SourceLocation MemberLoc,
1771                           SourceLocation SuperLoc, QualType SuperType,
1772                           bool Super) {
1773   const ObjCInterfaceType *IFaceT = OPT->getInterfaceType();
1774   ObjCInterfaceDecl *IFace = IFaceT->getDecl();
1775 
1776   if (!MemberName.isIdentifier()) {
1777     Diag(MemberLoc, diag::err_invalid_property_name)
1778       << MemberName << QualType(OPT, 0);
1779     return ExprError();
1780   }
1781 
1782   IdentifierInfo *Member = MemberName.getAsIdentifierInfo();
1783 
1784   SourceRange BaseRange = Super? SourceRange(SuperLoc)
1785                                : BaseExpr->getSourceRange();
1786   if (RequireCompleteType(MemberLoc, OPT->getPointeeType(),
1787                           diag::err_property_not_found_forward_class,
1788                           MemberName, BaseRange))
1789     return ExprError();
1790 
1791   if (ObjCPropertyDecl *PD = IFace->FindPropertyDeclaration(
1792           Member, ObjCPropertyQueryKind::OBJC_PR_query_instance)) {
1793     // Check whether we can reference this property.
1794     if (DiagnoseUseOfDecl(PD, MemberLoc))
1795       return ExprError();
1796     if (Super)
1797       return new (Context)
1798           ObjCPropertyRefExpr(PD, Context.PseudoObjectTy, VK_LValue,
1799                               OK_ObjCProperty, MemberLoc, SuperLoc, SuperType);
1800     else
1801       return new (Context)
1802           ObjCPropertyRefExpr(PD, Context.PseudoObjectTy, VK_LValue,
1803                               OK_ObjCProperty, MemberLoc, BaseExpr);
1804   }
1805   // Check protocols on qualified interfaces.
1806   for (const auto *I : OPT->quals())
1807     if (ObjCPropertyDecl *PD = I->FindPropertyDeclaration(
1808             Member, ObjCPropertyQueryKind::OBJC_PR_query_instance)) {
1809       // Check whether we can reference this property.
1810       if (DiagnoseUseOfDecl(PD, MemberLoc))
1811         return ExprError();
1812 
1813       if (Super)
1814         return new (Context) ObjCPropertyRefExpr(
1815             PD, Context.PseudoObjectTy, VK_LValue, OK_ObjCProperty, MemberLoc,
1816             SuperLoc, SuperType);
1817       else
1818         return new (Context)
1819             ObjCPropertyRefExpr(PD, Context.PseudoObjectTy, VK_LValue,
1820                                 OK_ObjCProperty, MemberLoc, BaseExpr);
1821     }
1822   // If that failed, look for an "implicit" property by seeing if the nullary
1823   // selector is implemented.
1824 
1825   // FIXME: The logic for looking up nullary and unary selectors should be
1826   // shared with the code in ActOnInstanceMessage.
1827 
1828   Selector Sel = PP.getSelectorTable().getNullarySelector(Member);
1829   ObjCMethodDecl *Getter = IFace->lookupInstanceMethod(Sel);
1830 
1831   // May be found in property's qualified list.
1832   if (!Getter)
1833     Getter = LookupMethodInQualifiedType(Sel, OPT, true);
1834 
1835   // If this reference is in an @implementation, check for 'private' methods.
1836   if (!Getter)
1837     Getter = IFace->lookupPrivateMethod(Sel);
1838 
1839   if (Getter) {
1840     // Check if we can reference this property.
1841     if (DiagnoseUseOfDecl(Getter, MemberLoc))
1842       return ExprError();
1843   }
1844   // If we found a getter then this may be a valid dot-reference, we
1845   // will look for the matching setter, in case it is needed.
1846   Selector SetterSel =
1847     SelectorTable::constructSetterSelector(PP.getIdentifierTable(),
1848                                            PP.getSelectorTable(), Member);
1849   ObjCMethodDecl *Setter = IFace->lookupInstanceMethod(SetterSel);
1850 
1851   // May be found in property's qualified list.
1852   if (!Setter)
1853     Setter = LookupMethodInQualifiedType(SetterSel, OPT, true);
1854 
1855   if (!Setter) {
1856     // If this reference is in an @implementation, also check for 'private'
1857     // methods.
1858     Setter = IFace->lookupPrivateMethod(SetterSel);
1859   }
1860 
1861   if (Setter && DiagnoseUseOfDecl(Setter, MemberLoc))
1862     return ExprError();
1863 
1864   // Special warning if member name used in a property-dot for a setter accessor
1865   // does not use a property with same name; e.g. obj.X = ... for a property with
1866   // name 'x'.
1867   if (Setter && Setter->isImplicit() && Setter->isPropertyAccessor() &&
1868       !IFace->FindPropertyDeclaration(
1869           Member, ObjCPropertyQueryKind::OBJC_PR_query_instance)) {
1870       if (const ObjCPropertyDecl *PDecl = Setter->findPropertyDecl()) {
1871         // Do not warn if user is using property-dot syntax to make call to
1872         // user named setter.
1873         if (!(PDecl->getPropertyAttributes() & ObjCPropertyDecl::OBJC_PR_setter))
1874           Diag(MemberLoc,
1875                diag::warn_property_access_suggest)
1876           << MemberName << QualType(OPT, 0) << PDecl->getName()
1877           << FixItHint::CreateReplacement(MemberLoc, PDecl->getName());
1878       }
1879   }
1880 
1881   if (Getter || Setter) {
1882     if (Super)
1883       return new (Context)
1884           ObjCPropertyRefExpr(Getter, Setter, Context.PseudoObjectTy, VK_LValue,
1885                               OK_ObjCProperty, MemberLoc, SuperLoc, SuperType);
1886     else
1887       return new (Context)
1888           ObjCPropertyRefExpr(Getter, Setter, Context.PseudoObjectTy, VK_LValue,
1889                               OK_ObjCProperty, MemberLoc, BaseExpr);
1890 
1891   }
1892 
1893   // Attempt to correct for typos in property names.
1894   if (TypoCorrection Corrected =
1895           CorrectTypo(DeclarationNameInfo(MemberName, MemberLoc),
1896                       LookupOrdinaryName, nullptr, nullptr,
1897                       llvm::make_unique<DeclFilterCCC<ObjCPropertyDecl>>(),
1898                       CTK_ErrorRecovery, IFace, false, OPT)) {
1899     DeclarationName TypoResult = Corrected.getCorrection();
1900     if (TypoResult.isIdentifier() &&
1901         TypoResult.getAsIdentifierInfo() == Member) {
1902       // There is no need to try the correction if it is the same.
1903       NamedDecl *ChosenDecl =
1904         Corrected.isKeyword() ? nullptr : Corrected.getFoundDecl();
1905       if (ChosenDecl && isa<ObjCPropertyDecl>(ChosenDecl))
1906         if (cast<ObjCPropertyDecl>(ChosenDecl)->isClassProperty()) {
1907           // This is a class property, we should not use the instance to
1908           // access it.
1909           Diag(MemberLoc, diag::err_class_property_found) << MemberName
1910           << OPT->getInterfaceDecl()->getName()
1911           << FixItHint::CreateReplacement(BaseExpr->getSourceRange(),
1912                                           OPT->getInterfaceDecl()->getName());
1913           return ExprError();
1914         }
1915     } else {
1916       diagnoseTypo(Corrected, PDiag(diag::err_property_not_found_suggest)
1917                                 << MemberName << QualType(OPT, 0));
1918       return HandleExprPropertyRefExpr(OPT, BaseExpr, OpLoc,
1919                                        TypoResult, MemberLoc,
1920                                        SuperLoc, SuperType, Super);
1921     }
1922   }
1923   ObjCInterfaceDecl *ClassDeclared;
1924   if (ObjCIvarDecl *Ivar =
1925       IFace->lookupInstanceVariable(Member, ClassDeclared)) {
1926     QualType T = Ivar->getType();
1927     if (const ObjCObjectPointerType * OBJPT =
1928         T->getAsObjCInterfacePointerType()) {
1929       if (RequireCompleteType(MemberLoc, OBJPT->getPointeeType(),
1930                               diag::err_property_not_as_forward_class,
1931                               MemberName, BaseExpr))
1932         return ExprError();
1933     }
1934     Diag(MemberLoc,
1935          diag::err_ivar_access_using_property_syntax_suggest)
1936     << MemberName << QualType(OPT, 0) << Ivar->getDeclName()
1937     << FixItHint::CreateReplacement(OpLoc, "->");
1938     return ExprError();
1939   }
1940 
1941   Diag(MemberLoc, diag::err_property_not_found)
1942     << MemberName << QualType(OPT, 0);
1943   if (Setter)
1944     Diag(Setter->getLocation(), diag::note_getter_unavailable)
1945           << MemberName << BaseExpr->getSourceRange();
1946   return ExprError();
1947 }
1948 
1949 ExprResult Sema::
1950 ActOnClassPropertyRefExpr(IdentifierInfo &receiverName,
1951                           IdentifierInfo &propertyName,
1952                           SourceLocation receiverNameLoc,
1953                           SourceLocation propertyNameLoc) {
1954 
1955   IdentifierInfo *receiverNamePtr = &receiverName;
1956   ObjCInterfaceDecl *IFace = getObjCInterfaceDecl(receiverNamePtr,
1957                                                   receiverNameLoc);
1958 
1959   QualType SuperType;
1960   if (!IFace) {
1961     // If the "receiver" is 'super' in a method, handle it as an expression-like
1962     // property reference.
1963     if (receiverNamePtr->isStr("super")) {
1964       if (ObjCMethodDecl *CurMethod = tryCaptureObjCSelf(receiverNameLoc)) {
1965         if (auto classDecl = CurMethod->getClassInterface()) {
1966           SuperType = QualType(classDecl->getSuperClassType(), 0);
1967           if (CurMethod->isInstanceMethod()) {
1968             if (SuperType.isNull()) {
1969               // The current class does not have a superclass.
1970               Diag(receiverNameLoc, diag::err_root_class_cannot_use_super)
1971                 << CurMethod->getClassInterface()->getIdentifier();
1972               return ExprError();
1973             }
1974             QualType T = Context.getObjCObjectPointerType(SuperType);
1975 
1976             return HandleExprPropertyRefExpr(T->castAs<ObjCObjectPointerType>(),
1977                                              /*BaseExpr*/nullptr,
1978                                              SourceLocation()/*OpLoc*/,
1979                                              &propertyName,
1980                                              propertyNameLoc,
1981                                              receiverNameLoc, T, true);
1982           }
1983 
1984           // Otherwise, if this is a class method, try dispatching to our
1985           // superclass.
1986           IFace = CurMethod->getClassInterface()->getSuperClass();
1987         }
1988       }
1989     }
1990 
1991     if (!IFace) {
1992       Diag(receiverNameLoc, diag::err_expected_either) << tok::identifier
1993                                                        << tok::l_paren;
1994       return ExprError();
1995     }
1996   }
1997 
1998   Selector GetterSel;
1999   Selector SetterSel;
2000   if (auto PD = IFace->FindPropertyDeclaration(
2001           &propertyName, ObjCPropertyQueryKind::OBJC_PR_query_class)) {
2002     GetterSel = PD->getGetterName();
2003     SetterSel = PD->getSetterName();
2004   } else {
2005     GetterSel = PP.getSelectorTable().getNullarySelector(&propertyName);
2006     SetterSel = SelectorTable::constructSetterSelector(
2007         PP.getIdentifierTable(), PP.getSelectorTable(), &propertyName);
2008   }
2009 
2010   // Search for a declared property first.
2011   ObjCMethodDecl *Getter = IFace->lookupClassMethod(GetterSel);
2012 
2013   // If this reference is in an @implementation, check for 'private' methods.
2014   if (!Getter)
2015     Getter = IFace->lookupPrivateClassMethod(GetterSel);
2016 
2017   if (Getter) {
2018     // FIXME: refactor/share with ActOnMemberReference().
2019     // Check if we can reference this property.
2020     if (DiagnoseUseOfDecl(Getter, propertyNameLoc))
2021       return ExprError();
2022   }
2023 
2024   // Look for the matching setter, in case it is needed.
2025   ObjCMethodDecl *Setter = IFace->lookupClassMethod(SetterSel);
2026   if (!Setter) {
2027     // If this reference is in an @implementation, also check for 'private'
2028     // methods.
2029     Setter = IFace->lookupPrivateClassMethod(SetterSel);
2030   }
2031   // Look through local category implementations associated with the class.
2032   if (!Setter)
2033     Setter = IFace->getCategoryClassMethod(SetterSel);
2034 
2035   if (Setter && DiagnoseUseOfDecl(Setter, propertyNameLoc))
2036     return ExprError();
2037 
2038   if (Getter || Setter) {
2039     if (!SuperType.isNull())
2040       return new (Context)
2041           ObjCPropertyRefExpr(Getter, Setter, Context.PseudoObjectTy, VK_LValue,
2042                               OK_ObjCProperty, propertyNameLoc, receiverNameLoc,
2043                               SuperType);
2044 
2045     return new (Context) ObjCPropertyRefExpr(
2046         Getter, Setter, Context.PseudoObjectTy, VK_LValue, OK_ObjCProperty,
2047         propertyNameLoc, receiverNameLoc, IFace);
2048   }
2049   return ExprError(Diag(propertyNameLoc, diag::err_property_not_found)
2050                      << &propertyName << Context.getObjCInterfaceType(IFace));
2051 }
2052 
2053 namespace {
2054 
2055 class ObjCInterfaceOrSuperCCC : public CorrectionCandidateCallback {
2056  public:
2057   ObjCInterfaceOrSuperCCC(ObjCMethodDecl *Method) {
2058     // Determine whether "super" is acceptable in the current context.
2059     if (Method && Method->getClassInterface())
2060       WantObjCSuper = Method->getClassInterface()->getSuperClass();
2061   }
2062 
2063   bool ValidateCandidate(const TypoCorrection &candidate) override {
2064     return candidate.getCorrectionDeclAs<ObjCInterfaceDecl>() ||
2065         candidate.isKeyword("super");
2066   }
2067 };
2068 
2069 } // end anonymous namespace
2070 
2071 Sema::ObjCMessageKind Sema::getObjCMessageKind(Scope *S,
2072                                                IdentifierInfo *Name,
2073                                                SourceLocation NameLoc,
2074                                                bool IsSuper,
2075                                                bool HasTrailingDot,
2076                                                ParsedType &ReceiverType) {
2077   ReceiverType = nullptr;
2078 
2079   // If the identifier is "super" and there is no trailing dot, we're
2080   // messaging super. If the identifier is "super" and there is a
2081   // trailing dot, it's an instance message.
2082   if (IsSuper && S->isInObjcMethodScope())
2083     return HasTrailingDot? ObjCInstanceMessage : ObjCSuperMessage;
2084 
2085   LookupResult Result(*this, Name, NameLoc, LookupOrdinaryName);
2086   LookupName(Result, S);
2087 
2088   switch (Result.getResultKind()) {
2089   case LookupResult::NotFound:
2090     // Normal name lookup didn't find anything. If we're in an
2091     // Objective-C method, look for ivars. If we find one, we're done!
2092     // FIXME: This is a hack. Ivar lookup should be part of normal
2093     // lookup.
2094     if (ObjCMethodDecl *Method = getCurMethodDecl()) {
2095       if (!Method->getClassInterface()) {
2096         // Fall back: let the parser try to parse it as an instance message.
2097         return ObjCInstanceMessage;
2098       }
2099 
2100       ObjCInterfaceDecl *ClassDeclared;
2101       if (Method->getClassInterface()->lookupInstanceVariable(Name,
2102                                                               ClassDeclared))
2103         return ObjCInstanceMessage;
2104     }
2105 
2106     // Break out; we'll perform typo correction below.
