• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 //== BodyFarm.cpp  - Factory for conjuring up fake bodies ----------*- C++ -*-//
2 //
3 //                     The LLVM Compiler Infrastructure
4 //
5 // This file is distributed under the University of Illinois Open Source
6 // License. See LICENSE.TXT for details.
7 //
8 //===----------------------------------------------------------------------===//
9 //
10 // BodyFarm is a factory for creating faux implementations for functions/methods
11 // for analysis purposes.
12 //
13 //===----------------------------------------------------------------------===//
14 
15 #include "BodyFarm.h"
16 #include "clang/AST/ASTContext.h"
17 #include "clang/AST/Decl.h"
18 #include "clang/AST/Expr.h"
19 #include "clang/AST/ExprObjC.h"
20 #include "llvm/ADT/StringSwitch.h"
21 
22 using namespace clang;
23 
24 //===----------------------------------------------------------------------===//
25 // Helper creation functions for constructing faux ASTs.
26 //===----------------------------------------------------------------------===//
27 
isDispatchBlock(QualType Ty)28 static bool isDispatchBlock(QualType Ty) {
29   // Is it a block pointer?
30   const BlockPointerType *BPT = Ty->getAs<BlockPointerType>();
31   if (!BPT)
32     return false;
33 
34   // Check if the block pointer type takes no arguments and
35   // returns void.
36   const FunctionProtoType *FT =
37   BPT->getPointeeType()->getAs<FunctionProtoType>();
38   if (!FT || !FT->getReturnType()->isVoidType() || FT->getNumParams() != 0)
39     return false;
40 
41   return true;
42 }
43 
44 namespace {
45 class ASTMaker {
46 public:
ASTMaker(ASTContext & C)47   ASTMaker(ASTContext &C) : C(C) {}
48 
49   /// Create a new BinaryOperator representing a simple assignment.
50   BinaryOperator *makeAssignment(const Expr *LHS, const Expr *RHS, QualType Ty);
51 
52   /// Create a new BinaryOperator representing a comparison.
53   BinaryOperator *makeComparison(const Expr *LHS, const Expr *RHS,
54                                  BinaryOperator::Opcode Op);
55 
56   /// Create a new compound stmt using the provided statements.
57   CompoundStmt *makeCompound(ArrayRef<Stmt*>);
58 
59   /// Create a new DeclRefExpr for the referenced variable.
60   DeclRefExpr *makeDeclRefExpr(const VarDecl *D);
61 
62   /// Create a new UnaryOperator representing a dereference.
63   UnaryOperator *makeDereference(const Expr *Arg, QualType Ty);
64 
65   /// Create an implicit cast for an integer conversion.
66   Expr *makeIntegralCast(const Expr *Arg, QualType Ty);
67 
68   /// Create an implicit cast to a builtin boolean type.
69   ImplicitCastExpr *makeIntegralCastToBoolean(const Expr *Arg);
70 
71   // Create an implicit cast for lvalue-to-rvaluate conversions.
72   ImplicitCastExpr *makeLvalueToRvalue(const Expr *Arg, QualType Ty);
73 
74   /// Create an Objective-C bool literal.
75   ObjCBoolLiteralExpr *makeObjCBool(bool Val);
76 
77   /// Create an Objective-C ivar reference.
78   ObjCIvarRefExpr *makeObjCIvarRef(const Expr *Base, const ObjCIvarDecl *IVar);
79 
80   /// Create a Return statement.
