/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp

Bug Summary

File:	tools/clang/lib/CodeGen/CGClass.cpp
Warning:	line 2534, column 29 Called C++ object pointer is null
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name CGClass.cpp -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=cplusplus -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -analyzer-config-compatibility-mode=true -mrelocation-model pic -pic-level 2 -mthread-model posix -mframe-pointer=none -relaxed-aliasing -fmath-errno -masm-verbose -mconstructor-aliases -munwind-tables -fuse-init-array -target-cpu x86-64 -dwarf-column-info -debugger-tuning=gdb -ffunction-sections -fdata-sections -resource-dir /usr/lib/llvm-10/lib/clang/10.0.0 -D CLANG_VENDOR="Debian " -D _DEBUG -D _GNU_SOURCE -D __STDC_CONSTANT_MACROS -D __STDC_FORMAT_MACROS -D __STDC_LIMIT_MACROS -I /build/llvm-toolchain-snapshot-10~svn373517/build-llvm/tools/clang/lib/CodeGen -I /build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen -I /build/llvm-toolchain-snapshot-10~svn373517/tools/clang/include -I /build/llvm-toolchain-snapshot-10~svn373517/build-llvm/tools/clang/include -I /build/llvm-toolchain-snapshot-10~svn373517/build-llvm/include -I /build/llvm-toolchain-snapshot-10~svn373517/include -U NDEBUG -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/6.3.0/../../../../include/c++/6.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/6.3.0/../../../../include/x86_64-linux-gnu/c++/6.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/6.3.0/../../../../include/x86_64-linux-gnu/c++/6.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/6.3.0/../../../../include/c++/6.3.0/backward -internal-isystem /usr/local/include -internal-isystem /usr/lib/llvm-10/lib/clang/10.0.0/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -O2 -Wno-unused-parameter -Wwrite-strings -Wno-missing-field-initializers -Wno-long-long -Wno-maybe-uninitialized -Wno-comment -std=c++14 -fdeprecated-macro -fdebug-compilation-dir /build/llvm-toolchain-snapshot-10~svn373517/build-llvm/tools/clang/lib/CodeGen -fdebug-prefix-map=/build/llvm-toolchain-snapshot-10~svn373517=. -ferror-limit 19 -fmessage-length 0 -fvisibility-inlines-hidden -stack-protector 2 -fobjc-runtime=gcc -fno-common -fdiagnostics-show-option -vectorize-loops -vectorize-slp -analyzer-output=html -analyzer-config stable-report-filename=true -faddrsig -o /tmp/scan-build-2019-10-02-234743-9763-1 -x c++ /build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp
1//===--- CGClass.cpp - Emit LLVM Code for C++ classes -----------*- C++ -*-===//
2//
3// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4// See https://llvm.org/LICENSE.txt for license information.
5// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6//
7//===----------------------------------------------------------------------===//
8//
9// This contains code dealing with C++ code generation of classes
10//
11//===----------------------------------------------------------------------===//

13#include "CGBlocks.h"
14#include "CGCXXABI.h"
15#include "CGDebugInfo.h"
16#include "CGRecordLayout.h"
17#include "CodeGenFunction.h"
18#include "TargetInfo.h"
19#include "clang/AST/CXXInheritance.h"
20#include "clang/AST/DeclTemplate.h"
21#include "clang/AST/EvaluatedExprVisitor.h"
22#include "clang/AST/RecordLayout.h"
23#include "clang/AST/StmtCXX.h"
24#include "clang/Basic/CodeGenOptions.h"
25#include "clang/Basic/TargetBuiltins.h"
26#include "clang/CodeGen/CGFunctionInfo.h"
27#include "llvm/IR/Intrinsics.h"
28#include "llvm/IR/Metadata.h"
29#include "llvm/Transforms/Utils/SanitizerStats.h"

31using namespace clang;
32using namespace CodeGen;

34/// Return the best known alignment for an unknown pointer to a
35/// particular class.
36CharUnits CodeGenModule::getClassPointerAlignment(const CXXRecordDecl *RD) {
if (!RD->isCompleteDefinition())
  return CharUnits::One(); // Hopefully won't be used anywhere.

auto &layout = getContext().getASTRecordLayout(RD);

// If the class is final, then we know that the pointer points to an
// object of that type and can use the full alignment.
if (RD->hasAttr<FinalAttr>()) {
  return layout.getAlignment();

// Otherwise, we have to assume it could be a subclass.
} else {
  return layout.getNonVirtualAlignment();
}
51}

53/// Return the best known alignment for a pointer to a virtual base,
54/// given the alignment of a pointer to the derived class.
55CharUnits CodeGenModule::getVBaseAlignment(CharUnits actualDerivedAlign,
                                         const CXXRecordDecl *derivedClass,
                                         const CXXRecordDecl *vbaseClass) {
// The basic idea here is that an underaligned derived pointer might
// indicate an underaligned base pointer.

assert(vbaseClass->isCompleteDefinition())((vbaseClass->isCompleteDefinition()) ? static_cast<void
> (0) : __assert_fail ("vbaseClass->isCompleteDefinition()"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 61, __PRETTY_FUNCTION__));
auto &baseLayout = getContext().getASTRecordLayout(vbaseClass);
CharUnits expectedVBaseAlign = baseLayout.getNonVirtualAlignment();

return getDynamicOffsetAlignment(actualDerivedAlign, derivedClass,
                                 expectedVBaseAlign);
67}

69CharUnits
70CodeGenModule::getDynamicOffsetAlignment(CharUnits actualBaseAlign,
                                       const CXXRecordDecl *baseDecl,
                                       CharUnits expectedTargetAlign) {
// If the base is an incomplete type (which is, alas, possible with
// member pointers), be pessimistic.
if (!baseDecl->isCompleteDefinition())
  return std::min(actualBaseAlign, expectedTargetAlign);

auto &baseLayout = getContext().getASTRecordLayout(baseDecl);
CharUnits expectedBaseAlign = baseLayout.getNonVirtualAlignment();

// If the class is properly aligned, assume the target offset is, too.
//
// This actually isn't necessarily the right thing to do --- if the
// class is a complete object, but it's only properly aligned for a
// base subobject, then the alignments of things relative to it are
// probably off as well.  (Note that this requires the alignment of
// the target to be greater than the NV alignment of the derived
// class.)
//
// However, our approach to this kind of under-alignment can only
// ever be best effort; after all, we're never going to propagate
// alignments through variables or parameters.  Note, in particular,
// that constructing a polymorphic type in an address that's less
// than pointer-aligned will generally trap in the constructor,
// unless we someday add some sort of attribute to change the
// assumed alignment of 'this'.  So our goal here is pretty much
// just to allow the user to explicitly say that a pointer is
// under-aligned and then safely access its fields and vtables.
if (actualBaseAlign >= expectedBaseAlign) {
  return expectedTargetAlign;
}

// Otherwise, we might be offset by an arbitrary multiple of the
// actual alignment.  The correct adjustment is to take the min of
// the two alignments.
return std::min(actualBaseAlign, expectedTargetAlign);
107}

109Address CodeGenFunction::LoadCXXThisAddress() {
assert(CurFuncDecl && "loading 'this' without a func declaration?")((CurFuncDecl && "loading 'this' without a func declaration?"
) ? static_cast<void> (0) : __assert_fail ("CurFuncDecl && \"loading 'this' without a func declaration?\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 110, __PRETTY_FUNCTION__));
assert(isa<CXXMethodDecl>(CurFuncDecl))((isa<CXXMethodDecl>(CurFuncDecl)) ? static_cast<void
> (0) : __assert_fail ("isa<CXXMethodDecl>(CurFuncDecl)"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 111, __PRETTY_FUNCTION__));

// Lazily compute CXXThisAlignment.
if (CXXThisAlignment.isZero()) {
  // Just use the best known alignment for the parent.
  // TODO: if we're currently emitting a complete-object ctor/dtor,
  // we can always use the complete-object alignment.
  auto RD = cast<CXXMethodDecl>(CurFuncDecl)->getParent();
  CXXThisAlignment = CGM.getClassPointerAlignment(RD);
}

return Address(LoadCXXThis(), CXXThisAlignment);
123}

125/// Emit the address of a field using a member data pointer.
126///
127/// \param E Only used for emergency diagnostics
128Address
129CodeGenFunction::EmitCXXMemberDataPointerAddress(const Expr *E, Address base,
                                               llvm::Value *memberPtr,
                                    const MemberPointerType *memberPtrType,
                                               LValueBaseInfo *BaseInfo,
                                               TBAAAccessInfo *TBAAInfo) {
// Ask the ABI to compute the actual address.
llvm::Value *ptr =
  CGM.getCXXABI().EmitMemberDataPointerAddress(*this, E, base,
                                               memberPtr, memberPtrType);

QualType memberType = memberPtrType->getPointeeType();
CharUnits memberAlign = getNaturalTypeAlignment(memberType, BaseInfo,
                                                TBAAInfo);
memberAlign =
  CGM.getDynamicOffsetAlignment(base.getAlignment(),
                          memberPtrType->getClass()->getAsCXXRecordDecl(),
                                memberAlign);
return Address(ptr, memberAlign);
147}

149CharUnits CodeGenModule::computeNonVirtualBaseClassOffset(
  const CXXRecordDecl *DerivedClass, CastExpr::path_const_iterator Start,
  CastExpr::path_const_iterator End) {
CharUnits Offset = CharUnits::Zero();

const ASTContext &Context = getContext();
const CXXRecordDecl *RD = DerivedClass;

for (CastExpr::path_const_iterator I = Start; I != End; ++I) {
  const CXXBaseSpecifier *Base = *I;
  assert(!Base->isVirtual() && "Should not see virtual bases here!")((!Base->isVirtual() && "Should not see virtual bases here!"
) ? static_cast<void> (0) : __assert_fail ("!Base->isVirtual() && \"Should not see virtual bases here!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 159, __PRETTY_FUNCTION__));

  // Get the layout.
  const ASTRecordLayout &Layout = Context.getASTRecordLayout(RD);

  const CXXRecordDecl *BaseDecl =
    cast<CXXRecordDecl>(Base->getType()->getAs<RecordType>()->getDecl());

  // Add the offset.
  Offset += Layout.getBaseClassOffset(BaseDecl);

  RD = BaseDecl;
}

return Offset;
174}

176llvm::Constant *
177CodeGenModule::GetNonVirtualBaseClassOffset(const CXXRecordDecl *ClassDecl,
                                 CastExpr::path_const_iterator PathBegin,
                                 CastExpr::path_const_iterator PathEnd) {
assert(PathBegin != PathEnd && "Base path should not be empty!")((PathBegin != PathEnd && "Base path should not be empty!"
) ? static_cast<void> (0) : __assert_fail ("PathBegin != PathEnd && \"Base path should not be empty!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 180, __PRETTY_FUNCTION__));

CharUnits Offset =
    computeNonVirtualBaseClassOffset(ClassDecl, PathBegin, PathEnd);
if (Offset.isZero())
  return nullptr;

llvm::Type *PtrDiffTy =
Types.ConvertType(getContext().getPointerDiffType());

return llvm::ConstantInt::get(PtrDiffTy, Offset.getQuantity());
191}

193/// Gets the address of a direct base class within a complete object.
194/// This should only be used for (1) non-virtual bases or (2) virtual bases
195/// when the type is known to be complete (e.g. in complete destructors).
196///
197/// The object pointed to by 'This' is assumed to be non-null.
198Address
199CodeGenFunction::GetAddressOfDirectBaseInCompleteClass(Address This,
                                                 const CXXRecordDecl *Derived,
                                                 const CXXRecordDecl *Base,
                                                 bool BaseIsVirtual) {
// 'this' must be a pointer (in some address space) to Derived.
assert(This.getElementType() == ConvertType(Derived))((This.getElementType() == ConvertType(Derived)) ? static_cast
<void> (0) : __assert_fail ("This.getElementType() == ConvertType(Derived)"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 204, __PRETTY_FUNCTION__));

// Compute the offset of the virtual base.
CharUnits Offset;
const ASTRecordLayout &Layout = getContext().getASTRecordLayout(Derived);
if (BaseIsVirtual)
  Offset = Layout.getVBaseClassOffset(Base);
else
  Offset = Layout.getBaseClassOffset(Base);

// Shift and cast down to the base type.
// TODO: for complete types, this should be possible with a GEP.
Address V = This;
if (!Offset.isZero()) {
  V = Builder.CreateElementBitCast(V, Int8Ty);
  V = Builder.CreateConstInBoundsByteGEP(V, Offset);
}
V = Builder.CreateElementBitCast(V, ConvertType(Base));

return V;
224}

226static Address
227ApplyNonVirtualAndVirtualOffset(CodeGenFunction &CGF, Address addr,
                              CharUnits nonVirtualOffset,
                              llvm::Value *virtualOffset,
                              const CXXRecordDecl *derivedClass,
                              const CXXRecordDecl *nearestVBase) {
// Assert that we have something to do.
assert(!nonVirtualOffset.isZero() || virtualOffset != nullptr)((!nonVirtualOffset.isZero() || virtualOffset != nullptr) ? static_cast
<void> (0) : __assert_fail ("!nonVirtualOffset.isZero() || virtualOffset != nullptr"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 233, __PRETTY_FUNCTION__));

// Compute the offset from the static and dynamic components.
llvm::Value *baseOffset;
if (!nonVirtualOffset.isZero()) {
  baseOffset = llvm::ConstantInt::get(CGF.PtrDiffTy,
                                      nonVirtualOffset.getQuantity());
  if (virtualOffset) {
    baseOffset = CGF.Builder.CreateAdd(virtualOffset, baseOffset);
  }
} else {
  baseOffset = virtualOffset;
}

// Apply the base offset.
llvm::Value *ptr = addr.getPointer();
ptr = CGF.Builder.CreateBitCast(ptr, CGF.Int8PtrTy);
ptr = CGF.Builder.CreateInBoundsGEP(ptr, baseOffset, "add.ptr");

// If we have a virtual component, the alignment of the result will
// be relative only to the known alignment of that vbase.
CharUnits alignment;
if (virtualOffset) {
  assert(nearestVBase && "virtual offset without vbase?")((nearestVBase && "virtual offset without vbase?") ? static_cast
<void> (0) : __assert_fail ("nearestVBase && \"virtual offset without vbase?\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 256, __PRETTY_FUNCTION__));
  alignment = CGF.CGM.getVBaseAlignment(addr.getAlignment(),
                                        derivedClass, nearestVBase);
} else {
  alignment = addr.getAlignment();
}
alignment = alignment.alignmentAtOffset(nonVirtualOffset);

return Address(ptr, alignment);
265}

267Address CodeGenFunction::GetAddressOfBaseClass(
  Address Value, const CXXRecordDecl *Derived,
  CastExpr::path_const_iterator PathBegin,
  CastExpr::path_const_iterator PathEnd, bool NullCheckValue,
  SourceLocation Loc) {
assert(PathBegin != PathEnd && "Base path should not be empty!")((PathBegin != PathEnd && "Base path should not be empty!"
) ? static_cast<void> (0) : __assert_fail ("PathBegin != PathEnd && \"Base path should not be empty!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 272, __PRETTY_FUNCTION__));

CastExpr::path_const_iterator Start = PathBegin;
const CXXRecordDecl *VBase = nullptr;

// Sema has done some convenient canonicalization here: if the
// access path involved any virtual steps, the conversion path will
// *start* with a step down to the correct virtual base subobject,
// and hence will not require any further steps.
if ((*Start)->isVirtual()) {
  VBase =
    cast<CXXRecordDecl>((*Start)->getType()->getAs<RecordType>()->getDecl());
  ++Start;
}

// Compute the static offset of the ultimate destination within its
// allocating subobject (the virtual base, if there is one, or else
// the "complete" object that we see).
CharUnits NonVirtualOffset = CGM.computeNonVirtualBaseClassOffset(
    VBase ? VBase : Derived, Start, PathEnd);

// If there's a virtual step, we can sometimes "devirtualize" it.
// For now, that's limited to when the derived type is final.
// TODO: "devirtualize" this for accesses to known-complete objects.
if (VBase && Derived->hasAttr<FinalAttr>()) {
  const ASTRecordLayout &layout = getContext().getASTRecordLayout(Derived);
  CharUnits vBaseOffset = layout.getVBaseClassOffset(VBase);
  NonVirtualOffset += vBaseOffset;
  VBase = nullptr; // we no longer have a virtual step
}

// Get the base pointer type.
llvm::Type *BasePtrTy =
    ConvertType((PathEnd[-1])->getType())
        ->getPointerTo(Value.getType()->getPointerAddressSpace());

QualType DerivedTy = getContext().getRecordType(Derived);
CharUnits DerivedAlign = CGM.getClassPointerAlignment(Derived);

// If the static offset is zero and we don't have a virtual step,
// just do a bitcast; null checks are unnecessary.
if (NonVirtualOffset.isZero() && !VBase) {
  if (sanitizePerformTypeCheck()) {
    SanitizerSet SkippedChecks;
    SkippedChecks.set(SanitizerKind::Null, !NullCheckValue);
    EmitTypeCheck(TCK_Upcast, Loc, Value.getPointer(),
                  DerivedTy, DerivedAlign, SkippedChecks);
  }
  return Builder.CreateBitCast(Value, BasePtrTy);
}

llvm::BasicBlock *origBB = nullptr;
llvm::BasicBlock *endBB = nullptr;

// Skip over the offset (and the vtable load) if we're supposed to
// null-check the pointer.
if (NullCheckValue) {
  origBB = Builder.GetInsertBlock();
  llvm::BasicBlock *notNullBB = createBasicBlock("cast.notnull");
  endBB = createBasicBlock("cast.end");

  llvm::Value *isNull = Builder.CreateIsNull(Value.getPointer());
  Builder.CreateCondBr(isNull, endBB, notNullBB);
  EmitBlock(notNullBB);
}

if (sanitizePerformTypeCheck()) {
  SanitizerSet SkippedChecks;
  SkippedChecks.set(SanitizerKind::Null, true);
  EmitTypeCheck(VBase ? TCK_UpcastToVirtualBase : TCK_Upcast, Loc,
                Value.getPointer(), DerivedTy, DerivedAlign, SkippedChecks);
}

// Compute the virtual offset.
llvm::Value *VirtualOffset = nullptr;
if (VBase) {
  VirtualOffset =
    CGM.getCXXABI().GetVirtualBaseClassOffset(*this, Value, Derived, VBase);
}

