Bug Summary

File:llvm/lib/IR/Operator.cpp
Warning:line 46, column 37
Called C++ object pointer is null

Annotated Source Code

Press '?' to see keyboard shortcuts

clang -cc1 -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name Operator.cpp -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=cplusplus -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -analyzer-config-compatibility-mode=true -mrelocation-model pic -pic-level 2 -mframe-pointer=none -fmath-errno -fno-rounding-math -mconstructor-aliases -munwind-tables -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -ffunction-sections -fdata-sections -fcoverage-compilation-dir=/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/build-llvm/lib/IR -resource-dir /usr/lib/llvm-14/lib/clang/14.0.0 -D _DEBUG -D _GNU_SOURCE -D __STDC_CONSTANT_MACROS -D __STDC_FORMAT_MACROS -D __STDC_LIMIT_MACROS -I /build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/build-llvm/lib/IR -I /build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR -I /build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/build-llvm/include -I /build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/include -D NDEBUG -U NDEBUG -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/c++/10 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/x86_64-linux-gnu/c++/10 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/c++/10/backward -internal-isystem /usr/lib/llvm-14/lib/clang/14.0.0/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -O2 -Wno-unused-parameter -Wwrite-strings -Wno-missing-field-initializers -Wno-long-long -Wno-maybe-uninitialized -Wno-class-memaccess -Wno-redundant-move -Wno-pessimizing-move -Wno-noexcept-type -Wno-comment -std=c++14 -fdeprecated-macro -fdebug-compilation-dir=/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/build-llvm/lib/IR -fdebug-prefix-map=/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0=. -ferror-limit 19 -fvisibility-inlines-hidden -stack-protector 2 -fgnuc-version=4.2.1 -vectorize-loops -vectorize-slp -analyzer-output=html -analyzer-config stable-report-filename=true -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/scan-build-2021-08-28-193554-24367-1 -x c++ /build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp
1//===-- Operator.cpp - Implement the LLVM operators -----------------------===//
2//
3// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4// See https://llvm.org/LICENSE.txt for license information.
5// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6//
7//===----------------------------------------------------------------------===//
8//
9// This file implements the non-inline methods for the LLVM Operator classes.
10//
11//===----------------------------------------------------------------------===//
12
13#include "llvm/IR/Operator.h"
14#include "llvm/IR/DataLayout.h"
15#include "llvm/IR/GetElementPtrTypeIterator.h"
16#include "llvm/IR/Instructions.h"
17#include "llvm/IR/Type.h"
18
19#include "ConstantsContext.h"
20
21namespace llvm {
22Type *GEPOperator::getSourceElementType() const {
23 if (auto *I = dyn_cast<GetElementPtrInst>(this))
24 return I->getSourceElementType();
25 return cast<GetElementPtrConstantExpr>(this)->getSourceElementType();
26}
27
28Type *GEPOperator::getResultElementType() const {
29 if (auto *I = dyn_cast<GetElementPtrInst>(this))
30 return I->getResultElementType();
31 return cast<GetElementPtrConstantExpr>(this)->getResultElementType();
32}
33
34Align GEPOperator::getMaxPreservedAlignment(const DataLayout &DL) const {
35 /// compute the worse possible offset for every level of the GEP et accumulate
36 /// the minimum alignment into Result.
37
38 Align Result = Align(llvm::Value::MaximumAlignment);
39 for (gep_type_iterator GTI = gep_type_begin(this), GTE = gep_type_end(this);
1
Loop condition is true. Entering loop body
→
40 GTI != GTE; ++GTI) {
41 int64_t Offset = 1;
42 ConstantInt *OpC = dyn_cast<ConstantInt>(GTI.getOperand());
2
←
Assuming the object is not a 'ConstantInt'
→
3
←
'OpC' initialized to a null pointer value
→
43
44 if (StructType *STy = GTI.getStructTypeOrNull()) {
4
←
Assuming 'STy' is non-null
→
5
←
Taking true branch
→
45 const StructLayout *SL = DL.getStructLayout(STy);
46 Offset = SL->getElementOffset(OpC->getZExtValue());
6
←
Called C++ object pointer is null
47 } else {
48 assert(GTI.isSequential() && "should be sequencial")(static_cast <bool> (GTI.isSequential() && "should be sequencial"
) ? void (0) : __assert_fail ("GTI.isSequential() && \"should be sequencial\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 48, __extension__ __PRETTY_FUNCTION__));
49 /// If the index isn't know we take 1 because it is the index that will
50 /// give the worse alignment of the offset.
