/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/clang/lib/Sema/SemaAccess.cpp

Bug Summary

File:	build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/clang/lib/Sema/SemaAccess.cpp
Warning:	line 1260, column 34 Access to field 'Base' results in a dereference of a null pointer (loaded from variable 'constrainingBase')
Annotated Source Code

Press '?' to see keyboard shortcuts
Show analyzer invocation
clang -cc1 -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name SemaAccess.cpp -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=cplusplus -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -analyzer-config-compatibility-mode=true -mrelocation-model pic -pic-level 2 -mframe-pointer=none -relaxed-aliasing -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -ffunction-sections -fdata-sections -fcoverage-compilation-dir=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/build-llvm -resource-dir /usr/lib/llvm-15/lib/clang/15.0.0 -D _DEBUG -D _GNU_SOURCE -D __STDC_CONSTANT_MACROS -D __STDC_FORMAT_MACROS -D __STDC_LIMIT_MACROS -I tools/clang/lib/Sema -I /build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/clang/lib/Sema -I /build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/clang/include -I tools/clang/include -I include -I /build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/llvm/include -D _FORTIFY_SOURCE=2 -D NDEBUG -U NDEBUG -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/c++/10 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/x86_64-linux-gnu/c++/10 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../include/c++/10/backward -internal-isystem /usr/lib/llvm-15/lib/clang/15.0.0/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -fmacro-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/build-llvm=build-llvm -fmacro-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/= -fcoverage-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/build-llvm=build-llvm -fcoverage-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/= -O3 -Wno-unused-command-line-argument -Wno-unused-parameter -Wwrite-strings -Wno-missing-field-initializers -Wno-long-long -Wno-maybe-uninitialized -Wno-class-memaccess -Wno-redundant-move -Wno-pessimizing-move -Wno-noexcept-type -Wno-comment -std=c++14 -fdeprecated-macro -fdebug-compilation-dir=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/build-llvm -fdebug-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/build-llvm=build-llvm -fdebug-prefix-map=/build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/= -ferror-limit 19 -fvisibility-inlines-hidden -stack-protector 2 -fgnuc-version=4.2.1 -fcolor-diagnostics -vectorize-loops -vectorize-slp -analyzer-output=html -analyzer-config stable-report-filename=true -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/scan-build-2022-04-20-140412-16051-1 -x c++ /build/llvm-toolchain-snapshot-15~++20220420111733+e13d2efed663/clang/lib/Sema/SemaAccess.cpp
1//===---- SemaAccess.cpp - C++ Access Control -------------------*- C++ -*-===//
2//
3// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4// See https://llvm.org/LICENSE.txt for license information.
5// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6//
7//===----------------------------------------------------------------------===//
8//
9// This file provides Sema routines for C++ access control semantics.
10//
11//===----------------------------------------------------------------------===//

13#include "clang/Basic/Specifiers.h"
14#include "clang/Sema/SemaInternal.h"
15#include "clang/AST/ASTContext.h"
16#include "clang/AST/CXXInheritance.h"
17#include "clang/AST/DeclCXX.h"
18#include "clang/AST/DeclFriend.h"
19#include "clang/AST/DeclObjC.h"
20#include "clang/AST/DependentDiagnostic.h"
21#include "clang/AST/ExprCXX.h"
22#include "clang/Sema/DelayedDiagnostic.h"
23#include "clang/Sema/Initialization.h"
24#include "clang/Sema/Lookup.h"

26using namespace clang;
27using namespace sema;

29/// A copy of Sema's enum without AR_delayed.
30enum AccessResult {
AR_accessible,
AR_inaccessible,
AR_dependent
34};

36/// SetMemberAccessSpecifier - Set the access specifier of a member.
37/// Returns true on error (when the previous member decl access specifier
38/// is different from the new member decl access specifier).
39bool Sema::SetMemberAccessSpecifier(NamedDecl *MemberDecl,
                                  NamedDecl *PrevMemberDecl,
                                  AccessSpecifier LexicalAS) {
if (!PrevMemberDecl) {
  // Use the lexical access specifier.
  MemberDecl->setAccess(LexicalAS);
  return false;
}

// C++ [class.access.spec]p3: When a member is redeclared its access
// specifier must be same as its initial declaration.
if (LexicalAS != AS_none && LexicalAS != PrevMemberDecl->getAccess()) {
  Diag(MemberDecl->getLocation(),
       diag::err_class_redeclared_with_different_access)
    << MemberDecl << LexicalAS;
  Diag(PrevMemberDecl->getLocation(), diag::note_previous_access_declaration)
    << PrevMemberDecl << PrevMemberDecl->getAccess();

  MemberDecl->setAccess(LexicalAS);
  return true;
}

MemberDecl->setAccess(PrevMemberDecl->getAccess());
return false;
63}

65static CXXRecordDecl *FindDeclaringClass(NamedDecl *D) {
DeclContext *DC = D->getDeclContext();

// This can only happen at top: enum decls only "publish" their
// immediate members.
if (isa<EnumDecl>(DC))
  DC = cast<EnumDecl>(DC)->getDeclContext();

CXXRecordDecl *DeclaringClass = cast<CXXRecordDecl>(DC);
while (DeclaringClass->isAnonymousStructOrUnion())
  DeclaringClass = cast<CXXRecordDecl>(DeclaringClass->getDeclContext());
return DeclaringClass;
77}

79namespace {
80struct EffectiveContext {
EffectiveContext() : Inner(nullptr), Dependent(false) {}

explicit EffectiveContext(DeclContext *DC)
  : Inner(DC),
    Dependent(DC->isDependentContext()) {