2107     break;
2108 
2109   case LookupResult::NotFoundInCurrentInstantiation:
2110   case LookupResult::FoundOverloaded:
2111   case LookupResult::FoundUnresolvedValue:
2112   case LookupResult::Ambiguous:
2113     Result.suppressDiagnostics();
2114     return ObjCInstanceMessage;
2115 
2116   case LookupResult::Found: {
2117     // If the identifier is a class or not, and there is a trailing dot,
2118     // it's an instance message.
2119     if (HasTrailingDot)
2120       return ObjCInstanceMessage;
2121     // We found something. If it's a type, then we have a class
2122     // message. Otherwise, it's an instance message.
2123     NamedDecl *ND = Result.getFoundDecl();
2124     QualType T;
2125     if (ObjCInterfaceDecl *Class = dyn_cast<ObjCInterfaceDecl>(ND))
2126       T = Context.getObjCInterfaceType(Class);
2127     else if (TypeDecl *Type = dyn_cast<TypeDecl>(ND)) {
2128       T = Context.getTypeDeclType(Type);
2129       DiagnoseUseOfDecl(Type, NameLoc);
2130     }
2131     else
2132       return ObjCInstanceMessage;
2133 
2134     //  We have a class message, and T is the type we're
2135     //  messaging. Build source-location information for it.
2136     TypeSourceInfo *TSInfo = Context.getTrivialTypeSourceInfo(T, NameLoc);
2137     ReceiverType = CreateParsedType(T, TSInfo);
2138     return ObjCClassMessage;
2139   }
2140   }
2141 
2142   if (TypoCorrection Corrected = CorrectTypo(
2143           Result.getLookupNameInfo(), Result.getLookupKind(), S, nullptr,
2144           llvm::make_unique<ObjCInterfaceOrSuperCCC>(getCurMethodDecl()),
2145           CTK_ErrorRecovery, nullptr, false, nullptr, false)) {
2146     if (Corrected.isKeyword()) {
2147       // If we've found the keyword "super" (the only keyword that would be
2148       // returned by CorrectTypo), this is a send to super.
2149       diagnoseTypo(Corrected,
2150                    PDiag(diag::err_unknown_receiver_suggest) << Name);
2151       return ObjCSuperMessage;
2152     } else if (ObjCInterfaceDecl *Class =
2153                    Corrected.getCorrectionDeclAs<ObjCInterfaceDecl>()) {
2154       // If we found a declaration, correct when it refers to an Objective-C
2155       // class.
2156       diagnoseTypo(Corrected,
2157                    PDiag(diag::err_unknown_receiver_suggest) << Name);
2158       QualType T = Context.getObjCInterfaceType(Class);
2159       TypeSourceInfo *TSInfo = Context.getTrivialTypeSourceInfo(T, NameLoc);
2160       ReceiverType = CreateParsedType(T, TSInfo);
2161       return ObjCClassMessage;
2162     }
2163   }
2164 
2165   // Fall back: let the parser try to parse it as an instance message.
2166   return ObjCInstanceMessage;
2167 }
2168 
2169 ExprResult Sema::ActOnSuperMessage(Scope *S,
2170                                    SourceLocation SuperLoc,
2171                                    Selector Sel,
2172                                    SourceLocation LBracLoc,
2173                                    ArrayRef<SourceLocation> SelectorLocs,
2174                                    SourceLocation RBracLoc,
2175                                    MultiExprArg Args) {
2176   // Determine whether we are inside a method or not.
2177   ObjCMethodDecl *Method = tryCaptureObjCSelf(SuperLoc);
2178   if (!Method) {
2179     Diag(SuperLoc, diag::err_invalid_receiver_to_message_super);
2180     return ExprError();
2181   }
2182 
2183   ObjCInterfaceDecl *Class = Method->getClassInterface();
2184   if (!Class) {
2185     Diag(SuperLoc, diag::err_no_super_class_message)
2186       << Method->getDeclName();
2187     return ExprError();
2188   }
2189 
2190   QualType SuperTy(Class->getSuperClassType(), 0);
2191   if (SuperTy.isNull()) {
2192     // The current class does not have a superclass.
2193     Diag(SuperLoc, diag::err_root_class_cannot_use_super)
2194       << Class->getIdentifier();
2195     return ExprError();
2196   }
2197 
2198   // We are in a method whose class has a superclass, so 'super'
2199   // is acting as a keyword.
2200   if (Method->getSelector() == Sel)
2201     getCurFunction()->ObjCShouldCallSuper = false;
2202 
2203   if (Method->isInstanceMethod()) {
2204     // Since we are in an instance method, this is an instance
2205     // message to the superclass instance.
2206     SuperTy = Context.getObjCObjectPointerType(SuperTy);
2207     return BuildInstanceMessage(nullptr, SuperTy, SuperLoc,
2208                                 Sel, /*Method=*/nullptr,
2209                                 LBracLoc, SelectorLocs, RBracLoc, Args);
2210   }
2211 
2212   // Since we are in a class method, this is a class message to
2213   // the superclass.
2214   return BuildClassMessage(/*ReceiverTypeInfo=*/nullptr,
2215                            SuperTy,
2216                            SuperLoc, Sel, /*Method=*/nullptr,
2217                            LBracLoc, SelectorLocs, RBracLoc, Args);
2218 }
2219 
2220 ExprResult Sema::BuildClassMessageImplicit(QualType ReceiverType,
2221                                            bool isSuperReceiver,
2222                                            SourceLocation Loc,
2223                                            Selector Sel,
2224                                            ObjCMethodDecl *Method,
2225                                            MultiExprArg Args) {
2226   TypeSourceInfo *receiverTypeInfo = nullptr;
2227   if (!ReceiverType.isNull())
2228     receiverTypeInfo = Context.getTrivialTypeSourceInfo(ReceiverType);
2229 
2230   return BuildClassMessage(receiverTypeInfo, ReceiverType,
2231                           /*SuperLoc=*/isSuperReceiver ? Loc : SourceLocation(),
2232                            Sel, Method, Loc, Loc, Loc, Args,
2233                            /*isImplicit=*/true);
2234 }
2235 
2236 static void applyCocoaAPICheck(Sema &S, const ObjCMessageExpr *Msg,
2237                                unsigned DiagID,
2238                                bool (*refactor)(const ObjCMessageExpr *,
2239                                               const NSAPI &, edit::Commit &)) {
2240   SourceLocation MsgLoc = Msg->getExprLoc();
2241   if (S.Diags.isIgnored(DiagID, MsgLoc))
2242     return;
2243 
2244   SourceManager &SM = S.SourceMgr;
2245   edit::Commit ECommit(SM, S.LangOpts);
2246   if (refactor(Msg,*S.NSAPIObj, ECommit)) {
2247     DiagnosticBuilder Builder = S.Diag(MsgLoc, DiagID)
2248                         << Msg->getSelector() << Msg->getSourceRange();
2249     // FIXME: Don't emit diagnostic at all if fixits are non-commitable.
2250     if (!ECommit.isCommitable())
2251       return;
2252     for (edit::Commit::edit_iterator
2253            I = ECommit.edit_begin(), E = ECommit.edit_end(); I != E; ++I) {
2254       const edit::Commit::Edit &Edit = *I;
2255       switch (Edit.Kind) {
2256       case edit::Commit::Act_Insert:
2257         Builder.AddFixItHint(FixItHint::CreateInsertion(Edit.OrigLoc,
2258                                                         Edit.Text,
2259                                                         Edit.BeforePrev));
2260         break;
2261       case edit::Commit::Act_InsertFromRange:
2262         Builder.AddFixItHint(
2263             FixItHint::CreateInsertionFromRange(Edit.OrigLoc,
2264                                                 Edit.getInsertFromRange(SM),
2265                                                 Edit.BeforePrev));
2266         break;
2267       case edit::Commit::Act_Remove:
2268         Builder.AddFixItHint(FixItHint::CreateRemoval(Edit.getFileRange(SM)));
2269         break;
2270       }
2271     }
2272   }
2273 }
2274 
2275 static void checkCocoaAPI(Sema &S, const ObjCMessageExpr *Msg) {
2276   applyCocoaAPICheck(S, Msg, diag::warn_objc_redundant_literal_use,
2277                      edit::rewriteObjCRedundantCallWithLiteral);
2278 }
2279 
2280 static void checkFoundationAPI(Sema &S, SourceLocation Loc,
2281                                const ObjCMethodDecl *Method,
2282                                ArrayRef<Expr *> Args, QualType ReceiverType,
2283                                bool IsClassObjectCall) {
2284   // Check if this is a performSelector method that uses a selector that returns
2285   // a record or a vector type.
2286   if (Method->getSelector().getMethodFamily() != OMF_performSelector ||
2287       Args.empty())
2288     return;
2289   const auto *SE = dyn_cast<ObjCSelectorExpr>(Args[0]->IgnoreParens());
2290   if (!SE)
2291     return;
2292   ObjCMethodDecl *ImpliedMethod;
2293   if (!IsClassObjectCall) {
2294     const auto *OPT = ReceiverType->getAs<ObjCObjectPointerType>();
2295     if (!OPT || !OPT->getInterfaceDecl())
2296       return;
2297     ImpliedMethod =
2298         OPT->getInterfaceDecl()->lookupInstanceMethod(SE->getSelector());
2299     if (!ImpliedMethod)
2300       ImpliedMethod =
2301           OPT->getInterfaceDecl()->lookupPrivateMethod(SE->getSelector());
2302   } else {
2303     const auto *IT = ReceiverType->getAs<ObjCInterfaceType>();
2304     if (!IT)
2305       return;
2306     ImpliedMethod = IT->getDecl()->lookupClassMethod(SE->getSelector());
2307     if (!ImpliedMethod)
2308       ImpliedMethod =
2309           IT->getDecl()->lookupPrivateClassMethod(SE->getSelector());
2310   }
2311   if (!ImpliedMethod)
2312     return;
2313   QualType Ret = ImpliedMethod->getReturnType();
2314   if (Ret->isRecordType() || Ret->isVectorType() || Ret->isExtVectorType()) {
2315     QualType Ret = ImpliedMethod->getReturnType();
2316     S.Diag(Loc, diag::warn_objc_unsafe_perform_selector)
2317         << Method->getSelector()
2318         << (!Ret->isRecordType()
2319                 ? /*Vector*/ 2
2320                 : Ret->isUnionType() ? /*Union*/ 1 : /*Struct*/ 0);
2321     S.Diag(ImpliedMethod->getLocStart(),
2322            diag::note_objc_unsafe_perform_selector_method_declared_here)
2323         << ImpliedMethod->getSelector() << Ret;
2324   }
2325 }
2326 
2327 /// \brief Diagnose use of %s directive in an NSString which is being passed
2328 /// as formatting string to formatting method.
2329 static void
2330 DiagnoseCStringFormatDirectiveInObjCAPI(Sema &S,
2331                                         ObjCMethodDecl *Method,
2332                                         Selector Sel,
2333                                         Expr **Args, unsigned NumArgs) {
2334   unsigned Idx = 0;
2335   bool Format = false;
2336   ObjCStringFormatFamily SFFamily = Sel.getStringFormatFamily();
2337   if (SFFamily == ObjCStringFormatFamily::SFF_NSString) {
2338     Idx = 0;
2339     Format = true;
2340   }
2341   else if (Method) {
2342     for (const auto *I : Method->specific_attrs<FormatAttr>()) {
2343       if (S.GetFormatNSStringIdx(I, Idx)) {
2344         Format = true;
2345         break;
2346       }
2347     }
2348   }
2349   if (!Format || NumArgs <= Idx)
2350     return;
2351 
2352   Expr *FormatExpr = Args[Idx];
2353   if (ObjCStringLiteral *OSL =
2354       dyn_cast<ObjCStringLiteral>(FormatExpr->IgnoreParenImpCasts())) {
2355     StringLiteral *FormatString = OSL->getString();
2356     if (S.FormatStringHasSArg(FormatString)) {
2357       S.Diag(FormatExpr->getExprLoc(), diag::warn_objc_cdirective_format_string)
2358         << "%s" << 0 << 0;
2359       if (Method)
2360         S.Diag(Method->getLocation(), diag::note_method_declared_at)
2361           << Method->getDeclName();
2362     }
2363   }
2364 }
2365 
2366 /// \brief Build an Objective-C class message expression.
2367 ///
2368 /// This routine takes care of both normal class messages and
2369 /// class messages to the superclass.
2370 ///
2371 /// \param ReceiverTypeInfo Type source information that describes the
2372 /// receiver of this message. This may be NULL, in which case we are
2373 /// sending to the superclass and \p SuperLoc must be a valid source
2374 /// location.
2375 
2376 /// \param ReceiverType The type of the object receiving the
2377 /// message. When \p ReceiverTypeInfo is non-NULL, this is the same
2378 /// type as that refers to. For a superclass send, this is the type of
2379 /// the superclass.
2380 ///
2381 /// \param SuperLoc The location of the "super" keyword in a
2382 /// superclass message.
2383 ///
2384 /// \param Sel The selector to which the message is being sent.
2385 ///
2386 /// \param Method The method that this class message is invoking, if
2387 /// already known.
2388 ///
2389 /// \param LBracLoc The location of the opening square bracket ']'.
2390 ///
2391 /// \param RBracLoc The location of the closing square bracket ']'.
2392 ///
2393 /// \param ArgsIn The message arguments.
2394 ExprResult Sema::BuildClassMessage(TypeSourceInfo *ReceiverTypeInfo,
2395                                    QualType ReceiverType,
2396                                    SourceLocation SuperLoc,
2397                                    Selector Sel,
2398                                    ObjCMethodDecl *Method,
2399                                    SourceLocation LBracLoc,
2400                                    ArrayRef<SourceLocation> SelectorLocs,
2401                                    SourceLocation RBracLoc,
2402                                    MultiExprArg ArgsIn,
2403                                    bool isImplicit) {
2404   SourceLocation Loc = SuperLoc.isValid()? SuperLoc
2405     : ReceiverTypeInfo->getTypeLoc().getSourceRange().getBegin();
2406   if (LBracLoc.isInvalid()) {
2407     Diag(Loc, diag::err_missing_open_square_message_send)
2408       << FixItHint::CreateInsertion(Loc, "[");
2409     LBracLoc = Loc;
2410   }
2411   SourceLocation SelLoc;
2412   if (!SelectorLocs.empty() && SelectorLocs.front().isValid())
2413     SelLoc = SelectorLocs.front();
2414   else
2415     SelLoc = Loc;
2416 
2417   if (ReceiverType->isDependentType()) {
2418     // If the receiver type is dependent, we can't type-check anything
2419     // at this point. Build a dependent expression.
2420     unsigned NumArgs = ArgsIn.size();
2421     Expr **Args = ArgsIn.data();
2422     assert(SuperLoc.isInvalid() && "Message to super with dependent type");
2423     return ObjCMessageExpr::Create(
2424         Context, ReceiverType, VK_RValue, LBracLoc, ReceiverTypeInfo, Sel,
2425         SelectorLocs, /*Method=*/nullptr, makeArrayRef(Args, NumArgs), RBracLoc,
2426         isImplicit);
2427   }
2428 
2429   // Find the class to which we are sending this message.
2430   ObjCInterfaceDecl *Class = nullptr;
2431   const ObjCObjectType *ClassType = ReceiverType->getAs<ObjCObjectType>();
2432   if (!ClassType || !(Class = ClassType->getInterface())) {
2433     Diag(Loc, diag::err_invalid_receiver_class_message)
2434       << ReceiverType;
2435     return ExprError();
2436   }
2437   assert(Class && "We don't know which class we're messaging?");
2438   // objc++ diagnoses during typename annotation.
2439   if (!getLangOpts().CPlusPlus)
2440     (void)DiagnoseUseOfDecl(Class, SelLoc);
2441   // Find the method we are messaging.
