| //===-- ReachableCode.cpp - Code Reachability Analysis --------------------===// |
| // |
| // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. |
| // See https://llvm.org/LICENSE.txt for license information. |
| // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception |
| // |
| //===----------------------------------------------------------------------===// |
| // |
| // This file implements a flow-sensitive, path-insensitive analysis of |
| // determining reachable blocks within a CFG. |
| // |
| //===----------------------------------------------------------------------===// |
| |
| #include "clang/Analysis/Analyses/ReachableCode.h" |
| #include "clang/AST/Expr.h" |
| #include "clang/AST/ExprCXX.h" |
| #include "clang/AST/ExprObjC.h" |
| #include "clang/AST/ParentMap.h" |
| #include "clang/AST/StmtCXX.h" |
| #include "clang/Analysis/AnalysisDeclContext.h" |
| #include "clang/Analysis/CFG.h" |
| #include "clang/Basic/SourceManager.h" |
| #include "clang/Lex/Preprocessor.h" |
| #include "llvm/ADT/BitVector.h" |
| #include "llvm/ADT/SmallVector.h" |
| |
| using namespace clang; |
| |
| //===----------------------------------------------------------------------===// |
| // Core Reachability Analysis routines. |
| //===----------------------------------------------------------------------===// |
| |
| static bool isEnumConstant(const Expr *Ex) { |
| const DeclRefExpr *DR = dyn_cast<DeclRefExpr>(Ex); |
| if (!DR) |
| return false; |
| return isa<EnumConstantDecl>(DR->getDecl()); |
| } |
| |
| static bool isTrivialExpression(const Expr *Ex) { |
| Ex = Ex->IgnoreParenCasts(); |
| return isa<IntegerLiteral>(Ex) || isa<StringLiteral>(Ex) || |
| isa<CXXBoolLiteralExpr>(Ex) || isa<ObjCBoolLiteralExpr>(Ex) || |
| isa<CharacterLiteral>(Ex) || |
| isEnumConstant(Ex); |
| } |
| |
| static bool isTrivialDoWhile(const CFGBlock *B, const Stmt *S) { |
| // Check if the block ends with a do...while() and see if 'S' is the |
| // condition. |
| if (const Stmt *Term = B->getTerminatorStmt()) { |
| if (const DoStmt *DS = dyn_cast<DoStmt>(Term)) { |
| const Expr *Cond = DS->getCond()->IgnoreParenCasts(); |
| return Cond == S && isTrivialExpression(Cond); |
| } |
| } |
| return false; |
| } |
| |
| static bool isBuiltinUnreachable(const Stmt *S) { |
| if (const auto *DRE = dyn_cast<DeclRefExpr>(S)) |
| if (const auto *FDecl = dyn_cast<FunctionDecl>(DRE->getDecl())) |
| return FDecl->getIdentifier() && |
| FDecl->getBuiltinID() == Builtin::BI__builtin_unreachable; |
| return false; |
| } |
| |
| static bool isBuiltinAssumeFalse(const CFGBlock *B, const Stmt *S, |
| ASTContext &C) { |
| if (B->empty()) { |
| // Happens if S is B's terminator and B contains nothing else |
| // (e.g. a CFGBlock containing only a goto). |
| return false; |
| } |
| if (Optional<CFGStmt> CS = B->back().getAs<CFGStmt>()) { |
| if (const auto *CE = dyn_cast<CallExpr>(CS->getStmt())) { |
| return CE->getCallee()->IgnoreCasts() == S && CE->isBuiltinAssumeFalse(C); |
| } |
| } |
| return false; |
| } |
| |
| static bool isDeadReturn(const CFGBlock *B, const Stmt *S) { |
| // Look to see if the current control flow ends with a 'return', and see if |
| // 'S' is a substatement. The 'return' may not be the last element in the |
| // block, or may be in a subsequent block because of destructors. |
| const CFGBlock *Current = B; |
| while (true) { |
| for (CFGBlock::const_reverse_iterator I = Current->rbegin(), |
| E = Current->rend(); |
| I != E; ++I) { |
| if (Optional<CFGStmt> CS = I->getAs<CFGStmt>()) { |