81   ReturnStmt *makeReturn(const Expr *RetVal);
82 
83 private:
84   ASTContext &C;
85 };
86 }
87 
makeAssignment(const Expr * LHS,const Expr * RHS,QualType Ty)88 BinaryOperator *ASTMaker::makeAssignment(const Expr *LHS, const Expr *RHS,
89                                          QualType Ty) {
90  return new (C) BinaryOperator(const_cast<Expr*>(LHS), const_cast<Expr*>(RHS),
91                                BO_Assign, Ty, VK_RValue,
92                                OK_Ordinary, SourceLocation(), false);
93 }
94 
makeComparison(const Expr * LHS,const Expr * RHS,BinaryOperator::Opcode Op)95 BinaryOperator *ASTMaker::makeComparison(const Expr *LHS, const Expr *RHS,
96                                          BinaryOperator::Opcode Op) {
97   assert(BinaryOperator::isLogicalOp(Op) ||
98          BinaryOperator::isComparisonOp(Op));
99   return new (C) BinaryOperator(const_cast<Expr*>(LHS),
100                                 const_cast<Expr*>(RHS),
101                                 Op,
102                                 C.getLogicalOperationType(),
103                                 VK_RValue,
104                                 OK_Ordinary, SourceLocation(), false);
105 }
106 
makeCompound(ArrayRef<Stmt * > Stmts)107 CompoundStmt *ASTMaker::makeCompound(ArrayRef<Stmt *> Stmts) {
108   return new (C) CompoundStmt(C, Stmts, SourceLocation(), SourceLocation());
109 }
110 
makeDeclRefExpr(const VarDecl * D)111 DeclRefExpr *ASTMaker::makeDeclRefExpr(const VarDecl *D) {
112   DeclRefExpr *DR =
113     DeclRefExpr::Create(/* Ctx = */ C,
114                         /* QualifierLoc = */ NestedNameSpecifierLoc(),
115                         /* TemplateKWLoc = */ SourceLocation(),
116                         /* D = */ const_cast<VarDecl*>(D),
117                         /* isEnclosingLocal = */ false,
118                         /* NameLoc = */ SourceLocation(),
119                         /* T = */ D->getType(),
120                         /* VK = */ VK_LValue);
121   return DR;
122 }
123 
makeDereference(const Expr * Arg,QualType Ty)124 UnaryOperator *ASTMaker::makeDereference(const Expr *Arg, QualType Ty) {
125   return new (C) UnaryOperator(const_cast<Expr*>(Arg), UO_Deref, Ty,
126                                VK_LValue, OK_Ordinary, SourceLocation());
127 }
128 
makeLvalueToRvalue(const Expr * Arg,QualType Ty)129 ImplicitCastExpr *ASTMaker::makeLvalueToRvalue(const Expr *Arg, QualType Ty) {
130   return ImplicitCastExpr::Create(C, Ty, CK_LValueToRValue,
131                                   const_cast<Expr*>(Arg), nullptr, VK_RValue);
132 }
133 
makeIntegralCast(const Expr * Arg,QualType Ty)134 Expr *ASTMaker::makeIntegralCast(const Expr *Arg, QualType Ty) {
135   if (Arg->getType() == Ty)
136     return const_cast<Expr*>(Arg);
137 
138   return ImplicitCastExpr::Create(C, Ty, CK_IntegralCast,
139                                   const_cast<Expr*>(Arg), nullptr, VK_RValue);
140 }
141 
makeIntegralCastToBoolean(const Expr * Arg)142 ImplicitCastExpr *ASTMaker::makeIntegralCastToBoolean(const Expr *Arg) {
143   return ImplicitCastExpr::Create(C, C.BoolTy, CK_IntegralToBoolean,
144                                   const_cast<Expr*>(Arg), nullptr, VK_RValue);
145 }
146 
makeObjCBool(bool Val)147 ObjCBoolLiteralExpr *ASTMaker::makeObjCBool(bool Val) {
148   QualType Ty = C.getBOOLDecl() ? C.getBOOLType() : C.ObjCBuiltinBoolTy;
149   return new (C) ObjCBoolLiteralExpr(Val, Ty, SourceLocation());
150 }
151 
makeObjCIvarRef(const Expr * Base,const ObjCIvarDecl * IVar)152 ObjCIvarRefExpr *ASTMaker::makeObjCIvarRef(const Expr *Base,
153                                            const ObjCIvarDecl *IVar) {
154   return new (C) ObjCIvarRefExpr(const_cast<ObjCIvarDecl*>(IVar),
155                                  IVar->getType(), SourceLocation(),
156                                  SourceLocation(), const_cast<Expr*>(Base),
157                                  /*arrow=*/true, /*free=*/false);
158 }
159 
160 
makeReturn(const Expr * RetVal)161 ReturnStmt *ASTMaker::makeReturn(const Expr *RetVal) {
162   return new (C) ReturnStmt(SourceLocation(), const_cast<Expr*>(RetVal),
163                             nullptr);
164 }
165 
166 //===----------------------------------------------------------------------===//
167 // Creation functions for faux ASTs.