51 int64_t ElemCount = 1;
52 if (OpC)
53 ElemCount = OpC->getZExtValue();
54 Offset = DL.getTypeAllocSize(GTI.getIndexedType()) * ElemCount;
55 }
56 Result = Align(MinAlign(Offset, Result.value()));
57 }
58 return Result;
59}
60
61bool GEPOperator::accumulateConstantOffset(
62 const DataLayout &DL, APInt &Offset,
63 function_ref<bool(Value &, APInt &)> ExternalAnalysis) const {
64 assert(Offset.getBitWidth() ==(static_cast <bool> (Offset.getBitWidth() == DL.getIndexSizeInBits
(getPointerAddressSpace()) && "The offset bit width does not match DL specification."
) ? void (0) : __assert_fail ("Offset.getBitWidth() == DL.getIndexSizeInBits(getPointerAddressSpace()) && \"The offset bit width does not match DL specification.\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 66, __extension__ __PRETTY_FUNCTION__))
65 DL.getIndexSizeInBits(getPointerAddressSpace()) &&(static_cast <bool> (Offset.getBitWidth() == DL.getIndexSizeInBits
(getPointerAddressSpace()) && "The offset bit width does not match DL specification."
) ? void (0) : __assert_fail ("Offset.getBitWidth() == DL.getIndexSizeInBits(getPointerAddressSpace()) && \"The offset bit width does not match DL specification.\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 66, __extension__ __PRETTY_FUNCTION__))
66 "The offset bit width does not match DL specification.")(static_cast <bool> (Offset.getBitWidth() == DL.getIndexSizeInBits
(getPointerAddressSpace()) && "The offset bit width does not match DL specification."
) ? void (0) : __assert_fail ("Offset.getBitWidth() == DL.getIndexSizeInBits(getPointerAddressSpace()) && \"The offset bit width does not match DL specification.\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 66, __extension__ __PRETTY_FUNCTION__));
67 SmallVector<const Value *> Index(value_op_begin() + 1, value_op_end());
68 return GEPOperator::accumulateConstantOffset(getSourceElementType(), Index,
69 DL, Offset, ExternalAnalysis);
70}
71
72bool GEPOperator::accumulateConstantOffset(
73 Type *SourceType, ArrayRef<const Value *> Index, const DataLayout &DL,
74 APInt &Offset, function_ref<bool(Value &, APInt &)> ExternalAnalysis) {
75 bool UsedExternalAnalysis = false;
76 auto AccumulateOffset = [&](APInt Index, uint64_t Size) -> bool {
77 Index = Index.sextOrTrunc(Offset.getBitWidth());
78 APInt IndexedSize = APInt(Offset.getBitWidth(), Size);
79 // For array or vector indices, scale the index by the size of the type.
80 if (!UsedExternalAnalysis) {
81 Offset += Index * IndexedSize;
82 } else {
83 // External Analysis can return a result higher/lower than the value
84 // represents. We need to detect overflow/underflow.
85 bool Overflow = false;
86 APInt OffsetPlus = Index.smul_ov(IndexedSize, Overflow);
87 if (Overflow)
88 return false;
89 Offset = Offset.sadd_ov(OffsetPlus, Overflow);
90 if (Overflow)
91 return false;
92 }
93 return true;
94 };
95 auto begin = generic_gep_type_iterator<decltype(Index.begin())>::begin(
96 SourceType, Index.begin());
97 auto end = generic_gep_type_iterator<decltype(Index.end())>::end(Index.end());
98 for (auto GTI = begin, GTE = end; GTI != GTE; ++GTI) {
99 // Scalable vectors are multiplied by a runtime constant.
100 bool ScalableType = false;
101 if (isa<ScalableVectorType>(GTI.getIndexedType()))
102 ScalableType = true;
103
104 Value *V = GTI.getOperand();
105 StructType *STy = GTI.getStructTypeOrNull();
106 // Handle ConstantInt if possible.
107 if (auto ConstOffset = dyn_cast<ConstantInt>(V)) {
108 if (ConstOffset->isZero())
109 continue;
110 // if the type is scalable and the constant is not zero (vscale * n * 0 =
111 // 0) bailout.
112 if (ScalableType)
113 return false;
114 // Handle a struct index, which adds its field offset to the pointer.
115 if (STy) {
116 unsigned ElementIdx = ConstOffset->getZExtValue();
117 const StructLayout *SL = DL.getStructLayout(STy);
118 // Element offset is in bytes.
