1 //===--- SemaType.cpp - Semantic Analysis for Types -----------------------===//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 //  This file implements type-related semantic analysis.
11 //
12 //===----------------------------------------------------------------------===//
13 
14 #include "TypeLocBuilder.h"
15 #include "clang/AST/ASTConsumer.h"
16 #include "clang/AST/ASTContext.h"
17 #include "clang/AST/ASTMutationListener.h"
18 #include "clang/AST/ASTStructuralEquivalence.h"
19 #include "clang/AST/CXXInheritance.h"
20 #include "clang/AST/DeclObjC.h"
21 #include "clang/AST/DeclTemplate.h"
22 #include "clang/AST/Expr.h"
23 #include "clang/AST/TypeLoc.h"
24 #include "clang/AST/TypeLocVisitor.h"
25 #include "clang/Basic/PartialDiagnostic.h"
26 #include "clang/Basic/TargetInfo.h"
27 #include "clang/Lex/Preprocessor.h"
28 #include "clang/Sema/DeclSpec.h"
29 #include "clang/Sema/DelayedDiagnostic.h"
30 #include "clang/Sema/Lookup.h"
31 #include "clang/Sema/ScopeInfo.h"
32 #include "clang/Sema/SemaInternal.h"
33 #include "clang/Sema/Template.h"
34 #include "llvm/ADT/SmallPtrSet.h"
35 #include "llvm/ADT/SmallString.h"
36 #include "llvm/ADT/StringSwitch.h"
37 #include "llvm/Support/ErrorHandling.h"
38 
39 using namespace clang;
40 
41 enum TypeDiagSelector {
42   TDS_Function,
43   TDS_Pointer,
44   TDS_ObjCObjOrBlock
45 };
46 
47 /// isOmittedBlockReturnType - Return true if this declarator is missing a
48 /// return type because this is a omitted return type on a block literal.
49 static bool isOmittedBlockReturnType(const Declarator &D) {
50   if (D.getContext() != Declarator::BlockLiteralContext ||
51       D.getDeclSpec().hasTypeSpecifier())
52     return false;
53 
54   if (D.getNumTypeObjects() == 0)
55     return true;   // ^{ ... }
56 
57   if (D.getNumTypeObjects() == 1 &&
58       D.getTypeObject(0).Kind == DeclaratorChunk::Function)
59     return true;   // ^(int X, float Y) { ... }
60 
61   return false;
62 }
63 
64 /// diagnoseBadTypeAttribute - Diagnoses a type attribute which
65 /// doesn't apply to the given type.
66 static void diagnoseBadTypeAttribute(Sema &S, const AttributeList &attr,
67                                      QualType type) {
68   TypeDiagSelector WhichType;
69   bool useExpansionLoc = true;
70   switch (attr.getKind()) {
71   case AttributeList::AT_ObjCGC:        WhichType = TDS_Pointer; break;
72   case AttributeList::AT_ObjCOwnership: WhichType = TDS_ObjCObjOrBlock; break;
73   default:
74     // Assume everything else was a function attribute.
75     WhichType = TDS_Function;
76     useExpansionLoc = false;
77     break;
78   }
79 
80   SourceLocation loc = attr.getLoc();
81   StringRef name = attr.getName()->getName();
82 
83   // The GC attributes are usually written with macros;  special-case them.
84   IdentifierInfo *II = attr.isArgIdent(0) ? attr.getArgAsIdent(0)->Ident
85                                           : nullptr;
86   if (useExpansionLoc && loc.isMacroID() && II) {
87     if (II->isStr("strong")) {
88       if (S.findMacroSpelling(loc, "__strong")) name = "__strong";
89     } else if (II->isStr("weak")) {
90       if (S.findMacroSpelling(loc, "__weak")) name = "__weak";
91     }
92   }
93 
94   S.Diag(loc, diag::warn_type_attribute_wrong_type) << name << WhichType
95     << type;
96 }
97 
98 // objc_gc applies to Objective-C pointers or, otherwise, to the
99 // smallest available pointer type (i.e. 'void*' in 'void**').
100 #define OBJC_POINTER_TYPE_ATTRS_CASELIST \
101     case AttributeList::AT_ObjCGC: \
102     case AttributeList::AT_ObjCOwnership
103 
104 // Calling convention attributes.
105 #define CALLING_CONV_ATTRS_CASELIST \
106     case AttributeList::AT_CDecl: \
107     case AttributeList::AT_FastCall: \
108     case AttributeList::AT_StdCall: \
109     case AttributeList::AT_ThisCall: \
110     case AttributeList::AT_RegCall: \
111     case AttributeList::AT_Pascal: \
112     case AttributeList::AT_SwiftCall: \
113     case AttributeList::AT_VectorCall: \
114     case AttributeList::AT_MSABI: \
115     case AttributeList::AT_SysVABI: \
116     case AttributeList::AT_Pcs: \
117     case AttributeList::AT_IntelOclBicc: \
118     case AttributeList::AT_PreserveMost: \
119     case AttributeList::AT_PreserveAll
120 
121 // Function type attributes.
122 #define FUNCTION_TYPE_ATTRS_CASELIST \
123   case AttributeList::AT_NSReturnsRetained: \
124   case AttributeList::AT_NoReturn: \
125   case AttributeList::AT_Regparm: \
126   case AttributeList::AT_AnyX86NoCallerSavedRegisters: \
127     CALLING_CONV_ATTRS_CASELIST
128 
129 // Microsoft-specific type qualifiers.
130 #define MS_TYPE_ATTRS_CASELIST  \
131     case AttributeList::AT_Ptr32: \
132     case AttributeList::AT_Ptr64: \
133     case AttributeList::AT_SPtr: \
134     case AttributeList::AT_UPtr
135 
136 // Nullability qualifiers.
137 #define NULLABILITY_TYPE_ATTRS_CASELIST         \
138     case AttributeList::AT_TypeNonNull:         \
139     case AttributeList::AT_TypeNullable:        \
140     case AttributeList::AT_TypeNullUnspecified
141 
142 namespace {
143   /// An object which stores processing state for the entire
144   /// GetTypeForDeclarator process.
145   class TypeProcessingState {
146     Sema &sema;
147 
148     /// The declarator being processed.
149     Declarator &declarator;
150 
151     /// The index of the declarator chunk we're currently processing.
152     /// May be the total number of valid chunks, indicating the
153     /// DeclSpec.
154     unsigned chunkIndex;
155 
156     /// Whether there are non-trivial modifications to the decl spec.
157     bool trivial;
158 
159     /// Whether we saved the attributes in the decl spec.
160     bool hasSavedAttrs;
161 
162     /// The original set of attributes on the DeclSpec.
163     SmallVector<AttributeList*, 2> savedAttrs;
164 
165     /// A list of attributes to diagnose the uselessness of when the
166     /// processing is complete.
167     SmallVector<AttributeList*, 2> ignoredTypeAttrs;
168 
169   public:
170     TypeProcessingState(Sema &sema, Declarator &declarator)
171       : sema(sema), declarator(declarator),
172         chunkIndex(declarator.getNumTypeObjects()),
173         trivial(true), hasSavedAttrs(false) {}
174 
175     Sema &getSema() const {
176       return sema;
177     }
178 
179     Declarator &getDeclarator() const {
180       return declarator;
181     }
182 
183     bool isProcessingDeclSpec() const {
184       return chunkIndex == declarator.getNumTypeObjects();
185     }
186 
187     unsigned getCurrentChunkIndex() const {
188       return chunkIndex;
189     }
190 
191     void setCurrentChunkIndex(unsigned idx) {
192       assert(idx <= declarator.getNumTypeObjects());
193       chunkIndex = idx;
194     }
195 
196     AttributeList *&getCurrentAttrListRef() const {
197       if (isProcessingDeclSpec())
198         return getMutableDeclSpec().getAttributes().getListRef();
199       return declarator.getTypeObject(chunkIndex).getAttrListRef();
200     }
201 
202     /// Save the current set of attributes on the DeclSpec.
203     void saveDeclSpecAttrs() {
204       // Don't try to save them multiple times.
205       if (hasSavedAttrs) return;
206 
207       DeclSpec &spec = getMutableDeclSpec();
208       for (AttributeList *attr = spec.getAttributes().getList(); attr;
209              attr = attr->getNext())
210         savedAttrs.push_back(attr);
211       trivial &= savedAttrs.empty();
212       hasSavedAttrs = true;
213     }
214 
215     /// Record that we had nowhere to put the given type attribute.
216     /// We will diagnose such attributes later.
217     void addIgnoredTypeAttr(AttributeList &attr) {
218       ignoredTypeAttrs.push_back(&attr);
219     }
220 
221     /// Diagnose all the ignored type attributes, given that the
222     /// declarator worked out to the given type.
223     void diagnoseIgnoredTypeAttrs(QualType type) const {
224       for (auto *Attr : ignoredTypeAttrs)
225         diagnoseBadTypeAttribute(getSema(), *Attr, type);
226     }
227 
228     ~TypeProcessingState() {
229       if (trivial) return;
230 
231       restoreDeclSpecAttrs();
232     }
233 
234   private:
235     DeclSpec &getMutableDeclSpec() const {
236       return const_cast<DeclSpec&>(declarator.getDeclSpec());
237     }
238 
239     void restoreDeclSpecAttrs() {
240       assert(hasSavedAttrs);
241 
242       if (savedAttrs.empty()) {
243         getMutableDeclSpec().getAttributes().set(nullptr);
244         return;
245       }
246 
247       getMutableDeclSpec().getAttributes().set(savedAttrs[0]);
248       for (unsigned i = 0, e = savedAttrs.size() - 1; i != e; ++i)
249         savedAttrs[i]->setNext(savedAttrs[i+1]);
250       savedAttrs.back()->setNext(nullptr);
251     }
252   };
253 } // end anonymous namespace
254 
255 static void spliceAttrIntoList(AttributeList &attr, AttributeList *&head) {
256   attr.setNext(head);
257   head = &attr;
258 }
259 
260 static void spliceAttrOutOfList(AttributeList &attr, AttributeList *&head) {
261   if (head == &attr) {
262     head = attr.getNext();
263     return;
264   }
265 
266   AttributeList *cur = head;
267   while (true) {
268     assert(cur && cur->getNext() && "ran out of attrs?");
269     if (cur->getNext() == &attr) {
270       cur->setNext(attr.getNext());
271       return;
272     }
273     cur = cur->getNext();
274   }
275 }
276 
277 static void moveAttrFromListToList(AttributeList &attr,
278                                    AttributeList *&fromList,
279                                    AttributeList *&toList) {
280   spliceAttrOutOfList(attr, fromList);
281   spliceAttrIntoList(attr, toList);
282 }
283 
284 /// The location of a type attribute.
285 enum TypeAttrLocation {
286   /// The attribute is in the decl-specifier-seq.
287   TAL_DeclSpec,
288   /// The attribute is part of a DeclaratorChunk.
289   TAL_DeclChunk,
290   /// The attribute is immediately after the declaration's name.
291   TAL_DeclName
292 };
293 
294 static void processTypeAttrs(TypeProcessingState &state,
295                              QualType &type, TypeAttrLocation TAL,
296                              AttributeList *attrs);
297 
298 static bool handleFunctionTypeAttr(TypeProcessingState &state,
299                                    AttributeList &attr,
300                                    QualType &type);
301 
302 static bool handleMSPointerTypeQualifierAttr(TypeProcessingState &state,
303                                              AttributeList &attr,
304                                              QualType &type);
305 
306 static bool handleObjCGCTypeAttr(TypeProcessingState &state,
307                                  AttributeList &attr, QualType &type);
308 
309 static bool handleObjCOwnershipTypeAttr(TypeProcessingState &state,
310                                        AttributeList &attr, QualType &type);
311 
312 static bool handleObjCPointerTypeAttr(TypeProcessingState &state,
313                                       AttributeList &attr, QualType &type) {
314   if (attr.getKind() == AttributeList::AT_ObjCGC)
315     return handleObjCGCTypeAttr(state, attr, type);
316   assert(attr.getKind() == AttributeList::AT_ObjCOwnership);
317   return handleObjCOwnershipTypeAttr(state, attr, type);
318 }
319 
320 /// Given the index of a declarator chunk, check whether that chunk
321 /// directly specifies the return type of a function and, if so, find
322 /// an appropriate place for it.
323 ///
324 /// \param i - a notional index which the search will start
325 ///   immediately inside
326 ///
327 /// \param onlyBlockPointers Whether we should only look into block
328 /// pointer types (vs. all pointer types).
329 static DeclaratorChunk *maybeMovePastReturnType(Declarator &declarator,
330                                                 unsigned i,
331                                                 bool onlyBlockPointers) {
332   assert(i <= declarator.getNumTypeObjects());
333 
334   DeclaratorChunk *result = nullptr;
335 
336   // First, look inwards past parens for a function declarator.
337   for (; i != 0; --i) {
338     DeclaratorChunk &fnChunk = declarator.getTypeObject(i-1);
339     switch (fnChunk.Kind) {
340     case DeclaratorChunk::Paren:
341       continue;
342 
343     // If we find anything except a function, bail out.
344     case DeclaratorChunk::Pointer:
345     case DeclaratorChunk::BlockPointer:
346     case DeclaratorChunk::Array:
347     case DeclaratorChunk::Reference:
348     case DeclaratorChunk::MemberPointer:
349     case DeclaratorChunk::Pipe:
350       return result;
351 
352     // If we do find a function declarator, scan inwards from that,
353     // looking for a (block-)pointer declarator.
354     case DeclaratorChunk::Function:
355       for (--i; i != 0; --i) {
356         DeclaratorChunk &ptrChunk = declarator.getTypeObject(i-1);
357         switch (ptrChunk.Kind) {
358         case DeclaratorChunk::Paren:
359         case DeclaratorChunk::Array:
360         case DeclaratorChunk::Function:
361         case DeclaratorChunk::Reference:
362         case DeclaratorChunk::Pipe:
363           continue;
364 
365         case DeclaratorChunk::MemberPointer:
366         case DeclaratorChunk::Pointer:
367           if (onlyBlockPointers)
368             continue;
369 
370           // fallthrough
371 
372         case DeclaratorChunk::BlockPointer:
373           result = &ptrChunk;
374           goto continue_outer;
375         }
376         llvm_unreachable("bad declarator chunk kind");
377       }
378 
379       // If we run out of declarators doing that, we're done.
380       return result;
381     }
382     llvm_unreachable("bad declarator chunk kind");
383 
384     // Okay, reconsider from our new point.
385   continue_outer: ;
386   }
387 
388   // Ran out of chunks, bail out.
389   return result;
390 }
391 
392 /// Given that an objc_gc attribute was written somewhere on a
393 /// declaration *other* than on the declarator itself (for which, use
394 /// distributeObjCPointerTypeAttrFromDeclarator), and given that it
395 /// didn't apply in whatever position it was written in, try to move
396 /// it to a more appropriate position.
397 static void distributeObjCPointerTypeAttr(TypeProcessingState &state,
398                                           AttributeList &attr,
399                                           QualType type) {
400   Declarator &declarator = state.getDeclarator();
401 
402   // Move it to the outermost normal or block pointer declarator.
403   for (unsigned i = state.getCurrentChunkIndex(); i != 0; --i) {
404     DeclaratorChunk &chunk = declarator.getTypeObject(i-1);
405     switch (chunk.Kind) {
406     case DeclaratorChunk::Pointer:
407     case DeclaratorChunk::BlockPointer: {
408       // But don't move an ARC ownership attribute to the return type
409       // of a block.
410       DeclaratorChunk *destChunk = nullptr;
411       if (state.isProcessingDeclSpec() &&
412           attr.getKind() == AttributeList::AT_ObjCOwnership)
413         destChunk = maybeMovePastReturnType(declarator, i - 1,
414                                             /*onlyBlockPointers=*/true);
415       if (!destChunk) destChunk = &chunk;
416 
417       moveAttrFromListToList(attr, state.getCurrentAttrListRef(),
418                              destChunk->getAttrListRef());
419       return;
420     }
421 
422     case DeclaratorChunk::Paren:
423     case DeclaratorChunk::Array:
424       continue;
425 
426     // We may be starting at the return type of a block.
427     case DeclaratorChunk::Function:
428       if (state.isProcessingDeclSpec() &&
429           attr.getKind() == AttributeList::AT_ObjCOwnership) {
430         if (DeclaratorChunk *dest = maybeMovePastReturnType(
431                                       declarator, i,
432                                       /*onlyBlockPointers=*/true)) {
433           moveAttrFromListToList(attr, state.getCurrentAttrListRef(),
434                                  dest->getAttrListRef());
435           return;
436         }
437       }
438       goto error;
439 
440     // Don't walk through these.
441     case DeclaratorChunk::Reference:
442     case DeclaratorChunk::MemberPointer:
443     case DeclaratorChunk::Pipe:
444       goto error;
445     }
446   }
447  error:
448 
449   diagnoseBadTypeAttribute(state.getSema(), attr, type);
450 }
451 
452 /// Distribute an objc_gc type attribute that was written on the
453 /// declarator.
454 static void
455 distributeObjCPointerTypeAttrFromDeclarator(TypeProcessingState &state,
456                                             AttributeList &attr,
457                                             QualType &declSpecType) {
458   Declarator &declarator = state.getDeclarator();
459 
460   // objc_gc goes on the innermost pointer to something that's not a
461   // pointer.
462   unsigned innermost = -1U;
463   bool considerDeclSpec = true;
464   for (unsigned i = 0, e = declarator.getNumTypeObjects(); i != e; ++i) {
465     DeclaratorChunk &chunk = declarator.getTypeObject(i);
466     switch (chunk.Kind) {
467     case DeclaratorChunk::Pointer:
468     case DeclaratorChunk::BlockPointer:
469       innermost = i;
470       continue;
471 
472     case DeclaratorChunk::Reference:
473     case DeclaratorChunk::MemberPointer:
474     case DeclaratorChunk::Paren:
475     case DeclaratorChunk::Array:
476     case DeclaratorChunk::Pipe:
477       continue;
478 
479     case DeclaratorChunk::Function:
480       considerDeclSpec = false;
481       goto done;
482     }
483   }
484  done:
485 
486   // That might actually be the decl spec if we weren't blocked by
487   // anything in the declarator.
488   if (considerDeclSpec) {
489     if (handleObjCPointerTypeAttr(state, attr, declSpecType)) {
490       // Splice the attribute into the decl spec.  Prevents the
491       // attribute from being applied multiple times and gives
492       // the source-location-filler something to work with.
493       state.saveDeclSpecAttrs();
494       moveAttrFromListToList(attr, declarator.getAttrListRef(),
495                declarator.getMutableDeclSpec().getAttributes().getListRef());
496       return;
497     }
498   }
499 
500   // Otherwise, if we found an appropriate chunk, splice the attribute
501   // into it.
502   if (innermost != -1U) {
503     moveAttrFromListToList(attr, declarator.getAttrListRef(),
504                        declarator.getTypeObject(innermost).getAttrListRef());
505     return;
506   }
507 
508   // Otherwise, diagnose when we're done building the type.
509   spliceAttrOutOfList(attr, declarator.getAttrListRef());
510   state.addIgnoredTypeAttr(attr);
511 }
512 
513 /// A function type attribute was written somewhere in a declaration
514 /// *other* than on the declarator itself or in the decl spec.  Given
515 /// that it didn't apply in whatever position it was written in, try
516 /// to move it to a more appropriate position.
517 static void distributeFunctionTypeAttr(TypeProcessingState &state,
518                                        AttributeList &attr,
519                                        QualType type) {
520   Declarator &declarator = state.getDeclarator();
521 
522   // Try to push the attribute from the return type of a function to
523   // the function itself.
524   for (unsigned i = state.getCurrentChunkIndex(); i != 0; --i) {
525     DeclaratorChunk &chunk = declarator.getTypeObject(i-1);
526     switch (chunk.Kind) {
527     case DeclaratorChunk::Function:
528       moveAttrFromListToList(attr, state.getCurrentAttrListRef(),
529                              chunk.getAttrListRef());
530       return;
531 
532     case DeclaratorChunk::Paren:
533     case DeclaratorChunk::Pointer:
534     case DeclaratorChunk::BlockPointer:
535     case DeclaratorChunk::Array:
536     case DeclaratorChunk::Reference:
537     case DeclaratorChunk::MemberPointer:
538     case DeclaratorChunk::Pipe:
539       continue;
540     }
541   }
542 
543   diagnoseBadTypeAttribute(state.getSema(), attr, type);
544 }
545 
546 /// Try to distribute a function type attribute to the innermost
547 /// function chunk or type.  Returns true if the attribute was
548 /// distributed, false if no location was found.
549 static bool
550 distributeFunctionTypeAttrToInnermost(TypeProcessingState &state,
551                                       AttributeList &attr,
552                                       AttributeList *&attrList,
553                                       QualType &declSpecType) {
554   Declarator &declarator = state.getDeclarator();
555 
556   // Put it on the innermost function chunk, if there is one.
557   for (unsigned i = 0, e = declarator.getNumTypeObjects(); i != e; ++i) {
558     DeclaratorChunk &chunk = declarator.getTypeObject(i);
559     if (chunk.Kind != DeclaratorChunk::Function) continue;
560 
561     moveAttrFromListToList(attr, attrList, chunk.getAttrListRef());
562     return true;
563   }
564 
565   return handleFunctionTypeAttr(state, attr, declSpecType);
566 }
567 
568 /// A function type attribute was written in the decl spec.  Try to
569 /// apply it somewhere.
570 static void
571 distributeFunctionTypeAttrFromDeclSpec(TypeProcessingState &state,
572                                        AttributeList &attr,
573                                        QualType &declSpecType) {
574   state.saveDeclSpecAttrs();
575 
576   // C++11 attributes before the decl specifiers actually appertain to
577   // the declarators. Move them straight there. We don't support the
578   // 'put them wherever you like' semantics we allow for GNU attributes.
579   if (attr.isCXX11Attribute()) {
580     moveAttrFromListToList(attr, state.getCurrentAttrListRef(),
581                            state.getDeclarator().getAttrListRef());
582     return;
583   }
584 
585   // Try to distribute to the innermost.
586   if (distributeFunctionTypeAttrToInnermost(state, attr,
587                                             state.getCurrentAttrListRef(),
588                                             declSpecType))
589     return;
590 
591   // If that failed, diagnose the bad attribute when the declarator is
592   // fully built.
593   state.addIgnoredTypeAttr(attr);
594 }
595 
596 /// A function type attribute was written on the declarator.  Try to
597 /// apply it somewhere.
598 static void
599 distributeFunctionTypeAttrFromDeclarator(TypeProcessingState &state,
600                                          AttributeList &attr,
601                                          QualType &declSpecType) {
602   Declarator &declarator = state.getDeclarator();
603 
604   // Try to distribute to the innermost.
605   if (distributeFunctionTypeAttrToInnermost(state, attr,
606                                             declarator.getAttrListRef(),
607                                             declSpecType))
608     return;
609 
610   // If that failed, diagnose the bad attribute when the declarator is
611   // fully built.
612   spliceAttrOutOfList(attr, declarator.getAttrListRef());
613   state.addIgnoredTypeAttr(attr);
614 }
615 
616 /// \brief Given that there are attributes written on the declarator
617 /// itself, try to distribute any type attributes to the appropriate
618 /// declarator chunk.
619 ///
620 /// These are attributes like the following:
621 ///   int f ATTR;
622 ///   int (f ATTR)();
623 /// but not necessarily this:
624 ///   int f() ATTR;
625 static void distributeTypeAttrsFromDeclarator(TypeProcessingState &state,
626                                               QualType &declSpecType) {
627   // Collect all the type attributes from the declarator itself.
628   assert(state.getDeclarator().getAttributes() && "declarator has no attrs!");
629   AttributeList *attr = state.getDeclarator().getAttributes();
630   AttributeList *next;
631   do {
632     next = attr->getNext();
633 
634     // Do not distribute C++11 attributes. They have strict rules for what
635     // they appertain to.
636     if (attr->isCXX11Attribute())
637       continue;
638 
639     switch (attr->getKind()) {
640     OBJC_POINTER_TYPE_ATTRS_CASELIST:
641       distributeObjCPointerTypeAttrFromDeclarator(state, *attr, declSpecType);
642       break;
643 
644     FUNCTION_TYPE_ATTRS_CASELIST:
645       distributeFunctionTypeAttrFromDeclarator(state, *attr, declSpecType);
646       break;
647 
648     MS_TYPE_ATTRS_CASELIST:
649       // Microsoft type attributes cannot go after the declarator-id.
650       continue;
651 
652     NULLABILITY_TYPE_ATTRS_CASELIST:
653       // Nullability specifiers cannot go after the declarator-id.
654 
655     // Objective-C __kindof does not get distributed.
656     case AttributeList::AT_ObjCKindOf:
657       continue;
658 
659     default:
660       break;
661     }
662   } while ((attr = next));
663 }
664 
665 /// Add a synthetic '()' to a block-literal declarator if it is
666 /// required, given the return type.
667 static void maybeSynthesizeBlockSignature(TypeProcessingState &state,
668                                           QualType declSpecType) {
669   Declarator &declarator = state.getDeclarator();
670 
671   // First, check whether the declarator would produce a function,
672   // i.e. whether the innermost semantic chunk is a function.
673   if (declarator.isFunctionDeclarator()) {
674     // If so, make that declarator a prototyped declarator.
675     declarator.getFunctionTypeInfo().hasPrototype = true;
676     return;
677   }
678 
679   // If there are any type objects, the type as written won't name a
680   // function, regardless of the decl spec type.  This is because a
681   // block signature declarator is always an abstract-declarator, and
682   // abstract-declarators can't just be parentheses chunks.  Therefore
683   // we need to build a function chunk unless there are no type
684   // objects and the decl spec type is a function.
685   if (!declarator.getNumTypeObjects() && declSpecType->isFunctionType())
686     return;
687 
688   // Note that there *are* cases with invalid declarators where
689   // declarators consist solely of parentheses.  In general, these
690   // occur only in failed efforts to make function declarators, so
691   // faking up the function chunk is still the right thing to do.
692 
693   // Otherwise, we need to fake up a function declarator.
694   SourceLocation loc = declarator.getLocStart();
695 
696   // ...and *prepend* it to the declarator.
697   SourceLocation NoLoc;
698   declarator.AddInnermostTypeInfo(DeclaratorChunk::getFunction(
699       /*HasProto=*/true,
700       /*IsAmbiguous=*/false,
701       /*LParenLoc=*/NoLoc,
702       /*ArgInfo=*/nullptr,
703       /*NumArgs=*/0,
704       /*EllipsisLoc=*/NoLoc,
705       /*RParenLoc=*/NoLoc,
706       /*TypeQuals=*/0,
707       /*RefQualifierIsLvalueRef=*/true,
708       /*RefQualifierLoc=*/NoLoc,
709       /*ConstQualifierLoc=*/NoLoc,
710       /*VolatileQualifierLoc=*/NoLoc,
711       /*RestrictQualifierLoc=*/NoLoc,
712       /*MutableLoc=*/NoLoc, EST_None,
713       /*ESpecRange=*/SourceRange(),
714       /*Exceptions=*/nullptr,
715       /*ExceptionRanges=*/nullptr,
716       /*NumExceptions=*/0,
717       /*NoexceptExpr=*/nullptr,
718       /*ExceptionSpecTokens=*/nullptr,
719       /*DeclsInPrototype=*/None,
720       loc, loc, declarator));
721 
722   // For consistency, make sure the state still has us as processing
723   // the decl spec.
724   assert(state.getCurrentChunkIndex() == declarator.getNumTypeObjects() - 1);
725   state.setCurrentChunkIndex(declarator.getNumTypeObjects());
726 }
727 
728 static void diagnoseAndRemoveTypeQualifiers(Sema &S, const DeclSpec &DS,
729                                             unsigned &TypeQuals,
730                                             QualType TypeSoFar,
731                                             unsigned RemoveTQs,
732                                             unsigned DiagID) {
733   // If this occurs outside a template instantiation, warn the user about
734   // it; they probably didn't mean to specify a redundant qualifier.
735   typedef std::pair<DeclSpec::TQ, SourceLocation> QualLoc;
736   for (QualLoc Qual : {QualLoc(DeclSpec::TQ_const, DS.getConstSpecLoc()),
737                        QualLoc(DeclSpec::TQ_restrict, DS.getRestrictSpecLoc()),
738                        QualLoc(DeclSpec::TQ_volatile, DS.getVolatileSpecLoc()),
739                        QualLoc(DeclSpec::TQ_atomic, DS.getAtomicSpecLoc())}) {
740     if (!(RemoveTQs & Qual.first))
741       continue;
742 
743     if (!S.inTemplateInstantiation()) {
744       if (TypeQuals & Qual.first)
745         S.Diag(Qual.second, DiagID)
746           << DeclSpec::getSpecifierName(Qual.first) << TypeSoFar
747           << FixItHint::CreateRemoval(Qual.second);
748     }
749 
750     TypeQuals &= ~Qual.first;
751   }
752 }
753 
754 /// Return true if this is omitted block return type. Also check type
755 /// attributes and type qualifiers when returning true.
756 static bool checkOmittedBlockReturnType(Sema &S, Declarator &declarator,
757                                         QualType Result) {
758   if (!isOmittedBlockReturnType(declarator))
759     return false;
760 
761   // Warn if we see type attributes for omitted return type on a block literal.
762   AttributeList *&attrs =
763       declarator.getMutableDeclSpec().getAttributes().getListRef();
764   AttributeList *prev = nullptr;
765   for (AttributeList *cur = attrs; cur; cur = cur->getNext()) {
766     AttributeList &attr = *cur;
767     // Skip attributes that were marked to be invalid or non-type
768     // attributes.
769     if (attr.isInvalid() || !attr.isTypeAttr()) {
770       prev = cur;
771       continue;
772     }
773     S.Diag(attr.getLoc(),
774            diag::warn_block_literal_attributes_on_omitted_return_type)
775         << attr.getName();
776     // Remove cur from the list.
777     if (prev) {
778       prev->setNext(cur->getNext());
779       prev = cur;
780     } else {
781       attrs = cur->getNext();
782     }
783   }
784 
785   // Warn if we see type qualifiers for omitted return type on a block literal.
786   const DeclSpec &DS = declarator.getDeclSpec();
787   unsigned TypeQuals = DS.getTypeQualifiers();
788   diagnoseAndRemoveTypeQualifiers(S, DS, TypeQuals, Result, (unsigned)-1,
789       diag::warn_block_literal_qualifiers_on_omitted_return_type);
790   declarator.getMutableDeclSpec().ClearTypeQualifiers();
791 
792   return true;
793 }
794 
795 /// Apply Objective-C type arguments to the given type.
796 static QualType applyObjCTypeArgs(Sema &S, SourceLocation loc, QualType type,
797                                   ArrayRef<TypeSourceInfo *> typeArgs,
798                                   SourceRange typeArgsRange,
799                                   bool failOnError = false) {
800   // We can only apply type arguments to an Objective-C class type.
801   const auto *objcObjectType = type->getAs<ObjCObjectType>();
802   if (!objcObjectType || !objcObjectType->getInterface()) {
803     S.Diag(loc, diag::err_objc_type_args_non_class)
804       << type
805       << typeArgsRange;
806 
807     if (failOnError)
808       return QualType();
809     return type;
810   }
811 
812   // The class type must be parameterized.
813   ObjCInterfaceDecl *objcClass = objcObjectType->getInterface();
814   ObjCTypeParamList *typeParams = objcClass->getTypeParamList();
815   if (!typeParams) {
816     S.Diag(loc, diag::err_objc_type_args_non_parameterized_class)
817       << objcClass->getDeclName()
818       << FixItHint::CreateRemoval(typeArgsRange);
819 
820     if (failOnError)
821       return QualType();
822 
823     return type;
824   }
825 
826   // The type must not already be specialized.
827   if (objcObjectType->isSpecialized()) {
828     S.Diag(loc, diag::err_objc_type_args_specialized_class)
829       << type
830       << FixItHint::CreateRemoval(typeArgsRange);
831 
832     if (failOnError)
833       return QualType();
834 
835     return type;
836   }
837 
838   // Check the type arguments.
839   SmallVector<QualType, 4> finalTypeArgs;
840   unsigned numTypeParams = typeParams->size();
841   bool anyPackExpansions = false;
842   for (unsigned i = 0, n = typeArgs.size(); i != n; ++i) {
843     TypeSourceInfo *typeArgInfo = typeArgs[i];
844     QualType typeArg = typeArgInfo->getType();
845 
846     // Type arguments cannot have explicit qualifiers or nullability.
847     // We ignore indirect sources of these, e.g. behind typedefs or
848     // template arguments.
849     if (TypeLoc qual = typeArgInfo->getTypeLoc().findExplicitQualifierLoc()) {
850       bool diagnosed = false;
851       SourceRange rangeToRemove;
852       if (auto attr = qual.getAs<AttributedTypeLoc>()) {
853         rangeToRemove = attr.getLocalSourceRange();
854         if (attr.getTypePtr()->getImmediateNullability()) {
855           typeArg = attr.getTypePtr()->getModifiedType();
856           S.Diag(attr.getLocStart(),
857                  diag::err_objc_type_arg_explicit_nullability)
858             << typeArg << FixItHint::CreateRemoval(rangeToRemove);
859           diagnosed = true;
860         }
861       }
862 
863       if (!diagnosed) {
864         S.Diag(qual.getLocStart(), diag::err_objc_type_arg_qualified)
865           << typeArg << typeArg.getQualifiers().getAsString()
866           << FixItHint::CreateRemoval(rangeToRemove);
867       }
868     }
869 
870     // Remove qualifiers even if they're non-local.
871     typeArg = typeArg.getUnqualifiedType();
872 
873     finalTypeArgs.push_back(typeArg);
874 
875     if (typeArg->getAs<PackExpansionType>())
876       anyPackExpansions = true;
877 
878     // Find the corresponding type parameter, if there is one.
879     ObjCTypeParamDecl *typeParam = nullptr;
880     if (!anyPackExpansions) {
881       if (i < numTypeParams) {
882         typeParam = typeParams->begin()[i];
883       } else {
884         // Too many arguments.
885         S.Diag(loc, diag::err_objc_type_args_wrong_arity)
886           << false
887           << objcClass->getDeclName()
888           << (unsigned)typeArgs.size()
889           << numTypeParams;
890         S.Diag(objcClass->getLocation(), diag::note_previous_decl)
891           << objcClass;
892 
893         if (failOnError)
894           return QualType();
895 
896         return type;
897       }
898     }
899 
900     // Objective-C object pointer types must be substitutable for the bounds.
901     if (const auto *typeArgObjC = typeArg->getAs<ObjCObjectPointerType>()) {
902       // If we don't have a type parameter to match against, assume
903       // everything is fine. There was a prior pack expansion that
904       // means we won't be able to match anything.
905       if (!typeParam) {
906         assert(anyPackExpansions && "Too many arguments?");
907         continue;
908       }
909 
910       // Retrieve the bound.
911       QualType bound = typeParam->getUnderlyingType();
912       const auto *boundObjC = bound->getAs<ObjCObjectPointerType>();
913 
914       // Determine whether the type argument is substitutable for the bound.
915       if (typeArgObjC->isObjCIdType()) {
916         // When the type argument is 'id', the only acceptable type
917         // parameter bound is 'id'.
918         if (boundObjC->isObjCIdType())
919           continue;
920       } else if (S.Context.canAssignObjCInterfaces(boundObjC, typeArgObjC)) {
921         // Otherwise, we follow the assignability rules.
922         continue;
923       }
924 
925       // Diagnose the mismatch.
926       S.Diag(typeArgInfo->getTypeLoc().getLocStart(),
927              diag::err_objc_type_arg_does_not_match_bound)
928         << typeArg << bound << typeParam->getDeclName();
929       S.Diag(typeParam->getLocation(), diag::note_objc_type_param_here)
930         << typeParam->getDeclName();
931 
932       if (failOnError)
933         return QualType();
934 
935       return type;
936     }
937 
938     // Block pointer types are permitted for unqualified 'id' bounds.
939     if (typeArg->isBlockPointerType()) {
940       // If we don't have a type parameter to match against, assume
941       // everything is fine. There was a prior pack expansion that
942       // means we won't be able to match anything.
943       if (!typeParam) {
944         assert(anyPackExpansions && "Too many arguments?");
945         continue;
946       }
947 
948       // Retrieve the bound.
949       QualType bound = typeParam->getUnderlyingType();
950       if (bound->isBlockCompatibleObjCPointerType(S.Context))
951         continue;
952 
953       // Diagnose the mismatch.
954       S.Diag(typeArgInfo->getTypeLoc().getLocStart(),
955              diag::err_objc_type_arg_does_not_match_bound)
956         << typeArg << bound << typeParam->getDeclName();
957       S.Diag(typeParam->getLocation(), diag::note_objc_type_param_here)
958         << typeParam->getDeclName();
959 
960       if (failOnError)
961         return QualType();
962 
963       return type;
964     }
965 
966     // Dependent types will be checked at instantiation time.
967     if (typeArg->isDependentType()) {
968       continue;
969     }
970 
971     // Diagnose non-id-compatible type arguments.
972     S.Diag(typeArgInfo->getTypeLoc().getLocStart(),
973            diag::err_objc_type_arg_not_id_compatible)
974       << typeArg
975       << typeArgInfo->getTypeLoc().getSourceRange();
976 
977     if (failOnError)
978       return QualType();
979 
980     return type;
981   }
982 
983   // Make sure we didn't have the wrong number of arguments.
984   if (!anyPackExpansions && finalTypeArgs.size() != numTypeParams) {
985     S.Diag(loc, diag::err_objc_type_args_wrong_arity)
986       << (typeArgs.size() < typeParams->size())
987       << objcClass->getDeclName()
988       << (unsigned)finalTypeArgs.size()
989       << (unsigned)numTypeParams;
990     S.Diag(objcClass->getLocation(), diag::note_previous_decl)
991       << objcClass;
992 
993     if (failOnError)
994       return QualType();
995 
996     return type;
997   }
998 
999   // Success. Form the specialized type.
1000   return S.Context.getObjCObjectType(type, finalTypeArgs, { }, false);
1001 }
1002 
1003 QualType Sema::BuildObjCTypeParamType(const ObjCTypeParamDecl *Decl,
1004                                       SourceLocation ProtocolLAngleLoc,
1005                                       ArrayRef<ObjCProtocolDecl *> Protocols,
1006                                       ArrayRef<SourceLocation> ProtocolLocs,
1007                                       SourceLocation ProtocolRAngleLoc,
1008                                       bool FailOnError) {
1009   QualType Result = QualType(Decl->getTypeForDecl(), 0);
1010   if (!Protocols.empty()) {
1011     bool HasError;
1012     Result = Context.applyObjCProtocolQualifiers(Result, Protocols,
1013                                                  HasError);
1014     if (HasError) {
1015       Diag(SourceLocation(), diag::err_invalid_protocol_qualifiers)
1016         << SourceRange(ProtocolLAngleLoc, ProtocolRAngleLoc);
1017       if (FailOnError) Result = QualType();
1018     }
1019     if (FailOnError && Result.isNull())
1020       return QualType();
1021   }
1022 
1023   return Result;
1024 }
1025 
1026 QualType Sema::BuildObjCObjectType(QualType BaseType,
1027                                    SourceLocation Loc,
1028                                    SourceLocation TypeArgsLAngleLoc,
1029                                    ArrayRef<TypeSourceInfo *> TypeArgs,
1030                                    SourceLocation TypeArgsRAngleLoc,
1031                                    SourceLocation ProtocolLAngleLoc,
1032                                    ArrayRef<ObjCProtocolDecl *> Protocols,
1033                                    ArrayRef<SourceLocation> ProtocolLocs,
1034                                    SourceLocation ProtocolRAngleLoc,
1035                                    bool FailOnError) {
1036   QualType Result = BaseType;
1037   if (!TypeArgs.empty()) {
1038     Result = applyObjCTypeArgs(*this, Loc, Result, TypeArgs,
1039                                SourceRange(TypeArgsLAngleLoc,
1040                                            TypeArgsRAngleLoc),
1041                                FailOnError);
1042     if (FailOnError && Result.isNull())
1043       return QualType();
1044   }
1045 
1046   if (!Protocols.empty()) {
1047     bool HasError;
1048     Result = Context.applyObjCProtocolQualifiers(Result, Protocols,
1049                                                  HasError);
1050     if (HasError) {
1051       Diag(Loc, diag::err_invalid_protocol_qualifiers)
1052         << SourceRange(ProtocolLAngleLoc, ProtocolRAngleLoc);
1053       if (FailOnError) Result = QualType();
1054     }
1055     if (FailOnError && Result.isNull())
1056       return QualType();
1057   }
1058 
1059   return Result;
1060 }
1061 
1062 TypeResult Sema::actOnObjCProtocolQualifierType(
1063              SourceLocation lAngleLoc,
1064              ArrayRef<Decl *> protocols,
1065              ArrayRef<SourceLocation> protocolLocs,
1066              SourceLocation rAngleLoc) {
1067   // Form id<protocol-list>.
1068   QualType Result = Context.getObjCObjectType(
1069                       Context.ObjCBuiltinIdTy, { },
1070                       llvm::makeArrayRef(
1071                         (ObjCProtocolDecl * const *)protocols.data(),
1072                         protocols.size()),
1073                       false);
1074   Result = Context.getObjCObjectPointerType(Result);
1075 
1076   TypeSourceInfo *ResultTInfo = Context.CreateTypeSourceInfo(Result);
1077   TypeLoc ResultTL = ResultTInfo->getTypeLoc();
1078 
1079   auto ObjCObjectPointerTL = ResultTL.castAs<ObjCObjectPointerTypeLoc>();
1080   ObjCObjectPointerTL.setStarLoc(SourceLocation()); // implicit
1081 
1082   auto ObjCObjectTL = ObjCObjectPointerTL.getPointeeLoc()
1083                         .castAs<ObjCObjectTypeLoc>();
1084   ObjCObjectTL.setHasBaseTypeAsWritten(false);
1085   ObjCObjectTL.getBaseLoc().initialize(Context, SourceLocation());
1086 
1087   // No type arguments.
1088   ObjCObjectTL.setTypeArgsLAngleLoc(SourceLocation());
1089   ObjCObjectTL.setTypeArgsRAngleLoc(SourceLocation());
1090 
1091   // Fill in protocol qualifiers.
1092   ObjCObjectTL.setProtocolLAngleLoc(lAngleLoc);
1093   ObjCObjectTL.setProtocolRAngleLoc(rAngleLoc);
1094   for (unsigned i = 0, n = protocols.size(); i != n; ++i)
1095     ObjCObjectTL.setProtocolLoc(i, protocolLocs[i]);
1096 
1097   // We're done. Return the completed type to the parser.
1098   return CreateParsedType(Result, ResultTInfo);
1099 }
1100 
1101 TypeResult Sema::actOnObjCTypeArgsAndProtocolQualifiers(
1102              Scope *S,
1103              SourceLocation Loc,
1104              ParsedType BaseType,
1105              SourceLocation TypeArgsLAngleLoc,
1106              ArrayRef<ParsedType> TypeArgs,
1107              SourceLocation TypeArgsRAngleLoc,
1108              SourceLocation ProtocolLAngleLoc,
1109              ArrayRef<Decl *> Protocols,
1110              ArrayRef<SourceLocation> ProtocolLocs,
1111              SourceLocation ProtocolRAngleLoc) {
1112   TypeSourceInfo *BaseTypeInfo = nullptr;
1113   QualType T = GetTypeFromParser(BaseType, &BaseTypeInfo);
1114   if (T.isNull())
1115     return true;
1116 
1117   // Handle missing type-source info.
1118   if (!BaseTypeInfo)
1119     BaseTypeInfo = Context.getTrivialTypeSourceInfo(T, Loc);
1120 
1121   // Extract type arguments.
1122   SmallVector<TypeSourceInfo *, 4> ActualTypeArgInfos;
1123   for (unsigned i = 0, n = TypeArgs.size(); i != n; ++i) {
1124     TypeSourceInfo *TypeArgInfo = nullptr;
1125     QualType TypeArg = GetTypeFromParser(TypeArgs[i], &TypeArgInfo);
1126     if (TypeArg.isNull()) {
1127       ActualTypeArgInfos.clear();
1128       break;
1129     }
1130 
1131     assert(TypeArgInfo && "No type source info?");
1132     ActualTypeArgInfos.push_back(TypeArgInfo);
1133   }
1134 
1135   // Build the object type.