| if (const ReturnStmt *RS = dyn_cast<ReturnStmt>(CS->getStmt())) { |
| if (RS == S) |
| return true; |
| if (const Expr *RE = RS->getRetValue()) { |
| RE = RE->IgnoreParenCasts(); |
| if (RE == S) |
| return true; |
| ParentMap PM(const_cast<Expr *>(RE)); |
| // If 'S' is in the ParentMap, it is a subexpression of |
| // the return statement. |
| return PM.getParent(S); |
| } |
| } |
| break; |
| } |
| } |
| // Note also that we are restricting the search for the return statement |
| // to stop at control-flow; only part of a return statement may be dead, |
| // without the whole return statement being dead. |
| if (Current->getTerminator().isTemporaryDtorsBranch()) { |
| // Temporary destructors have a predictable control flow, thus we want to |
| // look into the next block for the return statement. |
| // We look into the false branch, as we know the true branch only contains |
| // the call to the destructor. |
| assert(Current->succ_size() == 2); |
| Current = *(Current->succ_begin() + 1); |
| } else if (!Current->getTerminatorStmt() && Current->succ_size() == 1) { |
| // If there is only one successor, we're not dealing with outgoing control |
| // flow. Thus, look into the next block. |
| Current = *Current->succ_begin(); |
| if (Current->pred_size() > 1) { |
| // If there is more than one predecessor, we're dealing with incoming |
| // control flow - if the return statement is in that block, it might |
| // well be reachable via a different control flow, thus it's not dead. |
| return false; |
| } |
| } else { |
| // We hit control flow or a dead end. Stop searching. |
| return false; |
| } |
| } |
| llvm_unreachable("Broke out of infinite loop."); |
| } |
| |
| static SourceLocation getTopMostMacro(SourceLocation Loc, SourceManager &SM) { |
| assert(Loc.isMacroID()); |
| SourceLocation Last; |
| while (Loc.isMacroID()) { |
| Last = Loc; |
| Loc = SM.getImmediateMacroCallerLoc(Loc); |
| } |
| return Last; |
| } |
| |
| /// Returns true if the statement is expanded from a configuration macro. |
| static bool isExpandedFromConfigurationMacro(const Stmt *S, |
| Preprocessor &PP, |
| bool IgnoreYES_NO = false) { |
| // FIXME: This is not very precise. Here we just check to see if the |
| // value comes from a macro, but we can do much better. This is likely |
| // to be over conservative. This logic is factored into a separate function |
| // so that we can refine it later. |
| SourceLocation L = S->getBeginLoc(); |
| if (L.isMacroID()) { |
| SourceManager &SM = PP.getSourceManager(); |
| if (IgnoreYES_NO) { |
| // The Objective-C constant 'YES' and 'NO' |
| // are defined as macros. Do not treat them |
| // as configuration values. |
| SourceLocation TopL = getTopMostMacro(L, SM); |
| StringRef MacroName = PP.getImmediateMacroName(TopL); |
| if (MacroName == "YES" || MacroName == "NO") |
| return false; |
| } else if (!PP.getLangOpts().CPlusPlus) { |
| // Do not treat C 'false' and 'true' macros as configuration values. |
| SourceLocation TopL = getTopMostMacro(L, SM); |
| StringRef MacroName = PP.getImmediateMacroName(TopL); |
| if (MacroName == "false" || MacroName == "true") |
| return false; |
| } |
| return true; |
| } |
| return false; |
| } |
| |
| static bool isConfigurationValue(const ValueDecl *D, Preprocessor &PP); |
| |
| /// Returns true if the statement represents a configuration value. |
| /// |
| /// A configuration value is something usually determined at compile-time |