// Apply both offsets.
Value = ApplyNonVirtualAndVirtualOffset(*this, Value, NonVirtualOffset,
                                        VirtualOffset, Derived, VBase);

// Cast to the destination type.
Value = Builder.CreateBitCast(Value, BasePtrTy);

// Build a phi if we needed a null check.
if (NullCheckValue) {
  llvm::BasicBlock *notNullBB = Builder.GetInsertBlock();
  Builder.CreateBr(endBB);
  EmitBlock(endBB);

  llvm::PHINode *PHI = Builder.CreatePHI(BasePtrTy, 2, "cast.result");
  PHI->addIncoming(Value.getPointer(), notNullBB);
  PHI->addIncoming(llvm::Constant::getNullValue(BasePtrTy), origBB);
  Value = Address(PHI, Value.getAlignment());
}

return Value;
372}

374Address
375CodeGenFunction::GetAddressOfDerivedClass(Address BaseAddr,
                                        const CXXRecordDecl *Derived,
                                      CastExpr::path_const_iterator PathBegin,
                                        CastExpr::path_const_iterator PathEnd,
                                        bool NullCheckValue) {
assert(PathBegin != PathEnd && "Base path should not be empty!")((PathBegin != PathEnd && "Base path should not be empty!"
) ? static_cast<void> (0) : __assert_fail ("PathBegin != PathEnd && \"Base path should not be empty!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 380, __PRETTY_FUNCTION__));

QualType DerivedTy =
  getContext().getCanonicalType(getContext().getTagDeclType(Derived));
llvm::Type *DerivedPtrTy = ConvertType(DerivedTy)->getPointerTo();

llvm::Value *NonVirtualOffset =
  CGM.GetNonVirtualBaseClassOffset(Derived, PathBegin, PathEnd);

if (!NonVirtualOffset) {
  // No offset, we can just cast back.
  return Builder.CreateBitCast(BaseAddr, DerivedPtrTy);
}

llvm::BasicBlock *CastNull = nullptr;
llvm::BasicBlock *CastNotNull = nullptr;
llvm::BasicBlock *CastEnd = nullptr;

if (NullCheckValue) {
  CastNull = createBasicBlock("cast.null");
  CastNotNull = createBasicBlock("cast.notnull");
  CastEnd = createBasicBlock("cast.end");

  llvm::Value *IsNull = Builder.CreateIsNull(BaseAddr.getPointer());
  Builder.CreateCondBr(IsNull, CastNull, CastNotNull);
  EmitBlock(CastNotNull);
}

// Apply the offset.
llvm::Value *Value = Builder.CreateBitCast(BaseAddr.getPointer(), Int8PtrTy);
Value = Builder.CreateInBoundsGEP(Value, Builder.CreateNeg(NonVirtualOffset),
                                  "sub.ptr");

// Just cast.
Value = Builder.CreateBitCast(Value, DerivedPtrTy);

// Produce a PHI if we had a null-check.
if (NullCheckValue) {
  Builder.CreateBr(CastEnd);
  EmitBlock(CastNull);
  Builder.CreateBr(CastEnd);
  EmitBlock(CastEnd);

  llvm::PHINode *PHI = Builder.CreatePHI(Value->getType(), 2);
  PHI->addIncoming(Value, CastNotNull);
  PHI->addIncoming(llvm::Constant::getNullValue(Value->getType()), CastNull);
  Value = PHI;
}

return Address(Value, CGM.getClassPointerAlignment(Derived));
430}

432llvm::Value *CodeGenFunction::GetVTTParameter(GlobalDecl GD,
                                            bool ForVirtualBase,
                                            bool Delegating) {
if (!CGM.getCXXABI().NeedsVTTParameter(GD)) {
  // This constructor/destructor does not need a VTT parameter.
  return nullptr;
}

const CXXRecordDecl *RD = cast<CXXMethodDecl>(CurCodeDecl)->getParent();
const CXXRecordDecl *Base = cast<CXXMethodDecl>(GD.getDecl())->getParent();

llvm::Value *VTT;

uint64_t SubVTTIndex;

if (Delegating) {
  // If this is a delegating constructor call, just load the VTT.
  return LoadCXXVTT();
} else if (RD == Base) {
  // If the record matches the base, this is the complete ctor/dtor
  // variant calling the base variant in a class with virtual bases.
  assert(!CGM.getCXXABI().NeedsVTTParameter(CurGD) &&((!CGM.getCXXABI().NeedsVTTParameter(CurGD) && "doing no-op VTT offset in base dtor/ctor?"
) ? static_cast<void> (0) : __assert_fail ("!CGM.getCXXABI().NeedsVTTParameter(CurGD) && \"doing no-op VTT offset in base dtor/ctor?\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 454, __PRETTY_FUNCTION__))
         "doing no-op VTT offset in base dtor/ctor?")((!CGM.getCXXABI().NeedsVTTParameter(CurGD) && "doing no-op VTT offset in base dtor/ctor?"
) ? static_cast<void> (0) : __assert_fail ("!CGM.getCXXABI().NeedsVTTParameter(CurGD) && \"doing no-op VTT offset in base dtor/ctor?\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 454, __PRETTY_FUNCTION__));
  assert(!ForVirtualBase && "Can't have same class as virtual base!")((!ForVirtualBase && "Can't have same class as virtual base!"
) ? static_cast<void> (0) : __assert_fail ("!ForVirtualBase && \"Can't have same class as virtual base!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 455, __PRETTY_FUNCTION__));
  SubVTTIndex = 0;
} else {
  const ASTRecordLayout &Layout = getContext().getASTRecordLayout(RD);
  CharUnits BaseOffset = ForVirtualBase ?
    Layout.getVBaseClassOffset(Base) :
    Layout.getBaseClassOffset(Base);

  SubVTTIndex =
    CGM.getVTables().getSubVTTIndex(RD, BaseSubobject(Base, BaseOffset));
  assert(SubVTTIndex != 0 && "Sub-VTT index must be greater than zero!")((SubVTTIndex != 0 && "Sub-VTT index must be greater than zero!"
) ? static_cast<void> (0) : __assert_fail ("SubVTTIndex != 0 && \"Sub-VTT index must be greater than zero!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 465, __PRETTY_FUNCTION__));
}

if (CGM.getCXXABI().NeedsVTTParameter(CurGD)) {
  // A VTT parameter was passed to the constructor, use it.
  VTT = LoadCXXVTT();
  VTT = Builder.CreateConstInBoundsGEP1_64(VTT, SubVTTIndex);
} else {
  // We're the complete constructor, so get the VTT by name.
  VTT = CGM.getVTables().GetAddrOfVTT(RD);
  VTT = Builder.CreateConstInBoundsGEP2_64(VTT, 0, SubVTTIndex);
}

return VTT;
479}

481namespace {
/// Call the destructor for a direct base class.
struct CallBaseDtor final : EHScopeStack::Cleanup {
  const CXXRecordDecl *BaseClass;
  bool BaseIsVirtual;
  CallBaseDtor(const CXXRecordDecl *Base, bool BaseIsVirtual)
    : BaseClass(Base), BaseIsVirtual(BaseIsVirtual) {}

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    const CXXRecordDecl *DerivedClass =
      cast<CXXMethodDecl>(CGF.CurCodeDecl)->getParent();

    const CXXDestructorDecl *D = BaseClass->getDestructor();
    // We are already inside a destructor, so presumably the object being
    // destroyed should have the expected type.
    QualType ThisTy = D->getThisObjectType();
    Address Addr =
      CGF.GetAddressOfDirectBaseInCompleteClass(CGF.LoadCXXThisAddress(),
                                                DerivedClass, BaseClass,
                                                BaseIsVirtual);
    CGF.EmitCXXDestructorCall(D, Dtor_Base, BaseIsVirtual,
                              /*Delegating=*/false, Addr, ThisTy);
  }
};

/// A visitor which checks whether an initializer uses 'this' in a
/// way which requires the vtable to be properly set.
struct DynamicThisUseChecker : ConstEvaluatedExprVisitor<DynamicThisUseChecker> {
  typedef ConstEvaluatedExprVisitor<DynamicThisUseChecker> super;

  bool UsesThis;

  DynamicThisUseChecker(const ASTContext &C) : super(C), UsesThis(false) {}

  // Black-list all explicit and implicit references to 'this'.
  //
  // Do we need to worry about external references to 'this' derived
  // from arbitrary code?  If so, then anything which runs arbitrary
  // external code might potentially access the vtable.
  void VisitCXXThisExpr(const CXXThisExpr *E) { UsesThis = true; }
};
522} // end anonymous namespace

524static bool BaseInitializerUsesThis(ASTContext &C, const Expr *Init) {
DynamicThisUseChecker Checker(C);
Checker.Visit(Init);
return Checker.UsesThis;
528}

530static void EmitBaseInitializer(CodeGenFunction &CGF,
                              const CXXRecordDecl *ClassDecl,
                              CXXCtorInitializer *BaseInit) {
assert(BaseInit->isBaseInitializer() &&((BaseInit->isBaseInitializer() && "Must have base initializer!"
) ? static_cast<void> (0) : __assert_fail ("BaseInit->isBaseInitializer() && \"Must have base initializer!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 534, __PRETTY_FUNCTION__))
       "Must have base initializer!")((BaseInit->isBaseInitializer() && "Must have base initializer!"
) ? static_cast<void> (0) : __assert_fail ("BaseInit->isBaseInitializer() && \"Must have base initializer!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 534, __PRETTY_FUNCTION__));

Address ThisPtr = CGF.LoadCXXThisAddress();

const Type *BaseType = BaseInit->getBaseClass();
CXXRecordDecl *BaseClassDecl =
  cast<CXXRecordDecl>(BaseType->getAs<RecordType>()->getDecl());

bool isBaseVirtual = BaseInit->isBaseVirtual();

// If the initializer for the base (other than the constructor
// itself) accesses 'this' in any way, we need to initialize the
// vtables.
if (BaseInitializerUsesThis(CGF.getContext(), BaseInit->getInit()))
  CGF.InitializeVTablePointers(ClassDecl);

// We can pretend to be a complete class because it only matters for
// virtual bases, and we only do virtual bases for complete ctors.
Address V =
  CGF.GetAddressOfDirectBaseInCompleteClass(ThisPtr, ClassDecl,
                                            BaseClassDecl,
                                            isBaseVirtual);
AggValueSlot AggSlot =
    AggValueSlot::forAddr(
        V, Qualifiers(),
        AggValueSlot::IsDestructed,
        AggValueSlot::DoesNotNeedGCBarriers,
        AggValueSlot::IsNotAliased,
        CGF.getOverlapForBaseInit(ClassDecl, BaseClassDecl, isBaseVirtual));

CGF.EmitAggExpr(BaseInit->getInit(), AggSlot);

if (CGF.CGM.getLangOpts().Exceptions &&
    !BaseClassDecl->hasTrivialDestructor())
  CGF.EHStack.pushCleanup<CallBaseDtor>(EHCleanup, BaseClassDecl,
                                        isBaseVirtual);
570}

572static bool isMemcpyEquivalentSpecialMember(const CXXMethodDecl *D) {
auto *CD = dyn_cast<CXXConstructorDecl>(D);
if (!(CD && CD->isCopyOrMoveConstructor()) &&
    !D->isCopyAssignmentOperator() && !D->isMoveAssignmentOperator())
  return false;

// We can emit a memcpy for a trivial copy or move constructor/assignment.
if (D->isTrivial() && !D->getParent()->mayInsertExtraPadding())
  return true;

// We *must* emit a memcpy for a defaulted union copy or move op.
if (D->getParent()->isUnion() && D->isDefaulted())
  return true;

return false;
587}

589static void EmitLValueForAnyFieldInitialization(CodeGenFunction &CGF,
                                              CXXCtorInitializer *MemberInit,
                                              LValue &LHS) {
FieldDecl *Field = MemberInit->getAnyMember();
if (MemberInit->isIndirectMemberInitializer()) {
  // If we are initializing an anonymous union field, drill down to the field.
  IndirectFieldDecl *IndirectField = MemberInit->getIndirectMember();
  for (const auto *I : IndirectField->chain())
    LHS = CGF.EmitLValueForFieldInitialization(LHS, cast<FieldDecl>(I));
} else {
  LHS = CGF.EmitLValueForFieldInitialization(LHS, Field);
}
601}

603static void EmitMemberInitializer(CodeGenFunction &CGF,
                                const CXXRecordDecl *ClassDecl,
                                CXXCtorInitializer *MemberInit,
                                const CXXConstructorDecl *Constructor,
                                FunctionArgList &Args) {
ApplyDebugLocation Loc(CGF, MemberInit->getSourceLocation());
assert(MemberInit->isAnyMemberInitializer() &&((MemberInit->isAnyMemberInitializer() && "Must have member initializer!"
) ? static_cast<void> (0) : __assert_fail ("MemberInit->isAnyMemberInitializer() && \"Must have member initializer!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 610, __PRETTY_FUNCTION__))
       "Must have member initializer!")((MemberInit->isAnyMemberInitializer() && "Must have member initializer!"
) ? static_cast<void> (0) : __assert_fail ("MemberInit->isAnyMemberInitializer() && \"Must have member initializer!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 610, __PRETTY_FUNCTION__));
assert(MemberInit->getInit() && "Must have initializer!")((MemberInit->getInit() && "Must have initializer!"
) ? static_cast<void> (0) : __assert_fail ("MemberInit->getInit() && \"Must have initializer!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 611, __PRETTY_FUNCTION__));

// non-static data member initializers.
FieldDecl *Field = MemberInit->getAnyMember();
QualType FieldType = Field->getType();

llvm::Value *ThisPtr = CGF.LoadCXXThis();
QualType RecordTy = CGF.getContext().getTypeDeclType(ClassDecl);
LValue LHS;

// If a base constructor is being emitted, create an LValue that has the
// non-virtual alignment.
if (CGF.CurGD.getCtorType() == Ctor_Base)
  LHS = CGF.MakeNaturalAlignPointeeAddrLValue(ThisPtr, RecordTy);
else
  LHS = CGF.MakeNaturalAlignAddrLValue(ThisPtr, RecordTy);

EmitLValueForAnyFieldInitialization(CGF, MemberInit, LHS);

// Special case: if we are in a copy or move constructor, and we are copying
// an array of PODs or classes with trivial copy constructors, ignore the
// AST and perform the copy we know is equivalent.
// FIXME: This is hacky at best... if we had a bit more explicit information
// in the AST, we could generalize it more easily.
const ConstantArrayType *Array
  = CGF.getContext().getAsConstantArrayType(FieldType);
if (Array && Constructor->isDefaulted() &&
    Constructor->isCopyOrMoveConstructor()) {
  QualType BaseElementTy = CGF.getContext().getBaseElementType(Array);
  CXXConstructExpr *CE = dyn_cast<CXXConstructExpr>(MemberInit->getInit());
  if (BaseElementTy.isPODType(CGF.getContext()) ||
      (CE && isMemcpyEquivalentSpecialMember(CE->getConstructor()))) {
    unsigned SrcArgIndex =
        CGF.CGM.getCXXABI().getSrcArgforCopyCtor(Constructor, Args);
    llvm::Value *SrcPtr
      = CGF.Builder.CreateLoad(CGF.GetAddrOfLocalVar(Args[SrcArgIndex]));
    LValue ThisRHSLV = CGF.MakeNaturalAlignAddrLValue(SrcPtr, RecordTy);
    LValue Src = CGF.EmitLValueForFieldInitialization(ThisRHSLV, Field);

    // Copy the aggregate.
    CGF.EmitAggregateCopy(LHS, Src, FieldType, CGF.getOverlapForFieldInit(Field),
                          LHS.isVolatileQualified());
    // Ensure that we destroy the objects if an exception is thrown later in
    // the constructor.
    QualType::DestructionKind dtorKind = FieldType.isDestructedType();
    if (CGF.needsEHCleanup(dtorKind))
      CGF.pushEHDestroy(dtorKind, LHS.getAddress(), FieldType);
    return;
  }
}

CGF.EmitInitializerForField(Field, LHS, MemberInit->getInit());
663}

665void CodeGenFunction::EmitInitializerForField(FieldDecl *Field, LValue LHS,
                                            Expr *Init) {
QualType FieldType = Field->getType();
switch (getEvaluationKind(FieldType)) {
case TEK_Scalar:
  if (LHS.isSimple()) {
    EmitExprAsInit(Init, Field, LHS, false);
  } else {
    RValue RHS = RValue::get(EmitScalarExpr(Init));
    EmitStoreThroughLValue(RHS, LHS);
  }
  break;
case TEK_Complex:
  EmitComplexExprIntoLValue(Init, LHS, /*isInit*/ true);
  break;
case TEK_Aggregate: {
  AggValueSlot Slot =
      AggValueSlot::forLValue(
          LHS,
          AggValueSlot::IsDestructed,
          AggValueSlot::DoesNotNeedGCBarriers,
          AggValueSlot::IsNotAliased,
          getOverlapForFieldInit(Field),
          AggValueSlot::IsNotZeroed,
          // Checks are made by the code that calls constructor.
          AggValueSlot::IsSanitizerChecked);
  EmitAggExpr(Init, Slot);
  break;
}
}

// Ensure that we destroy this object if an exception is thrown
// later in the constructor.
QualType::DestructionKind dtorKind = FieldType.isDestructedType();
if (needsEHCleanup(dtorKind))
  pushEHDestroy(dtorKind, LHS.getAddress(), FieldType);
701}

703/// Checks whether the given constructor is a valid subject for the
704/// complete-to-base constructor delegation optimization, i.e.
705/// emitting the complete constructor as a simple call to the base
706/// constructor.
707bool CodeGenFunction::IsConstructorDelegationValid(
  const CXXConstructorDecl *Ctor) {

// Currently we disable the optimization for classes with virtual
// bases because (1) the addresses of parameter variables need to be
// consistent across all initializers but (2) the delegate function
// call necessarily creates a second copy of the parameter variable.
//
// The limiting example (purely theoretical AFAIK):
//   struct A { A(int &c) { c++; } };
//   struct B : virtual A {
//     B(int count) : A(count) { printf("%d\n", count); }
//   };
// ...although even this example could in principle be emitted as a
// delegation since the address of the parameter doesn't escape.
if (Ctor->getParent()->getNumVBases()) {
  // TODO: white-list trivial vbase initializers.  This case wouldn't
  // be subject to the restrictions below.