1136   QualType Result = BuildObjCObjectType(
1137       T, BaseTypeInfo->getTypeLoc().getSourceRange().getBegin(),
1138       TypeArgsLAngleLoc, ActualTypeArgInfos, TypeArgsRAngleLoc,
1139       ProtocolLAngleLoc,
1140       llvm::makeArrayRef((ObjCProtocolDecl * const *)Protocols.data(),
1141                          Protocols.size()),
1142       ProtocolLocs, ProtocolRAngleLoc,
1143       /*FailOnError=*/false);
1144 
1145   if (Result == T)
1146     return BaseType;
1147 
1148   // Create source information for this type.
1149   TypeSourceInfo *ResultTInfo = Context.CreateTypeSourceInfo(Result);
1150   TypeLoc ResultTL = ResultTInfo->getTypeLoc();
1151 
1152   // For id<Proto1, Proto2> or Class<Proto1, Proto2>, we'll have an
1153   // object pointer type. Fill in source information for it.
1154   if (auto ObjCObjectPointerTL = ResultTL.getAs<ObjCObjectPointerTypeLoc>()) {
1155     // The '*' is implicit.
1156     ObjCObjectPointerTL.setStarLoc(SourceLocation());
1157     ResultTL = ObjCObjectPointerTL.getPointeeLoc();
1158   }
1159 
1160   if (auto OTPTL = ResultTL.getAs<ObjCTypeParamTypeLoc>()) {
1161     // Protocol qualifier information.
1162     if (OTPTL.getNumProtocols() > 0) {
1163       assert(OTPTL.getNumProtocols() == Protocols.size());
1164       OTPTL.setProtocolLAngleLoc(ProtocolLAngleLoc);
1165       OTPTL.setProtocolRAngleLoc(ProtocolRAngleLoc);
1166       for (unsigned i = 0, n = Protocols.size(); i != n; ++i)
1167         OTPTL.setProtocolLoc(i, ProtocolLocs[i]);
1168     }
1169 
1170     // We're done. Return the completed type to the parser.
1171     return CreateParsedType(Result, ResultTInfo);
1172   }
1173 
1174   auto ObjCObjectTL = ResultTL.castAs<ObjCObjectTypeLoc>();
1175 
1176   // Type argument information.
1177   if (ObjCObjectTL.getNumTypeArgs() > 0) {
1178     assert(ObjCObjectTL.getNumTypeArgs() == ActualTypeArgInfos.size());
1179     ObjCObjectTL.setTypeArgsLAngleLoc(TypeArgsLAngleLoc);
1180     ObjCObjectTL.setTypeArgsRAngleLoc(TypeArgsRAngleLoc);
1181     for (unsigned i = 0, n = ActualTypeArgInfos.size(); i != n; ++i)
1182       ObjCObjectTL.setTypeArgTInfo(i, ActualTypeArgInfos[i]);
1183   } else {
1184     ObjCObjectTL.setTypeArgsLAngleLoc(SourceLocation());
1185     ObjCObjectTL.setTypeArgsRAngleLoc(SourceLocation());
1186   }
1187 
1188   // Protocol qualifier information.
1189   if (ObjCObjectTL.getNumProtocols() > 0) {
1190     assert(ObjCObjectTL.getNumProtocols() == Protocols.size());
1191     ObjCObjectTL.setProtocolLAngleLoc(ProtocolLAngleLoc);
1192     ObjCObjectTL.setProtocolRAngleLoc(ProtocolRAngleLoc);
1193     for (unsigned i = 0, n = Protocols.size(); i != n; ++i)
1194       ObjCObjectTL.setProtocolLoc(i, ProtocolLocs[i]);
1195   } else {
1196     ObjCObjectTL.setProtocolLAngleLoc(SourceLocation());
1197     ObjCObjectTL.setProtocolRAngleLoc(SourceLocation());
1198   }
1199 
1200   // Base type.
1201   ObjCObjectTL.setHasBaseTypeAsWritten(true);
1202   if (ObjCObjectTL.getType() == T)
1203     ObjCObjectTL.getBaseLoc().initializeFullCopy(BaseTypeInfo->getTypeLoc());
1204   else
1205     ObjCObjectTL.getBaseLoc().initialize(Context, Loc);
1206 
1207   // We're done. Return the completed type to the parser.
1208   return CreateParsedType(Result, ResultTInfo);
1209 }
1210 
1211 static OpenCLAccessAttr::Spelling getImageAccess(const AttributeList *Attrs) {
1212   if (Attrs) {
1213     const AttributeList *Next = Attrs;
1214     do {
1215       const AttributeList &Attr = *Next;
1216       Next = Attr.getNext();
1217       if (Attr.getKind() == AttributeList::AT_OpenCLAccess) {
1218         return static_cast<OpenCLAccessAttr::Spelling>(
1219             Attr.getSemanticSpelling());
1220       }
1221     } while (Next);
1222   }
1223   return OpenCLAccessAttr::Keyword_read_only;
1224 }
1225 
1226 /// \brief Convert the specified declspec to the appropriate type
1227 /// object.
1228 /// \param state Specifies the declarator containing the declaration specifier
1229 /// to be converted, along with other associated processing state.
1230 /// \returns The type described by the declaration specifiers.  This function
1231 /// never returns null.
1232 static QualType ConvertDeclSpecToType(TypeProcessingState &state) {
1233   // FIXME: Should move the logic from DeclSpec::Finish to here for validity
1234   // checking.
1235 
1236   Sema &S = state.getSema();
1237   Declarator &declarator = state.getDeclarator();
1238   const DeclSpec &DS = declarator.getDeclSpec();
1239   SourceLocation DeclLoc = declarator.getIdentifierLoc();
1240   if (DeclLoc.isInvalid())
1241     DeclLoc = DS.getLocStart();
1242 
1243   ASTContext &Context = S.Context;
1244 
1245   QualType Result;
1246   switch (DS.getTypeSpecType()) {
1247   case DeclSpec::TST_void:
1248     Result = Context.VoidTy;
1249     break;
1250   case DeclSpec::TST_char:
1251     if (DS.getTypeSpecSign() == DeclSpec::TSS_unspecified)
1252       Result = Context.CharTy;
1253     else if (DS.getTypeSpecSign() == DeclSpec::TSS_signed)
1254       Result = Context.SignedCharTy;
1255     else {
1256       assert(DS.getTypeSpecSign() == DeclSpec::TSS_unsigned &&
1257              "Unknown TSS value");
1258       Result = Context.UnsignedCharTy;
1259     }
1260     break;
1261   case DeclSpec::TST_wchar:
1262     if (DS.getTypeSpecSign() == DeclSpec::TSS_unspecified)
1263       Result = Context.WCharTy;
1264     else if (DS.getTypeSpecSign() == DeclSpec::TSS_signed) {
1265       S.Diag(DS.getTypeSpecSignLoc(), diag::ext_invalid_sign_spec)
1266         << DS.getSpecifierName(DS.getTypeSpecType(),
1267                                Context.getPrintingPolicy());
1268       Result = Context.getSignedWCharType();
1269     } else {
1270       assert(DS.getTypeSpecSign() == DeclSpec::TSS_unsigned &&
1271         "Unknown TSS value");
1272       S.Diag(DS.getTypeSpecSignLoc(), diag::ext_invalid_sign_spec)
1273         << DS.getSpecifierName(DS.getTypeSpecType(),
1274                                Context.getPrintingPolicy());
1275       Result = Context.getUnsignedWCharType();
1276     }
1277     break;
1278   case DeclSpec::TST_char16:
1279       assert(DS.getTypeSpecSign() == DeclSpec::TSS_unspecified &&
1280         "Unknown TSS value");
1281       Result = Context.Char16Ty;
1282     break;
1283   case DeclSpec::TST_char32:
1284       assert(DS.getTypeSpecSign() == DeclSpec::TSS_unspecified &&
1285         "Unknown TSS value");
1286       Result = Context.Char32Ty;
1287     break;
1288   case DeclSpec::TST_unspecified:
1289     // If this is a missing declspec in a block literal return context, then it
1290     // is inferred from the return statements inside the block.
1291     // The declspec is always missing in a lambda expr context; it is either
1292     // specified with a trailing return type or inferred.
1293     if (S.getLangOpts().CPlusPlus14 &&
1294         declarator.getContext() == Declarator::LambdaExprContext) {
1295       // In C++1y, a lambda's implicit return type is 'auto'.
1296       Result = Context.getAutoDeductType();
1297       break;
1298     } else if (declarator.getContext() == Declarator::LambdaExprContext ||
1299                checkOmittedBlockReturnType(S, declarator,
1300                                            Context.DependentTy)) {
1301       Result = Context.DependentTy;
1302       break;
1303     }
1304 
1305     // Unspecified typespec defaults to int in C90.  However, the C90 grammar
1306     // [C90 6.5] only allows a decl-spec if there was *some* type-specifier,
1307     // type-qualifier, or storage-class-specifier.  If not, emit an extwarn.
1308     // Note that the one exception to this is function definitions, which are
1309     // allowed to be completely missing a declspec.  This is handled in the
1310     // parser already though by it pretending to have seen an 'int' in this
1311     // case.
1312     if (S.getLangOpts().ImplicitInt) {
1313       // In C89 mode, we only warn if there is a completely missing declspec
1314       // when one is not allowed.
1315       if (DS.isEmpty()) {
1316         S.Diag(DeclLoc, diag::ext_missing_declspec)
1317           << DS.getSourceRange()
1318         << FixItHint::CreateInsertion(DS.getLocStart(), "int");
1319       }
1320     } else if (!DS.hasTypeSpecifier()) {
1321       // C99 and C++ require a type specifier.  For example, C99 6.7.2p2 says:
1322       // "At least one type specifier shall be given in the declaration
1323       // specifiers in each declaration, and in the specifier-qualifier list in
1324       // each struct declaration and type name."
1325       if (S.getLangOpts().CPlusPlus) {
1326         S.Diag(DeclLoc, diag::err_missing_type_specifier)
1327           << DS.getSourceRange();
1328 
1329         // When this occurs in C++ code, often something is very broken with the
1330         // value being declared, poison it as invalid so we don't get chains of
1331         // errors.
1332         declarator.setInvalidType(true);
1333       } else if (S.getLangOpts().OpenCLVersion >= 200 && DS.isTypeSpecPipe()){
1334         S.Diag(DeclLoc, diag::err_missing_actual_pipe_type)
1335           << DS.getSourceRange();
1336         declarator.setInvalidType(true);
1337       } else {
1338         S.Diag(DeclLoc, diag::ext_missing_type_specifier)
1339           << DS.getSourceRange();
1340       }
1341     }
1342 
1343     // FALL THROUGH.
1344   case DeclSpec::TST_int: {
1345     if (DS.getTypeSpecSign() != DeclSpec::TSS_unsigned) {
1346       switch (DS.getTypeSpecWidth()) {
1347       case DeclSpec::TSW_unspecified: Result = Context.IntTy; break;
1348       case DeclSpec::TSW_short:       Result = Context.ShortTy; break;
1349       case DeclSpec::TSW_long:        Result = Context.LongTy; break;
1350       case DeclSpec::TSW_longlong:
1351         Result = Context.LongLongTy;
1352 
1353         // 'long long' is a C99 or C++11 feature.
1354         if (!S.getLangOpts().C99) {
1355           if (S.getLangOpts().CPlusPlus)
1356             S.Diag(DS.getTypeSpecWidthLoc(),
1357                    S.getLangOpts().CPlusPlus11 ?
1358                    diag::warn_cxx98_compat_longlong : diag::ext_cxx11_longlong);
1359           else
1360             S.Diag(DS.getTypeSpecWidthLoc(), diag::ext_c99_longlong);
1361         }
1362         break;
1363       }
1364     } else {
1365       switch (DS.getTypeSpecWidth()) {
1366       case DeclSpec::TSW_unspecified: Result = Context.UnsignedIntTy; break;
1367       case DeclSpec::TSW_short:       Result = Context.UnsignedShortTy; break;
1368       case DeclSpec::TSW_long:        Result = Context.UnsignedLongTy; break;
1369       case DeclSpec::TSW_longlong:
1370         Result = Context.UnsignedLongLongTy;
1371 
1372         // 'long long' is a C99 or C++11 feature.
1373         if (!S.getLangOpts().C99) {
1374           if (S.getLangOpts().CPlusPlus)
1375             S.Diag(DS.getTypeSpecWidthLoc(),
1376                    S.getLangOpts().CPlusPlus11 ?
1377                    diag::warn_cxx98_compat_longlong : diag::ext_cxx11_longlong);
1378           else
1379             S.Diag(DS.getTypeSpecWidthLoc(), diag::ext_c99_longlong);
1380         }
1381         break;
1382       }
1383     }
1384     break;
1385   }
1386   case DeclSpec::TST_int128:
1387     if (!S.Context.getTargetInfo().hasInt128Type())
1388       S.Diag(DS.getTypeSpecTypeLoc(), diag::err_type_unsupported)
1389         << "__int128";
1390     if (DS.getTypeSpecSign() == DeclSpec::TSS_unsigned)
1391       Result = Context.UnsignedInt128Ty;
1392     else
1393       Result = Context.Int128Ty;
1394     break;
1395   case DeclSpec::TST_float16: Result = Context.Float16Ty; break;
1396   case DeclSpec::TST_half:    Result = Context.HalfTy; break;
1397   case DeclSpec::TST_float:   Result = Context.FloatTy; break;
1398   case DeclSpec::TST_double:
1399     if (DS.getTypeSpecWidth() == DeclSpec::TSW_long)
1400       Result = Context.LongDoubleTy;
1401     else
1402       Result = Context.DoubleTy;
1403     break;
1404   case DeclSpec::TST_float128:
1405     if (!S.Context.getTargetInfo().hasFloat128Type())
1406       S.Diag(DS.getTypeSpecTypeLoc(), diag::err_type_unsupported)
1407         << "__float128";
1408     Result = Context.Float128Ty;
1409     break;
1410   case DeclSpec::TST_bool: Result = Context.BoolTy; break; // _Bool or bool
1411     break;
1412   case DeclSpec::TST_decimal32:    // _Decimal32
1413   case DeclSpec::TST_decimal64:    // _Decimal64
1414   case DeclSpec::TST_decimal128:   // _Decimal128
1415     S.Diag(DS.getTypeSpecTypeLoc(), diag::err_decimal_unsupported);
1416     Result = Context.IntTy;
1417     declarator.setInvalidType(true);
1418     break;
1419   case DeclSpec::TST_class:
1420   case DeclSpec::TST_enum:
1421   case DeclSpec::TST_union:
1422   case DeclSpec::TST_struct:
1423   case DeclSpec::TST_interface: {
1424     TypeDecl *D = dyn_cast_or_null<TypeDecl>(DS.getRepAsDecl());
1425     if (!D) {
1426       // This can happen in C++ with ambiguous lookups.
1427       Result = Context.IntTy;
1428       declarator.setInvalidType(true);
1429       break;
1430     }
1431 
1432     // If the type is deprecated or unavailable, diagnose it.
1433     S.DiagnoseUseOfDecl(D, DS.getTypeSpecTypeNameLoc());
1434 
1435     assert(DS.getTypeSpecWidth() == 0 && DS.getTypeSpecComplex() == 0 &&
1436            DS.getTypeSpecSign() == 0 && "No qualifiers on tag names!");
1437 
1438     // TypeQuals handled by caller.
1439     Result = Context.getTypeDeclType(D);
1440 
1441     // In both C and C++, make an ElaboratedType.
1442     ElaboratedTypeKeyword Keyword
1443       = ElaboratedType::getKeywordForTypeSpec(DS.getTypeSpecType());
1444     Result = S.getElaboratedType(Keyword, DS.getTypeSpecScope(), Result);
1445     break;
1446   }
1447   case DeclSpec::TST_typename: {
1448     assert(DS.getTypeSpecWidth() == 0 && DS.getTypeSpecComplex() == 0 &&
1449            DS.getTypeSpecSign() == 0 &&
1450            "Can't handle qualifiers on typedef names yet!");
1451     Result = S.GetTypeFromParser(DS.getRepAsType());
1452     if (Result.isNull()) {
1453       declarator.setInvalidType(true);
1454     }
1455 
1456     // TypeQuals handled by caller.
1457     break;
1458   }
1459   case DeclSpec::TST_typeofType:
1460     // FIXME: Preserve type source info.
1461     Result = S.GetTypeFromParser(DS.getRepAsType());
1462     assert(!Result.isNull() && "Didn't get a type for typeof?");
1463     if (!Result->isDependentType())
1464       if (const TagType *TT = Result->getAs<TagType>())
1465         S.DiagnoseUseOfDecl(TT->getDecl(), DS.getTypeSpecTypeLoc());
1466     // TypeQuals handled by caller.
1467     Result = Context.getTypeOfType(Result);
1468     break;
1469   case DeclSpec::TST_typeofExpr: {
1470     Expr *E = DS.getRepAsExpr();
1471     assert(E && "Didn't get an expression for typeof?");
1472     // TypeQuals handled by caller.
1473     Result = S.BuildTypeofExprType(E, DS.getTypeSpecTypeLoc());
1474     if (Result.isNull()) {
1475       Result = Context.IntTy;
1476       declarator.setInvalidType(true);
1477     }
1478     break;
1479   }
1480   case DeclSpec::TST_decltype: {
1481     Expr *E = DS.getRepAsExpr();
1482     assert(E && "Didn't get an expression for decltype?");
1483     // TypeQuals handled by caller.
1484     Result = S.BuildDecltypeType(E, DS.getTypeSpecTypeLoc());
1485     if (Result.isNull()) {
1486       Result = Context.IntTy;
1487       declarator.setInvalidType(true);
1488     }
1489     break;
1490   }
1491   case DeclSpec::TST_underlyingType:
1492     Result = S.GetTypeFromParser(DS.getRepAsType());
1493     assert(!Result.isNull() && "Didn't get a type for __underlying_type?");
1494     Result = S.BuildUnaryTransformType(Result,
1495                                        UnaryTransformType::EnumUnderlyingType,
1496                                        DS.getTypeSpecTypeLoc());
1497     if (Result.isNull()) {
1498       Result = Context.IntTy;
1499       declarator.setInvalidType(true);
1500     }
1501     break;
1502 
1503   case DeclSpec::TST_auto:
1504     Result = Context.getAutoType(QualType(), AutoTypeKeyword::Auto, false);
1505     break;
1506 
1507   case DeclSpec::TST_auto_type:
1508     Result = Context.getAutoType(QualType(), AutoTypeKeyword::GNUAutoType, false);
1509     break;
1510 
1511   case DeclSpec::TST_decltype_auto:
1512     Result = Context.getAutoType(QualType(), AutoTypeKeyword::DecltypeAuto,
1513                                  /*IsDependent*/ false);
1514     break;
1515 
1516   case DeclSpec::TST_unknown_anytype:
1517     Result = Context.UnknownAnyTy;
1518     break;
1519 
1520   case DeclSpec::TST_atomic:
1521     Result = S.GetTypeFromParser(DS.getRepAsType());
1522     assert(!Result.isNull() && "Didn't get a type for _Atomic?");
1523     Result = S.BuildAtomicType(Result, DS.getTypeSpecTypeLoc());
1524     if (Result.isNull()) {
1525       Result = Context.IntTy;
1526       declarator.setInvalidType(true);
1527     }
1528     break;
1529 
1530 #define GENERIC_IMAGE_TYPE(ImgType, Id) \
1531   case DeclSpec::TST_##ImgType##_t: \
1532     switch (getImageAccess(DS.getAttributes().getList())) { \
1533     case OpenCLAccessAttr::Keyword_write_only: \
1534       Result = Context.Id##WOTy; break; \
1535     case OpenCLAccessAttr::Keyword_read_write: \
1536       Result = Context.Id##RWTy; break; \
1537     case OpenCLAccessAttr::Keyword_read_only: \
1538       Result = Context.Id##ROTy; break; \
1539     } \
1540     break;
1541 #include "clang/Basic/OpenCLImageTypes.def"
1542 
1543   case DeclSpec::TST_error:
1544     Result = Context.IntTy;
1545     declarator.setInvalidType(true);
1546     break;
1547   }
1548 
1549   if (S.getLangOpts().OpenCL &&
1550       S.checkOpenCLDisabledTypeDeclSpec(DS, Result))
1551     declarator.setInvalidType(true);
1552 
1553   // Handle complex types.
1554   if (DS.getTypeSpecComplex() == DeclSpec::TSC_complex) {
1555     if (S.getLangOpts().Freestanding)
1556       S.Diag(DS.getTypeSpecComplexLoc(), diag::ext_freestanding_complex);
1557     Result = Context.getComplexType(Result);
1558   } else if (DS.isTypeAltiVecVector()) {
1559     unsigned typeSize = static_cast<unsigned>(Context.getTypeSize(Result));
1560     assert(typeSize > 0 && "type size for vector must be greater than 0 bits");
1561     VectorType::VectorKind VecKind = VectorType::AltiVecVector;
1562     if (DS.isTypeAltiVecPixel())
1563       VecKind = VectorType::AltiVecPixel;
1564     else if (DS.isTypeAltiVecBool())
1565       VecKind = VectorType::AltiVecBool;
1566     Result = Context.getVectorType(Result, 128/typeSize, VecKind);
1567   }
1568 
1569   // FIXME: Imaginary.
1570   if (DS.getTypeSpecComplex() == DeclSpec::TSC_imaginary)
1571     S.Diag(DS.getTypeSpecComplexLoc(), diag::err_imaginary_not_supported);
1572 
1573   // Before we process any type attributes, synthesize a block literal
1574   // function declarator if necessary.
1575   if (declarator.getContext() == Declarator::BlockLiteralContext)
1576     maybeSynthesizeBlockSignature(state, Result);
1577 
1578   // Apply any type attributes from the decl spec.  This may cause the
1579   // list of type attributes to be temporarily saved while the type
1580   // attributes are pushed around.
1581   // pipe attributes will be handled later ( at GetFullTypeForDeclarator )
1582   if (!DS.isTypeSpecPipe())
1583       processTypeAttrs(state, Result, TAL_DeclSpec, DS.getAttributes().getList());
1584 
1585   // Apply const/volatile/restrict qualifiers to T.
1586   if (unsigned TypeQuals = DS.getTypeQualifiers()) {
1587     // Warn about CV qualifiers on function types.
1588     // C99 6.7.3p8:
1589     //   If the specification of a function type includes any type qualifiers,
1590     //   the behavior is undefined.
1591     // C++11 [dcl.fct]p7:
1592     //   The effect of a cv-qualifier-seq in a function declarator is not the
1593     //   same as adding cv-qualification on top of the function type. In the
1594     //   latter case, the cv-qualifiers are ignored.
1595     if (TypeQuals && Result->isFunctionType()) {
1596       diagnoseAndRemoveTypeQualifiers(
1597           S, DS, TypeQuals, Result, DeclSpec::TQ_const | DeclSpec::TQ_volatile,
1598           S.getLangOpts().CPlusPlus
1599               ? diag::warn_typecheck_function_qualifiers_ignored
1600               : diag::warn_typecheck_function_qualifiers_unspecified);
1601       // No diagnostic for 'restrict' or '_Atomic' applied to a
1602       // function type; we'll diagnose those later, in BuildQualifiedType.
1603     }
1604 
1605     // C++11 [dcl.ref]p1:
1606     //   Cv-qualified references are ill-formed except when the
1607     //   cv-qualifiers are introduced through the use of a typedef-name
1608     //   or decltype-specifier, in which case the cv-qualifiers are ignored.
1609     //
1610     // There don't appear to be any other contexts in which a cv-qualified
1611     // reference type could be formed, so the 'ill-formed' clause here appears
1612     // to never happen.
1613     if (TypeQuals && Result->isReferenceType()) {
1614       diagnoseAndRemoveTypeQualifiers(
1615           S, DS, TypeQuals, Result,
1616           DeclSpec::TQ_const | DeclSpec::TQ_volatile | DeclSpec::TQ_atomic,
1617           diag::warn_typecheck_reference_qualifiers);
1618     }
1619 
1620     // C90 6.5.3 constraints: "The same type qualifier shall not appear more
1621     // than once in the same specifier-list or qualifier-list, either directly
1622     // or via one or more typedefs."
1623     if (!S.getLangOpts().C99 && !S.getLangOpts().CPlusPlus
1624         && TypeQuals & Result.getCVRQualifiers()) {
1625       if (TypeQuals & DeclSpec::TQ_const && Result.isConstQualified()) {
1626         S.Diag(DS.getConstSpecLoc(), diag::ext_duplicate_declspec)
1627           << "const";
1628       }
1629 
1630       if (TypeQuals & DeclSpec::TQ_volatile && Result.isVolatileQualified()) {
1631         S.Diag(DS.getVolatileSpecLoc(), diag::ext_duplicate_declspec)
1632           << "volatile";
1633       }
1634 
1635       // C90 doesn't have restrict nor _Atomic, so it doesn't force us to
1636       // produce a warning in this case.
1637     }
1638 
1639     QualType Qualified = S.BuildQualifiedType(Result, DeclLoc, TypeQuals, &DS);
1640 
1641     // If adding qualifiers fails, just use the unqualified type.
1642     if (Qualified.isNull())
1643       declarator.setInvalidType(true);
1644     else
1645       Result = Qualified;
1646   }
1647 
1648   assert(!Result.isNull() && "This function should not return a null type");
1649   return Result;
1650 }
1651 
1652 static std::string getPrintableNameForEntity(DeclarationName Entity) {
1653   if (Entity)
1654     return Entity.getAsString();
1655 
1656   return "type name";
1657 }
1658 
1659 QualType Sema::BuildQualifiedType(QualType T, SourceLocation Loc,
1660                                   Qualifiers Qs, const DeclSpec *DS) {
1661   if (T.isNull())
1662     return QualType();
1663 
1664   // Ignore any attempt to form a cv-qualified reference.
1665   if (T->isReferenceType()) {
1666     Qs.removeConst();
1667     Qs.removeVolatile();
1668   }
1669 
1670   // Enforce C99 6.7.3p2: "Types other than pointer types derived from
1671   // object or incomplete types shall not be restrict-qualified."
1672   if (Qs.hasRestrict()) {
1673     unsigned DiagID = 0;
1674     QualType ProblemTy;
1675 
1676     if (T->isAnyPointerType() || T->isReferenceType() ||
1677         T->isMemberPointerType()) {
1678       QualType EltTy;
1679       if (T->isObjCObjectPointerType())
1680         EltTy = T;
1681       else if (const MemberPointerType *PTy = T->getAs<MemberPointerType>())
1682         EltTy = PTy->getPointeeType();
1683       else
1684         EltTy = T->getPointeeType();
1685 
1686       // If we have a pointer or reference, the pointee must have an object
1687       // incomplete type.
1688       if (!EltTy->isIncompleteOrObjectType()) {
1689         DiagID = diag::err_typecheck_invalid_restrict_invalid_pointee;
1690         ProblemTy = EltTy;
1691       }
1692     } else if (!T->isDependentType()) {
1693       DiagID = diag::err_typecheck_invalid_restrict_not_pointer;
1694       ProblemTy = T;
1695     }
1696 
1697     if (DiagID) {
1698       Diag(DS ? DS->getRestrictSpecLoc() : Loc, DiagID) << ProblemTy;
1699       Qs.removeRestrict();
1700     }
1701   }
1702 
1703   return Context.getQualifiedType(T, Qs);
1704 }
1705 
1706 QualType Sema::BuildQualifiedType(QualType T, SourceLocation Loc,
1707                                   unsigned CVRAU, const DeclSpec *DS) {
1708   if (T.isNull())
1709     return QualType();
1710 
1711   // Ignore any attempt to form a cv-qualified reference.
1712   if (T->isReferenceType())
1713     CVRAU &=
1714         ~(DeclSpec::TQ_const | DeclSpec::TQ_volatile | DeclSpec::TQ_atomic);
1715 
1716   // Convert from DeclSpec::TQ to Qualifiers::TQ by just dropping TQ_atomic and
1717   // TQ_unaligned;
1718   unsigned CVR = CVRAU & ~(DeclSpec::TQ_atomic | DeclSpec::TQ_unaligned);
1719 
1720   // C11 6.7.3/5:
1721   //   If the same qualifier appears more than once in the same
1722   //   specifier-qualifier-list, either directly or via one or more typedefs,
1723   //   the behavior is the same as if it appeared only once.
1724   //
1725   // It's not specified what happens when the _Atomic qualifier is applied to
1726   // a type specified with the _Atomic specifier, but we assume that this
1727   // should be treated as if the _Atomic qualifier appeared multiple times.
1728   if (CVRAU & DeclSpec::TQ_atomic && !T->isAtomicType()) {
1729     // C11 6.7.3/5:
1730     //   If other qualifiers appear along with the _Atomic qualifier in a
1731     //   specifier-qualifier-list, the resulting type is the so-qualified
1732     //   atomic type.
1733     //
1734     // Don't need to worry about array types here, since _Atomic can't be
1735     // applied to such types.
1736     SplitQualType Split = T.getSplitUnqualifiedType();
1737     T = BuildAtomicType(QualType(Split.Ty, 0),
1738                         DS ? DS->getAtomicSpecLoc() : Loc);
1739     if (T.isNull())
1740       return T;
1741     Split.Quals.addCVRQualifiers(CVR);
1742     return BuildQualifiedType(T, Loc, Split.Quals);
1743   }
1744 
1745   Qualifiers Q = Qualifiers::fromCVRMask(CVR);
1746   Q.setUnaligned(CVRAU & DeclSpec::TQ_unaligned);
1747   return BuildQualifiedType(T, Loc, Q, DS);
1748 }
1749 
1750 /// \brief Build a paren type including \p T.
1751 QualType Sema::BuildParenType(QualType T) {
1752   return Context.getParenType(T);
1753 }
1754 
1755 /// Given that we're building a pointer or reference to the given
1756 static QualType inferARCLifetimeForPointee(Sema &S, QualType type,
1757                                            SourceLocation loc,
1758                                            bool isReference) {
1759   // Bail out if retention is unrequired or already specified.
1760   if (!type->isObjCLifetimeType() ||
1761       type.getObjCLifetime() != Qualifiers::OCL_None)
1762     return type;
1763 
1764   Qualifiers::ObjCLifetime implicitLifetime = Qualifiers::OCL_None;
1765 
1766   // If the object type is const-qualified, we can safely use
1767   // __unsafe_unretained.  This is safe (because there are no read
1768   // barriers), and it'll be safe to coerce anything but __weak* to
1769   // the resulting type.
1770   if (type.isConstQualified()) {
1771     implicitLifetime = Qualifiers::OCL_ExplicitNone;
1772 
1773   // Otherwise, check whether the static type does not require
1774   // retaining.  This currently only triggers for Class (possibly
1775   // protocol-qualifed, and arrays thereof).
1776   } else if (type->isObjCARCImplicitlyUnretainedType()) {
1777     implicitLifetime = Qualifiers::OCL_ExplicitNone;
1778 
1779   // If we are in an unevaluated context, like sizeof, skip adding a
1780   // qualification.
1781   } else if (S.isUnevaluatedContext()) {
1782     return type;
1783 
1784   // If that failed, give an error and recover using __strong.  __strong
1785   // is the option most likely to prevent spurious second-order diagnostics,
1786   // like when binding a reference to a field.
1787   } else {
1788     // These types can show up in private ivars in system headers, so
1789     // we need this to not be an error in those cases.  Instead we
1790     // want to delay.
1791     if (S.DelayedDiagnostics.shouldDelayDiagnostics()) {
1792       S.DelayedDiagnostics.add(
1793           sema::DelayedDiagnostic::makeForbiddenType(loc,
1794               diag::err_arc_indirect_no_ownership, type, isReference));
1795     } else {
1796       S.Diag(loc, diag::err_arc_indirect_no_ownership) << type << isReference;
1797     }
1798     implicitLifetime = Qualifiers::OCL_Strong;
1799   }
1800   assert(implicitLifetime && "didn't infer any lifetime!");
1801 
1802   Qualifiers qs;
1803   qs.addObjCLifetime(implicitLifetime);
1804   return S.Context.getQualifiedType(type, qs);
1805 }
1806 
1807 static std::string getFunctionQualifiersAsString(const FunctionProtoType *FnTy){
1808   std::string Quals =
1809     Qualifiers::fromCVRMask(FnTy->getTypeQuals()).getAsString();
1810 
1811   switch (FnTy->getRefQualifier()) {
1812   case RQ_None:
1813     break;
1814 
1815   case RQ_LValue:
1816     if (!Quals.empty())
1817       Quals += ' ';
1818     Quals += '&';
1819     break;
1820 
1821   case RQ_RValue:
1822     if (!Quals.empty())
1823       Quals += ' ';
1824     Quals += "&&";
1825     break;
1826   }
1827 
1828   return Quals;
1829 }
1830 
1831 namespace {
1832 /// Kinds of declarator that cannot contain a qualified function type.
1833 ///
1834 /// C++98 [dcl.fct]p4 / C++11 [dcl.fct]p6:
1835 ///     a function type with a cv-qualifier or a ref-qualifier can only appear
1836 ///     at the topmost level of a type.
1837 ///
1838 /// Parens and member pointers are permitted. We don't diagnose array and
1839 /// function declarators, because they don't allow function types at all.
1840 ///
1841 /// The values of this enum are used in diagnostics.
1842 enum QualifiedFunctionKind { QFK_BlockPointer, QFK_Pointer, QFK_Reference };
1843 } // end anonymous namespace
1844 
1845 /// Check whether the type T is a qualified function type, and if it is,
1846 /// diagnose that it cannot be contained within the given kind of declarator.
1847 static bool checkQualifiedFunction(Sema &S, QualType T, SourceLocation Loc,
1848                                    QualifiedFunctionKind QFK) {
1849   // Does T refer to a function type with a cv-qualifier or a ref-qualifier?
1850   const FunctionProtoType *FPT = T->getAs<FunctionProtoType>();
1851   if (!FPT || (FPT->getTypeQuals() == 0 && FPT->getRefQualifier() == RQ_None))
1852     return false;
1853 
1854   S.Diag(Loc, diag::err_compound_qualified_function_type)
1855     << QFK << isa<FunctionType>(T.IgnoreParens()) << T
1856     << getFunctionQualifiersAsString(FPT);
1857   return true;
1858 }
1859 
1860 /// \brief Build a pointer type.
1861 ///
1862 /// \param T The type to which we'll be building a pointer.
1863 ///
1864 /// \param Loc The location of the entity whose type involves this
1865 /// pointer type or, if there is no such entity, the location of the
1866 /// type that will have pointer type.
1867 ///
1868 /// \param Entity The name of the entity that involves the pointer
1869 /// type, if known.
1870 ///
1871 /// \returns A suitable pointer type, if there are no
1872 /// errors. Otherwise, returns a NULL type.
1873 QualType Sema::BuildPointerType(QualType T,
1874                                 SourceLocation Loc, DeclarationName Entity) {
1875   if (T->isReferenceType()) {
1876     // C++ 8.3.2p4: There shall be no ... pointers to references ...
1877     Diag(Loc, diag::err_illegal_decl_pointer_to_reference)
1878       << getPrintableNameForEntity(Entity) << T;
1879     return QualType();
1880   }
1881 
1882   if (T->isFunctionType() && getLangOpts().OpenCL) {
1883     Diag(Loc, diag::err_opencl_function_pointer);
1884     return QualType();
1885   }
1886 
1887   if (checkQualifiedFunction(*this, T, Loc, QFK_Pointer))
1888     return QualType();
1889 
1890   assert(!T->isObjCObjectType() && "Should build ObjCObjectPointerType");
1891 
1892   // In ARC, it is forbidden to build pointers to unqualified pointers.
1893   if (getLangOpts().ObjCAutoRefCount)
1894     T = inferARCLifetimeForPointee(*this, T, Loc, /*reference*/ false);
1895 
1896   // Build the pointer type.
1897   return Context.getPointerType(T);
1898 }
1899 
1900 /// \brief Build a reference type.
1901 ///
1902 /// \param T The type to which we'll be building a reference.
1903 ///
1904 /// \param Loc The location of the entity whose type involves this
1905 /// reference type or, if there is no such entity, the location of the
1906 /// type that will have reference type.
1907 ///
1908 /// \param Entity The name of the entity that involves the reference
1909 /// type, if known.
1910 ///
1911 /// \returns A suitable reference type, if there are no
1912 /// errors. Otherwise, returns a NULL type.
1913 QualType Sema::BuildReferenceType(QualType T, bool SpelledAsLValue,
1914                                   SourceLocation Loc,
1915                                   DeclarationName Entity) {
1916   assert(Context.getCanonicalType(T) != Context.OverloadTy &&
1917          "Unresolved overloaded function type");
1918 
1919   // C++0x [dcl.ref]p6:
1920   //   If a typedef (7.1.3), a type template-parameter (14.3.1), or a
1921   //   decltype-specifier (7.1.6.2) denotes a type TR that is a reference to a
1922   //   type T, an attempt to create the type "lvalue reference to cv TR" creates
1923   //   the type "lvalue reference to T", while an attempt to create the type
1924   //   "rvalue reference to cv TR" creates the type TR.
1925   bool LValueRef = SpelledAsLValue || T->getAs<LValueReferenceType>();
1926 
1927   // C++ [dcl.ref]p4: There shall be no references to references.
1928   //
1929   // According to C++ DR 106, references to references are only
1930   // diagnosed when they are written directly (e.g., "int & &"),
1931   // but not when they happen via a typedef:
1932   //
1933   //   typedef int& intref;
1934   //   typedef intref& intref2;
1935   //
1936   // Parser::ParseDeclaratorInternal diagnoses the case where
1937   // references are written directly; here, we handle the
1938   // collapsing of references-to-references as described in C++0x.
1939   // DR 106 and 540 introduce reference-collapsing into C++98/03.
1940 
1941   // C++ [dcl.ref]p1:
1942   //   A declarator that specifies the type "reference to cv void"
1943   //   is ill-formed.
1944   if (T->isVoidType()) {
1945     Diag(Loc, diag::err_reference_to_void);
1946     return QualType();
1947   }
1948 
1949   if (checkQualifiedFunction(*this, T, Loc, QFK_Reference))
1950     return QualType();
1951 
1952   // In ARC, it is forbidden to build references to unqualified pointers.
1953   if (getLangOpts().ObjCAutoRefCount)
1954     T = inferARCLifetimeForPointee(*this, T, Loc, /*reference*/ true);
1955 
1956   // Handle restrict on references.
1957   if (LValueRef)
1958     return Context.getLValueReferenceType(T, SpelledAsLValue);
1959   return Context.getRValueReferenceType(T);
1960 }
1961 
1962 /// \brief Build a Read-only Pipe type.
1963 ///
1964 /// \param T The type to which we'll be building a Pipe.
1965 ///
1966 /// \param Loc We do not use it for now.
1967 ///
1968 /// \returns A suitable pipe type, if there are no errors. Otherwise, returns a
1969 /// NULL type.
1970 QualType Sema::BuildReadPipeType(QualType T, SourceLocation Loc) {
1971   return Context.getReadPipeType(T);
1972 }
1973 
1974 /// \brief Build a Write-only Pipe type.
1975 ///
1976 /// \param T The type to which we'll be building a Pipe.
1977 ///
1978 /// \param Loc We do not use it for now.
1979 ///
1980 /// \returns A suitable pipe type, if there are no errors. Otherwise, returns a
1981 /// NULL type.
1982 QualType Sema::BuildWritePipeType(QualType T, SourceLocation Loc) {
1983   return Context.getWritePipeType(T);
1984 }
1985 
1986 /// Check whether the specified array size makes the array type a VLA.  If so,
1987 /// return true, if not, return the size of the array in SizeVal.
1988 static bool isArraySizeVLA(Sema &S, Expr *ArraySize, llvm::APSInt &SizeVal) {
1989   // If the size is an ICE, it certainly isn't a VLA. If we're in a GNU mode
1990   // (like gnu99, but not c99) accept any evaluatable value as an extension.
1991   class VLADiagnoser : public Sema::VerifyICEDiagnoser {
1992   public:
1993     VLADiagnoser() : Sema::VerifyICEDiagnoser(true) {}
1994 
1995     void diagnoseNotICE(Sema &S, SourceLocation Loc, SourceRange SR) override {
1996     }
1997 
1998     void diagnoseFold(Sema &S, SourceLocation Loc, SourceRange SR) override {
1999       S.Diag(Loc, diag::ext_vla_folded_to_constant) << SR;
2000     }
2001   } Diagnoser;
2002 
2003   return S.VerifyIntegerConstantExpression(ArraySize, &SizeVal, Diagnoser,
2004                                            S.LangOpts.GNUMode ||
2005                                            S.LangOpts.OpenCL).isInvalid();
2006 }
2007 
2008 /// \brief Build an array type.
2009 ///
2010 /// \param T The type of each element in the array.
2011 ///
2012 /// \param ASM C99 array size modifier (e.g., '*', 'static').
2013 ///
2014 /// \param ArraySize Expression describing the size of the array.
2015 ///
2016 /// \param Brackets The range from the opening '[' to the closing ']'.
2017 ///
2018 /// \param Entity The name of the entity that involves the array
2019 /// type, if known.
2020 ///
2021 /// \returns A suitable array type, if there are no errors. Otherwise,
2022 /// returns a NULL type.
2023 QualType Sema::BuildArrayType(QualType T, ArrayType::ArraySizeModifier ASM,
2024                               Expr *ArraySize, unsigned Quals,
2025                               SourceRange Brackets, DeclarationName Entity) {
2026 
2027   SourceLocation Loc = Brackets.getBegin();
2028   if (getLangOpts().CPlusPlus) {
2029     // C++ [dcl.array]p1:
2030     //   T is called the array element type; this type shall not be a reference
2031     //   type, the (possibly cv-qualified) type void, a function type or an
2032     //   abstract class type.
2033     //
2034     // C++ [dcl.array]p3:
2035     //   When several "array of" specifications are adjacent, [...] only the
2036     //   first of the constant expressions that specify the bounds of the arrays
2037     //   may be omitted.
2038     //
2039     // Note: function types are handled in the common path with C.
2040     if (T->isReferenceType()) {
2041       Diag(Loc, diag::err_illegal_decl_array_of_references)
2042       << getPrintableNameForEntity(Entity) << T;
2043       return QualType();
2044     }
2045 
2046     if (T->isVoidType() || T->isIncompleteArrayType()) {
2047       Diag(Loc, diag::err_illegal_decl_array_incomplete_type) << T;
2048       return QualType();
2049     }
2050 
2051     if (RequireNonAbstractType(Brackets.getBegin(), T,
2052                                diag::err_array_of_abstract_type))
2053       return QualType();
2054 
2055     // Mentioning a member pointer type for an array type causes us to lock in
2056     // an inheritance model, even if it's inside an unused typedef.
2057     if (Context.getTargetInfo().getCXXABI().isMicrosoft())
2058       if (const MemberPointerType *MPTy = T->getAs<MemberPointerType>())
2059         if (!MPTy->getClass()->isDependentType())
2060           (void)isCompleteType(Loc, T);
2061 
2062   } else {
2063     // C99 6.7.5.2p1: If the element type is an incomplete or function type,
2064     // reject it (e.g. void ary[7], struct foo ary[7], void ary[7]())
2065     if (RequireCompleteType(Loc, T,
2066                             diag::err_illegal_decl_array_incomplete_type))
2067       return QualType();
2068   }
2069 
2070   if (T->isFunctionType()) {
2071     Diag(Loc, diag::err_illegal_decl_array_of_functions)
2072       << getPrintableNameForEntity(Entity) << T;
2073     return QualType();
2074   }
2075 
2076   if (const RecordType *EltTy = T->getAs<RecordType>()) {
2077     // If the element type is a struct or union that contains a variadic
2078     // array, accept it as a GNU extension: C99 6.7.2.1p2.
2079     if (EltTy->getDecl()->hasFlexibleArrayMember())
2080       Diag(Loc, diag::ext_flexible_array_in_array) << T;
2081   } else if (T->isObjCObjectType()) {
2082     Diag(Loc, diag::err_objc_array_of_interfaces) << T;
2083     return QualType();
2084   }
2085 
2086   // Do placeholder conversions on the array size expression.