| /// to conditionally always execute some branch. Such guards are for |
| /// "sometimes unreachable" code. Such code is usually not interesting |
| /// to report as unreachable, and may mask truly unreachable code within |
| /// those blocks. |
| static bool isConfigurationValue(const Stmt *S, |
| Preprocessor &PP, |
| SourceRange *SilenceableCondVal = nullptr, |
| bool IncludeIntegers = true, |
| bool WrappedInParens = false) { |
| if (!S) |
| return false; |
| |
| if (const auto *Ex = dyn_cast<Expr>(S)) |
| S = Ex->IgnoreImplicit(); |
| |
| if (const auto *Ex = dyn_cast<Expr>(S)) |
| S = Ex->IgnoreCasts(); |
| |
| // Special case looking for the sigil '()' around an integer literal. |
| if (const ParenExpr *PE = dyn_cast<ParenExpr>(S)) |
| if (!PE->getBeginLoc().isMacroID()) |
| return isConfigurationValue(PE->getSubExpr(), PP, SilenceableCondVal, |
| IncludeIntegers, true); |
| |
| if (const Expr *Ex = dyn_cast<Expr>(S)) |
| S = Ex->IgnoreCasts(); |
| |
| bool IgnoreYES_NO = false; |
| |
| switch (S->getStmtClass()) { |
| case Stmt::CallExprClass: { |
| const FunctionDecl *Callee = |
| dyn_cast_or_null<FunctionDecl>(cast<CallExpr>(S)->getCalleeDecl()); |
| return Callee ? Callee->isConstexpr() : false; |
| } |
| case Stmt::DeclRefExprClass: |
| return isConfigurationValue(cast<DeclRefExpr>(S)->getDecl(), PP); |
| case Stmt::ObjCBoolLiteralExprClass: |
| IgnoreYES_NO = true; |
| LLVM_FALLTHROUGH; |
| case Stmt::CXXBoolLiteralExprClass: |
| case Stmt::IntegerLiteralClass: { |
| const Expr *E = cast<Expr>(S); |
| if (IncludeIntegers) { |
| if (SilenceableCondVal && !SilenceableCondVal->getBegin().isValid()) |
| *SilenceableCondVal = E->getSourceRange(); |
| return WrappedInParens || isExpandedFromConfigurationMacro(E, PP, IgnoreYES_NO); |
| } |
| return false; |
| } |
| case Stmt::MemberExprClass: |
| return isConfigurationValue(cast<MemberExpr>(S)->getMemberDecl(), PP); |
| case Stmt::UnaryExprOrTypeTraitExprClass: |
| return true; |
| case Stmt::BinaryOperatorClass: { |
| const BinaryOperator *B = cast<BinaryOperator>(S); |
| // Only include raw integers (not enums) as configuration |
| // values if they are used in a logical or comparison operator |
| // (not arithmetic). |
| IncludeIntegers &= (B->isLogicalOp() || B->isComparisonOp()); |
| return isConfigurationValue(B->getLHS(), PP, SilenceableCondVal, |
| IncludeIntegers) || |
| isConfigurationValue(B->getRHS(), PP, SilenceableCondVal, |
| IncludeIntegers); |
| } |
| case Stmt::UnaryOperatorClass: { |
| const UnaryOperator *UO = cast<UnaryOperator>(S); |
| if (UO->getOpcode() != UO_LNot && UO->getOpcode() != UO_Minus) |
| return false; |
| bool SilenceableCondValNotSet = |
| SilenceableCondVal && SilenceableCondVal->getBegin().isInvalid(); |
| bool IsSubExprConfigValue = |
| isConfigurationValue(UO->getSubExpr(), PP, SilenceableCondVal, |
| IncludeIntegers, WrappedInParens); |
| // Update the silenceable condition value source range only if the range |
| // was set directly by the child expression. |
| if (SilenceableCondValNotSet && |
| SilenceableCondVal->getBegin().isValid() && |
| *SilenceableCondVal == |
| UO->getSubExpr()->IgnoreCasts()->getSourceRange()) |
| *SilenceableCondVal = UO->getSourceRange(); |
| return IsSubExprConfigValue; |
| } |
| default: |
| return false; |
| } |
| } |
| |
| static bool isConfigurationValue(const ValueDecl *D, Preprocessor &PP) { |
| if (const EnumConstantDecl *ED = dyn_cast<EnumConstantDecl>(D)) |
| return isConfigurationValue(ED->getInitExpr(), PP); |