2442   if (!Method) {
2443     SourceRange TypeRange
2444       = SuperLoc.isValid()? SourceRange(SuperLoc)
2445                           : ReceiverTypeInfo->getTypeLoc().getSourceRange();
2446     if (RequireCompleteType(Loc, Context.getObjCInterfaceType(Class),
2447                             (getLangOpts().ObjCAutoRefCount
2448                                ? diag::err_arc_receiver_forward_class
2449                                : diag::warn_receiver_forward_class),
2450                             TypeRange)) {
2451       // A forward class used in messaging is treated as a 'Class'
2452       Method = LookupFactoryMethodInGlobalPool(Sel,
2453                                                SourceRange(LBracLoc, RBracLoc));
2454       if (Method && !getLangOpts().ObjCAutoRefCount)
2455         Diag(Method->getLocation(), diag::note_method_sent_forward_class)
2456           << Method->getDeclName();
2457     }
2458     if (!Method)
2459       Method = Class->lookupClassMethod(Sel);
2460 
2461     // If we have an implementation in scope, check "private" methods.
2462     if (!Method)
2463       Method = Class->lookupPrivateClassMethod(Sel);
2464 
2465     if (Method && DiagnoseUseOfDecl(Method, SelLoc))
2466       return ExprError();
2467   }
2468 
2469   // Check the argument types and determine the result type.
2470   QualType ReturnType;
2471   ExprValueKind VK = VK_RValue;
2472 
2473   unsigned NumArgs = ArgsIn.size();
2474   Expr **Args = ArgsIn.data();
2475   if (CheckMessageArgumentTypes(ReceiverType, MultiExprArg(Args, NumArgs),
2476                                 Sel, SelectorLocs,
2477                                 Method, true,
2478                                 SuperLoc.isValid(), LBracLoc, RBracLoc,
2479                                 SourceRange(),
2480                                 ReturnType, VK))
2481     return ExprError();
2482 
2483   if (Method && !Method->getReturnType()->isVoidType() &&
2484       RequireCompleteType(LBracLoc, Method->getReturnType(),
2485                           diag::err_illegal_message_expr_incomplete_type))
2486     return ExprError();
2487 
2488   // Warn about explicit call of +initialize on its own class. But not on 'super'.
2489   if (Method && Method->getMethodFamily() == OMF_initialize) {
2490     if (!SuperLoc.isValid()) {
2491       const ObjCInterfaceDecl *ID =
2492         dyn_cast<ObjCInterfaceDecl>(Method->getDeclContext());
2493       if (ID == Class) {
2494         Diag(Loc, diag::warn_direct_initialize_call);
2495         Diag(Method->getLocation(), diag::note_method_declared_at)
2496           << Method->getDeclName();
2497       }
2498     }
2499     else if (ObjCMethodDecl *CurMeth = getCurMethodDecl()) {
2500       // [super initialize] is allowed only within an +initialize implementation
2501       if (CurMeth->getMethodFamily() != OMF_initialize) {
2502         Diag(Loc, diag::warn_direct_super_initialize_call);
2503         Diag(Method->getLocation(), diag::note_method_declared_at)
2504           << Method->getDeclName();
2505         Diag(CurMeth->getLocation(), diag::note_method_declared_at)
2506         << CurMeth->getDeclName();
2507       }
2508     }
2509   }
2510 
2511   DiagnoseCStringFormatDirectiveInObjCAPI(*this, Method, Sel, Args, NumArgs);
2512 
2513   // Construct the appropriate ObjCMessageExpr.
2514   ObjCMessageExpr *Result;
2515   if (SuperLoc.isValid())
2516     Result = ObjCMessageExpr::Create(Context, ReturnType, VK, LBracLoc,
2517                                      SuperLoc, /*IsInstanceSuper=*/false,
2518                                      ReceiverType, Sel, SelectorLocs,
2519                                      Method, makeArrayRef(Args, NumArgs),
2520                                      RBracLoc, isImplicit);
2521   else {
2522     Result = ObjCMessageExpr::Create(Context, ReturnType, VK, LBracLoc,
2523                                      ReceiverTypeInfo, Sel, SelectorLocs,
2524                                      Method, makeArrayRef(Args, NumArgs),
2525                                      RBracLoc, isImplicit);
2526     if (!isImplicit)
2527       checkCocoaAPI(*this, Result);
2528   }
2529   if (Method)
2530     checkFoundationAPI(*this, SelLoc, Method, makeArrayRef(Args, NumArgs),
2531                        ReceiverType, /*IsClassObjectCall=*/true);
2532   return MaybeBindToTemporary(Result);
2533 }
2534 
2535 // ActOnClassMessage - used for both unary and keyword messages.
2536 // ArgExprs is optional - if it is present, the number of expressions
2537 // is obtained from Sel.getNumArgs().
2538 ExprResult Sema::ActOnClassMessage(Scope *S,
2539                                    ParsedType Receiver,
2540                                    Selector Sel,
2541                                    SourceLocation LBracLoc,
2542                                    ArrayRef<SourceLocation> SelectorLocs,
2543                                    SourceLocation RBracLoc,
2544                                    MultiExprArg Args) {
2545   TypeSourceInfo *ReceiverTypeInfo;
2546   QualType ReceiverType = GetTypeFromParser(Receiver, &ReceiverTypeInfo);
2547   if (ReceiverType.isNull())
2548     return ExprError();
2549 
2550   if (!ReceiverTypeInfo)
2551     ReceiverTypeInfo = Context.getTrivialTypeSourceInfo(ReceiverType, LBracLoc);
2552 
2553   return BuildClassMessage(ReceiverTypeInfo, ReceiverType,
2554                            /*SuperLoc=*/SourceLocation(), Sel,
2555                            /*Method=*/nullptr, LBracLoc, SelectorLocs, RBracLoc,
2556                            Args);
2557 }
2558 
2559 ExprResult Sema::BuildInstanceMessageImplicit(Expr *Receiver,
2560                                               QualType ReceiverType,
2561                                               SourceLocation Loc,
2562                                               Selector Sel,
2563                                               ObjCMethodDecl *Method,
2564                                               MultiExprArg Args) {
2565   return BuildInstanceMessage(Receiver, ReceiverType,
2566                               /*SuperLoc=*/!Receiver ? Loc : SourceLocation(),
2567                               Sel, Method, Loc, Loc, Loc, Args,
2568                               /*isImplicit=*/true);
2569 }
2570 
2571 static bool isMethodDeclaredInRootProtocol(Sema &S, const ObjCMethodDecl *M) {
2572   if (!S.NSAPIObj)
2573     return false;
2574   const auto *Protocol = dyn_cast<ObjCProtocolDecl>(M->getDeclContext());
2575   if (!Protocol)
2576     return false;
2577   const IdentifierInfo *II = S.NSAPIObj->getNSClassId(NSAPI::ClassId_NSObject);
2578   if (const auto *RootClass = dyn_cast_or_null<ObjCInterfaceDecl>(
2579           S.LookupSingleName(S.TUScope, II, Protocol->getLocStart(),
2580                              Sema::LookupOrdinaryName))) {
2581     for (const ObjCProtocolDecl *P : RootClass->all_referenced_protocols()) {
2582       if (P->getCanonicalDecl() == Protocol->getCanonicalDecl())
2583         return true;
2584     }
2585   }
2586   return false;
2587 }
2588 
2589 /// \brief Build an Objective-C instance message expression.
2590 ///
2591 /// This routine takes care of both normal instance messages and
2592 /// instance messages to the superclass instance.
2593 ///
2594 /// \param Receiver The expression that computes the object that will
2595 /// receive this message. This may be empty, in which case we are
2596 /// sending to the superclass instance and \p SuperLoc must be a valid
2597 /// source location.
2598 ///
2599 /// \param ReceiverType The (static) type of the object receiving the
2600 /// message. When a \p Receiver expression is provided, this is the
2601 /// same type as that expression. For a superclass instance send, this
2602 /// is a pointer to the type of the superclass.
2603 ///
2604 /// \param SuperLoc The location of the "super" keyword in a
2605 /// superclass instance message.
2606 ///
2607 /// \param Sel The selector to which the message is being sent.
2608 ///
2609 /// \param Method The method that this instance message is invoking, if
2610 /// already known.
2611 ///
2612 /// \param LBracLoc The location of the opening square bracket ']'.
2613 ///
2614 /// \param RBracLoc The location of the closing square bracket ']'.
2615 ///
2616 /// \param ArgsIn The message arguments.
2617 ExprResult Sema::BuildInstanceMessage(Expr *Receiver,
2618                                       QualType ReceiverType,
2619                                       SourceLocation SuperLoc,
2620                                       Selector Sel,
2621                                       ObjCMethodDecl *Method,
2622                                       SourceLocation LBracLoc,
2623                                       ArrayRef<SourceLocation> SelectorLocs,
2624                                       SourceLocation RBracLoc,
2625                                       MultiExprArg ArgsIn,
2626                                       bool isImplicit) {
2627   assert((Receiver || SuperLoc.isValid()) && "If the Receiver is null, the "
2628                                              "SuperLoc must be valid so we can "
2629                                              "use it instead.");
2630 
2631   // The location of the receiver.
2632   SourceLocation Loc = SuperLoc.isValid()? SuperLoc : Receiver->getLocStart();
2633   SourceRange RecRange =
2634       SuperLoc.isValid()? SuperLoc : Receiver->getSourceRange();
2635   SourceLocation SelLoc;
2636   if (!SelectorLocs.empty() && SelectorLocs.front().isValid())
2637     SelLoc = SelectorLocs.front();
2638   else
2639     SelLoc = Loc;
2640 
2641   if (LBracLoc.isInvalid()) {
2642     Diag(Loc, diag::err_missing_open_square_message_send)
2643       << FixItHint::CreateInsertion(Loc, "[");
2644     LBracLoc = Loc;
2645   }
2646 
2647   // If we have a receiver expression, perform appropriate promotions
2648   // and determine receiver type.
2649   if (Receiver) {
2650     if (Receiver->hasPlaceholderType()) {
2651       ExprResult Result;
2652       if (Receiver->getType() == Context.UnknownAnyTy)
2653         Result = forceUnknownAnyToType(Receiver, Context.getObjCIdType());
2654       else
2655         Result = CheckPlaceholderExpr(Receiver);
2656       if (Result.isInvalid()) return ExprError();
2657       Receiver = Result.get();
2658     }
2659 
2660     if (Receiver->isTypeDependent()) {
2661       // If the receiver is type-dependent, we can't type-check anything
2662       // at this point. Build a dependent expression.
2663       unsigned NumArgs = ArgsIn.size();
2664       Expr **Args = ArgsIn.data();
2665       assert(SuperLoc.isInvalid() && "Message to super with dependent type");
2666       return ObjCMessageExpr::Create(
2667           Context, Context.DependentTy, VK_RValue, LBracLoc, Receiver, Sel,
2668           SelectorLocs, /*Method=*/nullptr, makeArrayRef(Args, NumArgs),
2669           RBracLoc, isImplicit);
2670     }
2671 
2672     // If necessary, apply function/array conversion to the receiver.
2673     // C99 6.7.5.3p[7,8].
2674     ExprResult Result = DefaultFunctionArrayLvalueConversion(Receiver);
2675     if (Result.isInvalid())
2676       return ExprError();
2677     Receiver = Result.get();
2678     ReceiverType = Receiver->getType();
2679 
2680     // If the receiver is an ObjC pointer, a block pointer, or an
2681     // __attribute__((NSObject)) pointer, we don't need to do any
2682     // special conversion in order to look up a receiver.
2683     if (ReceiverType->isObjCRetainableType()) {
2684       // do nothing
2685     } else if (!getLangOpts().ObjCAutoRefCount &&
2686                !Context.getObjCIdType().isNull() &&
2687                (ReceiverType->isPointerType() ||
2688                 ReceiverType->isIntegerType())) {
2689       // Implicitly convert integers and pointers to 'id' but emit a warning.
2690       // But not in ARC.
2691       Diag(Loc, diag::warn_bad_receiver_type)
2692         << ReceiverType
2693         << Receiver->getSourceRange();
2694       if (ReceiverType->isPointerType()) {
2695         Receiver = ImpCastExprToType(Receiver, Context.getObjCIdType(),
2696                                      CK_CPointerToObjCPointerCast).get();
2697       } else {
2698         // TODO: specialized warning on null receivers?
2699         bool IsNull = Receiver->isNullPointerConstant(Context,
2700                                               Expr::NPC_ValueDependentIsNull);
2701         CastKind Kind = IsNull ? CK_NullToPointer : CK_IntegralToPointer;
2702         Receiver = ImpCastExprToType(Receiver, Context.getObjCIdType(),
2703                                      Kind).get();
2704       }
2705       ReceiverType = Receiver->getType();
2706     } else if (getLangOpts().CPlusPlus) {
2707       // The receiver must be a complete type.
2708       if (RequireCompleteType(Loc, Receiver->getType(),
2709                               diag::err_incomplete_receiver_type))
2710         return ExprError();
2711 
2712       ExprResult result = PerformContextuallyConvertToObjCPointer(Receiver);
2713       if (result.isUsable()) {
2714         Receiver = result.get();
2715         ReceiverType = Receiver->getType();
2716       }
2717     }
2718   }
2719 
2720   if (ReceiverType->isObjCIdType() && !isImplicit)
2721     Diag(Receiver->getExprLoc(), diag::warn_messaging_unqualified_id);
2722 
2723   // There's a somewhat weird interaction here where we assume that we
2724   // won't actually have a method unless we also don't need to do some
2725   // of the more detailed type-checking on the receiver.
2726 
2727   if (!Method) {
2728     // Handle messages to id and __kindof types (where we use the
2729     // global method pool).
2730     const ObjCObjectType *typeBound = nullptr;
2731     bool receiverIsIdLike = ReceiverType->isObjCIdOrObjectKindOfType(Context,
2732                                                                      typeBound);
2733     if (receiverIsIdLike || ReceiverType->isBlockPointerType() ||
2734         (Receiver && Context.isObjCNSObjectType(Receiver->getType()))) {
2735       SmallVector<ObjCMethodDecl*, 4> Methods;
2736       // If we have a type bound, further filter the methods.
2737       CollectMultipleMethodsInGlobalPool(Sel, Methods, true/*InstanceFirst*/,
2738                                          true/*CheckTheOther*/, typeBound);
2739       if (!Methods.empty()) {
2740         // We choose the first method as the initial candidate, then try to
2741         // select a better one.
2742         Method = Methods[0];
2743 
2744         if (ObjCMethodDecl *BestMethod =
2745             SelectBestMethod(Sel, ArgsIn, Method->isInstanceMethod(), Methods))
2746           Method = BestMethod;
2747 
2748         if (!AreMultipleMethodsInGlobalPool(Sel, Method,
2749                                             SourceRange(LBracLoc, RBracLoc),
2750                                             receiverIsIdLike, Methods))
2751            DiagnoseUseOfDecl(Method, SelLoc);
2752       }
2753     } else if (ReceiverType->isObjCClassOrClassKindOfType() ||
2754                ReceiverType->isObjCQualifiedClassType()) {
2755       // Handle messages to Class.
2756       // We allow sending a message to a qualified Class ("Class<foo>"), which
2757       // is ok as long as one of the protocols implements the selector (if not,
2758       // warn).
2759       if (!ReceiverType->isObjCClassOrClassKindOfType()) {
2760         const ObjCObjectPointerType *QClassTy
2761           = ReceiverType->getAsObjCQualifiedClassType();
2762         // Search protocols for class methods.
2763         Method = LookupMethodInQualifiedType(Sel, QClassTy, false);
2764         if (!Method) {
2765           Method = LookupMethodInQualifiedType(Sel, QClassTy, true);
2766           // warn if instance method found for a Class message.