2087   if (ArraySize && ArraySize->hasPlaceholderType()) {
2088     ExprResult Result = CheckPlaceholderExpr(ArraySize);
2089     if (Result.isInvalid()) return QualType();
2090     ArraySize = Result.get();
2091   }
2092 
2093   // Do lvalue-to-rvalue conversions on the array size expression.
2094   if (ArraySize && !ArraySize->isRValue()) {
2095     ExprResult Result = DefaultLvalueConversion(ArraySize);
2096     if (Result.isInvalid())
2097       return QualType();
2098 
2099     ArraySize = Result.get();
2100   }
2101 
2102   // C99 6.7.5.2p1: The size expression shall have integer type.
2103   // C++11 allows contextual conversions to such types.
2104   if (!getLangOpts().CPlusPlus11 &&
2105       ArraySize && !ArraySize->isTypeDependent() &&
2106       !ArraySize->getType()->isIntegralOrUnscopedEnumerationType()) {
2107     Diag(ArraySize->getLocStart(), diag::err_array_size_non_int)
2108       << ArraySize->getType() << ArraySize->getSourceRange();
2109     return QualType();
2110   }
2111 
2112   llvm::APSInt ConstVal(Context.getTypeSize(Context.getSizeType()));
2113   if (!ArraySize) {
2114     if (ASM == ArrayType::Star)
2115       T = Context.getVariableArrayType(T, nullptr, ASM, Quals, Brackets);
2116     else
2117       T = Context.getIncompleteArrayType(T, ASM, Quals);
2118   } else if (ArraySize->isTypeDependent() || ArraySize->isValueDependent()) {
2119     T = Context.getDependentSizedArrayType(T, ArraySize, ASM, Quals, Brackets);
2120   } else if ((!T->isDependentType() && !T->isIncompleteType() &&
2121               !T->isConstantSizeType()) ||
2122              isArraySizeVLA(*this, ArraySize, ConstVal)) {
2123     // Even in C++11, don't allow contextual conversions in the array bound
2124     // of a VLA.
2125     if (getLangOpts().CPlusPlus11 &&
2126         !ArraySize->getType()->isIntegralOrUnscopedEnumerationType()) {
2127       Diag(ArraySize->getLocStart(), diag::err_array_size_non_int)
2128         << ArraySize->getType() << ArraySize->getSourceRange();
2129       return QualType();
2130     }
2131 
2132     // C99: an array with an element type that has a non-constant-size is a VLA.
2133     // C99: an array with a non-ICE size is a VLA.  We accept any expression
2134     // that we can fold to a non-zero positive value as an extension.
2135     T = Context.getVariableArrayType(T, ArraySize, ASM, Quals, Brackets);
2136   } else {
2137     // C99 6.7.5.2p1: If the expression is a constant expression, it shall
2138     // have a value greater than zero.
2139     if (ConstVal.isSigned() && ConstVal.isNegative()) {
2140       if (Entity)
2141         Diag(ArraySize->getLocStart(), diag::err_decl_negative_array_size)
2142           << getPrintableNameForEntity(Entity) << ArraySize->getSourceRange();
2143       else
2144         Diag(ArraySize->getLocStart(), diag::err_typecheck_negative_array_size)
2145           << ArraySize->getSourceRange();
2146       return QualType();
2147     }
2148     if (ConstVal == 0) {
2149       // GCC accepts zero sized static arrays. We allow them when
2150       // we're not in a SFINAE context.
2151       Diag(ArraySize->getLocStart(),
2152            isSFINAEContext()? diag::err_typecheck_zero_array_size
2153                             : diag::ext_typecheck_zero_array_size)
2154         << ArraySize->getSourceRange();
2155 
2156       if (ASM == ArrayType::Static) {
2157         Diag(ArraySize->getLocStart(),
2158              diag::warn_typecheck_zero_static_array_size)
2159           << ArraySize->getSourceRange();
2160         ASM = ArrayType::Normal;
2161       }
2162     } else if (!T->isDependentType() && !T->isVariablyModifiedType() &&
2163                !T->isIncompleteType() && !T->isUndeducedType()) {
2164       // Is the array too large?
2165       unsigned ActiveSizeBits
2166         = ConstantArrayType::getNumAddressingBits(Context, T, ConstVal);
2167       if (ActiveSizeBits > ConstantArrayType::getMaxSizeBits(Context)) {
2168         Diag(ArraySize->getLocStart(), diag::err_array_too_large)
2169           << ConstVal.toString(10)
2170           << ArraySize->getSourceRange();
2171         return QualType();
2172       }
2173     }
2174 
2175     T = Context.getConstantArrayType(T, ConstVal, ASM, Quals);
2176   }
2177 
2178   // OpenCL v1.2 s6.9.d: variable length arrays are not supported.
2179   if (getLangOpts().OpenCL && T->isVariableArrayType()) {
2180     Diag(Loc, diag::err_opencl_vla);
2181     return QualType();
2182   }
2183   // CUDA device code doesn't support VLAs.
2184   if (getLangOpts().CUDA && T->isVariableArrayType())
2185     CUDADiagIfDeviceCode(Loc, diag::err_cuda_vla) << CurrentCUDATarget();
2186 
2187   // If this is not C99, extwarn about VLA's and C99 array size modifiers.
2188   if (!getLangOpts().C99) {
2189     if (T->isVariableArrayType()) {
2190       // Prohibit the use of VLAs during template argument deduction.
2191       if (isSFINAEContext()) {
2192         Diag(Loc, diag::err_vla_in_sfinae);
2193         return QualType();
2194       }
2195       // Just extwarn about VLAs.
2196       else
2197         Diag(Loc, diag::ext_vla);
2198     } else if (ASM != ArrayType::Normal || Quals != 0)
2199       Diag(Loc,
2200            getLangOpts().CPlusPlus? diag::err_c99_array_usage_cxx
2201                                   : diag::ext_c99_array_usage) << ASM;
2202   }
2203 
2204   if (T->isVariableArrayType()) {
2205     // Warn about VLAs for -Wvla.
2206     Diag(Loc, diag::warn_vla_used);
2207   }
2208 
2209   // OpenCL v2.0 s6.12.5 - Arrays of blocks are not supported.
2210   // OpenCL v2.0 s6.16.13.1 - Arrays of pipe type are not supported.
2211   // OpenCL v2.0 s6.9.b - Arrays of image/sampler type are not supported.
2212   if (getLangOpts().OpenCL) {
2213     const QualType ArrType = Context.getBaseElementType(T);
2214     if (ArrType->isBlockPointerType() || ArrType->isPipeType() ||
2215         ArrType->isSamplerT() || ArrType->isImageType()) {
2216       Diag(Loc, diag::err_opencl_invalid_type_array) << ArrType;
2217       return QualType();
2218     }
2219   }
2220 
2221   return T;
2222 }
2223 
2224 /// \brief Build an ext-vector type.
2225 ///
2226 /// Run the required checks for the extended vector type.
2227 QualType Sema::BuildExtVectorType(QualType T, Expr *ArraySize,
2228                                   SourceLocation AttrLoc) {
2229   // Unlike gcc's vector_size attribute, we do not allow vectors to be defined
2230   // in conjunction with complex types (pointers, arrays, functions, etc.).
2231   //
2232   // Additionally, OpenCL prohibits vectors of booleans (they're considered a
2233   // reserved data type under OpenCL v2.0 s6.1.4), we don't support selects
2234   // on bitvectors, and we have no well-defined ABI for bitvectors, so vectors
2235   // of bool aren't allowed.
2236   if ((!T->isDependentType() && !T->isIntegerType() &&
2237        !T->isRealFloatingType()) ||
2238       T->isBooleanType()) {
2239     Diag(AttrLoc, diag::err_attribute_invalid_vector_type) << T;
2240     return QualType();
2241   }
2242 
2243   if (!ArraySize->isTypeDependent() && !ArraySize->isValueDependent()) {
2244     llvm::APSInt vecSize(32);
2245     if (!ArraySize->isIntegerConstantExpr(vecSize, Context)) {
2246       Diag(AttrLoc, diag::err_attribute_argument_type)
2247         << "ext_vector_type" << AANT_ArgumentIntegerConstant
2248         << ArraySize->getSourceRange();
2249       return QualType();
2250     }
2251 
2252     // Unlike gcc's vector_size attribute, the size is specified as the
2253     // number of elements, not the number of bytes.
2254     unsigned vectorSize = static_cast<unsigned>(vecSize.getZExtValue());
2255 
2256     if (vectorSize == 0) {
2257       Diag(AttrLoc, diag::err_attribute_zero_size)
2258       << ArraySize->getSourceRange();
2259       return QualType();
2260     }
2261 
2262     if (VectorType::isVectorSizeTooLarge(vectorSize)) {
2263       Diag(AttrLoc, diag::err_attribute_size_too_large)
2264         << ArraySize->getSourceRange();
2265       return QualType();
2266     }
2267 
2268     return Context.getExtVectorType(T, vectorSize);
2269   }
2270 
2271   return Context.getDependentSizedExtVectorType(T, ArraySize, AttrLoc);
2272 }
2273 
2274 bool Sema::CheckFunctionReturnType(QualType T, SourceLocation Loc) {
2275   if (T->isArrayType() || T->isFunctionType()) {
2276     Diag(Loc, diag::err_func_returning_array_function)
2277       << T->isFunctionType() << T;
2278     return true;
2279   }
2280 
2281   // Functions cannot return half FP.
2282   if (T->isHalfType() && !getLangOpts().HalfArgsAndReturns) {
2283     Diag(Loc, diag::err_parameters_retval_cannot_have_fp16_type) << 1 <<
2284       FixItHint::CreateInsertion(Loc, "*");
2285     return true;
2286   }
2287 
2288   // Methods cannot return interface types. All ObjC objects are
2289   // passed by reference.
2290   if (T->isObjCObjectType()) {
2291     Diag(Loc, diag::err_object_cannot_be_passed_returned_by_value)
2292         << 0 << T << FixItHint::CreateInsertion(Loc, "*");
2293     return true;
2294   }
2295 
2296   return false;
2297 }
2298 
2299 /// Check the extended parameter information.  Most of the necessary
2300 /// checking should occur when applying the parameter attribute; the
2301 /// only other checks required are positional restrictions.
2302 static void checkExtParameterInfos(Sema &S, ArrayRef<QualType> paramTypes,
2303                     const FunctionProtoType::ExtProtoInfo &EPI,
2304                     llvm::function_ref<SourceLocation(unsigned)> getParamLoc) {
2305   assert(EPI.ExtParameterInfos && "shouldn't get here without param infos");
2306 
2307   bool hasCheckedSwiftCall = false;
2308   auto checkForSwiftCC = [&](unsigned paramIndex) {
2309     // Only do this once.
2310     if (hasCheckedSwiftCall) return;
2311     hasCheckedSwiftCall = true;
2312     if (EPI.ExtInfo.getCC() == CC_Swift) return;
2313     S.Diag(getParamLoc(paramIndex), diag::err_swift_param_attr_not_swiftcall)
2314       << getParameterABISpelling(EPI.ExtParameterInfos[paramIndex].getABI());
2315   };
2316 
2317   for (size_t paramIndex = 0, numParams = paramTypes.size();
2318           paramIndex != numParams; ++paramIndex) {
2319     switch (EPI.ExtParameterInfos[paramIndex].getABI()) {
2320     // Nothing interesting to check for orindary-ABI parameters.
2321     case ParameterABI::Ordinary:
2322       continue;
2323 
2324     // swift_indirect_result parameters must be a prefix of the function
2325     // arguments.
2326     case ParameterABI::SwiftIndirectResult:
2327       checkForSwiftCC(paramIndex);
2328       if (paramIndex != 0 &&
2329           EPI.ExtParameterInfos[paramIndex - 1].getABI()
2330             != ParameterABI::SwiftIndirectResult) {
2331         S.Diag(getParamLoc(paramIndex),
2332                diag::err_swift_indirect_result_not_first);
2333       }
2334       continue;
2335 
2336     case ParameterABI::SwiftContext:
2337       checkForSwiftCC(paramIndex);
2338       continue;
2339 
2340     // swift_error parameters must be preceded by a swift_context parameter.
2341     case ParameterABI::SwiftErrorResult:
2342       checkForSwiftCC(paramIndex);
2343       if (paramIndex == 0 ||
2344           EPI.ExtParameterInfos[paramIndex - 1].getABI() !=
2345               ParameterABI::SwiftContext) {
2346         S.Diag(getParamLoc(paramIndex),
2347                diag::err_swift_error_result_not_after_swift_context);
2348       }
2349       continue;
2350     }
2351     llvm_unreachable("bad ABI kind");
2352   }
2353 }
2354 
2355 QualType Sema::BuildFunctionType(QualType T,
2356                                  MutableArrayRef<QualType> ParamTypes,
2357                                  SourceLocation Loc, DeclarationName Entity,
2358                                  const FunctionProtoType::ExtProtoInfo &EPI) {
2359   bool Invalid = false;
2360 
2361   Invalid |= CheckFunctionReturnType(T, Loc);
2362 
2363   for (unsigned Idx = 0, Cnt = ParamTypes.size(); Idx < Cnt; ++Idx) {
2364     // FIXME: Loc is too inprecise here, should use proper locations for args.
2365     QualType ParamType = Context.getAdjustedParameterType(ParamTypes[Idx]);
2366     if (ParamType->isVoidType()) {
2367       Diag(Loc, diag::err_param_with_void_type);
2368       Invalid = true;
2369     } else if (ParamType->isHalfType() && !getLangOpts().HalfArgsAndReturns) {
2370       // Disallow half FP arguments.
2371       Diag(Loc, diag::err_parameters_retval_cannot_have_fp16_type) << 0 <<
2372         FixItHint::CreateInsertion(Loc, "*");
2373       Invalid = true;
2374     }
2375 
2376     ParamTypes[Idx] = ParamType;
2377   }
2378 
2379   if (EPI.ExtParameterInfos) {
2380     checkExtParameterInfos(*this, ParamTypes, EPI,
2381                            [=](unsigned i) { return Loc; });
2382   }
2383 
2384   if (EPI.ExtInfo.getProducesResult()) {
2385     // This is just a warning, so we can't fail to build if we see it.
2386     checkNSReturnsRetainedReturnType(Loc, T);
2387   }
2388 
2389   if (Invalid)
2390     return QualType();
2391 
2392   return Context.getFunctionType(T, ParamTypes, EPI);
2393 }
2394 
2395 /// \brief Build a member pointer type \c T Class::*.
2396 ///
2397 /// \param T the type to which the member pointer refers.
2398 /// \param Class the class type into which the member pointer points.
2399 /// \param Loc the location where this type begins
2400 /// \param Entity the name of the entity that will have this member pointer type
2401 ///
2402 /// \returns a member pointer type, if successful, or a NULL type if there was
2403 /// an error.
2404 QualType Sema::BuildMemberPointerType(QualType T, QualType Class,
2405                                       SourceLocation Loc,
2406                                       DeclarationName Entity) {
2407   // Verify that we're not building a pointer to pointer to function with
2408   // exception specification.
2409   if (CheckDistantExceptionSpec(T)) {
2410     Diag(Loc, diag::err_distant_exception_spec);
2411     return QualType();
2412   }
2413 
2414   // C++ 8.3.3p3: A pointer to member shall not point to ... a member
2415   //   with reference type, or "cv void."
2416   if (T->isReferenceType()) {
2417     Diag(Loc, diag::err_illegal_decl_mempointer_to_reference)
2418       << getPrintableNameForEntity(Entity) << T;
2419     return QualType();
2420   }
2421 
2422   if (T->isVoidType()) {
2423     Diag(Loc, diag::err_illegal_decl_mempointer_to_void)
2424       << getPrintableNameForEntity(Entity);
2425     return QualType();
2426   }
2427 
2428   if (!Class->isDependentType() && !Class->isRecordType()) {
2429     Diag(Loc, diag::err_mempointer_in_nonclass_type) << Class;
2430     return QualType();
2431   }
2432 
2433   // Adjust the default free function calling convention to the default method
2434   // calling convention.
2435   bool IsCtorOrDtor =
2436       (Entity.getNameKind() == DeclarationName::CXXConstructorName) ||
2437       (Entity.getNameKind() == DeclarationName::CXXDestructorName);
2438   if (T->isFunctionType())
2439     adjustMemberFunctionCC(T, /*IsStatic=*/false, IsCtorOrDtor, Loc);
2440 
2441   return Context.getMemberPointerType(T, Class.getTypePtr());
2442 }
2443 
2444 /// \brief Build a block pointer type.
2445 ///
2446 /// \param T The type to which we'll be building a block pointer.
2447 ///
2448 /// \param Loc The source location, used for diagnostics.
2449 ///
2450 /// \param Entity The name of the entity that involves the block pointer
2451 /// type, if known.
2452 ///
2453 /// \returns A suitable block pointer type, if there are no
2454 /// errors. Otherwise, returns a NULL type.
2455 QualType Sema::BuildBlockPointerType(QualType T,
2456                                      SourceLocation Loc,
2457                                      DeclarationName Entity) {
2458   if (!T->isFunctionType()) {
2459     Diag(Loc, diag::err_nonfunction_block_type);
2460     return QualType();
2461   }
2462 
2463   if (checkQualifiedFunction(*this, T, Loc, QFK_BlockPointer))
2464     return QualType();
2465 
2466   return Context.getBlockPointerType(T);
2467 }
2468 
2469 QualType Sema::GetTypeFromParser(ParsedType Ty, TypeSourceInfo **TInfo) {
2470   QualType QT = Ty.get();
2471   if (QT.isNull()) {
2472     if (TInfo) *TInfo = nullptr;
2473     return QualType();
2474   }
2475 
2476   TypeSourceInfo *DI = nullptr;
2477   if (const LocInfoType *LIT = dyn_cast<LocInfoType>(QT)) {
2478     QT = LIT->getType();
2479     DI = LIT->getTypeSourceInfo();
2480   }
2481 
2482   if (TInfo) *TInfo = DI;
2483   return QT;
2484 }
2485 
2486 static void transferARCOwnershipToDeclaratorChunk(TypeProcessingState &state,
2487                                             Qualifiers::ObjCLifetime ownership,
2488                                             unsigned chunkIndex);
2489 
2490 /// Given that this is the declaration of a parameter under ARC,
2491 /// attempt to infer attributes and such for pointer-to-whatever
2492 /// types.
2493 static void inferARCWriteback(TypeProcessingState &state,
2494                               QualType &declSpecType) {
2495   Sema &S = state.getSema();
2496   Declarator &declarator = state.getDeclarator();
2497 
2498   // TODO: should we care about decl qualifiers?
2499 
2500   // Check whether the declarator has the expected form.  We walk
2501   // from the inside out in order to make the block logic work.
2502   unsigned outermostPointerIndex = 0;
2503   bool isBlockPointer = false;
2504   unsigned numPointers = 0;
2505   for (unsigned i = 0, e = declarator.getNumTypeObjects(); i != e; ++i) {
2506     unsigned chunkIndex = i;
2507     DeclaratorChunk &chunk = declarator.getTypeObject(chunkIndex);
2508     switch (chunk.Kind) {
2509     case DeclaratorChunk::Paren:
2510       // Ignore parens.
2511       break;
2512 
2513     case DeclaratorChunk::Reference:
2514     case DeclaratorChunk::Pointer:
2515       // Count the number of pointers.  Treat references
2516       // interchangeably as pointers; if they're mis-ordered, normal
2517       // type building will discover that.
2518       outermostPointerIndex = chunkIndex;
2519       numPointers++;
2520       break;
2521 
2522     case DeclaratorChunk::BlockPointer:
2523       // If we have a pointer to block pointer, that's an acceptable
2524       // indirect reference; anything else is not an application of
2525       // the rules.
2526       if (numPointers != 1) return;
2527       numPointers++;
2528       outermostPointerIndex = chunkIndex;
2529       isBlockPointer = true;
2530 
2531       // We don't care about pointer structure in return values here.
2532       goto done;
2533 
2534     case DeclaratorChunk::Array: // suppress if written (id[])?
2535     case DeclaratorChunk::Function:
2536     case DeclaratorChunk::MemberPointer:
2537     case DeclaratorChunk::Pipe:
2538       return;
2539     }
2540   }
2541  done:
2542 
2543   // If we have *one* pointer, then we want to throw the qualifier on
2544   // the declaration-specifiers, which means that it needs to be a
2545   // retainable object type.
2546   if (numPointers == 1) {
2547     // If it's not a retainable object type, the rule doesn't apply.
2548     if (!declSpecType->isObjCRetainableType()) return;
2549 
2550     // If it already has lifetime, don't do anything.
2551     if (declSpecType.getObjCLifetime()) return;
2552 
2553     // Otherwise, modify the type in-place.
2554     Qualifiers qs;
2555 
2556     if (declSpecType->isObjCARCImplicitlyUnretainedType())
2557       qs.addObjCLifetime(Qualifiers::OCL_ExplicitNone);
2558     else
2559       qs.addObjCLifetime(Qualifiers::OCL_Autoreleasing);
2560     declSpecType = S.Context.getQualifiedType(declSpecType, qs);
2561 
2562   // If we have *two* pointers, then we want to throw the qualifier on
2563   // the outermost pointer.
2564   } else if (numPointers == 2) {
2565     // If we don't have a block pointer, we need to check whether the
2566     // declaration-specifiers gave us something that will turn into a
2567     // retainable object pointer after we slap the first pointer on it.
2568     if (!isBlockPointer && !declSpecType->isObjCObjectType())
2569       return;
2570 
2571     // Look for an explicit lifetime attribute there.
2572     DeclaratorChunk &chunk = declarator.getTypeObject(outermostPointerIndex);
2573     if (chunk.Kind != DeclaratorChunk::Pointer &&
2574         chunk.Kind != DeclaratorChunk::BlockPointer)
2575       return;
2576     for (const AttributeList *attr = chunk.getAttrs(); attr;
2577            attr = attr->getNext())
2578       if (attr->getKind() == AttributeList::AT_ObjCOwnership)
2579         return;
2580 
2581     transferARCOwnershipToDeclaratorChunk(state, Qualifiers::OCL_Autoreleasing,
2582                                           outermostPointerIndex);
2583 
2584   // Any other number of pointers/references does not trigger the rule.
2585   } else return;
2586 
2587   // TODO: mark whether we did this inference?
2588 }
2589 
2590 void Sema::diagnoseIgnoredQualifiers(unsigned DiagID, unsigned Quals,
2591                                      SourceLocation FallbackLoc,
2592                                      SourceLocation ConstQualLoc,
2593                                      SourceLocation VolatileQualLoc,
2594                                      SourceLocation RestrictQualLoc,
2595                                      SourceLocation AtomicQualLoc,
2596                                      SourceLocation UnalignedQualLoc) {
2597   if (!Quals)
2598     return;
2599 
2600   struct Qual {
2601     const char *Name;
2602     unsigned Mask;
2603     SourceLocation Loc;
2604   } const QualKinds[5] = {
2605     { "const", DeclSpec::TQ_const, ConstQualLoc },
2606     { "volatile", DeclSpec::TQ_volatile, VolatileQualLoc },
2607     { "restrict", DeclSpec::TQ_restrict, RestrictQualLoc },
2608     { "__unaligned", DeclSpec::TQ_unaligned, UnalignedQualLoc },
2609     { "_Atomic", DeclSpec::TQ_atomic, AtomicQualLoc }
2610   };
2611 
2612   SmallString<32> QualStr;
2613   unsigned NumQuals = 0;
2614   SourceLocation Loc;
2615   FixItHint FixIts[5];
2616 
2617   // Build a string naming the redundant qualifiers.
2618   for (auto &E : QualKinds) {
2619     if (Quals & E.Mask) {
2620       if (!QualStr.empty()) QualStr += ' ';
2621       QualStr += E.Name;
2622 
2623       // If we have a location for the qualifier, offer a fixit.
2624       SourceLocation QualLoc = E.Loc;
2625       if (QualLoc.isValid()) {
2626         FixIts[NumQuals] = FixItHint::CreateRemoval(QualLoc);
2627         if (Loc.isInvalid() ||
2628             getSourceManager().isBeforeInTranslationUnit(QualLoc, Loc))
2629           Loc = QualLoc;
2630       }
2631 
2632       ++NumQuals;
2633     }
2634   }
2635 
2636   Diag(Loc.isInvalid() ? FallbackLoc : Loc, DiagID)
2637     << QualStr << NumQuals << FixIts[0] << FixIts[1] << FixIts[2] << FixIts[3];
2638 }
2639 
2640 // Diagnose pointless type qualifiers on the return type of a function.
2641 static void diagnoseRedundantReturnTypeQualifiers(Sema &S, QualType RetTy,
2642                                                   Declarator &D,
2643                                                   unsigned FunctionChunkIndex) {
2644   if (D.getTypeObject(FunctionChunkIndex).Fun.hasTrailingReturnType()) {
2645     // FIXME: TypeSourceInfo doesn't preserve location information for
2646     // qualifiers.
2647     S.diagnoseIgnoredQualifiers(diag::warn_qual_return_type,
2648                                 RetTy.getLocalCVRQualifiers(),
2649                                 D.getIdentifierLoc());
2650     return;
2651   }
2652 
2653   for (unsigned OuterChunkIndex = FunctionChunkIndex + 1,
2654                 End = D.getNumTypeObjects();
2655        OuterChunkIndex != End; ++OuterChunkIndex) {
2656     DeclaratorChunk &OuterChunk = D.getTypeObject(OuterChunkIndex);
2657     switch (OuterChunk.Kind) {
2658     case DeclaratorChunk::Paren:
2659       continue;
2660 
2661     case DeclaratorChunk::Pointer: {
2662       DeclaratorChunk::PointerTypeInfo &PTI = OuterChunk.Ptr;
2663       S.diagnoseIgnoredQualifiers(
2664           diag::warn_qual_return_type,
2665           PTI.TypeQuals,
2666           SourceLocation(),
2667           SourceLocation::getFromRawEncoding(PTI.ConstQualLoc),
2668           SourceLocation::getFromRawEncoding(PTI.VolatileQualLoc),
2669           SourceLocation::getFromRawEncoding(PTI.RestrictQualLoc),
2670           SourceLocation::getFromRawEncoding(PTI.AtomicQualLoc),
2671           SourceLocation::getFromRawEncoding(PTI.UnalignedQualLoc));
2672       return;
2673     }
2674 
2675     case DeclaratorChunk::Function:
2676     case DeclaratorChunk::BlockPointer:
2677     case DeclaratorChunk::Reference:
2678     case DeclaratorChunk::Array:
2679     case DeclaratorChunk::MemberPointer:
2680     case DeclaratorChunk::Pipe:
2681       // FIXME: We can't currently provide an accurate source location and a
2682       // fix-it hint for these.
2683       unsigned AtomicQual = RetTy->isAtomicType() ? DeclSpec::TQ_atomic : 0;
2684       S.diagnoseIgnoredQualifiers(diag::warn_qual_return_type,
2685                                   RetTy.getCVRQualifiers() | AtomicQual,
2686                                   D.getIdentifierLoc());
2687       return;
2688     }
2689 
2690     llvm_unreachable("unknown declarator chunk kind");
2691   }
2692 
2693   // If the qualifiers come from a conversion function type, don't diagnose
2694   // them -- they're not necessarily redundant, since such a conversion
2695   // operator can be explicitly called as "x.operator const int()".
2696   if (D.getName().getKind() == UnqualifiedId::IK_ConversionFunctionId)
2697     return;
2698 
2699   // Just parens all the way out to the decl specifiers. Diagnose any qualifiers
2700   // which are present there.
2701   S.diagnoseIgnoredQualifiers(diag::warn_qual_return_type,
2702                               D.getDeclSpec().getTypeQualifiers(),
2703                               D.getIdentifierLoc(),
2704                               D.getDeclSpec().getConstSpecLoc(),
2705                               D.getDeclSpec().getVolatileSpecLoc(),
2706                               D.getDeclSpec().getRestrictSpecLoc(),
2707                               D.getDeclSpec().getAtomicSpecLoc(),
2708                               D.getDeclSpec().getUnalignedSpecLoc());
2709 }
2710 
2711 static QualType GetDeclSpecTypeForDeclarator(TypeProcessingState &state,
2712                                              TypeSourceInfo *&ReturnTypeInfo) {
2713   Sema &SemaRef = state.getSema();
2714   Declarator &D = state.getDeclarator();
2715   QualType T;
2716   ReturnTypeInfo = nullptr;
2717 
2718   // The TagDecl owned by the DeclSpec.
2719   TagDecl *OwnedTagDecl = nullptr;
2720 
2721   switch (D.getName().getKind()) {
2722   case UnqualifiedId::IK_ImplicitSelfParam:
2723   case UnqualifiedId::IK_OperatorFunctionId:
2724   case UnqualifiedId::IK_Identifier:
2725   case UnqualifiedId::IK_LiteralOperatorId:
2726   case UnqualifiedId::IK_TemplateId:
2727     T = ConvertDeclSpecToType(state);
2728 
2729     if (!D.isInvalidType() && D.getDeclSpec().isTypeSpecOwned()) {
2730       OwnedTagDecl = cast<TagDecl>(D.getDeclSpec().getRepAsDecl());
2731       // Owned declaration is embedded in declarator.
2732       OwnedTagDecl->setEmbeddedInDeclarator(true);
2733     }
2734     break;
2735 
2736   case UnqualifiedId::IK_ConstructorName:
2737   case UnqualifiedId::IK_ConstructorTemplateId:
2738   case UnqualifiedId::IK_DestructorName:
2739     // Constructors and destructors don't have return types. Use
2740     // "void" instead.
2741     T = SemaRef.Context.VoidTy;
2742     processTypeAttrs(state, T, TAL_DeclSpec,
2743                      D.getDeclSpec().getAttributes().getList());
2744     break;
2745 
2746   case UnqualifiedId::IK_DeductionGuideName:
2747     // Deduction guides have a trailing return type and no type in their
2748     // decl-specifier sequence. Use a placeholder return type for now.
2749     T = SemaRef.Context.DependentTy;
2750     break;
2751 
2752   case UnqualifiedId::IK_ConversionFunctionId:
2753     // The result type of a conversion function is the type that it
2754     // converts to.
2755     T = SemaRef.GetTypeFromParser(D.getName().ConversionFunctionId,
2756                                   &ReturnTypeInfo);
2757     break;
2758   }
2759 
2760   if (D.getAttributes())
2761     distributeTypeAttrsFromDeclarator(state, T);
2762 
2763   // C++11 [dcl.spec.auto]p5: reject 'auto' if it is not in an allowed context.
2764   if (DeducedType *Deduced = T->getContainedDeducedType()) {
2765     AutoType *Auto = dyn_cast<AutoType>(Deduced);
2766     int Error = -1;
2767 
2768     // Is this a 'auto' or 'decltype(auto)' type (as opposed to __auto_type or
2769     // class template argument deduction)?
2770     bool IsCXXAutoType =
2771         (Auto && Auto->getKeyword() != AutoTypeKeyword::GNUAutoType);
2772 
2773     switch (D.getContext()) {
2774     case Declarator::LambdaExprContext:
2775       // Declared return type of a lambda-declarator is implicit and is always
2776       // 'auto'.
2777       break;
2778     case Declarator::ObjCParameterContext:
2779     case Declarator::ObjCResultContext:
2780     case Declarator::PrototypeContext:
2781       Error = 0;
2782       break;
2783     case Declarator::LambdaExprParameterContext:
2784       // In C++14, generic lambdas allow 'auto' in their parameters.
2785       if (!SemaRef.getLangOpts().CPlusPlus14 ||
2786           !Auto || Auto->getKeyword() != AutoTypeKeyword::Auto)
2787         Error = 16;
2788       else {
2789         // If auto is mentioned in a lambda parameter context, convert it to a
2790         // template parameter type.
2791         sema::LambdaScopeInfo *LSI = SemaRef.getCurLambda();
2792         assert(LSI && "No LambdaScopeInfo on the stack!");
2793         const unsigned TemplateParameterDepth = LSI->AutoTemplateParameterDepth;
2794         const unsigned AutoParameterPosition = LSI->AutoTemplateParams.size();
2795         const bool IsParameterPack = D.hasEllipsis();
2796 
2797         // Create the TemplateTypeParmDecl here to retrieve the corresponding
2798         // template parameter type. Template parameters are temporarily added
2799         // to the TU until the associated TemplateDecl is created.
2800         TemplateTypeParmDecl *CorrespondingTemplateParam =
2801             TemplateTypeParmDecl::Create(
2802                 SemaRef.Context, SemaRef.Context.getTranslationUnitDecl(),
2803                 /*KeyLoc*/SourceLocation(), /*NameLoc*/D.getLocStart(),
2804                 TemplateParameterDepth, AutoParameterPosition,
2805                 /*Identifier*/nullptr, false, IsParameterPack);
2806         LSI->AutoTemplateParams.push_back(CorrespondingTemplateParam);
2807         // Replace the 'auto' in the function parameter with this invented
2808         // template type parameter.
2809         // FIXME: Retain some type sugar to indicate that this was written
2810         // as 'auto'.
2811         T = SemaRef.ReplaceAutoType(
2812             T, QualType(CorrespondingTemplateParam->getTypeForDecl(), 0));
2813       }
2814       break;
2815     case Declarator::MemberContext: {
2816       if (D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_static ||
2817           D.isFunctionDeclarator())
2818         break;
2819       bool Cxx = SemaRef.getLangOpts().CPlusPlus;
2820       switch (cast<TagDecl>(SemaRef.CurContext)->getTagKind()) {
2821       case TTK_Enum: llvm_unreachable("unhandled tag kind");
2822       case TTK_Struct: Error = Cxx ? 1 : 2; /* Struct member */ break;
2823       case TTK_Union:  Error = Cxx ? 3 : 4; /* Union member */ break;
2824       case TTK_Class:  Error = 5; /* Class member */ break;
2825       case TTK_Interface: Error = 6; /* Interface member */ break;
2826       }
2827       if (D.getDeclSpec().isFriendSpecified())
2828         Error = 20; // Friend type
2829       break;
2830     }
2831     case Declarator::CXXCatchContext:
2832     case Declarator::ObjCCatchContext:
2833       Error = 7; // Exception declaration
2834       break;
2835     case Declarator::TemplateParamContext:
2836       if (isa<DeducedTemplateSpecializationType>(Deduced))
2837         Error = 19; // Template parameter
2838       else if (!SemaRef.getLangOpts().CPlusPlus1z)
2839         Error = 8; // Template parameter (until C++1z)
2840       break;
2841     case Declarator::BlockLiteralContext:
2842       Error = 9; // Block literal
2843       break;
2844     case Declarator::TemplateTypeArgContext:
2845       Error = 10; // Template type argument
2846       break;
2847     case Declarator::AliasDeclContext:
2848     case Declarator::AliasTemplateContext:
2849       Error = 12; // Type alias
2850       break;
2851     case Declarator::TrailingReturnContext:
2852       if (!SemaRef.getLangOpts().CPlusPlus14 || !IsCXXAutoType)
2853         Error = 13; // Function return type
2854       break;
2855     case Declarator::ConversionIdContext:
2856       if (!SemaRef.getLangOpts().CPlusPlus14 || !IsCXXAutoType)
2857         Error = 14; // conversion-type-id
2858       break;
2859     case Declarator::FunctionalCastContext:
2860       if (isa<DeducedTemplateSpecializationType>(Deduced))
2861         break;
2862       LLVM_FALLTHROUGH;
2863     case Declarator::TypeNameContext:
2864       Error = 15; // Generic
2865       break;
2866     case Declarator::FileContext:
2867     case Declarator::BlockContext:
2868     case Declarator::ForContext:
2869     case Declarator::InitStmtContext:
2870     case Declarator::ConditionContext:
2871       // FIXME: P0091R3 (erroneously) does not permit class template argument
2872       // deduction in conditions, for-init-statements, and other declarations
2873       // that are not simple-declarations.
2874       break;
2875     case Declarator::CXXNewContext:
2876       // FIXME: P0091R3 does not permit class template argument deduction here,
2877       // but we follow GCC and allow it anyway.
2878       if (!IsCXXAutoType && !isa<DeducedTemplateSpecializationType>(Deduced))
2879         Error = 17; // 'new' type
2880       break;
2881     case Declarator::KNRTypeListContext:
2882       Error = 18; // K&R function parameter
2883       break;
2884     }
2885 
2886     if (D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_typedef)
2887       Error = 11;
2888 
2889     // In Objective-C it is an error to use 'auto' on a function declarator
2890     // (and everywhere for '__auto_type').
2891     if (D.isFunctionDeclarator() &&
2892         (!SemaRef.getLangOpts().CPlusPlus11 || !IsCXXAutoType))
2893       Error = 13;
2894 
2895     bool HaveTrailing = false;
2896 
2897     // C++11 [dcl.spec.auto]p2: 'auto' is always fine if the declarator
2898     // contains a trailing return type. That is only legal at the outermost
2899     // level. Check all declarator chunks (outermost first) anyway, to give
2900     // better diagnostics.
2901     // We don't support '__auto_type' with trailing return types.
2902     // FIXME: Should we only do this for 'auto' and not 'decltype(auto)'?
2903     if (SemaRef.getLangOpts().CPlusPlus11 && IsCXXAutoType &&
2904         D.hasTrailingReturnType()) {
2905       HaveTrailing = true;
2906       Error = -1;
2907     }
2908 
2909     SourceRange AutoRange = D.getDeclSpec().getTypeSpecTypeLoc();
2910     if (D.getName().getKind() == UnqualifiedId::IK_ConversionFunctionId)
2911       AutoRange = D.getName().getSourceRange();
2912 
2913     if (Error != -1) {
2914       unsigned Kind;
2915       if (Auto) {
2916         switch (Auto->getKeyword()) {
2917         case AutoTypeKeyword::Auto: Kind = 0; break;
2918         case AutoTypeKeyword::DecltypeAuto: Kind = 1; break;
2919         case AutoTypeKeyword::GNUAutoType: Kind = 2; break;
2920         }
2921       } else {
2922         assert(isa<DeducedTemplateSpecializationType>(Deduced) &&
2923                "unknown auto type");
2924         Kind = 3;
2925       }
2926 
2927       auto *DTST = dyn_cast<DeducedTemplateSpecializationType>(Deduced);
2928       TemplateName TN = DTST ? DTST->getTemplateName() : TemplateName();
2929 
2930       SemaRef.Diag(AutoRange.getBegin(), diag::err_auto_not_allowed)
2931         << Kind << Error << (int)SemaRef.getTemplateNameKindForDiagnostics(TN)
2932         << QualType(Deduced, 0) << AutoRange;
2933       if (auto *TD = TN.getAsTemplateDecl())
2934         SemaRef.Diag(TD->getLocation(), diag::note_template_decl_here);
2935 
2936       T = SemaRef.Context.IntTy;
2937       D.setInvalidType(true);
2938     } else if (!HaveTrailing) {
2939       // If there was a trailing return type, we already got
2940       // warn_cxx98_compat_trailing_return_type in the parser.
2941       SemaRef.Diag(AutoRange.getBegin(),
2942                    diag::warn_cxx98_compat_auto_type_specifier)
2943         << AutoRange;
2944     }
2945   }
2946 
2947   if (SemaRef.getLangOpts().CPlusPlus &&
2948       OwnedTagDecl && OwnedTagDecl->isCompleteDefinition()) {
2949     // Check the contexts where C++ forbids the declaration of a new class
2950     // or enumeration in a type-specifier-seq.
2951     unsigned DiagID = 0;
2952     switch (D.getContext()) {
2953     case Declarator::TrailingReturnContext:
2954       // Class and enumeration definitions are syntactically not allowed in
2955       // trailing return types.
2956       llvm_unreachable("parser should not have allowed this");
2957       break;
2958     case Declarator::FileContext:
2959     case Declarator::MemberContext:
2960     case Declarator::BlockContext:
2961     case Declarator::ForContext:
2962     case Declarator::InitStmtContext:
2963     case Declarator::BlockLiteralContext:
2964     case Declarator::LambdaExprContext:
2965       // C++11 [dcl.type]p3:
2966       //   A type-specifier-seq shall not define a class or enumeration unless
2967       //   it appears in the type-id of an alias-declaration (7.1.3) that is not
2968       //   the declaration of a template-declaration.
2969     case Declarator::AliasDeclContext:
2970       break;
2971     case Declarator::AliasTemplateContext:
2972       DiagID = diag::err_type_defined_in_alias_template;
2973       break;
2974     case Declarator::TypeNameContext:
2975     case Declarator::FunctionalCastContext:
2976     case Declarator::ConversionIdContext:
2977     case Declarator::TemplateParamContext:
2978     case Declarator::CXXNewContext:
2979     case Declarator::CXXCatchContext:
2980     case Declarator::ObjCCatchContext:
2981     case Declarator::TemplateTypeArgContext:
2982       DiagID = diag::err_type_defined_in_type_specifier;
2983       break;
2984     case Declarator::PrototypeContext:
2985     case Declarator::LambdaExprParameterContext:
2986     case Declarator::ObjCParameterContext:
2987     case Declarator::ObjCResultContext:
2988     case Declarator::KNRTypeListContext:
2989       // C++ [dcl.fct]p6:
2990       //   Types shall not be defined in return or parameter types.
2991       DiagID = diag::err_type_defined_in_param_type;
2992       break;
2993     case Declarator::ConditionContext:
2994       // C++ 6.4p2:
2995       // The type-specifier-seq shall not contain typedef and shall not declare
2996       // a new class or enumeration.
2997       DiagID = diag::err_type_defined_in_condition;
2998       break;
2999     }
3000 
3001     if (DiagID != 0) {
3002       SemaRef.Diag(OwnedTagDecl->getLocation(), DiagID)
3003           << SemaRef.Context.getTypeDeclType(OwnedTagDecl);
3004       D.setInvalidType(true);
3005     }
3006   }
3007 
3008   assert(!T.isNull() && "This function should not return a null type");
3009   return T;
3010 }
3011 
3012 /// Produce an appropriate diagnostic for an ambiguity between a function
3013 /// declarator and a C++ direct-initializer.
3014 static void warnAboutAmbiguousFunction(Sema &S, Declarator &D,
3015                                        DeclaratorChunk &DeclType, QualType RT) {
3016   const DeclaratorChunk::FunctionTypeInfo &FTI = DeclType.Fun;
3017   assert(FTI.isAmbiguous && "no direct-initializer / function ambiguity");
3018 
3019   // If the return type is void there is no ambiguity.
3020   if (RT->isVoidType())
3021     return;
3022 
3023   // An initializer for a non-class type can have at most one argument.
3024   if (!RT->isRecordType() && FTI.NumParams > 1)
3025     return;
3026 
3027   // An initializer for a reference must have exactly one argument.
3028   if (RT->isReferenceType() && FTI.NumParams != 1)
3029     return;
3030 
3031   // Only warn if this declarator is declaring a function at block scope, and
3032   // doesn't have a storage class (such as 'extern') specified.
3033   if (!D.isFunctionDeclarator() ||
3034       D.getFunctionDefinitionKind() != FDK_Declaration ||
3035       !S.CurContext->isFunctionOrMethod() ||
3036       D.getDeclSpec().getStorageClassSpec()
3037         != DeclSpec::SCS_unspecified)
3038     return;
3039 
3040   // Inside a condition, a direct initializer is not permitted. We allow one to
3041   // be parsed in order to give better diagnostics in condition parsing.
3042   if (D.getContext() == Declarator::ConditionContext)
3043     return;
3044 
3045   SourceRange ParenRange(DeclType.Loc, DeclType.EndLoc);
3046 
3047   S.Diag(DeclType.Loc,
3048          FTI.NumParams ? diag::warn_parens_disambiguated_as_function_declaration
3049                        : diag::warn_empty_parens_are_function_decl)
3050       << ParenRange;
3051 
3052   // If the declaration looks like:
3053   //   T var1,
3054   //   f();
3055   // and name lookup finds a function named 'f', then the ',' was
3056   // probably intended to be a ';'.
3057   if (!D.isFirstDeclarator() && D.getIdentifier()) {
3058     FullSourceLoc Comma(D.getCommaLoc(), S.SourceMgr);
3059     FullSourceLoc Name(D.getIdentifierLoc(), S.SourceMgr);
3060     if (Comma.getFileID() != Name.getFileID() ||
3061         Comma.getSpellingLineNumber() != Name.getSpellingLineNumber()) {
3062       LookupResult Result(S, D.getIdentifier(), SourceLocation(),
3063                           Sema::LookupOrdinaryName);
3064       if (S.LookupName(Result, S.getCurScope()))
3065         S.Diag(D.getCommaLoc(), diag::note_empty_parens_function_call)
3066           << FixItHint::CreateReplacement(D.getCommaLoc(), ";")
3067           << D.getIdentifier();
3068       Result.suppressDiagnostics();
3069     }
3070   }
3071 
3072   if (FTI.NumParams > 0) {
3073     // For a declaration with parameters, eg. "T var(T());", suggest adding
3074     // parens around the first parameter to turn the declaration into a
3075     // variable declaration.