| if (const VarDecl *VD = dyn_cast<VarDecl>(D)) { |
| // As a heuristic, treat globals as configuration values. Note |
| // that we only will get here if Sema evaluated this |
| // condition to a constant expression, which means the global |
| // had to be declared in a way to be a truly constant value. |
| // We could generalize this to local variables, but it isn't |
| // clear if those truly represent configuration values that |
| // gate unreachable code. |
| if (!VD->hasLocalStorage()) |
| return true; |
| |
| // As a heuristic, locals that have been marked 'const' explicitly |
| // can be treated as configuration values as well. |
| return VD->getType().isLocalConstQualified(); |
| } |
| return false; |
| } |
| |
| /// Returns true if we should always explore all successors of a block. |
| static bool shouldTreatSuccessorsAsReachable(const CFGBlock *B, |
| Preprocessor &PP) { |
| if (const Stmt *Term = B->getTerminatorStmt()) { |
| if (isa<SwitchStmt>(Term)) |
| return true; |
| // Specially handle '||' and '&&'. |
| if (isa<BinaryOperator>(Term)) { |
| return isConfigurationValue(Term, PP); |
| } |
| } |
| |
| const Stmt *Cond = B->getTerminatorCondition(/* stripParens */ false); |
| return isConfigurationValue(Cond, PP); |
| } |
| |
| static unsigned scanFromBlock(const CFGBlock *Start, |
| llvm::BitVector &Reachable, |
| Preprocessor *PP, |
| bool IncludeSometimesUnreachableEdges) { |
| unsigned count = 0; |
| |
| // Prep work queue |
| SmallVector<const CFGBlock*, 32> WL; |
| |
| // The entry block may have already been marked reachable |
| // by the caller. |
| if (!Reachable[Start->getBlockID()]) { |
| ++count; |
| Reachable[Start->getBlockID()] = true; |
| } |
| |
| WL.push_back(Start); |
| |
| // Find the reachable blocks from 'Start'. |
| while (!WL.empty()) { |
| const CFGBlock *item = WL.pop_back_val(); |
| |
| // There are cases where we want to treat all successors as reachable. |
| // The idea is that some "sometimes unreachable" code is not interesting, |
| // and that we should forge ahead and explore those branches anyway. |
| // This allows us to potentially uncover some "always unreachable" code |
| // within the "sometimes unreachable" code. |
| // Look at the successors and mark then reachable. |
| Optional<bool> TreatAllSuccessorsAsReachable; |
| if (!IncludeSometimesUnreachableEdges) |
| TreatAllSuccessorsAsReachable = false; |
| |
| for (CFGBlock::const_succ_iterator I = item->succ_begin(), |
| E = item->succ_end(); I != E; ++I) { |
| const CFGBlock *B = *I; |
| if (!B) do { |
| const CFGBlock *UB = I->getPossiblyUnreachableBlock(); |
| if (!UB) |
| break; |
| |
| if (!TreatAllSuccessorsAsReachable.hasValue()) { |
| assert(PP); |
| TreatAllSuccessorsAsReachable = |
| shouldTreatSuccessorsAsReachable(item, *PP); |
| } |
| |
| if (TreatAllSuccessorsAsReachable.getValue()) { |
| B = UB; |
| break; |
| } |
| } |
| while (false); |
| |
| if (B) { |
| unsigned blockID = B->getBlockID(); |
| if (!Reachable[blockID]) { |
| Reachable.set(blockID); |
| WL.push_back(B); |
| ++count; |
| } |
| } |
| } |
| } |
| return count; |
| } |
| |
| static unsigned scanMaybeReachableFromBlock(const CFGBlock *Start, |
| Preprocessor &PP, |
| llvm::BitVector &Reachable) { |
| return scanFromBlock(Start, Reachable, &PP, true); |
| } |
| |
| //===----------------------------------------------------------------------===// |
| // Dead Code Scanner. |
| //===----------------------------------------------------------------------===// |
| |
| namespace { |