  // TODO: white-list cases where:
  //  - there are no non-reference parameters to the constructor
  //  - the initializers don't access any non-reference parameters
  //  - the initializers don't take the address of non-reference
  //    parameters
  //  - etc.
  // If we ever add any of the above cases, remember that:
  //  - function-try-blocks will always blacklist this optimization
  //  - we need to perform the constructor prologue and cleanup in
  //    EmitConstructorBody.

  return false;
}

// We also disable the optimization for variadic functions because
// it's impossible to "re-pass" varargs.
if (Ctor->getType()->getAs<FunctionProtoType>()->isVariadic())
  return false;

// FIXME: Decide if we can do a delegation of a delegating constructor.
if (Ctor->isDelegatingConstructor())
  return false;

return true;
750}

752// Emit code in ctor (Prologue==true) or dtor (Prologue==false)
753// to poison the extra field paddings inserted under
754// -fsanitize-address-field-padding=1|2.
755void CodeGenFunction::EmitAsanPrologueOrEpilogue(bool Prologue) {
ASTContext &Context = getContext();
const CXXRecordDecl *ClassDecl =
    Prologue ? cast<CXXConstructorDecl>(CurGD.getDecl())->getParent()
             : cast<CXXDestructorDecl>(CurGD.getDecl())->getParent();
if (!ClassDecl->mayInsertExtraPadding()) return;

struct SizeAndOffset {
  uint64_t Size;
  uint64_t Offset;
};

unsigned PtrSize = CGM.getDataLayout().getPointerSizeInBits();
const ASTRecordLayout &Info = Context.getASTRecordLayout(ClassDecl);

// Populate sizes and offsets of fields.
SmallVector<SizeAndOffset, 16> SSV(Info.getFieldCount());
for (unsigned i = 0, e = Info.getFieldCount(); i != e; ++i)
  SSV[i].Offset =
      Context.toCharUnitsFromBits(Info.getFieldOffset(i)).getQuantity();

size_t NumFields = 0;
for (const auto *Field : ClassDecl->fields()) {
  const FieldDecl *D = Field;
  std::pair<CharUnits, CharUnits> FieldInfo =
      Context.getTypeInfoInChars(D->getType());
  CharUnits FieldSize = FieldInfo.first;
  assert(NumFields < SSV.size())((NumFields < SSV.size()) ? static_cast<void> (0) : __assert_fail
 ("NumFields < SSV.size()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 782, __PRETTY_FUNCTION__));
  SSV[NumFields].Size = D->isBitField() ? 0 : FieldSize.getQuantity();
  NumFields++;
}
assert(NumFields == SSV.size())((NumFields == SSV.size()) ? static_cast<void> (0) : __assert_fail
 ("NumFields == SSV.size()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 786, __PRETTY_FUNCTION__));
if (SSV.size() <= 1) return;

// We will insert calls to __asan_* run-time functions.
// LLVM AddressSanitizer pass may decide to inline them later.
llvm::Type *Args[2] = {IntPtrTy, IntPtrTy};
llvm::FunctionType *FTy =
    llvm::FunctionType::get(CGM.VoidTy, Args, false);
llvm::FunctionCallee F = CGM.CreateRuntimeFunction(
    FTy, Prologue ? "__asan_poison_intra_object_redzone"
                  : "__asan_unpoison_intra_object_redzone");

llvm::Value *ThisPtr = LoadCXXThis();
ThisPtr = Builder.CreatePtrToInt(ThisPtr, IntPtrTy);
uint64_t TypeSize = Info.getNonVirtualSize().getQuantity();
// For each field check if it has sufficient padding,
// if so (un)poison it with a call.
for (size_t i = 0; i < SSV.size(); i++) {
  uint64_t AsanAlignment = 8;
  uint64_t NextField = i == SSV.size() - 1 ? TypeSize : SSV[i + 1].Offset;
  uint64_t PoisonSize = NextField - SSV[i].Offset - SSV[i].Size;
  uint64_t EndOffset = SSV[i].Offset + SSV[i].Size;
  if (PoisonSize < AsanAlignment || !SSV[i].Size ||
      (NextField % AsanAlignment) != 0)
    continue;
  Builder.CreateCall(
      F, {Builder.CreateAdd(ThisPtr, Builder.getIntN(PtrSize, EndOffset)),
          Builder.getIntN(PtrSize, PoisonSize)});
}
815}

817/// EmitConstructorBody - Emits the body of the current constructor.
818void CodeGenFunction::EmitConstructorBody(FunctionArgList &Args) {
EmitAsanPrologueOrEpilogue(true);
const CXXConstructorDecl *Ctor = cast<CXXConstructorDecl>(CurGD.getDecl());
CXXCtorType CtorType = CurGD.getCtorType();

assert((CGM.getTarget().getCXXABI().hasConstructorVariants() ||(((CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType
 == Ctor_Complete) && "can only generate complete ctor for this ABI"
) ? static_cast<void> (0) : __assert_fail ("(CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType == Ctor_Complete) && \"can only generate complete ctor for this ABI\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 825, __PRETTY_FUNCTION__))
        CtorType == Ctor_Complete) &&(((CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType
 == Ctor_Complete) && "can only generate complete ctor for this ABI"
) ? static_cast<void> (0) : __assert_fail ("(CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType == Ctor_Complete) && \"can only generate complete ctor for this ABI\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 825, __PRETTY_FUNCTION__))
       "can only generate complete ctor for this ABI")(((CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType
 == Ctor_Complete) && "can only generate complete ctor for this ABI"
) ? static_cast<void> (0) : __assert_fail ("(CGM.getTarget().getCXXABI().hasConstructorVariants() || CtorType == Ctor_Complete) && \"can only generate complete ctor for this ABI\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 825, __PRETTY_FUNCTION__));

// Before we go any further, try the complete->base constructor
// delegation optimization.
if (CtorType == Ctor_Complete && IsConstructorDelegationValid(Ctor) &&
    CGM.getTarget().getCXXABI().hasConstructorVariants()) {
  EmitDelegateCXXConstructorCall(Ctor, Ctor_Base, Args, Ctor->getEndLoc());
  return;
}

const FunctionDecl *Definition = nullptr;
Stmt *Body = Ctor->getBody(Definition);
assert(Definition == Ctor && "emitting wrong constructor body")((Definition == Ctor && "emitting wrong constructor body"
) ? static_cast<void> (0) : __assert_fail ("Definition == Ctor && \"emitting wrong constructor body\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 837, __PRETTY_FUNCTION__));

// Enter the function-try-block before the constructor prologue if
// applicable.
bool IsTryBody = (Body && isa<CXXTryStmt>(Body));
if (IsTryBody)
  EnterCXXTryStmt(*cast<CXXTryStmt>(Body), true);

incrementProfileCounter(Body);

RunCleanupsScope RunCleanups(*this);

// TODO: in restricted cases, we can emit the vbase initializers of
// a complete ctor and then delegate to the base ctor.

// Emit the constructor prologue, i.e. the base and member
// initializers.
EmitCtorPrologue(Ctor, CtorType, Args);

// Emit the body of the statement.
if (IsTryBody)
  EmitStmt(cast<CXXTryStmt>(Body)->getTryBlock());
else if (Body)
  EmitStmt(Body);

// Emit any cleanup blocks associated with the member or base
// initializers, which includes (along the exceptional path) the
// destructors for those members and bases that were fully
// constructed.
RunCleanups.ForceCleanup();

if (IsTryBody)
  ExitCXXTryStmt(*cast<CXXTryStmt>(Body), true);
870}

872namespace {
/// RAII object to indicate that codegen is copying the value representation
/// instead of the object representation. Useful when copying a struct or
/// class which has uninitialized members and we're only performing
/// lvalue-to-rvalue conversion on the object but not its members.
class CopyingValueRepresentation {
public:
  explicit CopyingValueRepresentation(CodeGenFunction &CGF)
      : CGF(CGF), OldSanOpts(CGF.SanOpts) {
    CGF.SanOpts.set(SanitizerKind::Bool, false);
    CGF.SanOpts.set(SanitizerKind::Enum, false);
  }
  ~CopyingValueRepresentation() {
    CGF.SanOpts = OldSanOpts;
  }
private:
  CodeGenFunction &CGF;
  SanitizerSet OldSanOpts;
};
891} // end anonymous namespace

893namespace {
class FieldMemcpyizer {
public:
  FieldMemcpyizer(CodeGenFunction &CGF, const CXXRecordDecl *ClassDecl,
                  const VarDecl *SrcRec)
    : CGF(CGF), ClassDecl(ClassDecl), SrcRec(SrcRec),
      RecLayout(CGF.getContext().getASTRecordLayout(ClassDecl)),
      FirstField(nullptr), LastField(nullptr), FirstFieldOffset(0),
      LastFieldOffset(0), LastAddedFieldIndex(0) {}

  bool isMemcpyableField(FieldDecl *F) const {
    // Never memcpy fields when we are adding poisoned paddings.
    if (CGF.getContext().getLangOpts().SanitizeAddressFieldPadding)
      return false;
    Qualifiers Qual = F->getType().getQualifiers();
    if (Qual.hasVolatile() || Qual.hasObjCLifetime())
      return false;
    return true;
  }

  void addMemcpyableField(FieldDecl *F) {
    if (!FirstField)
      addInitialField(F);
    else
      addNextField(F);
  }

  CharUnits getMemcpySize(uint64_t FirstByteOffset) const {
    ASTContext &Ctx = CGF.getContext();
    unsigned LastFieldSize =
        LastField->isBitField()
            ? LastField->getBitWidthValue(Ctx)
            : Ctx.toBits(
                  Ctx.getTypeInfoDataSizeInChars(LastField->getType()).first);
    uint64_t MemcpySizeBits = LastFieldOffset + LastFieldSize -
                              FirstByteOffset + Ctx.getCharWidth() - 1;
    CharUnits MemcpySize = Ctx.toCharUnitsFromBits(MemcpySizeBits);
    return MemcpySize;
  }

  void emitMemcpy() {
    // Give the subclass a chance to bail out if it feels the memcpy isn't
    // worth it (e.g. Hasn't aggregated enough data).
    if (!FirstField) {
      return;
    }

    uint64_t FirstByteOffset;
    if (FirstField->isBitField()) {
      const CGRecordLayout &RL =
        CGF.getTypes().getCGRecordLayout(FirstField->getParent());
      const CGBitFieldInfo &BFInfo = RL.getBitFieldInfo(FirstField);
      // FirstFieldOffset is not appropriate for bitfields,
      // we need to use the storage offset instead.
      FirstByteOffset = CGF.getContext().toBits(BFInfo.StorageOffset);
    } else {
      FirstByteOffset = FirstFieldOffset;
    }

    CharUnits MemcpySize = getMemcpySize(FirstByteOffset);
    QualType RecordTy = CGF.getContext().getTypeDeclType(ClassDecl);
    Address ThisPtr = CGF.LoadCXXThisAddress();
    LValue DestLV = CGF.MakeAddrLValue(ThisPtr, RecordTy);
    LValue Dest = CGF.EmitLValueForFieldInitialization(DestLV, FirstField);
    llvm::Value *SrcPtr = CGF.Builder.CreateLoad(CGF.GetAddrOfLocalVar(SrcRec));
    LValue SrcLV = CGF.MakeNaturalAlignAddrLValue(SrcPtr, RecordTy);
    LValue Src = CGF.EmitLValueForFieldInitialization(SrcLV, FirstField);

    emitMemcpyIR(Dest.isBitField() ? Dest.getBitFieldAddress() : Dest.getAddress(),
                 Src.isBitField() ? Src.getBitFieldAddress() : Src.getAddress(),
                 MemcpySize);
    reset();
  }

  void reset() {
    FirstField = nullptr;
  }

protected:
  CodeGenFunction &CGF;
  const CXXRecordDecl *ClassDecl;

private:
  void emitMemcpyIR(Address DestPtr, Address SrcPtr, CharUnits Size) {
    llvm::PointerType *DPT = DestPtr.getType();
    llvm::Type *DBP =
      llvm::Type::getInt8PtrTy(CGF.getLLVMContext(), DPT->getAddressSpace());
    DestPtr = CGF.Builder.CreateBitCast(DestPtr, DBP);

    llvm::PointerType *SPT = SrcPtr.getType();
    llvm::Type *SBP =
      llvm::Type::getInt8PtrTy(CGF.getLLVMContext(), SPT->getAddressSpace());
    SrcPtr = CGF.Builder.CreateBitCast(SrcPtr, SBP);

    CGF.Builder.CreateMemCpy(DestPtr, SrcPtr, Size.getQuantity());
  }

  void addInitialField(FieldDecl *F) {
    FirstField = F;
    LastField = F;
    FirstFieldOffset = RecLayout.getFieldOffset(F->getFieldIndex());
    LastFieldOffset = FirstFieldOffset;
    LastAddedFieldIndex = F->getFieldIndex();
  }

  void addNextField(FieldDecl *F) {
    // For the most part, the following invariant will hold:
    //   F->getFieldIndex() == LastAddedFieldIndex + 1
    // The one exception is that Sema won't add a copy-initializer for an
    // unnamed bitfield, which will show up here as a gap in the sequence.
    assert(F->getFieldIndex() >= LastAddedFieldIndex + 1 &&((F->getFieldIndex() >= LastAddedFieldIndex + 1 &&
 "Cannot aggregate fields out of order.") ? static_cast<void
> (0) : __assert_fail ("F->getFieldIndex() >= LastAddedFieldIndex + 1 && \"Cannot aggregate fields out of order.\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1004, __PRETTY_FUNCTION__))
           "Cannot aggregate fields out of order.")((F->getFieldIndex() >= LastAddedFieldIndex + 1 &&
 "Cannot aggregate fields out of order.") ? static_cast<void
> (0) : __assert_fail ("F->getFieldIndex() >= LastAddedFieldIndex + 1 && \"Cannot aggregate fields out of order.\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1004, __PRETTY_FUNCTION__));
    LastAddedFieldIndex = F->getFieldIndex();

    // The 'first' and 'last' fields are chosen by offset, rather than field
    // index. This allows the code to support bitfields, as well as regular
    // fields.
    uint64_t FOffset = RecLayout.getFieldOffset(F->getFieldIndex());
    if (FOffset < FirstFieldOffset) {
      FirstField = F;
      FirstFieldOffset = FOffset;
    } else if (FOffset >= LastFieldOffset) {
      LastField = F;
      LastFieldOffset = FOffset;
    }
  }

  const VarDecl *SrcRec;
  const ASTRecordLayout &RecLayout;
  FieldDecl *FirstField;
  FieldDecl *LastField;
  uint64_t FirstFieldOffset, LastFieldOffset;
  unsigned LastAddedFieldIndex;
};

class ConstructorMemcpyizer : public FieldMemcpyizer {
private:
  /// Get source argument for copy constructor. Returns null if not a copy
  /// constructor.
  static const VarDecl *getTrivialCopySource(CodeGenFunction &CGF,
                                             const CXXConstructorDecl *CD,
                                             FunctionArgList &Args) {
    if (CD->isCopyOrMoveConstructor() && CD->isDefaulted())
      return Args[CGF.CGM.getCXXABI().getSrcArgforCopyCtor(CD, Args)];
    return nullptr;
  }

  // Returns true if a CXXCtorInitializer represents a member initialization
  // that can be rolled into a memcpy.
  bool isMemberInitMemcpyable(CXXCtorInitializer *MemberInit) const {
    if (!MemcpyableCtor)
      return false;
    FieldDecl *Field = MemberInit->getMember();
    assert(Field && "No field for member init.")((Field && "No field for member init.") ? static_cast
<void> (0) : __assert_fail ("Field && \"No field for member init.\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1046, __PRETTY_FUNCTION__));
    QualType FieldType = Field->getType();
    CXXConstructExpr *CE = dyn_cast<CXXConstructExpr>(MemberInit->getInit());

    // Bail out on non-memcpyable, not-trivially-copyable members.
    if (!(CE && isMemcpyEquivalentSpecialMember(CE->getConstructor())) &&
        !(FieldType.isTriviallyCopyableType(CGF.getContext()) ||
          FieldType->isReferenceType()))
      return false;

    // Bail out on volatile fields.
    if (!isMemcpyableField(Field))
      return false;