3076     SourceRange Range = FTI.Params[0].Param->getSourceRange();
3077     SourceLocation B = Range.getBegin();
3078     SourceLocation E = S.getLocForEndOfToken(Range.getEnd());
3079     // FIXME: Maybe we should suggest adding braces instead of parens
3080     // in C++11 for classes that don't have an initializer_list constructor.
3081     S.Diag(B, diag::note_additional_parens_for_variable_declaration)
3082       << FixItHint::CreateInsertion(B, "(")
3083       << FixItHint::CreateInsertion(E, ")");
3084   } else {
3085     // For a declaration without parameters, eg. "T var();", suggest replacing
3086     // the parens with an initializer to turn the declaration into a variable
3087     // declaration.
3088     const CXXRecordDecl *RD = RT->getAsCXXRecordDecl();
3089 
3090     // Empty parens mean value-initialization, and no parens mean
3091     // default initialization. These are equivalent if the default
3092     // constructor is user-provided or if zero-initialization is a
3093     // no-op.
3094     if (RD && RD->hasDefinition() &&
3095         (RD->isEmpty() || RD->hasUserProvidedDefaultConstructor()))
3096       S.Diag(DeclType.Loc, diag::note_empty_parens_default_ctor)
3097         << FixItHint::CreateRemoval(ParenRange);
3098     else {
3099       std::string Init =
3100           S.getFixItZeroInitializerForType(RT, ParenRange.getBegin());
3101       if (Init.empty() && S.LangOpts.CPlusPlus11)
3102         Init = "{}";
3103       if (!Init.empty())
3104         S.Diag(DeclType.Loc, diag::note_empty_parens_zero_initialize)
3105           << FixItHint::CreateReplacement(ParenRange, Init);
3106     }
3107   }
3108 }
3109 
3110 /// Produce an appropriate diagnostic for a declarator with top-level
3111 /// parentheses.
3112 static void warnAboutRedundantParens(Sema &S, Declarator &D, QualType T) {
3113   DeclaratorChunk &Paren = D.getTypeObject(D.getNumTypeObjects() - 1);
3114   assert(Paren.Kind == DeclaratorChunk::Paren &&
3115          "do not have redundant top-level parentheses");
3116 
3117   // This is a syntactic check; we're not interested in cases that arise
3118   // during template instantiation.
3119   if (S.inTemplateInstantiation())
3120     return;
3121 
3122   // Check whether this could be intended to be a construction of a temporary
3123   // object in C++ via a function-style cast.
3124   bool CouldBeTemporaryObject =
3125       S.getLangOpts().CPlusPlus && D.isExpressionContext() &&
3126       !D.isInvalidType() && D.getIdentifier() &&
3127       D.getDeclSpec().getParsedSpecifiers() == DeclSpec::PQ_TypeSpecifier &&
3128       (T->isRecordType() || T->isDependentType()) &&
3129       D.getDeclSpec().getTypeQualifiers() == 0 && D.isFirstDeclarator();
3130 
3131   for (auto &C : D.type_objects()) {
3132     switch (C.Kind) {
3133     case DeclaratorChunk::Pointer:
3134     case DeclaratorChunk::Paren:
3135       continue;
3136 
3137     case DeclaratorChunk::Array:
3138       if (!C.Arr.NumElts)
3139         CouldBeTemporaryObject = false;
3140       continue;
3141 
3142     case DeclaratorChunk::Reference:
3143       // FIXME: Suppress the warning here if there is no initializer; we're
3144       // going to give an error anyway.
3145       // We assume that something like 'T (&x) = y;' is highly likely to not
3146       // be intended to be a temporary object.
3147       CouldBeTemporaryObject = false;
3148       continue;
3149 
3150     case DeclaratorChunk::Function:
3151       // In a new-type-id, function chunks require parentheses.
3152       if (D.getContext() == Declarator::CXXNewContext)
3153         return;
3154       LLVM_FALLTHROUGH;
3155     case DeclaratorChunk::BlockPointer:
3156     case DeclaratorChunk::MemberPointer:
3157     case DeclaratorChunk::Pipe:
3158       // These cannot appear in expressions.
3159       CouldBeTemporaryObject = false;
3160       continue;
3161     }
3162   }
3163 
3164   // FIXME: If there is an initializer, assume that this is not intended to be
3165   // a construction of a temporary object.
3166 
3167   // Check whether the name has already been declared; if not, this is not a
3168   // function-style cast.
3169   if (CouldBeTemporaryObject) {
3170     LookupResult Result(S, D.getIdentifier(), SourceLocation(),
3171                         Sema::LookupOrdinaryName);
3172     if (!S.LookupName(Result, S.getCurScope()))
3173       CouldBeTemporaryObject = false;
3174     Result.suppressDiagnostics();
3175   }
3176 
3177   SourceRange ParenRange(Paren.Loc, Paren.EndLoc);
3178 
3179   if (!CouldBeTemporaryObject) {
3180     S.Diag(Paren.Loc, diag::warn_redundant_parens_around_declarator)
3181         << ParenRange << FixItHint::CreateRemoval(Paren.Loc)
3182         << FixItHint::CreateRemoval(Paren.EndLoc);
3183     return;
3184   }
3185 
3186   S.Diag(Paren.Loc, diag::warn_parens_disambiguated_as_variable_declaration)
3187       << ParenRange << D.getIdentifier();
3188   auto *RD = T->getAsCXXRecordDecl();
3189   if (!RD || !RD->hasDefinition() || RD->hasNonTrivialDestructor())
3190     S.Diag(Paren.Loc, diag::note_raii_guard_add_name)
3191         << FixItHint::CreateInsertion(Paren.Loc, " varname") << T
3192         << D.getIdentifier();
3193   // FIXME: A cast to void is probably a better suggestion in cases where it's
3194   // valid (when there is no initializer and we're not in a condition).
3195   S.Diag(D.getLocStart(), diag::note_function_style_cast_add_parentheses)
3196       << FixItHint::CreateInsertion(D.getLocStart(), "(")
3197       << FixItHint::CreateInsertion(S.getLocForEndOfToken(D.getLocEnd()), ")");
3198   S.Diag(Paren.Loc, diag::note_remove_parens_for_variable_declaration)
3199       << FixItHint::CreateRemoval(Paren.Loc)
3200       << FixItHint::CreateRemoval(Paren.EndLoc);
3201 }
3202 
3203 /// Helper for figuring out the default CC for a function declarator type.  If
3204 /// this is the outermost chunk, then we can determine the CC from the
3205 /// declarator context.  If not, then this could be either a member function
3206 /// type or normal function type.
3207 static CallingConv
3208 getCCForDeclaratorChunk(Sema &S, Declarator &D,
3209                         const DeclaratorChunk::FunctionTypeInfo &FTI,
3210                         unsigned ChunkIndex) {
3211   assert(D.getTypeObject(ChunkIndex).Kind == DeclaratorChunk::Function);
3212 
3213   // Check for an explicit CC attribute.
3214   for (auto Attr = FTI.AttrList; Attr; Attr = Attr->getNext()) {
3215     switch (Attr->getKind()) {
3216     CALLING_CONV_ATTRS_CASELIST: {
3217       // Ignore attributes that don't validate or can't apply to the
3218       // function type.  We'll diagnose the failure to apply them in
3219       // handleFunctionTypeAttr.
3220       CallingConv CC;
3221       if (!S.CheckCallingConvAttr(*Attr, CC) &&
3222           (!FTI.isVariadic || supportsVariadicCall(CC))) {
3223         return CC;
3224       }
3225       break;
3226     }
3227 
3228     default:
3229       break;
3230     }
3231   }
3232 
3233   bool IsCXXInstanceMethod = false;
3234 
3235   if (S.getLangOpts().CPlusPlus) {
3236     // Look inwards through parentheses to see if this chunk will form a
3237     // member pointer type or if we're the declarator.  Any type attributes
3238     // between here and there will override the CC we choose here.
3239     unsigned I = ChunkIndex;
3240     bool FoundNonParen = false;
3241     while (I && !FoundNonParen) {
3242       --I;
3243       if (D.getTypeObject(I).Kind != DeclaratorChunk::Paren)
3244         FoundNonParen = true;
3245     }
3246 
3247     if (FoundNonParen) {
3248       // If we're not the declarator, we're a regular function type unless we're
3249       // in a member pointer.
3250       IsCXXInstanceMethod =
3251           D.getTypeObject(I).Kind == DeclaratorChunk::MemberPointer;
3252     } else if (D.getContext() == Declarator::LambdaExprContext) {
3253       // This can only be a call operator for a lambda, which is an instance
3254       // method.
3255       IsCXXInstanceMethod = true;
3256     } else {
3257       // We're the innermost decl chunk, so must be a function declarator.
3258       assert(D.isFunctionDeclarator());
3259 
3260       // If we're inside a record, we're declaring a method, but it could be
3261       // explicitly or implicitly static.
3262       IsCXXInstanceMethod =
3263           D.isFirstDeclarationOfMember() &&
3264           D.getDeclSpec().getStorageClassSpec() != DeclSpec::SCS_typedef &&
3265           !D.isStaticMember();
3266     }
3267   }
3268 
3269   CallingConv CC = S.Context.getDefaultCallingConvention(FTI.isVariadic,
3270                                                          IsCXXInstanceMethod);
3271 
3272   // Attribute AT_OpenCLKernel affects the calling convention for SPIR
3273   // and AMDGPU targets, hence it cannot be treated as a calling
3274   // convention attribute. This is the simplest place to infer
3275   // calling convention for OpenCL kernels.
3276   if (S.getLangOpts().OpenCL) {
3277     for (const AttributeList *Attr = D.getDeclSpec().getAttributes().getList();
3278          Attr; Attr = Attr->getNext()) {
3279       if (Attr->getKind() == AttributeList::AT_OpenCLKernel) {
3280         CC = CC_OpenCLKernel;
3281         break;
3282       }
3283     }
3284   }
3285 
3286   return CC;
3287 }
3288 
3289 namespace {
3290   /// A simple notion of pointer kinds, which matches up with the various
3291   /// pointer declarators.
3292   enum class SimplePointerKind {
3293     Pointer,
3294     BlockPointer,
3295     MemberPointer,
3296     Array,
3297   };
3298 } // end anonymous namespace
3299 
3300 IdentifierInfo *Sema::getNullabilityKeyword(NullabilityKind nullability) {
3301   switch (nullability) {
3302   case NullabilityKind::NonNull:
3303     if (!Ident__Nonnull)
3304       Ident__Nonnull = PP.getIdentifierInfo("_Nonnull");
3305     return Ident__Nonnull;
3306 
3307   case NullabilityKind::Nullable:
3308     if (!Ident__Nullable)
3309       Ident__Nullable = PP.getIdentifierInfo("_Nullable");
3310     return Ident__Nullable;
3311 
3312   case NullabilityKind::Unspecified:
3313     if (!Ident__Null_unspecified)
3314       Ident__Null_unspecified = PP.getIdentifierInfo("_Null_unspecified");
3315     return Ident__Null_unspecified;
3316   }
3317   llvm_unreachable("Unknown nullability kind.");
3318 }
3319 
3320 /// Retrieve the identifier "NSError".
3321 IdentifierInfo *Sema::getNSErrorIdent() {
3322   if (!Ident_NSError)
3323     Ident_NSError = PP.getIdentifierInfo("NSError");
3324 
3325   return Ident_NSError;
3326 }
3327 
3328 /// Check whether there is a nullability attribute of any kind in the given
3329 /// attribute list.
3330 static bool hasNullabilityAttr(const AttributeList *attrs) {
3331   for (const AttributeList *attr = attrs; attr;
3332        attr = attr->getNext()) {
3333     if (attr->getKind() == AttributeList::AT_TypeNonNull ||
3334         attr->getKind() == AttributeList::AT_TypeNullable ||
3335         attr->getKind() == AttributeList::AT_TypeNullUnspecified)
3336       return true;
3337   }
3338 
3339   return false;
3340 }
3341 
3342 namespace {
3343   /// Describes the kind of a pointer a declarator describes.
3344   enum class PointerDeclaratorKind {
3345     // Not a pointer.
3346     NonPointer,
3347     // Single-level pointer.
3348     SingleLevelPointer,
3349     // Multi-level pointer (of any pointer kind).
3350     MultiLevelPointer,
3351     // CFFooRef*
3352     MaybePointerToCFRef,
3353     // CFErrorRef*
3354     CFErrorRefPointer,
3355     // NSError**
3356     NSErrorPointerPointer,
3357   };
3358 
3359   /// Describes a declarator chunk wrapping a pointer that marks inference as
3360   /// unexpected.
3361   // These values must be kept in sync with diagnostics.
3362   enum class PointerWrappingDeclaratorKind {
3363     /// Pointer is top-level.
3364     None = -1,
3365     /// Pointer is an array element.
3366     Array = 0,
3367     /// Pointer is the referent type of a C++ reference.
3368     Reference = 1
3369   };
3370 } // end anonymous namespace
3371 
3372 /// Classify the given declarator, whose type-specified is \c type, based on
3373 /// what kind of pointer it refers to.
3374 ///
3375 /// This is used to determine the default nullability.
3376 static PointerDeclaratorKind
3377 classifyPointerDeclarator(Sema &S, QualType type, Declarator &declarator,
3378                           PointerWrappingDeclaratorKind &wrappingKind) {
3379   unsigned numNormalPointers = 0;
3380 
3381   // For any dependent type, we consider it a non-pointer.
3382   if (type->isDependentType())
3383     return PointerDeclaratorKind::NonPointer;
3384 
3385   // Look through the declarator chunks to identify pointers.
3386   for (unsigned i = 0, n = declarator.getNumTypeObjects(); i != n; ++i) {
3387     DeclaratorChunk &chunk = declarator.getTypeObject(i);
3388     switch (chunk.Kind) {
3389     case DeclaratorChunk::Array:
3390       if (numNormalPointers == 0)
3391         wrappingKind = PointerWrappingDeclaratorKind::Array;
3392       break;
3393 
3394     case DeclaratorChunk::Function:
3395     case DeclaratorChunk::Pipe:
3396       break;
3397 
3398     case DeclaratorChunk::BlockPointer:
3399     case DeclaratorChunk::MemberPointer:
3400       return numNormalPointers > 0 ? PointerDeclaratorKind::MultiLevelPointer
3401                                    : PointerDeclaratorKind::SingleLevelPointer;
3402 
3403     case DeclaratorChunk::Paren:
3404       break;
3405 
3406     case DeclaratorChunk::Reference:
3407       if (numNormalPointers == 0)
3408         wrappingKind = PointerWrappingDeclaratorKind::Reference;
3409       break;
3410 
3411     case DeclaratorChunk::Pointer:
3412       ++numNormalPointers;
3413       if (numNormalPointers > 2)
3414         return PointerDeclaratorKind::MultiLevelPointer;
3415       break;
3416     }
3417   }
3418 
3419   // Then, dig into the type specifier itself.
3420   unsigned numTypeSpecifierPointers = 0;
3421   do {
3422     // Decompose normal pointers.
3423     if (auto ptrType = type->getAs<PointerType>()) {
3424       ++numNormalPointers;
3425 
3426       if (numNormalPointers > 2)
3427         return PointerDeclaratorKind::MultiLevelPointer;
3428 
3429       type = ptrType->getPointeeType();
3430       ++numTypeSpecifierPointers;
3431       continue;
3432     }
3433 
3434     // Decompose block pointers.
3435     if (type->getAs<BlockPointerType>()) {
3436       return numNormalPointers > 0 ? PointerDeclaratorKind::MultiLevelPointer
3437                                    : PointerDeclaratorKind::SingleLevelPointer;
3438     }
3439 
3440     // Decompose member pointers.
3441     if (type->getAs<MemberPointerType>()) {
3442       return numNormalPointers > 0 ? PointerDeclaratorKind::MultiLevelPointer
3443                                    : PointerDeclaratorKind::SingleLevelPointer;
3444     }
3445 
3446     // Look at Objective-C object pointers.
3447     if (auto objcObjectPtr = type->getAs<ObjCObjectPointerType>()) {
3448       ++numNormalPointers;
3449       ++numTypeSpecifierPointers;
3450 
3451       // If this is NSError**, report that.
3452       if (auto objcClassDecl = objcObjectPtr->getInterfaceDecl()) {
3453         if (objcClassDecl->getIdentifier() == S.getNSErrorIdent() &&
3454             numNormalPointers == 2 && numTypeSpecifierPointers < 2) {
3455           return PointerDeclaratorKind::NSErrorPointerPointer;
3456         }
3457       }
3458 
3459       break;
3460     }
3461 
3462     // Look at Objective-C class types.
3463     if (auto objcClass = type->getAs<ObjCInterfaceType>()) {
3464       if (objcClass->getInterface()->getIdentifier() == S.getNSErrorIdent()) {
3465         if (numNormalPointers == 2 && numTypeSpecifierPointers < 2)
3466           return PointerDeclaratorKind::NSErrorPointerPointer;
3467       }
3468 
3469       break;
3470     }
3471 
3472     // If at this point we haven't seen a pointer, we won't see one.
3473     if (numNormalPointers == 0)
3474       return PointerDeclaratorKind::NonPointer;
3475 
3476     if (auto recordType = type->getAs<RecordType>()) {
3477       RecordDecl *recordDecl = recordType->getDecl();
3478 
3479       bool isCFError = false;
3480       if (S.CFError) {
3481         // If we already know about CFError, test it directly.
3482         isCFError = (S.CFError == recordDecl);
3483       } else {
3484         // Check whether this is CFError, which we identify based on its bridge
3485         // to NSError.
3486         if (recordDecl->getTagKind() == TTK_Struct && numNormalPointers > 0) {
3487           if (auto bridgeAttr = recordDecl->getAttr<ObjCBridgeAttr>()) {
3488             if (bridgeAttr->getBridgedType() == S.getNSErrorIdent()) {
3489               S.CFError = recordDecl;
3490               isCFError = true;
3491             }
3492           }
3493         }
3494       }
3495 
3496       // If this is CFErrorRef*, report it as such.
3497       if (isCFError && numNormalPointers == 2 && numTypeSpecifierPointers < 2) {
3498         return PointerDeclaratorKind::CFErrorRefPointer;
3499       }
3500       break;
3501     }
3502 
3503     break;
3504   } while (true);
3505 
3506   switch (numNormalPointers) {
3507   case 0:
3508     return PointerDeclaratorKind::NonPointer;
3509 
3510   case 1:
3511     return PointerDeclaratorKind::SingleLevelPointer;
3512 
3513   case 2:
3514     return PointerDeclaratorKind::MaybePointerToCFRef;
3515 
3516   default:
3517     return PointerDeclaratorKind::MultiLevelPointer;
3518   }
3519 }
3520 
3521 static FileID getNullabilityCompletenessCheckFileID(Sema &S,
3522                                                     SourceLocation loc) {
3523   // If we're anywhere in a function, method, or closure context, don't perform
3524   // completeness checks.
3525   for (DeclContext *ctx = S.CurContext; ctx; ctx = ctx->getParent()) {
3526     if (ctx->isFunctionOrMethod())
3527       return FileID();
3528 
3529     if (ctx->isFileContext())
3530       break;
3531   }
3532 
3533   // We only care about the expansion location.
3534   loc = S.SourceMgr.getExpansionLoc(loc);
3535   FileID file = S.SourceMgr.getFileID(loc);
3536   if (file.isInvalid())
3537     return FileID();
3538 
3539   // Retrieve file information.
3540   bool invalid = false;
3541   const SrcMgr::SLocEntry &sloc = S.SourceMgr.getSLocEntry(file, &invalid);
3542   if (invalid || !sloc.isFile())
3543     return FileID();
3544 
3545   // We don't want to perform completeness checks on the main file or in
3546   // system headers.
3547   const SrcMgr::FileInfo &fileInfo = sloc.getFile();
3548   if (fileInfo.getIncludeLoc().isInvalid())
3549     return FileID();
3550   if (fileInfo.getFileCharacteristic() != SrcMgr::C_User &&
3551       S.Diags.getSuppressSystemWarnings()) {
3552     return FileID();
3553   }
3554 
3555   return file;
3556 }
3557 
3558 /// Creates a fix-it to insert a C-style nullability keyword at \p pointerLoc,
3559 /// taking into account whitespace before and after.
3560 static void fixItNullability(Sema &S, DiagnosticBuilder &Diag,
3561                              SourceLocation PointerLoc,
3562                              NullabilityKind Nullability) {
3563   assert(PointerLoc.isValid());
3564   if (PointerLoc.isMacroID())
3565     return;
3566 
3567   SourceLocation FixItLoc = S.getLocForEndOfToken(PointerLoc);
3568   if (!FixItLoc.isValid() || FixItLoc == PointerLoc)
3569     return;
3570 
3571   const char *NextChar = S.SourceMgr.getCharacterData(FixItLoc);
3572   if (!NextChar)
3573     return;
3574 
3575   SmallString<32> InsertionTextBuf{" "};
3576   InsertionTextBuf += getNullabilitySpelling(Nullability);
3577   InsertionTextBuf += " ";
3578   StringRef InsertionText = InsertionTextBuf.str();
3579 
3580   if (isWhitespace(*NextChar)) {
3581     InsertionText = InsertionText.drop_back();
3582   } else if (NextChar[-1] == '[') {
3583     if (NextChar[0] == ']')
3584       InsertionText = InsertionText.drop_back().drop_front();
3585     else
3586       InsertionText = InsertionText.drop_front();
3587   } else if (!isIdentifierBody(NextChar[0], /*allow dollar*/true) &&
3588              !isIdentifierBody(NextChar[-1], /*allow dollar*/true)) {
3589     InsertionText = InsertionText.drop_back().drop_front();
3590   }
3591 
3592   Diag << FixItHint::CreateInsertion(FixItLoc, InsertionText);
3593 }
3594 
3595 static void emitNullabilityConsistencyWarning(Sema &S,
3596                                               SimplePointerKind PointerKind,
3597                                               SourceLocation PointerLoc,
3598                                               SourceLocation PointerEndLoc) {
3599   assert(PointerLoc.isValid());
3600 
3601   if (PointerKind == SimplePointerKind::Array) {
3602     S.Diag(PointerLoc, diag::warn_nullability_missing_array);
3603   } else {
3604     S.Diag(PointerLoc, diag::warn_nullability_missing)
3605       << static_cast<unsigned>(PointerKind);
3606   }
3607 
3608   auto FixItLoc = PointerEndLoc.isValid() ? PointerEndLoc : PointerLoc;
3609   if (FixItLoc.isMacroID())
3610     return;
3611 
3612   auto addFixIt = [&](NullabilityKind Nullability) {
3613     auto Diag = S.Diag(FixItLoc, diag::note_nullability_fix_it);
3614     Diag << static_cast<unsigned>(Nullability);
3615     Diag << static_cast<unsigned>(PointerKind);
3616     fixItNullability(S, Diag, FixItLoc, Nullability);
3617   };
3618   addFixIt(NullabilityKind::Nullable);
3619   addFixIt(NullabilityKind::NonNull);
3620 }
3621 
3622 /// Complains about missing nullability if the file containing \p pointerLoc
3623 /// has other uses of nullability (either the keywords or the \c assume_nonnull
3624 /// pragma).
3625 ///
3626 /// If the file has \e not seen other uses of nullability, this particular
3627 /// pointer is saved for possible later diagnosis. See recordNullabilitySeen().
3628 static void
3629 checkNullabilityConsistency(Sema &S, SimplePointerKind pointerKind,
3630                             SourceLocation pointerLoc,
3631                             SourceLocation pointerEndLoc = SourceLocation()) {
3632   // Determine which file we're performing consistency checking for.
3633   FileID file = getNullabilityCompletenessCheckFileID(S, pointerLoc);
3634   if (file.isInvalid())
3635     return;
3636 
3637   // If we haven't seen any type nullability in this file, we won't warn now
3638   // about anything.
3639   FileNullability &fileNullability = S.NullabilityMap[file];
3640   if (!fileNullability.SawTypeNullability) {
3641     // If this is the first pointer declarator in the file, and the appropriate
3642     // warning is on, record it in case we need to diagnose it retroactively.
3643     diag::kind diagKind;
3644     if (pointerKind == SimplePointerKind::Array)
3645       diagKind = diag::warn_nullability_missing_array;
3646     else
3647       diagKind = diag::warn_nullability_missing;
3648 
3649     if (fileNullability.PointerLoc.isInvalid() &&
3650         !S.Context.getDiagnostics().isIgnored(diagKind, pointerLoc)) {
3651       fileNullability.PointerLoc = pointerLoc;
3652       fileNullability.PointerEndLoc = pointerEndLoc;
3653       fileNullability.PointerKind = static_cast<unsigned>(pointerKind);
3654     }
3655 
3656     return;
3657   }
3658 
3659   // Complain about missing nullability.
3660   emitNullabilityConsistencyWarning(S, pointerKind, pointerLoc, pointerEndLoc);
3661 }
3662 
3663 /// Marks that a nullability feature has been used in the file containing
3664 /// \p loc.
3665 ///
3666 /// If this file already had pointer types in it that were missing nullability,
3667 /// the first such instance is retroactively diagnosed.
3668 ///
3669 /// \sa checkNullabilityConsistency
3670 static void recordNullabilitySeen(Sema &S, SourceLocation loc) {
3671   FileID file = getNullabilityCompletenessCheckFileID(S, loc);
3672   if (file.isInvalid())
3673     return;
3674 
3675   FileNullability &fileNullability = S.NullabilityMap[file];
3676   if (fileNullability.SawTypeNullability)
3677     return;
3678   fileNullability.SawTypeNullability = true;
3679 
3680   // If we haven't seen any type nullability before, now we have. Retroactively
3681   // diagnose the first unannotated pointer, if there was one.
3682   if (fileNullability.PointerLoc.isInvalid())
3683     return;
3684 
3685   auto kind = static_cast<SimplePointerKind>(fileNullability.PointerKind);
3686   emitNullabilityConsistencyWarning(S, kind, fileNullability.PointerLoc,
3687                                     fileNullability.PointerEndLoc);
3688 }
3689 
3690 /// Returns true if any of the declarator chunks before \p endIndex include a
3691 /// level of indirection: array, pointer, reference, or pointer-to-member.
3692 ///
3693 /// Because declarator chunks are stored in outer-to-inner order, testing
3694 /// every chunk before \p endIndex is testing all chunks that embed the current
3695 /// chunk as part of their type.
3696 ///
3697 /// It is legal to pass the result of Declarator::getNumTypeObjects() as the
3698 /// end index, in which case all chunks are tested.
3699 static bool hasOuterPointerLikeChunk(const Declarator &D, unsigned endIndex) {
3700   unsigned i = endIndex;
3701   while (i != 0) {
3702     // Walk outwards along the declarator chunks.
3703     --i;
3704     const DeclaratorChunk &DC = D.getTypeObject(i);
3705     switch (DC.Kind) {
3706     case DeclaratorChunk::Paren:
3707       break;
3708     case DeclaratorChunk::Array:
3709     case DeclaratorChunk::Pointer:
3710     case DeclaratorChunk::Reference:
3711     case DeclaratorChunk::MemberPointer:
3712       return true;
3713     case DeclaratorChunk::Function:
3714     case DeclaratorChunk::BlockPointer:
3715     case DeclaratorChunk::Pipe:
3716       // These are invalid anyway, so just ignore.
3717       break;
3718     }
3719   }
3720   return false;
3721 }
3722 
3723 static TypeSourceInfo *GetFullTypeForDeclarator(TypeProcessingState &state,
3724                                                 QualType declSpecType,
3725                                                 TypeSourceInfo *TInfo) {
3726   // The TypeSourceInfo that this function returns will not be a null type.
3727   // If there is an error, this function will fill in a dummy type as fallback.
3728   QualType T = declSpecType;
3729   Declarator &D = state.getDeclarator();
3730   Sema &S = state.getSema();
3731   ASTContext &Context = S.Context;
3732   const LangOptions &LangOpts = S.getLangOpts();
3733 
3734   // The name we're declaring, if any.
3735   DeclarationName Name;
3736   if (D.getIdentifier())
3737     Name = D.getIdentifier();
3738 
3739   // Does this declaration declare a typedef-name?
3740   bool IsTypedefName =
3741     D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_typedef ||
3742     D.getContext() == Declarator::AliasDeclContext ||
3743     D.getContext() == Declarator::AliasTemplateContext;
3744 
3745   // Does T refer to a function type with a cv-qualifier or a ref-qualifier?
3746   bool IsQualifiedFunction = T->isFunctionProtoType() &&
3747       (T->castAs<FunctionProtoType>()->getTypeQuals() != 0 ||
3748        T->castAs<FunctionProtoType>()->getRefQualifier() != RQ_None);
3749 
3750   // If T is 'decltype(auto)', the only declarators we can have are parens
3751   // and at most one function declarator if this is a function declaration.
3752   // If T is a deduced class template specialization type, we can have no
3753   // declarator chunks at all.
3754   if (auto *DT = T->getAs<DeducedType>()) {
3755     const AutoType *AT = T->getAs<AutoType>();
3756     bool IsClassTemplateDeduction = isa<DeducedTemplateSpecializationType>(DT);
3757     if ((AT && AT->isDecltypeAuto()) || IsClassTemplateDeduction) {
3758       for (unsigned I = 0, E = D.getNumTypeObjects(); I != E; ++I) {
3759         unsigned Index = E - I - 1;
3760         DeclaratorChunk &DeclChunk = D.getTypeObject(Index);
3761         unsigned DiagId = IsClassTemplateDeduction
3762                               ? diag::err_deduced_class_template_compound_type
3763                               : diag::err_decltype_auto_compound_type;
3764         unsigned DiagKind = 0;
3765         switch (DeclChunk.Kind) {
3766         case DeclaratorChunk::Paren:
3767           // FIXME: Rejecting this is a little silly.
3768           if (IsClassTemplateDeduction) {
3769             DiagKind = 4;
3770             break;
3771           }
3772           continue;
3773         case DeclaratorChunk::Function: {
3774           if (IsClassTemplateDeduction) {
3775             DiagKind = 3;
3776             break;
3777           }
3778           unsigned FnIndex;
3779           if (D.isFunctionDeclarationContext() &&
3780               D.isFunctionDeclarator(FnIndex) && FnIndex == Index)
3781             continue;
3782           DiagId = diag::err_decltype_auto_function_declarator_not_declaration;
3783           break;
3784         }
3785         case DeclaratorChunk::Pointer:
3786         case DeclaratorChunk::BlockPointer:
3787         case DeclaratorChunk::MemberPointer:
3788           DiagKind = 0;
3789           break;
3790         case DeclaratorChunk::Reference:
3791           DiagKind = 1;
3792           break;
3793         case DeclaratorChunk::Array:
3794           DiagKind = 2;
3795           break;
3796         case DeclaratorChunk::Pipe:
3797           break;
3798         }
3799 
3800         S.Diag(DeclChunk.Loc, DiagId) << DiagKind;
3801         D.setInvalidType(true);
3802         break;
3803       }
3804     }
3805   }
3806 
3807   // Determine whether we should infer _Nonnull on pointer types.
3808   Optional<NullabilityKind> inferNullability;
3809   bool inferNullabilityCS = false;
3810   bool inferNullabilityInnerOnly = false;
3811   bool inferNullabilityInnerOnlyComplete = false;
3812 
3813   // Are we in an assume-nonnull region?
3814   bool inAssumeNonNullRegion = false;
3815   SourceLocation assumeNonNullLoc = S.PP.getPragmaAssumeNonNullLoc();
3816   if (assumeNonNullLoc.isValid()) {
3817     inAssumeNonNullRegion = true;
3818     recordNullabilitySeen(S, assumeNonNullLoc);
3819   }
3820 
3821   // Whether to complain about missing nullability specifiers or not.
3822   enum {
3823     /// Never complain.
3824     CAMN_No,
3825     /// Complain on the inner pointers (but not the outermost
3826     /// pointer).
3827     CAMN_InnerPointers,
3828     /// Complain about any pointers that don't have nullability
3829     /// specified or inferred.
3830     CAMN_Yes
3831   } complainAboutMissingNullability = CAMN_No;
3832   unsigned NumPointersRemaining = 0;
3833   auto complainAboutInferringWithinChunk = PointerWrappingDeclaratorKind::None;
3834 
3835   if (IsTypedefName) {
3836     // For typedefs, we do not infer any nullability (the default),
3837     // and we only complain about missing nullability specifiers on
3838     // inner pointers.
3839     complainAboutMissingNullability = CAMN_InnerPointers;
3840 
3841     if (T->canHaveNullability(/*ResultIfUnknown*/false) &&
3842         !T->getNullability(S.Context)) {
3843       // Note that we allow but don't require nullability on dependent types.
3844       ++NumPointersRemaining;
3845     }
3846 
3847     for (unsigned i = 0, n = D.getNumTypeObjects(); i != n; ++i) {
3848       DeclaratorChunk &chunk = D.getTypeObject(i);
3849       switch (chunk.Kind) {
3850       case DeclaratorChunk::Array:
3851       case DeclaratorChunk::Function:
3852       case DeclaratorChunk::Pipe:
3853         break;
3854 
3855       case DeclaratorChunk::BlockPointer:
3856       case DeclaratorChunk::MemberPointer:
3857         ++NumPointersRemaining;
3858         break;
3859 
3860       case DeclaratorChunk::Paren:
3861       case DeclaratorChunk::Reference:
3862         continue;
3863 
3864       case DeclaratorChunk::Pointer:
3865         ++NumPointersRemaining;
3866         continue;
3867       }
3868     }
3869   } else {
3870     bool isFunctionOrMethod = false;
3871     switch (auto context = state.getDeclarator().getContext()) {
3872     case Declarator::ObjCParameterContext:
3873     case Declarator::ObjCResultContext:
3874     case Declarator::PrototypeContext:
3875     case Declarator::TrailingReturnContext:
3876       isFunctionOrMethod = true;
3877       // fallthrough
3878 
3879     case Declarator::MemberContext:
3880       if (state.getDeclarator().isObjCIvar() && !isFunctionOrMethod) {
3881         complainAboutMissingNullability = CAMN_No;
3882         break;
3883       }
3884 
3885       // Weak properties are inferred to be nullable.
3886       if (state.getDeclarator().isObjCWeakProperty() && inAssumeNonNullRegion) {
3887         inferNullability = NullabilityKind::Nullable;
3888         break;
3889       }
3890 
3891       // fallthrough
3892 
3893     case Declarator::FileContext:
3894     case Declarator::KNRTypeListContext: {
3895       complainAboutMissingNullability = CAMN_Yes;
3896 
3897       // Nullability inference depends on the type and declarator.
3898       auto wrappingKind = PointerWrappingDeclaratorKind::None;
3899       switch (classifyPointerDeclarator(S, T, D, wrappingKind)) {
3900       case PointerDeclaratorKind::NonPointer:
3901       case PointerDeclaratorKind::MultiLevelPointer:
3902         // Cannot infer nullability.
3903         break;
3904 
3905       case PointerDeclaratorKind::SingleLevelPointer:
3906         // Infer _Nonnull if we are in an assumes-nonnull region.
3907         if (inAssumeNonNullRegion) {
3908           complainAboutInferringWithinChunk = wrappingKind;
3909           inferNullability = NullabilityKind::NonNull;
3910           inferNullabilityCS = (context == Declarator::ObjCParameterContext ||
3911                                 context == Declarator::ObjCResultContext);
3912         }
3913         break;
3914 
3915       case PointerDeclaratorKind::CFErrorRefPointer:
3916       case PointerDeclaratorKind::NSErrorPointerPointer:
3917         // Within a function or method signature, infer _Nullable at both
3918         // levels.
3919         if (isFunctionOrMethod && inAssumeNonNullRegion)
3920           inferNullability = NullabilityKind::Nullable;
3921         break;
3922 
3923       case PointerDeclaratorKind::MaybePointerToCFRef:
3924         if (isFunctionOrMethod) {
3925           // On pointer-to-pointer parameters marked cf_returns_retained or
3926           // cf_returns_not_retained, if the outer pointer is explicit then
3927           // infer the inner pointer as _Nullable.
3928           auto hasCFReturnsAttr = [](const AttributeList *NextAttr) -> bool {
3929             while (NextAttr) {
3930               if (NextAttr->getKind() == AttributeList::AT_CFReturnsRetained ||
3931                   NextAttr->getKind() == AttributeList::AT_CFReturnsNotRetained)
3932                 return true;
3933               NextAttr = NextAttr->getNext();
3934             }
3935             return false;
3936           };
3937           if (const auto *InnermostChunk = D.getInnermostNonParenChunk()) {
3938             if (hasCFReturnsAttr(D.getAttributes()) ||
3939                 hasCFReturnsAttr(InnermostChunk->getAttrs()) ||
3940                 hasCFReturnsAttr(D.getDeclSpec().getAttributes().getList())) {
3941               inferNullability = NullabilityKind::Nullable;
3942               inferNullabilityInnerOnly = true;
3943             }
3944           }
3945         }
3946         break;
3947       }
3948       break;
3949     }
3950 
3951     case Declarator::ConversionIdContext:
3952       complainAboutMissingNullability = CAMN_Yes;
3953       break;
3954 
3955     case Declarator::AliasDeclContext:
3956     case Declarator::AliasTemplateContext:
3957     case Declarator::BlockContext:
3958     case Declarator::BlockLiteralContext:
3959     case Declarator::ConditionContext:
3960     case Declarator::CXXCatchContext:
3961     case Declarator::CXXNewContext:
3962     case Declarator::ForContext:
3963     case Declarator::InitStmtContext:
3964     case Declarator::LambdaExprContext:
3965     case Declarator::LambdaExprParameterContext:
3966     case Declarator::ObjCCatchContext:
3967     case Declarator::TemplateParamContext:
3968     case Declarator::TemplateTypeArgContext:
3969     case Declarator::TypeNameContext:
3970     case Declarator::FunctionalCastContext:
3971       // Don't infer in these contexts.
3972       break;
3973     }
3974   }
3975 
3976   // Local function that returns true if its argument looks like a va_list.
3977   auto isVaList = [&S](QualType T) -> bool {
3978     auto *typedefTy = T->getAs<TypedefType>();
3979     if (!typedefTy)
3980       return false;
3981     TypedefDecl *vaListTypedef = S.Context.getBuiltinVaListDecl();
3982     do {
3983       if (typedefTy->getDecl() == vaListTypedef)
3984         return true;
3985       if (auto *name = typedefTy->getDecl()->getIdentifier())
3986         if (name->isStr("va_list"))
3987           return true;
3988       typedefTy = typedefTy->desugar()->getAs<TypedefType>();
3989     } while (typedefTy);
3990     return false;
3991   };
3992 
3993   // Local function that checks the nullability for a given pointer declarator.
3994   // Returns true if _Nonnull was inferred.
3995   auto inferPointerNullability = [&](SimplePointerKind pointerKind,
3996                                      SourceLocation pointerLoc,
3997                                      SourceLocation pointerEndLoc,
3998                                      AttributeList *&attrs) -> AttributeList * {
3999     // We've seen a pointer.
4000     if (NumPointersRemaining > 0)
4001       --NumPointersRemaining;
4002 
4003     // If a nullability attribute is present, there's nothing to do.
4004     if (hasNullabilityAttr(attrs))
4005       return nullptr;
4006 
4007     // If we're supposed to infer nullability, do so now.
4008     if (inferNullability && !inferNullabilityInnerOnlyComplete) {
4009       AttributeList::Syntax syntax
4010         = inferNullabilityCS ? AttributeList::AS_ContextSensitiveKeyword
4011                              : AttributeList::AS_Keyword;
4012       AttributeList *nullabilityAttr = state.getDeclarator().getAttributePool()
4013                                          .create(
4014                                            S.getNullabilityKeyword(
4015                                              *inferNullability),
4016                                            SourceRange(pointerLoc),
4017                                            nullptr, SourceLocation(),
4018                                            nullptr, 0, syntax);
4019 
4020       spliceAttrIntoList(*nullabilityAttr, attrs);
4021 
4022       if (inferNullabilityCS) {
4023         state.getDeclarator().getMutableDeclSpec().getObjCQualifiers()
4024           ->setObjCDeclQualifier(ObjCDeclSpec::DQ_CSNullability);
4025       }
4026 
4027       if (pointerLoc.isValid() &&
4028           complainAboutInferringWithinChunk !=
4029             PointerWrappingDeclaratorKind::None) {
4030         auto Diag =
4031             S.Diag(pointerLoc, diag::warn_nullability_inferred_on_nested_type);
4032         Diag << static_cast<int>(complainAboutInferringWithinChunk);
4033         fixItNullability(S, Diag, pointerLoc, NullabilityKind::NonNull);
4034       }
4035 
4036       if (inferNullabilityInnerOnly)
4037         inferNullabilityInnerOnlyComplete = true;
4038       return nullabilityAttr;
4039     }
4040 
4041     // If we're supposed to complain about missing nullability, do so
4042     // now if it's truly missing.
4043     switch (complainAboutMissingNullability) {
4044     case CAMN_No:
4045       break;
4046 
4047     case CAMN_InnerPointers:
4048       if (NumPointersRemaining == 0)
4049         break;
4050       // Fallthrough.
4051 
4052     case CAMN_Yes:
4053       checkNullabilityConsistency(S, pointerKind, pointerLoc, pointerEndLoc);
4054     }
4055     return nullptr;
4056   };
4057 
4058   // If the type itself could have nullability but does not, infer pointer
4059   // nullability and perform consistency checking.
4060   if (S.CodeSynthesisContexts.empty()) {
4061     if (T->canHaveNullability(/*ResultIfUnknown*/false) &&
4062         !T->getNullability(S.Context)) {
4063       if (isVaList(T)) {
4064         // Record that we've seen a pointer, but do nothing else.
4065         if (NumPointersRemaining > 0)
4066           --NumPointersRemaining;
4067       } else {
4068         SimplePointerKind pointerKind = SimplePointerKind::Pointer;
4069         if (T->isBlockPointerType())
4070           pointerKind = SimplePointerKind::BlockPointer;
4071         else if (T->isMemberPointerType())
4072           pointerKind = SimplePointerKind::MemberPointer;
4073 
4074         if (auto *attr = inferPointerNullability(
4075               pointerKind, D.getDeclSpec().getTypeSpecTypeLoc(),
4076               D.getDeclSpec().getLocEnd(),
4077               D.getMutableDeclSpec().getAttributes().getListRef())) {
4078           T = Context.getAttributedType(
4079                 AttributedType::getNullabilityAttrKind(*inferNullability),T,T);
4080           attr->setUsedAsTypeAttr();
4081         }
4082       }
4083     }
4084 
4085     if (complainAboutMissingNullability == CAMN_Yes &&
4086         T->isArrayType() && !T->getNullability(S.Context) && !isVaList(T) &&
4087         D.isPrototypeContext() &&
4088         !hasOuterPointerLikeChunk(D, D.getNumTypeObjects())) {
4089       checkNullabilityConsistency(S, SimplePointerKind::Array,
4090                                   D.getDeclSpec().getTypeSpecTypeLoc());
4091     }
4092   }
4093 
4094   // Walk the DeclTypeInfo, building the recursive type as we go.
4095   // DeclTypeInfos are ordered from the identifier out, which is
4096   // opposite of what we want :).
4097   for (unsigned i = 0, e = D.getNumTypeObjects(); i != e; ++i) {
4098     unsigned chunkIndex = e - i - 1;
4099     state.setCurrentChunkIndex(chunkIndex);
4100     DeclaratorChunk &DeclType = D.getTypeObject(chunkIndex);
4101     IsQualifiedFunction &= DeclType.Kind == DeclaratorChunk::Paren;
4102     switch (DeclType.Kind) {
4103     case DeclaratorChunk::Paren:
4104       if (i == 0)
4105         warnAboutRedundantParens(S, D, T);
4106       T = S.BuildParenType(T);
4107       break;
4108     case DeclaratorChunk::BlockPointer:
4109       // If blocks are disabled, emit an error.