| class DeadCodeScan { |
| llvm::BitVector Visited; |
| llvm::BitVector &Reachable; |
| SmallVector<const CFGBlock *, 10> WorkList; |
| Preprocessor &PP; |
| ASTContext &C; |
| |
| typedef SmallVector<std::pair<const CFGBlock *, const Stmt *>, 12> |
| DeferredLocsTy; |
| |
| DeferredLocsTy DeferredLocs; |
| |
| public: |
| DeadCodeScan(llvm::BitVector &reachable, Preprocessor &PP, ASTContext &C) |
| : Visited(reachable.size()), |
| Reachable(reachable), |
| PP(PP), C(C) {} |
| |
| void enqueue(const CFGBlock *block); |
| unsigned scanBackwards(const CFGBlock *Start, |
| clang::reachable_code::Callback &CB); |
| |
| bool isDeadCodeRoot(const CFGBlock *Block); |
| |
| const Stmt *findDeadCode(const CFGBlock *Block); |
| |
| void reportDeadCode(const CFGBlock *B, |
| const Stmt *S, |
| clang::reachable_code::Callback &CB); |
| }; |
| } |
| |
| void DeadCodeScan::enqueue(const CFGBlock *block) { |
| unsigned blockID = block->getBlockID(); |
| if (Reachable[blockID] || Visited[blockID]) |
| return; |
| Visited[blockID] = true; |
| WorkList.push_back(block); |
| } |
| |
| bool DeadCodeScan::isDeadCodeRoot(const clang::CFGBlock *Block) { |
| bool isDeadRoot = true; |
| |
| for (CFGBlock::const_pred_iterator I = Block->pred_begin(), |
| E = Block->pred_end(); I != E; ++I) { |
| if (const CFGBlock *PredBlock = *I) { |
| unsigned blockID = PredBlock->getBlockID(); |
| if (Visited[blockID]) { |
| isDeadRoot = false; |
| continue; |
| } |
| if (!Reachable[blockID]) { |
| isDeadRoot = false; |
| Visited[blockID] = true; |
| WorkList.push_back(PredBlock); |
| continue; |
| } |
| } |
| } |
| |
| return isDeadRoot; |
| } |
| |
| static bool isValidDeadStmt(const Stmt *S) { |
| if (S->getBeginLoc().isInvalid()) |
| return false; |
| if (const BinaryOperator *BO = dyn_cast<BinaryOperator>(S)) |
| return BO->getOpcode() != BO_Comma; |
| return true; |
| } |
| |
| const Stmt *DeadCodeScan::findDeadCode(const clang::CFGBlock *Block) { |
| for (CFGBlock::const_iterator I = Block->begin(), E = Block->end(); I!=E; ++I) |
| if (Optional<CFGStmt> CS = I->getAs<CFGStmt>()) { |
| const Stmt *S = CS->getStmt(); |
| if (isValidDeadStmt(S)) |
| return S; |
| } |
| |
| CFGTerminator T = Block->getTerminator(); |
| if (T.isStmtBranch()) { |
| const Stmt *S = T.getStmt(); |
| if (S && isValidDeadStmt(S)) |
| return S; |
| } |
| |
| return nullptr; |
| } |
| |
| static int SrcCmp(const std::pair<const CFGBlock *, const Stmt *> *p1, |
| const std::pair<const CFGBlock *, const Stmt *> *p2) { |
| if (p1->second->getBeginLoc() < p2->second->getBeginLoc()) |
| return -1; |
| if (p2->second->getBeginLoc() < p1->second->getBeginLoc()) |
| return 1; |
| return 0; |
| } |
| |
| unsigned DeadCodeScan::scanBackwards(const clang::CFGBlock *Start, |
| clang::reachable_code::Callback &CB) { |
| |
| unsigned count = 0; |
| enqueue(Start); |
| |
| while (!WorkList.empty()) { |
| const CFGBlock *Block = WorkList.pop_back_val(); |
| |
| // It is possible that this block has been marked reachable after |
| // it was enqueued. |
| if (Reachable[Block->getBlockID()]) |
| continue; |
| |
| // Look for any dead code within the block. |
| const Stmt *S = findDeadCode(Block); |
| |
| if (!S) { |
| // No dead code. Possibly an empty block. Look at dead predecessors. |
| for (CFGBlock::const_pred_iterator I = Block->pred_begin(), |
| E = Block->pred_end(); I != E; ++I) { |
| if (const CFGBlock *predBlock = *I) |
| enqueue(predBlock); |
| } |
| continue; |
| } |
| |
| // Specially handle macro-expanded code. |