  // An implicit deduction guide is semantically in the context enclosing the
  // class template, but for access purposes behaves like the constructor
  // from which it was produced.
  if (auto *DGD = dyn_cast<CXXDeductionGuideDecl>(DC)) {
    if (DGD->isImplicit()) {
      DC = DGD->getCorrespondingConstructor();
      if (!DC) {
        // The copy deduction candidate doesn't have a corresponding
        // constructor.
        DC = cast<DeclContext>(DGD->getDeducedTemplate()->getTemplatedDecl());
      }
    }
  }

  // C++11 [class.access.nest]p1:
  //   A nested class is a member and as such has the same access
  //   rights as any other member.
  // C++11 [class.access]p2:
  //   A member of a class can also access all the names to which
  //   the class has access.  A local class of a member function
  //   may access the same names that the member function itself
  //   may access.
  // This almost implies that the privileges of nesting are transitive.
  // Technically it says nothing about the local classes of non-member
  // functions (which can gain privileges through friendship), but we
  // take that as an oversight.
  while (true) {
    // We want to add canonical declarations to the EC lists for
    // simplicity of checking, but we need to walk up through the
    // actual current DC chain.  Otherwise, something like a local
    // extern or friend which happens to be the canonical
    // declaration will really mess us up.

    if (isa<CXXRecordDecl>(DC)) {
      CXXRecordDecl *Record = cast<CXXRecordDecl>(DC);
      Records.push_back(Record->getCanonicalDecl());
      DC = Record->getDeclContext();
    } else if (isa<FunctionDecl>(DC)) {
      FunctionDecl *Function = cast<FunctionDecl>(DC);
      Functions.push_back(Function->getCanonicalDecl());
      if (Function->getFriendObjectKind())
        DC = Function->getLexicalDeclContext();
      else
        DC = Function->getDeclContext();
    } else if (DC->isFileContext()) {
      break;
    } else {
      DC = DC->getParent();
    }
  }
}

bool isDependent() const { return Dependent; }

bool includesClass(const CXXRecordDecl *R) const {
  R = R->getCanonicalDecl();
  return llvm::is_contained(Records, R);
}

/// Retrieves the innermost "useful" context.  Can be null if we're
/// doing access-control without privileges.
DeclContext *getInnerContext() const {
  return Inner;
}

typedef SmallVectorImpl<CXXRecordDecl*>::const_iterator record_iterator;

DeclContext *Inner;
SmallVector<FunctionDecl*, 4> Functions;
SmallVector<CXXRecordDecl*, 4> Records;
bool Dependent;
158};

160/// Like sema::AccessedEntity, but kindly lets us scribble all over
161/// it.
162struct AccessTarget : public AccessedEntity {
AccessTarget(const AccessedEntity &Entity)
  : AccessedEntity(Entity) {
  initialize();
}

AccessTarget(ASTContext &Context,
             MemberNonce _,
             CXXRecordDecl *NamingClass,
             DeclAccessPair FoundDecl,
             QualType BaseObjectType)
  : AccessedEntity(Context.getDiagAllocator(), Member, NamingClass,
                   FoundDecl, BaseObjectType) {
  initialize();
}

AccessTarget(ASTContext &Context,
             BaseNonce _,
             CXXRecordDecl *BaseClass,
             CXXRecordDecl *DerivedClass,
             AccessSpecifier Access)
  : AccessedEntity(Context.getDiagAllocator(), Base, BaseClass, DerivedClass,
                   Access) {
  initialize();
}

bool isInstanceMember() const {
  return (isMemberAccess() && getTargetDecl()->isCXXInstanceMember());
}

bool hasInstanceContext() const {
  return HasInstanceContext;
}

class SavedInstanceContext {
public:
  SavedInstanceContext(SavedInstanceContext &&S)
      : Target(S.Target), Has(S.Has) {
    S.Target = nullptr;
  }
  ~SavedInstanceContext() {
    if (Target)
      Target->HasInstanceContext = Has;
  }

private:
  friend struct AccessTarget;
  explicit SavedInstanceContext(AccessTarget &Target)
      : Target(&Target), Has(Target.HasInstanceContext) {}
  AccessTarget *Target;
  bool Has;
};

SavedInstanceContext saveInstanceContext() {
  return SavedInstanceContext(*this);
}

void suppressInstanceContext() {
  HasInstanceContext = false;
}

const CXXRecordDecl *resolveInstanceContext(Sema &S) const {
  assert(HasInstanceContext)(static_cast <bool> (HasInstanceContext) ? void (0) : __assert_fail
 ("HasInstanceContext", "clang/lib/Sema/SemaAccess.cpp", 224,
 __extension__ __PRETTY_FUNCTION__));
  if (CalculatedInstanceContext)
    return InstanceContext;

  CalculatedInstanceContext = true;
  DeclContext *IC = S.computeDeclContext(getBaseObjectType());
  InstanceContext = (IC ? cast<CXXRecordDecl>(IC)->getCanonicalDecl()
                        : nullptr);
  return InstanceContext;
}

const CXXRecordDecl *getDeclaringClass() const {
  return DeclaringClass;
}

/// The "effective" naming class is the canonical non-anonymous
/// class containing the actual naming class.
const CXXRecordDecl *getEffectiveNamingClass() const {
  const CXXRecordDecl *namingClass = getNamingClass();
  while (namingClass->isAnonymousStructOrUnion())
    namingClass = cast<CXXRecordDecl>(namingClass->getParent());
  return namingClass->getCanonicalDecl();
}

248private:
void initialize() {
  HasInstanceContext = (isMemberAccess() &&
                        !getBaseObjectType().isNull() &&
                        getTargetDecl()->isCXXInstanceMember());
  CalculatedInstanceContext = false;
  InstanceContext = nullptr;

  if (isMemberAccess())
    DeclaringClass = FindDeclaringClass(getTargetDecl());
  else
    DeclaringClass = getBaseClass();
  DeclaringClass = DeclaringClass->getCanonicalDecl();
}

bool HasInstanceContext : 1;
mutable bool CalculatedInstanceContext : 1;
mutable const CXXRecordDecl *InstanceContext;
const CXXRecordDecl *DeclaringClass;
267};