4110       if (!LangOpts.Blocks)
4111         S.Diag(DeclType.Loc, diag::err_blocks_disable) << LangOpts.OpenCL;
4112 
4113       // Handle pointer nullability.
4114       inferPointerNullability(SimplePointerKind::BlockPointer, DeclType.Loc,
4115                               DeclType.EndLoc, DeclType.getAttrListRef());
4116 
4117       T = S.BuildBlockPointerType(T, D.getIdentifierLoc(), Name);
4118       if (DeclType.Cls.TypeQuals || LangOpts.OpenCL) {
4119         // OpenCL v2.0, s6.12.5 - Block variable declarations are implicitly
4120         // qualified with const.
4121         if (LangOpts.OpenCL)
4122           DeclType.Cls.TypeQuals |= DeclSpec::TQ_const;
4123         T = S.BuildQualifiedType(T, DeclType.Loc, DeclType.Cls.TypeQuals);
4124       }
4125       break;
4126     case DeclaratorChunk::Pointer:
4127       // Verify that we're not building a pointer to pointer to function with
4128       // exception specification.
4129       if (LangOpts.CPlusPlus && S.CheckDistantExceptionSpec(T)) {
4130         S.Diag(D.getIdentifierLoc(), diag::err_distant_exception_spec);
4131         D.setInvalidType(true);
4132         // Build the type anyway.
4133       }
4134 
4135       // Handle pointer nullability
4136       inferPointerNullability(SimplePointerKind::Pointer, DeclType.Loc,
4137                               DeclType.EndLoc, DeclType.getAttrListRef());
4138 
4139       if (LangOpts.ObjC1 && T->getAs<ObjCObjectType>()) {
4140         T = Context.getObjCObjectPointerType(T);
4141         if (DeclType.Ptr.TypeQuals)
4142           T = S.BuildQualifiedType(T, DeclType.Loc, DeclType.Ptr.TypeQuals);
4143         break;
4144       }
4145 
4146       // OpenCL v2.0 s6.9b - Pointer to image/sampler cannot be used.
4147       // OpenCL v2.0 s6.13.16.1 - Pointer to pipe cannot be used.
4148       // OpenCL v2.0 s6.12.5 - Pointers to Blocks are not allowed.
4149       if (LangOpts.OpenCL) {
4150         if (T->isImageType() || T->isSamplerT() || T->isPipeType() ||
4151             T->isBlockPointerType()) {
4152           S.Diag(D.getIdentifierLoc(), diag::err_opencl_pointer_to_type) << T;
4153           D.setInvalidType(true);
4154         }
4155       }
4156 
4157       T = S.BuildPointerType(T, DeclType.Loc, Name);
4158       if (DeclType.Ptr.TypeQuals)
4159         T = S.BuildQualifiedType(T, DeclType.Loc, DeclType.Ptr.TypeQuals);
4160       break;
4161     case DeclaratorChunk::Reference: {
4162       // Verify that we're not building a reference to pointer to function with
4163       // exception specification.
4164       if (LangOpts.CPlusPlus && S.CheckDistantExceptionSpec(T)) {
4165         S.Diag(D.getIdentifierLoc(), diag::err_distant_exception_spec);
4166         D.setInvalidType(true);
4167         // Build the type anyway.
4168       }
4169       T = S.BuildReferenceType(T, DeclType.Ref.LValueRef, DeclType.Loc, Name);
4170 
4171       if (DeclType.Ref.HasRestrict)
4172         T = S.BuildQualifiedType(T, DeclType.Loc, Qualifiers::Restrict);
4173       break;
4174     }
4175     case DeclaratorChunk::Array: {
4176       // Verify that we're not building an array of pointers to function with
4177       // exception specification.
4178       if (LangOpts.CPlusPlus && S.CheckDistantExceptionSpec(T)) {
4179         S.Diag(D.getIdentifierLoc(), diag::err_distant_exception_spec);
4180         D.setInvalidType(true);
4181         // Build the type anyway.
4182       }
4183       DeclaratorChunk::ArrayTypeInfo &ATI = DeclType.Arr;
4184       Expr *ArraySize = static_cast<Expr*>(ATI.NumElts);
4185       ArrayType::ArraySizeModifier ASM;
4186       if (ATI.isStar)
4187         ASM = ArrayType::Star;
4188       else if (ATI.hasStatic)
4189         ASM = ArrayType::Static;
4190       else
4191         ASM = ArrayType::Normal;
4192       if (ASM == ArrayType::Star && !D.isPrototypeContext()) {
4193         // FIXME: This check isn't quite right: it allows star in prototypes
4194         // for function definitions, and disallows some edge cases detailed
4195         // in http://gcc.gnu.org/ml/gcc-patches/2009-02/msg00133.html
4196         S.Diag(DeclType.Loc, diag::err_array_star_outside_prototype);
4197         ASM = ArrayType::Normal;
4198         D.setInvalidType(true);
4199       }
4200 
4201       // C99 6.7.5.2p1: The optional type qualifiers and the keyword static
4202       // shall appear only in a declaration of a function parameter with an
4203       // array type, ...
4204       if (ASM == ArrayType::Static || ATI.TypeQuals) {
4205         if (!(D.isPrototypeContext() ||
4206               D.getContext() == Declarator::KNRTypeListContext)) {
4207           S.Diag(DeclType.Loc, diag::err_array_static_outside_prototype) <<
4208               (ASM == ArrayType::Static ? "'static'" : "type qualifier");
4209           // Remove the 'static' and the type qualifiers.
4210           if (ASM == ArrayType::Static)
4211             ASM = ArrayType::Normal;
4212           ATI.TypeQuals = 0;
4213           D.setInvalidType(true);
4214         }
4215 
4216         // C99 6.7.5.2p1: ... and then only in the outermost array type
4217         // derivation.
4218         if (hasOuterPointerLikeChunk(D, chunkIndex)) {
4219           S.Diag(DeclType.Loc, diag::err_array_static_not_outermost) <<
4220             (ASM == ArrayType::Static ? "'static'" : "type qualifier");
4221           if (ASM == ArrayType::Static)
4222             ASM = ArrayType::Normal;
4223           ATI.TypeQuals = 0;
4224           D.setInvalidType(true);
4225         }
4226       }
4227       const AutoType *AT = T->getContainedAutoType();
4228       // Allow arrays of auto if we are a generic lambda parameter.
4229       // i.e. [](auto (&array)[5]) { return array[0]; }; OK
4230       if (AT && D.getContext() != Declarator::LambdaExprParameterContext) {
4231         // We've already diagnosed this for decltype(auto).
4232         if (!AT->isDecltypeAuto())
4233           S.Diag(DeclType.Loc, diag::err_illegal_decl_array_of_auto)
4234             << getPrintableNameForEntity(Name) << T;
4235         T = QualType();
4236         break;
4237       }
4238 
4239       // Array parameters can be marked nullable as well, although it's not
4240       // necessary if they're marked 'static'.
4241       if (complainAboutMissingNullability == CAMN_Yes &&
4242           !hasNullabilityAttr(DeclType.getAttrs()) &&
4243           ASM != ArrayType::Static &&
4244           D.isPrototypeContext() &&
4245           !hasOuterPointerLikeChunk(D, chunkIndex)) {
4246         checkNullabilityConsistency(S, SimplePointerKind::Array, DeclType.Loc);
4247       }
4248 
4249       T = S.BuildArrayType(T, ASM, ArraySize, ATI.TypeQuals,
4250                            SourceRange(DeclType.Loc, DeclType.EndLoc), Name);
4251       break;
4252     }
4253     case DeclaratorChunk::Function: {
4254       // If the function declarator has a prototype (i.e. it is not () and
4255       // does not have a K&R-style identifier list), then the arguments are part
4256       // of the type, otherwise the argument list is ().
4257       const DeclaratorChunk::FunctionTypeInfo &FTI = DeclType.Fun;
4258       IsQualifiedFunction = FTI.TypeQuals || FTI.hasRefQualifier();
4259 
4260       // Check for auto functions and trailing return type and adjust the
4261       // return type accordingly.
4262       if (!D.isInvalidType()) {
4263         // trailing-return-type is only required if we're declaring a function,
4264         // and not, for instance, a pointer to a function.
4265         if (D.getDeclSpec().hasAutoTypeSpec() &&
4266             !FTI.hasTrailingReturnType() && chunkIndex == 0 &&
4267             !S.getLangOpts().CPlusPlus14) {
4268           S.Diag(D.getDeclSpec().getTypeSpecTypeLoc(),
4269                  D.getDeclSpec().getTypeSpecType() == DeclSpec::TST_auto
4270                      ? diag::err_auto_missing_trailing_return
4271                      : diag::err_deduced_return_type);
4272           T = Context.IntTy;
4273           D.setInvalidType(true);
4274         } else if (FTI.hasTrailingReturnType()) {
4275           // T must be exactly 'auto' at this point. See CWG issue 681.
4276           if (isa<ParenType>(T)) {
4277             S.Diag(D.getLocStart(),
4278                  diag::err_trailing_return_in_parens)
4279               << T << D.getSourceRange();
4280             D.setInvalidType(true);
4281           } else if (D.getName().getKind() ==
4282                          UnqualifiedId::IK_DeductionGuideName) {
4283             if (T != Context.DependentTy) {
4284               S.Diag(D.getDeclSpec().getLocStart(),
4285                      diag::err_deduction_guide_with_complex_decl)
4286                   << D.getSourceRange();
4287               D.setInvalidType(true);
4288             }
4289           } else if (D.getContext() != Declarator::LambdaExprContext &&
4290                      (T.hasQualifiers() || !isa<AutoType>(T) ||
4291                       cast<AutoType>(T)->getKeyword() !=
4292                           AutoTypeKeyword::Auto)) {
4293             S.Diag(D.getDeclSpec().getTypeSpecTypeLoc(),
4294                    diag::err_trailing_return_without_auto)
4295                 << T << D.getDeclSpec().getSourceRange();
4296             D.setInvalidType(true);
4297           }
4298           T = S.GetTypeFromParser(FTI.getTrailingReturnType(), &TInfo);
4299           if (T.isNull()) {
4300             // An error occurred parsing the trailing return type.
4301             T = Context.IntTy;
4302             D.setInvalidType(true);
4303           }
4304         }
4305       }
4306 
4307       // C99 6.7.5.3p1: The return type may not be a function or array type.
4308       // For conversion functions, we'll diagnose this particular error later.
4309       if (!D.isInvalidType() && (T->isArrayType() || T->isFunctionType()) &&
4310           (D.getName().getKind() != UnqualifiedId::IK_ConversionFunctionId)) {
4311         unsigned diagID = diag::err_func_returning_array_function;
4312         // Last processing chunk in block context means this function chunk
4313         // represents the block.
4314         if (chunkIndex == 0 &&
4315             D.getContext() == Declarator::BlockLiteralContext)
4316           diagID = diag::err_block_returning_array_function;
4317         S.Diag(DeclType.Loc, diagID) << T->isFunctionType() << T;
4318         T = Context.IntTy;
4319         D.setInvalidType(true);
4320       }
4321 
4322       // Do not allow returning half FP value.
4323       // FIXME: This really should be in BuildFunctionType.
4324       if (T->isHalfType()) {
4325         if (S.getLangOpts().OpenCL) {
4326           if (!S.getOpenCLOptions().isEnabled("cl_khr_fp16")) {
4327             S.Diag(D.getIdentifierLoc(), diag::err_opencl_invalid_return)
4328                 << T << 0 /*pointer hint*/;
4329             D.setInvalidType(true);
4330           }
4331         } else if (!S.getLangOpts().HalfArgsAndReturns) {
4332           S.Diag(D.getIdentifierLoc(),
4333             diag::err_parameters_retval_cannot_have_fp16_type) << 1;
4334           D.setInvalidType(true);
4335         }
4336       }
4337 
4338       if (LangOpts.OpenCL) {
4339         // OpenCL v2.0 s6.12.5 - A block cannot be the return value of a
4340         // function.
4341         if (T->isBlockPointerType() || T->isImageType() || T->isSamplerT() ||
4342             T->isPipeType()) {
4343           S.Diag(D.getIdentifierLoc(), diag::err_opencl_invalid_return)
4344               << T << 1 /*hint off*/;
4345           D.setInvalidType(true);
4346         }
4347         // OpenCL doesn't support variadic functions and blocks
4348         // (s6.9.e and s6.12.5 OpenCL v2.0) except for printf.
4349         // We also allow here any toolchain reserved identifiers.
4350         if (FTI.isVariadic &&
4351             !(D.getIdentifier() &&
4352               ((D.getIdentifier()->getName() == "printf" &&
4353                 LangOpts.OpenCLVersion >= 120) ||
4354                D.getIdentifier()->getName().startswith("__")))) {
4355           S.Diag(D.getIdentifierLoc(), diag::err_opencl_variadic_function);
4356           D.setInvalidType(true);
4357         }
4358       }
4359 
4360       // Methods cannot return interface types. All ObjC objects are
4361       // passed by reference.
4362       if (T->isObjCObjectType()) {
4363         SourceLocation DiagLoc, FixitLoc;
4364         if (TInfo) {
4365           DiagLoc = TInfo->getTypeLoc().getLocStart();
4366           FixitLoc = S.getLocForEndOfToken(TInfo->getTypeLoc().getLocEnd());
4367         } else {
4368           DiagLoc = D.getDeclSpec().getTypeSpecTypeLoc();
4369           FixitLoc = S.getLocForEndOfToken(D.getDeclSpec().getLocEnd());
4370         }
4371         S.Diag(DiagLoc, diag::err_object_cannot_be_passed_returned_by_value)
4372           << 0 << T
4373           << FixItHint::CreateInsertion(FixitLoc, "*");
4374 
4375         T = Context.getObjCObjectPointerType(T);
4376         if (TInfo) {
4377           TypeLocBuilder TLB;
4378           TLB.pushFullCopy(TInfo->getTypeLoc());
4379           ObjCObjectPointerTypeLoc TLoc = TLB.push<ObjCObjectPointerTypeLoc>(T);
4380           TLoc.setStarLoc(FixitLoc);
4381           TInfo = TLB.getTypeSourceInfo(Context, T);
4382         }
4383 
4384         D.setInvalidType(true);
4385       }
4386 
4387       // cv-qualifiers on return types are pointless except when the type is a
4388       // class type in C++.
4389       if ((T.getCVRQualifiers() || T->isAtomicType()) &&
4390           !(S.getLangOpts().CPlusPlus &&
4391             (T->isDependentType() || T->isRecordType()))) {
4392         if (T->isVoidType() && !S.getLangOpts().CPlusPlus &&
4393             D.getFunctionDefinitionKind() == FDK_Definition) {
4394           // [6.9.1/3] qualified void return is invalid on a C
4395           // function definition.  Apparently ok on declarations and
4396           // in C++ though (!)
4397           S.Diag(DeclType.Loc, diag::err_func_returning_qualified_void) << T;
4398         } else
4399           diagnoseRedundantReturnTypeQualifiers(S, T, D, chunkIndex);
4400       }
4401 
4402       // Objective-C ARC ownership qualifiers are ignored on the function
4403       // return type (by type canonicalization). Complain if this attribute
4404       // was written here.
4405       if (T.getQualifiers().hasObjCLifetime()) {
4406         SourceLocation AttrLoc;
4407         if (chunkIndex + 1 < D.getNumTypeObjects()) {
4408           DeclaratorChunk ReturnTypeChunk = D.getTypeObject(chunkIndex + 1);
4409           for (const AttributeList *Attr = ReturnTypeChunk.getAttrs();
4410                Attr; Attr = Attr->getNext()) {
4411             if (Attr->getKind() == AttributeList::AT_ObjCOwnership) {
4412               AttrLoc = Attr->getLoc();
4413               break;
4414             }
4415           }
4416         }
4417         if (AttrLoc.isInvalid()) {
4418           for (const AttributeList *Attr
4419                  = D.getDeclSpec().getAttributes().getList();
4420                Attr; Attr = Attr->getNext()) {
4421             if (Attr->getKind() == AttributeList::AT_ObjCOwnership) {
4422               AttrLoc = Attr->getLoc();
4423               break;
4424             }
4425           }
4426         }
4427 
4428         if (AttrLoc.isValid()) {
4429           // The ownership attributes are almost always written via
4430           // the predefined
4431           // __strong/__weak/__autoreleasing/__unsafe_unretained.
4432           if (AttrLoc.isMacroID())
4433             AttrLoc = S.SourceMgr.getImmediateExpansionRange(AttrLoc).first;
4434 
4435           S.Diag(AttrLoc, diag::warn_arc_lifetime_result_type)
4436             << T.getQualifiers().getObjCLifetime();
4437         }
4438       }
4439 
4440       if (LangOpts.CPlusPlus && D.getDeclSpec().hasTagDefinition()) {
4441         // C++ [dcl.fct]p6:
4442         //   Types shall not be defined in return or parameter types.
4443         TagDecl *Tag = cast<TagDecl>(D.getDeclSpec().getRepAsDecl());
4444         S.Diag(Tag->getLocation(), diag::err_type_defined_in_result_type)
4445           << Context.getTypeDeclType(Tag);
4446       }
4447 
4448       // Exception specs are not allowed in typedefs. Complain, but add it
4449       // anyway.
4450       if (IsTypedefName && FTI.getExceptionSpecType() && !LangOpts.CPlusPlus1z)
4451         S.Diag(FTI.getExceptionSpecLocBeg(),
4452                diag::err_exception_spec_in_typedef)
4453             << (D.getContext() == Declarator::AliasDeclContext ||
4454                 D.getContext() == Declarator::AliasTemplateContext);
4455 
4456       // If we see "T var();" or "T var(T());" at block scope, it is probably
4457       // an attempt to initialize a variable, not a function declaration.
4458       if (FTI.isAmbiguous)
4459         warnAboutAmbiguousFunction(S, D, DeclType, T);
4460 
4461       FunctionType::ExtInfo EI(getCCForDeclaratorChunk(S, D, FTI, chunkIndex));
4462 
4463       if (!FTI.NumParams && !FTI.isVariadic && !LangOpts.CPlusPlus
4464                                             && !LangOpts.OpenCL) {
4465         // Simple void foo(), where the incoming T is the result type.
4466         T = Context.getFunctionNoProtoType(T, EI);
4467       } else {
4468         // We allow a zero-parameter variadic function in C if the
4469         // function is marked with the "overloadable" attribute. Scan
4470         // for this attribute now.
4471         if (!FTI.NumParams && FTI.isVariadic && !LangOpts.CPlusPlus) {
4472           bool Overloadable = false;
4473           for (const AttributeList *Attrs = D.getAttributes();
4474                Attrs; Attrs = Attrs->getNext()) {
4475             if (Attrs->getKind() == AttributeList::AT_Overloadable) {
4476               Overloadable = true;
4477               break;
4478             }
4479           }
4480 
4481           if (!Overloadable)
4482             S.Diag(FTI.getEllipsisLoc(), diag::err_ellipsis_first_param);
4483         }
4484 
4485         if (FTI.NumParams && FTI.Params[0].Param == nullptr) {
4486           // C99 6.7.5.3p3: Reject int(x,y,z) when it's not a function
4487           // definition.
4488           S.Diag(FTI.Params[0].IdentLoc,
4489                  diag::err_ident_list_in_fn_declaration);
4490           D.setInvalidType(true);
4491           // Recover by creating a K&R-style function type.
4492           T = Context.getFunctionNoProtoType(T, EI);
4493           break;
4494         }
4495 
4496         FunctionProtoType::ExtProtoInfo EPI;
4497         EPI.ExtInfo = EI;
4498         EPI.Variadic = FTI.isVariadic;
4499         EPI.HasTrailingReturn = FTI.hasTrailingReturnType();
4500         EPI.TypeQuals = FTI.TypeQuals;
4501         EPI.RefQualifier = !FTI.hasRefQualifier()? RQ_None
4502                     : FTI.RefQualifierIsLValueRef? RQ_LValue
4503                     : RQ_RValue;
4504 
4505         // Otherwise, we have a function with a parameter list that is
4506         // potentially variadic.
4507         SmallVector<QualType, 16> ParamTys;
4508         ParamTys.reserve(FTI.NumParams);
4509 
4510         SmallVector<FunctionProtoType::ExtParameterInfo, 16>
4511           ExtParameterInfos(FTI.NumParams);
4512         bool HasAnyInterestingExtParameterInfos = false;
4513 
4514         for (unsigned i = 0, e = FTI.NumParams; i != e; ++i) {
4515           ParmVarDecl *Param = cast<ParmVarDecl>(FTI.Params[i].Param);
4516           QualType ParamTy = Param->getType();
4517           assert(!ParamTy.isNull() && "Couldn't parse type?");
4518 
4519           // Look for 'void'.  void is allowed only as a single parameter to a
4520           // function with no other parameters (C99 6.7.5.3p10).  We record
4521           // int(void) as a FunctionProtoType with an empty parameter list.
4522           if (ParamTy->isVoidType()) {
4523             // If this is something like 'float(int, void)', reject it.  'void'
4524             // is an incomplete type (C99 6.2.5p19) and function decls cannot
4525             // have parameters of incomplete type.
4526             if (FTI.NumParams != 1 || FTI.isVariadic) {
4527               S.Diag(DeclType.Loc, diag::err_void_only_param);
4528               ParamTy = Context.IntTy;
4529               Param->setType(ParamTy);
4530             } else if (FTI.Params[i].Ident) {
4531               // Reject, but continue to parse 'int(void abc)'.
4532               S.Diag(FTI.Params[i].IdentLoc, diag::err_param_with_void_type);
4533               ParamTy = Context.IntTy;
4534               Param->setType(ParamTy);
4535             } else {
4536               // Reject, but continue to parse 'float(const void)'.
4537               if (ParamTy.hasQualifiers())
4538                 S.Diag(DeclType.Loc, diag::err_void_param_qualified);
4539 
4540               // Do not add 'void' to the list.
4541               break;
4542             }
4543           } else if (ParamTy->isHalfType()) {
4544             // Disallow half FP parameters.
4545             // FIXME: This really should be in BuildFunctionType.
4546             if (S.getLangOpts().OpenCL) {
4547               if (!S.getOpenCLOptions().isEnabled("cl_khr_fp16")) {
4548                 S.Diag(Param->getLocation(),
4549                   diag::err_opencl_half_param) << ParamTy;
4550                 D.setInvalidType();
4551                 Param->setInvalidDecl();
4552               }
4553             } else if (!S.getLangOpts().HalfArgsAndReturns) {
4554               S.Diag(Param->getLocation(),
4555                 diag::err_parameters_retval_cannot_have_fp16_type) << 0;
4556               D.setInvalidType();
4557             }
4558           } else if (!FTI.hasPrototype) {
4559             if (ParamTy->isPromotableIntegerType()) {
4560               ParamTy = Context.getPromotedIntegerType(ParamTy);
4561               Param->setKNRPromoted(true);
4562             } else if (const BuiltinType* BTy = ParamTy->getAs<BuiltinType>()) {
4563               if (BTy->getKind() == BuiltinType::Float) {
4564                 ParamTy = Context.DoubleTy;
4565                 Param->setKNRPromoted(true);
4566               }
4567             }
4568           }
4569 
4570           if (LangOpts.ObjCAutoRefCount && Param->hasAttr<NSConsumedAttr>()) {
4571             ExtParameterInfos[i] = ExtParameterInfos[i].withIsConsumed(true);
4572             HasAnyInterestingExtParameterInfos = true;
4573           }
4574 
4575           if (auto attr = Param->getAttr<ParameterABIAttr>()) {
4576             ExtParameterInfos[i] =
4577               ExtParameterInfos[i].withABI(attr->getABI());
4578             HasAnyInterestingExtParameterInfos = true;
4579           }
4580 
4581           if (Param->hasAttr<PassObjectSizeAttr>()) {
4582             ExtParameterInfos[i] = ExtParameterInfos[i].withHasPassObjectSize();
4583             HasAnyInterestingExtParameterInfos = true;
4584           }
4585 
4586           if (Param->hasAttr<NoEscapeAttr>()) {
4587             ExtParameterInfos[i] = ExtParameterInfos[i].withIsNoEscape(true);
4588             HasAnyInterestingExtParameterInfos = true;
4589           }
4590 
4591           ParamTys.push_back(ParamTy);
4592         }
4593 
4594         if (HasAnyInterestingExtParameterInfos) {
4595           EPI.ExtParameterInfos = ExtParameterInfos.data();
4596           checkExtParameterInfos(S, ParamTys, EPI,
4597               [&](unsigned i) { return FTI.Params[i].Param->getLocation(); });
4598         }
4599 
4600         SmallVector<QualType, 4> Exceptions;
4601         SmallVector<ParsedType, 2> DynamicExceptions;
4602         SmallVector<SourceRange, 2> DynamicExceptionRanges;
4603         Expr *NoexceptExpr = nullptr;
4604 
4605         if (FTI.getExceptionSpecType() == EST_Dynamic) {
4606           // FIXME: It's rather inefficient to have to split into two vectors
4607           // here.
4608           unsigned N = FTI.getNumExceptions();
4609           DynamicExceptions.reserve(N);
4610           DynamicExceptionRanges.reserve(N);
4611           for (unsigned I = 0; I != N; ++I) {
4612             DynamicExceptions.push_back(FTI.Exceptions[I].Ty);
4613             DynamicExceptionRanges.push_back(FTI.Exceptions[I].Range);
4614           }
4615         } else if (FTI.getExceptionSpecType() == EST_ComputedNoexcept) {
4616           NoexceptExpr = FTI.NoexceptExpr;
4617         }
4618 
4619         S.checkExceptionSpecification(D.isFunctionDeclarationContext(),
4620                                       FTI.getExceptionSpecType(),
4621                                       DynamicExceptions,
4622                                       DynamicExceptionRanges,
4623                                       NoexceptExpr,
4624                                       Exceptions,
4625                                       EPI.ExceptionSpec);
4626 
4627         T = Context.getFunctionType(T, ParamTys, EPI);
4628       }
4629       break;
4630     }
4631     case DeclaratorChunk::MemberPointer: {
4632       // The scope spec must refer to a class, or be dependent.
4633       CXXScopeSpec &SS = DeclType.Mem.Scope();
4634       QualType ClsType;
4635 
4636       // Handle pointer nullability.
4637       inferPointerNullability(SimplePointerKind::MemberPointer, DeclType.Loc,
4638                               DeclType.EndLoc, DeclType.getAttrListRef());
4639 
4640       if (SS.isInvalid()) {
4641         // Avoid emitting extra errors if we already errored on the scope.
4642         D.setInvalidType(true);
4643       } else if (S.isDependentScopeSpecifier(SS) ||
4644                  dyn_cast_or_null<CXXRecordDecl>(S.computeDeclContext(SS))) {
4645         NestedNameSpecifier *NNS = SS.getScopeRep();
4646         NestedNameSpecifier *NNSPrefix = NNS->getPrefix();
4647         switch (NNS->getKind()) {
4648         case NestedNameSpecifier::Identifier:
4649           ClsType = Context.getDependentNameType(ETK_None, NNSPrefix,
4650                                                  NNS->getAsIdentifier());
4651           break;
4652 
4653         case NestedNameSpecifier::Namespace:
4654         case NestedNameSpecifier::NamespaceAlias:
4655         case NestedNameSpecifier::Global:
4656         case NestedNameSpecifier::Super:
4657           llvm_unreachable("Nested-name-specifier must name a type");
4658 
4659         case NestedNameSpecifier::TypeSpec:
4660         case NestedNameSpecifier::TypeSpecWithTemplate:
4661           ClsType = QualType(NNS->getAsType(), 0);
4662           // Note: if the NNS has a prefix and ClsType is a nondependent
4663           // TemplateSpecializationType, then the NNS prefix is NOT included
4664           // in ClsType; hence we wrap ClsType into an ElaboratedType.
4665           // NOTE: in particular, no wrap occurs if ClsType already is an
4666           // Elaborated, DependentName, or DependentTemplateSpecialization.
4667           if (NNSPrefix && isa<TemplateSpecializationType>(NNS->getAsType()))
4668             ClsType = Context.getElaboratedType(ETK_None, NNSPrefix, ClsType);
4669           break;
4670         }
4671       } else {
4672         S.Diag(DeclType.Mem.Scope().getBeginLoc(),
4673              diag::err_illegal_decl_mempointer_in_nonclass)
4674           << (D.getIdentifier() ? D.getIdentifier()->getName() : "type name")
4675           << DeclType.Mem.Scope().getRange();
4676         D.setInvalidType(true);
4677       }
4678 
4679       if (!ClsType.isNull())
4680         T = S.BuildMemberPointerType(T, ClsType, DeclType.Loc,
4681                                      D.getIdentifier());
4682       if (T.isNull()) {
4683         T = Context.IntTy;
4684         D.setInvalidType(true);
4685       } else if (DeclType.Mem.TypeQuals) {
4686         T = S.BuildQualifiedType(T, DeclType.Loc, DeclType.Mem.TypeQuals);
4687       }
4688       break;
4689     }
4690 
4691     case DeclaratorChunk::Pipe: {
4692       T = S.BuildReadPipeType(T, DeclType.Loc);
4693       processTypeAttrs(state, T, TAL_DeclSpec,
4694                        D.getDeclSpec().getAttributes().getList());
4695       break;
4696     }
4697     }
4698 
4699     if (T.isNull()) {
4700       D.setInvalidType(true);
4701       T = Context.IntTy;
4702     }
4703 
4704     // See if there are any attributes on this declarator chunk.
4705     processTypeAttrs(state, T, TAL_DeclChunk,
4706                      const_cast<AttributeList *>(DeclType.getAttrs()));
4707   }
4708 
4709   // GNU warning -Wstrict-prototypes
4710   //   Warn if a function declaration is without a prototype.
4711   //   This warning is issued for all kinds of unprototyped function
4712   //   declarations (i.e. function type typedef, function pointer etc.)
4713   //   C99 6.7.5.3p14:
4714   //   The empty list in a function declarator that is not part of a definition
4715   //   of that function specifies that no information about the number or types
4716   //   of the parameters is supplied.
4717   if (!LangOpts.CPlusPlus && D.getFunctionDefinitionKind() == FDK_Declaration) {
4718     bool IsBlock = false;
4719     for (const DeclaratorChunk &DeclType : D.type_objects()) {
4720       switch (DeclType.Kind) {
4721       case DeclaratorChunk::BlockPointer:
4722         IsBlock = true;
4723         break;
4724       case DeclaratorChunk::Function: {
4725         const DeclaratorChunk::FunctionTypeInfo &FTI = DeclType.Fun;
4726         if (FTI.NumParams == 0)
4727           S.Diag(DeclType.Loc, diag::warn_strict_prototypes)
4728               << IsBlock
4729               << FixItHint::CreateInsertion(FTI.getRParenLoc(), "void");
4730         IsBlock = false;
4731         break;
4732       }
4733       default:
4734         break;
4735       }
4736     }
4737   }
4738 
4739   assert(!T.isNull() && "T must not be null after this point");
4740 
4741   if (LangOpts.CPlusPlus && T->isFunctionType()) {
4742     const FunctionProtoType *FnTy = T->getAs<FunctionProtoType>();
4743     assert(FnTy && "Why oh why is there not a FunctionProtoType here?");
4744 
4745     // C++ 8.3.5p4:
4746     //   A cv-qualifier-seq shall only be part of the function type
4747     //   for a nonstatic member function, the function type to which a pointer
4748     //   to member refers, or the top-level function type of a function typedef
4749     //   declaration.
4750     //
4751     // Core issue 547 also allows cv-qualifiers on function types that are
4752     // top-level template type arguments.
4753     enum { NonMember, Member, DeductionGuide } Kind = NonMember;
4754     if (D.getName().getKind() == UnqualifiedId::IK_DeductionGuideName)
4755       Kind = DeductionGuide;
4756     else if (!D.getCXXScopeSpec().isSet()) {
4757       if ((D.getContext() == Declarator::MemberContext ||
4758            D.getContext() == Declarator::LambdaExprContext) &&
4759           !D.getDeclSpec().isFriendSpecified())
4760         Kind = Member;
4761     } else {
4762       DeclContext *DC = S.computeDeclContext(D.getCXXScopeSpec());
4763       if (!DC || DC->isRecord())
4764         Kind = Member;
4765     }
4766 
4767     // C++11 [dcl.fct]p6 (w/DR1417):
4768     // An attempt to specify a function type with a cv-qualifier-seq or a
4769     // ref-qualifier (including by typedef-name) is ill-formed unless it is:
4770     //  - the function type for a non-static member function,
4771     //  - the function type to which a pointer to member refers,
4772     //  - the top-level function type of a function typedef declaration or
4773     //    alias-declaration,
4774     //  - the type-id in the default argument of a type-parameter, or
4775     //  - the type-id of a template-argument for a type-parameter
4776     //
4777     // FIXME: Checking this here is insufficient. We accept-invalid on:
4778     //
4779     //   template<typename T> struct S { void f(T); };
4780     //   S<int() const> s;
4781     //
4782     // ... for instance.
4783     if (IsQualifiedFunction &&
4784         !(Kind == Member &&
4785           D.getDeclSpec().getStorageClassSpec() != DeclSpec::SCS_static) &&
4786         !IsTypedefName &&
4787         D.getContext() != Declarator::TemplateTypeArgContext) {
4788       SourceLocation Loc = D.getLocStart();
4789       SourceRange RemovalRange;
4790       unsigned I;
4791       if (D.isFunctionDeclarator(I)) {
4792         SmallVector<SourceLocation, 4> RemovalLocs;
4793         const DeclaratorChunk &Chunk = D.getTypeObject(I);
4794         assert(Chunk.Kind == DeclaratorChunk::Function);
4795         if (Chunk.Fun.hasRefQualifier())
4796           RemovalLocs.push_back(Chunk.Fun.getRefQualifierLoc());
4797         if (Chunk.Fun.TypeQuals & Qualifiers::Const)
4798           RemovalLocs.push_back(Chunk.Fun.getConstQualifierLoc());
4799         if (Chunk.Fun.TypeQuals & Qualifiers::Volatile)
4800           RemovalLocs.push_back(Chunk.Fun.getVolatileQualifierLoc());
4801         if (Chunk.Fun.TypeQuals & Qualifiers::Restrict)
4802           RemovalLocs.push_back(Chunk.Fun.getRestrictQualifierLoc());
4803         if (!RemovalLocs.empty()) {
4804           std::sort(RemovalLocs.begin(), RemovalLocs.end(),
4805                     BeforeThanCompare<SourceLocation>(S.getSourceManager()));
4806           RemovalRange = SourceRange(RemovalLocs.front(), RemovalLocs.back());
4807           Loc = RemovalLocs.front();
4808         }
4809       }
4810 
4811       S.Diag(Loc, diag::err_invalid_qualified_function_type)
4812         << Kind << D.isFunctionDeclarator() << T
4813         << getFunctionQualifiersAsString(FnTy)
4814         << FixItHint::CreateRemoval(RemovalRange);
4815 
4816       // Strip the cv-qualifiers and ref-qualifiers from the type.
4817       FunctionProtoType::ExtProtoInfo EPI = FnTy->getExtProtoInfo();
4818       EPI.TypeQuals = 0;
4819       EPI.RefQualifier = RQ_None;
4820 
4821       T = Context.getFunctionType(FnTy->getReturnType(), FnTy->getParamTypes(),
4822                                   EPI);
4823       // Rebuild any parens around the identifier in the function type.
4824       for (unsigned i = 0, e = D.getNumTypeObjects(); i != e; ++i) {
4825         if (D.getTypeObject(i).Kind != DeclaratorChunk::Paren)
4826           break;
4827         T = S.BuildParenType(T);
4828       }
4829     }
4830   }
4831 
4832   // Apply any undistributed attributes from the declarator.
4833   processTypeAttrs(state, T, TAL_DeclName, D.getAttributes());
4834 
4835   // Diagnose any ignored type attributes.
4836   state.diagnoseIgnoredTypeAttrs(T);
4837 
4838   // C++0x [dcl.constexpr]p9:
4839   //  A constexpr specifier used in an object declaration declares the object
4840   //  as const.
4841   if (D.getDeclSpec().isConstexprSpecified() && T->isObjectType()) {
4842     T.addConst();
4843   }
4844 
4845   // If there was an ellipsis in the declarator, the declaration declares a
4846   // parameter pack whose type may be a pack expansion type.
4847   if (D.hasEllipsis()) {
4848     // C++0x [dcl.fct]p13:
4849     //   A declarator-id or abstract-declarator containing an ellipsis shall
4850     //   only be used in a parameter-declaration. Such a parameter-declaration
4851     //   is a parameter pack (14.5.3). [...]
4852     switch (D.getContext()) {
4853     case Declarator::PrototypeContext:
4854     case Declarator::LambdaExprParameterContext:
4855       // C++0x [dcl.fct]p13:
4856       //   [...] When it is part of a parameter-declaration-clause, the
4857       //   parameter pack is a function parameter pack (14.5.3). The type T
4858       //   of the declarator-id of the function parameter pack shall contain
4859       //   a template parameter pack; each template parameter pack in T is
4860       //   expanded by the function parameter pack.
4861       //
4862       // We represent function parameter packs as function parameters whose
4863       // type is a pack expansion.
4864       if (!T->containsUnexpandedParameterPack()) {
4865         S.Diag(D.getEllipsisLoc(),
4866              diag::err_function_parameter_pack_without_parameter_packs)
4867           << T <<  D.getSourceRange();
4868         D.setEllipsisLoc(SourceLocation());
4869       } else {
4870         T = Context.getPackExpansionType(T, None);
4871       }
4872       break;
4873     case Declarator::TemplateParamContext:
4874       // C++0x [temp.param]p15:
4875       //   If a template-parameter is a [...] is a parameter-declaration that
4876       //   declares a parameter pack (8.3.5), then the template-parameter is a
4877       //   template parameter pack (14.5.3).
4878       //
4879       // Note: core issue 778 clarifies that, if there are any unexpanded
4880       // parameter packs in the type of the non-type template parameter, then
4881       // it expands those parameter packs.
4882       if (T->containsUnexpandedParameterPack())
4883         T = Context.getPackExpansionType(T, None);
4884       else
4885         S.Diag(D.getEllipsisLoc(),
4886                LangOpts.CPlusPlus11
4887                  ? diag::warn_cxx98_compat_variadic_templates
4888                  : diag::ext_variadic_templates);
4889       break;
4890 
4891     case Declarator::FileContext:
4892     case Declarator::KNRTypeListContext:
4893     case Declarator::ObjCParameterContext:  // FIXME: special diagnostic here?
4894     case Declarator::ObjCResultContext:     // FIXME: special diagnostic here?
4895     case Declarator::TypeNameContext:
4896     case Declarator::FunctionalCastContext:
4897     case Declarator::CXXNewContext:
4898     case Declarator::AliasDeclContext:
4899     case Declarator::AliasTemplateContext:
4900     case Declarator::MemberContext:
4901     case Declarator::BlockContext:
4902     case Declarator::ForContext:
4903     case Declarator::InitStmtContext:
4904     case Declarator::ConditionContext:
4905     case Declarator::CXXCatchContext:
4906     case Declarator::ObjCCatchContext:
4907     case Declarator::BlockLiteralContext:
4908     case Declarator::LambdaExprContext:
4909     case Declarator::ConversionIdContext:
4910     case Declarator::TrailingReturnContext:
4911     case Declarator::TemplateTypeArgContext:
4912       // FIXME: We may want to allow parameter packs in block-literal contexts
4913       // in the future.
4914       S.Diag(D.getEllipsisLoc(),
4915              diag::err_ellipsis_in_declarator_not_parameter);
4916       D.setEllipsisLoc(SourceLocation());
4917       break;
4918     }
4919   }
4920 
4921   assert(!T.isNull() && "T must not be null at the end of this function");
4922   if (D.isInvalidType())
4923     return Context.getTrivialTypeSourceInfo(T);
4924 
4925   return S.GetTypeSourceInfoForDeclarator(D, T, TInfo);
4926 }
4927 
4928 /// GetTypeForDeclarator - Convert the type for the specified
4929 /// declarator to Type instances.
4930 ///
4931 /// The result of this call will never be null, but the associated
4932 /// type may be a null type if there's an unrecoverable error.
4933 TypeSourceInfo *Sema::GetTypeForDeclarator(Declarator &D, Scope *S) {
4934   // Determine the type of the declarator. Not all forms of declarator
4935   // have a type.
4936 
4937   TypeProcessingState state(*this, D);
4938 
4939   TypeSourceInfo *ReturnTypeInfo = nullptr;
4940   QualType T = GetDeclSpecTypeForDeclarator(state, ReturnTypeInfo);
4941   if (D.isPrototypeContext() && getLangOpts().ObjCAutoRefCount)
4942     inferARCWriteback(state, T);
4943 
4944   return GetFullTypeForDeclarator(state, T, ReturnTypeInfo);
4945 }
4946 
4947 static void transferARCOwnershipToDeclSpec(Sema &S,
4948                                            QualType &declSpecTy,
4949                                            Qualifiers::ObjCLifetime ownership) {
4950   if (declSpecTy->isObjCRetainableType() &&
4951       declSpecTy.getObjCLifetime() == Qualifiers::OCL_None) {
4952     Qualifiers qs;
4953     qs.addObjCLifetime(ownership);
4954     declSpecTy = S.Context.getQualifiedType(declSpecTy, qs);
4955   }
4956 }
4957 
4958 static void transferARCOwnershipToDeclaratorChunk(TypeProcessingState &state,
4959                                             Qualifiers::ObjCLifetime ownership,
4960                                             unsigned chunkIndex) {
4961   Sema &S = state.getSema();
4962   Declarator &D = state.getDeclarator();
4963 
4964   // Look for an explicit lifetime attribute.
4965   DeclaratorChunk &chunk = D.getTypeObject(chunkIndex);
4966   for (const AttributeList *attr = chunk.getAttrs(); attr;
4967          attr = attr->getNext())
4968     if (attr->getKind() == AttributeList::AT_ObjCOwnership)
4969       return;
4970 
4971   const char *attrStr = nullptr;
4972   switch (ownership) {
4973   case Qualifiers::OCL_None: llvm_unreachable("no ownership!");
4974   case Qualifiers::OCL_ExplicitNone: attrStr = "none"; break;
4975   case Qualifiers::OCL_Strong: attrStr = "strong"; break;
4976   case Qualifiers::OCL_Weak: attrStr = "weak"; break;
4977   case Qualifiers::OCL_Autoreleasing: attrStr = "autoreleasing"; break;
4978   }
4979 
4980   IdentifierLoc *Arg = new (S.Context) IdentifierLoc;
4981   Arg->Ident = &S.Context.Idents.get(attrStr);
4982   Arg->Loc = SourceLocation();
4983 
4984   ArgsUnion Args(Arg);
4985 
4986   // If there wasn't one, add one (with an invalid source location
4987   // so that we don't make an AttributedType for it).
4988   AttributeList *attr = D.getAttributePool()
4989     .create(&S.Context.Idents.get("objc_ownership"), SourceLocation(),
4990             /*scope*/ nullptr, SourceLocation(),
4991             /*args*/ &Args, 1, AttributeList::AS_GNU);
4992   spliceAttrIntoList(*attr, chunk.getAttrListRef());
4993 
4994   // TODO: mark whether we did this inference?
4995 }
4996 
4997 /// \brief Used for transferring ownership in casts resulting in l-values.
4998 static void transferARCOwnership(TypeProcessingState &state,
4999                                  QualType &declSpecTy,
5000                                  Qualifiers::ObjCLifetime ownership) {
5001   Sema &S = state.getSema();
5002   Declarator &D = state.getDeclarator();
5003 
5004   int inner = -1;
5005   bool hasIndirection = false;
5006   for (unsigned i = 0, e = D.getNumTypeObjects(); i != e; ++i) {
5007     DeclaratorChunk &chunk = D.getTypeObject(i);
5008     switch (chunk.Kind) {
5009     case DeclaratorChunk::Paren:
5010       // Ignore parens.