| if (S->getBeginLoc().isMacroID()) { |
| count += scanMaybeReachableFromBlock(Block, PP, Reachable); |
| continue; |
| } |
| |
| if (isDeadCodeRoot(Block)) { |
| reportDeadCode(Block, S, CB); |
| count += scanMaybeReachableFromBlock(Block, PP, Reachable); |
| } |
| else { |
| // Record this statement as the possibly best location in a |
| // strongly-connected component of dead code for emitting a |
| // warning. |
| DeferredLocs.push_back(std::make_pair(Block, S)); |
| } |
| } |
| |
| // If we didn't find a dead root, then report the dead code with the |
| // earliest location. |
| if (!DeferredLocs.empty()) { |
| llvm::array_pod_sort(DeferredLocs.begin(), DeferredLocs.end(), SrcCmp); |
| for (DeferredLocsTy::iterator I = DeferredLocs.begin(), |
| E = DeferredLocs.end(); I != E; ++I) { |
| const CFGBlock *Block = I->first; |
| if (Reachable[Block->getBlockID()]) |
| continue; |
| reportDeadCode(Block, I->second, CB); |
| count += scanMaybeReachableFromBlock(Block, PP, Reachable); |
| } |
| } |
| |
| return count; |
| } |
| |
| static SourceLocation GetUnreachableLoc(const Stmt *S, |
| SourceRange &R1, |
| SourceRange &R2) { |
| R1 = R2 = SourceRange(); |
| |
| if (const Expr *Ex = dyn_cast<Expr>(S)) |
| S = Ex->IgnoreParenImpCasts(); |
| |
| switch (S->getStmtClass()) { |
| case Expr::BinaryOperatorClass: { |
| const BinaryOperator *BO = cast<BinaryOperator>(S); |
| return BO->getOperatorLoc(); |
| } |
| case Expr::UnaryOperatorClass: { |
| const UnaryOperator *UO = cast<UnaryOperator>(S); |
| R1 = UO->getSubExpr()->getSourceRange(); |
| return UO->getOperatorLoc(); |
| } |
| case Expr::CompoundAssignOperatorClass: { |
| const CompoundAssignOperator *CAO = cast<CompoundAssignOperator>(S); |
| R1 = CAO->getLHS()->getSourceRange(); |
| R2 = CAO->getRHS()->getSourceRange(); |
| return CAO->getOperatorLoc(); |
| } |
| case Expr::BinaryConditionalOperatorClass: |
| case Expr::ConditionalOperatorClass: { |
| const AbstractConditionalOperator *CO = |
| cast<AbstractConditionalOperator>(S); |
| return CO->getQuestionLoc(); |
| } |
| case Expr::MemberExprClass: { |
| const MemberExpr *ME = cast<MemberExpr>(S); |
| R1 = ME->getSourceRange(); |
| return ME->getMemberLoc(); |
| } |
| case Expr::ArraySubscriptExprClass: { |
| const ArraySubscriptExpr *ASE = cast<ArraySubscriptExpr>(S); |
| R1 = ASE->getLHS()->getSourceRange(); |
| R2 = ASE->getRHS()->getSourceRange(); |
| return ASE->getRBracketLoc(); |
| } |
| case Expr::CStyleCastExprClass: { |
| const CStyleCastExpr *CSC = cast<CStyleCastExpr>(S); |
| R1 = CSC->getSubExpr()->getSourceRange(); |
| return CSC->getLParenLoc(); |
| } |
| case Expr::CXXFunctionalCastExprClass: { |
| const CXXFunctionalCastExpr *CE = cast <CXXFunctionalCastExpr>(S); |
| R1 = CE->getSubExpr()->getSourceRange(); |
| return CE->getBeginLoc(); |
| } |
| case Stmt::CXXTryStmtClass: { |
| return cast<CXXTryStmt>(S)->getHandler(0)->getCatchLoc(); |
| } |
| case Expr::ObjCBridgedCastExprClass: { |
| const ObjCBridgedCastExpr *CSC = cast<ObjCBridgedCastExpr>(S); |
| R1 = CSC->getSubExpr()->getSourceRange(); |
| return CSC->getLParenLoc(); |
| } |
| default: ; |
| } |
| R1 = S->getSourceRange(); |
| return S->getBeginLoc(); |
| } |
| |
| void DeadCodeScan::reportDeadCode(const CFGBlock *B, |
| const Stmt *S, |
| clang::reachable_code::Callback &CB) { |
| // Classify the unreachable code found, or suppress it in some cases. |
| reachable_code::UnreachableKind UK = reachable_code::UK_Other; |
| |
| if (isa<BreakStmt>(S)) { |