168 //===----------------------------------------------------------------------===//
169 
170 typedef Stmt *(*FunctionFarmer)(ASTContext &C, const FunctionDecl *D);
171 
172 /// Create a fake body for dispatch_once.
create_dispatch_once(ASTContext & C,const FunctionDecl * D)173 static Stmt *create_dispatch_once(ASTContext &C, const FunctionDecl *D) {
174   // Check if we have at least two parameters.
175   if (D->param_size() != 2)
176     return nullptr;
177 
178   // Check if the first parameter is a pointer to integer type.
179   const ParmVarDecl *Predicate = D->getParamDecl(0);
180   QualType PredicateQPtrTy = Predicate->getType();
181   const PointerType *PredicatePtrTy = PredicateQPtrTy->getAs<PointerType>();
182   if (!PredicatePtrTy)
183     return nullptr;
184   QualType PredicateTy = PredicatePtrTy->getPointeeType();
185   if (!PredicateTy->isIntegerType())
186     return nullptr;
187 
188   // Check if the second parameter is the proper block type.
189   const ParmVarDecl *Block = D->getParamDecl(1);
190   QualType Ty = Block->getType();
191   if (!isDispatchBlock(Ty))
192     return nullptr;
193 
194   // Everything checks out.  Create a fakse body that checks the predicate,
195   // sets it, and calls the block.  Basically, an AST dump of:
196   //
197   // void dispatch_once(dispatch_once_t *predicate, dispatch_block_t block) {
198   //  if (!*predicate) {
199   //    *predicate = 1;
200   //    block();
201   //  }
202   // }
203 
204   ASTMaker M(C);
205 
206   // (1) Create the call.
207   DeclRefExpr *DR = M.makeDeclRefExpr(Block);
208   ImplicitCastExpr *ICE = M.makeLvalueToRvalue(DR, Ty);
209   CallExpr *CE = new (C) CallExpr(C, ICE, None, C.VoidTy, VK_RValue,
210                                   SourceLocation());
211 
212   // (2) Create the assignment to the predicate.
213   IntegerLiteral *IL =
214     IntegerLiteral::Create(C, llvm::APInt(C.getTypeSize(C.IntTy), (uint64_t) 1),
215                            C.IntTy, SourceLocation());
216   BinaryOperator *B =
217     M.makeAssignment(
218        M.makeDereference(
219           M.makeLvalueToRvalue(
220             M.makeDeclRefExpr(Predicate), PredicateQPtrTy),
221             PredicateTy),
222        M.makeIntegralCast(IL, PredicateTy),
223        PredicateTy);
224 
225   // (3) Create the compound statement.
226   Stmt *Stmts[2];
227   Stmts[0] = B;
228   Stmts[1] = CE;
229   CompoundStmt *CS = M.makeCompound(ArrayRef<Stmt*>(Stmts, 2));
230 
231   // (4) Create the 'if' condition.
232   ImplicitCastExpr *LValToRval =
233     M.makeLvalueToRvalue(
234       M.makeDereference(
235         M.makeLvalueToRvalue(
236           M.makeDeclRefExpr(Predicate),
237           PredicateQPtrTy),
238         PredicateTy),
239     PredicateTy);
240 
241   UnaryOperator *UO = new (C) UnaryOperator(LValToRval, UO_LNot, C.IntTy,
242                                            VK_RValue, OK_Ordinary,
243                                            SourceLocation());
244 
245   // (5) Create the 'if' statement.
246   IfStmt *If = new (C) IfStmt(C, SourceLocation(), nullptr, UO, CS);
247   return If;
248 }
249 
250 /// Create a fake body for dispatch_sync.
create_dispatch_sync(ASTContext & C,const FunctionDecl * D)251 static Stmt *create_dispatch_sync(ASTContext &C, const FunctionDecl *D) {
252   // Check if we have at least two parameters.
253   if (D->param_size() != 2)
254     return nullptr;
255 
256   // Check if the second parameter is a block.
257   const ParmVarDecl *PV = D->getParamDecl(1);
258   QualType Ty = PV->getType();
259   if (!isDispatchBlock(Ty))
260     return nullptr;
261 
262   // Everything checks out.  Create a fake body that just calls the block.