5011       break;
5012 
5013     case DeclaratorChunk::Array:
5014     case DeclaratorChunk::Reference:
5015     case DeclaratorChunk::Pointer:
5016       if (inner != -1)
5017         hasIndirection = true;
5018       inner = i;
5019       break;
5020 
5021     case DeclaratorChunk::BlockPointer:
5022       if (inner != -1)
5023         transferARCOwnershipToDeclaratorChunk(state, ownership, i);
5024       return;
5025 
5026     case DeclaratorChunk::Function:
5027     case DeclaratorChunk::MemberPointer:
5028     case DeclaratorChunk::Pipe:
5029       return;
5030     }
5031   }
5032 
5033   if (inner == -1)
5034     return;
5035 
5036   DeclaratorChunk &chunk = D.getTypeObject(inner);
5037   if (chunk.Kind == DeclaratorChunk::Pointer) {
5038     if (declSpecTy->isObjCRetainableType())
5039       return transferARCOwnershipToDeclSpec(S, declSpecTy, ownership);
5040     if (declSpecTy->isObjCObjectType() && hasIndirection)
5041       return transferARCOwnershipToDeclaratorChunk(state, ownership, inner);
5042   } else {
5043     assert(chunk.Kind == DeclaratorChunk::Array ||
5044            chunk.Kind == DeclaratorChunk::Reference);
5045     return transferARCOwnershipToDeclSpec(S, declSpecTy, ownership);
5046   }
5047 }
5048 
5049 TypeSourceInfo *Sema::GetTypeForDeclaratorCast(Declarator &D, QualType FromTy) {
5050   TypeProcessingState state(*this, D);
5051 
5052   TypeSourceInfo *ReturnTypeInfo = nullptr;
5053   QualType declSpecTy = GetDeclSpecTypeForDeclarator(state, ReturnTypeInfo);
5054 
5055   if (getLangOpts().ObjC1) {
5056     Qualifiers::ObjCLifetime ownership = Context.getInnerObjCOwnership(FromTy);
5057     if (ownership != Qualifiers::OCL_None)
5058       transferARCOwnership(state, declSpecTy, ownership);
5059   }
5060 
5061   return GetFullTypeForDeclarator(state, declSpecTy, ReturnTypeInfo);
5062 }
5063 
5064 /// Map an AttributedType::Kind to an AttributeList::Kind.
5065 static AttributeList::Kind getAttrListKind(AttributedType::Kind kind) {
5066   switch (kind) {
5067   case AttributedType::attr_address_space:
5068     return AttributeList::AT_AddressSpace;
5069   case AttributedType::attr_regparm:
5070     return AttributeList::AT_Regparm;
5071   case AttributedType::attr_vector_size:
5072     return AttributeList::AT_VectorSize;
5073   case AttributedType::attr_neon_vector_type:
5074     return AttributeList::AT_NeonVectorType;
5075   case AttributedType::attr_neon_polyvector_type:
5076     return AttributeList::AT_NeonPolyVectorType;
5077   case AttributedType::attr_objc_gc:
5078     return AttributeList::AT_ObjCGC;
5079   case AttributedType::attr_objc_ownership:
5080   case AttributedType::attr_objc_inert_unsafe_unretained:
5081     return AttributeList::AT_ObjCOwnership;
5082   case AttributedType::attr_noreturn:
5083     return AttributeList::AT_NoReturn;
5084   case AttributedType::attr_cdecl:
5085     return AttributeList::AT_CDecl;
5086   case AttributedType::attr_fastcall:
5087     return AttributeList::AT_FastCall;
5088   case AttributedType::attr_stdcall:
5089     return AttributeList::AT_StdCall;
5090   case AttributedType::attr_thiscall:
5091     return AttributeList::AT_ThisCall;
5092   case AttributedType::attr_regcall:
5093     return AttributeList::AT_RegCall;
5094   case AttributedType::attr_pascal:
5095     return AttributeList::AT_Pascal;
5096   case AttributedType::attr_swiftcall:
5097     return AttributeList::AT_SwiftCall;
5098   case AttributedType::attr_vectorcall:
5099     return AttributeList::AT_VectorCall;
5100   case AttributedType::attr_pcs:
5101   case AttributedType::attr_pcs_vfp:
5102     return AttributeList::AT_Pcs;
5103   case AttributedType::attr_inteloclbicc:
5104     return AttributeList::AT_IntelOclBicc;
5105   case AttributedType::attr_ms_abi:
5106     return AttributeList::AT_MSABI;
5107   case AttributedType::attr_sysv_abi:
5108     return AttributeList::AT_SysVABI;
5109   case AttributedType::attr_preserve_most:
5110     return AttributeList::AT_PreserveMost;
5111   case AttributedType::attr_preserve_all:
5112     return AttributeList::AT_PreserveAll;
5113   case AttributedType::attr_ptr32:
5114     return AttributeList::AT_Ptr32;
5115   case AttributedType::attr_ptr64:
5116     return AttributeList::AT_Ptr64;
5117   case AttributedType::attr_sptr:
5118     return AttributeList::AT_SPtr;
5119   case AttributedType::attr_uptr:
5120     return AttributeList::AT_UPtr;
5121   case AttributedType::attr_nonnull:
5122     return AttributeList::AT_TypeNonNull;
5123   case AttributedType::attr_nullable:
5124     return AttributeList::AT_TypeNullable;
5125   case AttributedType::attr_null_unspecified:
5126     return AttributeList::AT_TypeNullUnspecified;
5127   case AttributedType::attr_objc_kindof:
5128     return AttributeList::AT_ObjCKindOf;
5129   case AttributedType::attr_ns_returns_retained:
5130     return AttributeList::AT_NSReturnsRetained;
5131   }
5132   llvm_unreachable("unexpected attribute kind!");
5133 }
5134 
5135 static void fillAttributedTypeLoc(AttributedTypeLoc TL,
5136                                   const AttributeList *attrs,
5137                                   const AttributeList *DeclAttrs = nullptr) {
5138   // DeclAttrs and attrs cannot be both empty.
5139   assert((attrs || DeclAttrs) &&
5140          "no type attributes in the expected location!");
5141 
5142   AttributeList::Kind parsedKind = getAttrListKind(TL.getAttrKind());
5143   // Try to search for an attribute of matching kind in attrs list.
5144   while (attrs && attrs->getKind() != parsedKind)
5145     attrs = attrs->getNext();
5146   if (!attrs) {
5147     // No matching type attribute in attrs list found.
5148     // Try searching through C++11 attributes in the declarator attribute list.
5149     while (DeclAttrs && (!DeclAttrs->isCXX11Attribute() ||
5150                          DeclAttrs->getKind() != parsedKind))
5151       DeclAttrs = DeclAttrs->getNext();
5152     attrs = DeclAttrs;
5153   }
5154 
5155   assert(attrs && "no matching type attribute in expected location!");
5156 
5157   TL.setAttrNameLoc(attrs->getLoc());
5158   if (TL.hasAttrExprOperand()) {
5159     assert(attrs->isArgExpr(0) && "mismatched attribute operand kind");
5160     TL.setAttrExprOperand(attrs->getArgAsExpr(0));
5161   } else if (TL.hasAttrEnumOperand()) {
5162     assert((attrs->isArgIdent(0) || attrs->isArgExpr(0)) &&
5163            "unexpected attribute operand kind");
5164     if (attrs->isArgIdent(0))
5165       TL.setAttrEnumOperandLoc(attrs->getArgAsIdent(0)->Loc);
5166     else
5167       TL.setAttrEnumOperandLoc(attrs->getArgAsExpr(0)->getExprLoc());
5168   }
5169 
5170   // FIXME: preserve this information to here.
5171   if (TL.hasAttrOperand())
5172     TL.setAttrOperandParensRange(SourceRange());
5173 }
5174 
5175 namespace {
5176   class TypeSpecLocFiller : public TypeLocVisitor<TypeSpecLocFiller> {
5177     ASTContext &Context;
5178     const DeclSpec &DS;
5179 
5180   public:
5181     TypeSpecLocFiller(ASTContext &Context, const DeclSpec &DS)
5182       : Context(Context), DS(DS) {}
5183 
5184     void VisitAttributedTypeLoc(AttributedTypeLoc TL) {
5185       fillAttributedTypeLoc(TL, DS.getAttributes().getList());
5186       Visit(TL.getModifiedLoc());
5187     }
5188     void VisitQualifiedTypeLoc(QualifiedTypeLoc TL) {
5189       Visit(TL.getUnqualifiedLoc());
5190     }
5191     void VisitTypedefTypeLoc(TypedefTypeLoc TL) {
5192       TL.setNameLoc(DS.getTypeSpecTypeLoc());
5193     }
5194     void VisitObjCInterfaceTypeLoc(ObjCInterfaceTypeLoc TL) {
5195       TL.setNameLoc(DS.getTypeSpecTypeLoc());
5196       // FIXME. We should have DS.getTypeSpecTypeEndLoc(). But, it requires
5197       // addition field. What we have is good enough for dispay of location
5198       // of 'fixit' on interface name.
5199       TL.setNameEndLoc(DS.getLocEnd());
5200     }
5201     void VisitObjCObjectTypeLoc(ObjCObjectTypeLoc TL) {
5202       TypeSourceInfo *RepTInfo = nullptr;
5203       Sema::GetTypeFromParser(DS.getRepAsType(), &RepTInfo);
5204       TL.copy(RepTInfo->getTypeLoc());
5205     }
5206     void VisitObjCObjectPointerTypeLoc(ObjCObjectPointerTypeLoc TL) {
5207       TypeSourceInfo *RepTInfo = nullptr;
5208       Sema::GetTypeFromParser(DS.getRepAsType(), &RepTInfo);
5209       TL.copy(RepTInfo->getTypeLoc());
5210     }
5211     void VisitTemplateSpecializationTypeLoc(TemplateSpecializationTypeLoc TL) {
5212       TypeSourceInfo *TInfo = nullptr;
5213       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5214 
5215       // If we got no declarator info from previous Sema routines,
5216       // just fill with the typespec loc.
5217       if (!TInfo) {
5218         TL.initialize(Context, DS.getTypeSpecTypeNameLoc());
5219         return;
5220       }
5221 
5222       TypeLoc OldTL = TInfo->getTypeLoc();
5223       if (TInfo->getType()->getAs<ElaboratedType>()) {
5224         ElaboratedTypeLoc ElabTL = OldTL.castAs<ElaboratedTypeLoc>();
5225         TemplateSpecializationTypeLoc NamedTL = ElabTL.getNamedTypeLoc()
5226             .castAs<TemplateSpecializationTypeLoc>();
5227         TL.copy(NamedTL);
5228       } else {
5229         TL.copy(OldTL.castAs<TemplateSpecializationTypeLoc>());
5230         assert(TL.getRAngleLoc() == OldTL.castAs<TemplateSpecializationTypeLoc>().getRAngleLoc());
5231       }
5232 
5233     }
5234     void VisitTypeOfExprTypeLoc(TypeOfExprTypeLoc TL) {
5235       assert(DS.getTypeSpecType() == DeclSpec::TST_typeofExpr);
5236       TL.setTypeofLoc(DS.getTypeSpecTypeLoc());
5237       TL.setParensRange(DS.getTypeofParensRange());
5238     }
5239     void VisitTypeOfTypeLoc(TypeOfTypeLoc TL) {
5240       assert(DS.getTypeSpecType() == DeclSpec::TST_typeofType);
5241       TL.setTypeofLoc(DS.getTypeSpecTypeLoc());
5242       TL.setParensRange(DS.getTypeofParensRange());
5243       assert(DS.getRepAsType());
5244       TypeSourceInfo *TInfo = nullptr;
5245       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5246       TL.setUnderlyingTInfo(TInfo);
5247     }
5248     void VisitUnaryTransformTypeLoc(UnaryTransformTypeLoc TL) {
5249       // FIXME: This holds only because we only have one unary transform.
5250       assert(DS.getTypeSpecType() == DeclSpec::TST_underlyingType);
5251       TL.setKWLoc(DS.getTypeSpecTypeLoc());
5252       TL.setParensRange(DS.getTypeofParensRange());
5253       assert(DS.getRepAsType());
5254       TypeSourceInfo *TInfo = nullptr;
5255       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5256       TL.setUnderlyingTInfo(TInfo);
5257     }
5258     void VisitBuiltinTypeLoc(BuiltinTypeLoc TL) {
5259       // By default, use the source location of the type specifier.
5260       TL.setBuiltinLoc(DS.getTypeSpecTypeLoc());
5261       if (TL.needsExtraLocalData()) {
5262         // Set info for the written builtin specifiers.
5263         TL.getWrittenBuiltinSpecs() = DS.getWrittenBuiltinSpecs();
5264         // Try to have a meaningful source location.
5265         if (TL.getWrittenSignSpec() != TSS_unspecified)
5266           TL.expandBuiltinRange(DS.getTypeSpecSignLoc());
5267         if (TL.getWrittenWidthSpec() != TSW_unspecified)
5268           TL.expandBuiltinRange(DS.getTypeSpecWidthRange());
5269       }
5270     }
5271     void VisitElaboratedTypeLoc(ElaboratedTypeLoc TL) {
5272       ElaboratedTypeKeyword Keyword
5273         = TypeWithKeyword::getKeywordForTypeSpec(DS.getTypeSpecType());
5274       if (DS.getTypeSpecType() == TST_typename) {
5275         TypeSourceInfo *TInfo = nullptr;
5276         Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5277         if (TInfo) {
5278           TL.copy(TInfo->getTypeLoc().castAs<ElaboratedTypeLoc>());
5279           return;
5280         }
5281       }
5282       TL.setElaboratedKeywordLoc(Keyword != ETK_None
5283                                  ? DS.getTypeSpecTypeLoc()
5284                                  : SourceLocation());
5285       const CXXScopeSpec& SS = DS.getTypeSpecScope();
5286       TL.setQualifierLoc(SS.getWithLocInContext(Context));
5287       Visit(TL.getNextTypeLoc().getUnqualifiedLoc());
5288     }
5289     void VisitDependentNameTypeLoc(DependentNameTypeLoc TL) {
5290       assert(DS.getTypeSpecType() == TST_typename);
5291       TypeSourceInfo *TInfo = nullptr;
5292       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5293       assert(TInfo);
5294       TL.copy(TInfo->getTypeLoc().castAs<DependentNameTypeLoc>());
5295     }
5296     void VisitDependentTemplateSpecializationTypeLoc(
5297                                  DependentTemplateSpecializationTypeLoc TL) {
5298       assert(DS.getTypeSpecType() == TST_typename);
5299       TypeSourceInfo *TInfo = nullptr;
5300       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5301       assert(TInfo);
5302       TL.copy(
5303           TInfo->getTypeLoc().castAs<DependentTemplateSpecializationTypeLoc>());
5304     }
5305     void VisitTagTypeLoc(TagTypeLoc TL) {
5306       TL.setNameLoc(DS.getTypeSpecTypeNameLoc());
5307     }
5308     void VisitAtomicTypeLoc(AtomicTypeLoc TL) {
5309       // An AtomicTypeLoc can come from either an _Atomic(...) type specifier
5310       // or an _Atomic qualifier.
5311       if (DS.getTypeSpecType() == DeclSpec::TST_atomic) {
5312         TL.setKWLoc(DS.getTypeSpecTypeLoc());
5313         TL.setParensRange(DS.getTypeofParensRange());
5314 
5315         TypeSourceInfo *TInfo = nullptr;
5316         Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5317         assert(TInfo);
5318         TL.getValueLoc().initializeFullCopy(TInfo->getTypeLoc());
5319       } else {
5320         TL.setKWLoc(DS.getAtomicSpecLoc());
5321         // No parens, to indicate this was spelled as an _Atomic qualifier.
5322         TL.setParensRange(SourceRange());
5323         Visit(TL.getValueLoc());
5324       }
5325     }
5326 
5327     void VisitPipeTypeLoc(PipeTypeLoc TL) {
5328       TL.setKWLoc(DS.getTypeSpecTypeLoc());
5329 
5330       TypeSourceInfo *TInfo = nullptr;
5331       Sema::GetTypeFromParser(DS.getRepAsType(), &TInfo);
5332       TL.getValueLoc().initializeFullCopy(TInfo->getTypeLoc());
5333     }
5334 
5335     void VisitTypeLoc(TypeLoc TL) {
5336       // FIXME: add other typespec types and change this to an assert.
5337       TL.initialize(Context, DS.getTypeSpecTypeLoc());
5338     }
5339   };
5340 
5341   class DeclaratorLocFiller : public TypeLocVisitor<DeclaratorLocFiller> {
5342     ASTContext &Context;
5343     const DeclaratorChunk &Chunk;
5344 
5345   public:
5346     DeclaratorLocFiller(ASTContext &Context, const DeclaratorChunk &Chunk)
5347       : Context(Context), Chunk(Chunk) {}
5348 
5349     void VisitQualifiedTypeLoc(QualifiedTypeLoc TL) {
5350       llvm_unreachable("qualified type locs not expected here!");
5351     }
5352     void VisitDecayedTypeLoc(DecayedTypeLoc TL) {
5353       llvm_unreachable("decayed type locs not expected here!");
5354     }
5355 
5356     void VisitAttributedTypeLoc(AttributedTypeLoc TL) {
5357       fillAttributedTypeLoc(TL, Chunk.getAttrs());
5358     }
5359     void VisitAdjustedTypeLoc(AdjustedTypeLoc TL) {
5360       // nothing
5361     }
5362     void VisitBlockPointerTypeLoc(BlockPointerTypeLoc TL) {
5363       assert(Chunk.Kind == DeclaratorChunk::BlockPointer);
5364       TL.setCaretLoc(Chunk.Loc);
5365     }
5366     void VisitPointerTypeLoc(PointerTypeLoc TL) {
5367       assert(Chunk.Kind == DeclaratorChunk::Pointer);
5368       TL.setStarLoc(Chunk.Loc);
5369     }
5370     void VisitObjCObjectPointerTypeLoc(ObjCObjectPointerTypeLoc TL) {
5371       assert(Chunk.Kind == DeclaratorChunk::Pointer);
5372       TL.setStarLoc(Chunk.Loc);
5373     }
5374     void VisitMemberPointerTypeLoc(MemberPointerTypeLoc TL) {
5375       assert(Chunk.Kind == DeclaratorChunk::MemberPointer);
5376       const CXXScopeSpec& SS = Chunk.Mem.Scope();
5377       NestedNameSpecifierLoc NNSLoc = SS.getWithLocInContext(Context);
5378 
5379       const Type* ClsTy = TL.getClass();
5380       QualType ClsQT = QualType(ClsTy, 0);
5381       TypeSourceInfo *ClsTInfo = Context.CreateTypeSourceInfo(ClsQT, 0);
5382       // Now copy source location info into the type loc component.
5383       TypeLoc ClsTL = ClsTInfo->getTypeLoc();
5384       switch (NNSLoc.getNestedNameSpecifier()->getKind()) {
5385       case NestedNameSpecifier::Identifier:
5386         assert(isa<DependentNameType>(ClsTy) && "Unexpected TypeLoc");
5387         {
5388           DependentNameTypeLoc DNTLoc = ClsTL.castAs<DependentNameTypeLoc>();
5389           DNTLoc.setElaboratedKeywordLoc(SourceLocation());
5390           DNTLoc.setQualifierLoc(NNSLoc.getPrefix());
5391           DNTLoc.setNameLoc(NNSLoc.getLocalBeginLoc());
5392         }
5393         break;
5394 
5395       case NestedNameSpecifier::TypeSpec:
5396       case NestedNameSpecifier::TypeSpecWithTemplate:
5397         if (isa<ElaboratedType>(ClsTy)) {
5398           ElaboratedTypeLoc ETLoc = ClsTL.castAs<ElaboratedTypeLoc>();
5399           ETLoc.setElaboratedKeywordLoc(SourceLocation());
5400           ETLoc.setQualifierLoc(NNSLoc.getPrefix());
5401           TypeLoc NamedTL = ETLoc.getNamedTypeLoc();
5402           NamedTL.initializeFullCopy(NNSLoc.getTypeLoc());
5403         } else {
5404           ClsTL.initializeFullCopy(NNSLoc.getTypeLoc());
5405         }
5406         break;
5407 
5408       case NestedNameSpecifier::Namespace:
5409       case NestedNameSpecifier::NamespaceAlias:
5410       case NestedNameSpecifier::Global:
5411       case NestedNameSpecifier::Super:
5412         llvm_unreachable("Nested-name-specifier must name a type");
5413       }
5414 
5415       // Finally fill in MemberPointerLocInfo fields.
5416       TL.setStarLoc(Chunk.Loc);
5417       TL.setClassTInfo(ClsTInfo);
5418     }
5419     void VisitLValueReferenceTypeLoc(LValueReferenceTypeLoc TL) {
5420       assert(Chunk.Kind == DeclaratorChunk::Reference);
5421       // 'Amp' is misleading: this might have been originally
5422       /// spelled with AmpAmp.
5423       TL.setAmpLoc(Chunk.Loc);
5424     }
5425     void VisitRValueReferenceTypeLoc(RValueReferenceTypeLoc TL) {
5426       assert(Chunk.Kind == DeclaratorChunk::Reference);
5427       assert(!Chunk.Ref.LValueRef);
5428       TL.setAmpAmpLoc(Chunk.Loc);
5429     }
5430     void VisitArrayTypeLoc(ArrayTypeLoc TL) {
5431       assert(Chunk.Kind == DeclaratorChunk::Array);
5432       TL.setLBracketLoc(Chunk.Loc);
5433       TL.setRBracketLoc(Chunk.EndLoc);
5434       TL.setSizeExpr(static_cast<Expr*>(Chunk.Arr.NumElts));
5435     }
5436     void VisitFunctionTypeLoc(FunctionTypeLoc TL) {
5437       assert(Chunk.Kind == DeclaratorChunk::Function);
5438       TL.setLocalRangeBegin(Chunk.Loc);
5439       TL.setLocalRangeEnd(Chunk.EndLoc);
5440 
5441       const DeclaratorChunk::FunctionTypeInfo &FTI = Chunk.Fun;
5442       TL.setLParenLoc(FTI.getLParenLoc());
5443       TL.setRParenLoc(FTI.getRParenLoc());
5444       for (unsigned i = 0, e = TL.getNumParams(), tpi = 0; i != e; ++i) {
5445         ParmVarDecl *Param = cast<ParmVarDecl>(FTI.Params[i].Param);
5446         TL.setParam(tpi++, Param);
5447       }
5448       TL.setExceptionSpecRange(FTI.getExceptionSpecRange());
5449     }
5450     void VisitParenTypeLoc(ParenTypeLoc TL) {
5451       assert(Chunk.Kind == DeclaratorChunk::Paren);
5452       TL.setLParenLoc(Chunk.Loc);
5453       TL.setRParenLoc(Chunk.EndLoc);
5454     }
5455     void VisitPipeTypeLoc(PipeTypeLoc TL) {
5456       assert(Chunk.Kind == DeclaratorChunk::Pipe);
5457       TL.setKWLoc(Chunk.Loc);
5458     }
5459 
5460     void VisitTypeLoc(TypeLoc TL) {
5461       llvm_unreachable("unsupported TypeLoc kind in declarator!");
5462     }
5463   };
5464 } // end anonymous namespace
5465 
5466 static void fillAtomicQualLoc(AtomicTypeLoc ATL, const DeclaratorChunk &Chunk) {
5467   SourceLocation Loc;
5468   switch (Chunk.Kind) {
5469   case DeclaratorChunk::Function:
5470   case DeclaratorChunk::Array:
5471   case DeclaratorChunk::Paren:
5472   case DeclaratorChunk::Pipe:
5473     llvm_unreachable("cannot be _Atomic qualified");
5474 
5475   case DeclaratorChunk::Pointer:
5476     Loc = SourceLocation::getFromRawEncoding(Chunk.Ptr.AtomicQualLoc);
5477     break;
5478 
5479   case DeclaratorChunk::BlockPointer:
5480   case DeclaratorChunk::Reference:
5481   case DeclaratorChunk::MemberPointer:
5482     // FIXME: Provide a source location for the _Atomic keyword.
5483     break;
5484   }
5485 
5486   ATL.setKWLoc(Loc);
5487   ATL.setParensRange(SourceRange());
5488 }
5489 
5490 static void fillDependentAddressSpaceTypeLoc(DependentAddressSpaceTypeLoc DASTL,
5491                                              const AttributeList *Attrs) {
5492   while (Attrs && Attrs->getKind() != AttributeList::AT_AddressSpace)
5493     Attrs = Attrs->getNext();
5494 
5495   assert(Attrs && "no address_space attribute found at the expected location!");
5496 
5497   DASTL.setAttrNameLoc(Attrs->getLoc());
5498   DASTL.setAttrExprOperand(Attrs->getArgAsExpr(0));
5499   DASTL.setAttrOperandParensRange(SourceRange());
5500 }
5501 
5502 /// \brief Create and instantiate a TypeSourceInfo with type source information.
5503 ///
5504 /// \param T QualType referring to the type as written in source code.
5505 ///
5506 /// \param ReturnTypeInfo For declarators whose return type does not show
5507 /// up in the normal place in the declaration specifiers (such as a C++
5508 /// conversion function), this pointer will refer to a type source information
5509 /// for that return type.
5510 TypeSourceInfo *
5511 Sema::GetTypeSourceInfoForDeclarator(Declarator &D, QualType T,
5512                                      TypeSourceInfo *ReturnTypeInfo) {
5513   TypeSourceInfo *TInfo = Context.CreateTypeSourceInfo(T);
5514   UnqualTypeLoc CurrTL = TInfo->getTypeLoc().getUnqualifiedLoc();
5515   const AttributeList *DeclAttrs = D.getAttributes();
5516 
5517   // Handle parameter packs whose type is a pack expansion.
5518   if (isa<PackExpansionType>(T)) {
5519     CurrTL.castAs<PackExpansionTypeLoc>().setEllipsisLoc(D.getEllipsisLoc());
5520     CurrTL = CurrTL.getNextTypeLoc().getUnqualifiedLoc();
5521   }
5522 
5523   for (unsigned i = 0, e = D.getNumTypeObjects(); i != e; ++i) {
5524 
5525     if (DependentAddressSpaceTypeLoc DASTL =
5526         CurrTL.getAs<DependentAddressSpaceTypeLoc>()) {
5527       fillDependentAddressSpaceTypeLoc(DASTL, D.getTypeObject(i).getAttrs());
5528       CurrTL = DASTL.getPointeeTypeLoc().getUnqualifiedLoc();
5529     }
5530 
5531     // An AtomicTypeLoc might be produced by an atomic qualifier in this
5532     // declarator chunk.
5533     if (AtomicTypeLoc ATL = CurrTL.getAs<AtomicTypeLoc>()) {
5534       fillAtomicQualLoc(ATL, D.getTypeObject(i));
5535       CurrTL = ATL.getValueLoc().getUnqualifiedLoc();
5536     }
5537 
5538     while (AttributedTypeLoc TL = CurrTL.getAs<AttributedTypeLoc>()) {
5539       fillAttributedTypeLoc(TL, D.getTypeObject(i).getAttrs(), DeclAttrs);
5540       CurrTL = TL.getNextTypeLoc().getUnqualifiedLoc();
5541     }
5542 
5543     // FIXME: Ordering here?
5544     while (AdjustedTypeLoc TL = CurrTL.getAs<AdjustedTypeLoc>())
5545       CurrTL = TL.getNextTypeLoc().getUnqualifiedLoc();
5546 
5547     DeclaratorLocFiller(Context, D.getTypeObject(i)).Visit(CurrTL);
5548     CurrTL = CurrTL.getNextTypeLoc().getUnqualifiedLoc();
5549   }
5550 
5551   // If we have different source information for the return type, use
5552   // that.  This really only applies to C++ conversion functions.
5553   if (ReturnTypeInfo) {
5554     TypeLoc TL = ReturnTypeInfo->getTypeLoc();
5555     assert(TL.getFullDataSize() == CurrTL.getFullDataSize());
5556     memcpy(CurrTL.getOpaqueData(), TL.getOpaqueData(), TL.getFullDataSize());
5557   } else {
5558     TypeSpecLocFiller(Context, D.getDeclSpec()).Visit(CurrTL);
5559   }
5560 
5561   return TInfo;
5562 }
5563 
5564 /// \brief Create a LocInfoType to hold the given QualType and TypeSourceInfo.
5565 ParsedType Sema::CreateParsedType(QualType T, TypeSourceInfo *TInfo) {
5566   // FIXME: LocInfoTypes are "transient", only needed for passing to/from Parser
5567   // and Sema during declaration parsing. Try deallocating/caching them when
5568   // it's appropriate, instead of allocating them and keeping them around.
5569   LocInfoType *LocT = (LocInfoType*)BumpAlloc.Allocate(sizeof(LocInfoType),
5570                                                        TypeAlignment);
5571   new (LocT) LocInfoType(T, TInfo);
5572   assert(LocT->getTypeClass() != T->getTypeClass() &&
5573          "LocInfoType's TypeClass conflicts with an existing Type class");
5574   return ParsedType::make(QualType(LocT, 0));
5575 }
5576 
5577 void LocInfoType::getAsStringInternal(std::string &Str,
5578                                       const PrintingPolicy &Policy) const {
5579   llvm_unreachable("LocInfoType leaked into the type system; an opaque TypeTy*"
5580          " was used directly instead of getting the QualType through"
5581          " GetTypeFromParser");
5582 }
5583 
5584 TypeResult Sema::ActOnTypeName(Scope *S, Declarator &D) {
5585   // C99 6.7.6: Type names have no identifier.  This is already validated by
5586   // the parser.
5587   assert(D.getIdentifier() == nullptr &&
5588          "Type name should have no identifier!");
5589 
5590   TypeSourceInfo *TInfo = GetTypeForDeclarator(D, S);
5591   QualType T = TInfo->getType();
5592   if (D.isInvalidType())
5593     return true;
5594 
5595   // Make sure there are no unused decl attributes on the declarator.
5596   // We don't want to do this for ObjC parameters because we're going
5597   // to apply them to the actual parameter declaration.
5598   // Likewise, we don't want to do this for alias declarations, because
5599   // we are actually going to build a declaration from this eventually.
5600   if (D.getContext() != Declarator::ObjCParameterContext &&
5601       D.getContext() != Declarator::AliasDeclContext &&
5602       D.getContext() != Declarator::AliasTemplateContext)
5603     checkUnusedDeclAttributes(D);
5604 
5605   if (getLangOpts().CPlusPlus) {
5606     // Check that there are no default arguments (C++ only).
5607     CheckExtraCXXDefaultArguments(D);
5608   }
5609 
5610   return CreateParsedType(T, TInfo);
5611 }
5612 
5613 ParsedType Sema::ActOnObjCInstanceType(SourceLocation Loc) {
5614   QualType T = Context.getObjCInstanceType();
5615   TypeSourceInfo *TInfo = Context.getTrivialTypeSourceInfo(T, Loc);
5616   return CreateParsedType(T, TInfo);
5617 }
5618 
5619 //===----------------------------------------------------------------------===//
5620 // Type Attribute Processing
5621 //===----------------------------------------------------------------------===//
5622 
5623 /// BuildAddressSpaceAttr - Builds a DependentAddressSpaceType if an expression
5624 /// is uninstantiated. If instantiated it will apply the appropriate address space
5625 /// to the type. This function allows dependent template variables to be used in
5626 /// conjunction with the address_space attribute
5627 QualType Sema::BuildAddressSpaceAttr(QualType &T, Expr *AddrSpace,
5628                                      SourceLocation AttrLoc) {
5629   if (!AddrSpace->isValueDependent()) {
5630 
5631     // If this type is already address space qualified, reject it.
5632     // ISO/IEC TR 18037 S5.3 (amending C99 6.7.3): "No type shall be qualified
5633     // by qualifiers for two or more different address spaces."
5634     if (T.getAddressSpace() != LangAS::Default) {
5635       Diag(AttrLoc, diag::err_attribute_address_multiple_qualifiers);
5636       return QualType();
5637     }
5638 
5639     llvm::APSInt addrSpace(32);
5640     if (!AddrSpace->isIntegerConstantExpr(addrSpace, Context)) {
5641       Diag(AttrLoc, diag::err_attribute_argument_type)
5642           << "'address_space'" << AANT_ArgumentIntegerConstant
5643           << AddrSpace->getSourceRange();
5644       return QualType();
5645     }
5646 
5647     // Bounds checking.
5648     if (addrSpace.isSigned()) {
5649       if (addrSpace.isNegative()) {
5650         Diag(AttrLoc, diag::err_attribute_address_space_negative)
5651             << AddrSpace->getSourceRange();
5652         return QualType();
5653       }
5654       addrSpace.setIsSigned(false);
5655     }
5656 
5657     llvm::APSInt max(addrSpace.getBitWidth());
5658     max =
5659         Qualifiers::MaxAddressSpace - (unsigned)LangAS::FirstTargetAddressSpace;
5660     if (addrSpace > max) {
5661       Diag(AttrLoc, diag::err_attribute_address_space_too_high)
5662           << (unsigned)max.getZExtValue() << AddrSpace->getSourceRange();
5663       return QualType();
5664     }
5665 
5666     LangAS ASIdx =
5667         getLangASFromTargetAS(static_cast<unsigned>(addrSpace.getZExtValue()));
5668 
5669     return Context.getAddrSpaceQualType(T, ASIdx);
5670   }
5671 
5672   // A check with similar intentions as checking if a type already has an
5673   // address space except for on a dependent types, basically if the
5674   // current type is already a DependentAddressSpaceType then its already
5675   // lined up to have another address space on it and we can't have
5676   // multiple address spaces on the one pointer indirection
5677   if (T->getAs<DependentAddressSpaceType>()) {
5678     Diag(AttrLoc, diag::err_attribute_address_multiple_qualifiers);
5679     return QualType();
5680   }
5681 
5682   return Context.getDependentAddressSpaceType(T, AddrSpace, AttrLoc);
5683 }
5684 
5685 /// HandleAddressSpaceTypeAttribute - Process an address_space attribute on the
5686 /// specified type.  The attribute contains 1 argument, the id of the address
5687 /// space for the type.
5688 static void HandleAddressSpaceTypeAttribute(QualType &Type,
5689                                             const AttributeList &Attr, Sema &S){
5690   // If this type is already address space qualified, reject it.
5691   // ISO/IEC TR 18037 S5.3 (amending C99 6.7.3): "No type shall be qualified by
5692   // qualifiers for two or more different address spaces."
5693   if (Type.getAddressSpace() != LangAS::Default) {
5694     S.Diag(Attr.getLoc(), diag::err_attribute_address_multiple_qualifiers);
5695     Attr.setInvalid();
5696     return;
5697   }
5698 
5699   // ISO/IEC TR 18037 S5.3 (amending C99 6.7.3): "A function type shall not be
5700   // qualified by an address-space qualifier."
5701   if (Type->isFunctionType()) {
5702     S.Diag(Attr.getLoc(), diag::err_attribute_address_function_type);
5703     Attr.setInvalid();
5704     return;
5705   }
5706 
5707   LangAS ASIdx;
5708   if (Attr.getKind() == AttributeList::AT_AddressSpace) {
5709 
5710     // Check the attribute arguments.
5711     if (Attr.getNumArgs() != 1) {
5712       S.Diag(Attr.getLoc(), diag::err_attribute_wrong_number_arguments)
5713           << Attr.getName() << 1;
5714       Attr.setInvalid();
5715       return;
5716     }
5717 
5718     Expr *ASArgExpr;
5719     if (Attr.isArgIdent(0)) {
5720       // Special case where the argument is a template id.
5721       CXXScopeSpec SS;
5722       SourceLocation TemplateKWLoc;
5723       UnqualifiedId id;
5724       id.setIdentifier(Attr.getArgAsIdent(0)->Ident, Attr.getLoc());
5725 
5726       ExprResult AddrSpace = S.ActOnIdExpression(
5727           S.getCurScope(), SS, TemplateKWLoc, id, false, false);
5728       if (AddrSpace.isInvalid())
5729         return;
5730 
5731       ASArgExpr = static_cast<Expr *>(AddrSpace.get());
5732     } else {
5733       ASArgExpr = static_cast<Expr *>(Attr.getArgAsExpr(0));
5734     }
5735 
5736     // Create the DependentAddressSpaceType or append an address space onto
5737     // the type.
5738     QualType T = S.BuildAddressSpaceAttr(Type, ASArgExpr, Attr.getLoc());
5739 
5740     if (!T.isNull())
5741       Type = T;
5742     else
5743       Attr.setInvalid();
5744   } else {
5745     // The keyword-based type attributes imply which address space to use.
5746     switch (Attr.getKind()) {
5747     case AttributeList::AT_OpenCLGlobalAddressSpace:
5748       ASIdx = LangAS::opencl_global; break;
5749     case AttributeList::AT_OpenCLLocalAddressSpace:
5750       ASIdx = LangAS::opencl_local; break;
5751     case AttributeList::AT_OpenCLConstantAddressSpace:
5752       ASIdx = LangAS::opencl_constant; break;
5753     case AttributeList::AT_OpenCLGenericAddressSpace:
5754       ASIdx = LangAS::opencl_generic; break;
5755     case AttributeList::AT_OpenCLPrivateAddressSpace:
5756       ASIdx = LangAS::opencl_private; break;
5757     default:
5758       llvm_unreachable("Invalid address space");
5759     }
5760 
5761     Type = S.Context.getAddrSpaceQualType(Type, ASIdx);
5762   }
5763 }
5764 
5765 /// Does this type have a "direct" ownership qualifier?  That is,
5766 /// is it written like "__strong id", as opposed to something like
5767 /// "typeof(foo)", where that happens to be strong?
5768 static bool hasDirectOwnershipQualifier(QualType type) {
5769   // Fast path: no qualifier at all.
5770   assert(type.getQualifiers().hasObjCLifetime());
5771 
5772   while (true) {
5773     // __strong id
5774     if (const AttributedType *attr = dyn_cast<AttributedType>(type)) {
5775       if (attr->getAttrKind() == AttributedType::attr_objc_ownership)
5776         return true;
5777 
5778       type = attr->getModifiedType();
5779 
5780     // X *__strong (...)
5781     } else if (const ParenType *paren = dyn_cast<ParenType>(type)) {
5782       type = paren->getInnerType();
5783 
5784     // That's it for things we want to complain about.  In particular,
5785     // we do not want to look through typedefs, typeof(expr),
5786     // typeof(type), or any other way that the type is somehow
5787     // abstracted.
5788     } else {
5789 
5790       return false;
5791     }
5792   }
5793 }
5794 
5795 /// handleObjCOwnershipTypeAttr - Process an objc_ownership
5796 /// attribute on the specified type.
5797 ///
5798 /// Returns 'true' if the attribute was handled.
5799 static bool handleObjCOwnershipTypeAttr(TypeProcessingState &state,
5800                                        AttributeList &attr,
5801                                        QualType &type) {
5802   bool NonObjCPointer = false;
5803 
5804   if (!type->isDependentType() && !type->isUndeducedType()) {
5805     if (const PointerType *ptr = type->getAs<PointerType>()) {
5806       QualType pointee = ptr->getPointeeType();
5807       if (pointee->isObjCRetainableType() || pointee->isPointerType())
5808         return false;
5809       // It is important not to lose the source info that there was an attribute
5810       // applied to non-objc pointer. We will create an attributed type but
5811       // its type will be the same as the original type.
5812       NonObjCPointer = true;
5813     } else if (!type->isObjCRetainableType()) {
5814       return false;
5815     }
5816 
5817     // Don't accept an ownership attribute in the declspec if it would
5818     // just be the return type of a block pointer.
5819     if (state.isProcessingDeclSpec()) {
5820       Declarator &D = state.getDeclarator();
5821       if (maybeMovePastReturnType(D, D.getNumTypeObjects(),
5822                                   /*onlyBlockPointers=*/true))
5823         return false;
5824     }
5825   }
5826 
5827   Sema &S = state.getSema();
5828   SourceLocation AttrLoc = attr.getLoc();
5829   if (AttrLoc.isMacroID())
5830     AttrLoc = S.getSourceManager().getImmediateExpansionRange(AttrLoc).first;
5831 
5832   if (!attr.isArgIdent(0)) {
5833     S.Diag(AttrLoc, diag::err_attribute_argument_type)
5834       << attr.getName() << AANT_ArgumentString;
5835     attr.setInvalid();
5836     return true;
5837   }
5838 
5839   IdentifierInfo *II = attr.getArgAsIdent(0)->Ident;
5840   Qualifiers::ObjCLifetime lifetime;
5841   if (II->isStr("none"))
5842     lifetime = Qualifiers::OCL_ExplicitNone;
5843   else if (II->isStr("strong"))
5844     lifetime = Qualifiers::OCL_Strong;
5845   else if (II->isStr("weak"))
5846     lifetime = Qualifiers::OCL_Weak;
5847   else if (II->isStr("autoreleasing"))
5848     lifetime = Qualifiers::OCL_Autoreleasing;
5849   else {
5850     S.Diag(AttrLoc, diag::warn_attribute_type_not_supported)
5851       << attr.getName() << II;
5852     attr.setInvalid();
5853     return true;
5854   }
5855 
5856   // Just ignore lifetime attributes other than __weak and __unsafe_unretained
5857   // outside of ARC mode.
5858   if (!S.getLangOpts().ObjCAutoRefCount &&
5859       lifetime != Qualifiers::OCL_Weak &&
5860       lifetime != Qualifiers::OCL_ExplicitNone) {
5861     return true;
5862   }
5863 
5864   SplitQualType underlyingType = type.split();
5865 
5866   // Check for redundant/conflicting ownership qualifiers.
5867   if (Qualifiers::ObjCLifetime previousLifetime
5868         = type.getQualifiers().getObjCLifetime()) {
5869     // If it's written directly, that's an error.
5870     if (hasDirectOwnershipQualifier(type)) {
5871       S.Diag(AttrLoc, diag::err_attr_objc_ownership_redundant)
5872         << type;
5873       return true;
5874     }
5875 
5876     // Otherwise, if the qualifiers actually conflict, pull sugar off
5877     // and remove the ObjCLifetime qualifiers.
5878     if (previousLifetime != lifetime) {
5879       // It's possible to have multiple local ObjCLifetime qualifiers. We
5880       // can't stop after we reach a type that is directly qualified.
5881       const Type *prevTy = nullptr;
5882       while (!prevTy || prevTy != underlyingType.Ty) {
5883         prevTy = underlyingType.Ty;
5884         underlyingType = underlyingType.getSingleStepDesugaredType();
5885       }
5886       underlyingType.Quals.removeObjCLifetime();
5887     }
5888   }
5889 
5890   underlyingType.Quals.addObjCLifetime(lifetime);
5891 
5892   if (NonObjCPointer) {
5893     StringRef name = attr.getName()->getName();
5894     switch (lifetime) {
5895     case Qualifiers::OCL_None:
5896     case Qualifiers::OCL_ExplicitNone:
5897       break;
5898     case Qualifiers::OCL_Strong: name = "__strong"; break;
5899     case Qualifiers::OCL_Weak: name = "__weak"; break;
5900     case Qualifiers::OCL_Autoreleasing: name = "__autoreleasing"; break;
5901     }
5902     S.Diag(AttrLoc, diag::warn_type_attribute_wrong_type) << name
5903       << TDS_ObjCObjOrBlock << type;
5904   }
5905 
5906   // Don't actually add the __unsafe_unretained qualifier in non-ARC files,
5907   // because having both 'T' and '__unsafe_unretained T' exist in the type
5908   // system causes unfortunate widespread consistency problems.  (For example,
5909   // they're not considered compatible types, and we mangle them identicially
5910   // as template arguments.)  These problems are all individually fixable,
5911   // but it's easier to just not add the qualifier and instead sniff it out
5912   // in specific places using isObjCInertUnsafeUnretainedType().
5913   //
5914   // Doing this does means we miss some trivial consistency checks that
5915   // would've triggered in ARC, but that's better than trying to solve all
5916   // the coexistence problems with __unsafe_unretained.
5917   if (!S.getLangOpts().ObjCAutoRefCount &&
5918       lifetime == Qualifiers::OCL_ExplicitNone) {
5919     type = S.Context.getAttributedType(
5920                              AttributedType::attr_objc_inert_unsafe_unretained,
5921                                        type, type);
5922     return true;
5923   }
5924 
5925   QualType origType = type;
5926   if (!NonObjCPointer)
5927     type = S.Context.getQualifiedType(underlyingType);
5928 
5929   // If we have a valid source location for the attribute, use an
5930   // AttributedType instead.