    // Otherwise we're good.
    return true;
  }

public:
  ConstructorMemcpyizer(CodeGenFunction &CGF, const CXXConstructorDecl *CD,
                        FunctionArgList &Args)
    : FieldMemcpyizer(CGF, CD->getParent(), getTrivialCopySource(CGF, CD, Args)),
      ConstructorDecl(CD),
      MemcpyableCtor(CD->isDefaulted() &&
                     CD->isCopyOrMoveConstructor() &&
                     CGF.getLangOpts().getGC() == LangOptions::NonGC),
      Args(Args) { }

  void addMemberInitializer(CXXCtorInitializer *MemberInit) {
    if (isMemberInitMemcpyable(MemberInit)) {
      AggregatedInits.push_back(MemberInit);
      addMemcpyableField(MemberInit->getMember());
    } else {
      emitAggregatedInits();
      EmitMemberInitializer(CGF, ConstructorDecl->getParent(), MemberInit,
                            ConstructorDecl, Args);
    }
  }

  void emitAggregatedInits() {
    if (AggregatedInits.size() <= 1) {
      // This memcpy is too small to be worthwhile. Fall back on default
      // codegen.
      if (!AggregatedInits.empty()) {
        CopyingValueRepresentation CVR(CGF);
        EmitMemberInitializer(CGF, ConstructorDecl->getParent(),
                              AggregatedInits[0], ConstructorDecl, Args);
        AggregatedInits.clear();
      }
      reset();
      return;
    }

    pushEHDestructors();
    emitMemcpy();
    AggregatedInits.clear();
  }

  void pushEHDestructors() {
    Address ThisPtr = CGF.LoadCXXThisAddress();
    QualType RecordTy = CGF.getContext().getTypeDeclType(ClassDecl);
    LValue LHS = CGF.MakeAddrLValue(ThisPtr, RecordTy);

    for (unsigned i = 0; i < AggregatedInits.size(); ++i) {
      CXXCtorInitializer *MemberInit = AggregatedInits[i];
      QualType FieldType = MemberInit->getAnyMember()->getType();
      QualType::DestructionKind dtorKind = FieldType.isDestructedType();
      if (!CGF.needsEHCleanup(dtorKind))
        continue;
      LValue FieldLHS = LHS;
      EmitLValueForAnyFieldInitialization(CGF, MemberInit, FieldLHS);
      CGF.pushEHDestroy(dtorKind, FieldLHS.getAddress(), FieldType);
    }
  }

  void finish() {
    emitAggregatedInits();
  }

private:
  const CXXConstructorDecl *ConstructorDecl;
  bool MemcpyableCtor;
  FunctionArgList &Args;
  SmallVector<CXXCtorInitializer*, 16> AggregatedInits;
};

class AssignmentMemcpyizer : public FieldMemcpyizer {
private:
  // Returns the memcpyable field copied by the given statement, if one
  // exists. Otherwise returns null.
  FieldDecl *getMemcpyableField(Stmt *S) {
    if (!AssignmentsMemcpyable)
      return nullptr;
    if (BinaryOperator *BO = dyn_cast<BinaryOperator>(S)) {
      // Recognise trivial assignments.
      if (BO->getOpcode() != BO_Assign)
        return nullptr;
      MemberExpr *ME = dyn_cast<MemberExpr>(BO->getLHS());
      if (!ME)
        return nullptr;
      FieldDecl *Field = dyn_cast<FieldDecl>(ME->getMemberDecl());
      if (!Field || !isMemcpyableField(Field))
        return nullptr;
      Stmt *RHS = BO->getRHS();
      if (ImplicitCastExpr *EC = dyn_cast<ImplicitCastExpr>(RHS))
        RHS = EC->getSubExpr();
      if (!RHS)
        return nullptr;
      if (MemberExpr *ME2 = dyn_cast<MemberExpr>(RHS)) {
        if (ME2->getMemberDecl() == Field)
          return Field;
      }
      return nullptr;
    } else if (CXXMemberCallExpr *MCE = dyn_cast<CXXMemberCallExpr>(S)) {
      CXXMethodDecl *MD = dyn_cast<CXXMethodDecl>(MCE->getCalleeDecl());
      if (!(MD && isMemcpyEquivalentSpecialMember(MD)))
        return nullptr;
      MemberExpr *IOA = dyn_cast<MemberExpr>(MCE->getImplicitObjectArgument());
      if (!IOA)
        return nullptr;
      FieldDecl *Field = dyn_cast<FieldDecl>(IOA->getMemberDecl());
      if (!Field || !isMemcpyableField(Field))
        return nullptr;
      MemberExpr *Arg0 = dyn_cast<MemberExpr>(MCE->getArg(0));
      if (!Arg0 || Field != dyn_cast<FieldDecl>(Arg0->getMemberDecl()))
        return nullptr;
      return Field;
    } else if (CallExpr *CE = dyn_cast<CallExpr>(S)) {
      FunctionDecl *FD = dyn_cast<FunctionDecl>(CE->getCalleeDecl());
      if (!FD || FD->getBuiltinID() != Builtin::BI__builtin_memcpy)
        return nullptr;
      Expr *DstPtr = CE->getArg(0);
      if (ImplicitCastExpr *DC = dyn_cast<ImplicitCastExpr>(DstPtr))
        DstPtr = DC->getSubExpr();
      UnaryOperator *DUO = dyn_cast<UnaryOperator>(DstPtr);
      if (!DUO || DUO->getOpcode() != UO_AddrOf)
        return nullptr;
      MemberExpr *ME = dyn_cast<MemberExpr>(DUO->getSubExpr());
      if (!ME)
        return nullptr;
      FieldDecl *Field = dyn_cast<FieldDecl>(ME->getMemberDecl());
      if (!Field || !isMemcpyableField(Field))
        return nullptr;
      Expr *SrcPtr = CE->getArg(1);
      if (ImplicitCastExpr *SC = dyn_cast<ImplicitCastExpr>(SrcPtr))
        SrcPtr = SC->getSubExpr();
      UnaryOperator *SUO = dyn_cast<UnaryOperator>(SrcPtr);
      if (!SUO || SUO->getOpcode() != UO_AddrOf)
        return nullptr;
      MemberExpr *ME2 = dyn_cast<MemberExpr>(SUO->getSubExpr());
      if (!ME2 || Field != dyn_cast<FieldDecl>(ME2->getMemberDecl()))
        return nullptr;
      return Field;
    }

    return nullptr;
  }

  bool AssignmentsMemcpyable;
  SmallVector<Stmt*, 16> AggregatedStmts;

public:
  AssignmentMemcpyizer(CodeGenFunction &CGF, const CXXMethodDecl *AD,
                       FunctionArgList &Args)
    : FieldMemcpyizer(CGF, AD->getParent(), Args[Args.size() - 1]),
      AssignmentsMemcpyable(CGF.getLangOpts().getGC() == LangOptions::NonGC) {
    assert(Args.size() == 2)((Args.size() == 2) ? static_cast<void> (0) : __assert_fail
 ("Args.size() == 2", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1212, __PRETTY_FUNCTION__));
  }

  void emitAssignment(Stmt *S) {
    FieldDecl *F = getMemcpyableField(S);
    if (F) {
      addMemcpyableField(F);
      AggregatedStmts.push_back(S);
    } else {
      emitAggregatedStmts();
      CGF.EmitStmt(S);
    }
  }

  void emitAggregatedStmts() {
    if (AggregatedStmts.size() <= 1) {
      if (!AggregatedStmts.empty()) {
        CopyingValueRepresentation CVR(CGF);
        CGF.EmitStmt(AggregatedStmts[0]);
      }
      reset();
    }

    emitMemcpy();
    AggregatedStmts.clear();
  }

  void finish() {
    emitAggregatedStmts();
  }
};
1243} // end anonymous namespace

1245static bool isInitializerOfDynamicClass(const CXXCtorInitializer *BaseInit) {
const Type *BaseType = BaseInit->getBaseClass();
const auto *BaseClassDecl =
        cast<CXXRecordDecl>(BaseType->getAs<RecordType>()->getDecl());
return BaseClassDecl->isDynamicClass();
1250}

1252/// EmitCtorPrologue - This routine generates necessary code to initialize
1253/// base classes and non-static data members belonging to this constructor.
1254void CodeGenFunction::EmitCtorPrologue(const CXXConstructorDecl *CD,
                                     CXXCtorType CtorType,
                                     FunctionArgList &Args) {
if (CD->isDelegatingConstructor())
  return EmitDelegatingCXXConstructorCall(CD, Args);

const CXXRecordDecl *ClassDecl = CD->getParent();

CXXConstructorDecl::init_const_iterator B = CD->init_begin(),
                                        E = CD->init_end();

// Virtual base initializers first, if any. They aren't needed if:
// - This is a base ctor variant
// - There are no vbases
// - The class is abstract, so a complete object of it cannot be constructed
//
// The check for an abstract class is necessary because sema may not have
// marked virtual base destructors referenced.
bool ConstructVBases = CtorType != Ctor_Base &&
                       ClassDecl->getNumVBases() != 0 &&
                       !ClassDecl->isAbstract();

// In the Microsoft C++ ABI, there are no constructor variants. Instead, the
// constructor of a class with virtual bases takes an additional parameter to
// conditionally construct the virtual bases. Emit that check here.
llvm::BasicBlock *BaseCtorContinueBB = nullptr;
if (ConstructVBases &&
    !CGM.getTarget().getCXXABI().hasConstructorVariants()) {
  BaseCtorContinueBB =
      CGM.getCXXABI().EmitCtorCompleteObjectHandler(*this, ClassDecl);
  assert(BaseCtorContinueBB)((BaseCtorContinueBB) ? static_cast<void> (0) : __assert_fail
 ("BaseCtorContinueBB", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1284, __PRETTY_FUNCTION__));
}

llvm::Value *const OldThis = CXXThisValue;
for (; B != E && (*B)->isBaseInitializer() && (*B)->isBaseVirtual(); B++) {
  if (!ConstructVBases)
    continue;
  if (CGM.getCodeGenOpts().StrictVTablePointers &&
      CGM.getCodeGenOpts().OptimizationLevel > 0 &&
      isInitializerOfDynamicClass(*B))
    CXXThisValue = Builder.CreateLaunderInvariantGroup(LoadCXXThis());
  EmitBaseInitializer(*this, ClassDecl, *B);
}

if (BaseCtorContinueBB) {
  // Complete object handler should continue to the remaining initializers.
  Builder.CreateBr(BaseCtorContinueBB);
  EmitBlock(BaseCtorContinueBB);
}

// Then, non-virtual base initializers.
for (; B != E && (*B)->isBaseInitializer(); B++) {
  assert(!(*B)->isBaseVirtual())((!(*B)->isBaseVirtual()) ? static_cast<void> (0) : __assert_fail
 ("!(*B)->isBaseVirtual()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1306, __PRETTY_FUNCTION__));

  if (CGM.getCodeGenOpts().StrictVTablePointers &&
      CGM.getCodeGenOpts().OptimizationLevel > 0 &&
      isInitializerOfDynamicClass(*B))
    CXXThisValue = Builder.CreateLaunderInvariantGroup(LoadCXXThis());
  EmitBaseInitializer(*this, ClassDecl, *B);
}

CXXThisValue = OldThis;

InitializeVTablePointers(ClassDecl);

// And finally, initialize class members.
FieldConstructionScope FCS(*this, LoadCXXThisAddress());
ConstructorMemcpyizer CM(*this, CD, Args);
for (; B != E; B++) {
  CXXCtorInitializer *Member = (*B);
  assert(!Member->isBaseInitializer())((!Member->isBaseInitializer()) ? static_cast<void> (
0) : __assert_fail ("!Member->isBaseInitializer()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1324, __PRETTY_FUNCTION__));
  assert(Member->isAnyMemberInitializer() &&((Member->isAnyMemberInitializer() && "Delegating initializer on non-delegating constructor"
) ? static_cast<void> (0) : __assert_fail ("Member->isAnyMemberInitializer() && \"Delegating initializer on non-delegating constructor\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1326, __PRETTY_FUNCTION__))
         "Delegating initializer on non-delegating constructor")((Member->isAnyMemberInitializer() && "Delegating initializer on non-delegating constructor"
) ? static_cast<void> (0) : __assert_fail ("Member->isAnyMemberInitializer() && \"Delegating initializer on non-delegating constructor\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1326, __PRETTY_FUNCTION__));
  CM.addMemberInitializer(Member);
}
CM.finish();
1330}

1332static bool
1333FieldHasTrivialDestructorBody(ASTContext &Context, const FieldDecl *Field);

1335static bool
1336HasTrivialDestructorBody(ASTContext &Context,
                       const CXXRecordDecl *BaseClassDecl,
                       const CXXRecordDecl *MostDerivedClassDecl)
1339{
// If the destructor is trivial we don't have to check anything else.
if (BaseClassDecl->hasTrivialDestructor())
  return true;

if (!BaseClassDecl->getDestructor()->hasTrivialBody())
  return false;

// Check fields.
for (const auto *Field : BaseClassDecl->fields())
  if (!FieldHasTrivialDestructorBody(Context, Field))
    return false;

// Check non-virtual bases.
for (const auto &I : BaseClassDecl->bases()) {
  if (I.isVirtual())
    continue;

  const CXXRecordDecl *NonVirtualBase =
    cast<CXXRecordDecl>(I.getType()->castAs<RecordType>()->getDecl());
  if (!HasTrivialDestructorBody(Context, NonVirtualBase,
                                MostDerivedClassDecl))
    return false;
}

if (BaseClassDecl == MostDerivedClassDecl) {
  // Check virtual bases.
  for (const auto &I : BaseClassDecl->vbases()) {
    const CXXRecordDecl *VirtualBase =
      cast<CXXRecordDecl>(I.getType()->castAs<RecordType>()->getDecl());
    if (!HasTrivialDestructorBody(Context, VirtualBase,
                                  MostDerivedClassDecl))
      return false;
  }
}

return true;
1376}

1378static bool
1379FieldHasTrivialDestructorBody(ASTContext &Context,
                                        const FieldDecl *Field)
1381{
QualType FieldBaseElementType = Context.getBaseElementType(Field->getType());

const RecordType *RT = FieldBaseElementType->getAs<RecordType>();
if (!RT)
  return true;

CXXRecordDecl *FieldClassDecl = cast<CXXRecordDecl>(RT->getDecl());

// The destructor for an implicit anonymous union member is never invoked.
if (FieldClassDecl->isUnion() && FieldClassDecl->isAnonymousStructOrUnion())
  return false;

return HasTrivialDestructorBody(Context, FieldClassDecl, FieldClassDecl);
1395}

1397/// CanSkipVTablePointerInitialization - Check whether we need to initialize
1398/// any vtable pointers before calling this destructor.
1399static bool CanSkipVTablePointerInitialization(CodeGenFunction &CGF,
                                             const CXXDestructorDecl *Dtor) {
const CXXRecordDecl *ClassDecl = Dtor->getParent();
if (!ClassDecl->isDynamicClass())
  return true;

if (!Dtor->hasTrivialBody())
  return false;

// Check the fields.
for (const auto *Field : ClassDecl->fields())
  if (!FieldHasTrivialDestructorBody(CGF.getContext(), Field))
    return false;

return true;
1414}

1416/// EmitDestructorBody - Emits the body of the current destructor.
1417void CodeGenFunction::EmitDestructorBody(FunctionArgList &Args) {
const CXXDestructorDecl *Dtor = cast<CXXDestructorDecl>(CurGD.getDecl());
CXXDtorType DtorType = CurGD.getDtorType();

// For an abstract class, non-base destructors are never used (and can't
// be emitted in general, because vbase dtors may not have been validated
// by Sema), but the Itanium ABI doesn't make them optional and Clang may
// in fact emit references to them from other compilations, so emit them
// as functions containing a trap instruction.
if (DtorType != Dtor_Base && Dtor->getParent()->isAbstract()) {
  llvm::CallInst *TrapCall = EmitTrapCall(llvm::Intrinsic::trap);
  TrapCall->setDoesNotReturn();
  TrapCall->setDoesNotThrow();
  Builder.CreateUnreachable();
  Builder.ClearInsertionPoint();
  return;
}

Stmt *Body = Dtor->getBody();
if (Body)
  incrementProfileCounter(Body);

// The call to operator delete in a deleting destructor happens
// outside of the function-try-block, which means it's always
// possible to delegate the destructor body to the complete
// destructor.  Do so.
if (DtorType == Dtor_Deleting) {
  RunCleanupsScope DtorEpilogue(*this);
  EnterDtorCleanups(Dtor, Dtor_Deleting);
  if (HaveInsertPoint()) {
    QualType ThisTy = Dtor->getThisObjectType();
    EmitCXXDestructorCall(Dtor, Dtor_Complete, /*ForVirtualBase=*/false,
                          /*Delegating=*/false, LoadCXXThisAddress(), ThisTy);
  }
  return;
}

// If the body is a function-try-block, enter the try before
// anything else.
bool isTryBody = (Body && isa<CXXTryStmt>(Body));
if (isTryBody)
  EnterCXXTryStmt(*cast<CXXTryStmt>(Body), true);
EmitAsanPrologueOrEpilogue(false);

// Enter the epilogue cleanups.
RunCleanupsScope DtorEpilogue(*this);

// If this is the complete variant, just invoke the base variant;
// the epilogue will destruct the virtual bases.  But we can't do
// this optimization if the body is a function-try-block, because
// we'd introduce *two* handler blocks.  In the Microsoft ABI, we
// always delegate because we might not have a definition in this TU.
switch (DtorType) {
case Dtor_Comdat: llvm_unreachable("not expecting a COMDAT")::llvm::llvm_unreachable_internal("not expecting a COMDAT", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1470);
case Dtor_Deleting: llvm_unreachable("already handled deleting case")::llvm::llvm_unreachable_internal("already handled deleting case"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1471);

case Dtor_Complete:
  assert((Body || getTarget().getCXXABI().isMicrosoft()) &&(((Body || getTarget().getCXXABI().isMicrosoft()) && "can't emit a dtor without a body for non-Microsoft ABIs"
) ? static_cast<void> (0) : __assert_fail ("(Body || getTarget().getCXXABI().isMicrosoft()) && \"can't emit a dtor without a body for non-Microsoft ABIs\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1475, __PRETTY_FUNCTION__))
         "can't emit a dtor without a body for non-Microsoft ABIs")(((Body || getTarget().getCXXABI().isMicrosoft()) && "can't emit a dtor without a body for non-Microsoft ABIs"
) ? static_cast<void> (0) : __assert_fail ("(Body || getTarget().getCXXABI().isMicrosoft()) && \"can't emit a dtor without a body for non-Microsoft ABIs\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1475, __PRETTY_FUNCTION__));

  // Enter the cleanup scopes for virtual bases.
  EnterDtorCleanups(Dtor, Dtor_Complete);

  if (!isTryBody) {
    QualType ThisTy = Dtor->getThisObjectType();
    EmitCXXDestructorCall(Dtor, Dtor_Base, /*ForVirtualBase=*/false,
                          /*Delegating=*/false, LoadCXXThisAddress(), ThisTy);
    break;
  }

  // Fallthrough: act like we're in the base variant.
  LLVM_FALLTHROUGH[[gnu::fallthrough]];

case Dtor_Base:
  assert(Body)((Body) ? static_cast<void> (0) : __assert_fail ("Body"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1491, __PRETTY_FUNCTION__));

  // Enter the cleanup scopes for fields and non-virtual bases.
  EnterDtorCleanups(Dtor, Dtor_Base);

  // Initialize the vtable pointers before entering the body.
  if (!CanSkipVTablePointerInitialization(*this, Dtor)) {
    // Insert the llvm.launder.invariant.group intrinsic before initializing
    // the vptrs to cancel any previous assumptions we might have made.
    if (CGM.getCodeGenOpts().StrictVTablePointers &&
        CGM.getCodeGenOpts().OptimizationLevel > 0)
      CXXThisValue = Builder.CreateLaunderInvariantGroup(LoadCXXThis());
    InitializeVTablePointers(Dtor->getParent());
  }

  if (isTryBody)
    EmitStmt(cast<CXXTryStmt>(Body)->getTryBlock());
  else if (Body)
    EmitStmt(Body);
  else {
    assert(Dtor->isImplicit() && "bodyless dtor not implicit")((Dtor->isImplicit() && "bodyless dtor not implicit"
) ? static_cast<void> (0) : __assert_fail ("Dtor->isImplicit() && \"bodyless dtor not implicit\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1511, __PRETTY_FUNCTION__));
    // nothing to do besides what's in the epilogue
  }
  // -fapple-kext must inline any call to this dtor into
  // the caller's body.
  if (getLangOpts().AppleKext)
    CurFn->addFnAttr(llvm::Attribute::AlwaysInline);

  break;
}

// Jump out through the epilogue cleanups.
DtorEpilogue.ForceCleanup();

