1*f57f90dfSDevin Coughlin //=== CXXSelfAssignmentChecker.cpp -----------------------------*- C++ -*--===// 2*f57f90dfSDevin Coughlin // 3*f57f90dfSDevin Coughlin // The LLVM Compiler Infrastructure 4*f57f90dfSDevin Coughlin // 5*f57f90dfSDevin Coughlin // This file is distributed under the University of Illinois Open Source 6*f57f90dfSDevin Coughlin // License. See LICENSE.TXT for details. 7*f57f90dfSDevin Coughlin // 8*f57f90dfSDevin Coughlin //===----------------------------------------------------------------------===// 9*f57f90dfSDevin Coughlin // 10*f57f90dfSDevin Coughlin // This file defines CXXSelfAssignmentChecker, which tests all custom defined 11*f57f90dfSDevin Coughlin // copy and move assignment operators for the case of self assignment, thus 12*f57f90dfSDevin Coughlin // where the parameter refers to the same location where the this pointer 13*f57f90dfSDevin Coughlin // points to. The checker itself does not do any checks at all, but it 14*f57f90dfSDevin Coughlin // causes the analyzer to check every copy and move assignment operator twice: 15*f57f90dfSDevin Coughlin // once for when 'this' aliases with the parameter and once for when it may not. 16*f57f90dfSDevin Coughlin // It is the task of the other enabled checkers to find the bugs in these two 17*f57f90dfSDevin Coughlin // different cases. 18*f57f90dfSDevin Coughlin // 19*f57f90dfSDevin Coughlin //===----------------------------------------------------------------------===// 20*f57f90dfSDevin Coughlin 21*f57f90dfSDevin Coughlin #include "ClangSACheckers.h" 22*f57f90dfSDevin Coughlin #include "clang/StaticAnalyzer/Core/Checker.h" 23*f57f90dfSDevin Coughlin #include "clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h" 24*f57f90dfSDevin Coughlin 25*f57f90dfSDevin Coughlin using namespace clang; 26*f57f90dfSDevin Coughlin using namespace ento; 27*f57f90dfSDevin Coughlin 28*f57f90dfSDevin Coughlin namespace { 29*f57f90dfSDevin Coughlin 30*f57f90dfSDevin Coughlin class CXXSelfAssignmentChecker : public Checker<check::BeginFunction> { 31*f57f90dfSDevin Coughlin public: 32*f57f90dfSDevin Coughlin CXXSelfAssignmentChecker(); 33*f57f90dfSDevin Coughlin void checkBeginFunction(CheckerContext &C) const; 34*f57f90dfSDevin Coughlin }; 35*f57f90dfSDevin Coughlin } 36*f57f90dfSDevin Coughlin 37*f57f90dfSDevin Coughlin CXXSelfAssignmentChecker::CXXSelfAssignmentChecker() {} 38*f57f90dfSDevin Coughlin 39*f57f90dfSDevin Coughlin void CXXSelfAssignmentChecker::checkBeginFunction(CheckerContext &C) const { 40*f57f90dfSDevin Coughlin if (!C.inTopFrame()) 41*f57f90dfSDevin Coughlin return; 42*f57f90dfSDevin Coughlin const auto *LCtx = C.getLocationContext(); 43*f57f90dfSDevin Coughlin const auto *MD = dyn_cast<CXXMethodDecl>(LCtx->getDecl()); 44*f57f90dfSDevin Coughlin if (!MD) 45*f57f90dfSDevin Coughlin return; 46*f57f90dfSDevin Coughlin if (!MD->isCopyAssignmentOperator() && !MD->isMoveAssignmentOperator()) 47*f57f90dfSDevin Coughlin return; 48*f57f90dfSDevin Coughlin auto &State = C.getState(); 49*f57f90dfSDevin Coughlin auto &SVB = C.getSValBuilder(); 50*f57f90dfSDevin Coughlin auto ThisVal = 51*f57f90dfSDevin Coughlin State->getSVal(SVB.getCXXThis(MD, LCtx->getCurrentStackFrame())); 52*f57f90dfSDevin Coughlin auto Param = SVB.makeLoc(State->getRegion(MD->getParamDecl(0), LCtx)); 53*f57f90dfSDevin Coughlin auto ParamVal = State->getSVal(Param); 54*f57f90dfSDevin Coughlin ProgramStateRef SelfAssignState = State->bindLoc(Param, ThisVal); 55*f57f90dfSDevin Coughlin C.addTransition(SelfAssignState); 56*f57f90dfSDevin Coughlin ProgramStateRef NonSelfAssignState = State->bindLoc(Param, ParamVal); 57*f57f90dfSDevin Coughlin C.addTransition(NonSelfAssignState); 58*f57f90dfSDevin Coughlin } 59*f57f90dfSDevin Coughlin 60*f57f90dfSDevin Coughlin void ento::registerCXXSelfAssignmentChecker(CheckerManager &Mgr) { 61*f57f90dfSDevin Coughlin Mgr.registerChecker<CXXSelfAssignmentChecker>(); 62*f57f90dfSDevin Coughlin } 63