269}

271/// Checks whether one class might instantiate to the other.
272static bool MightInstantiateTo(const CXXRecordDecl *From,
                             const CXXRecordDecl *To) {
// Declaration names are always preserved by instantiation.
if (From->getDeclName() != To->getDeclName())
  return false;

const DeclContext *FromDC = From->getDeclContext()->getPrimaryContext();
const DeclContext *ToDC = To->getDeclContext()->getPrimaryContext();
if (FromDC == ToDC) return true;
if (FromDC->isFileContext() || ToDC->isFileContext()) return false;

// Be conservative.
return true;
285}

287/// Checks whether one class is derived from another, inclusively.
288/// Properly indicates when it couldn't be determined due to
289/// dependence.
290///
291/// This should probably be donated to AST or at least Sema.
292static AccessResult IsDerivedFromInclusive(const CXXRecordDecl *Derived,
                                         const CXXRecordDecl *Target) {
assert(Derived->getCanonicalDecl() == Derived)(static_cast <bool> (Derived->getCanonicalDecl() == Derived
) ? void (0) : __assert_fail ("Derived->getCanonicalDecl() == Derived"
, "clang/lib/Sema/SemaAccess.cpp", 294, __extension__ __PRETTY_FUNCTION__
));
assert(Target->getCanonicalDecl() == Target)(static_cast <bool> (Target->getCanonicalDecl() == Target
) ? void (0) : __assert_fail ("Target->getCanonicalDecl() == Target"
, "clang/lib/Sema/SemaAccess.cpp", 295, __extension__ __PRETTY_FUNCTION__
));

if (Derived == Target) return AR_accessible;

bool CheckDependent = Derived->isDependentContext();
if (CheckDependent && MightInstantiateTo(Derived, Target))
  return AR_dependent;

AccessResult OnFailure = AR_inaccessible;
SmallVector<const CXXRecordDecl*, 8> Queue; // actually a stack

while (true) {
  if (Derived->isDependentContext() && !Derived->hasDefinition() &&
      !Derived->isLambda())
    return AR_dependent;

  for (const auto &I : Derived->bases()) {
    const CXXRecordDecl *RD;

    QualType T = I.getType();
    if (const RecordType *RT = T->getAs<RecordType>()) {
      RD = cast<CXXRecordDecl>(RT->getDecl());
    } else if (const InjectedClassNameType *IT
                 = T->getAs<InjectedClassNameType>()) {
      RD = IT->getDecl();
    } else {
      assert(T->isDependentType() && "non-dependent base wasn't a record?")(static_cast <bool> (T->isDependentType() &&
 "non-dependent base wasn't a record?") ? void (0) : __assert_fail
 ("T->isDependentType() && \"non-dependent base wasn't a record?\""
, "clang/lib/Sema/SemaAccess.cpp", 321, __extension__ __PRETTY_FUNCTION__
));
      OnFailure = AR_dependent;
      continue;
    }

    RD = RD->getCanonicalDecl();
    if (RD == Target) return AR_accessible;
    if (CheckDependent && MightInstantiateTo(RD, Target))
      OnFailure = AR_dependent;

    Queue.push_back(RD);
  }

  if (Queue.empty()) break;

  Derived = Queue.pop_back_val();
}

return OnFailure;
340}


343static bool MightInstantiateTo(Sema &S, DeclContext *Context,
                             DeclContext *Friend) {
if (Friend == Context)
  return true;

assert(!Friend->isDependentContext() &&(static_cast <bool> (!Friend->isDependentContext() &&
 "can't handle friends with dependent contexts here") ? void (
0) : __assert_fail ("!Friend->isDependentContext() && \"can't handle friends with dependent contexts here\""
, "clang/lib/Sema/SemaAccess.cpp", 349, __extension__ __PRETTY_FUNCTION__
))
       "can't handle friends with dependent contexts here")(static_cast <bool> (!Friend->isDependentContext() &&
 "can't handle friends with dependent contexts here") ? void (
0) : __assert_fail ("!Friend->isDependentContext() && \"can't handle friends with dependent contexts here\""
, "clang/lib/Sema/SemaAccess.cpp", 349, __extension__ __PRETTY_FUNCTION__
));

if (!Context->isDependentContext())
  return false;

if (Friend->isFileContext())
  return false;

// TODO: this is very conservative
return true;
359}

361// Asks whether the type in 'context' can ever instantiate to the type
362// in 'friend'.
363static bool MightInstantiateTo(Sema &S, CanQualType Context, CanQualType Friend) {
if (Friend == Context)
  return true;

if (!Friend->isDependentType() && !Context->isDependentType())
  return false;

// TODO: this is very conservative.
return true;
372}

374static bool MightInstantiateTo(Sema &S,
                             FunctionDecl *Context,
                             FunctionDecl *Friend) {
if (Context->getDeclName() != Friend->getDeclName())
  return false;

if (!MightInstantiateTo(S,
                        Context->getDeclContext(),
                        Friend->getDeclContext()))
  return false;

CanQual<FunctionProtoType> FriendTy
  = S.Context.getCanonicalType(Friend->getType())
       ->getAs<FunctionProtoType>();
CanQual<FunctionProtoType> ContextTy
  = S.Context.getCanonicalType(Context->getType())
       ->getAs<FunctionProtoType>();