// Exit the try if applicable.
if (isTryBody)
  ExitCXXTryStmt(*cast<CXXTryStmt>(Body), true);
1528}

1530void CodeGenFunction::emitImplicitAssignmentOperatorBody(FunctionArgList &Args) {
const CXXMethodDecl *AssignOp = cast<CXXMethodDecl>(CurGD.getDecl());
const Stmt *RootS = AssignOp->getBody();
assert(isa<CompoundStmt>(RootS) &&((isa<CompoundStmt>(RootS) && "Body of an implicit assignment operator should be compound stmt."
) ? static_cast<void> (0) : __assert_fail ("isa<CompoundStmt>(RootS) && \"Body of an implicit assignment operator should be compound stmt.\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1534, __PRETTY_FUNCTION__))
       "Body of an implicit assignment operator should be compound stmt.")((isa<CompoundStmt>(RootS) && "Body of an implicit assignment operator should be compound stmt."
) ? static_cast<void> (0) : __assert_fail ("isa<CompoundStmt>(RootS) && \"Body of an implicit assignment operator should be compound stmt.\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1534, __PRETTY_FUNCTION__));
const CompoundStmt *RootCS = cast<CompoundStmt>(RootS);

LexicalScope Scope(*this, RootCS->getSourceRange());

incrementProfileCounter(RootCS);
AssignmentMemcpyizer AM(*this, AssignOp, Args);
for (auto *I : RootCS->body())
  AM.emitAssignment(I);
AM.finish();
1544}

1546namespace {
llvm::Value *LoadThisForDtorDelete(CodeGenFunction &CGF,
                                   const CXXDestructorDecl *DD) {
  if (Expr *ThisArg = DD->getOperatorDeleteThisArg())
    return CGF.EmitScalarExpr(ThisArg);
  return CGF.LoadCXXThis();
}

/// Call the operator delete associated with the current destructor.
struct CallDtorDelete final : EHScopeStack::Cleanup {
  CallDtorDelete() {}

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    const CXXDestructorDecl *Dtor = cast<CXXDestructorDecl>(CGF.CurCodeDecl);
    const CXXRecordDecl *ClassDecl = Dtor->getParent();
    CGF.EmitDeleteCall(Dtor->getOperatorDelete(),
                       LoadThisForDtorDelete(CGF, Dtor),
                       CGF.getContext().getTagDeclType(ClassDecl));
  }
};

void EmitConditionalDtorDeleteCall(CodeGenFunction &CGF,
                                   llvm::Value *ShouldDeleteCondition,
                                   bool ReturnAfterDelete) {
  llvm::BasicBlock *callDeleteBB = CGF.createBasicBlock("dtor.call_delete");
  llvm::BasicBlock *continueBB = CGF.createBasicBlock("dtor.continue");
  llvm::Value *ShouldCallDelete
    = CGF.Builder.CreateIsNull(ShouldDeleteCondition);
  CGF.Builder.CreateCondBr(ShouldCallDelete, continueBB, callDeleteBB);

  CGF.EmitBlock(callDeleteBB);
  const CXXDestructorDecl *Dtor = cast<CXXDestructorDecl>(CGF.CurCodeDecl);
  const CXXRecordDecl *ClassDecl = Dtor->getParent();
  CGF.EmitDeleteCall(Dtor->getOperatorDelete(),
                     LoadThisForDtorDelete(CGF, Dtor),
                     CGF.getContext().getTagDeclType(ClassDecl));
  assert(Dtor->getOperatorDelete()->isDestroyingOperatorDelete() ==((Dtor->getOperatorDelete()->isDestroyingOperatorDelete
() == ReturnAfterDelete && "unexpected value for ReturnAfterDelete"
) ? static_cast<void> (0) : __assert_fail ("Dtor->getOperatorDelete()->isDestroyingOperatorDelete() == ReturnAfterDelete && \"unexpected value for ReturnAfterDelete\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1584, __PRETTY_FUNCTION__))
             ReturnAfterDelete &&((Dtor->getOperatorDelete()->isDestroyingOperatorDelete
() == ReturnAfterDelete && "unexpected value for ReturnAfterDelete"
) ? static_cast<void> (0) : __assert_fail ("Dtor->getOperatorDelete()->isDestroyingOperatorDelete() == ReturnAfterDelete && \"unexpected value for ReturnAfterDelete\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1584, __PRETTY_FUNCTION__))
         "unexpected value for ReturnAfterDelete")((Dtor->getOperatorDelete()->isDestroyingOperatorDelete
() == ReturnAfterDelete && "unexpected value for ReturnAfterDelete"
) ? static_cast<void> (0) : __assert_fail ("Dtor->getOperatorDelete()->isDestroyingOperatorDelete() == ReturnAfterDelete && \"unexpected value for ReturnAfterDelete\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1584, __PRETTY_FUNCTION__));
  if (ReturnAfterDelete)
    CGF.EmitBranchThroughCleanup(CGF.ReturnBlock);
  else
    CGF.Builder.CreateBr(continueBB);

  CGF.EmitBlock(continueBB);
}

struct CallDtorDeleteConditional final : EHScopeStack::Cleanup {
  llvm::Value *ShouldDeleteCondition;

public:
  CallDtorDeleteConditional(llvm::Value *ShouldDeleteCondition)
      : ShouldDeleteCondition(ShouldDeleteCondition) {
    assert(ShouldDeleteCondition != nullptr)((ShouldDeleteCondition != nullptr) ? static_cast<void>
 (0) : __assert_fail ("ShouldDeleteCondition != nullptr", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1599, __PRETTY_FUNCTION__));
  }

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    EmitConditionalDtorDeleteCall(CGF, ShouldDeleteCondition,
                                  /*ReturnAfterDelete*/false);
  }
};

class DestroyField  final : public EHScopeStack::Cleanup {
  const FieldDecl *field;
  CodeGenFunction::Destroyer *destroyer;
  bool useEHCleanupForArray;

public:
  DestroyField(const FieldDecl *field, CodeGenFunction::Destroyer *destroyer,
               bool useEHCleanupForArray)
      : field(field), destroyer(destroyer),
        useEHCleanupForArray(useEHCleanupForArray) {}

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    // Find the address of the field.
    Address thisValue = CGF.LoadCXXThisAddress();
    QualType RecordTy = CGF.getContext().getTagDeclType(field->getParent());
    LValue ThisLV = CGF.MakeAddrLValue(thisValue, RecordTy);
    LValue LV = CGF.EmitLValueForField(ThisLV, field);
    assert(LV.isSimple())((LV.isSimple()) ? static_cast<void> (0) : __assert_fail
 ("LV.isSimple()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1625, __PRETTY_FUNCTION__));

    CGF.emitDestroy(LV.getAddress(), field->getType(), destroyer,
                    flags.isForNormalCleanup() && useEHCleanupForArray);
  }
};

static void EmitSanitizerDtorCallback(CodeGenFunction &CGF, llvm::Value *Ptr,
           CharUnits::QuantityType PoisonSize) {
 CodeGenFunction::SanitizerScope SanScope(&CGF);
 // Pass in void pointer and size of region as arguments to runtime
 // function
 llvm::Value *Args[] = {CGF.Builder.CreateBitCast(Ptr, CGF.VoidPtrTy),
                        llvm::ConstantInt::get(CGF.SizeTy, PoisonSize)};

 llvm::Type *ArgTypes[] = {CGF.VoidPtrTy, CGF.SizeTy};

 llvm::FunctionType *FnType =
     llvm::FunctionType::get(CGF.VoidTy, ArgTypes, false);
 llvm::FunctionCallee Fn =
     CGF.CGM.CreateRuntimeFunction(FnType, "__sanitizer_dtor_callback");
 CGF.EmitNounwindRuntimeCall(Fn, Args);
}

class SanitizeDtorMembers final : public EHScopeStack::Cleanup {
  const CXXDestructorDecl *Dtor;

public:
  SanitizeDtorMembers(const CXXDestructorDecl *Dtor) : Dtor(Dtor) {}

  // Generate function call for handling object poisoning.
  // Disables tail call elimination, to prevent the current stack frame
  // from disappearing from the stack trace.
  void Emit(CodeGenFunction &CGF, Flags flags) override {
    const ASTRecordLayout &Layout =
        CGF.getContext().getASTRecordLayout(Dtor->getParent());

    // Nothing to poison.
    if (Layout.getFieldCount() == 0)
      return;

    // Prevent the current stack frame from disappearing from the stack trace.
    CGF.CurFn->addFnAttr("disable-tail-calls", "true");

    // Construct pointer to region to begin poisoning, and calculate poison
    // size, so that only members declared in this class are poisoned.
    ASTContext &Context = CGF.getContext();
    unsigned fieldIndex = 0;
    int startIndex = -1;
    // RecordDecl::field_iterator Field;
    for (const FieldDecl *Field : Dtor->getParent()->fields()) {
      // Poison field if it is trivial
      if (FieldHasTrivialDestructorBody(Context, Field)) {
        // Start sanitizing at this field
        if (startIndex < 0)
          startIndex = fieldIndex;

        // Currently on the last field, and it must be poisoned with the
        // current block.
        if (fieldIndex == Layout.getFieldCount() - 1) {
          PoisonMembers(CGF, startIndex, Layout.getFieldCount());
        }
      } else if (startIndex >= 0) {
        // No longer within a block of memory to poison, so poison the block
        PoisonMembers(CGF, startIndex, fieldIndex);
        // Re-set the start index
        startIndex = -1;
      }
      fieldIndex += 1;
    }
  }

private:
  /// \param layoutStartOffset index of the ASTRecordLayout field to
  ///     start poisoning (inclusive)
  /// \param layoutEndOffset index of the ASTRecordLayout field to
  ///     end poisoning (exclusive)
  void PoisonMembers(CodeGenFunction &CGF, unsigned layoutStartOffset,
                   unsigned layoutEndOffset) {
    ASTContext &Context = CGF.getContext();
    const ASTRecordLayout &Layout =
        Context.getASTRecordLayout(Dtor->getParent());

    llvm::ConstantInt *OffsetSizePtr = llvm::ConstantInt::get(
        CGF.SizeTy,
        Context.toCharUnitsFromBits(Layout.getFieldOffset(layoutStartOffset))
            .getQuantity());

    llvm::Value *OffsetPtr = CGF.Builder.CreateGEP(
        CGF.Builder.CreateBitCast(CGF.LoadCXXThis(), CGF.Int8PtrTy),
        OffsetSizePtr);

    CharUnits::QuantityType PoisonSize;
    if (layoutEndOffset >= Layout.getFieldCount()) {
      PoisonSize = Layout.getNonVirtualSize().getQuantity() -
                   Context.toCharUnitsFromBits(
                              Layout.getFieldOffset(layoutStartOffset))
                       .getQuantity();
    } else {
      PoisonSize = Context.toCharUnitsFromBits(
                              Layout.getFieldOffset(layoutEndOffset) -
                              Layout.getFieldOffset(layoutStartOffset))
                       .getQuantity();
    }

    if (PoisonSize == 0)
      return;

    EmitSanitizerDtorCallback(CGF, OffsetPtr, PoisonSize);
  }
};

class SanitizeDtorVTable final : public EHScopeStack::Cleanup {
  const CXXDestructorDecl *Dtor;

public:
  SanitizeDtorVTable(const CXXDestructorDecl *Dtor) : Dtor(Dtor) {}

  // Generate function call for handling vtable pointer poisoning.
  void Emit(CodeGenFunction &CGF, Flags flags) override {
    assert(Dtor->getParent()->isDynamicClass())((Dtor->getParent()->isDynamicClass()) ? static_cast<
void> (0) : __assert_fail ("Dtor->getParent()->isDynamicClass()"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1745, __PRETTY_FUNCTION__));
    (void)Dtor;
    ASTContext &Context = CGF.getContext();
    // Poison vtable and vtable ptr if they exist for this class.
    llvm::Value *VTablePtr = CGF.LoadCXXThis();

    CharUnits::QuantityType PoisonSize =
        Context.toCharUnitsFromBits(CGF.PointerWidthInBits).getQuantity();
    // Pass in void pointer and size of region as arguments to runtime
    // function
    EmitSanitizerDtorCallback(CGF, VTablePtr, PoisonSize);
  }
};
1758} // end anonymous namespace

1760/// Emit all code that comes at the end of class's
1761/// destructor. This is to call destructors on members and base classes
1762/// in reverse order of their construction.
1763///
1764/// For a deleting destructor, this also handles the case where a destroying
1765/// operator delete completely overrides the definition.
1766void CodeGenFunction::EnterDtorCleanups(const CXXDestructorDecl *DD,
                                      CXXDtorType DtorType) {
assert((!DD->isTrivial() || DD->hasAttr<DLLExportAttr>()) &&(((!DD->isTrivial() || DD->hasAttr<DLLExportAttr>
()) && "Should not emit dtor epilogue for non-exported trivial dtor!"
) ? static_cast<void> (0) : __assert_fail ("(!DD->isTrivial() || DD->hasAttr<DLLExportAttr>()) && \"Should not emit dtor epilogue for non-exported trivial dtor!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1769, __PRETTY_FUNCTION__))
       "Should not emit dtor epilogue for non-exported trivial dtor!")(((!DD->isTrivial() || DD->hasAttr<DLLExportAttr>
()) && "Should not emit dtor epilogue for non-exported trivial dtor!"
) ? static_cast<void> (0) : __assert_fail ("(!DD->isTrivial() || DD->hasAttr<DLLExportAttr>()) && \"Should not emit dtor epilogue for non-exported trivial dtor!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1769, __PRETTY_FUNCTION__));

// The deleting-destructor phase just needs to call the appropriate
// operator delete that Sema picked up.
if (DtorType == Dtor_Deleting) {
  assert(DD->getOperatorDelete() &&((DD->getOperatorDelete() && "operator delete missing - EnterDtorCleanups"
) ? static_cast<void> (0) : __assert_fail ("DD->getOperatorDelete() && \"operator delete missing - EnterDtorCleanups\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1775, __PRETTY_FUNCTION__))
         "operator delete missing - EnterDtorCleanups")((DD->getOperatorDelete() && "operator delete missing - EnterDtorCleanups"
) ? static_cast<void> (0) : __assert_fail ("DD->getOperatorDelete() && \"operator delete missing - EnterDtorCleanups\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1775, __PRETTY_FUNCTION__));
  if (CXXStructorImplicitParamValue) {
    // If there is an implicit param to the deleting dtor, it's a boolean
    // telling whether this is a deleting destructor.
    if (DD->getOperatorDelete()->isDestroyingOperatorDelete())
      EmitConditionalDtorDeleteCall(*this, CXXStructorImplicitParamValue,
                                    /*ReturnAfterDelete*/true);
    else
      EHStack.pushCleanup<CallDtorDeleteConditional>(
          NormalAndEHCleanup, CXXStructorImplicitParamValue);
  } else {
    if (DD->getOperatorDelete()->isDestroyingOperatorDelete()) {
      const CXXRecordDecl *ClassDecl = DD->getParent();
      EmitDeleteCall(DD->getOperatorDelete(),
                     LoadThisForDtorDelete(*this, DD),
                     getContext().getTagDeclType(ClassDecl));
      EmitBranchThroughCleanup(ReturnBlock);
    } else {
      EHStack.pushCleanup<CallDtorDelete>(NormalAndEHCleanup);
    }
  }
  return;
}

const CXXRecordDecl *ClassDecl = DD->getParent();

// Unions have no bases and do not call field destructors.
if (ClassDecl->isUnion())
  return;

// The complete-destructor phase just destructs all the virtual bases.
if (DtorType == Dtor_Complete) {
  // Poison the vtable pointer such that access after the base
  // and member destructors are invoked is invalid.
  if (CGM.getCodeGenOpts().SanitizeMemoryUseAfterDtor &&
      SanOpts.has(SanitizerKind::Memory) && ClassDecl->getNumVBases() &&
      ClassDecl->isPolymorphic())
    EHStack.pushCleanup<SanitizeDtorVTable>(NormalAndEHCleanup, DD);

  // We push them in the forward order so that they'll be popped in
  // the reverse order.
  for (const auto &Base : ClassDecl->vbases()) {
    CXXRecordDecl *BaseClassDecl
      = cast<CXXRecordDecl>(Base.getType()->getAs<RecordType>()->getDecl());

    // Ignore trivial destructors.
    if (BaseClassDecl->hasTrivialDestructor())
      continue;

    EHStack.pushCleanup<CallBaseDtor>(NormalAndEHCleanup,
                                      BaseClassDecl,
                                      /*BaseIsVirtual*/ true);
  }

  return;
}

assert(DtorType == Dtor_Base)((DtorType == Dtor_Base) ? static_cast<void> (0) : __assert_fail
 ("DtorType == Dtor_Base", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 1832, __PRETTY_FUNCTION__));
// Poison the vtable pointer if it has no virtual bases, but inherits
// virtual functions.
if (CGM.getCodeGenOpts().SanitizeMemoryUseAfterDtor &&
    SanOpts.has(SanitizerKind::Memory) && !ClassDecl->getNumVBases() &&
    ClassDecl->isPolymorphic())
  EHStack.pushCleanup<SanitizeDtorVTable>(NormalAndEHCleanup, DD);

// Destroy non-virtual bases.
for (const auto &Base : ClassDecl->bases()) {
  // Ignore virtual bases.
  if (Base.isVirtual())
    continue;

  CXXRecordDecl *BaseClassDecl = Base.getType()->getAsCXXRecordDecl();

  // Ignore trivial destructors.
  if (BaseClassDecl->hasTrivialDestructor())
    continue;

  EHStack.pushCleanup<CallBaseDtor>(NormalAndEHCleanup,
                                    BaseClassDecl,
                                    /*BaseIsVirtual*/ false);
}