2767           if (Method && !isMethodDeclaredInRootProtocol(*this, Method)) {
2768             Diag(SelLoc, diag::warn_instance_method_on_class_found)
2769               << Method->getSelector() << Sel;
2770             Diag(Method->getLocation(), diag::note_method_declared_at)
2771               << Method->getDeclName();
2772           }
2773         }
2774       } else {
2775         if (ObjCMethodDecl *CurMeth = getCurMethodDecl()) {
2776           if (ObjCInterfaceDecl *ClassDecl = CurMeth->getClassInterface()) {
2777             // First check the public methods in the class interface.
2778             Method = ClassDecl->lookupClassMethod(Sel);
2779 
2780             if (!Method)
2781               Method = ClassDecl->lookupPrivateClassMethod(Sel);
2782           }
2783           if (Method && DiagnoseUseOfDecl(Method, SelLoc))
2784             return ExprError();
2785         }
2786         if (!Method) {
2787           // If not messaging 'self', look for any factory method named 'Sel'.
2788           if (!Receiver || !isSelfExpr(Receiver)) {
2789             // If no class (factory) method was found, check if an _instance_
2790             // method of the same name exists in the root class only.
2791             SmallVector<ObjCMethodDecl*, 4> Methods;
2792             CollectMultipleMethodsInGlobalPool(Sel, Methods,
2793                                                false/*InstanceFirst*/,
2794                                                true/*CheckTheOther*/);
2795             if (!Methods.empty()) {
2796               // We choose the first method as the initial candidate, then try
2797               // to select a better one.
2798               Method = Methods[0];
2799 
2800               // If we find an instance method, emit waring.
2801               if (Method->isInstanceMethod()) {
2802                 if (const ObjCInterfaceDecl *ID =
2803                     dyn_cast<ObjCInterfaceDecl>(Method->getDeclContext())) {
2804                   if (ID->getSuperClass())
2805                     Diag(SelLoc, diag::warn_root_inst_method_not_found)
2806                         << Sel << SourceRange(LBracLoc, RBracLoc);
2807                 }
2808               }
2809 
2810              if (ObjCMethodDecl *BestMethod =
2811                  SelectBestMethod(Sel, ArgsIn, Method->isInstanceMethod(),
2812                                   Methods))
2813                Method = BestMethod;
2814             }
2815           }
2816         }
2817       }
2818     } else {
2819       ObjCInterfaceDecl *ClassDecl = nullptr;
2820 
2821       // We allow sending a message to a qualified ID ("id<foo>"), which is ok as
2822       // long as one of the protocols implements the selector (if not, warn).
2823       // And as long as message is not deprecated/unavailable (warn if it is).
2824       if (const ObjCObjectPointerType *QIdTy
2825                                    = ReceiverType->getAsObjCQualifiedIdType()) {
2826         // Search protocols for instance methods.
2827         Method = LookupMethodInQualifiedType(Sel, QIdTy, true);
2828         if (!Method)
2829           Method = LookupMethodInQualifiedType(Sel, QIdTy, false);
2830         if (Method && DiagnoseUseOfDecl(Method, SelLoc))
2831           return ExprError();
2832       } else if (const ObjCObjectPointerType *OCIType
2833                    = ReceiverType->getAsObjCInterfacePointerType()) {
2834         // We allow sending a message to a pointer to an interface (an object).
2835         ClassDecl = OCIType->getInterfaceDecl();
2836 
2837         // Try to complete the type. Under ARC, this is a hard error from which
2838         // we don't try to recover.
2839         // FIXME: In the non-ARC case, this will still be a hard error if the
2840         // definition is found in a module that's not visible.
2841         const ObjCInterfaceDecl *forwardClass = nullptr;
2842         if (RequireCompleteType(Loc, OCIType->getPointeeType(),
2843               getLangOpts().ObjCAutoRefCount
2844                 ? diag::err_arc_receiver_forward_instance
2845                 : diag::warn_receiver_forward_instance,
2846                                 Receiver? Receiver->getSourceRange()
2847                                         : SourceRange(SuperLoc))) {
2848           if (getLangOpts().ObjCAutoRefCount)
2849             return ExprError();
2850 
2851           forwardClass = OCIType->getInterfaceDecl();
2852           Diag(Receiver ? Receiver->getLocStart()
2853                         : SuperLoc, diag::note_receiver_is_id);
2854           Method = nullptr;
2855         } else {
2856           Method = ClassDecl->lookupInstanceMethod(Sel);
2857         }
2858 
2859         if (!Method)
2860           // Search protocol qualifiers.
2861           Method = LookupMethodInQualifiedType(Sel, OCIType, true);
2862 
2863         if (!Method) {
2864           // If we have implementations in scope, check "private" methods.
2865           Method = ClassDecl->lookupPrivateMethod(Sel);
2866 
2867           if (!Method && getLangOpts().ObjCAutoRefCount) {
2868             Diag(SelLoc, diag::err_arc_may_not_respond)
2869               << OCIType->getPointeeType() << Sel << RecRange
2870               << SourceRange(SelectorLocs.front(), SelectorLocs.back());
2871             return ExprError();
2872           }
2873 
2874           if (!Method && (!Receiver || !isSelfExpr(Receiver))) {
2875             // If we still haven't found a method, look in the global pool. This
2876             // behavior isn't very desirable, however we need it for GCC
2877             // compatibility. FIXME: should we deviate??
2878             if (OCIType->qual_empty()) {
2879               SmallVector<ObjCMethodDecl*, 4> Methods;
2880               CollectMultipleMethodsInGlobalPool(Sel, Methods,
2881                                                  true/*InstanceFirst*/,
2882                                                  false/*CheckTheOther*/);
2883               if (!Methods.empty()) {
2884                 // We choose the first method as the initial candidate, then try
2885                 // to select a better one.
2886                 Method = Methods[0];
2887 
2888                 if (ObjCMethodDecl *BestMethod =
2889                     SelectBestMethod(Sel, ArgsIn, Method->isInstanceMethod(),
2890                                      Methods))
2891                   Method = BestMethod;
2892 
2893                 AreMultipleMethodsInGlobalPool(Sel, Method,
2894                                                SourceRange(LBracLoc, RBracLoc),
2895                                                true/*receiverIdOrClass*/,
2896                                                Methods);
2897               }
2898               if (Method && !forwardClass)
2899                 Diag(SelLoc, diag::warn_maynot_respond)
2900                   << OCIType->getInterfaceDecl()->getIdentifier()
2901                   << Sel << RecRange;
2902             }
2903           }
2904         }
2905         if (Method && DiagnoseUseOfDecl(Method, SelLoc, forwardClass))
2906           return ExprError();
2907       } else {
2908         // Reject other random receiver types (e.g. structs).
2909         Diag(Loc, diag::err_bad_receiver_type)
2910           << ReceiverType << Receiver->getSourceRange();
2911         return ExprError();
2912       }
2913     }
2914   }
2915 
2916   FunctionScopeInfo *DIFunctionScopeInfo =
2917     (Method && Method->getMethodFamily() == OMF_init)
2918       ? getEnclosingFunction() : nullptr;
2919 
2920   if (DIFunctionScopeInfo &&
2921       DIFunctionScopeInfo->ObjCIsDesignatedInit &&
2922       (SuperLoc.isValid() || isSelfExpr(Receiver))) {
2923     bool isDesignatedInitChain = false;
2924     if (SuperLoc.isValid()) {
2925       if (const ObjCObjectPointerType *
2926             OCIType = ReceiverType->getAsObjCInterfacePointerType()) {
2927         if (const ObjCInterfaceDecl *ID = OCIType->getInterfaceDecl()) {
2928           // Either we know this is a designated initializer or we
2929           // conservatively assume it because we don't know for sure.
2930           if (!ID->declaresOrInheritsDesignatedInitializers() ||
2931               ID->isDesignatedInitializer(Sel)) {
2932             isDesignatedInitChain = true;
2933             DIFunctionScopeInfo->ObjCWarnForNoDesignatedInitChain = false;
2934           }
2935         }
2936       }
2937     }
2938     if (!isDesignatedInitChain) {
2939       const ObjCMethodDecl *InitMethod = nullptr;
2940       bool isDesignated =
2941         getCurMethodDecl()->isDesignatedInitializerForTheInterface(&InitMethod);
2942       assert(isDesignated && InitMethod);
2943       (void)isDesignated;
2944       Diag(SelLoc, SuperLoc.isValid() ?
2945              diag::warn_objc_designated_init_non_designated_init_call :
2946              diag::warn_objc_designated_init_non_super_designated_init_call);
2947       Diag(InitMethod->getLocation(),
2948            diag::note_objc_designated_init_marked_here);
2949     }
2950   }
2951 
2952   if (DIFunctionScopeInfo &&
2953       DIFunctionScopeInfo->ObjCIsSecondaryInit &&
2954       (SuperLoc.isValid() || isSelfExpr(Receiver))) {
2955     if (SuperLoc.isValid()) {
2956       Diag(SelLoc, diag::warn_objc_secondary_init_super_init_call);
2957     } else {
2958       DIFunctionScopeInfo->ObjCWarnForNoInitDelegation = false;
2959     }
2960   }
2961 
2962   // Check the message arguments.
2963   unsigned NumArgs = ArgsIn.size();
2964   Expr **Args = ArgsIn.data();
2965   QualType ReturnType;
2966   ExprValueKind VK = VK_RValue;
2967   bool ClassMessage = (ReceiverType->isObjCClassType() ||
2968                        ReceiverType->isObjCQualifiedClassType());
2969   if (CheckMessageArgumentTypes(ReceiverType, MultiExprArg(Args, NumArgs),
2970                                 Sel, SelectorLocs, Method,
2971                                 ClassMessage, SuperLoc.isValid(),
2972                                 LBracLoc, RBracLoc, RecRange, ReturnType, VK))
2973     return ExprError();
2974 
2975   if (Method && !Method->getReturnType()->isVoidType() &&
2976       RequireCompleteType(LBracLoc, Method->getReturnType(),
2977                           diag::err_illegal_message_expr_incomplete_type))
2978     return ExprError();
2979 
2980   // In ARC, forbid the user from sending messages to
2981   // retain/release/autorelease/dealloc/retainCount explicitly.
2982   if (getLangOpts().ObjCAutoRefCount) {
2983     ObjCMethodFamily family =
2984       (Method ? Method->getMethodFamily() : Sel.getMethodFamily());
2985     switch (family) {
2986     case OMF_init:
2987       if (Method)
2988         checkInitMethod(Method, ReceiverType);
2989       break;
2990 
2991     case OMF_None:
2992     case OMF_alloc:
2993     case OMF_copy:
2994     case OMF_finalize:
2995     case OMF_mutableCopy:
2996     case OMF_new:
2997     case OMF_self:
2998     case OMF_initialize:
2999       break;
3000 
3001     case OMF_dealloc:
3002     case OMF_retain:
3003     case OMF_release:
3004     case OMF_autorelease:
3005     case OMF_retainCount:
3006       Diag(SelLoc, diag::err_arc_illegal_explicit_message)
3007         << Sel << RecRange;
3008       break;
3009 
3010     case OMF_performSelector:
3011       if (Method && NumArgs >= 1) {
3012         if (const auto *SelExp =
3013                 dyn_cast<ObjCSelectorExpr>(Args[0]->IgnoreParens())) {
3014           Selector ArgSel = SelExp->getSelector();
3015           ObjCMethodDecl *SelMethod =
3016             LookupInstanceMethodInGlobalPool(ArgSel,
3017                                              SelExp->getSourceRange());
3018           if (!SelMethod)
3019             SelMethod =
3020               LookupFactoryMethodInGlobalPool(ArgSel,
3021                                               SelExp->getSourceRange());
3022           if (SelMethod) {
3023             ObjCMethodFamily SelFamily = SelMethod->getMethodFamily();
3024             switch (SelFamily) {
3025               case OMF_alloc:
3026               case OMF_copy:
3027               case OMF_mutableCopy:
3028               case OMF_new:
3029               case OMF_init:
3030                 // Issue error, unless ns_returns_not_retained.
3031                 if (!SelMethod->hasAttr<NSReturnsNotRetainedAttr>()) {
3032                   // selector names a +1 method
3033                   Diag(SelLoc,
3034                        diag::err_arc_perform_selector_retains);
3035                   Diag(SelMethod->getLocation(), diag::note_method_declared_at)
3036                     << SelMethod->getDeclName();
3037                 }
3038                 break;
3039               default:
3040                 // +0 call. OK. unless ns_returns_retained.
3041                 if (SelMethod->hasAttr<NSReturnsRetainedAttr>()) {
3042                   // selector names a +1 method
3043                   Diag(SelLoc,
3044                        diag::err_arc_perform_selector_retains);
3045                   Diag(SelMethod->getLocation(), diag::note_method_declared_at)
3046                     << SelMethod->getDeclName();
3047                 }
3048                 break;
3049             }
3050           }
3051         } else {
3052           // error (may leak).
3053           Diag(SelLoc, diag::warn_arc_perform_selector_leaks);
3054           Diag(Args[0]->getExprLoc(), diag::note_used_here);
3055         }
3056       }
3057       break;
3058     }
3059   }
3060 
3061   DiagnoseCStringFormatDirectiveInObjCAPI(*this, Method, Sel, Args, NumArgs);
3062 
3063   // Construct the appropriate ObjCMessageExpr instance.
3064   ObjCMessageExpr *Result;
3065   if (SuperLoc.isValid())
3066     Result = ObjCMessageExpr::Create(Context, ReturnType, VK, LBracLoc,
3067                                      SuperLoc,  /*IsInstanceSuper=*/true,
3068                                      ReceiverType, Sel, SelectorLocs, Method,
3069                                      makeArrayRef(Args, NumArgs), RBracLoc,
3070                                      isImplicit);
3071   else {
3072     Result = ObjCMessageExpr::Create(Context, ReturnType, VK, LBracLoc,
3073                                      Receiver, Sel, SelectorLocs, Method,
3074                                      makeArrayRef(Args, NumArgs), RBracLoc,
3075                                      isImplicit);
3076     if (!isImplicit)
3077       checkCocoaAPI(*this, Result);
3078   }
3079   if (Method) {
3080     bool IsClassObjectCall = ClassMessage;
3081     // 'self' message receivers in class methods should be treated as message
3082     // sends to the class object in order for the semantic checks to be
3083     // performed correctly. Messages to 'super' already count as class messages,
3084     // so they don't need to be handled here.
3085     if (Receiver && isSelfExpr(Receiver)) {
3086       if (const auto *OPT = ReceiverType->getAs<ObjCObjectPointerType>()) {
3087         if (OPT->getObjectType()->isObjCClass()) {
3088           if (const auto *CurMeth = getCurMethodDecl()) {
3089             IsClassObjectCall = true;
3090             ReceiverType =
3091                 Context.getObjCInterfaceType(CurMeth->getClassInterface());
3092           }
3093         }
3094       }
3095     }
3096     checkFoundationAPI(*this, SelLoc, Method, makeArrayRef(Args, NumArgs),
3097                        ReceiverType, IsClassObjectCall);
3098   }
3099 
3100   if (getLangOpts().ObjCAutoRefCount) {
3101     // In ARC, annotate delegate init calls.
3102     if (Result->getMethodFamily() == OMF_init &&
3103         (SuperLoc.isValid() || isSelfExpr(Receiver))) {
3104       // Only consider init calls *directly* in init implementations,
3105       // not within blocks.
3106       ObjCMethodDecl *method = dyn_cast<ObjCMethodDecl>(CurContext);
3107       if (method && method->getMethodFamily() == OMF_init) {
3108         // The implicit assignment to self means we also don't want to
3109         // consume the result.
3110         Result->setDelegateInitCall(true);
3111         return Result;
3112       }
3113     }
3114 
3115     // In ARC, check for message sends which are likely to introduce
3116     // retain cycles.