263   // This is basically just an AST dump of:
264   //
265   // void dispatch_sync(dispatch_queue_t queue, void (^block)(void)) {
266   //   block();
267   // }
268   //
269   ASTMaker M(C);
270   DeclRefExpr *DR = M.makeDeclRefExpr(PV);
271   ImplicitCastExpr *ICE = M.makeLvalueToRvalue(DR, Ty);
272   CallExpr *CE = new (C) CallExpr(C, ICE, None, C.VoidTy, VK_RValue,
273                                   SourceLocation());
274   return CE;
275 }
276 
create_OSAtomicCompareAndSwap(ASTContext & C,const FunctionDecl * D)277 static Stmt *create_OSAtomicCompareAndSwap(ASTContext &C, const FunctionDecl *D)
278 {
279   // There are exactly 3 arguments.
280   if (D->param_size() != 3)
281     return nullptr;
282 
283   // Signature:
284   // _Bool OSAtomicCompareAndSwapPtr(void *__oldValue,
285   //                                 void *__newValue,
286   //                                 void * volatile *__theValue)
287   // Generate body:
288   //   if (oldValue == *theValue) {
289   //    *theValue = newValue;
290   //    return YES;
291   //   }
292   //   else return NO;
293 
294   QualType ResultTy = D->getReturnType();
295   bool isBoolean = ResultTy->isBooleanType();
296   if (!isBoolean && !ResultTy->isIntegralType(C))
297     return nullptr;
298 
299   const ParmVarDecl *OldValue = D->getParamDecl(0);
300   QualType OldValueTy = OldValue->getType();
301 
302   const ParmVarDecl *NewValue = D->getParamDecl(1);
303   QualType NewValueTy = NewValue->getType();
304 
305   assert(OldValueTy == NewValueTy);
306 
307   const ParmVarDecl *TheValue = D->getParamDecl(2);
308   QualType TheValueTy = TheValue->getType();
309   const PointerType *PT = TheValueTy->getAs<PointerType>();
310   if (!PT)
311     return nullptr;
312   QualType PointeeTy = PT->getPointeeType();
313 
314   ASTMaker M(C);
315   // Construct the comparison.
316   Expr *Comparison =
317     M.makeComparison(
318       M.makeLvalueToRvalue(M.makeDeclRefExpr(OldValue), OldValueTy),
319       M.makeLvalueToRvalue(
320         M.makeDereference(
321           M.makeLvalueToRvalue(M.makeDeclRefExpr(TheValue), TheValueTy),
322           PointeeTy),
323         PointeeTy),
324       BO_EQ);
325 
326   // Construct the body of the IfStmt.
327   Stmt *Stmts[2];
328   Stmts[0] =
329     M.makeAssignment(
330       M.makeDereference(
331         M.makeLvalueToRvalue(M.makeDeclRefExpr(TheValue), TheValueTy),
332         PointeeTy),
333       M.makeLvalueToRvalue(M.makeDeclRefExpr(NewValue), NewValueTy),
334       NewValueTy);
335 
336   Expr *BoolVal = M.makeObjCBool(true);
337   Expr *RetVal = isBoolean ? M.makeIntegralCastToBoolean(BoolVal)
338                            : M.makeIntegralCast(BoolVal, ResultTy);
339   Stmts[1] = M.makeReturn(RetVal);
340   CompoundStmt *Body = M.makeCompound(ArrayRef<Stmt*>(Stmts, 2));
341 
342   // Construct the else clause.
343   BoolVal = M.makeObjCBool(false);
344   RetVal = isBoolean ? M.makeIntegralCastToBoolean(BoolVal)
345                      : M.makeIntegralCast(BoolVal, ResultTy);
346   Stmt *Else = M.makeReturn(RetVal);
347 
348   /// Construct the If.