// Poison fields such that access after their destructors are
// invoked, and before the base class destructor runs, is invalid.
if (CGM.getCodeGenOpts().SanitizeMemoryUseAfterDtor &&
    SanOpts.has(SanitizerKind::Memory))
  EHStack.pushCleanup<SanitizeDtorMembers>(NormalAndEHCleanup, DD);

// Destroy direct fields.
for (const auto *Field : ClassDecl->fields()) {
  QualType type = Field->getType();
  QualType::DestructionKind dtorKind = type.isDestructedType();
  if (!dtorKind) continue;

  // Anonymous union members do not have their destructors called.
  const RecordType *RT = type->getAsUnionType();
  if (RT && RT->getDecl()->isAnonymousStructOrUnion()) continue;

  CleanupKind cleanupKind = getCleanupKind(dtorKind);
  EHStack.pushCleanup<DestroyField>(cleanupKind, Field,
                                    getDestroyer(dtorKind),
                                    cleanupKind & EHCleanup);
}
1878}

1880/// EmitCXXAggrConstructorCall - Emit a loop to call a particular
1881/// constructor for each of several members of an array.
1882///
1883/// \param ctor the constructor to call for each element
1884/// \param arrayType the type of the array to initialize
1885/// \param arrayBegin an arrayType*
1886/// \param zeroInitialize true if each element should be
1887///   zero-initialized before it is constructed
1888void CodeGenFunction::EmitCXXAggrConstructorCall(
  const CXXConstructorDecl *ctor, const ArrayType *arrayType,
  Address arrayBegin, const CXXConstructExpr *E, bool NewPointerIsChecked,
  bool zeroInitialize) {
QualType elementType;
llvm::Value *numElements =
  emitArrayLength(arrayType, elementType, arrayBegin);

EmitCXXAggrConstructorCall(ctor, numElements, arrayBegin, E,
1
Calling 'CodeGenFunction::EmitCXXAggrConstructorCall'→
                           NewPointerIsChecked, zeroInitialize);
1898}

1900/// EmitCXXAggrConstructorCall - Emit a loop to call a particular
1901/// constructor for each of several members of an array.
1902///
1903/// \param ctor the constructor to call for each element
1904/// \param numElements the number of elements in the array;
1905///   may be zero
1906/// \param arrayBase a T*, where T is the type constructed by ctor
1907/// \param zeroInitialize true if each element should be
1908///   zero-initialized before it is constructed
1909void CodeGenFunction::EmitCXXAggrConstructorCall(const CXXConstructorDecl *ctor,
                                               llvm::Value *numElements,
                                               Address arrayBase,
                                               const CXXConstructExpr *E,
                                               bool NewPointerIsChecked,
                                               bool zeroInitialize) {
// It's legal for numElements to be zero.  This can happen both
// dynamically, because x can be zero in 'new A[x]', and statically,
// because of GCC extensions that permit zero-length arrays.  There
// are probably legitimate places where we could assume that this
// doesn't happen, but it's not clear that it's worth it.
llvm::BranchInst *zeroCheckBranch = nullptr;

// Optimize for a constant count.
llvm::ConstantInt *constantCount
  = dyn_cast<llvm::ConstantInt>(numElements);
2
←
Assuming 'numElements' is not a 'ConstantInt'→
if (constantCount2.1
'constantCount' is null
) {
3
←
Taking false branch→
  // Just skip out if the constant count is zero.
  if (constantCount->isZero()) return;

// Otherwise, emit the check.
} else {
  llvm::BasicBlock *loopBB = createBasicBlock("new.ctorloop");
  llvm::Value *iszero = Builder.CreateIsNull(numElements, "isempty");
  zeroCheckBranch = Builder.CreateCondBr(iszero, loopBB, loopBB);
  EmitBlock(loopBB);
}

// Find the end of the array.
llvm::Value *arrayBegin = arrayBase.getPointer();
llvm::Value *arrayEnd = Builder.CreateInBoundsGEP(arrayBegin, numElements,
                                                  "arrayctor.end");

// Enter the loop, setting up a phi for the current location to initialize.
llvm::BasicBlock *entryBB = Builder.GetInsertBlock();
llvm::BasicBlock *loopBB = createBasicBlock("arrayctor.loop");
EmitBlock(loopBB);
llvm::PHINode *cur = Builder.CreatePHI(arrayBegin->getType(), 2,
                                       "arrayctor.cur");
cur->addIncoming(arrayBegin, entryBB);

// Inside the loop body, emit the constructor call on the array element.

// The alignment of the base, adjusted by the size of a single element,
// provides a conservative estimate of the alignment of every element.
// (This assumes we never start tracking offsetted alignments.)
//
// Note that these are complete objects and so we don't need to
// use the non-virtual size or alignment.
QualType type = getContext().getTypeDeclType(ctor->getParent());
CharUnits eltAlignment =
  arrayBase.getAlignment()
           .alignmentOfArrayElement(getContext().getTypeSizeInChars(type));
Address curAddr = Address(cur, eltAlignment);

// Zero initialize the storage, if requested.
if (zeroInitialize)
4
←
Assuming 'zeroInitialize' is false→
5
←
Taking false branch→
  EmitNullInitialization(curAddr, type);

// C++ [class.temporary]p4:
// There are two contexts in which temporaries are destroyed at a different
// point than the end of the full-expression. The first context is when a
// default constructor is called to initialize an element of an array.
// If the constructor has one or more default arguments, the destruction of
// every temporary created in a default argument expression is sequenced
// before the construction of the next array element, if any.

{
  RunCleanupsScope Scope(*this);

  // Evaluate the constructor and its arguments in a regular
  // partial-destroy cleanup.
  if (getLangOpts().Exceptions &&
6
←
Assuming field 'Exceptions' is 0→
      !ctor->getParent()->hasTrivialDestructor()) {
    Destroyer *destroyer = destroyCXXObject;
    pushRegularPartialArrayCleanup(arrayBegin, cur, type, eltAlignment,
                                   *destroyer);
  }
  auto currAVS = AggValueSlot::forAddr(
      curAddr, type.getQualifiers(), AggValueSlot::IsDestructed,
      AggValueSlot::DoesNotNeedGCBarriers, AggValueSlot::IsNotAliased,
      AggValueSlot::DoesNotOverlap, AggValueSlot::IsNotZeroed,
      NewPointerIsChecked ? AggValueSlot::IsSanitizerChecked
7
←
Assuming 'NewPointerIsChecked' is false→
8
←
'?' condition is false→
                          : AggValueSlot::IsNotSanitizerChecked);
  EmitCXXConstructorCall(ctor, Ctor_Complete, /*ForVirtualBase=*/false,
9
←
Calling 'CodeGenFunction::EmitCXXConstructorCall'→
                         /*Delegating=*/false, currAVS, E);
}

// Go to the next element.
llvm::Value *next =
  Builder.CreateInBoundsGEP(cur, llvm::ConstantInt::get(SizeTy, 1),
                            "arrayctor.next");
cur->addIncoming(next, Builder.GetInsertBlock());

// Check whether that's the end of the loop.
llvm::Value *done = Builder.CreateICmpEQ(next, arrayEnd, "arrayctor.done");
llvm::BasicBlock *contBB = createBasicBlock("arrayctor.cont");
Builder.CreateCondBr(done, contBB, loopBB);

// Patch the earlier check to skip over the loop.
if (zeroCheckBranch) zeroCheckBranch->setSuccessor(0, contBB);

EmitBlock(contBB);
2012}

2014void CodeGenFunction::destroyCXXObject(CodeGenFunction &CGF,
                                     Address addr,
                                     QualType type) {
const RecordType *rtype = type->castAs<RecordType>();
const CXXRecordDecl *record = cast<CXXRecordDecl>(rtype->getDecl());
const CXXDestructorDecl *dtor = record->getDestructor();
assert(!dtor->isTrivial())((!dtor->isTrivial()) ? static_cast<void> (0) : __assert_fail
 ("!dtor->isTrivial()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2020, __PRETTY_FUNCTION__));
CGF.EmitCXXDestructorCall(dtor, Dtor_Complete, /*for vbase*/ false,
                          /*Delegating=*/false, addr, type);
2023}

2025void CodeGenFunction::EmitCXXConstructorCall(const CXXConstructorDecl *D,
                                           CXXCtorType Type,
                                           bool ForVirtualBase,
                                           bool Delegating,
                                           AggValueSlot ThisAVS,
                                           const CXXConstructExpr *E) {
CallArgList Args;
Address This = ThisAVS.getAddress();
LangAS SlotAS = ThisAVS.getQualifiers().getAddressSpace();
QualType ThisType = D->getThisType();
LangAS ThisAS = ThisType.getTypePtr()->getPointeeType().getAddressSpace();
llvm::Value *ThisPtr = This.getPointer();

if (SlotAS != ThisAS) {
10
←
Assuming 'SlotAS' is equal to 'ThisAS'→
11
←
Taking false branch→
  unsigned TargetThisAS = getContext().getTargetAddressSpace(ThisAS);
  llvm::Type *NewType =
      ThisPtr->getType()->getPointerElementType()->getPointerTo(TargetThisAS);
  ThisPtr = getTargetHooks().performAddrSpaceCast(*this, This.getPointer(),
                                                  ThisAS, SlotAS, NewType);
}

// Push the this ptr.
Args.add(RValue::get(ThisPtr), D->getThisType());

// If this is a trivial constructor, emit a memcpy now before we lose
// the alignment information on the argument.
// FIXME: It would be better to preserve alignment information into CallArg.
if (isMemcpyEquivalentSpecialMember(D)) {
12
←
Taking false branch→
  assert(E->getNumArgs() == 1 && "unexpected argcount for trivial ctor")((E->getNumArgs() == 1 && "unexpected argcount for trivial ctor"
) ? static_cast<void> (0) : __assert_fail ("E->getNumArgs() == 1 && \"unexpected argcount for trivial ctor\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2053, __PRETTY_FUNCTION__));

  const Expr *Arg = E->getArg(0);
  LValue Src = EmitLValue(Arg);
  QualType DestTy = getContext().getTypeDeclType(D->getParent());
  LValue Dest = MakeAddrLValue(This, DestTy);
  EmitAggregateCopyCtor(Dest, Src, ThisAVS.mayOverlap());
  return;
}

// Add the rest of the user-supplied arguments.
const FunctionProtoType *FPT = D->getType()->castAs<FunctionProtoType>();
13
←
The object is a 'FunctionProtoType'→
EvaluationOrder Order = E->isListInitialization()
14
←
Assuming the condition is false→
15
←
'?' condition is false→
                            ? EvaluationOrder::ForceLeftToRight
                            : EvaluationOrder::Default;
EmitCallArgs(Args, FPT, E->arguments(), E->getConstructor(),
             /*ParamsToSkip*/ 0, Order);

EmitCXXConstructorCall(D, Type, ForVirtualBase, Delegating, This, Args,
16
←
Calling 'CodeGenFunction::EmitCXXConstructorCall'→
                       ThisAVS.mayOverlap(), E->getExprLoc(),
                       ThisAVS.isSanitizerChecked());
2074}

2076static bool canEmitDelegateCallArgs(CodeGenFunction &CGF,
                                  const CXXConstructorDecl *Ctor,
                                  CXXCtorType Type, CallArgList &Args) {
// We can't forward a variadic call.
if (Ctor->isVariadic())
  return false;

if (CGF.getTarget().getCXXABI().areArgsDestroyedLeftToRightInCallee()) {
  // If the parameters are callee-cleanup, it's not safe to forward.
  for (auto *P : Ctor->parameters())
    if (P->needsDestruction(CGF.getContext()))
      return false;

  // Likewise if they're inalloca.
  const CGFunctionInfo &Info =
      CGF.CGM.getTypes().arrangeCXXConstructorCall(Args, Ctor, Type, 0, 0);
  if (Info.usesInAlloca())
    return false;
}

// Anything else should be OK.
return true;
2098}

2100void CodeGenFunction::EmitCXXConstructorCall(const CXXConstructorDecl *D,
                                           CXXCtorType Type,
                                           bool ForVirtualBase,
                                           bool Delegating,
                                           Address This,
                                           CallArgList &Args,
                                           AggValueSlot::Overlap_t Overlap,
                                           SourceLocation Loc,
                                           bool NewPointerIsChecked) {
const CXXRecordDecl *ClassDecl = D->getParent();

if (!NewPointerIsChecked16.1
'NewPointerIsChecked' is false
)
17
←
Taking true branch→
  EmitTypeCheck(CodeGenFunction::TCK_ConstructorCall, Loc, This.getPointer(),
                getContext().getRecordType(ClassDecl), CharUnits::Zero());

if (D->isTrivial() && D->isDefaultConstructor()) {
  assert(Args.size() == 1 && "trivial default ctor with args")((Args.size() == 1 && "trivial default ctor with args"
) ? static_cast<void> (0) : __assert_fail ("Args.size() == 1 && \"trivial default ctor with args\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2116, __PRETTY_FUNCTION__));
  return;
}

// If this is a trivial constructor, just emit what's needed. If this is a
// union copy constructor, we must emit a memcpy, because the AST does not
// model that copy.
if (isMemcpyEquivalentSpecialMember(D)) {
18
←
Taking false branch→
  assert(Args.size() == 2 && "unexpected argcount for trivial ctor")((Args.size() == 2 && "unexpected argcount for trivial ctor"
) ? static_cast<void> (0) : __assert_fail ("Args.size() == 2 && \"unexpected argcount for trivial ctor\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2124, __PRETTY_FUNCTION__));

  QualType SrcTy = D->getParamDecl(0)->getType().getNonReferenceType();
  Address Src(Args[1].getRValue(*this).getScalarVal(),
              getNaturalTypeAlignment(SrcTy));
  LValue SrcLVal = MakeAddrLValue(Src, SrcTy);
  QualType DestTy = getContext().getTypeDeclType(ClassDecl);
  LValue DestLVal = MakeAddrLValue(This, DestTy);
  EmitAggregateCopyCtor(DestLVal, SrcLVal, Overlap);
  return;
}

bool PassPrototypeArgs = true;
// Check whether we can actually emit the constructor before trying to do so.
if (auto Inherited = D->getInheritedConstructor()) {
19
←
Taking false branch→
  PassPrototypeArgs = getTypes().inheritingCtorHasParams(Inherited, Type);
  if (PassPrototypeArgs && !canEmitDelegateCallArgs(*this, D, Type, Args)) {
    EmitInlinedInheritingCXXConstructorCall(D, Type, ForVirtualBase,
                                            Delegating, Args);
    return;
  }
}

// Insert any ABI-specific implicit constructor arguments.
CGCXXABI::AddedStructorArgs ExtraArgs =
    CGM.getCXXABI().addImplicitConstructorArgs(*this, D, Type, ForVirtualBase,
                                               Delegating, Args);

// Emit the call.
llvm::Constant *CalleePtr = CGM.getAddrOfCXXStructor(GlobalDecl(D, Type));
const CGFunctionInfo &Info = CGM.getTypes().arrangeCXXConstructorCall(
    Args, D, Type, ExtraArgs.Prefix, ExtraArgs.Suffix, PassPrototypeArgs);
CGCallee Callee = CGCallee::forDirect(CalleePtr, GlobalDecl(D, Type));
EmitCall(Info, Callee, ReturnValueSlot(), Args);

// Generate vtable assumptions if we're constructing a complete object
// with a vtable.  We don't do this for base subobjects for two reasons:
// first, it's incorrect for classes with virtual bases, and second, we're
// about to overwrite the vptrs anyway.
// We also have to make sure if we can refer to vtable:
// - Otherwise we can refer to vtable if it's safe to speculatively emit.
// FIXME: If vtable is used by ctor/dtor, or if vtable is external and we are
// sure that definition of vtable is not hidden,
// then we are always safe to refer to it.
// FIXME: It looks like InstCombine is very inefficient on dealing with
// assumes. Make assumption loads require -fstrict-vtable-pointers temporarily.
if (CGM.getCodeGenOpts().OptimizationLevel > 0 &&
20
←
Assuming field 'OptimizationLevel' is > 0→
23
←
Taking true branch→
    ClassDecl->isDynamicClass() && Type20.1
'Type' is not equal to Ctor_Base
 != Ctor_Base &&
    CGM.getCXXABI().canSpeculativelyEmitVTable(ClassDecl) &&
21
←
Assuming the condition is true→
    CGM.getCodeGenOpts().StrictVTablePointers)
22
←
Assuming field 'StrictVTablePointers' is not equal to 0→
  EmitVTableAssumptionLoads(ClassDecl, This);
24
←
Calling 'CodeGenFunction::EmitVTableAssumptionLoads'→
2175}

2177void CodeGenFunction::EmitInheritedCXXConstructorCall(
  const CXXConstructorDecl *D, bool ForVirtualBase, Address This,
  bool InheritedFromVBase, const CXXInheritedCtorInitExpr *E) {
CallArgList Args;
CallArg ThisArg(RValue::get(This.getPointer()), D->getThisType());