3117     checkRetainCycles(Result);
3118   }
3119 
3120   if (getLangOpts().ObjCWeak) {
3121     if (!isImplicit && Method) {
3122       if (const ObjCPropertyDecl *Prop = Method->findPropertyDecl()) {
3123         bool IsWeak =
3124           Prop->getPropertyAttributes() & ObjCPropertyDecl::OBJC_PR_weak;
3125         if (!IsWeak && Sel.isUnarySelector())
3126           IsWeak = ReturnType.getObjCLifetime() & Qualifiers::OCL_Weak;
3127         if (IsWeak &&
3128             !Diags.isIgnored(diag::warn_arc_repeated_use_of_weak, LBracLoc))
3129           getCurFunction()->recordUseOfWeak(Result, Prop);
3130       }
3131     }
3132   }
3133 
3134   CheckObjCCircularContainer(Result);
3135 
3136   return MaybeBindToTemporary(Result);
3137 }
3138 
3139 static void RemoveSelectorFromWarningCache(Sema &S, Expr* Arg) {
3140   if (ObjCSelectorExpr *OSE =
3141       dyn_cast<ObjCSelectorExpr>(Arg->IgnoreParenCasts())) {
3142     Selector Sel = OSE->getSelector();
3143     SourceLocation Loc = OSE->getAtLoc();
3144     auto Pos = S.ReferencedSelectors.find(Sel);
3145     if (Pos != S.ReferencedSelectors.end() && Pos->second == Loc)
3146       S.ReferencedSelectors.erase(Pos);
3147   }
3148 }
3149 
3150 // ActOnInstanceMessage - used for both unary and keyword messages.
3151 // ArgExprs is optional - if it is present, the number of expressions
3152 // is obtained from Sel.getNumArgs().
3153 ExprResult Sema::ActOnInstanceMessage(Scope *S,
3154                                       Expr *Receiver,
3155                                       Selector Sel,
3156                                       SourceLocation LBracLoc,
3157                                       ArrayRef<SourceLocation> SelectorLocs,
3158                                       SourceLocation RBracLoc,
3159                                       MultiExprArg Args) {
3160   if (!Receiver)
3161     return ExprError();
3162 
3163   // A ParenListExpr can show up while doing error recovery with invalid code.
3164   if (isa<ParenListExpr>(Receiver)) {
3165     ExprResult Result = MaybeConvertParenListExprToParenExpr(S, Receiver);
3166     if (Result.isInvalid()) return ExprError();
3167     Receiver = Result.get();
3168   }
3169 
3170   if (RespondsToSelectorSel.isNull()) {
3171     IdentifierInfo *SelectorId = &Context.Idents.get("respondsToSelector");
3172     RespondsToSelectorSel = Context.Selectors.getUnarySelector(SelectorId);
3173   }
3174   if (Sel == RespondsToSelectorSel)
3175     RemoveSelectorFromWarningCache(*this, Args[0]);
3176 
3177   return BuildInstanceMessage(Receiver, Receiver->getType(),
3178                               /*SuperLoc=*/SourceLocation(), Sel,
3179                               /*Method=*/nullptr, LBracLoc, SelectorLocs,
3180                               RBracLoc, Args);
3181 }
3182 
3183 enum ARCConversionTypeClass {
3184   /// int, void, struct A
3185   ACTC_none,
3186 
3187   /// id, void (^)()
3188   ACTC_retainable,
3189 
3190   /// id*, id***, void (^*)(),
3191   ACTC_indirectRetainable,
3192 
3193   /// void* might be a normal C type, or it might a CF type.
3194   ACTC_voidPtr,
3195 
3196   /// struct A*
3197   ACTC_coreFoundation
3198 };
3199 
3200 static bool isAnyRetainable(ARCConversionTypeClass ACTC) {
3201   return (ACTC == ACTC_retainable ||
3202           ACTC == ACTC_coreFoundation ||
3203           ACTC == ACTC_voidPtr);
3204 }
3205 
3206 static bool isAnyCLike(ARCConversionTypeClass ACTC) {
3207   return ACTC == ACTC_none ||
3208          ACTC == ACTC_voidPtr ||
3209          ACTC == ACTC_coreFoundation;
3210 }
3211 
3212 static ARCConversionTypeClass classifyTypeForARCConversion(QualType type) {
3213   bool isIndirect = false;
3214 
3215   // Ignore an outermost reference type.
3216   if (const ReferenceType *ref = type->getAs<ReferenceType>()) {
3217     type = ref->getPointeeType();
3218     isIndirect = true;
3219   }
3220 
3221   // Drill through pointers and arrays recursively.
3222   while (true) {
3223     if (const PointerType *ptr = type->getAs<PointerType>()) {
3224       type = ptr->getPointeeType();
3225 
3226       // The first level of pointer may be the innermost pointer on a CF type.
3227       if (!isIndirect) {
3228         if (type->isVoidType()) return ACTC_voidPtr;
3229         if (type->isRecordType()) return ACTC_coreFoundation;
3230       }
3231     } else if (const ArrayType *array = type->getAsArrayTypeUnsafe()) {
3232       type = QualType(array->getElementType()->getBaseElementTypeUnsafe(), 0);
3233     } else {
3234       break;
3235     }
3236     isIndirect = true;
3237   }
3238 
3239   if (isIndirect) {
3240     if (type->isObjCARCBridgableType())
3241       return ACTC_indirectRetainable;
3242     return ACTC_none;
3243   }
3244 
3245   if (type->isObjCARCBridgableType())
3246     return ACTC_retainable;
3247 
3248   return ACTC_none;
3249 }
3250 
3251 namespace {
3252   /// A result from the cast checker.
3253   enum ACCResult {
3254     /// Cannot be casted.
3255     ACC_invalid,
3256 
3257     /// Can be safely retained or not retained.
3258     ACC_bottom,
3259 
3260     /// Can be casted at +0.
3261     ACC_plusZero,
3262 
3263     /// Can be casted at +1.
3264     ACC_plusOne
3265   };
3266   ACCResult merge(ACCResult left, ACCResult right) {
3267     if (left == right) return left;
3268     if (left == ACC_bottom) return right;
3269     if (right == ACC_bottom) return left;
3270     return ACC_invalid;
3271   }
3272 
3273   /// A checker which white-lists certain expressions whose conversion
3274   /// to or from retainable type would otherwise be forbidden in ARC.
3275   class ARCCastChecker : public StmtVisitor<ARCCastChecker, ACCResult> {
3276     typedef StmtVisitor<ARCCastChecker, ACCResult> super;
3277 
3278     ASTContext &Context;
3279     ARCConversionTypeClass SourceClass;
3280     ARCConversionTypeClass TargetClass;
3281     bool Diagnose;
3282 
3283     static bool isCFType(QualType type) {
3284       // Someday this can use ns_bridged.  For now, it has to do this.
3285       return type->isCARCBridgableType();
3286     }
3287 
3288   public:
3289     ARCCastChecker(ASTContext &Context, ARCConversionTypeClass source,
3290                    ARCConversionTypeClass target, bool diagnose)
3291       : Context(Context), SourceClass(source), TargetClass(target),
3292         Diagnose(diagnose) {}
3293 
3294     using super::Visit;
3295     ACCResult Visit(Expr *e) {
3296       return super::Visit(e->IgnoreParens());
3297     }
3298 
3299     ACCResult VisitStmt(Stmt *s) {
3300       return ACC_invalid;
3301     }
3302 
3303     /// Null pointer constants can be casted however you please.
3304     ACCResult VisitExpr(Expr *e) {
3305       if (e->isNullPointerConstant(Context, Expr::NPC_ValueDependentIsNotNull))
3306         return ACC_bottom;
3307       return ACC_invalid;
3308     }
3309 
3310     /// Objective-C string literals can be safely casted.
3311     ACCResult VisitObjCStringLiteral(ObjCStringLiteral *e) {
3312       // If we're casting to any retainable type, go ahead.  Global
3313       // strings are immune to retains, so this is bottom.
3314       if (isAnyRetainable(TargetClass)) return ACC_bottom;
3315 
3316       return ACC_invalid;
3317     }
3318 
3319     /// Look through certain implicit and explicit casts.
3320     ACCResult VisitCastExpr(CastExpr *e) {
3321       switch (e->getCastKind()) {
3322         case CK_NullToPointer:
3323           return ACC_bottom;
3324 
3325         case CK_NoOp:
3326         case CK_LValueToRValue:
3327         case CK_BitCast:
3328         case CK_CPointerToObjCPointerCast:
3329         case CK_BlockPointerToObjCPointerCast:
3330         case CK_AnyPointerToBlockPointerCast:
3331           return Visit(e->getSubExpr());
3332 
3333         default:
3334           return ACC_invalid;
3335       }
3336     }
3337 
3338     /// Look through unary extension.
3339     ACCResult VisitUnaryExtension(UnaryOperator *e) {
3340       return Visit(e->getSubExpr());
3341     }
3342 
3343     /// Ignore the LHS of a comma operator.
3344     ACCResult VisitBinComma(BinaryOperator *e) {
3345       return Visit(e->getRHS());
3346     }
3347 
3348     /// Conditional operators are okay if both sides are okay.
3349     ACCResult VisitConditionalOperator(ConditionalOperator *e) {
3350       ACCResult left = Visit(e->getTrueExpr());
3351       if (left == ACC_invalid) return ACC_invalid;
3352       return merge(left, Visit(e->getFalseExpr()));
3353     }
3354 
3355     /// Look through pseudo-objects.
3356     ACCResult VisitPseudoObjectExpr(PseudoObjectExpr *e) {
3357       // If we're getting here, we should always have a result.
3358       return Visit(e->getResultExpr());
3359     }
3360 
3361     /// Statement expressions are okay if their result expression is okay.
3362     ACCResult VisitStmtExpr(StmtExpr *e) {
3363       return Visit(e->getSubStmt()->body_back());
3364     }
3365 
3366     /// Some declaration references are okay.
3367     ACCResult VisitDeclRefExpr(DeclRefExpr *e) {
3368       VarDecl *var = dyn_cast<VarDecl>(e->getDecl());
3369       // References to global constants are okay.
3370       if (isAnyRetainable(TargetClass) &&
3371           isAnyRetainable(SourceClass) &&
3372           var &&
3373           !var->hasDefinition(Context) &&
3374           var->getType().isConstQualified()) {
3375 
3376         // In system headers, they can also be assumed to be immune to retains.
3377         // These are things like 'kCFStringTransformToLatin'.
3378         if (Context.getSourceManager().isInSystemHeader(var->getLocation()))
3379           return ACC_bottom;
3380 
3381         return ACC_plusZero;
3382       }
3383 
3384       // Nothing else.
3385       return ACC_invalid;
3386     }
3387 
3388     /// Some calls are okay.
3389     ACCResult VisitCallExpr(CallExpr *e) {
3390       if (FunctionDecl *fn = e->getDirectCallee())
3391         if (ACCResult result = checkCallToFunction(fn))
3392           return result;
3393 
3394       return super::VisitCallExpr(e);
3395     }
3396 
3397     ACCResult checkCallToFunction(FunctionDecl *fn) {
3398       // Require a CF*Ref return type.
3399       if (!isCFType(fn->getReturnType()))
3400         return ACC_invalid;
3401 
3402       if (!isAnyRetainable(TargetClass))
3403         return ACC_invalid;
3404 
3405       // Honor an explicit 'not retained' attribute.
3406       if (fn->hasAttr<CFReturnsNotRetainedAttr>())
3407         return ACC_plusZero;
3408 
3409       // Honor an explicit 'retained' attribute, except that for
3410       // now we're not going to permit implicit handling of +1 results,
3411       // because it's a bit frightening.
3412       if (fn->hasAttr<CFReturnsRetainedAttr>())
3413         return Diagnose ? ACC_plusOne
3414                         : ACC_invalid; // ACC_plusOne if we start accepting this
3415 
3416       // Recognize this specific builtin function, which is used by CFSTR.
3417       unsigned builtinID = fn->getBuiltinID();
3418       if (builtinID == Builtin::BI__builtin___CFStringMakeConstantString)
3419         return ACC_bottom;
3420 
3421       // Otherwise, don't do anything implicit with an unaudited function.
3422       if (!fn->hasAttr<CFAuditedTransferAttr>())
3423         return ACC_invalid;
3424 
3425       // Otherwise, it's +0 unless it follows the create convention.
3426       if (ento::coreFoundation::followsCreateRule(fn))
3427         return Diagnose ? ACC_plusOne
3428                         : ACC_invalid; // ACC_plusOne if we start accepting this
3429 
3430       return ACC_plusZero;
3431     }
3432 
3433     ACCResult VisitObjCMessageExpr(ObjCMessageExpr *e) {
3434       return checkCallToMethod(e->getMethodDecl());
3435     }
3436 
3437     ACCResult VisitObjCPropertyRefExpr(ObjCPropertyRefExpr *e) {
3438       ObjCMethodDecl *method;
3439       if (e->isExplicitProperty())
3440         method = e->getExplicitProperty()->getGetterMethodDecl();
3441       else
3442         method = e->getImplicitPropertyGetter();
3443       return checkCallToMethod(method);
3444     }
3445 
3446     ACCResult checkCallToMethod(ObjCMethodDecl *method) {
3447       if (!method) return ACC_invalid;
3448 
3449       // Check for message sends to functions returning CF types.  We
3450       // just obey the Cocoa conventions with these, even though the
3451       // return type is CF.
3452       if (!isAnyRetainable(TargetClass) || !isCFType(method->getReturnType()))
3453         return ACC_invalid;
3454 
3455       // If the method is explicitly marked not-retained, it's +0.
3456       if (method->hasAttr<CFReturnsNotRetainedAttr>())
3457         return ACC_plusZero;
3458 
3459       // If the method is explicitly marked as returning retained, or its
3460       // selector follows a +1 Cocoa convention, treat it as +1.
3461       if (method->hasAttr<CFReturnsRetainedAttr>())
3462         return ACC_plusOne;
3463 
3464       switch (method->getSelector().getMethodFamily()) {
3465       case OMF_alloc:
3466       case OMF_copy:
3467       case OMF_mutableCopy:
3468       case OMF_new:
3469         return ACC_plusOne;
3470 
3471       default:
3472         // Otherwise, treat it as +0.
3473         return ACC_plusZero;
3474       }
3475     }
3476   };
3477 } // end anonymous namespace
3478 
3479 bool Sema::isKnownName(StringRef name) {
3480   if (name.empty())
3481     return false;
3482   LookupResult R(*this, &Context.Idents.get(name), SourceLocation(),
3483                  Sema::LookupOrdinaryName);
3484   return LookupName(R, TUScope, false);
3485 }
3486 
3487 static void addFixitForObjCARCConversion(Sema &S,
3488                                          DiagnosticBuilder &DiagB,
3489                                          Sema::CheckedConversionKind CCK,
3490                                          SourceLocation afterLParen,
3491                                          QualType castType,
3492                                          Expr *castExpr,
3493                                          Expr *realCast,
3494                                          const char *bridgeKeyword,
3495                                          const char *CFBridgeName) {
3496   // We handle C-style and implicit casts here.