// There isn't any way that I know of to add qualifiers
// during instantiation.
if (FriendTy.getQualifiers() != ContextTy.getQualifiers())
  return false;

if (FriendTy->getNumParams() != ContextTy->getNumParams())
  return false;

if (!MightInstantiateTo(S, ContextTy->getReturnType(),
                        FriendTy->getReturnType()))
  return false;

for (unsigned I = 0, E = FriendTy->getNumParams(); I != E; ++I)
  if (!MightInstantiateTo(S, ContextTy->getParamType(I),
                          FriendTy->getParamType(I)))
    return false;

return true;
410}

412static bool MightInstantiateTo(Sema &S,
                             FunctionTemplateDecl *Context,
                             FunctionTemplateDecl *Friend) {
return MightInstantiateTo(S,
                          Context->getTemplatedDecl(),
                          Friend->getTemplatedDecl());
418}

420static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                const CXXRecordDecl *Friend) {
if (EC.includesClass(Friend))
  return AR_accessible;

if (EC.isDependent()) {
  for (const CXXRecordDecl *Context : EC.Records) {
    if (MightInstantiateTo(Context, Friend))
      return AR_dependent;
  }
}

return AR_inaccessible;
434}

436static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                CanQualType Friend) {
if (const RecordType *RT = Friend->getAs<RecordType>())
  return MatchesFriend(S, EC, cast<CXXRecordDecl>(RT->getDecl()));

// TODO: we can do better than this
if (Friend->isDependentType())
  return AR_dependent;

return AR_inaccessible;
447}

449/// Determines whether the given friend class template matches
450/// anything in the effective context.
451static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                ClassTemplateDecl *Friend) {
AccessResult OnFailure = AR_inaccessible;

// Check whether the friend is the template of a class in the
// context chain.
for (SmallVectorImpl<CXXRecordDecl*>::const_iterator
       I = EC.Records.begin(), E = EC.Records.end(); I != E; ++I) {
  CXXRecordDecl *Record = *I;

  // Figure out whether the current class has a template:
  ClassTemplateDecl *CTD;

  // A specialization of the template...
  if (isa<ClassTemplateSpecializationDecl>(Record)) {
    CTD = cast<ClassTemplateSpecializationDecl>(Record)
      ->getSpecializedTemplate();

  // ... or the template pattern itself.
  } else {
    CTD = Record->getDescribedClassTemplate();
    if (!CTD) continue;
  }

  // It's a match.
  if (Friend == CTD->getCanonicalDecl())
    return AR_accessible;

  // If the context isn't dependent, it can't be a dependent match.
  if (!EC.isDependent())
    continue;

  // If the template names don't match, it can't be a dependent
  // match.
  if (CTD->getDeclName() != Friend->getDeclName())
    continue;

  // If the class's context can't instantiate to the friend's
  // context, it can't be a dependent match.
  if (!MightInstantiateTo(S, CTD->getDeclContext(),
                          Friend->getDeclContext()))
    continue;

  // Otherwise, it's a dependent match.
  OnFailure = AR_dependent;
}

return OnFailure;
500}

502/// Determines whether the given friend function matches anything in
503/// the effective context.
504static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                FunctionDecl *Friend) {
AccessResult OnFailure = AR_inaccessible;

for (SmallVectorImpl<FunctionDecl*>::const_iterator
       I = EC.Functions.begin(), E = EC.Functions.end(); I != E; ++I) {
  if (Friend == *I)
    return AR_accessible;

  if (EC.isDependent() && MightInstantiateTo(S, *I, Friend))
    OnFailure = AR_dependent;
}

return OnFailure;
519}

521/// Determines whether the given friend function template matches
522/// anything in the effective context.
523static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                FunctionTemplateDecl *Friend) {
if (EC.Functions.empty()) return AR_inaccessible;

AccessResult OnFailure = AR_inaccessible;

for (SmallVectorImpl<FunctionDecl*>::const_iterator
       I = EC.Functions.begin(), E = EC.Functions.end(); I != E; ++I) {

  FunctionTemplateDecl *FTD = (*I)->getPrimaryTemplate();
  if (!FTD)
    FTD = (*I)->getDescribedFunctionTemplate();
  if (!FTD)
    continue;

  FTD = FTD->getCanonicalDecl();

  if (Friend == FTD)
    return AR_accessible;

  if (EC.isDependent() && MightInstantiateTo(S, FTD, Friend))
    OnFailure = AR_dependent;
}

return OnFailure;
549}

551/// Determines whether the given friend declaration matches anything
552/// in the effective context.
553static AccessResult MatchesFriend(Sema &S,
                                const EffectiveContext &EC,
                                FriendDecl *FriendD) {
// Whitelist accesses if there's an invalid or unsupported friend
// declaration.
if (FriendD->isInvalidDecl() || FriendD->isUnsupportedFriend())
  return AR_accessible;

if (TypeSourceInfo *T = FriendD->getFriendType())
  return MatchesFriend(S, EC, T->getType()->getCanonicalTypeUnqualified());

NamedDecl *Friend
  = cast<NamedDecl>(FriendD->getFriendDecl()->getCanonicalDecl());

// FIXME: declarations with dependent or templated scope.

if (isa<ClassTemplateDecl>(Friend))
  return MatchesFriend(S, EC, cast<ClassTemplateDecl>(Friend));

if (isa<FunctionTemplateDecl>(Friend))
  return MatchesFriend(S, EC, cast<FunctionTemplateDecl>(Friend));

if (isa<CXXRecordDecl>(Friend))
  return MatchesFriend(S, EC, cast<CXXRecordDecl>(Friend));

assert(isa<FunctionDecl>(Friend) && "unknown friend decl kind")(static_cast <bool> (isa<FunctionDecl>(Friend) &&
 "unknown friend decl kind") ? void (0) : __assert_fail ("isa<FunctionDecl>(Friend) && \"unknown friend decl kind\""
, "clang/lib/Sema/SemaAccess.cpp", 578, __extension__ __PRETTY_FUNCTION__
));
return MatchesFriend(S, EC, cast<FunctionDecl>(Friend));
580}