// Forward the parameters.
if (InheritedFromVBase &&
    CGM.getTarget().getCXXABI().hasConstructorVariants()) {
  // Nothing to do; this construction is not responsible for constructing
  // the base class containing the inherited constructor.
  // FIXME: Can we just pass undef's for the remaining arguments if we don't
  // have constructor variants?
  Args.push_back(ThisArg);
} else if (!CXXInheritedCtorInitExprArgs.empty()) {
  // The inheriting constructor was inlined; just inject its arguments.
  assert(CXXInheritedCtorInitExprArgs.size() >= D->getNumParams() &&((CXXInheritedCtorInitExprArgs.size() >= D->getNumParams
() && "wrong number of parameters for inherited constructor call"
) ? static_cast<void> (0) : __assert_fail ("CXXInheritedCtorInitExprArgs.size() >= D->getNumParams() && \"wrong number of parameters for inherited constructor call\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2194, __PRETTY_FUNCTION__))
         "wrong number of parameters for inherited constructor call")((CXXInheritedCtorInitExprArgs.size() >= D->getNumParams
() && "wrong number of parameters for inherited constructor call"
) ? static_cast<void> (0) : __assert_fail ("CXXInheritedCtorInitExprArgs.size() >= D->getNumParams() && \"wrong number of parameters for inherited constructor call\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2194, __PRETTY_FUNCTION__));
  Args = CXXInheritedCtorInitExprArgs;
  Args[0] = ThisArg;
} else {
  // The inheriting constructor was not inlined. Emit delegating arguments.
  Args.push_back(ThisArg);
  const auto *OuterCtor = cast<CXXConstructorDecl>(CurCodeDecl);
  assert(OuterCtor->getNumParams() == D->getNumParams())((OuterCtor->getNumParams() == D->getNumParams()) ? static_cast
<void> (0) : __assert_fail ("OuterCtor->getNumParams() == D->getNumParams()"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2201, __PRETTY_FUNCTION__));
  assert(!OuterCtor->isVariadic() && "should have been inlined")((!OuterCtor->isVariadic() && "should have been inlined"
) ? static_cast<void> (0) : __assert_fail ("!OuterCtor->isVariadic() && \"should have been inlined\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2202, __PRETTY_FUNCTION__));

  for (const auto *Param : OuterCtor->parameters()) {
    assert(getContext().hasSameUnqualifiedType(((getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl
(Param->getFunctionScopeIndex())->getType(), Param->
getType())) ? static_cast<void> (0) : __assert_fail ("getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl(Param->getFunctionScopeIndex())->getType(), Param->getType())"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2207, __PRETTY_FUNCTION__))
        OuterCtor->getParamDecl(Param->getFunctionScopeIndex())->getType(),((getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl
(Param->getFunctionScopeIndex())->getType(), Param->
getType())) ? static_cast<void> (0) : __assert_fail ("getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl(Param->getFunctionScopeIndex())->getType(), Param->getType())"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2207, __PRETTY_FUNCTION__))
        Param->getType()))((getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl
(Param->getFunctionScopeIndex())->getType(), Param->
getType())) ? static_cast<void> (0) : __assert_fail ("getContext().hasSameUnqualifiedType( OuterCtor->getParamDecl(Param->getFunctionScopeIndex())->getType(), Param->getType())"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2207, __PRETTY_FUNCTION__));
    EmitDelegateCallArg(Args, Param, E->getLocation());

    // Forward __attribute__(pass_object_size).
    if (Param->hasAttr<PassObjectSizeAttr>()) {
      auto *POSParam = SizeArguments[Param];
      assert(POSParam && "missing pass_object_size value for forwarding")((POSParam && "missing pass_object_size value for forwarding"
) ? static_cast<void> (0) : __assert_fail ("POSParam && \"missing pass_object_size value for forwarding\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2213, __PRETTY_FUNCTION__));
      EmitDelegateCallArg(Args, POSParam, E->getLocation());
    }
  }
}

EmitCXXConstructorCall(D, Ctor_Base, ForVirtualBase, /*Delegating*/false,
                       This, Args, AggValueSlot::MayOverlap,
                       E->getLocation(), /*NewPointerIsChecked*/true);
2222}

2224void CodeGenFunction::EmitInlinedInheritingCXXConstructorCall(
  const CXXConstructorDecl *Ctor, CXXCtorType CtorType, bool ForVirtualBase,
  bool Delegating, CallArgList &Args) {
GlobalDecl GD(Ctor, CtorType);
InlinedInheritingConstructorScope Scope(*this, GD);
ApplyInlineDebugLocation DebugScope(*this, GD);
RunCleanupsScope RunCleanups(*this);

// Save the arguments to be passed to the inherited constructor.
CXXInheritedCtorInitExprArgs = Args;

FunctionArgList Params;
QualType RetType = BuildFunctionArgList(CurGD, Params);
FnRetTy = RetType;

// Insert any ABI-specific implicit constructor arguments.
CGM.getCXXABI().addImplicitConstructorArgs(*this, Ctor, CtorType,
                                           ForVirtualBase, Delegating, Args);

// Emit a simplified prolog. We only need to emit the implicit params.
assert(Args.size() >= Params.size() && "too few arguments for call")((Args.size() >= Params.size() && "too few arguments for call"
) ? static_cast<void> (0) : __assert_fail ("Args.size() >= Params.size() && \"too few arguments for call\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2244, __PRETTY_FUNCTION__));
for (unsigned I = 0, N = Args.size(); I != N; ++I) {
  if (I < Params.size() && isa<ImplicitParamDecl>(Params[I])) {
    const RValue &RV = Args[I].getRValue(*this);
    assert(!RV.isComplex() && "complex indirect params not supported")((!RV.isComplex() && "complex indirect params not supported"
) ? static_cast<void> (0) : __assert_fail ("!RV.isComplex() && \"complex indirect params not supported\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2248, __PRETTY_FUNCTION__));
    ParamValue Val = RV.isScalar()
                         ? ParamValue::forDirect(RV.getScalarVal())
                         : ParamValue::forIndirect(RV.getAggregateAddress());
    EmitParmDecl(*Params[I], Val, I + 1);
  }
}

// Create a return value slot if the ABI implementation wants one.
// FIXME: This is dumb, we should ask the ABI not to try to set the return
// value instead.
if (!RetType->isVoidType())
  ReturnValue = CreateIRTemp(RetType, "retval.inhctor");

CGM.getCXXABI().EmitInstanceFunctionProlog(*this);
CXXThisValue = CXXABIThisValue;

// Directly emit the constructor initializers.
EmitCtorPrologue(Ctor, CtorType, Params);
2267}

2269void CodeGenFunction::EmitVTableAssumptionLoad(const VPtr &Vptr, Address This) {
llvm::Value *VTableGlobal =
    CGM.getCXXABI().getVTableAddressPoint(Vptr.Base, Vptr.VTableClass);
if (!VTableGlobal)
  return;

// We can just use the base offset in the complete class.
CharUnits NonVirtualOffset = Vptr.Base.getBaseOffset();

if (!NonVirtualOffset.isZero())
  This =
      ApplyNonVirtualAndVirtualOffset(*this, This, NonVirtualOffset, nullptr,
                                      Vptr.VTableClass, Vptr.NearestVBase);

llvm::Value *VPtrValue =
    GetVTablePtr(This, VTableGlobal->getType(), Vptr.VTableClass);
llvm::Value *Cmp =
    Builder.CreateICmpEQ(VPtrValue, VTableGlobal, "cmp.vtables");
Builder.CreateAssumption(Cmp);
2288}

2290void CodeGenFunction::EmitVTableAssumptionLoads(const CXXRecordDecl *ClassDecl,
                                              Address This) {
if (CGM.getCXXABI().doStructorsInitializeVPtrs(ClassDecl))
25
←
Assuming the condition is true→
26
←
Taking true branch→
  for (const VPtr &Vptr : getVTablePointers(ClassDecl))
27
←
Calling 'CodeGenFunction::getVTablePointers'→
    EmitVTableAssumptionLoad(Vptr, This);
2295}

2297void
2298CodeGenFunction::EmitSynthesizedCXXCopyCtorCall(const CXXConstructorDecl *D,
                                              Address This, Address Src,
                                              const CXXConstructExpr *E) {
const FunctionProtoType *FPT = D->getType()->castAs<FunctionProtoType>();

CallArgList Args;

// Push the this ptr.
Args.add(RValue::get(This.getPointer()), D->getThisType());

// Push the src ptr.
QualType QT = *(FPT->param_type_begin());
llvm::Type *t = CGM.getTypes().ConvertType(QT);
Src = Builder.CreateBitCast(Src, t);
Args.add(RValue::get(Src.getPointer()), QT);

// Skip over first argument (Src).
EmitCallArgs(Args, FPT, drop_begin(E->arguments(), 1), E->getConstructor(),
             /*ParamsToSkip*/ 1);

EmitCXXConstructorCall(D, Ctor_Complete, /*ForVirtualBase*/false,
                       /*Delegating*/false, This, Args,
                       AggValueSlot::MayOverlap, E->getExprLoc(),
                       /*NewPointerIsChecked*/false);
2322}

2324void
2325CodeGenFunction::EmitDelegateCXXConstructorCall(const CXXConstructorDecl *Ctor,
                                              CXXCtorType CtorType,
                                              const FunctionArgList &Args,
                                              SourceLocation Loc) {
CallArgList DelegateArgs;

FunctionArgList::const_iterator I = Args.begin(), E = Args.end();
assert(I != E && "no parameters to constructor")((I != E && "no parameters to constructor") ? static_cast
<void> (0) : __assert_fail ("I != E && \"no parameters to constructor\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2332, __PRETTY_FUNCTION__));

// this
Address This = LoadCXXThisAddress();
DelegateArgs.add(RValue::get(This.getPointer()), (*I)->getType());
++I;

// FIXME: The location of the VTT parameter in the parameter list is
// specific to the Itanium ABI and shouldn't be hardcoded here.
if (CGM.getCXXABI().NeedsVTTParameter(CurGD)) {
  assert(I != E && "cannot skip vtt parameter, already done with args")((I != E && "cannot skip vtt parameter, already done with args"
) ? static_cast<void> (0) : __assert_fail ("I != E && \"cannot skip vtt parameter, already done with args\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2342, __PRETTY_FUNCTION__));
  assert((*I)->getType()->isPointerType() &&(((*I)->getType()->isPointerType() && "skipping parameter not of vtt type"
) ? static_cast<void> (0) : __assert_fail ("(*I)->getType()->isPointerType() && \"skipping parameter not of vtt type\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2344, __PRETTY_FUNCTION__))
         "skipping parameter not of vtt type")(((*I)->getType()->isPointerType() && "skipping parameter not of vtt type"
) ? static_cast<void> (0) : __assert_fail ("(*I)->getType()->isPointerType() && \"skipping parameter not of vtt type\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2344, __PRETTY_FUNCTION__));
  ++I;
}

// Explicit arguments.
for (; I != E; ++I) {
  const VarDecl *param = *I;
  // FIXME: per-argument source location
  EmitDelegateCallArg(DelegateArgs, param, Loc);
}

EmitCXXConstructorCall(Ctor, CtorType, /*ForVirtualBase=*/false,
                       /*Delegating=*/true, This, DelegateArgs,
                       AggValueSlot::MayOverlap, Loc,
                       /*NewPointerIsChecked=*/true);
2359}

2361namespace {
struct CallDelegatingCtorDtor final : EHScopeStack::Cleanup {
  const CXXDestructorDecl *Dtor;
  Address Addr;
  CXXDtorType Type;

  CallDelegatingCtorDtor(const CXXDestructorDecl *D, Address Addr,
                         CXXDtorType Type)
    : Dtor(D), Addr(Addr), Type(Type) {}

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    // We are calling the destructor from within the constructor.
    // Therefore, "this" should have the expected type.
    QualType ThisTy = Dtor->getThisObjectType();
    CGF.EmitCXXDestructorCall(Dtor, Type, /*ForVirtualBase=*/false,
                              /*Delegating=*/true, Addr, ThisTy);
  }
};
2379} // end anonymous namespace

2381void
2382CodeGenFunction::EmitDelegatingCXXConstructorCall(const CXXConstructorDecl *Ctor,
                                                const FunctionArgList &Args) {
assert(Ctor->isDelegatingConstructor())((Ctor->isDelegatingConstructor()) ? static_cast<void>
 (0) : __assert_fail ("Ctor->isDelegatingConstructor()", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2384, __PRETTY_FUNCTION__));

Address ThisPtr = LoadCXXThisAddress();

AggValueSlot AggSlot =
  AggValueSlot::forAddr(ThisPtr, Qualifiers(),
                        AggValueSlot::IsDestructed,
                        AggValueSlot::DoesNotNeedGCBarriers,
                        AggValueSlot::IsNotAliased,
                        AggValueSlot::MayOverlap,
                        AggValueSlot::IsNotZeroed,
                        // Checks are made by the code that calls constructor.
                        AggValueSlot::IsSanitizerChecked);

EmitAggExpr(Ctor->init_begin()[0]->getInit(), AggSlot);

const CXXRecordDecl *ClassDecl = Ctor->getParent();
if (CGM.getLangOpts().Exceptions && !ClassDecl->hasTrivialDestructor()) {
  CXXDtorType Type =
    CurGD.getCtorType() == Ctor_Complete ? Dtor_Complete : Dtor_Base;

  EHStack.pushCleanup<CallDelegatingCtorDtor>(EHCleanup,
                                              ClassDecl->getDestructor(),
                                              ThisPtr, Type);
}
2409}

2411void CodeGenFunction::EmitCXXDestructorCall(const CXXDestructorDecl *DD,
                                          CXXDtorType Type,
                                          bool ForVirtualBase,
                                          bool Delegating, Address This,
                                          QualType ThisTy) {
CGM.getCXXABI().EmitDestructorCall(*this, DD, Type, ForVirtualBase,
                                   Delegating, This, ThisTy);
2418}

2420namespace {
struct CallLocalDtor final : EHScopeStack::Cleanup {
  const CXXDestructorDecl *Dtor;
  Address Addr;
  QualType Ty;

  CallLocalDtor(const CXXDestructorDecl *D, Address Addr, QualType Ty)
      : Dtor(D), Addr(Addr), Ty(Ty) {}

  void Emit(CodeGenFunction &CGF, Flags flags) override {
    CGF.EmitCXXDestructorCall(Dtor, Dtor_Complete,
                              /*ForVirtualBase=*/false,
                              /*Delegating=*/false, Addr, Ty);
  }
};
2435} // end anonymous namespace

2437void CodeGenFunction::PushDestructorCleanup(const CXXDestructorDecl *D,
                                          QualType T, Address Addr) {
EHStack.pushCleanup<CallLocalDtor>(NormalAndEHCleanup, D, Addr, T);
2440}

2442void CodeGenFunction::PushDestructorCleanup(QualType T, Address Addr) {
CXXRecordDecl *ClassDecl = T->getAsCXXRecordDecl();
if (!ClassDecl) return;
if (ClassDecl->hasTrivialDestructor()) return;

const CXXDestructorDecl *D = ClassDecl->getDestructor();
assert(D && D->isUsed() && "destructor not marked as used!")((D && D->isUsed() && "destructor not marked as used!"
) ? static_cast<void> (0) : __assert_fail ("D && D->isUsed() && \"destructor not marked as used!\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2448, __PRETTY_FUNCTION__));
PushDestructorCleanup(D, T, Addr);
2450}

2452void CodeGenFunction::InitializeVTablePointer(const VPtr &Vptr) {
// Compute the address point.
llvm::Value *VTableAddressPoint =
    CGM.getCXXABI().getVTableAddressPointInStructor(
        *this, Vptr.VTableClass, Vptr.Base, Vptr.NearestVBase);

if (!VTableAddressPoint)
  return;

// Compute where to store the address point.
llvm::Value *VirtualOffset = nullptr;
CharUnits NonVirtualOffset = CharUnits::Zero();

if (CGM.getCXXABI().isVirtualOffsetNeededForVTableField(*this, Vptr)) {
  // We need to use the virtual base offset offset because the virtual base
  // might have a different offset in the most derived class.

  VirtualOffset = CGM.getCXXABI().GetVirtualBaseClassOffset(
      *this, LoadCXXThisAddress(), Vptr.VTableClass, Vptr.NearestVBase);
  NonVirtualOffset = Vptr.OffsetFromNearestVBase;
} else {
  // We can just use the base offset in the complete class.
  NonVirtualOffset = Vptr.Base.getBaseOffset();
}

// Apply the offsets.
Address VTableField = LoadCXXThisAddress();

if (!NonVirtualOffset.isZero() || VirtualOffset)
  VTableField = ApplyNonVirtualAndVirtualOffset(
      *this, VTableField, NonVirtualOffset, VirtualOffset, Vptr.VTableClass,
      Vptr.NearestVBase);

// Finally, store the address point. Use the same LLVM types as the field to
// support optimization.
llvm::Type *VTablePtrTy =
    llvm::FunctionType::get(CGM.Int32Ty, /*isVarArg=*/true)
        ->getPointerTo()
        ->getPointerTo();
VTableField = Builder.CreateBitCast(VTableField, VTablePtrTy->getPointerTo());
VTableAddressPoint = Builder.CreateBitCast(VTableAddressPoint, VTablePtrTy);

llvm::StoreInst *Store = Builder.CreateStore(VTableAddressPoint, VTableField);
TBAAAccessInfo TBAAInfo = CGM.getTBAAVTablePtrAccessInfo(VTablePtrTy);
CGM.DecorateInstructionWithTBAA(Store, TBAAInfo);
if (CGM.getCodeGenOpts().OptimizationLevel > 0 &&
    CGM.getCodeGenOpts().StrictVTablePointers)
  CGM.DecorateInstructionWithInvariantGroup(Store, Vptr.VTableClass);
2500}

2502CodeGenFunction::VPtrsVector
2503CodeGenFunction::getVTablePointers(const CXXRecordDecl *VTableClass) {
CodeGenFunction::VPtrsVector VPtrsResult;
VisitedVirtualBasesSetTy VBases;
getVTablePointers(BaseSubobject(VTableClass, CharUnits::Zero()),
28
←
Calling 'CodeGenFunction::getVTablePointers'→
                  /*NearestVBase=*/nullptr,
                  /*OffsetFromNearestVBase=*/CharUnits::Zero(),
                  /*BaseIsNonVirtualPrimaryBase=*/false, VTableClass, VBases,
                  VPtrsResult);
return VPtrsResult;
2512}

2514void CodeGenFunction::getVTablePointers(BaseSubobject Base,
                                      const CXXRecordDecl *NearestVBase,
                                      CharUnits OffsetFromNearestVBase,
                                      bool BaseIsNonVirtualPrimaryBase,
                                      const CXXRecordDecl *VTableClass,
                                      VisitedVirtualBasesSetTy &VBases,
                                      VPtrsVector &Vptrs) {
// If this base is a non-virtual primary base the address point has already
// been set.
if (!BaseIsNonVirtualPrimaryBase28.1
'BaseIsNonVirtualPrimaryBase' is false
) {
29
←
Taking true branch→
  // Initialize the vtable pointer for this base.
  VPtr Vptr = {Base, NearestVBase, OffsetFromNearestVBase, VTableClass};
  Vptrs.push_back(Vptr);
}

const CXXRecordDecl *RD = Base.getBase();

// Traverse bases.
for (const auto &I : RD->bases()) {
30
←
Assuming '__begin1' is not equal to '__end1'→
  CXXRecordDecl *BaseDecl
    = cast<CXXRecordDecl>(I.getType()->getAs<RecordType>()->getDecl());
31
←
Assuming the object is not a 'RecordType'→
32
←
Called C++ object pointer is null

  // Ignore classes without a vtable.
  if (!BaseDecl->isDynamicClass())
    continue;