3497   switch (CCK) {
3498   case Sema::CCK_ImplicitConversion:
3499   case Sema::CCK_CStyleCast:
3500   case Sema::CCK_OtherCast:
3501     break;
3502   case Sema::CCK_FunctionalCast:
3503     return;
3504   }
3505 
3506   if (CFBridgeName) {
3507     if (CCK == Sema::CCK_OtherCast) {
3508       if (const CXXNamedCastExpr *NCE = dyn_cast<CXXNamedCastExpr>(realCast)) {
3509         SourceRange range(NCE->getOperatorLoc(),
3510                           NCE->getAngleBrackets().getEnd());
3511         SmallString<32> BridgeCall;
3512 
3513         SourceManager &SM = S.getSourceManager();
3514         char PrevChar = *SM.getCharacterData(range.getBegin().getLocWithOffset(-1));
3515         if (Lexer::isIdentifierBodyChar(PrevChar, S.getLangOpts()))
3516           BridgeCall += ' ';
3517 
3518         BridgeCall += CFBridgeName;
3519         DiagB.AddFixItHint(FixItHint::CreateReplacement(range, BridgeCall));
3520       }
3521       return;
3522     }
3523     Expr *castedE = castExpr;
3524     if (CStyleCastExpr *CCE = dyn_cast<CStyleCastExpr>(castedE))
3525       castedE = CCE->getSubExpr();
3526     castedE = castedE->IgnoreImpCasts();
3527     SourceRange range = castedE->getSourceRange();
3528 
3529     SmallString<32> BridgeCall;
3530 
3531     SourceManager &SM = S.getSourceManager();
3532     char PrevChar = *SM.getCharacterData(range.getBegin().getLocWithOffset(-1));
3533     if (Lexer::isIdentifierBodyChar(PrevChar, S.getLangOpts()))
3534       BridgeCall += ' ';
3535 
3536     BridgeCall += CFBridgeName;
3537 
3538     if (isa<ParenExpr>(castedE)) {
3539       DiagB.AddFixItHint(FixItHint::CreateInsertion(range.getBegin(),
3540                          BridgeCall));
3541     } else {
3542       BridgeCall += '(';
3543       DiagB.AddFixItHint(FixItHint::CreateInsertion(range.getBegin(),
3544                                                     BridgeCall));
3545       DiagB.AddFixItHint(FixItHint::CreateInsertion(
3546                                        S.getLocForEndOfToken(range.getEnd()),
3547                                        ")"));
3548     }
3549     return;
3550   }
3551 
3552   if (CCK == Sema::CCK_CStyleCast) {
3553     DiagB.AddFixItHint(FixItHint::CreateInsertion(afterLParen, bridgeKeyword));
3554   } else if (CCK == Sema::CCK_OtherCast) {
3555     if (const CXXNamedCastExpr *NCE = dyn_cast<CXXNamedCastExpr>(realCast)) {
3556       std::string castCode = "(";
3557       castCode += bridgeKeyword;
3558       castCode += castType.getAsString();
3559       castCode += ")";
3560       SourceRange Range(NCE->getOperatorLoc(),
3561                         NCE->getAngleBrackets().getEnd());
3562       DiagB.AddFixItHint(FixItHint::CreateReplacement(Range, castCode));
3563     }
3564   } else {
3565     std::string castCode = "(";
3566     castCode += bridgeKeyword;
3567     castCode += castType.getAsString();
3568     castCode += ")";
3569     Expr *castedE = castExpr->IgnoreImpCasts();
3570     SourceRange range = castedE->getSourceRange();
3571     if (isa<ParenExpr>(castedE)) {
3572       DiagB.AddFixItHint(FixItHint::CreateInsertion(range.getBegin(),
3573                          castCode));
3574     } else {
3575       castCode += "(";
3576       DiagB.AddFixItHint(FixItHint::CreateInsertion(range.getBegin(),
3577                                                     castCode));
3578       DiagB.AddFixItHint(FixItHint::CreateInsertion(
3579                                        S.getLocForEndOfToken(range.getEnd()),
3580                                        ")"));
3581     }
3582   }
3583 }
3584 
3585 template <typename T>
3586 static inline T *getObjCBridgeAttr(const TypedefType *TD) {
3587   TypedefNameDecl *TDNDecl = TD->getDecl();
3588   QualType QT = TDNDecl->getUnderlyingType();
3589   if (QT->isPointerType()) {
3590     QT = QT->getPointeeType();
3591     if (const RecordType *RT = QT->getAs<RecordType>())
3592       if (RecordDecl *RD = RT->getDecl()->getMostRecentDecl())
3593         return RD->getAttr<T>();
3594   }
3595   return nullptr;
3596 }
3597 
3598 static ObjCBridgeRelatedAttr *ObjCBridgeRelatedAttrFromType(QualType T,
3599                                                             TypedefNameDecl *&TDNDecl) {
3600   while (const TypedefType *TD = dyn_cast<TypedefType>(T.getTypePtr())) {
3601     TDNDecl = TD->getDecl();
3602     if (ObjCBridgeRelatedAttr *ObjCBAttr =
3603         getObjCBridgeAttr<ObjCBridgeRelatedAttr>(TD))
3604       return ObjCBAttr;
3605     T = TDNDecl->getUnderlyingType();
3606   }
3607   return nullptr;
3608 }
3609 
3610 static void
3611 diagnoseObjCARCConversion(Sema &S, SourceRange castRange,
3612                           QualType castType, ARCConversionTypeClass castACTC,
3613                           Expr *castExpr, Expr *realCast,
3614                           ARCConversionTypeClass exprACTC,
3615                           Sema::CheckedConversionKind CCK) {
3616   SourceLocation loc =
3617     (castRange.isValid() ? castRange.getBegin() : castExpr->getExprLoc());
3618 
3619   if (S.makeUnavailableInSystemHeader(loc,
3620                                  UnavailableAttr::IR_ARCForbiddenConversion))
3621     return;
3622 
3623   QualType castExprType = castExpr->getType();
3624   // Defer emitting a diagnostic for bridge-related casts; that will be
3625   // handled by CheckObjCBridgeRelatedConversions.
3626   TypedefNameDecl *TDNDecl = nullptr;
3627   if ((castACTC == ACTC_coreFoundation &&  exprACTC == ACTC_retainable &&
3628        ObjCBridgeRelatedAttrFromType(castType, TDNDecl)) ||
3629       (exprACTC == ACTC_coreFoundation && castACTC == ACTC_retainable &&
3630        ObjCBridgeRelatedAttrFromType(castExprType, TDNDecl)))
3631     return;
3632 
3633   unsigned srcKind = 0;
3634   switch (exprACTC) {
3635   case ACTC_none:
3636   case ACTC_coreFoundation:
3637   case ACTC_voidPtr:
3638     srcKind = (castExprType->isPointerType() ? 1 : 0);
3639     break;
3640   case ACTC_retainable:
3641     srcKind = (castExprType->isBlockPointerType() ? 2 : 3);
3642     break;
3643   case ACTC_indirectRetainable:
3644     srcKind = 4;
3645     break;
3646   }
3647 
3648   // Check whether this could be fixed with a bridge cast.
3649   SourceLocation afterLParen = S.getLocForEndOfToken(castRange.getBegin());
3650   SourceLocation noteLoc = afterLParen.isValid() ? afterLParen : loc;
3651 
3652   // Bridge from an ARC type to a CF type.
3653   if (castACTC == ACTC_retainable && isAnyRetainable(exprACTC)) {
3654 
3655     S.Diag(loc, diag::err_arc_cast_requires_bridge)
3656       << unsigned(CCK == Sema::CCK_ImplicitConversion) // cast|implicit
3657       << 2 // of C pointer type
3658       << castExprType
3659       << unsigned(castType->isBlockPointerType()) // to ObjC|block type
3660       << castType
3661       << castRange
3662       << castExpr->getSourceRange();
3663     bool br = S.isKnownName("CFBridgingRelease");
3664     ACCResult CreateRule =
3665       ARCCastChecker(S.Context, exprACTC, castACTC, true).Visit(castExpr);
3666     assert(CreateRule != ACC_bottom && "This cast should already be accepted.");
3667     if (CreateRule != ACC_plusOne)
3668     {
3669       DiagnosticBuilder DiagB =
3670         (CCK != Sema::CCK_OtherCast) ? S.Diag(noteLoc, diag::note_arc_bridge)
3671                               : S.Diag(noteLoc, diag::note_arc_cstyle_bridge);
3672 
3673       addFixitForObjCARCConversion(S, DiagB, CCK, afterLParen,
3674                                    castType, castExpr, realCast, "__bridge ",
3675                                    nullptr);
3676     }
3677     if (CreateRule != ACC_plusZero)
3678     {
3679       DiagnosticBuilder DiagB =
3680         (CCK == Sema::CCK_OtherCast && !br) ?
3681           S.Diag(noteLoc, diag::note_arc_cstyle_bridge_transfer) << castExprType :
3682           S.Diag(br ? castExpr->getExprLoc() : noteLoc,
3683                  diag::note_arc_bridge_transfer)
3684             << castExprType << br;
3685 
3686       addFixitForObjCARCConversion(S, DiagB, CCK, afterLParen,
3687                                    castType, castExpr, realCast, "__bridge_transfer ",
3688                                    br ? "CFBridgingRelease" : nullptr);
3689     }
3690 
3691     return;
3692   }
3693 
3694   // Bridge from a CF type to an ARC type.
3695   if (exprACTC == ACTC_retainable && isAnyRetainable(castACTC)) {
3696     bool br = S.isKnownName("CFBridgingRetain");
3697     S.Diag(loc, diag::err_arc_cast_requires_bridge)
3698       << unsigned(CCK == Sema::CCK_ImplicitConversion) // cast|implicit
3699       << unsigned(castExprType->isBlockPointerType()) // of ObjC|block type
3700       << castExprType
3701       << 2 // to C pointer type
3702       << castType
3703       << castRange
3704       << castExpr->getSourceRange();
3705     ACCResult CreateRule =
3706       ARCCastChecker(S.Context, exprACTC, castACTC, true).Visit(castExpr);
3707     assert(CreateRule != ACC_bottom && "This cast should already be accepted.");
3708     if (CreateRule != ACC_plusOne)
3709     {
3710       DiagnosticBuilder DiagB =
3711       (CCK != Sema::CCK_OtherCast) ? S.Diag(noteLoc, diag::note_arc_bridge)
3712                                : S.Diag(noteLoc, diag::note_arc_cstyle_bridge);
3713       addFixitForObjCARCConversion(S, DiagB, CCK, afterLParen,
3714                                    castType, castExpr, realCast, "__bridge ",
3715                                    nullptr);
3716     }
3717     if (CreateRule != ACC_plusZero)
3718     {
3719       DiagnosticBuilder DiagB =
3720         (CCK == Sema::CCK_OtherCast && !br) ?
3721           S.Diag(noteLoc, diag::note_arc_cstyle_bridge_retained) << castType :
3722           S.Diag(br ? castExpr->getExprLoc() : noteLoc,
3723                  diag::note_arc_bridge_retained)
3724             << castType << br;
3725 
3726       addFixitForObjCARCConversion(S, DiagB, CCK, afterLParen,
3727                                    castType, castExpr, realCast, "__bridge_retained ",
3728                                    br ? "CFBridgingRetain" : nullptr);
3729     }
3730 
3731     return;
3732   }
3733 
3734   S.Diag(loc, diag::err_arc_mismatched_cast)
3735     << (CCK != Sema::CCK_ImplicitConversion)
3736     << srcKind << castExprType << castType
3737     << castRange << castExpr->getSourceRange();
3738 }
3739 
3740 template <typename TB>
3741 static bool CheckObjCBridgeNSCast(Sema &S, QualType castType, Expr *castExpr,
3742                                   bool &HadTheAttribute, bool warn) {
3743   QualType T = castExpr->getType();
3744   HadTheAttribute = false;
3745   while (const TypedefType *TD = dyn_cast<TypedefType>(T.getTypePtr())) {
3746     TypedefNameDecl *TDNDecl = TD->getDecl();
3747     if (TB *ObjCBAttr = getObjCBridgeAttr<TB>(TD)) {
3748       if (IdentifierInfo *Parm = ObjCBAttr->getBridgedType()) {
3749         HadTheAttribute = true;
3750         if (Parm->isStr("id"))
3751           return true;
3752 
3753         NamedDecl *Target = nullptr;
3754         // Check for an existing type with this name.
3755         LookupResult R(S, DeclarationName(Parm), SourceLocation(),
3756                        Sema::LookupOrdinaryName);
3757         if (S.LookupName(R, S.TUScope)) {
3758           Target = R.getFoundDecl();
3759           if (Target && isa<ObjCInterfaceDecl>(Target)) {
3760             ObjCInterfaceDecl *ExprClass = cast<ObjCInterfaceDecl>(Target);
3761             if (const ObjCObjectPointerType *InterfacePointerType =
3762                   castType->getAsObjCInterfacePointerType()) {
3763               ObjCInterfaceDecl *CastClass
3764                 = InterfacePointerType->getObjectType()->getInterface();
3765               if ((CastClass == ExprClass) ||
3766                   (CastClass && CastClass->isSuperClassOf(ExprClass)))
3767                 return true;
3768               if (warn)
3769                 S.Diag(castExpr->getLocStart(), diag::warn_objc_invalid_bridge)
3770                   << T << Target->getName() << castType->getPointeeType();
3771               return false;
3772             } else if (castType->isObjCIdType() ||
3773                        (S.Context.ObjCObjectAdoptsQTypeProtocols(
3774                           castType, ExprClass)))
3775               // ok to cast to 'id'.
3776               // casting to id<p-list> is ok if bridge type adopts all of
3777               // p-list protocols.
3778               return true;
3779             else {
3780               if (warn) {
3781                 S.Diag(castExpr->getLocStart(), diag::warn_objc_invalid_bridge)
3782                   << T << Target->getName() << castType;
3783                 S.Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3784                 S.Diag(Target->getLocStart(), diag::note_declared_at);
3785               }
3786               return false;
3787            }
3788           }
3789         } else if (!castType->isObjCIdType()) {
3790           S.Diag(castExpr->getLocStart(), diag::err_objc_cf_bridged_not_interface)
3791             << castExpr->getType() << Parm;
3792           S.Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3793           if (Target)
3794             S.Diag(Target->getLocStart(), diag::note_declared_at);
3795         }
3796         return true;
3797       }
3798       return false;
3799     }
3800     T = TDNDecl->getUnderlyingType();
3801   }
3802   return true;
3803 }
3804 
3805 template <typename TB>
3806 static bool CheckObjCBridgeCFCast(Sema &S, QualType castType, Expr *castExpr,
3807                                   bool &HadTheAttribute, bool warn) {
3808   QualType T = castType;
3809   HadTheAttribute = false;
3810   while (const TypedefType *TD = dyn_cast<TypedefType>(T.getTypePtr())) {
3811     TypedefNameDecl *TDNDecl = TD->getDecl();
3812     if (TB *ObjCBAttr = getObjCBridgeAttr<TB>(TD)) {
3813       if (IdentifierInfo *Parm = ObjCBAttr->getBridgedType()) {
3814         HadTheAttribute = true;
3815         if (Parm->isStr("id"))
3816           return true;
3817 
3818         NamedDecl *Target = nullptr;
3819         // Check for an existing type with this name.
3820         LookupResult R(S, DeclarationName(Parm), SourceLocation(),
3821                        Sema::LookupOrdinaryName);
3822         if (S.LookupName(R, S.TUScope)) {
3823           Target = R.getFoundDecl();
3824           if (Target && isa<ObjCInterfaceDecl>(Target)) {
3825             ObjCInterfaceDecl *CastClass = cast<ObjCInterfaceDecl>(Target);
3826             if (const ObjCObjectPointerType *InterfacePointerType =
3827                   castExpr->getType()->getAsObjCInterfacePointerType()) {
3828               ObjCInterfaceDecl *ExprClass
3829                 = InterfacePointerType->getObjectType()->getInterface();
3830               if ((CastClass == ExprClass) ||
3831                   (ExprClass && CastClass->isSuperClassOf(ExprClass)))
3832                 return true;
3833               if (warn) {
3834                 S.Diag(castExpr->getLocStart(), diag::warn_objc_invalid_bridge_to_cf)
3835                   << castExpr->getType()->getPointeeType() << T;
3836                 S.Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3837               }
3838               return false;
3839             } else if (castExpr->getType()->isObjCIdType() ||
3840                        (S.Context.QIdProtocolsAdoptObjCObjectProtocols(
3841                           castExpr->getType(), CastClass)))
3842               // ok to cast an 'id' expression to a CFtype.