582static AccessResult GetFriendKind(Sema &S,
                                const EffectiveContext &EC,
                                const CXXRecordDecl *Class) {
AccessResult OnFailure = AR_inaccessible;

// Okay, check friends.
for (auto *Friend : Class->friends()) {
  switch (MatchesFriend(S, EC, Friend)) {
  case AR_accessible:
    return AR_accessible;

  case AR_inaccessible:
    continue;

  case AR_dependent:
    OnFailure = AR_dependent;
    break;
  }
}

// That's it, give up.
return OnFailure;
604}

606namespace {

608/// A helper class for checking for a friend which will grant access
609/// to a protected instance member.
610struct ProtectedFriendContext {
Sema &S;
const EffectiveContext &EC;
const CXXRecordDecl *NamingClass;
bool CheckDependent;
bool EverDependent;

/// The path down to the current base class.
SmallVector<const CXXRecordDecl*, 20> CurPath;

ProtectedFriendContext(Sema &S, const EffectiveContext &EC,
                       const CXXRecordDecl *InstanceContext,
                       const CXXRecordDecl *NamingClass)
  : S(S), EC(EC), NamingClass(NamingClass),
    CheckDependent(InstanceContext->isDependentContext() ||
                   NamingClass->isDependentContext()),
    EverDependent(false) {}

/// Check classes in the current path for friendship, starting at
/// the given index.
bool checkFriendshipAlongPath(unsigned I) {
  assert(I < CurPath.size())(static_cast <bool> (I < CurPath.size()) ? void (0) :
 __assert_fail ("I < CurPath.size()", "clang/lib/Sema/SemaAccess.cpp"
, 631, __extension__ __PRETTY_FUNCTION__));
  for (unsigned E = CurPath.size(); I != E; ++I) {
    switch (GetFriendKind(S, EC, CurPath[I])) {
    case AR_accessible:   return true;
    case AR_inaccessible: continue;
    case AR_dependent:    EverDependent = true; continue;
    }
  }
  return false;
}

/// Perform a search starting at the given class.
///
/// PrivateDepth is the index of the last (least derived) class
/// along the current path such that a notional public member of
/// the final class in the path would have access in that class.
bool findFriendship(const CXXRecordDecl *Cur, unsigned PrivateDepth) {
  // If we ever reach the naming class, check the current path for
  // friendship.  We can also stop recursing because we obviously
  // won't find the naming class there again.
  if (Cur == NamingClass)
    return checkFriendshipAlongPath(PrivateDepth);

  if (CheckDependent && MightInstantiateTo(Cur, NamingClass))
    EverDependent = true;

  // Recurse into the base classes.
  for (const auto &I : Cur->bases()) {
    // If this is private inheritance, then a public member of the
    // base will not have any access in classes derived from Cur.
    unsigned BasePrivateDepth = PrivateDepth;
    if (I.getAccessSpecifier() == AS_private)
      BasePrivateDepth = CurPath.size() - 1;

    const CXXRecordDecl *RD;

    QualType T = I.getType();
    if (const RecordType *RT = T->getAs<RecordType>()) {
      RD = cast<CXXRecordDecl>(RT->getDecl());
    } else if (const InjectedClassNameType *IT
                 = T->getAs<InjectedClassNameType>()) {
      RD = IT->getDecl();
    } else {
      assert(T->isDependentType() && "non-dependent base wasn't a record?")(static_cast <bool> (T->isDependentType() &&
 "non-dependent base wasn't a record?") ? void (0) : __assert_fail
 ("T->isDependentType() && \"non-dependent base wasn't a record?\""
, "clang/lib/Sema/SemaAccess.cpp", 674, __extension__ __PRETTY_FUNCTION__
));
      EverDependent = true;
      continue;
    }

    // Recurse.  We don't need to clean up if this returns true.
    CurPath.push_back(RD);
    if (findFriendship(RD->getCanonicalDecl(), BasePrivateDepth))
      return true;
    CurPath.pop_back();
  }

  return false;
}

bool findFriendship(const CXXRecordDecl *Cur) {
  assert(CurPath.empty())(static_cast <bool> (CurPath.empty()) ? void (0) : __assert_fail
 ("CurPath.empty()", "clang/lib/Sema/SemaAccess.cpp", 690, __extension__
 __PRETTY_FUNCTION__));
  CurPath.push_back(Cur);
  return findFriendship(Cur, 0);
}
694};
695}

697/// Search for a class P that EC is a friend of, under the constraint
698///   InstanceContext <= P
699/// if InstanceContext exists, or else
700///   NamingClass <= P
701/// and with the additional restriction that a protected member of
702/// NamingClass would have some natural access in P, which implicitly
703/// imposes the constraint that P <= NamingClass.
704///
705/// This isn't quite the condition laid out in the standard.
706/// Instead of saying that a notional protected member of NamingClass
707/// would have to have some natural access in P, it says the actual
708/// target has to have some natural access in P, which opens up the
709/// possibility that the target (which is not necessarily a member
710/// of NamingClass) might be more accessible along some path not
711/// passing through it.  That's really a bad idea, though, because it
712/// introduces two problems:
713///   - Most importantly, it breaks encapsulation because you can
714///     access a forbidden base class's members by directly subclassing
715///     it elsewhere.
716///   - It also makes access substantially harder to compute because it
717///     breaks the hill-climbing algorithm: knowing that the target is
718///     accessible in some base class would no longer let you change
719///     the question solely to whether the base class is accessible,
720///     because the original target might have been more accessible
721///     because of crazy subclassing.
722/// So we don't implement that.
723static AccessResult GetProtectedFriendKind(Sema &S, const EffectiveContext &EC,
                                         const CXXRecordDecl *InstanceContext,
                                         const CXXRecordDecl *NamingClass) {
assert(InstanceContext == nullptr ||(static_cast <bool> (InstanceContext == nullptr || InstanceContext
->getCanonicalDecl() == InstanceContext) ? void (0) : __assert_fail
 ("InstanceContext == nullptr || InstanceContext->getCanonicalDecl() == InstanceContext"
, "clang/lib/Sema/SemaAccess.cpp", 727, __extension__ __PRETTY_FUNCTION__
))
       InstanceContext->getCanonicalDecl() == InstanceContext)(static_cast <bool> (InstanceContext == nullptr || InstanceContext
->getCanonicalDecl() == InstanceContext) ? void (0) : __assert_fail
 ("InstanceContext == nullptr || InstanceContext->getCanonicalDecl() == InstanceContext"
, "clang/lib/Sema/SemaAccess.cpp", 727, __extension__ __PRETTY_FUNCTION__
));
assert(NamingClass->getCanonicalDecl() == NamingClass)(static_cast <bool> (NamingClass->getCanonicalDecl()
 == NamingClass) ? void (0) : __assert_fail ("NamingClass->getCanonicalDecl() == NamingClass"
, "clang/lib/Sema/SemaAccess.cpp", 728, __extension__ __PRETTY_FUNCTION__
));