5931   if (AttrLoc.isValid())
5932     type = S.Context.getAttributedType(AttributedType::attr_objc_ownership,
5933                                        origType, type);
5934 
5935   auto diagnoseOrDelay = [](Sema &S, SourceLocation loc,
5936                             unsigned diagnostic, QualType type) {
5937     if (S.DelayedDiagnostics.shouldDelayDiagnostics()) {
5938       S.DelayedDiagnostics.add(
5939           sema::DelayedDiagnostic::makeForbiddenType(
5940               S.getSourceManager().getExpansionLoc(loc),
5941               diagnostic, type, /*ignored*/ 0));
5942     } else {
5943       S.Diag(loc, diagnostic);
5944     }
5945   };
5946 
5947   // Sometimes, __weak isn't allowed.
5948   if (lifetime == Qualifiers::OCL_Weak &&
5949       !S.getLangOpts().ObjCWeak && !NonObjCPointer) {
5950 
5951     // Use a specialized diagnostic if the runtime just doesn't support them.
5952     unsigned diagnostic =
5953       (S.getLangOpts().ObjCWeakRuntime ? diag::err_arc_weak_disabled
5954                                        : diag::err_arc_weak_no_runtime);
5955 
5956     // In any case, delay the diagnostic until we know what we're parsing.
5957     diagnoseOrDelay(S, AttrLoc, diagnostic, type);
5958 
5959     attr.setInvalid();
5960     return true;
5961   }
5962 
5963   // Forbid __weak for class objects marked as
5964   // objc_arc_weak_reference_unavailable
5965   if (lifetime == Qualifiers::OCL_Weak) {
5966     if (const ObjCObjectPointerType *ObjT =
5967           type->getAs<ObjCObjectPointerType>()) {
5968       if (ObjCInterfaceDecl *Class = ObjT->getInterfaceDecl()) {
5969         if (Class->isArcWeakrefUnavailable()) {
5970           S.Diag(AttrLoc, diag::err_arc_unsupported_weak_class);
5971           S.Diag(ObjT->getInterfaceDecl()->getLocation(),
5972                  diag::note_class_declared);
5973         }
5974       }
5975     }
5976   }
5977 
5978   return true;
5979 }
5980 
5981 /// handleObjCGCTypeAttr - Process the __attribute__((objc_gc)) type
5982 /// attribute on the specified type.  Returns true to indicate that
5983 /// the attribute was handled, false to indicate that the type does
5984 /// not permit the attribute.
5985 static bool handleObjCGCTypeAttr(TypeProcessingState &state,
5986                                  AttributeList &attr,
5987                                  QualType &type) {
5988   Sema &S = state.getSema();
5989 
5990   // Delay if this isn't some kind of pointer.
5991   if (!type->isPointerType() &&
5992       !type->isObjCObjectPointerType() &&
5993       !type->isBlockPointerType())
5994     return false;
5995 
5996   if (type.getObjCGCAttr() != Qualifiers::GCNone) {
5997     S.Diag(attr.getLoc(), diag::err_attribute_multiple_objc_gc);
5998     attr.setInvalid();
5999     return true;
6000   }
6001 
6002   // Check the attribute arguments.
6003   if (!attr.isArgIdent(0)) {
6004     S.Diag(attr.getLoc(), diag::err_attribute_argument_type)
6005       << attr.getName() << AANT_ArgumentString;
6006     attr.setInvalid();
6007     return true;
6008   }
6009   Qualifiers::GC GCAttr;
6010   if (attr.getNumArgs() > 1) {
6011     S.Diag(attr.getLoc(), diag::err_attribute_wrong_number_arguments)
6012       << attr.getName() << 1;
6013     attr.setInvalid();
6014     return true;
6015   }
6016 
6017   IdentifierInfo *II = attr.getArgAsIdent(0)->Ident;
6018   if (II->isStr("weak"))
6019     GCAttr = Qualifiers::Weak;
6020   else if (II->isStr("strong"))
6021     GCAttr = Qualifiers::Strong;
6022   else {
6023     S.Diag(attr.getLoc(), diag::warn_attribute_type_not_supported)
6024       << attr.getName() << II;
6025     attr.setInvalid();
6026     return true;
6027   }
6028 
6029   QualType origType = type;
6030   type = S.Context.getObjCGCQualType(origType, GCAttr);
6031 
6032   // Make an attributed type to preserve the source information.
6033   if (attr.getLoc().isValid())
6034     type = S.Context.getAttributedType(AttributedType::attr_objc_gc,
6035                                        origType, type);
6036 
6037   return true;
6038 }
6039 
6040 namespace {
6041   /// A helper class to unwrap a type down to a function for the
6042   /// purposes of applying attributes there.
6043   ///
6044   /// Use:
6045   ///   FunctionTypeUnwrapper unwrapped(SemaRef, T);
6046   ///   if (unwrapped.isFunctionType()) {
6047   ///     const FunctionType *fn = unwrapped.get();
6048   ///     // change fn somehow
6049   ///     T = unwrapped.wrap(fn);
6050   ///   }
6051   struct FunctionTypeUnwrapper {
6052     enum WrapKind {
6053       Desugar,
6054       Attributed,
6055       Parens,
6056       Pointer,
6057       BlockPointer,
6058       Reference,
6059       MemberPointer
6060     };
6061 
6062     QualType Original;
6063     const FunctionType *Fn;
6064     SmallVector<unsigned char /*WrapKind*/, 8> Stack;
6065 
6066     FunctionTypeUnwrapper(Sema &S, QualType T) : Original(T) {
6067       while (true) {
6068         const Type *Ty = T.getTypePtr();
6069         if (isa<FunctionType>(Ty)) {
6070           Fn = cast<FunctionType>(Ty);
6071           return;
6072         } else if (isa<ParenType>(Ty)) {
6073           T = cast<ParenType>(Ty)->getInnerType();
6074           Stack.push_back(Parens);
6075         } else if (isa<PointerType>(Ty)) {
6076           T = cast<PointerType>(Ty)->getPointeeType();
6077           Stack.push_back(Pointer);
6078         } else if (isa<BlockPointerType>(Ty)) {
6079           T = cast<BlockPointerType>(Ty)->getPointeeType();
6080           Stack.push_back(BlockPointer);
6081         } else if (isa<MemberPointerType>(Ty)) {
6082           T = cast<MemberPointerType>(Ty)->getPointeeType();
6083           Stack.push_back(MemberPointer);
6084         } else if (isa<ReferenceType>(Ty)) {
6085           T = cast<ReferenceType>(Ty)->getPointeeType();
6086           Stack.push_back(Reference);
6087         } else if (isa<AttributedType>(Ty)) {
6088           T = cast<AttributedType>(Ty)->getEquivalentType();
6089           Stack.push_back(Attributed);
6090         } else {
6091           const Type *DTy = Ty->getUnqualifiedDesugaredType();
6092           if (Ty == DTy) {
6093             Fn = nullptr;
6094             return;
6095           }
6096 
6097           T = QualType(DTy, 0);
6098           Stack.push_back(Desugar);
6099         }
6100       }
6101     }
6102 
6103     bool isFunctionType() const { return (Fn != nullptr); }
6104     const FunctionType *get() const { return Fn; }
6105 
6106     QualType wrap(Sema &S, const FunctionType *New) {
6107       // If T wasn't modified from the unwrapped type, do nothing.
6108       if (New == get()) return Original;
6109 
6110       Fn = New;
6111       return wrap(S.Context, Original, 0);
6112     }
6113 
6114   private:
6115     QualType wrap(ASTContext &C, QualType Old, unsigned I) {
6116       if (I == Stack.size())
6117         return C.getQualifiedType(Fn, Old.getQualifiers());
6118 
6119       // Build up the inner type, applying the qualifiers from the old
6120       // type to the new type.
6121       SplitQualType SplitOld = Old.split();
6122 
6123       // As a special case, tail-recurse if there are no qualifiers.
6124       if (SplitOld.Quals.empty())
6125         return wrap(C, SplitOld.Ty, I);
6126       return C.getQualifiedType(wrap(C, SplitOld.Ty, I), SplitOld.Quals);
6127     }
6128 
6129     QualType wrap(ASTContext &C, const Type *Old, unsigned I) {
6130       if (I == Stack.size()) return QualType(Fn, 0);
6131 
6132       switch (static_cast<WrapKind>(Stack[I++])) {
6133       case Desugar:
6134         // This is the point at which we potentially lose source
6135         // information.
6136         return wrap(C, Old->getUnqualifiedDesugaredType(), I);
6137 
6138       case Attributed:
6139         return wrap(C, cast<AttributedType>(Old)->getEquivalentType(), I);
6140 
6141       case Parens: {
6142         QualType New = wrap(C, cast<ParenType>(Old)->getInnerType(), I);
6143         return C.getParenType(New);
6144       }
6145 
6146       case Pointer: {
6147         QualType New = wrap(C, cast<PointerType>(Old)->getPointeeType(), I);
6148         return C.getPointerType(New);
6149       }
6150 
6151       case BlockPointer: {
6152         QualType New = wrap(C, cast<BlockPointerType>(Old)->getPointeeType(),I);
6153         return C.getBlockPointerType(New);
6154       }
6155 
6156       case MemberPointer: {
6157         const MemberPointerType *OldMPT = cast<MemberPointerType>(Old);
6158         QualType New = wrap(C, OldMPT->getPointeeType(), I);
6159         return C.getMemberPointerType(New, OldMPT->getClass());
6160       }
6161 
6162       case Reference: {
6163         const ReferenceType *OldRef = cast<ReferenceType>(Old);
6164         QualType New = wrap(C, OldRef->getPointeeType(), I);
6165         if (isa<LValueReferenceType>(OldRef))
6166           return C.getLValueReferenceType(New, OldRef->isSpelledAsLValue());
6167         else
6168           return C.getRValueReferenceType(New);
6169       }
6170       }
6171 
6172       llvm_unreachable("unknown wrapping kind");
6173     }
6174   };
6175 } // end anonymous namespace
6176 
6177 static bool handleMSPointerTypeQualifierAttr(TypeProcessingState &State,
6178                                              AttributeList &Attr,
6179                                              QualType &Type) {
6180   Sema &S = State.getSema();
6181 
6182   AttributeList::Kind Kind = Attr.getKind();
6183   QualType Desugared = Type;
6184   const AttributedType *AT = dyn_cast<AttributedType>(Type);
6185   while (AT) {
6186     AttributedType::Kind CurAttrKind = AT->getAttrKind();
6187 
6188     // You cannot specify duplicate type attributes, so if the attribute has
6189     // already been applied, flag it.
6190     if (getAttrListKind(CurAttrKind) == Kind) {
6191       S.Diag(Attr.getLoc(), diag::warn_duplicate_attribute_exact)
6192         << Attr.getName();
6193       return true;
6194     }
6195 
6196     // You cannot have both __sptr and __uptr on the same type, nor can you
6197     // have __ptr32 and __ptr64.
6198     if ((CurAttrKind == AttributedType::attr_ptr32 &&
6199          Kind == AttributeList::AT_Ptr64) ||
6200         (CurAttrKind == AttributedType::attr_ptr64 &&
6201          Kind == AttributeList::AT_Ptr32)) {
6202       S.Diag(Attr.getLoc(), diag::err_attributes_are_not_compatible)
6203         << "'__ptr32'" << "'__ptr64'";
6204       return true;
6205     } else if ((CurAttrKind == AttributedType::attr_sptr &&
6206                 Kind == AttributeList::AT_UPtr) ||
6207                (CurAttrKind == AttributedType::attr_uptr &&
6208                 Kind == AttributeList::AT_SPtr)) {
6209       S.Diag(Attr.getLoc(), diag::err_attributes_are_not_compatible)
6210         << "'__sptr'" << "'__uptr'";
6211       return true;
6212     }
6213 
6214     Desugared = AT->getEquivalentType();
6215     AT = dyn_cast<AttributedType>(Desugared);
6216   }
6217 
6218   // Pointer type qualifiers can only operate on pointer types, but not
6219   // pointer-to-member types.
6220   if (!isa<PointerType>(Desugared)) {
6221     if (Type->isMemberPointerType())
6222       S.Diag(Attr.getLoc(), diag::err_attribute_no_member_pointers)
6223           << Attr.getName();
6224     else
6225       S.Diag(Attr.getLoc(), diag::err_attribute_pointers_only)
6226           << Attr.getName() << 0;
6227     return true;
6228   }
6229 
6230   AttributedType::Kind TAK;
6231   switch (Kind) {
6232   default: llvm_unreachable("Unknown attribute kind");
6233   case AttributeList::AT_Ptr32: TAK = AttributedType::attr_ptr32; break;
6234   case AttributeList::AT_Ptr64: TAK = AttributedType::attr_ptr64; break;
6235   case AttributeList::AT_SPtr: TAK = AttributedType::attr_sptr; break;
6236   case AttributeList::AT_UPtr: TAK = AttributedType::attr_uptr; break;
6237   }
6238 
6239   Type = S.Context.getAttributedType(TAK, Type, Type);
6240   return false;
6241 }
6242 
6243 bool Sema::checkNullabilityTypeSpecifier(QualType &type,
6244                                          NullabilityKind nullability,
6245                                          SourceLocation nullabilityLoc,
6246                                          bool isContextSensitive,
6247                                          bool allowOnArrayType) {
6248   recordNullabilitySeen(*this, nullabilityLoc);
6249 
6250   // Check for existing nullability attributes on the type.
6251   QualType desugared = type;
6252   while (auto attributed = dyn_cast<AttributedType>(desugared.getTypePtr())) {
6253     // Check whether there is already a null
6254     if (auto existingNullability = attributed->getImmediateNullability()) {
6255       // Duplicated nullability.
6256       if (nullability == *existingNullability) {
6257         Diag(nullabilityLoc, diag::warn_nullability_duplicate)
6258           << DiagNullabilityKind(nullability, isContextSensitive)
6259           << FixItHint::CreateRemoval(nullabilityLoc);
6260 
6261         break;
6262       }
6263 
6264       // Conflicting nullability.
6265       Diag(nullabilityLoc, diag::err_nullability_conflicting)
6266         << DiagNullabilityKind(nullability, isContextSensitive)
6267         << DiagNullabilityKind(*existingNullability, false);
6268       return true;
6269     }
6270 
6271     desugared = attributed->getModifiedType();
6272   }
6273 
6274   // If there is already a different nullability specifier, complain.
6275   // This (unlike the code above) looks through typedefs that might
6276   // have nullability specifiers on them, which means we cannot
6277   // provide a useful Fix-It.
6278   if (auto existingNullability = desugared->getNullability(Context)) {
6279     if (nullability != *existingNullability) {
6280       Diag(nullabilityLoc, diag::err_nullability_conflicting)
6281         << DiagNullabilityKind(nullability, isContextSensitive)
6282         << DiagNullabilityKind(*existingNullability, false);
6283 
6284       // Try to find the typedef with the existing nullability specifier.
6285       if (auto typedefType = desugared->getAs<TypedefType>()) {
6286         TypedefNameDecl *typedefDecl = typedefType->getDecl();
6287         QualType underlyingType = typedefDecl->getUnderlyingType();
6288         if (auto typedefNullability
6289               = AttributedType::stripOuterNullability(underlyingType)) {
6290           if (*typedefNullability == *existingNullability) {
6291             Diag(typedefDecl->getLocation(), diag::note_nullability_here)
6292               << DiagNullabilityKind(*existingNullability, false);
6293           }
6294         }
6295       }
6296 
6297       return true;
6298     }
6299   }
6300 
6301   // If this definitely isn't a pointer type, reject the specifier.
6302   if (!desugared->canHaveNullability() &&
6303       !(allowOnArrayType && desugared->isArrayType())) {
6304     Diag(nullabilityLoc, diag::err_nullability_nonpointer)
6305       << DiagNullabilityKind(nullability, isContextSensitive) << type;
6306     return true;
6307   }
6308 
6309   // For the context-sensitive keywords/Objective-C property
6310   // attributes, require that the type be a single-level pointer.
6311   if (isContextSensitive) {
6312     // Make sure that the pointee isn't itself a pointer type.
6313     const Type *pointeeType;
6314     if (desugared->isArrayType())
6315       pointeeType = desugared->getArrayElementTypeNoTypeQual();
6316     else
6317       pointeeType = desugared->getPointeeType().getTypePtr();
6318 
6319     if (pointeeType->isAnyPointerType() ||
6320         pointeeType->isObjCObjectPointerType() ||
6321         pointeeType->isMemberPointerType()) {
6322       Diag(nullabilityLoc, diag::err_nullability_cs_multilevel)
6323         << DiagNullabilityKind(nullability, true)
6324         << type;
6325       Diag(nullabilityLoc, diag::note_nullability_type_specifier)
6326         << DiagNullabilityKind(nullability, false)
6327         << type
6328         << FixItHint::CreateReplacement(nullabilityLoc,
6329                                         getNullabilitySpelling(nullability));
6330       return true;
6331     }
6332   }
6333 
6334   // Form the attributed type.
6335   type = Context.getAttributedType(
6336            AttributedType::getNullabilityAttrKind(nullability), type, type);
6337   return false;
6338 }
6339 
6340 bool Sema::checkObjCKindOfType(QualType &type, SourceLocation loc) {
6341   if (isa<ObjCTypeParamType>(type)) {
6342     // Build the attributed type to record where __kindof occurred.
6343     type = Context.getAttributedType(AttributedType::attr_objc_kindof,
6344                                      type, type);
6345     return false;
6346   }
6347 
6348   // Find out if it's an Objective-C object or object pointer type;
6349   const ObjCObjectPointerType *ptrType = type->getAs<ObjCObjectPointerType>();
6350   const ObjCObjectType *objType = ptrType ? ptrType->getObjectType()
6351                                           : type->getAs<ObjCObjectType>();
6352 
6353   // If not, we can't apply __kindof.
6354   if (!objType) {
6355     // FIXME: Handle dependent types that aren't yet object types.
6356     Diag(loc, diag::err_objc_kindof_nonobject)
6357       << type;
6358     return true;
6359   }
6360 
6361   // Rebuild the "equivalent" type, which pushes __kindof down into
6362   // the object type.
6363   // There is no need to apply kindof on an unqualified id type.
6364   QualType equivType = Context.getObjCObjectType(
6365       objType->getBaseType(), objType->getTypeArgsAsWritten(),
6366       objType->getProtocols(),
6367       /*isKindOf=*/objType->isObjCUnqualifiedId() ? false : true);
6368 
6369   // If we started with an object pointer type, rebuild it.
6370   if (ptrType) {
6371     equivType = Context.getObjCObjectPointerType(equivType);
6372     if (auto nullability = type->getNullability(Context)) {
6373       auto attrKind = AttributedType::getNullabilityAttrKind(*nullability);
6374       equivType = Context.getAttributedType(attrKind, equivType, equivType);
6375     }
6376   }
6377 
6378   // Build the attributed type to record where __kindof occurred.
6379   type = Context.getAttributedType(AttributedType::attr_objc_kindof,
6380                                    type,
6381                                    equivType);
6382 
6383   return false;
6384 }
6385 
6386 /// Map a nullability attribute kind to a nullability kind.
6387 static NullabilityKind mapNullabilityAttrKind(AttributeList::Kind kind) {
6388   switch (kind) {
6389   case AttributeList::AT_TypeNonNull:
6390     return NullabilityKind::NonNull;
6391 
6392   case AttributeList::AT_TypeNullable:
6393     return NullabilityKind::Nullable;
6394 
6395   case AttributeList::AT_TypeNullUnspecified:
6396     return NullabilityKind::Unspecified;
6397 
6398   default:
6399     llvm_unreachable("not a nullability attribute kind");
6400   }
6401 }
6402 
6403 /// Distribute a nullability type attribute that cannot be applied to
6404 /// the type specifier to a pointer, block pointer, or member pointer
6405 /// declarator, complaining if necessary.
6406 ///
6407 /// \returns true if the nullability annotation was distributed, false
6408 /// otherwise.
6409 static bool distributeNullabilityTypeAttr(TypeProcessingState &state,
6410                                           QualType type,
6411                                           AttributeList &attr) {
6412   Declarator &declarator = state.getDeclarator();
6413 
6414   /// Attempt to move the attribute to the specified chunk.
6415   auto moveToChunk = [&](DeclaratorChunk &chunk, bool inFunction) -> bool {
6416     // If there is already a nullability attribute there, don't add
6417     // one.
6418     if (hasNullabilityAttr(chunk.getAttrListRef()))
6419       return false;
6420 
6421     // Complain about the nullability qualifier being in the wrong
6422     // place.
6423     enum {
6424       PK_Pointer,
6425       PK_BlockPointer,
6426       PK_MemberPointer,
6427       PK_FunctionPointer,
6428       PK_MemberFunctionPointer,
6429     } pointerKind
6430       = chunk.Kind == DeclaratorChunk::Pointer ? (inFunction ? PK_FunctionPointer
6431                                                              : PK_Pointer)
6432         : chunk.Kind == DeclaratorChunk::BlockPointer ? PK_BlockPointer
6433         : inFunction? PK_MemberFunctionPointer : PK_MemberPointer;
6434 
6435     auto diag = state.getSema().Diag(attr.getLoc(),
6436                                      diag::warn_nullability_declspec)
6437       << DiagNullabilityKind(mapNullabilityAttrKind(attr.getKind()),
6438                              attr.isContextSensitiveKeywordAttribute())
6439       << type
6440       << static_cast<unsigned>(pointerKind);
6441 
6442     // FIXME: MemberPointer chunks don't carry the location of the *.
6443     if (chunk.Kind != DeclaratorChunk::MemberPointer) {
6444       diag << FixItHint::CreateRemoval(attr.getLoc())
6445            << FixItHint::CreateInsertion(
6446                 state.getSema().getPreprocessor()
6447                   .getLocForEndOfToken(chunk.Loc),
6448                 " " + attr.getName()->getName().str() + " ");
6449     }
6450 
6451     moveAttrFromListToList(attr, state.getCurrentAttrListRef(),
6452                            chunk.getAttrListRef());
6453     return true;
6454   };
6455 
6456   // Move it to the outermost pointer, member pointer, or block
6457   // pointer declarator.
6458   for (unsigned i = state.getCurrentChunkIndex(); i != 0; --i) {
6459     DeclaratorChunk &chunk = declarator.getTypeObject(i-1);
6460     switch (chunk.Kind) {
6461     case DeclaratorChunk::Pointer:
6462     case DeclaratorChunk::BlockPointer:
6463     case DeclaratorChunk::MemberPointer:
6464       return moveToChunk(chunk, false);
6465 
6466     case DeclaratorChunk::Paren:
6467     case DeclaratorChunk::Array:
6468       continue;
6469 
6470     case DeclaratorChunk::Function:
6471       // Try to move past the return type to a function/block/member
6472       // function pointer.
6473       if (DeclaratorChunk *dest = maybeMovePastReturnType(
6474                                     declarator, i,
6475                                     /*onlyBlockPointers=*/false)) {
6476         return moveToChunk(*dest, true);
6477       }
6478 
6479       return false;
6480 
6481     // Don't walk through these.
6482     case DeclaratorChunk::Reference:
6483     case DeclaratorChunk::Pipe:
6484       return false;
6485     }
6486   }
6487 
6488   return false;
6489 }
6490 
6491 static AttributedType::Kind getCCTypeAttrKind(AttributeList &Attr) {
6492   assert(!Attr.isInvalid());
6493   switch (Attr.getKind()) {
6494   default:
6495     llvm_unreachable("not a calling convention attribute");
6496   case AttributeList::AT_CDecl:
6497     return AttributedType::attr_cdecl;
6498   case AttributeList::AT_FastCall:
6499     return AttributedType::attr_fastcall;
6500   case AttributeList::AT_StdCall:
6501     return AttributedType::attr_stdcall;
6502   case AttributeList::AT_ThisCall:
6503     return AttributedType::attr_thiscall;
6504   case AttributeList::AT_RegCall:
6505     return AttributedType::attr_regcall;
6506   case AttributeList::AT_Pascal:
6507     return AttributedType::attr_pascal;
6508   case AttributeList::AT_SwiftCall:
6509     return AttributedType::attr_swiftcall;
6510   case AttributeList::AT_VectorCall:
6511     return AttributedType::attr_vectorcall;
6512   case AttributeList::AT_Pcs: {
6513     // The attribute may have had a fixit applied where we treated an
6514     // identifier as a string literal.  The contents of the string are valid,
6515     // but the form may not be.
6516     StringRef Str;
6517     if (Attr.isArgExpr(0))
6518       Str = cast<StringLiteral>(Attr.getArgAsExpr(0))->getString();
6519     else
6520       Str = Attr.getArgAsIdent(0)->Ident->getName();
6521     return llvm::StringSwitch<AttributedType::Kind>(Str)
6522         .Case("aapcs", AttributedType::attr_pcs)
6523         .Case("aapcs-vfp", AttributedType::attr_pcs_vfp);
6524   }
6525   case AttributeList::AT_IntelOclBicc:
6526     return AttributedType::attr_inteloclbicc;
6527   case AttributeList::AT_MSABI:
6528     return AttributedType::attr_ms_abi;
6529   case AttributeList::AT_SysVABI:
6530     return AttributedType::attr_sysv_abi;
6531   case AttributeList::AT_PreserveMost:
6532     return AttributedType::attr_preserve_most;
6533   case AttributeList::AT_PreserveAll:
6534     return AttributedType::attr_preserve_all;
6535   }
6536   llvm_unreachable("unexpected attribute kind!");
6537 }
6538 
6539 /// Process an individual function attribute.  Returns true to
6540 /// indicate that the attribute was handled, false if it wasn't.
6541 static bool handleFunctionTypeAttr(TypeProcessingState &state,
6542                                    AttributeList &attr,
6543                                    QualType &type) {
6544   Sema &S = state.getSema();
6545 
6546   FunctionTypeUnwrapper unwrapped(S, type);
6547 
6548   if (attr.getKind() == AttributeList::AT_NoReturn) {
6549     if (S.CheckNoReturnAttr(attr))
6550       return true;
6551 
6552     // Delay if this is not a function type.
6553     if (!unwrapped.isFunctionType())
6554       return false;
6555 
6556     // Otherwise we can process right away.
6557     FunctionType::ExtInfo EI = unwrapped.get()->getExtInfo().withNoReturn(true);
6558     type = unwrapped.wrap(S, S.Context.adjustFunctionType(unwrapped.get(), EI));
6559     return true;
6560   }
6561 
6562   // ns_returns_retained is not always a type attribute, but if we got
6563   // here, we're treating it as one right now.
6564   if (attr.getKind() == AttributeList::AT_NSReturnsRetained) {
6565     if (attr.getNumArgs()) return true;
6566 
6567     // Delay if this is not a function type.
6568     if (!unwrapped.isFunctionType())
6569       return false;
6570 
6571     // Check whether the return type is reasonable.
6572     if (S.checkNSReturnsRetainedReturnType(attr.getLoc(),
6573                                            unwrapped.get()->getReturnType()))
6574       return true;
6575 
6576     // Only actually change the underlying type in ARC builds.
6577     QualType origType = type;
6578     if (state.getSema().getLangOpts().ObjCAutoRefCount) {
6579       FunctionType::ExtInfo EI
6580         = unwrapped.get()->getExtInfo().withProducesResult(true);
6581       type = unwrapped.wrap(S, S.Context.adjustFunctionType(unwrapped.get(), EI));
6582     }
6583     type = S.Context.getAttributedType(AttributedType::attr_ns_returns_retained,
6584                                        origType, type);
6585     return true;
6586   }
6587 
6588   if (attr.getKind() == AttributeList::AT_AnyX86NoCallerSavedRegisters) {
6589     if (S.CheckNoCallerSavedRegsAttr(attr))
6590       return true;
6591 
6592     // Delay if this is not a function type.
6593     if (!unwrapped.isFunctionType())
6594       return false;
6595 
6596     FunctionType::ExtInfo EI =
6597         unwrapped.get()->getExtInfo().withNoCallerSavedRegs(true);
6598     type = unwrapped.wrap(S, S.Context.adjustFunctionType(unwrapped.get(), EI));
6599     return true;
6600   }
6601 
6602   if (attr.getKind() == AttributeList::AT_Regparm) {
6603     unsigned value;
6604     if (S.CheckRegparmAttr(attr, value))
6605       return true;
6606 
6607     // Delay if this is not a function type.
6608     if (!unwrapped.isFunctionType())
6609       return false;
6610 
6611     // Diagnose regparm with fastcall.
6612     const FunctionType *fn = unwrapped.get();
6613     CallingConv CC = fn->getCallConv();
6614     if (CC == CC_X86FastCall) {
6615       S.Diag(attr.getLoc(), diag::err_attributes_are_not_compatible)
6616         << FunctionType::getNameForCallConv(CC)
6617         << "regparm";
6618       attr.setInvalid();
6619       return true;
6620     }
6621 
6622     FunctionType::ExtInfo EI =
6623       unwrapped.get()->getExtInfo().withRegParm(value);
6624     type = unwrapped.wrap(S, S.Context.adjustFunctionType(unwrapped.get(), EI));
6625     return true;
6626   }
6627 
6628   // Delay if the type didn't work out to a function.
6629   if (!unwrapped.isFunctionType()) return false;
6630 
6631   // Otherwise, a calling convention.
6632   CallingConv CC;
6633   if (S.CheckCallingConvAttr(attr, CC))
6634     return true;
6635 
6636   const FunctionType *fn = unwrapped.get();
6637   CallingConv CCOld = fn->getCallConv();
6638   AttributedType::Kind CCAttrKind = getCCTypeAttrKind(attr);
6639 
6640   if (CCOld != CC) {
6641     // Error out on when there's already an attribute on the type
6642     // and the CCs don't match.
6643     const AttributedType *AT = S.getCallingConvAttributedType(type);
6644     if (AT && AT->getAttrKind() != CCAttrKind) {
6645       S.Diag(attr.getLoc(), diag::err_attributes_are_not_compatible)
6646         << FunctionType::getNameForCallConv(CC)
6647         << FunctionType::getNameForCallConv(CCOld);
6648       attr.setInvalid();
6649       return true;
6650     }
6651   }
6652 
6653   // Diagnose use of variadic functions with calling conventions that
6654   // don't support them (e.g. because they're callee-cleanup).
6655   // We delay warning about this on unprototyped function declarations
6656   // until after redeclaration checking, just in case we pick up a
6657   // prototype that way.  And apparently we also "delay" warning about
6658   // unprototyped function types in general, despite not necessarily having
6659   // much ability to diagnose it later.
6660   if (!supportsVariadicCall(CC)) {
6661     const FunctionProtoType *FnP = dyn_cast<FunctionProtoType>(fn);
6662     if (FnP && FnP->isVariadic()) {
6663       unsigned DiagID = diag::err_cconv_varargs;
6664 
6665       // stdcall and fastcall are ignored with a warning for GCC and MS
6666       // compatibility.
6667       bool IsInvalid = true;
6668       if (CC == CC_X86StdCall || CC == CC_X86FastCall) {
6669         DiagID = diag::warn_cconv_varargs;
6670         IsInvalid = false;
6671       }
6672 
6673       S.Diag(attr.getLoc(), DiagID) << FunctionType::getNameForCallConv(CC);
6674       if (IsInvalid) attr.setInvalid();
6675       return true;
6676     }
6677   }
6678 
6679   // Also diagnose fastcall with regparm.
6680   if (CC == CC_X86FastCall && fn->getHasRegParm()) {
6681     S.Diag(attr.getLoc(), diag::err_attributes_are_not_compatible)
6682         << "regparm" << FunctionType::getNameForCallConv(CC_X86FastCall);
6683     attr.setInvalid();
6684     return true;
6685   }
6686 
6687   // Modify the CC from the wrapped function type, wrap it all back, and then
6688   // wrap the whole thing in an AttributedType as written.  The modified type
6689   // might have a different CC if we ignored the attribute.
6690   QualType Equivalent;
6691   if (CCOld == CC) {
6692     Equivalent = type;
6693   } else {
6694     auto EI = unwrapped.get()->getExtInfo().withCallingConv(CC);
6695     Equivalent =
6696       unwrapped.wrap(S, S.Context.adjustFunctionType(unwrapped.get(), EI));
6697   }
6698   type = S.Context.getAttributedType(CCAttrKind, type, Equivalent);
6699   return true;
6700 }
6701 
6702 bool Sema::hasExplicitCallingConv(QualType &T) {
6703   QualType R = T.IgnoreParens();
6704   while (const AttributedType *AT = dyn_cast<AttributedType>(R)) {
6705     if (AT->isCallingConv())
6706       return true;
6707     R = AT->getModifiedType().IgnoreParens();
6708   }
6709   return false;
6710 }
6711 
6712 void Sema::adjustMemberFunctionCC(QualType &T, bool IsStatic, bool IsCtorOrDtor,
6713                                   SourceLocation Loc) {
6714   FunctionTypeUnwrapper Unwrapped(*this, T);
6715   const FunctionType *FT = Unwrapped.get();
6716   bool IsVariadic = (isa<FunctionProtoType>(FT) &&
6717                      cast<FunctionProtoType>(FT)->isVariadic());
6718   CallingConv CurCC = FT->getCallConv();
6719   CallingConv ToCC = Context.getDefaultCallingConvention(IsVariadic, !IsStatic);
6720 
6721   if (CurCC == ToCC)
6722     return;
6723 
6724   // MS compiler ignores explicit calling convention attributes on structors. We
6725   // should do the same.
6726   if (Context.getTargetInfo().getCXXABI().isMicrosoft() && IsCtorOrDtor) {
6727     // Issue a warning on ignored calling convention -- except of __stdcall.
6728     // Again, this is what MS compiler does.
6729     if (CurCC != CC_X86StdCall)
6730       Diag(Loc, diag::warn_cconv_structors)
6731           << FunctionType::getNameForCallConv(CurCC);
6732   // Default adjustment.
6733   } else {
6734     // Only adjust types with the default convention.  For example, on Windows
6735     // we should adjust a __cdecl type to __thiscall for instance methods, and a
6736     // __thiscall type to __cdecl for static methods.
6737     CallingConv DefaultCC =
6738         Context.getDefaultCallingConvention(IsVariadic, IsStatic);
6739 
6740     if (CurCC != DefaultCC || DefaultCC == ToCC)
6741       return;
6742 
6743     if (hasExplicitCallingConv(T))
6744       return;
6745   }
6746 
6747   FT = Context.adjustFunctionType(FT, FT->getExtInfo().withCallingConv(ToCC));
6748   QualType Wrapped = Unwrapped.wrap(*this, FT);
6749   T = Context.getAdjustedType(T, Wrapped);
6750 }
6751 
6752 /// HandleVectorSizeAttribute - this attribute is only applicable to integral
6753 /// and float scalars, although arrays, pointers, and function return values are
6754 /// allowed in conjunction with this construct. Aggregates with this attribute
6755 /// are invalid, even if they are of the same size as a corresponding scalar.
6756 /// The raw attribute should contain precisely 1 argument, the vector size for
6757 /// the variable, measured in bytes. If curType and rawAttr are well formed,
6758 /// this routine will return a new vector type.
6759 static void HandleVectorSizeAttr(QualType& CurType, const AttributeList &Attr,
6760                                  Sema &S) {
6761   // Check the attribute arguments.
6762   if (Attr.getNumArgs() != 1) {
6763     S.Diag(Attr.getLoc(), diag::err_attribute_wrong_number_arguments)
6764       << Attr.getName() << 1;
6765     Attr.setInvalid();
6766     return;
6767   }
6768   Expr *sizeExpr = static_cast<Expr *>(Attr.getArgAsExpr(0));
6769   llvm::APSInt vecSize(32);
6770   if (sizeExpr->isTypeDependent() || sizeExpr->isValueDependent() ||
6771       !sizeExpr->isIntegerConstantExpr(vecSize, S.Context)) {
6772     S.Diag(Attr.getLoc(), diag::err_attribute_argument_type)
6773       << Attr.getName() << AANT_ArgumentIntegerConstant
6774       << sizeExpr->getSourceRange();
6775     Attr.setInvalid();
6776     return;
6777   }
6778   // The base type must be integer (not Boolean or enumeration) or float, and
6779   // can't already be a vector.
6780   if (!CurType->isBuiltinType() || CurType->isBooleanType() ||
6781       (!CurType->isIntegerType() && !CurType->isRealFloatingType())) {
6782     S.Diag(Attr.getLoc(), diag::err_attribute_invalid_vector_type) << CurType;
6783     Attr.setInvalid();
6784     return;
6785   }
6786   unsigned typeSize = static_cast<unsigned>(S.Context.getTypeSize(CurType));
6787   // vecSize is specified in bytes - convert to bits.
6788   unsigned vectorSize = static_cast<unsigned>(vecSize.getZExtValue() * 8);
6789 
6790   // the vector size needs to be an integral multiple of the type size.
6791   if (vectorSize % typeSize) {
6792     S.Diag(Attr.getLoc(), diag::err_attribute_invalid_size)
6793       << sizeExpr->getSourceRange();
6794     Attr.setInvalid();
6795     return;
6796   }
6797   if (VectorType::isVectorSizeTooLarge(vectorSize / typeSize)) {
6798     S.Diag(Attr.getLoc(), diag::err_attribute_size_too_large)
6799       << sizeExpr->getSourceRange();
6800     Attr.setInvalid();
6801     return;
6802   }
6803   if (vectorSize == 0) {
6804     S.Diag(Attr.getLoc(), diag::err_attribute_zero_size)
6805       << sizeExpr->getSourceRange();
6806     Attr.setInvalid();
6807     return;
6808   }
6809 
6810   // Success! Instantiate the vector type, the number of elements is > 0, and
6811   // not required to be a power of 2, unlike GCC.
6812   CurType = S.Context.getVectorType(CurType, vectorSize/typeSize,
6813                                     VectorType::GenericVector);
6814 }
6815 
6816 /// \brief Process the OpenCL-like ext_vector_type attribute when it occurs on
6817 /// a type.
6818 static void HandleExtVectorTypeAttr(QualType &CurType,
6819                                     const AttributeList &Attr,
6820                                     Sema &S) {
6821   // check the attribute arguments.
6822   if (Attr.getNumArgs() != 1) {
6823     S.Diag(Attr.getLoc(), diag::err_attribute_wrong_number_arguments)
6824       << Attr.getName() << 1;
6825     return;
6826   }
6827 
6828   Expr *sizeExpr;
6829 
6830   // Special case where the argument is a template id.
6831   if (Attr.isArgIdent(0)) {
6832     CXXScopeSpec SS;
6833     SourceLocation TemplateKWLoc;
6834     UnqualifiedId id;
6835     id.setIdentifier(Attr.getArgAsIdent(0)->Ident, Attr.getLoc());
6836 
6837     ExprResult Size = S.ActOnIdExpression(S.getCurScope(), SS, TemplateKWLoc,
6838                                           id, false, false);
6839     if (Size.isInvalid())
6840       return;
6841 
6842     sizeExpr = Size.get();
6843   } else {
6844     sizeExpr = Attr.getArgAsExpr(0);
6845   }
6846 
6847   // Create the vector type.
6848   QualType T = S.BuildExtVectorType(CurType, sizeExpr, Attr.getLoc());
6849   if (!T.isNull())
6850     CurType = T;
6851 }
6852 
6853 static bool isPermittedNeonBaseType(QualType &Ty,
6854                                     VectorType::VectorKind VecKind, Sema &S) {
6855   const BuiltinType *BTy = Ty->getAs<BuiltinType>();
6856   if (!BTy)
6857     return false;
6858 
6859   llvm::Triple Triple = S.Context.getTargetInfo().getTriple();
6860 
6861   // Signed poly is mathematically wrong, but has been baked into some ABIs by
6862   // now.
6863   bool IsPolyUnsigned = Triple.getArch() == llvm::Triple::aarch64 ||
6864                         Triple.getArch() == llvm::Triple::aarch64_be;
6865   if (VecKind == VectorType::NeonPolyVector) {
6866     if (IsPolyUnsigned) {
6867       // AArch64 polynomial vectors are unsigned and support poly64.
6868       return BTy->getKind() == BuiltinType::UChar ||
6869              BTy->getKind() == BuiltinType::UShort ||
6870              BTy->getKind() == BuiltinType::ULong ||
6871              BTy->getKind() == BuiltinType::ULongLong;
6872     } else {
6873       // AArch32 polynomial vector are signed.
6874       return BTy->getKind() == BuiltinType::SChar ||
6875              BTy->getKind() == BuiltinType::Short;
6876     }
6877   }
6878 
6879   // Non-polynomial vector types: the usual suspects are allowed, as well as
6880   // float64_t on AArch64.
6881   bool Is64Bit = Triple.getArch() == llvm::Triple::aarch64 ||
6882                  Triple.getArch() == llvm::Triple::aarch64_be;
6883 
6884   if (Is64Bit && BTy->getKind() == BuiltinType::Double)
6885     return true;
6886 
6887   return BTy->getKind() == BuiltinType::SChar ||
6888          BTy->getKind() == BuiltinType::UChar ||
6889          BTy->getKind() == BuiltinType::Short ||
6890          BTy->getKind() == BuiltinType::UShort ||
6891          BTy->getKind() == BuiltinType::Int ||
6892          BTy->getKind() == BuiltinType::UInt ||
6893          BTy->getKind() == BuiltinType::Long ||
6894          BTy->getKind() == BuiltinType::ULong ||
6895          BTy->getKind() == BuiltinType::LongLong ||
6896          BTy->getKind() == BuiltinType::ULongLong ||
6897          BTy->getKind() == BuiltinType::Float ||
6898          BTy->getKind() == BuiltinType::Half;
6899 }
6900 
6901 /// HandleNeonVectorTypeAttr - The "neon_vector_type" and
6902 /// "neon_polyvector_type" attributes are used to create vector types that
6903 /// are mangled according to ARM's ABI.  Otherwise, these types are identical
6904 /// to those created with the "vector_size" attribute.  Unlike "vector_size"
6905 /// the argument to these Neon attributes is the number of vector elements,
6906 /// not the vector size in bytes.  The vector width and element type must
6907 /// match one of the standard Neon vector types.
6908 static void HandleNeonVectorTypeAttr(QualType& CurType,
6909                                      const AttributeList &Attr, Sema &S,
6910                                      VectorType::VectorKind VecKind) {
6911   // Target must have NEON
6912   if (!S.Context.getTargetInfo().hasFeature("neon")) {
6913     S.Diag(Attr.getLoc(), diag::err_attribute_unsupported) << Attr.getName();
6914     Attr.setInvalid();
6915     return;
6916   }
6917   // Check the attribute arguments.
6918   if (Attr.getNumArgs() != 1) {
6919     S.Diag(Attr.getLoc(), diag::err_attribute_wrong_number_arguments)
6920       << Attr.getName() << 1;
6921     Attr.setInvalid();
6922     return;
6923   }
6924   // The number of elements must be an ICE.
6925   Expr *numEltsExpr = static_cast<Expr *>(Attr.getArgAsExpr(0));
6926   llvm::APSInt numEltsInt(32);
6927   if (numEltsExpr->isTypeDependent() || numEltsExpr->isValueDependent() ||
6928       !numEltsExpr->isIntegerConstantExpr(numEltsInt, S.Context)) {
6929     S.Diag(Attr.getLoc(), diag::err_attribute_argument_type)
6930       << Attr.getName() << AANT_ArgumentIntegerConstant
6931       << numEltsExpr->getSourceRange();
6932     Attr.setInvalid();
6933     return;
6934   }
6935   // Only certain element types are supported for Neon vectors.
6936   if (!isPermittedNeonBaseType(CurType, VecKind, S)) {
6937     S.Diag(Attr.getLoc(), diag::err_attribute_invalid_vector_type) << CurType;
6938     Attr.setInvalid();
6939     return;
6940   }
6941 
6942   // The total size of the vector must be 64 or 128 bits.
6943   unsigned typeSize = static_cast<unsigned>(S.Context.getTypeSize(CurType));
6944   unsigned numElts = static_cast<unsigned>(numEltsInt.getZExtValue());
6945   unsigned vecSize = typeSize * numElts;
6946   if (vecSize != 64 && vecSize != 128) {
6947     S.Diag(Attr.getLoc(), diag::err_attribute_bad_neon_vector_size) << CurType;
6948     Attr.setInvalid();
6949     return;
6950   }
6951 
6952   CurType = S.Context.getVectorType(CurType, numElts, VecKind);
6953 }
6954 
6955 /// Handle OpenCL Access Qualifier Attribute.
6956 static void HandleOpenCLAccessAttr(QualType &CurType, const AttributeList &Attr,
6957                                    Sema &S) {
6958   // OpenCL v2.0 s6.6 - Access qualifier can be used only for image and pipe type.