  CharUnits BaseOffset;
  CharUnits BaseOffsetFromNearestVBase;
  bool BaseDeclIsNonVirtualPrimaryBase;

  if (I.isVirtual()) {
    // Check if we've visited this virtual base before.
    if (!VBases.insert(BaseDecl).second)
      continue;

    const ASTRecordLayout &Layout =
      getContext().getASTRecordLayout(VTableClass);

    BaseOffset = Layout.getVBaseClassOffset(BaseDecl);
    BaseOffsetFromNearestVBase = CharUnits::Zero();
    BaseDeclIsNonVirtualPrimaryBase = false;
  } else {
    const ASTRecordLayout &Layout = getContext().getASTRecordLayout(RD);

    BaseOffset = Base.getBaseOffset() + Layout.getBaseClassOffset(BaseDecl);
    BaseOffsetFromNearestVBase =
      OffsetFromNearestVBase + Layout.getBaseClassOffset(BaseDecl);
    BaseDeclIsNonVirtualPrimaryBase = Layout.getPrimaryBase() == BaseDecl;
  }

  getVTablePointers(
      BaseSubobject(BaseDecl, BaseOffset),
      I.isVirtual() ? BaseDecl : NearestVBase, BaseOffsetFromNearestVBase,
      BaseDeclIsNonVirtualPrimaryBase, VTableClass, VBases, Vptrs);
}
2569}

2571void CodeGenFunction::InitializeVTablePointers(const CXXRecordDecl *RD) {
// Ignore classes without a vtable.
if (!RD->isDynamicClass())
  return;

// Initialize the vtable pointers for this class and all of its bases.
if (CGM.getCXXABI().doStructorsInitializeVPtrs(RD))
  for (const VPtr &Vptr : getVTablePointers(RD))
    InitializeVTablePointer(Vptr);

if (RD->getNumVBases())
  CGM.getCXXABI().initializeHiddenVirtualInheritanceMembers(*this, RD);
2583}

2585llvm::Value *CodeGenFunction::GetVTablePtr(Address This,
                                         llvm::Type *VTableTy,
                                         const CXXRecordDecl *RD) {
Address VTablePtrSrc = Builder.CreateElementBitCast(This, VTableTy);
llvm::Instruction *VTable = Builder.CreateLoad(VTablePtrSrc, "vtable");
TBAAAccessInfo TBAAInfo = CGM.getTBAAVTablePtrAccessInfo(VTableTy);
CGM.DecorateInstructionWithTBAA(VTable, TBAAInfo);

if (CGM.getCodeGenOpts().OptimizationLevel > 0 &&
    CGM.getCodeGenOpts().StrictVTablePointers)
  CGM.DecorateInstructionWithInvariantGroup(VTable, RD);

return VTable;
2598}

2600// If a class has a single non-virtual base and does not introduce or override
2601// virtual member functions or fields, it will have the same layout as its base.
2602// This function returns the least derived such class.
2603//
2604// Casting an instance of a base class to such a derived class is technically
2605// undefined behavior, but it is a relatively common hack for introducing member
2606// functions on class instances with specific properties (e.g. llvm::Operator)
2607// that works under most compilers and should not have security implications, so
2608// we allow it by default. It can be disabled with -fsanitize=cfi-cast-strict.
2609static const CXXRecordDecl *
2610LeastDerivedClassWithSameLayout(const CXXRecordDecl *RD) {
if (!RD->field_empty())
  return RD;

if (RD->getNumVBases() != 0)
  return RD;

if (RD->getNumBases() != 1)
  return RD;

for (const CXXMethodDecl *MD : RD->methods()) {
  if (MD->isVirtual()) {
    // Virtual member functions are only ok if they are implicit destructors
    // because the implicit destructor will have the same semantics as the
    // base class's destructor if no fields are added.
    if (isa<CXXDestructorDecl>(MD) && MD->isImplicit())
      continue;
    return RD;
  }
}

return LeastDerivedClassWithSameLayout(
    RD->bases_begin()->getType()->getAsCXXRecordDecl());
2633}

2635void CodeGenFunction::EmitTypeMetadataCodeForVCall(const CXXRecordDecl *RD,
                                                 llvm::Value *VTable,
                                                 SourceLocation Loc) {
if (SanOpts.has(SanitizerKind::CFIVCall))
  EmitVTablePtrCheckForCall(RD, VTable, CodeGenFunction::CFITCK_VCall, Loc);
else if (CGM.getCodeGenOpts().WholeProgramVTables &&
         CGM.HasHiddenLTOVisibility(RD)) {
  llvm::Metadata *MD =
      CGM.CreateMetadataIdentifierForType(QualType(RD->getTypeForDecl(), 0));
  llvm::Value *TypeId =
      llvm::MetadataAsValue::get(CGM.getLLVMContext(), MD);

  llvm::Value *CastedVTable = Builder.CreateBitCast(VTable, Int8PtrTy);
  llvm::Value *TypeTest =
      Builder.CreateCall(CGM.getIntrinsic(llvm::Intrinsic::type_test),
                         {CastedVTable, TypeId});
  Builder.CreateCall(CGM.getIntrinsic(llvm::Intrinsic::assume), TypeTest);
}
2653}

2655void CodeGenFunction::EmitVTablePtrCheckForCall(const CXXRecordDecl *RD,
                                              llvm::Value *VTable,
                                              CFITypeCheckKind TCK,
                                              SourceLocation Loc) {
if (!SanOpts.has(SanitizerKind::CFICastStrict))
  RD = LeastDerivedClassWithSameLayout(RD);

EmitVTablePtrCheck(RD, VTable, TCK, Loc);
2663}

2665void CodeGenFunction::EmitVTablePtrCheckForCast(QualType T,
                                              llvm::Value *Derived,
                                              bool MayBeNull,
                                              CFITypeCheckKind TCK,
                                              SourceLocation Loc) {
if (!getLangOpts().CPlusPlus)
  return;

auto *ClassTy = T->getAs<RecordType>();
if (!ClassTy)
  return;

const CXXRecordDecl *ClassDecl = cast<CXXRecordDecl>(ClassTy->getDecl());

if (!ClassDecl->isCompleteDefinition() || !ClassDecl->isDynamicClass())
  return;

if (!SanOpts.has(SanitizerKind::CFICastStrict))
  ClassDecl = LeastDerivedClassWithSameLayout(ClassDecl);

llvm::BasicBlock *ContBlock = nullptr;

if (MayBeNull) {
  llvm::Value *DerivedNotNull =
      Builder.CreateIsNotNull(Derived, "cast.nonnull");

  llvm::BasicBlock *CheckBlock = createBasicBlock("cast.check");
  ContBlock = createBasicBlock("cast.cont");

  Builder.CreateCondBr(DerivedNotNull, CheckBlock, ContBlock);

  EmitBlock(CheckBlock);
}

llvm::Value *VTable;
std::tie(VTable, ClassDecl) = CGM.getCXXABI().LoadVTablePtr(
    *this, Address(Derived, getPointerAlign()), ClassDecl);

EmitVTablePtrCheck(ClassDecl, VTable, TCK, Loc);

if (MayBeNull) {
  Builder.CreateBr(ContBlock);
  EmitBlock(ContBlock);
}
2709}

2711void CodeGenFunction::EmitVTablePtrCheck(const CXXRecordDecl *RD,
                                       llvm::Value *VTable,
                                       CFITypeCheckKind TCK,
                                       SourceLocation Loc) {
if (!CGM.getCodeGenOpts().SanitizeCfiCrossDso &&
    !CGM.HasHiddenLTOVisibility(RD))
  return;

SanitizerMask M;
llvm::SanitizerStatKind SSK;
switch (TCK) {
case CFITCK_VCall:
  M = SanitizerKind::CFIVCall;
  SSK = llvm::SanStat_CFI_VCall;
  break;
case CFITCK_NVCall:
  M = SanitizerKind::CFINVCall;
  SSK = llvm::SanStat_CFI_NVCall;
  break;
case CFITCK_DerivedCast:
  M = SanitizerKind::CFIDerivedCast;
  SSK = llvm::SanStat_CFI_DerivedCast;
  break;
case CFITCK_UnrelatedCast:
  M = SanitizerKind::CFIUnrelatedCast;
  SSK = llvm::SanStat_CFI_UnrelatedCast;
  break;
case CFITCK_ICall:
case CFITCK_NVMFCall:
case CFITCK_VMFCall:
  llvm_unreachable("unexpected sanitizer kind")::llvm::llvm_unreachable_internal("unexpected sanitizer kind"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2741);
}

std::string TypeName = RD->getQualifiedNameAsString();
if (getContext().getSanitizerBlacklist().isBlacklistedType(M, TypeName))
  return;

SanitizerScope SanScope(this);
EmitSanitizerStatReport(SSK);

llvm::Metadata *MD =
    CGM.CreateMetadataIdentifierForType(QualType(RD->getTypeForDecl(), 0));
llvm::Value *TypeId = llvm::MetadataAsValue::get(getLLVMContext(), MD);

llvm::Value *CastedVTable = Builder.CreateBitCast(VTable, Int8PtrTy);
llvm::Value *TypeTest = Builder.CreateCall(
    CGM.getIntrinsic(llvm::Intrinsic::type_test), {CastedVTable, TypeId});

llvm::Constant *StaticData[] = {
    llvm::ConstantInt::get(Int8Ty, TCK),
    EmitCheckSourceLocation(Loc),
    EmitCheckTypeDescriptor(QualType(RD->getTypeForDecl(), 0)),
};

auto CrossDsoTypeId = CGM.CreateCrossDsoCfiTypeId(MD);
if (CGM.getCodeGenOpts().SanitizeCfiCrossDso && CrossDsoTypeId) {
  EmitCfiSlowPathCheck(M, TypeTest, CrossDsoTypeId, CastedVTable, StaticData);
  return;
}

if (CGM.getCodeGenOpts().SanitizeTrap.has(M)) {
  EmitTrapCheck(TypeTest);
  return;
}

llvm::Value *AllVtables = llvm::MetadataAsValue::get(
    CGM.getLLVMContext(),
    llvm::MDString::get(CGM.getLLVMContext(), "all-vtables"));
llvm::Value *ValidVtable = Builder.CreateCall(
    CGM.getIntrinsic(llvm::Intrinsic::type_test), {CastedVTable, AllVtables});
EmitCheck(std::make_pair(TypeTest, M), SanitizerHandler::CFICheckFail,
          StaticData, {CastedVTable, ValidVtable});
2783}

2785bool CodeGenFunction::ShouldEmitVTableTypeCheckedLoad(const CXXRecordDecl *RD) {
if (!CGM.getCodeGenOpts().WholeProgramVTables ||
    !SanOpts.has(SanitizerKind::CFIVCall) ||
    !CGM.getCodeGenOpts().SanitizeTrap.has(SanitizerKind::CFIVCall) ||
    !CGM.HasHiddenLTOVisibility(RD))
  return false;

std::string TypeName = RD->getQualifiedNameAsString();
return !getContext().getSanitizerBlacklist().isBlacklistedType(
    SanitizerKind::CFIVCall, TypeName);
2795}

2797llvm::Value *CodeGenFunction::EmitVTableTypeCheckedLoad(
  const CXXRecordDecl *RD, llvm::Value *VTable, uint64_t VTableByteOffset) {
SanitizerScope SanScope(this);

EmitSanitizerStatReport(llvm::SanStat_CFI_VCall);

llvm::Metadata *MD =
    CGM.CreateMetadataIdentifierForType(QualType(RD->getTypeForDecl(), 0));
llvm::Value *TypeId = llvm::MetadataAsValue::get(CGM.getLLVMContext(), MD);

llvm::Value *CastedVTable = Builder.CreateBitCast(VTable, Int8PtrTy);
llvm::Value *CheckedLoad = Builder.CreateCall(
    CGM.getIntrinsic(llvm::Intrinsic::type_checked_load),
    {CastedVTable, llvm::ConstantInt::get(Int32Ty, VTableByteOffset),
     TypeId});
llvm::Value *CheckResult = Builder.CreateExtractValue(CheckedLoad, 1);

EmitCheck(std::make_pair(CheckResult, SanitizerKind::CFIVCall),
          SanitizerHandler::CFICheckFail, nullptr, nullptr);

return Builder.CreateBitCast(
    Builder.CreateExtractValue(CheckedLoad, 0),
    cast<llvm::PointerType>(VTable->getType())->getElementType());
2820}

2822void CodeGenFunction::EmitForwardingCallToLambda(
                                    const CXXMethodDecl *callOperator,
                                    CallArgList &callArgs) {
// Get the address of the call operator.
const CGFunctionInfo &calleeFnInfo =
  CGM.getTypes().arrangeCXXMethodDeclaration(callOperator);
llvm::Constant *calleePtr =
  CGM.GetAddrOfFunction(GlobalDecl(callOperator),
                        CGM.getTypes().GetFunctionType(calleeFnInfo));

// Prepare the return slot.
const FunctionProtoType *FPT =
  callOperator->getType()->castAs<FunctionProtoType>();
QualType resultType = FPT->getReturnType();
ReturnValueSlot returnSlot;
if (!resultType->isVoidType() &&
    calleeFnInfo.getReturnInfo().getKind() == ABIArgInfo::Indirect &&
    !hasScalarEvaluationKind(calleeFnInfo.getReturnType()))
  returnSlot = ReturnValueSlot(ReturnValue, resultType.isVolatileQualified());

// We don't need to separately arrange the call arguments because
// the call can't be variadic anyway --- it's impossible to forward
// variadic arguments.

// Now emit our call.
auto callee = CGCallee::forDirect(calleePtr, GlobalDecl(callOperator));
RValue RV = EmitCall(calleeFnInfo, callee, returnSlot, callArgs);

// If necessary, copy the returned value into the slot.
if (!resultType->isVoidType() && returnSlot.isNull()) {
  if (getLangOpts().ObjCAutoRefCount && resultType->isObjCRetainableType()) {
    RV = RValue::get(EmitARCRetainAutoreleasedReturnValue(RV.getScalarVal()));
  }
  EmitReturnOfRValue(RV, resultType);
} else
  EmitBranchThroughCleanup(ReturnBlock);
2858}

2860void CodeGenFunction::EmitLambdaBlockInvokeBody() {
const BlockDecl *BD = BlockInfo->getBlockDecl();
const VarDecl *variable = BD->capture_begin()->getVariable();
const CXXRecordDecl *Lambda = variable->getType()->getAsCXXRecordDecl();
const CXXMethodDecl *CallOp = Lambda->getLambdaCallOperator();

if (CallOp->isVariadic()) {
  // FIXME: Making this work correctly is nasty because it requires either
  // cloning the body of the call operator or making the call operator
  // forward.
  CGM.ErrorUnsupported(CurCodeDecl, "lambda conversion to variadic function");
  return;
}

// Start building arguments for forwarding call
CallArgList CallArgs;

QualType ThisType = getContext().getPointerType(getContext().getRecordType(Lambda));
Address ThisPtr = GetAddrOfBlockDecl(variable);
CallArgs.add(RValue::get(ThisPtr.getPointer()), ThisType);

// Add the rest of the parameters.
for (auto param : BD->parameters())
  EmitDelegateCallArg(CallArgs, param, param->getBeginLoc());

assert(!Lambda->isGenericLambda() &&((!Lambda->isGenericLambda() && "generic lambda interconversion to block not implemented"
) ? static_cast<void> (0) : __assert_fail ("!Lambda->isGenericLambda() && \"generic lambda interconversion to block not implemented\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2886, __PRETTY_FUNCTION__))
          "generic lambda interconversion to block not implemented")((!Lambda->isGenericLambda() && "generic lambda interconversion to block not implemented"
) ? static_cast<void> (0) : __assert_fail ("!Lambda->isGenericLambda() && \"generic lambda interconversion to block not implemented\""
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2886, __PRETTY_FUNCTION__));
EmitForwardingCallToLambda(CallOp, CallArgs);
2888}

2890void CodeGenFunction::EmitLambdaDelegatingInvokeBody(const CXXMethodDecl *MD) {
const CXXRecordDecl *Lambda = MD->getParent();

// Start building arguments for forwarding call
CallArgList CallArgs;

QualType ThisType = getContext().getPointerType(getContext().getRecordType(Lambda));
llvm::Value *ThisPtr = llvm::UndefValue::get(getTypes().ConvertType(ThisType));
CallArgs.add(RValue::get(ThisPtr), ThisType);

// Add the rest of the parameters.
for (auto Param : MD->parameters())
  EmitDelegateCallArg(CallArgs, Param, Param->getBeginLoc());

const CXXMethodDecl *CallOp = Lambda->getLambdaCallOperator();
// For a generic lambda, find the corresponding call operator specialization
// to which the call to the static-invoker shall be forwarded.
if (Lambda->isGenericLambda()) {
  assert(MD->isFunctionTemplateSpecialization())((MD->isFunctionTemplateSpecialization()) ? static_cast<
void> (0) : __assert_fail ("MD->isFunctionTemplateSpecialization()"
, "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2908, __PRETTY_FUNCTION__));
  const TemplateArgumentList *TAL = MD->getTemplateSpecializationArgs();
  FunctionTemplateDecl *CallOpTemplate = CallOp->getDescribedFunctionTemplate();
  void *InsertPos = nullptr;
  FunctionDecl *CorrespondingCallOpSpecialization =
      CallOpTemplate->findSpecialization(TAL->asArray(), InsertPos);
  assert(CorrespondingCallOpSpecialization)((CorrespondingCallOpSpecialization) ? static_cast<void>
 (0) : __assert_fail ("CorrespondingCallOpSpecialization", "/build/llvm-toolchain-snapshot-10~svn373517/tools/clang/lib/CodeGen/CGClass.cpp"
, 2914, __PRETTY_FUNCTION__));
  CallOp = cast<CXXMethodDecl>(CorrespondingCallOpSpecialization);
}
EmitForwardingCallToLambda(CallOp, CallArgs);
2918}

2920void CodeGenFunction::EmitLambdaStaticInvokeBody(const CXXMethodDecl *MD) {
if (MD->isVariadic()) {
  // FIXME: Making this work correctly is nasty because it requires either
  // cloning the body of the call operator or making the call operator forward.
  CGM.ErrorUnsupported(MD, "lambda conversion to variadic function");
  return;
}

EmitLambdaDelegatingInvokeBody(MD);
2929}