// If we don't have an instance context, our constraints give us
// that NamingClass <= P <= NamingClass, i.e. P == NamingClass.
// This is just the usual friendship check.
if (!InstanceContext) return GetFriendKind(S, EC, NamingClass);

ProtectedFriendContext PRC(S, EC, InstanceContext, NamingClass);
if (PRC.findFriendship(InstanceContext)) return AR_accessible;
if (PRC.EverDependent) return AR_dependent;
return AR_inaccessible;
739}

741static AccessResult HasAccess(Sema &S,
                            const EffectiveContext &EC,
                            const CXXRecordDecl *NamingClass,
                            AccessSpecifier Access,
                            const AccessTarget &Target) {
assert(NamingClass->getCanonicalDecl() == NamingClass &&(static_cast <bool> (NamingClass->getCanonicalDecl()
 == NamingClass && "declaration should be canonicalized before being passed here"
) ? void (0) : __assert_fail ("NamingClass->getCanonicalDecl() == NamingClass && \"declaration should be canonicalized before being passed here\""
, "clang/lib/Sema/SemaAccess.cpp", 747, __extension__ __PRETTY_FUNCTION__
))
       "declaration should be canonicalized before being passed here")(static_cast <bool> (NamingClass->getCanonicalDecl()
 == NamingClass && "declaration should be canonicalized before being passed here"
) ? void (0) : __assert_fail ("NamingClass->getCanonicalDecl() == NamingClass && \"declaration should be canonicalized before being passed here\""
, "clang/lib/Sema/SemaAccess.cpp", 747, __extension__ __PRETTY_FUNCTION__
));

if (Access == AS_public) return AR_accessible;
assert(Access == AS_private || Access == AS_protected)(static_cast <bool> (Access == AS_private || Access == AS_protected
) ? void (0) : __assert_fail ("Access == AS_private || Access == AS_protected"
, "clang/lib/Sema/SemaAccess.cpp", 750, __extension__ __PRETTY_FUNCTION__
));

AccessResult OnFailure = AR_inaccessible;

for (EffectiveContext::record_iterator
       I = EC.Records.begin(), E = EC.Records.end(); I != E; ++I) {
  // All the declarations in EC have been canonicalized, so pointer
  // equality from this point on will work fine.
  const CXXRecordDecl *ECRecord = *I;

  // [B2] and [M2]
  if (Access == AS_private) {
    if (ECRecord == NamingClass)
      return AR_accessible;

    if (EC.isDependent() && MightInstantiateTo(ECRecord, NamingClass))
      OnFailure = AR_dependent;

  // [B3] and [M3]
  } else {
    assert(Access == AS_protected)(static_cast <bool> (Access == AS_protected) ? void (0)
 : __assert_fail ("Access == AS_protected", "clang/lib/Sema/SemaAccess.cpp"
, 770, __extension__ __PRETTY_FUNCTION__));
    switch (IsDerivedFromInclusive(ECRecord, NamingClass)) {
    case AR_accessible: break;
    case AR_inaccessible: continue;
    case AR_dependent: OnFailure = AR_dependent; continue;
    }

    // C++ [class.protected]p1:
    //   An additional access check beyond those described earlier in
    //   [class.access] is applied when a non-static data member or
    //   non-static member function is a protected member of its naming
    //   class.  As described earlier, access to a protected member is
    //   granted because the reference occurs in a friend or member of
    //   some class C.  If the access is to form a pointer to member,
    //   the nested-name-specifier shall name C or a class derived from
    //   C. All other accesses involve a (possibly implicit) object
    //   expression. In this case, the class of the object expression
    //   shall be C or a class derived from C.
    //
    // We interpret this as a restriction on [M3].

    // In this part of the code, 'C' is just our context class ECRecord.

    // These rules are different if we don't have an instance context.
    if (!Target.hasInstanceContext()) {
      // If it's not an instance member, these restrictions don't apply.
      if (!Target.isInstanceMember()) return AR_accessible;

      // If it's an instance member, use the pointer-to-member rule
      // that the naming class has to be derived from the effective
      // context.

      // Emulate a MSVC bug where the creation of pointer-to-member
      // to protected member of base class is allowed but only from
      // static member functions.
      if (S.getLangOpts().MSVCCompat && !EC.Functions.empty())
        if (CXXMethodDecl* MD = dyn_cast<CXXMethodDecl>(EC.Functions.front()))
          if (MD->isStatic()) return AR_accessible;

      // Despite the standard's confident wording, there is a case
      // where you can have an instance member that's neither in a
      // pointer-to-member expression nor in a member access:  when
      // it names a field in an unevaluated context that can't be an
      // implicit member.  Pending clarification, we just apply the
      // same naming-class restriction here.
      //   FIXME: we're probably not correctly adding the
      //   protected-member restriction when we retroactively convert
      //   an expression to being evaluated.