3843               // ok to cast an 'id<plist>' expression to CFtype provided plist
3844               // adopts all of CFtype's ObjetiveC's class plist.
3845               return true;
3846             else {
3847               if (warn) {
3848                 S.Diag(castExpr->getLocStart(), diag::warn_objc_invalid_bridge_to_cf)
3849                   << castExpr->getType() << castType;
3850                 S.Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3851                 S.Diag(Target->getLocStart(), diag::note_declared_at);
3852               }
3853               return false;
3854             }
3855           }
3856         }
3857         S.Diag(castExpr->getLocStart(), diag::err_objc_ns_bridged_invalid_cfobject)
3858         << castExpr->getType() << castType;
3859         S.Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3860         if (Target)
3861           S.Diag(Target->getLocStart(), diag::note_declared_at);
3862         return true;
3863       }
3864       return false;
3865     }
3866     T = TDNDecl->getUnderlyingType();
3867   }
3868   return true;
3869 }
3870 
3871 void Sema::CheckTollFreeBridgeCast(QualType castType, Expr *castExpr) {
3872   if (!getLangOpts().ObjC1)
3873     return;
3874   // warn in presence of __bridge casting to or from a toll free bridge cast.
3875   ARCConversionTypeClass exprACTC = classifyTypeForARCConversion(castExpr->getType());
3876   ARCConversionTypeClass castACTC = classifyTypeForARCConversion(castType);
3877   if (castACTC == ACTC_retainable && exprACTC == ACTC_coreFoundation) {
3878     bool HasObjCBridgeAttr;
3879     bool ObjCBridgeAttrWillNotWarn =
3880       CheckObjCBridgeNSCast<ObjCBridgeAttr>(*this, castType, castExpr, HasObjCBridgeAttr,
3881                                             false);
3882     if (ObjCBridgeAttrWillNotWarn && HasObjCBridgeAttr)
3883       return;
3884     bool HasObjCBridgeMutableAttr;
3885     bool ObjCBridgeMutableAttrWillNotWarn =
3886       CheckObjCBridgeNSCast<ObjCBridgeMutableAttr>(*this, castType, castExpr,
3887                                                    HasObjCBridgeMutableAttr, false);
3888     if (ObjCBridgeMutableAttrWillNotWarn && HasObjCBridgeMutableAttr)
3889       return;
3890 
3891     if (HasObjCBridgeAttr)
3892       CheckObjCBridgeNSCast<ObjCBridgeAttr>(*this, castType, castExpr, HasObjCBridgeAttr,
3893                                             true);
3894     else if (HasObjCBridgeMutableAttr)
3895       CheckObjCBridgeNSCast<ObjCBridgeMutableAttr>(*this, castType, castExpr,
3896                                                    HasObjCBridgeMutableAttr, true);
3897   }
3898   else if (castACTC == ACTC_coreFoundation && exprACTC == ACTC_retainable) {
3899     bool HasObjCBridgeAttr;
3900     bool ObjCBridgeAttrWillNotWarn =
3901       CheckObjCBridgeCFCast<ObjCBridgeAttr>(*this, castType, castExpr, HasObjCBridgeAttr,
3902                                             false);
3903     if (ObjCBridgeAttrWillNotWarn && HasObjCBridgeAttr)
3904       return;
3905     bool HasObjCBridgeMutableAttr;
3906     bool ObjCBridgeMutableAttrWillNotWarn =
3907       CheckObjCBridgeCFCast<ObjCBridgeMutableAttr>(*this, castType, castExpr,
3908                                                    HasObjCBridgeMutableAttr, false);
3909     if (ObjCBridgeMutableAttrWillNotWarn && HasObjCBridgeMutableAttr)
3910       return;
3911 
3912     if (HasObjCBridgeAttr)
3913       CheckObjCBridgeCFCast<ObjCBridgeAttr>(*this, castType, castExpr, HasObjCBridgeAttr,
3914                                             true);
3915     else if (HasObjCBridgeMutableAttr)
3916       CheckObjCBridgeCFCast<ObjCBridgeMutableAttr>(*this, castType, castExpr,
3917                                                    HasObjCBridgeMutableAttr, true);
3918   }
3919 }
3920 
3921 void Sema::CheckObjCBridgeRelatedCast(QualType castType, Expr *castExpr) {
3922   QualType SrcType = castExpr->getType();
3923   if (ObjCPropertyRefExpr *PRE = dyn_cast<ObjCPropertyRefExpr>(castExpr)) {
3924     if (PRE->isExplicitProperty()) {
3925       if (ObjCPropertyDecl *PDecl = PRE->getExplicitProperty())
3926         SrcType = PDecl->getType();
3927     }
3928     else if (PRE->isImplicitProperty()) {
3929       if (ObjCMethodDecl *Getter = PRE->getImplicitPropertyGetter())
3930         SrcType = Getter->getReturnType();
3931     }
3932   }
3933 
3934   ARCConversionTypeClass srcExprACTC = classifyTypeForARCConversion(SrcType);
3935   ARCConversionTypeClass castExprACTC = classifyTypeForARCConversion(castType);
3936   if (srcExprACTC != ACTC_retainable || castExprACTC != ACTC_coreFoundation)
3937     return;
3938   CheckObjCBridgeRelatedConversions(castExpr->getLocStart(),
3939                                     castType, SrcType, castExpr);
3940 }
3941 
3942 bool Sema::CheckTollFreeBridgeStaticCast(QualType castType, Expr *castExpr,
3943                                          CastKind &Kind) {
3944   if (!getLangOpts().ObjC1)
3945     return false;
3946   ARCConversionTypeClass exprACTC =
3947     classifyTypeForARCConversion(castExpr->getType());
3948   ARCConversionTypeClass castACTC = classifyTypeForARCConversion(castType);
3949   if ((castACTC == ACTC_retainable && exprACTC == ACTC_coreFoundation) ||
3950       (castACTC == ACTC_coreFoundation && exprACTC == ACTC_retainable)) {
3951     CheckTollFreeBridgeCast(castType, castExpr);
3952     Kind = (castACTC == ACTC_coreFoundation) ? CK_BitCast
3953                                              : CK_CPointerToObjCPointerCast;
3954     return true;
3955   }
3956   return false;
3957 }
3958 
3959 bool Sema::checkObjCBridgeRelatedComponents(SourceLocation Loc,
3960                                             QualType DestType, QualType SrcType,
3961                                             ObjCInterfaceDecl *&RelatedClass,
3962                                             ObjCMethodDecl *&ClassMethod,
3963                                             ObjCMethodDecl *&InstanceMethod,
3964                                             TypedefNameDecl *&TDNDecl,
3965                                             bool CfToNs, bool Diagnose) {
3966   QualType T = CfToNs ? SrcType : DestType;
3967   ObjCBridgeRelatedAttr *ObjCBAttr = ObjCBridgeRelatedAttrFromType(T, TDNDecl);
3968   if (!ObjCBAttr)
3969     return false;
3970 
3971   IdentifierInfo *RCId = ObjCBAttr->getRelatedClass();
3972   IdentifierInfo *CMId = ObjCBAttr->getClassMethod();
3973   IdentifierInfo *IMId = ObjCBAttr->getInstanceMethod();
3974   if (!RCId)
3975     return false;
3976   NamedDecl *Target = nullptr;
3977   // Check for an existing type with this name.
3978   LookupResult R(*this, DeclarationName(RCId), SourceLocation(),
3979                  Sema::LookupOrdinaryName);
3980   if (!LookupName(R, TUScope)) {
3981     if (Diagnose) {
3982       Diag(Loc, diag::err_objc_bridged_related_invalid_class) << RCId
3983             << SrcType << DestType;
3984       Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3985     }
3986     return false;
3987   }
3988   Target = R.getFoundDecl();
3989   if (Target && isa<ObjCInterfaceDecl>(Target))
3990     RelatedClass = cast<ObjCInterfaceDecl>(Target);
3991   else {
3992     if (Diagnose) {
3993       Diag(Loc, diag::err_objc_bridged_related_invalid_class_name) << RCId
3994             << SrcType << DestType;
3995       Diag(TDNDecl->getLocStart(), diag::note_declared_at);
3996       if (Target)
3997         Diag(Target->getLocStart(), diag::note_declared_at);
3998     }
3999     return false;
4000   }
4001 
4002   // Check for an existing class method with the given selector name.
4003   if (CfToNs && CMId) {
4004     Selector Sel = Context.Selectors.getUnarySelector(CMId);
4005     ClassMethod = RelatedClass->lookupMethod(Sel, false);
4006     if (!ClassMethod) {
4007       if (Diagnose) {
4008         Diag(Loc, diag::err_objc_bridged_related_known_method)
4009               << SrcType << DestType << Sel << false;
4010         Diag(TDNDecl->getLocStart(), diag::note_declared_at);
4011       }
4012       return false;
4013     }
4014   }
4015 
4016   // Check for an existing instance method with the given selector name.
4017   if (!CfToNs && IMId) {
4018     Selector Sel = Context.Selectors.getNullarySelector(IMId);
4019     InstanceMethod = RelatedClass->lookupMethod(Sel, true);
4020     if (!InstanceMethod) {
4021       if (Diagnose) {
4022         Diag(Loc, diag::err_objc_bridged_related_known_method)
4023               << SrcType << DestType << Sel << true;
4024         Diag(TDNDecl->getLocStart(), diag::note_declared_at);
4025       }
4026       return false;
4027     }
4028   }
4029   return true;
4030 }
4031 
4032 bool
4033 Sema::CheckObjCBridgeRelatedConversions(SourceLocation Loc,
4034                                         QualType DestType, QualType SrcType,
4035                                         Expr *&SrcExpr, bool Diagnose) {
4036   ARCConversionTypeClass rhsExprACTC = classifyTypeForARCConversion(SrcType);
4037   ARCConversionTypeClass lhsExprACTC = classifyTypeForARCConversion(DestType);
4038   bool CfToNs = (rhsExprACTC == ACTC_coreFoundation && lhsExprACTC == ACTC_retainable);
4039   bool NsToCf = (rhsExprACTC == ACTC_retainable && lhsExprACTC == ACTC_coreFoundation);
4040   if (!CfToNs && !NsToCf)
4041     return false;
4042 
4043   ObjCInterfaceDecl *RelatedClass;
4044   ObjCMethodDecl *ClassMethod = nullptr;
4045   ObjCMethodDecl *InstanceMethod = nullptr;
4046   TypedefNameDecl *TDNDecl = nullptr;
4047   if (!checkObjCBridgeRelatedComponents(Loc, DestType, SrcType, RelatedClass,
4048                                         ClassMethod, InstanceMethod, TDNDecl,
4049                                         CfToNs, Diagnose))
4050     return false;
4051 
4052   if (CfToNs) {
4053     // Implicit conversion from CF to ObjC object is needed.
4054     if (ClassMethod) {
4055       if (Diagnose) {
4056         std::string ExpressionString = "[";
4057         ExpressionString += RelatedClass->getNameAsString();
4058         ExpressionString += " ";
4059         ExpressionString += ClassMethod->getSelector().getAsString();
4060         SourceLocation SrcExprEndLoc = getLocForEndOfToken(SrcExpr->getLocEnd());
4061         // Provide a fixit: [RelatedClass ClassMethod SrcExpr]
4062         Diag(Loc, diag::err_objc_bridged_related_known_method)
4063           << SrcType << DestType << ClassMethod->getSelector() << false
4064           << FixItHint::CreateInsertion(SrcExpr->getLocStart(), ExpressionString)
4065           << FixItHint::CreateInsertion(SrcExprEndLoc, "]");
4066         Diag(RelatedClass->getLocStart(), diag::note_declared_at);
4067         Diag(TDNDecl->getLocStart(), diag::note_declared_at);
4068 
4069         QualType receiverType = Context.getObjCInterfaceType(RelatedClass);
4070         // Argument.
4071         Expr *args[] = { SrcExpr };
4072         ExprResult msg = BuildClassMessageImplicit(receiverType, false,
4073                                       ClassMethod->getLocation(),
4074                                       ClassMethod->getSelector(), ClassMethod,
4075                                       MultiExprArg(args, 1));
4076         SrcExpr = msg.get();
4077       }
4078       return true;
4079     }
4080   }
4081   else {
4082     // Implicit conversion from ObjC type to CF object is needed.
4083     if (InstanceMethod) {
4084       if (Diagnose) {
4085         std::string ExpressionString;
4086         SourceLocation SrcExprEndLoc =
4087             getLocForEndOfToken(SrcExpr->getLocEnd());
4088         if (InstanceMethod->isPropertyAccessor())
4089           if (const ObjCPropertyDecl *PDecl =
4090                   InstanceMethod->findPropertyDecl()) {
4091             // fixit: ObjectExpr.propertyname when it is  aproperty accessor.
4092             ExpressionString = ".";
4093             ExpressionString += PDecl->getNameAsString();
4094             Diag(Loc, diag::err_objc_bridged_related_known_method)
4095                 << SrcType << DestType << InstanceMethod->getSelector() << true
4096                 << FixItHint::CreateInsertion(SrcExprEndLoc, ExpressionString);
4097           }
4098         if (ExpressionString.empty()) {
4099           // Provide a fixit: [ObjectExpr InstanceMethod]
4100           ExpressionString = " ";
4101           ExpressionString += InstanceMethod->getSelector().getAsString();
4102           ExpressionString += "]";
4103 
4104           Diag(Loc, diag::err_objc_bridged_related_known_method)
4105               << SrcType << DestType << InstanceMethod->getSelector() << true
4106               << FixItHint::CreateInsertion(SrcExpr->getLocStart(), "[")
4107               << FixItHint::CreateInsertion(SrcExprEndLoc, ExpressionString);
4108         }
4109         Diag(RelatedClass->getLocStart(), diag::note_declared_at);
4110         Diag(TDNDecl->getLocStart(), diag::note_declared_at);
4111 
4112         ExprResult msg =
4113           BuildInstanceMessageImplicit(SrcExpr, SrcType,
4114                                        InstanceMethod->getLocation(),
4115                                        InstanceMethod->getSelector(),
4116                                        InstanceMethod, None);
4117         SrcExpr = msg.get();
4118       }
4119       return true;
4120     }
4121   }
4122   return false;
4123 }
4124 
4125 Sema::ARCConversionResult
4126 Sema::CheckObjCConversion(SourceRange castRange, QualType castType,
4127                           Expr *&castExpr, CheckedConversionKind CCK,
4128                           bool Diagnose, bool DiagnoseCFAudited,
4129                           BinaryOperatorKind Opc) {
4130   QualType castExprType = castExpr->getType();
4131 
4132   // For the purposes of the classification, we assume reference types
4133   // will bind to temporaries.
4134   QualType effCastType = castType;
4135   if (const ReferenceType *ref = castType->getAs<ReferenceType>())
4136     effCastType = ref->getPointeeType();
4137 
4138   ARCConversionTypeClass exprACTC = classifyTypeForARCConversion(castExprType);
4139   ARCConversionTypeClass castACTC = classifyTypeForARCConversion(effCastType);
4140   if (exprACTC == castACTC) {
4141     // Check for viability and report error if casting an rvalue to a
4142     // life-time qualifier.
4143     if (castACTC == ACTC_retainable &&
4144         (CCK == CCK_CStyleCast || CCK == CCK_OtherCast) &&
4145         castType != castExprType) {
4146       const Type *DT = castType.getTypePtr();
4147       QualType QDT = castType;
4148       // We desugar some types but not others. We ignore those
4149       // that cannot happen in a cast; i.e. auto, and those which
4150       // should not be de-sugared; i.e typedef.