| UK = reachable_code::UK_Break; |
| } else if (isTrivialDoWhile(B, S) || isBuiltinUnreachable(S) || |
| isBuiltinAssumeFalse(B, S, C)) { |
| return; |
| } |
| else if (isDeadReturn(B, S)) { |
| UK = reachable_code::UK_Return; |
| } |
| |
| SourceRange SilenceableCondVal; |
| |
| if (UK == reachable_code::UK_Other) { |
| // Check if the dead code is part of the "loop target" of |
| // a for/for-range loop. This is the block that contains |
| // the increment code. |
| if (const Stmt *LoopTarget = B->getLoopTarget()) { |
| SourceLocation Loc = LoopTarget->getBeginLoc(); |
| SourceRange R1(Loc, Loc), R2; |
| |
| if (const ForStmt *FS = dyn_cast<ForStmt>(LoopTarget)) { |
| const Expr *Inc = FS->getInc(); |
| Loc = Inc->getBeginLoc(); |
| R2 = Inc->getSourceRange(); |
| } |
| |
| CB.HandleUnreachable(reachable_code::UK_Loop_Increment, |
| Loc, SourceRange(), SourceRange(Loc, Loc), R2); |
| return; |
| } |
| |
| // Check if the dead block has a predecessor whose branch has |
| // a configuration value that *could* be modified to |
| // silence the warning. |
| CFGBlock::const_pred_iterator PI = B->pred_begin(); |
| if (PI != B->pred_end()) { |
| if (const CFGBlock *PredBlock = PI->getPossiblyUnreachableBlock()) { |
| const Stmt *TermCond = |
| PredBlock->getTerminatorCondition(/* strip parens */ false); |
| isConfigurationValue(TermCond, PP, &SilenceableCondVal); |
| } |
| } |
| } |
| |
| SourceRange R1, R2; |
| SourceLocation Loc = GetUnreachableLoc(S, R1, R2); |
| CB.HandleUnreachable(UK, Loc, SilenceableCondVal, R1, R2); |
| } |
| |
| //===----------------------------------------------------------------------===// |
| // Reachability APIs. |
| //===----------------------------------------------------------------------===// |
| |
| namespace clang { namespace reachable_code { |
| |
| void Callback::anchor() { } |
| |
| unsigned ScanReachableFromBlock(const CFGBlock *Start, |
| llvm::BitVector &Reachable) { |
| return scanFromBlock(Start, Reachable, /* SourceManager* */ nullptr, false); |
| } |
| |
| void FindUnreachableCode(AnalysisDeclContext &AC, Preprocessor &PP, |
| Callback &CB) { |
| |
| CFG *cfg = AC.getCFG(); |
| if (!cfg) |
| return; |
| |
| // Scan for reachable blocks from the entrance of the CFG. |
| // If there are no unreachable blocks, we're done. |
| llvm::BitVector reachable(cfg->getNumBlockIDs()); |
| unsigned numReachable = |
| scanMaybeReachableFromBlock(&cfg->getEntry(), PP, reachable); |
| if (numReachable == cfg->getNumBlockIDs()) |
| return; |
| |
| // If there aren't explicit EH edges, we should include the 'try' dispatch |
| // blocks as roots. |
| if (!AC.getCFGBuildOptions().AddEHEdges) { |
| for (CFG::try_block_iterator I = cfg->try_blocks_begin(), |
| E = cfg->try_blocks_end() ; I != E; ++I) { |
| numReachable += scanMaybeReachableFromBlock(*I, PP, reachable); |
| } |
| if (numReachable == cfg->getNumBlockIDs()) |
| return; |
| } |
| |
| // There are some unreachable blocks. We need to find the root blocks that |
| // contain code that should be considered unreachable. |
| for (CFG::iterator I = cfg->begin(), E = cfg->end(); I != E; ++I) { |
| const CFGBlock *block = *I; |
| // A block may have been marked reachable during this loop. |
| if (reachable[block->getBlockID()]) |
| continue; |
| |
| DeadCodeScan DS(reachable, PP, AC.getASTContext()); |
| numReachable += DS.scanBackwards(block, CB); |
| |
| if (numReachable == cfg->getNumBlockIDs()) |
| return; |
| } |
| } |
| |
| }} // end namespace clang::reachable_code |