      // We know that ECRecord derives from NamingClass.  The
      // restriction says to check whether NamingClass derives from
      // ECRecord, but that's not really necessary: two distinct
      // classes can't be recursively derived from each other.  So
      // along this path, we just need to check whether the classes
      // are equal.
      if (NamingClass == ECRecord) return AR_accessible;

      // Otherwise, this context class tells us nothing;  on to the next.
      continue;
    }

    assert(Target.isInstanceMember())(static_cast <bool> (Target.isInstanceMember()) ? void (
0) : __assert_fail ("Target.isInstanceMember()", "clang/lib/Sema/SemaAccess.cpp"
, 831, __extension__ __PRETTY_FUNCTION__));

    const CXXRecordDecl *InstanceContext = Target.resolveInstanceContext(S);
    if (!InstanceContext) {
      OnFailure = AR_dependent;
      continue;
    }

    switch (IsDerivedFromInclusive(InstanceContext, ECRecord)) {
    case AR_accessible: return AR_accessible;
    case AR_inaccessible: continue;
    case AR_dependent: OnFailure = AR_dependent; continue;
    }
  }
}

// [M3] and [B3] say that, if the target is protected in N, we grant
// access if the access occurs in a friend or member of some class P
// that's a subclass of N and where the target has some natural
// access in P.  The 'member' aspect is easy to handle because P
// would necessarily be one of the effective-context records, and we
// address that above.  The 'friend' aspect is completely ridiculous
// to implement because there are no restrictions at all on P
// *unless* the [class.protected] restriction applies.  If it does,
// however, we should ignore whether the naming class is a friend,
// and instead rely on whether any potential P is a friend.
if (Access == AS_protected && Target.isInstanceMember()) {
  // Compute the instance context if possible.
  const CXXRecordDecl *InstanceContext = nullptr;
  if (Target.hasInstanceContext()) {
    InstanceContext = Target.resolveInstanceContext(S);
    if (!InstanceContext) return AR_dependent;
  }

  switch (GetProtectedFriendKind(S, EC, InstanceContext, NamingClass)) {
  case AR_accessible: return AR_accessible;
  case AR_inaccessible: return OnFailure;
  case AR_dependent: return AR_dependent;
  }
  llvm_unreachable("impossible friendship kind")::llvm::llvm_unreachable_internal("impossible friendship kind"
, "clang/lib/Sema/SemaAccess.cpp", 870);
}

switch (GetFriendKind(S, EC, NamingClass)) {
case AR_accessible: return AR_accessible;
case AR_inaccessible: return OnFailure;
case AR_dependent: return AR_dependent;
}

// Silence bogus warnings
llvm_unreachable("impossible friendship kind")::llvm::llvm_unreachable_internal("impossible friendship kind"
, "clang/lib/Sema/SemaAccess.cpp", 880);
881}

883/// Finds the best path from the naming class to the declaring class,
884/// taking friend declarations into account.
885///
886/// C++0x [class.access.base]p5:
887///   A member m is accessible at the point R when named in class N if
888///   [M1] m as a member of N is public, or
889///   [M2] m as a member of N is private, and R occurs in a member or
890///        friend of class N, or
891///   [M3] m as a member of N is protected, and R occurs in a member or
892///        friend of class N, or in a member or friend of a class P
893///        derived from N, where m as a member of P is public, private,
894///        or protected, or
895///   [M4] there exists a base class B of N that is accessible at R, and
896///        m is accessible at R when named in class B.
897///
898/// C++0x [class.access.base]p4:
899///   A base class B of N is accessible at R, if
900///   [B1] an invented public member of B would be a public member of N, or
901///   [B2] R occurs in a member or friend of class N, and an invented public
902///        member of B would be a private or protected member of N, or
903///   [B3] R occurs in a member or friend of a class P derived from N, and an
904///        invented public member of B would be a private or protected member
905///        of P, or
906///   [B4] there exists a class S such that B is a base class of S accessible
907///        at R and S is a base class of N accessible at R.
908///
909/// Along a single inheritance path we can restate both of these
910/// iteratively:
911///
912/// First, we note that M1-4 are equivalent to B1-4 if the member is
913/// treated as a notional base of its declaring class with inheritance
914/// access equivalent to the member's access.  Therefore we need only
915/// ask whether a class B is accessible from a class N in context R.
916///
917/// Let B_1 .. B_n be the inheritance path in question (i.e. where
918/// B_1 = N, B_n = B, and for all i, B_{i+1} is a direct base class of
919/// B_i).  For i in 1..n, we will calculate ACAB(i), the access to the
920/// closest accessible base in the path:
921///   Access(a, b) = (* access on the base specifier from a to b *)
922///   Merge(a, forbidden) = forbidden
923///   Merge(a, private) = forbidden
924///   Merge(a, b) = min(a,b)
925///   Accessible(c, forbidden) = false
926///   Accessible(c, private) = (R is c) || IsFriend(c, R)
927///   Accessible(c, protected) = (R derived from c) || IsFriend(c, R)
928///   Accessible(c, public) = true
929///   ACAB(n) = public
930///   ACAB(i) =
931///     let AccessToBase = Merge(Access(B_i, B_{i+1}), ACAB(i+1)) in
932///     if Accessible(B_i, AccessToBase) then public else AccessToBase
933///
934/// B is an accessible base of N at R iff ACAB(1) = public.
935///
936/// \param FinalAccess the access of the "final step", or AS_public if
937///   there is no final step.
938/// \return null if friendship is dependent
939static CXXBasePath *FindBestPath(Sema &S,
                               const EffectiveContext &EC,
                               AccessTarget &Target,
                               AccessSpecifier FinalAccess,
                               CXXBasePaths &Paths) {
// Derive the paths to the desired base.
const CXXRecordDecl *Derived = Target.getNamingClass();
const CXXRecordDecl *Base = Target.getDeclaringClass();