4151       if (const ParenType *PT = dyn_cast<ParenType>(DT))
4152         QDT = PT->desugar();
4153       else if (const TypeOfType *TP = dyn_cast<TypeOfType>(DT))
4154         QDT = TP->desugar();
4155       else if (const AttributedType *AT = dyn_cast<AttributedType>(DT))
4156         QDT = AT->desugar();
4157       if (QDT != castType &&
4158           QDT.getObjCLifetime() !=  Qualifiers::OCL_None) {
4159         if (Diagnose) {
4160           SourceLocation loc = (castRange.isValid() ? castRange.getBegin()
4161                                                     : castExpr->getExprLoc());
4162           Diag(loc, diag::err_arc_nolifetime_behavior);
4163         }
4164         return ACR_error;
4165       }
4166     }
4167     return ACR_okay;
4168   }
4169 
4170   // The life-time qualifier cast check above is all we need for ObjCWeak.
4171   // ObjCAutoRefCount has more restrictions on what is legal.
4172   if (!getLangOpts().ObjCAutoRefCount)
4173     return ACR_okay;
4174 
4175   if (isAnyCLike(exprACTC) && isAnyCLike(castACTC)) return ACR_okay;
4176 
4177   // Allow all of these types to be cast to integer types (but not
4178   // vice-versa).
4179   if (castACTC == ACTC_none && castType->isIntegralType(Context))
4180     return ACR_okay;
4181 
4182   // Allow casts between pointers to lifetime types (e.g., __strong id*)
4183   // and pointers to void (e.g., cv void *). Casting from void* to lifetime*
4184   // must be explicit.
4185   if (exprACTC == ACTC_indirectRetainable && castACTC == ACTC_voidPtr)
4186     return ACR_okay;
4187   if (castACTC == ACTC_indirectRetainable && exprACTC == ACTC_voidPtr &&
4188       CCK != CCK_ImplicitConversion)
4189     return ACR_okay;
4190 
4191   switch (ARCCastChecker(Context, exprACTC, castACTC, false).Visit(castExpr)) {
4192   // For invalid casts, fall through.
4193   case ACC_invalid:
4194     break;
4195 
4196   // Do nothing for both bottom and +0.
4197   case ACC_bottom:
4198   case ACC_plusZero:
4199     return ACR_okay;
4200 
4201   // If the result is +1, consume it here.
4202   case ACC_plusOne:
4203     castExpr = ImplicitCastExpr::Create(Context, castExpr->getType(),
4204                                         CK_ARCConsumeObject, castExpr,
4205                                         nullptr, VK_RValue);
4206     Cleanup.setExprNeedsCleanups(true);
4207     return ACR_okay;
4208   }
4209 
4210   // If this is a non-implicit cast from id or block type to a
4211   // CoreFoundation type, delay complaining in case the cast is used
4212   // in an acceptable context.
4213   if (exprACTC == ACTC_retainable && isAnyRetainable(castACTC) &&
4214       CCK != CCK_ImplicitConversion)
4215     return ACR_unbridged;
4216 
4217   // Issue a diagnostic about a missing @-sign when implicit casting a cstring
4218   // to 'NSString *', instead of falling through to report a "bridge cast"
4219   // diagnostic.
4220   if (castACTC == ACTC_retainable && exprACTC == ACTC_none &&
4221       ConversionToObjCStringLiteralCheck(castType, castExpr, Diagnose))
4222     return ACR_error;
4223 
4224   // Do not issue "bridge cast" diagnostic when implicit casting
4225   // a retainable object to a CF type parameter belonging to an audited
4226   // CF API function. Let caller issue a normal type mismatched diagnostic
4227   // instead.
4228   if ((!DiagnoseCFAudited || exprACTC != ACTC_retainable ||
4229        castACTC != ACTC_coreFoundation) &&
4230       !(exprACTC == ACTC_voidPtr && castACTC == ACTC_retainable &&
4231         (Opc == BO_NE || Opc == BO_EQ))) {
4232     if (Diagnose)
4233       diagnoseObjCARCConversion(*this, castRange, castType, castACTC, castExpr,
4234                                 castExpr, exprACTC, CCK);
4235     return ACR_error;
4236   }
4237   return ACR_okay;
4238 }
4239 
4240 /// Given that we saw an expression with the ARCUnbridgedCastTy
4241 /// placeholder type, complain bitterly.
4242 void Sema::diagnoseARCUnbridgedCast(Expr *e) {
4243   // We expect the spurious ImplicitCastExpr to already have been stripped.
4244   assert(!e->hasPlaceholderType(BuiltinType::ARCUnbridgedCast));
4245   CastExpr *realCast = cast<CastExpr>(e->IgnoreParens());
4246 
4247   SourceRange castRange;
4248   QualType castType;
4249   CheckedConversionKind CCK;
4250 
4251   if (CStyleCastExpr *cast = dyn_cast<CStyleCastExpr>(realCast)) {
4252     castRange = SourceRange(cast->getLParenLoc(), cast->getRParenLoc());
4253     castType = cast->getTypeAsWritten();
4254     CCK = CCK_CStyleCast;
4255   } else if (ExplicitCastExpr *cast = dyn_cast<ExplicitCastExpr>(realCast)) {
4256     castRange = cast->getTypeInfoAsWritten()->getTypeLoc().getSourceRange();
4257     castType = cast->getTypeAsWritten();
4258     CCK = CCK_OtherCast;
4259   } else {
4260     llvm_unreachable("Unexpected ImplicitCastExpr");
4261   }
4262 
4263   ARCConversionTypeClass castACTC =
4264     classifyTypeForARCConversion(castType.getNonReferenceType());
4265 
4266   Expr *castExpr = realCast->getSubExpr();
4267   assert(classifyTypeForARCConversion(castExpr->getType()) == ACTC_retainable);
4268 
4269   diagnoseObjCARCConversion(*this, castRange, castType, castACTC,
4270                             castExpr, realCast, ACTC_retainable, CCK);
4271 }
4272 
4273 /// stripARCUnbridgedCast - Given an expression of ARCUnbridgedCast
4274 /// type, remove the placeholder cast.
4275 Expr *Sema::stripARCUnbridgedCast(Expr *e) {
4276   assert(e->hasPlaceholderType(BuiltinType::ARCUnbridgedCast));
4277 
4278   if (ParenExpr *pe = dyn_cast<ParenExpr>(e)) {
4279     Expr *sub = stripARCUnbridgedCast(pe->getSubExpr());
4280     return new (Context) ParenExpr(pe->getLParen(), pe->getRParen(), sub);
4281   } else if (UnaryOperator *uo = dyn_cast<UnaryOperator>(e)) {
4282     assert(uo->getOpcode() == UO_Extension);
4283     Expr *sub = stripARCUnbridgedCast(uo->getSubExpr());
4284     return new (Context)
4285         UnaryOperator(sub, UO_Extension, sub->getType(), sub->getValueKind(),
4286                       sub->getObjectKind(), uo->getOperatorLoc(), false);
4287   } else if (GenericSelectionExpr *gse = dyn_cast<GenericSelectionExpr>(e)) {
4288     assert(!gse->isResultDependent());
4289 
4290     unsigned n = gse->getNumAssocs();
4291     SmallVector<Expr*, 4> subExprs(n);
4292     SmallVector<TypeSourceInfo*, 4> subTypes(n);
4293     for (unsigned i = 0; i != n; ++i) {
4294       subTypes[i] = gse->getAssocTypeSourceInfo(i);
4295       Expr *sub = gse->getAssocExpr(i);
4296       if (i == gse->getResultIndex())
4297         sub = stripARCUnbridgedCast(sub);
4298       subExprs[i] = sub;
4299     }
4300 
4301     return new (Context) GenericSelectionExpr(Context, gse->getGenericLoc(),
4302                                               gse->getControllingExpr(),
4303                                               subTypes, subExprs,
4304                                               gse->getDefaultLoc(),
4305                                               gse->getRParenLoc(),
4306                                        gse->containsUnexpandedParameterPack(),
4307                                               gse->getResultIndex());
4308   } else {
4309     assert(isa<ImplicitCastExpr>(e) && "bad form of unbridged cast!");
4310     return cast<ImplicitCastExpr>(e)->getSubExpr();
4311   }
4312 }
4313 
4314 bool Sema::CheckObjCARCUnavailableWeakConversion(QualType castType,
4315                                                  QualType exprType) {
4316   QualType canCastType =
4317     Context.getCanonicalType(castType).getUnqualifiedType();
4318   QualType canExprType =
4319     Context.getCanonicalType(exprType).getUnqualifiedType();
4320   if (isa<ObjCObjectPointerType>(canCastType) &&
4321       castType.getObjCLifetime() == Qualifiers::OCL_Weak &&
4322       canExprType->isObjCObjectPointerType()) {
4323     if (const ObjCObjectPointerType *ObjT =
4324         canExprType->getAs<ObjCObjectPointerType>())
4325       if (const ObjCInterfaceDecl *ObjI = ObjT->getInterfaceDecl())
4326         return !ObjI->isArcWeakrefUnavailable();
4327   }
4328   return true;
4329 }
4330 
4331 /// Look for an ObjCReclaimReturnedObject cast and destroy it.
4332 static Expr *maybeUndoReclaimObject(Expr *e) {
4333   Expr *curExpr = e, *prevExpr = nullptr;
4334 
4335   // Walk down the expression until we hit an implicit cast of kind
4336   // ARCReclaimReturnedObject or an Expr that is neither a Paren nor a Cast.
4337   while (true) {
4338     if (auto *pe = dyn_cast<ParenExpr>(curExpr)) {
4339       prevExpr = curExpr;
4340       curExpr = pe->getSubExpr();
4341       continue;
4342     }
4343 
4344     if (auto *ce = dyn_cast<CastExpr>(curExpr)) {
4345       if (auto *ice = dyn_cast<ImplicitCastExpr>(ce))
4346         if (ice->getCastKind() == CK_ARCReclaimReturnedObject) {
4347           if (!prevExpr)
4348             return ice->getSubExpr();
4349           if (auto *pe = dyn_cast<ParenExpr>(prevExpr))
4350             pe->setSubExpr(ice->getSubExpr());
4351           else
4352             cast<CastExpr>(prevExpr)->setSubExpr(ice->getSubExpr());
4353           return e;
4354         }
4355 
4356       prevExpr = curExpr;
4357       curExpr = ce->getSubExpr();
4358       continue;
4359     }
4360 
4361     // Break out of the loop if curExpr is neither a Paren nor a Cast.
4362     break;
4363   }
4364 
4365   return e;
4366 }
4367 
4368 ExprResult Sema::BuildObjCBridgedCast(SourceLocation LParenLoc,
4369                                       ObjCBridgeCastKind Kind,
4370                                       SourceLocation BridgeKeywordLoc,
4371                                       TypeSourceInfo *TSInfo,
4372                                       Expr *SubExpr) {
4373   ExprResult SubResult = UsualUnaryConversions(SubExpr);
4374   if (SubResult.isInvalid()) return ExprError();
4375   SubExpr = SubResult.get();
4376 
4377   QualType T = TSInfo->getType();
4378   QualType FromType = SubExpr->getType();
4379 
4380   CastKind CK;
4381 
4382   bool MustConsume = false;
4383   if (T->isDependentType() || SubExpr->isTypeDependent()) {
4384     // Okay: we'll build a dependent expression type.
4385     CK = CK_Dependent;
4386   } else if (T->isObjCARCBridgableType() && FromType->isCARCBridgableType()) {
4387     // Casting CF -> id
4388     CK = (T->isBlockPointerType() ? CK_AnyPointerToBlockPointerCast
4389                                   : CK_CPointerToObjCPointerCast);
4390     switch (Kind) {
4391     case OBC_Bridge:
4392       break;
4393 
4394     case OBC_BridgeRetained: {
4395       bool br = isKnownName("CFBridgingRelease");
4396       Diag(BridgeKeywordLoc, diag::err_arc_bridge_cast_wrong_kind)
4397         << 2
4398         << FromType
4399         << (T->isBlockPointerType()? 1 : 0)
4400         << T
4401         << SubExpr->getSourceRange()
4402         << Kind;
4403       Diag(BridgeKeywordLoc, diag::note_arc_bridge)
4404         << FixItHint::CreateReplacement(BridgeKeywordLoc, "__bridge");
4405       Diag(BridgeKeywordLoc, diag::note_arc_bridge_transfer)
4406         << FromType << br
4407         << FixItHint::CreateReplacement(BridgeKeywordLoc,
4408                                         br ? "CFBridgingRelease "
4409                                            : "__bridge_transfer ");
4410 
4411       Kind = OBC_Bridge;
4412       break;
4413     }
4414 
4415     case OBC_BridgeTransfer:
4416       // We must consume the Objective-C object produced by the cast.
4417       MustConsume = true;
4418       break;
4419     }
4420   } else if (T->isCARCBridgableType() && FromType->isObjCARCBridgableType()) {
4421     // Okay: id -> CF
4422     CK = CK_BitCast;
4423     switch (Kind) {
4424     case OBC_Bridge:
4425       // Reclaiming a value that's going to be __bridge-casted to CF
4426       // is very dangerous, so we don't do it.
4427       SubExpr = maybeUndoReclaimObject(SubExpr);
4428       break;
4429 
4430     case OBC_BridgeRetained:
4431       // Produce the object before casting it.
4432       SubExpr = ImplicitCastExpr::Create(Context, FromType,
4433                                          CK_ARCProduceObject,
4434                                          SubExpr, nullptr, VK_RValue);
4435       break;
4436 
4437     case OBC_BridgeTransfer: {
4438       bool br = isKnownName("CFBridgingRetain");
4439       Diag(BridgeKeywordLoc, diag::err_arc_bridge_cast_wrong_kind)
4440         << (FromType->isBlockPointerType()? 1 : 0)
4441         << FromType
4442         << 2
4443         << T
4444         << SubExpr->getSourceRange()
4445         << Kind;
4446 
4447       Diag(BridgeKeywordLoc, diag::note_arc_bridge)
4448         << FixItHint::CreateReplacement(BridgeKeywordLoc, "__bridge ");
4449       Diag(BridgeKeywordLoc, diag::note_arc_bridge_retained)
4450         << T << br
4451         << FixItHint::CreateReplacement(BridgeKeywordLoc,
4452                           br ? "CFBridgingRetain " : "__bridge_retained");
4453 
4454       Kind = OBC_Bridge;
4455       break;
4456     }
4457     }
4458   } else {
4459     Diag(LParenLoc, diag::err_arc_bridge_cast_incompatible)
4460       << FromType << T << Kind
4461       << SubExpr->getSourceRange()
4462       << TSInfo->getTypeLoc().getSourceRange();
4463     return ExprError();
4464   }
4465 
4466   Expr *Result = new (Context) ObjCBridgedCastExpr(LParenLoc, Kind, CK,
4467                                                    BridgeKeywordLoc,
4468                                                    TSInfo, SubExpr);
4469 
4470   if (MustConsume) {
4471     Cleanup.setExprNeedsCleanups(true);
4472     Result = ImplicitCastExpr::Create(Context, T, CK_ARCConsumeObject, Result,
4473                                       nullptr, VK_RValue);
4474   }
4475 
4476   return Result;
4477 }
4478 
4479 ExprResult Sema::ActOnObjCBridgedCast(Scope *S,
4480                                       SourceLocation LParenLoc,
4481                                       ObjCBridgeCastKind Kind,
4482                                       SourceLocation BridgeKeywordLoc,
4483                                       ParsedType Type,
4484                                       SourceLocation RParenLoc,
4485                                       Expr *SubExpr) {
4486   TypeSourceInfo *TSInfo = nullptr;
4487   QualType T = GetTypeFromParser(Type, &TSInfo);
4488   if (Kind == OBC_Bridge)
4489     CheckTollFreeBridgeCast(T, SubExpr);
4490   if (!TSInfo)
4491     TSInfo = Context.getTrivialTypeSourceInfo(T, LParenLoc);
4492   return BuildObjCBridgedCast(LParenLoc, Kind, BridgeKeywordLoc, TSInfo,
4493                               SubExpr);
4494 }
4495