349   Stmt *If =
350     new (C) IfStmt(C, SourceLocation(), nullptr, Comparison, Body,
351                    SourceLocation(), Else);
352 
353   return If;
354 }
355 
getBody(const FunctionDecl * D)356 Stmt *BodyFarm::getBody(const FunctionDecl *D) {
357   D = D->getCanonicalDecl();
358 
359   Optional<Stmt *> &Val = Bodies[D];
360   if (Val.hasValue())
361     return Val.getValue();
362 
363   Val = nullptr;
364 
365   if (D->getIdentifier() == nullptr)
366     return nullptr;
367 
368   StringRef Name = D->getName();
369   if (Name.empty())
370     return nullptr;
371 
372   FunctionFarmer FF;
373 
374   if (Name.startswith("OSAtomicCompareAndSwap") ||
375       Name.startswith("objc_atomicCompareAndSwap")) {
376     FF = create_OSAtomicCompareAndSwap;
377   }
378   else {
379     FF = llvm::StringSwitch<FunctionFarmer>(Name)
380           .Case("dispatch_sync", create_dispatch_sync)
381           .Case("dispatch_once", create_dispatch_once)
382           .Default(nullptr);
383   }
384 
385   if (FF) { Val = FF(C, D); }
386   return Val.getValue();
387 }
388 
createObjCPropertyGetter(ASTContext & Ctx,const ObjCPropertyDecl * Prop)389 static Stmt *createObjCPropertyGetter(ASTContext &Ctx,
390                                       const ObjCPropertyDecl *Prop) {
391   // First, find the backing ivar.
392   const ObjCIvarDecl *IVar = Prop->getPropertyIvarDecl();
393   if (!IVar)
394     return nullptr;
395 
396   // Ignore weak variables, which have special behavior.
397   if (Prop->getPropertyAttributes() & ObjCPropertyDecl::OBJC_PR_weak)
398     return nullptr;
399 
400   // Look to see if Sema has synthesized a body for us. This happens in
401   // Objective-C++ because the return value may be a C++ class type with a
402   // non-trivial copy constructor. We can only do this if we can find the
403   // @synthesize for this property, though (or if we know it's been auto-
404   // synthesized).
405   const ObjCImplementationDecl *ImplDecl =
406     IVar->getContainingInterface()->getImplementation();
407   if (ImplDecl) {
408     for (const auto *I : ImplDecl->property_impls()) {
409       if (I->getPropertyDecl() != Prop)
410         continue;
411 
412       if (I->getGetterCXXConstructor()) {
413         ASTMaker M(Ctx);
414         return M.makeReturn(I->getGetterCXXConstructor());
415       }
416     }
417   }
418 
419   // Sanity check that the property is the same type as the ivar, or a
420   // reference to it, and that it is either an object pointer or trivially
421   // copyable.
422   if (!Ctx.hasSameUnqualifiedType(IVar->getType(),
423                                   Prop->getType().getNonReferenceType()))
424     return nullptr;
425   if (!IVar->getType()->isObjCLifetimeType() &&
426       !IVar->getType().isTriviallyCopyableType(Ctx))
427     return nullptr;
428 
429   // Generate our body:
430   //   return self->_ivar;
431   ASTMaker M(Ctx);
432 
433   const VarDecl *selfVar = Prop->getGetterMethodDecl()->getSelfDecl();
434 
435   Expr *loadedIVar =
436     M.makeObjCIvarRef(
437       M.makeLvalueToRvalue(
438         M.makeDeclRefExpr(selfVar),
439         selfVar->getType()),
440       IVar);
441 
442   if (!Prop->getType()->isReferenceType())
443     loadedIVar = M.makeLvalueToRvalue(loadedIVar, IVar->getType());
444 
445   return M.makeReturn(loadedIVar);
446 }
447 
getBody(const ObjCMethodDecl * D)448 Stmt *BodyFarm::getBody(const ObjCMethodDecl *D) {
449   // We currently only know how to synthesize property accessors.
450   if (!D->isPropertyAccessor())
451     return nullptr;
452 
453   D = D->getCanonicalDecl();
454 
455   Optional<Stmt *> &Val = Bodies[D];
456   if (Val.hasValue())
457     return Val.getValue();
458   Val = nullptr;
459 
460   const ObjCPropertyDecl *Prop = D->findPropertyDecl();
461   if (!Prop)
462     return nullptr;
463 
464   // For now, we only synthesize getters.
465   if (D->param_size() != 0)
466     return nullptr;
467 
468   Val = createObjCPropertyGetter(C, Prop);
469 
470   return Val.getValue();
471 }
472 
473