119 if (!AccumulateOffset(
120 APInt(Offset.getBitWidth(), SL->getElementOffset(ElementIdx)),
121 1))
122 return false;
123 continue;
124 }
125 if (!AccumulateOffset(ConstOffset->getValue(),
126 DL.getTypeAllocSize(GTI.getIndexedType())))
127 return false;
128 continue;
129 }
130
131 // The operand is not constant, check if an external analysis was provided.
132 // External analsis is not applicable to a struct type.
133 if (!ExternalAnalysis || STy || ScalableType)
134 return false;
135 APInt AnalysisIndex;
136 if (!ExternalAnalysis(*V, AnalysisIndex))
137 return false;
138 UsedExternalAnalysis = true;
139 if (!AccumulateOffset(AnalysisIndex,
140 DL.getTypeAllocSize(GTI.getIndexedType())))
141 return false;
142 }
143 return true;
144}
145
146bool GEPOperator::collectOffset(
147 const DataLayout &DL, unsigned BitWidth,
148 MapVector<Value *, APInt> &VariableOffsets,
149 APInt &ConstantOffset) const {
150 assert(BitWidth == DL.getIndexSizeInBits(getPointerAddressSpace()) &&(static_cast <bool> (BitWidth == DL.getIndexSizeInBits(
getPointerAddressSpace()) && "The offset bit width does not match DL specification."
) ? void (0) : __assert_fail ("BitWidth == DL.getIndexSizeInBits(getPointerAddressSpace()) && \"The offset bit width does not match DL specification.\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 151, __extension__ __PRETTY_FUNCTION__))
151 "The offset bit width does not match DL specification.")(static_cast <bool> (BitWidth == DL.getIndexSizeInBits(
getPointerAddressSpace()) && "The offset bit width does not match DL specification."
) ? void (0) : __assert_fail ("BitWidth == DL.getIndexSizeInBits(getPointerAddressSpace()) && \"The offset bit width does not match DL specification.\""
, "/build/llvm-toolchain-snapshot-14~++20210828111110+16086d47c0d0/llvm/lib/IR/Operator.cpp"
, 151, __extension__ __PRETTY_FUNCTION__));
152
153 auto CollectConstantOffset = [&](APInt Index, uint64_t Size) {
154 Index = Index.sextOrTrunc(BitWidth);
155 APInt IndexedSize = APInt(BitWidth, Size);
156 ConstantOffset += Index * IndexedSize;
157 };
158
159 for (gep_type_iterator GTI = gep_type_begin(this), GTE = gep_type_end(this);
160 GTI != GTE; ++GTI) {
161 // Scalable vectors are multiplied by a runtime constant.
162 bool ScalableType = isa<ScalableVectorType>(GTI.getIndexedType());
163
164 Value *V = GTI.getOperand();
165 StructType *STy = GTI.getStructTypeOrNull();
166 // Handle ConstantInt if possible.
167 if (auto ConstOffset = dyn_cast<ConstantInt>(V)) {
168 if (ConstOffset->isZero())
169 continue;
170 // If the type is scalable and the constant is not zero (vscale * n * 0 =
171 // 0) bailout.
172 // TODO: If the runtime value is accessible at any point before DWARF
173 // emission, then we could potentially keep a forward reference to it
174 // in the debug value to be filled in later.
175 if (ScalableType)
176 return false;
177 // Handle a struct index, which adds its field offset to the pointer.
178 if (STy) {
179 unsigned ElementIdx = ConstOffset->getZExtValue();
180 const StructLayout *SL = DL.getStructLayout(STy);
181 // Element offset is in bytes.
182 CollectConstantOffset(APInt(BitWidth, SL->getElementOffset(ElementIdx)),
183 1);
184 continue;
185 }
186 CollectConstantOffset(ConstOffset->getValue(),
187 DL.getTypeAllocSize(GTI.getIndexedType()));
188 continue;
189 }
190
191 if (STy || ScalableType)
192 return false;
193 // Insert an initial offset of 0 for V iff none exists already, then
194 // increment the offset by IndexedSize.
195 VariableOffsets.insert({V, APInt(BitWidth, 0)});
196 APInt IndexedSize =
197 APInt(BitWidth, DL.getTypeAllocSize(GTI.getIndexedType()));
198 VariableOffsets[V] += IndexedSize;
199 }
200 return true;
201}
202} // namespace llvm