6959   if (!(CurType->isImageType() || CurType->isPipeType())) {
6960     S.Diag(Attr.getLoc(), diag::err_opencl_invalid_access_qualifier);
6961     Attr.setInvalid();
6962     return;
6963   }
6964 
6965   if (const TypedefType* TypedefTy = CurType->getAs<TypedefType>()) {
6966     QualType PointeeTy = TypedefTy->desugar();
6967     S.Diag(Attr.getLoc(), diag::err_opencl_multiple_access_qualifiers);
6968 
6969     std::string PrevAccessQual;
6970     switch (cast<BuiltinType>(PointeeTy.getTypePtr())->getKind()) {
6971       #define IMAGE_TYPE(ImgType, Id, SingletonId, Access, Suffix) \
6972     case BuiltinType::Id:                                          \
6973       PrevAccessQual = #Access;                                    \
6974       break;
6975       #include "clang/Basic/OpenCLImageTypes.def"
6976     default:
6977       assert(0 && "Unable to find corresponding image type.");
6978     }
6979 
6980     S.Diag(TypedefTy->getDecl()->getLocStart(),
6981        diag::note_opencl_typedef_access_qualifier) << PrevAccessQual;
6982   } else if (CurType->isPipeType()) {
6983     if (Attr.getSemanticSpelling() == OpenCLAccessAttr::Keyword_write_only) {
6984       QualType ElemType = CurType->getAs<PipeType>()->getElementType();
6985       CurType = S.Context.getWritePipeType(ElemType);
6986     }
6987   }
6988 }
6989 
6990 static void deduceOpenCLImplicitAddrSpace(TypeProcessingState &State,
6991                                           QualType &T, TypeAttrLocation TAL) {
6992   Declarator &D = State.getDeclarator();
6993 
6994   // Handle the cases where address space should not be deduced.
6995   //
6996   // The pointee type of a pointer type is alwasy deduced since a pointer always
6997   // points to some memory location which should has an address space.
6998   //
6999   // There are situations that at the point of certain declarations, the address
7000   // space may be unknown and better to be left as default. For example, when
7001   // definining a typedef or struct type, they are not associated with any
7002   // specific address space. Later on, they may be used with any address space
7003   // to declare a variable.
7004   //
7005   // The return value of a function is r-value, therefore should not have
7006   // address space.
7007   //
7008   // The void type does not occupy memory, therefore should not have address
7009   // space, except when it is used as a pointee type.
7010   //
7011   // Since LLVM assumes function type is in default address space, it should not
7012   // have address space.
7013   auto ChunkIndex = State.getCurrentChunkIndex();
7014   bool IsPointee =
7015       ChunkIndex > 0 &&
7016       (D.getTypeObject(ChunkIndex - 1).Kind == DeclaratorChunk::Pointer ||
7017        D.getTypeObject(ChunkIndex - 1).Kind == DeclaratorChunk::BlockPointer);
7018   bool IsFuncReturnType =
7019       ChunkIndex > 0 &&
7020       D.getTypeObject(ChunkIndex - 1).Kind == DeclaratorChunk::Function;
7021   bool IsFuncType =
7022       ChunkIndex < D.getNumTypeObjects() &&
7023       D.getTypeObject(ChunkIndex).Kind == DeclaratorChunk::Function;
7024   if ( // Do not deduce addr space for function return type and function type,
7025        // otherwise it will fail some sema check.
7026       IsFuncReturnType || IsFuncType ||
7027       // Do not deduce addr space for member types of struct, except the pointee
7028       // type of a pointer member type.
7029       (D.getContext() == Declarator::MemberContext && !IsPointee) ||
7030       // Do not deduce addr space for types used to define a typedef and the
7031       // typedef itself, except the pointee type of a pointer type which is used
7032       // to define the typedef.
7033       (D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_typedef &&
7034        !IsPointee) ||
7035       // Do not deduce addr space of the void type, e.g. in f(void), otherwise
7036       // it will fail some sema check.
7037       (T->isVoidType() && !IsPointee))
7038     return;
7039 
7040   LangAS ImpAddr;
7041   // Put OpenCL automatic variable in private address space.
7042   // OpenCL v1.2 s6.5:
7043   // The default address space name for arguments to a function in a
7044   // program, or local variables of a function is __private. All function
7045   // arguments shall be in the __private address space.
7046   if (State.getSema().getLangOpts().OpenCLVersion <= 120) {
7047       ImpAddr = LangAS::opencl_private;
7048   } else {
7049     // If address space is not set, OpenCL 2.0 defines non private default
7050     // address spaces for some cases:
7051     // OpenCL 2.0, section 6.5:
7052     // The address space for a variable at program scope or a static variable
7053     // inside a function can either be __global or __constant, but defaults to
7054     // __global if not specified.
7055     // (...)
7056     // Pointers that are declared without pointing to a named address space
7057     // point to the generic address space.
7058     if (IsPointee) {
7059       ImpAddr = LangAS::opencl_generic;
7060     } else {
7061       if (D.getContext() == Declarator::FileContext) {
7062         ImpAddr = LangAS::opencl_global;
7063       } else {
7064         if (D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_static ||
7065             D.getDeclSpec().getStorageClassSpec() == DeclSpec::SCS_extern) {
7066           ImpAddr = LangAS::opencl_global;
7067         } else {
7068           ImpAddr = LangAS::opencl_private;
7069         }
7070       }
7071     }
7072   }
7073   T = State.getSema().Context.getAddrSpaceQualType(T, ImpAddr);
7074 }
7075 
7076 static void processTypeAttrs(TypeProcessingState &state, QualType &type,
7077                              TypeAttrLocation TAL, AttributeList *attrs) {
7078   // Scan through and apply attributes to this type where it makes sense.  Some
7079   // attributes (such as __address_space__, __vector_size__, etc) apply to the
7080   // type, but others can be present in the type specifiers even though they
7081   // apply to the decl.  Here we apply type attributes and ignore the rest.
7082 
7083   while (attrs) {
7084     AttributeList &attr = *attrs;
7085     attrs = attr.getNext(); // reset to the next here due to early loop continue
7086                             // stmts
7087 
7088     // Skip attributes that were marked to be invalid.
7089     if (attr.isInvalid())
7090       continue;
7091 
7092     if (attr.isCXX11Attribute()) {
7093       // [[gnu::...]] attributes are treated as declaration attributes, so may
7094       // not appertain to a DeclaratorChunk, even if we handle them as type
7095       // attributes.
7096       if (attr.getScopeName() && attr.getScopeName()->isStr("gnu")) {
7097         if (TAL == TAL_DeclChunk) {
7098           state.getSema().Diag(attr.getLoc(),
7099                                diag::warn_cxx11_gnu_attribute_on_type)
7100               << attr.getName();
7101           continue;
7102         }
7103       } else if (TAL != TAL_DeclChunk) {
7104         // Otherwise, only consider type processing for a C++11 attribute if
7105         // it's actually been applied to a type.
7106         continue;
7107       }
7108     }
7109 
7110     // If this is an attribute we can handle, do so now,
7111     // otherwise, add it to the FnAttrs list for rechaining.
7112     switch (attr.getKind()) {
7113     default:
7114       // A C++11 attribute on a declarator chunk must appertain to a type.
7115       if (attr.isCXX11Attribute() && TAL == TAL_DeclChunk) {
7116         state.getSema().Diag(attr.getLoc(), diag::err_attribute_not_type_attr)
7117           << attr.getName();
7118         attr.setUsedAsTypeAttr();
7119       }
7120       break;
7121 
7122     case AttributeList::UnknownAttribute:
7123       if (attr.isCXX11Attribute() && TAL == TAL_DeclChunk)
7124         state.getSema().Diag(attr.getLoc(),
7125                              diag::warn_unknown_attribute_ignored)
7126           << attr.getName();
7127       break;
7128 
7129     case AttributeList::IgnoredAttribute:
7130       break;
7131 
7132     case AttributeList::AT_MayAlias:
7133       // FIXME: This attribute needs to actually be handled, but if we ignore
7134       // it it breaks large amounts of Linux software.
7135       attr.setUsedAsTypeAttr();
7136       break;
7137     case AttributeList::AT_OpenCLPrivateAddressSpace:
7138     case AttributeList::AT_OpenCLGlobalAddressSpace:
7139     case AttributeList::AT_OpenCLLocalAddressSpace:
7140     case AttributeList::AT_OpenCLConstantAddressSpace:
7141     case AttributeList::AT_OpenCLGenericAddressSpace:
7142     case AttributeList::AT_AddressSpace:
7143       HandleAddressSpaceTypeAttribute(type, attr, state.getSema());
7144       attr.setUsedAsTypeAttr();
7145       break;
7146     OBJC_POINTER_TYPE_ATTRS_CASELIST:
7147       if (!handleObjCPointerTypeAttr(state, attr, type))
7148         distributeObjCPointerTypeAttr(state, attr, type);
7149       attr.setUsedAsTypeAttr();
7150       break;
7151     case AttributeList::AT_VectorSize:
7152       HandleVectorSizeAttr(type, attr, state.getSema());
7153       attr.setUsedAsTypeAttr();
7154       break;
7155     case AttributeList::AT_ExtVectorType:
7156       HandleExtVectorTypeAttr(type, attr, state.getSema());
7157       attr.setUsedAsTypeAttr();
7158       break;
7159     case AttributeList::AT_NeonVectorType:
7160       HandleNeonVectorTypeAttr(type, attr, state.getSema(),
7161                                VectorType::NeonVector);
7162       attr.setUsedAsTypeAttr();
7163       break;
7164     case AttributeList::AT_NeonPolyVectorType:
7165       HandleNeonVectorTypeAttr(type, attr, state.getSema(),
7166                                VectorType::NeonPolyVector);
7167       attr.setUsedAsTypeAttr();
7168       break;
7169     case AttributeList::AT_OpenCLAccess:
7170       HandleOpenCLAccessAttr(type, attr, state.getSema());
7171       attr.setUsedAsTypeAttr();
7172       break;
7173 
7174     MS_TYPE_ATTRS_CASELIST:
7175       if (!handleMSPointerTypeQualifierAttr(state, attr, type))
7176         attr.setUsedAsTypeAttr();
7177       break;
7178 
7179 
7180     NULLABILITY_TYPE_ATTRS_CASELIST:
7181       // Either add nullability here or try to distribute it.  We
7182       // don't want to distribute the nullability specifier past any
7183       // dependent type, because that complicates the user model.
7184       if (type->canHaveNullability() || type->isDependentType() ||
7185           type->isArrayType() ||
7186           !distributeNullabilityTypeAttr(state, type, attr)) {
7187         unsigned endIndex;
7188         if (TAL == TAL_DeclChunk)
7189           endIndex = state.getCurrentChunkIndex();
7190         else
7191           endIndex = state.getDeclarator().getNumTypeObjects();
7192         bool allowOnArrayType =
7193             state.getDeclarator().isPrototypeContext() &&
7194             !hasOuterPointerLikeChunk(state.getDeclarator(), endIndex);
7195         if (state.getSema().checkNullabilityTypeSpecifier(
7196               type,
7197               mapNullabilityAttrKind(attr.getKind()),
7198               attr.getLoc(),
7199               attr.isContextSensitiveKeywordAttribute(),
7200               allowOnArrayType)) {
7201           attr.setInvalid();
7202         }
7203 
7204         attr.setUsedAsTypeAttr();
7205       }
7206       break;
7207 
7208     case AttributeList::AT_ObjCKindOf:
7209       // '__kindof' must be part of the decl-specifiers.
7210       switch (TAL) {
7211       case TAL_DeclSpec:
7212         break;
7213 
7214       case TAL_DeclChunk:
7215       case TAL_DeclName:
7216         state.getSema().Diag(attr.getLoc(),
7217                              diag::err_objc_kindof_wrong_position)
7218           << FixItHint::CreateRemoval(attr.getLoc())
7219           << FixItHint::CreateInsertion(
7220                state.getDeclarator().getDeclSpec().getLocStart(), "__kindof ");
7221         break;
7222       }
7223 
7224       // Apply it regardless.
7225       if (state.getSema().checkObjCKindOfType(type, attr.getLoc()))
7226         attr.setInvalid();
7227       attr.setUsedAsTypeAttr();
7228       break;
7229 
7230     FUNCTION_TYPE_ATTRS_CASELIST:
7231       attr.setUsedAsTypeAttr();
7232 
7233       // Never process function type attributes as part of the
7234       // declaration-specifiers.
7235       if (TAL == TAL_DeclSpec)
7236         distributeFunctionTypeAttrFromDeclSpec(state, attr, type);
7237 
7238       // Otherwise, handle the possible delays.
7239       else if (!handleFunctionTypeAttr(state, attr, type))
7240         distributeFunctionTypeAttr(state, attr, type);
7241       break;
7242     }
7243   }
7244 
7245   if (!state.getSema().getLangOpts().OpenCL ||
7246       type.getAddressSpace() != LangAS::Default)
7247     return;
7248 
7249   deduceOpenCLImplicitAddrSpace(state, type, TAL);
7250 }
7251 
7252 void Sema::completeExprArrayBound(Expr *E) {
7253   if (DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(E->IgnoreParens())) {
7254     if (VarDecl *Var = dyn_cast<VarDecl>(DRE->getDecl())) {
7255       if (isTemplateInstantiation(Var->getTemplateSpecializationKind())) {
7256         SourceLocation PointOfInstantiation = E->getExprLoc();
7257 
7258         if (MemberSpecializationInfo *MSInfo =
7259                 Var->getMemberSpecializationInfo()) {
7260           // If we don't already have a point of instantiation, this is it.
7261           if (MSInfo->getPointOfInstantiation().isInvalid()) {
7262             MSInfo->setPointOfInstantiation(PointOfInstantiation);
7263 
7264             // This is a modification of an existing AST node. Notify
7265             // listeners.
7266             if (ASTMutationListener *L = getASTMutationListener())
7267               L->StaticDataMemberInstantiated(Var);
7268           }
7269         } else {
7270           VarTemplateSpecializationDecl *VarSpec =
7271               cast<VarTemplateSpecializationDecl>(Var);
7272           if (VarSpec->getPointOfInstantiation().isInvalid())
7273             VarSpec->setPointOfInstantiation(PointOfInstantiation);
7274         }
7275 
7276         InstantiateVariableDefinition(PointOfInstantiation, Var);
7277 
7278         // Update the type to the newly instantiated definition's type both
7279         // here and within the expression.
7280         if (VarDecl *Def = Var->getDefinition()) {
7281           DRE->setDecl(Def);
7282           QualType T = Def->getType();
7283           DRE->setType(T);
7284           // FIXME: Update the type on all intervening expressions.
7285           E->setType(T);
7286         }
7287 
7288         // We still go on to try to complete the type independently, as it
7289         // may also require instantiations or diagnostics if it remains
7290         // incomplete.
7291       }
7292     }
7293   }
7294 }
7295 
7296 /// \brief Ensure that the type of the given expression is complete.
7297 ///
7298 /// This routine checks whether the expression \p E has a complete type. If the
7299 /// expression refers to an instantiable construct, that instantiation is
7300 /// performed as needed to complete its type. Furthermore
7301 /// Sema::RequireCompleteType is called for the expression's type (or in the
7302 /// case of a reference type, the referred-to type).
7303 ///
7304 /// \param E The expression whose type is required to be complete.
7305 /// \param Diagnoser The object that will emit a diagnostic if the type is
7306 /// incomplete.
7307 ///
7308 /// \returns \c true if the type of \p E is incomplete and diagnosed, \c false
7309 /// otherwise.
7310 bool Sema::RequireCompleteExprType(Expr *E, TypeDiagnoser &Diagnoser) {
7311   QualType T = E->getType();
7312 
7313   // Incomplete array types may be completed by the initializer attached to
7314   // their definitions. For static data members of class templates and for
7315   // variable templates, we need to instantiate the definition to get this
7316   // initializer and complete the type.
7317   if (T->isIncompleteArrayType()) {
7318     completeExprArrayBound(E);
7319     T = E->getType();
7320   }
7321 
7322   // FIXME: Are there other cases which require instantiating something other
7323   // than the type to complete the type of an expression?
7324 
7325   return RequireCompleteType(E->getExprLoc(), T, Diagnoser);
7326 }
7327 
7328 bool Sema::RequireCompleteExprType(Expr *E, unsigned DiagID) {
7329   BoundTypeDiagnoser<> Diagnoser(DiagID);
7330   return RequireCompleteExprType(E, Diagnoser);
7331 }
7332 
7333 /// @brief Ensure that the type T is a complete type.
7334 ///
7335 /// This routine checks whether the type @p T is complete in any
7336 /// context where a complete type is required. If @p T is a complete
7337 /// type, returns false. If @p T is a class template specialization,
7338 /// this routine then attempts to perform class template
7339 /// instantiation. If instantiation fails, or if @p T is incomplete
7340 /// and cannot be completed, issues the diagnostic @p diag (giving it
7341 /// the type @p T) and returns true.
7342 ///
7343 /// @param Loc  The location in the source that the incomplete type
7344 /// diagnostic should refer to.
7345 ///
7346 /// @param T  The type that this routine is examining for completeness.
7347 ///
7348 /// @returns @c true if @p T is incomplete and a diagnostic was emitted,
7349 /// @c false otherwise.
7350 bool Sema::RequireCompleteType(SourceLocation Loc, QualType T,
7351                                TypeDiagnoser &Diagnoser) {
7352   if (RequireCompleteTypeImpl(Loc, T, &Diagnoser))
7353     return true;
7354   if (const TagType *Tag = T->getAs<TagType>()) {
7355     if (!Tag->getDecl()->isCompleteDefinitionRequired()) {
7356       Tag->getDecl()->setCompleteDefinitionRequired();
7357       Consumer.HandleTagDeclRequiredDefinition(Tag->getDecl());
7358     }
7359   }
7360   return false;
7361 }
7362 
7363 bool Sema::hasStructuralCompatLayout(Decl *D, Decl *Suggested) {
7364   llvm::DenseSet<std::pair<Decl *, Decl *>> NonEquivalentDecls;
7365   if (!Suggested)
7366     return false;
7367 
7368   // FIXME: Add a specific mode for C11 6.2.7/1 in StructuralEquivalenceContext
7369   // and isolate from other C++ specific checks.
7370   StructuralEquivalenceContext Ctx(
7371       D->getASTContext(), Suggested->getASTContext(), NonEquivalentDecls,
7372       false /*StrictTypeSpelling*/, true /*Complain*/,
7373       true /*ErrorOnTagTypeMismatch*/);
7374   return Ctx.IsStructurallyEquivalent(D, Suggested);
7375 }
7376 
7377 /// \brief Determine whether there is any declaration of \p D that was ever a
7378 ///        definition (perhaps before module merging) and is currently visible.
7379 /// \param D The definition of the entity.
7380 /// \param Suggested Filled in with the declaration that should be made visible
7381 ///        in order to provide a definition of this entity.
7382 /// \param OnlyNeedComplete If \c true, we only need the type to be complete,
7383 ///        not defined. This only matters for enums with a fixed underlying
7384 ///        type, since in all other cases, a type is complete if and only if it
7385 ///        is defined.
7386 bool Sema::hasVisibleDefinition(NamedDecl *D, NamedDecl **Suggested,
7387                                 bool OnlyNeedComplete) {
7388   // Easy case: if we don't have modules, all declarations are visible.
7389   if (!getLangOpts().Modules && !getLangOpts().ModulesLocalVisibility)
7390     return true;
7391 
7392   // If this definition was instantiated from a template, map back to the
7393   // pattern from which it was instantiated.
7394   if (isa<TagDecl>(D) && cast<TagDecl>(D)->isBeingDefined()) {
7395     // We're in the middle of defining it; this definition should be treated
7396     // as visible.
7397     return true;
7398   } else if (auto *RD = dyn_cast<CXXRecordDecl>(D)) {
7399     if (auto *Pattern = RD->getTemplateInstantiationPattern())
7400       RD = Pattern;
7401     D = RD->getDefinition();
7402   } else if (auto *ED = dyn_cast<EnumDecl>(D)) {
7403     if (auto *Pattern = ED->getTemplateInstantiationPattern())
7404       ED = Pattern;
7405     if (OnlyNeedComplete && ED->isFixed()) {
7406       // If the enum has a fixed underlying type, and we're only looking for a
7407       // complete type (not a definition), any visible declaration of it will
7408       // do.
7409       *Suggested = nullptr;
7410       for (auto *Redecl : ED->redecls()) {
7411         if (isVisible(Redecl))
7412           return true;
7413         if (Redecl->isThisDeclarationADefinition() ||
7414             (Redecl->isCanonicalDecl() && !*Suggested))
7415           *Suggested = Redecl;
7416       }
7417       return false;
7418     }
7419     D = ED->getDefinition();
7420   } else if (auto *FD = dyn_cast<FunctionDecl>(D)) {
7421     if (auto *Pattern = FD->getTemplateInstantiationPattern())
7422       FD = Pattern;
7423     D = FD->getDefinition();
7424   } else if (auto *VD = dyn_cast<VarDecl>(D)) {
7425     if (auto *Pattern = VD->getTemplateInstantiationPattern())
7426       VD = Pattern;
7427     D = VD->getDefinition();
7428   }
7429   assert(D && "missing definition for pattern of instantiated definition");
7430 
7431   *Suggested = D;
7432   if (isVisible(D))
7433     return true;
7434 
7435   // The external source may have additional definitions of this entity that are
7436   // visible, so complete the redeclaration chain now and ask again.
7437   if (auto *Source = Context.getExternalSource()) {
7438     Source->CompleteRedeclChain(D);
7439     return isVisible(D);
7440   }
7441 
7442   return false;
7443 }
7444 
7445 /// Locks in the inheritance model for the given class and all of its bases.
7446 static void assignInheritanceModel(Sema &S, CXXRecordDecl *RD) {
7447   RD = RD->getMostRecentDecl();
7448   if (!RD->hasAttr<MSInheritanceAttr>()) {
7449     MSInheritanceAttr::Spelling IM;
7450 
7451     switch (S.MSPointerToMemberRepresentationMethod) {
7452     case LangOptions::PPTMK_BestCase:
7453       IM = RD->calculateInheritanceModel();
7454       break;
7455     case LangOptions::PPTMK_FullGeneralitySingleInheritance:
7456       IM = MSInheritanceAttr::Keyword_single_inheritance;
7457       break;
7458     case LangOptions::PPTMK_FullGeneralityMultipleInheritance:
7459       IM = MSInheritanceAttr::Keyword_multiple_inheritance;
7460       break;
7461     case LangOptions::PPTMK_FullGeneralityVirtualInheritance:
7462       IM = MSInheritanceAttr::Keyword_unspecified_inheritance;
7463       break;
7464     }
7465 
7466     RD->addAttr(MSInheritanceAttr::CreateImplicit(
7467         S.getASTContext(), IM,
7468         /*BestCase=*/S.MSPointerToMemberRepresentationMethod ==
7469             LangOptions::PPTMK_BestCase,
7470         S.ImplicitMSInheritanceAttrLoc.isValid()
7471             ? S.ImplicitMSInheritanceAttrLoc
7472             : RD->getSourceRange()));
7473     S.Consumer.AssignInheritanceModel(RD);
7474   }
7475 }
7476 
7477 /// \brief The implementation of RequireCompleteType
7478 bool Sema::RequireCompleteTypeImpl(SourceLocation Loc, QualType T,
7479                                    TypeDiagnoser *Diagnoser) {
7480   // FIXME: Add this assertion to make sure we always get instantiation points.
7481   //  assert(!Loc.isInvalid() && "Invalid location in RequireCompleteType");
7482   // FIXME: Add this assertion to help us flush out problems with
7483   // checking for dependent types and type-dependent expressions.
7484   //
7485   //  assert(!T->isDependentType() &&
7486   //         "Can't ask whether a dependent type is complete");
7487 
7488   // We lock in the inheritance model once somebody has asked us to ensure
7489   // that a pointer-to-member type is complete.
7490   if (Context.getTargetInfo().getCXXABI().isMicrosoft()) {
7491     if (const MemberPointerType *MPTy = T->getAs<MemberPointerType>()) {
7492       if (!MPTy->getClass()->isDependentType()) {
7493         (void)isCompleteType(Loc, QualType(MPTy->getClass(), 0));
7494         assignInheritanceModel(*this, MPTy->getMostRecentCXXRecordDecl());
7495       }
7496     }
7497   }
7498 
7499   NamedDecl *Def = nullptr;
7500   bool Incomplete = T->isIncompleteType(&Def);
7501 
7502   // Check that any necessary explicit specializations are visible. For an
7503   // enum, we just need the declaration, so don't check this.
7504   if (Def && !isa<EnumDecl>(Def))
7505     checkSpecializationVisibility(Loc, Def);
7506 
7507   // If we have a complete type, we're done.
7508   if (!Incomplete) {
7509     // If we know about the definition but it is not visible, complain.
7510     NamedDecl *SuggestedDef = nullptr;
7511     if (Def &&
7512         !hasVisibleDefinition(Def, &SuggestedDef, /*OnlyNeedComplete*/true)) {
7513       // If the user is going to see an error here, recover by making the
7514       // definition visible.
7515       bool TreatAsComplete = Diagnoser && !isSFINAEContext();
7516       if (Diagnoser)
7517         diagnoseMissingImport(Loc, SuggestedDef, MissingImportKind::Definition,
7518                               /*Recover*/TreatAsComplete);
7519       return !TreatAsComplete;
7520     }
7521 
7522     return false;
7523   }
7524 
7525   const TagType *Tag = T->getAs<TagType>();
7526   const ObjCInterfaceType *IFace = T->getAs<ObjCInterfaceType>();
7527 
7528   // If there's an unimported definition of this type in a module (for
7529   // instance, because we forward declared it, then imported the definition),
7530   // import that definition now.
7531   //
7532   // FIXME: What about other cases where an import extends a redeclaration
7533   // chain for a declaration that can be accessed through a mechanism other
7534   // than name lookup (eg, referenced in a template, or a variable whose type
7535   // could be completed by the module)?
7536   //
7537   // FIXME: Should we map through to the base array element type before
7538   // checking for a tag type?
7539   if (Tag || IFace) {
7540     NamedDecl *D =
7541         Tag ? static_cast<NamedDecl *>(Tag->getDecl()) : IFace->getDecl();
7542 
7543     // Avoid diagnosing invalid decls as incomplete.
7544     if (D->isInvalidDecl())
7545       return true;
7546 
7547     // Give the external AST source a chance to complete the type.
7548     if (auto *Source = Context.getExternalSource()) {
7549       if (Tag) {
7550         TagDecl *TagD = Tag->getDecl();
7551         if (TagD->hasExternalLexicalStorage())
7552           Source->CompleteType(TagD);
7553       } else {
7554         ObjCInterfaceDecl *IFaceD = IFace->getDecl();
7555         if (IFaceD->hasExternalLexicalStorage())
7556           Source->CompleteType(IFace->getDecl());
7557       }
7558       // If the external source completed the type, go through the motions
7559       // again to ensure we're allowed to use the completed type.
7560       if (!T->isIncompleteType())
7561         return RequireCompleteTypeImpl(Loc, T, Diagnoser);
7562     }
7563   }
7564 
7565   // If we have a class template specialization or a class member of a
7566   // class template specialization, or an array with known size of such,
7567   // try to instantiate it.
7568   QualType MaybeTemplate = T;
7569   while (const ConstantArrayType *Array
7570            = Context.getAsConstantArrayType(MaybeTemplate))
7571     MaybeTemplate = Array->getElementType();
7572   if (const RecordType *Record = MaybeTemplate->getAs<RecordType>()) {
7573     bool Instantiated = false;
7574     bool Diagnosed = false;
7575     if (ClassTemplateSpecializationDecl *ClassTemplateSpec
7576           = dyn_cast<ClassTemplateSpecializationDecl>(Record->getDecl())) {
7577       if (ClassTemplateSpec->getSpecializationKind() == TSK_Undeclared) {
7578         Diagnosed = InstantiateClassTemplateSpecialization(
7579             Loc, ClassTemplateSpec, TSK_ImplicitInstantiation,
7580             /*Complain=*/Diagnoser);
7581         Instantiated = true;
7582       }
7583     } else if (CXXRecordDecl *Rec
7584                  = dyn_cast<CXXRecordDecl>(Record->getDecl())) {
7585       CXXRecordDecl *Pattern = Rec->getInstantiatedFromMemberClass();
7586       if (!Rec->isBeingDefined() && Pattern) {
7587         MemberSpecializationInfo *MSI = Rec->getMemberSpecializationInfo();
7588         assert(MSI && "Missing member specialization information?");
7589         // This record was instantiated from a class within a template.
7590         if (MSI->getTemplateSpecializationKind() !=
7591             TSK_ExplicitSpecialization) {
7592           Diagnosed = InstantiateClass(Loc, Rec, Pattern,
7593                                        getTemplateInstantiationArgs(Rec),
7594                                        TSK_ImplicitInstantiation,
7595                                        /*Complain=*/Diagnoser);
7596           Instantiated = true;
7597         }
7598       }
7599     }
7600 
7601     if (Instantiated) {
7602       // Instantiate* might have already complained that the template is not
7603       // defined, if we asked it to.
7604       if (Diagnoser && Diagnosed)
7605         return true;
7606       // If we instantiated a definition, check that it's usable, even if
7607       // instantiation produced an error, so that repeated calls to this
7608       // function give consistent answers.
7609       if (!T->isIncompleteType())
7610         return RequireCompleteTypeImpl(Loc, T, Diagnoser);
7611     }
7612   }
7613 
7614   // FIXME: If we didn't instantiate a definition because of an explicit
7615   // specialization declaration, check that it's visible.
7616 
7617   if (!Diagnoser)
7618     return true;
7619 
7620   Diagnoser->diagnose(*this, Loc, T);
7621 
7622   // If the type was a forward declaration of a class/struct/union
7623   // type, produce a note.
7624   if (Tag && !Tag->getDecl()->isInvalidDecl())
7625     Diag(Tag->getDecl()->getLocation(),
7626          Tag->isBeingDefined() ? diag::note_type_being_defined
7627                                : diag::note_forward_declaration)
7628       << QualType(Tag, 0);
7629 
7630   // If the Objective-C class was a forward declaration, produce a note.
7631   if (IFace && !IFace->getDecl()->isInvalidDecl())
7632     Diag(IFace->getDecl()->getLocation(), diag::note_forward_class);
7633 
7634   // If we have external information that we can use to suggest a fix,
7635   // produce a note.
7636   if (ExternalSource)
7637     ExternalSource->MaybeDiagnoseMissingCompleteType(Loc, T);
7638 
7639   return true;
7640 }
7641 
7642 bool Sema::RequireCompleteType(SourceLocation Loc, QualType T,
7643                                unsigned DiagID) {
7644   BoundTypeDiagnoser<> Diagnoser(DiagID);
7645   return RequireCompleteType(Loc, T, Diagnoser);
7646 }
7647 
7648 /// \brief Get diagnostic %select index for tag kind for
7649 /// literal type diagnostic message.
7650 /// WARNING: Indexes apply to particular diagnostics only!
7651 ///
7652 /// \returns diagnostic %select index.
7653 static unsigned getLiteralDiagFromTagKind(TagTypeKind Tag) {
7654   switch (Tag) {
7655   case TTK_Struct: return 0;
7656   case TTK_Interface: return 1;
7657   case TTK_Class:  return 2;
7658   default: llvm_unreachable("Invalid tag kind for literal type diagnostic!");
7659   }
7660 }
7661 
7662 /// @brief Ensure that the type T is a literal type.
7663 ///
7664 /// This routine checks whether the type @p T is a literal type. If @p T is an
7665 /// incomplete type, an attempt is made to complete it. If @p T is a literal
7666 /// type, or @p AllowIncompleteType is true and @p T is an incomplete type,
7667 /// returns false. Otherwise, this routine issues the diagnostic @p PD (giving
7668 /// it the type @p T), along with notes explaining why the type is not a
7669 /// literal type, and returns true.
7670 ///
7671 /// @param Loc  The location in the source that the non-literal type
7672 /// diagnostic should refer to.
7673 ///
7674 /// @param T  The type that this routine is examining for literalness.
7675 ///
7676 /// @param Diagnoser Emits a diagnostic if T is not a literal type.
7677 ///
7678 /// @returns @c true if @p T is not a literal type and a diagnostic was emitted,
7679 /// @c false otherwise.
7680 bool Sema::RequireLiteralType(SourceLocation Loc, QualType T,
7681                               TypeDiagnoser &Diagnoser) {
7682   assert(!T->isDependentType() && "type should not be dependent");
7683 
7684   QualType ElemType = Context.getBaseElementType(T);
7685   if ((isCompleteType(Loc, ElemType) || ElemType->isVoidType()) &&
7686       T->isLiteralType(Context))
7687     return false;
7688 
7689   Diagnoser.diagnose(*this, Loc, T);
7690 
7691   if (T->isVariableArrayType())
7692     return true;
7693 
7694   const RecordType *RT = ElemType->getAs<RecordType>();
7695   if (!RT)
7696     return true;
7697 
7698   const CXXRecordDecl *RD = cast<CXXRecordDecl>(RT->getDecl());
7699 
7700   // A partially-defined class type can't be a literal type, because a literal
7701   // class type must have a trivial destructor (which can't be checked until
7702   // the class definition is complete).
7703   if (RequireCompleteType(Loc, ElemType, diag::note_non_literal_incomplete, T))
7704     return true;
7705 
7706   // If the class has virtual base classes, then it's not an aggregate, and
7707   // cannot have any constexpr constructors or a trivial default constructor,
7708   // so is non-literal. This is better to diagnose than the resulting absence
7709   // of constexpr constructors.
7710   if (RD->getNumVBases()) {
7711     Diag(RD->getLocation(), diag::note_non_literal_virtual_base)
7712       << getLiteralDiagFromTagKind(RD->getTagKind()) << RD->getNumVBases();
7713     for (const auto &I : RD->vbases())
7714       Diag(I.getLocStart(), diag::note_constexpr_virtual_base_here)
7715           << I.getSourceRange();
7716   } else if (!RD->isAggregate() && !RD->hasConstexprNonCopyMoveConstructor() &&
7717              !RD->hasTrivialDefaultConstructor()) {
7718     Diag(RD->getLocation(), diag::note_non_literal_no_constexpr_ctors) << RD;
7719   } else if (RD->hasNonLiteralTypeFieldsOrBases()) {
7720     for (const auto &I : RD->bases()) {
7721       if (!I.getType()->isLiteralType(Context)) {
7722         Diag(I.getLocStart(),
7723              diag::note_non_literal_base_class)
7724           << RD << I.getType() << I.getSourceRange();
7725         return true;
7726       }
7727     }
7728     for (const auto *I : RD->fields()) {
7729       if (!I->getType()->isLiteralType(Context) ||
7730           I->getType().isVolatileQualified()) {
7731         Diag(I->getLocation(), diag::note_non_literal_field)
7732           << RD << I << I->getType()
7733           << I->getType().isVolatileQualified();
7734         return true;
7735       }
7736     }
7737   } else if (!RD->hasTrivialDestructor()) {
7738     // All fields and bases are of literal types, so have trivial destructors.
7739     // If this class's destructor is non-trivial it must be user-declared.
7740     CXXDestructorDecl *Dtor = RD->getDestructor();
7741     assert(Dtor && "class has literal fields and bases but no dtor?");
7742     if (!Dtor)
7743       return true;
7744 
7745     Diag(Dtor->getLocation(), Dtor->isUserProvided() ?
7746          diag::note_non_literal_user_provided_dtor :
7747          diag::note_non_literal_nontrivial_dtor) << RD;
7748     if (!Dtor->isUserProvided())
7749       SpecialMemberIsTrivial(Dtor, CXXDestructor, /*Diagnose*/true);
7750   }
7751 
7752   return true;
7753 }
7754 
7755 bool Sema::RequireLiteralType(SourceLocation Loc, QualType T, unsigned DiagID) {
7756   BoundTypeDiagnoser<> Diagnoser(DiagID);
7757   return RequireLiteralType(Loc, T, Diagnoser);
7758 }
7759 
7760 /// \brief Retrieve a version of the type 'T' that is elaborated by Keyword
7761 /// and qualified by the nested-name-specifier contained in SS.
7762 QualType Sema::getElaboratedType(ElaboratedTypeKeyword Keyword,
7763                                  const CXXScopeSpec &SS, QualType T) {
7764   if (T.isNull())
7765     return T;
7766   NestedNameSpecifier *NNS;
7767   if (SS.isValid())
7768     NNS = SS.getScopeRep();
7769   else {
7770     if (Keyword == ETK_None)
7771       return T;
7772     NNS = nullptr;
7773   }
7774   return Context.getElaboratedType(Keyword, NNS, T);
7775 }
7776 
7777 QualType Sema::BuildTypeofExprType(Expr *E, SourceLocation Loc) {
7778   ExprResult ER = CheckPlaceholderExpr(E);
7779   if (ER.isInvalid()) return QualType();
7780   E = ER.get();
7781 
7782   if (!getLangOpts().CPlusPlus && E->refersToBitField())
7783     Diag(E->getExprLoc(), diag::err_sizeof_alignof_typeof_bitfield) << 2;
7784 
7785   if (!E->isTypeDependent()) {
7786     QualType T = E->getType();
7787     if (const TagType *TT = T->getAs<TagType>())
7788       DiagnoseUseOfDecl(TT->getDecl(), E->getExprLoc());
7789   }
7790   return Context.getTypeOfExprType(E);
7791 }
7792 
7793 /// getDecltypeForExpr - Given an expr, will return the decltype for
7794 /// that expression, according to the rules in C++11
7795 /// [dcl.type.simple]p4 and C++11 [expr.lambda.prim]p18.
7796 static QualType getDecltypeForExpr(Sema &S, Expr *E) {
7797   if (E->isTypeDependent())
7798     return S.Context.DependentTy;
7799 
7800   // C++11 [dcl.type.simple]p4:
7801   //   The type denoted by decltype(e) is defined as follows:
7802   //
7803   //     - if e is an unparenthesized id-expression or an unparenthesized class
7804   //       member access (5.2.5), decltype(e) is the type of the entity named
7805   //       by e. If there is no such entity, or if e names a set of overloaded
7806   //       functions, the program is ill-formed;
7807   //
7808   // We apply the same rules for Objective-C ivar and property references.
7809   if (const DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(E)) {
7810     if (const ValueDecl *VD = dyn_cast<ValueDecl>(DRE->getDecl()))
7811       return VD->getType();
7812   } else if (const MemberExpr *ME = dyn_cast<MemberExpr>(E)) {
7813     if (const FieldDecl *FD = dyn_cast<FieldDecl>(ME->getMemberDecl()))
7814       return FD->getType();
7815   } else if (const ObjCIvarRefExpr *IR = dyn_cast<ObjCIvarRefExpr>(E)) {
7816     return IR->getDecl()->getType();
7817   } else if (const ObjCPropertyRefExpr *PR = dyn_cast<ObjCPropertyRefExpr>(E)) {
7818     if (PR->isExplicitProperty())
7819       return PR->getExplicitProperty()->getType();
7820   } else if (auto *PE = dyn_cast<PredefinedExpr>(E)) {
7821     return PE->getType();
7822   }
7823 
7824   // C++11 [expr.lambda.prim]p18:
7825   //   Every occurrence of decltype((x)) where x is a possibly
7826   //   parenthesized id-expression that names an entity of automatic
7827   //   storage duration is treated as if x were transformed into an
7828   //   access to a corresponding data member of the closure type that
7829   //   would have been declared if x were an odr-use of the denoted
7830   //   entity.
7831   using namespace sema;
7832   if (S.getCurLambda()) {
7833     if (isa<ParenExpr>(E)) {
7834       if (DeclRefExpr *DRE = dyn_cast<DeclRefExpr>(E->IgnoreParens())) {
7835         if (VarDecl *Var = dyn_cast<VarDecl>(DRE->getDecl())) {
7836           QualType T = S.getCapturedDeclRefType(Var, DRE->getLocation());
7837           if (!T.isNull())
7838             return S.Context.getLValueReferenceType(T);
7839         }
7840       }
7841     }
7842   }
7843 
7844 
7845   // C++11 [dcl.type.simple]p4:
7846   //   [...]
7847   QualType T = E->getType();
7848   switch (E->getValueKind()) {
7849   //     - otherwise, if e is an xvalue, decltype(e) is T&&, where T is the
7850   //       type of e;
7851   case VK_XValue: T = S.Context.getRValueReferenceType(T); break;
7852   //     - otherwise, if e is an lvalue, decltype(e) is T&, where T is the
7853   //       type of e;
7854   case VK_LValue: T = S.Context.getLValueReferenceType(T); break;
7855   //  - otherwise, decltype(e) is the type of e.
7856   case VK_RValue: break;
7857   }
7858 
7859   return T;
7860 }
7861 
7862 QualType Sema::BuildDecltypeType(Expr *E, SourceLocation Loc,
7863                                  bool AsUnevaluated) {
7864   ExprResult ER = CheckPlaceholderExpr(E);
7865   if (ER.isInvalid()) return QualType();
7866   E = ER.get();
7867 
7868   if (AsUnevaluated && CodeSynthesisContexts.empty() &&
7869       E->HasSideEffects(Context, false)) {
7870     // The expression operand for decltype is in an unevaluated expression
7871     // context, so side effects could result in unintended consequences.
7872     Diag(E->getExprLoc(), diag::warn_side_effects_unevaluated_context);
7873   }
7874 
7875   return Context.getDecltypeType(E, getDecltypeForExpr(*this, E));
7876 }
7877 
7878 QualType Sema::BuildUnaryTransformType(QualType BaseType,
7879                                        UnaryTransformType::UTTKind UKind,
7880                                        SourceLocation Loc) {
7881   switch (UKind) {
7882   case UnaryTransformType::EnumUnderlyingType:
7883     if (!BaseType->isDependentType() && !BaseType->isEnumeralType()) {
7884       Diag(Loc, diag::err_only_enums_have_underlying_types);
7885       return QualType();
7886     } else {
7887       QualType Underlying = BaseType;
7888       if (!BaseType->isDependentType()) {
7889         // The enum could be incomplete if we're parsing its definition or
7890         // recovering from an error.
7891         NamedDecl *FwdDecl = nullptr;
7892         if (BaseType->isIncompleteType(&FwdDecl)) {
7893           Diag(Loc, diag::err_underlying_type_of_incomplete_enum) << BaseType;
7894           Diag(FwdDecl->getLocation(), diag::note_forward_declaration) << FwdDecl;
7895           return QualType();
7896         }
7897 
7898         EnumDecl *ED = BaseType->getAs<EnumType>()->getDecl();
7899         assert(ED && "EnumType has no EnumDecl");
7900 
7901         DiagnoseUseOfDecl(ED, Loc);
7902 
7903         Underlying = ED->getIntegerType();
7904         assert(!Underlying.isNull());
7905       }
7906       return Context.getUnaryTransformType(BaseType, Underlying,
7907                                         UnaryTransformType::EnumUnderlyingType);
7908     }
7909   }
7910   llvm_unreachable("unknown unary transform type");
7911 }
7912 
7913 QualType Sema::BuildAtomicType(QualType T, SourceLocation Loc) {
7914   if (!T->isDependentType()) {
7915     // FIXME: It isn't entirely clear whether incomplete atomic types
7916     // are allowed or not; for simplicity, ban them for the moment.
7917     if (RequireCompleteType(Loc, T, diag::err_atomic_specifier_bad_type, 0))
7918       return QualType();
7919 
7920     int DisallowedKind = -1;
7921     if (T->isArrayType())
7922       DisallowedKind = 1;
7923     else if (T->isFunctionType())
7924       DisallowedKind = 2;
7925     else if (T->isReferenceType())
7926       DisallowedKind = 3;
7927     else if (T->isAtomicType())
7928       DisallowedKind = 4;
7929     else if (T.hasQualifiers())
7930       DisallowedKind = 5;
7931     else if (!T.isTriviallyCopyableType(Context))
7932       // Some other non-trivially-copyable type (probably a C++ class)
7933       DisallowedKind = 6;
7934 
7935     if (DisallowedKind != -1) {
7936       Diag(Loc, diag::err_atomic_specifier_bad_type) << DisallowedKind << T;
7937       return QualType();
7938     }
7939 
7940     // FIXME: Do we need any handling for ARC here?
7941   }
7942 
7943   // Build the pointer type.
7944   return Context.getAtomicType(T);
7945 }
7946