// FIXME: fail correctly when there are dependent paths.
bool isDerived = Derived->isDerivedFrom(const_cast<CXXRecordDecl*>(Base),
                                        Paths);
assert(isDerived && "derived class not actually derived from base")(static_cast <bool> (isDerived && "derived class not actually derived from base"
) ? void (0) : __assert_fail ("isDerived && \"derived class not actually derived from base\""
, "clang/lib/Sema/SemaAccess.cpp", 951, __extension__ __PRETTY_FUNCTION__
));
(void) isDerived;

CXXBasePath *BestPath = nullptr;

assert(FinalAccess != AS_none && "forbidden access after declaring class")(static_cast <bool> (FinalAccess != AS_none && "forbidden access after declaring class"
) ? void (0) : __assert_fail ("FinalAccess != AS_none && \"forbidden access after declaring class\""
, "clang/lib/Sema/SemaAccess.cpp", 956, __extension__ __PRETTY_FUNCTION__
));

bool AnyDependent = false;

// Derive the friend-modified access along each path.
for (CXXBasePaths::paths_iterator PI = Paths.begin(), PE = Paths.end();
       PI != PE; ++PI) {
  AccessTarget::SavedInstanceContext _ = Target.saveInstanceContext();

  // Walk through the path backwards.
  AccessSpecifier PathAccess = FinalAccess;
  CXXBasePath::iterator I = PI->end(), E = PI->begin();
  while (I != E) {
    --I;

    assert(PathAccess != AS_none)(static_cast <bool> (PathAccess != AS_none) ? void (0) :
 __assert_fail ("PathAccess != AS_none", "clang/lib/Sema/SemaAccess.cpp"
, 971, __extension__ __PRETTY_FUNCTION__));

    // If the declaration is a private member of a base class, there
    // is no level of friendship in derived classes that can make it
    // accessible.
    if (PathAccess == AS_private) {
      PathAccess = AS_none;
      break;
    }

    const CXXRecordDecl *NC = I->Class->getCanonicalDecl();

    AccessSpecifier BaseAccess = I->Base->getAccessSpecifier();
    PathAccess = std::max(PathAccess, BaseAccess);

    switch (HasAccess(S, EC, NC, PathAccess, Target)) {
    case AR_inaccessible: break;
    case AR_accessible:
      PathAccess = AS_public;

      // Future tests are not against members and so do not have
      // instance context.
      Target.suppressInstanceContext();
      break;
    case AR_dependent:
      AnyDependent = true;
      goto Next;
    }
  }

  // Note that we modify the path's Access field to the
  // friend-modified access.
  if (BestPath == nullptr || PathAccess < BestPath->Access) {
    BestPath = &*PI;
    BestPath->Access = PathAccess;

    // Short-circuit if we found a public path.
    if (BestPath->Access == AS_public)
      return BestPath;
  }

Next: ;
}

assert((!BestPath || BestPath->Access != AS_public) &&(static_cast <bool> ((!BestPath || BestPath->Access !=
 AS_public) && "fell out of loop with public path") ?
 void (0) : __assert_fail ("(!BestPath || BestPath->Access != AS_public) && \"fell out of loop with public path\""
, "clang/lib/Sema/SemaAccess.cpp", 1016, __extension__ __PRETTY_FUNCTION__
))
       "fell out of loop with public path")(static_cast <bool> ((!BestPath || BestPath->Access !=
 AS_public) && "fell out of loop with public path") ?
 void (0) : __assert_fail ("(!BestPath || BestPath->Access != AS_public) && \"fell out of loop with public path\""
, "clang/lib/Sema/SemaAccess.cpp", 1016, __extension__ __PRETTY_FUNCTION__
));

// We didn't find a public path, but at least one path was subject
// to dependent friendship, so delay the check.
if (AnyDependent)
  return nullptr;

return BestPath;
1024}

1026/// Given that an entity has protected natural access, check whether
1027/// access might be denied because of the protected member access
1028/// restriction.
1029///
1030/// \return true if a note was emitted
1031static bool TryDiagnoseProtectedAccess(Sema &S, const EffectiveContext &EC,
                                     AccessTarget &Target) {
// Only applies to instance accesses.
if (!Target.isInstanceMember())
  return false;

assert(Target.isMemberAccess())(static_cast <bool> (Target.isMemberAccess()) ? void (0
) : __assert_fail ("Target.isMemberAccess()", "clang/lib/Sema/SemaAccess.cpp"
, 1037, __extension__ __PRETTY_FUNCTION__));

const CXXRecordDecl *NamingClass = Target.getEffectiveNamingClass();

for (EffectiveContext::record_iterator
       I = EC.Records.begin(), E = EC.Records.end(); I != E; ++I) {
  const CXXRecordDecl *ECRecord = *I;
  switch (IsDerivedFromInclusive(ECRecord, NamingClass)) {
  case AR_accessible: break;
  case AR_inaccessible: continue;
  case AR_dependent: continue;
  }

  // The effective context is a subclass of the declaring class.
  // Check whether the [class.protected] restriction is limiting
  // access.

  // To get this exactly right, this might need to be checked more
  // holistically;  it's not necessarily the case that gaining
  // access here would grant us access overall.

  NamedDecl *D = Target.getTargetDecl();

  // If we don't have an instance context, [class.protected] says the
  // naming class has to equal the context class.
  if (!Target.hasInstanceContext()) {
    // If it does, the restriction doesn't apply.
    if (NamingClass == ECRecord) continue;

    // TODO: it would be great to have a fixit here, since this is
    // such an obvious error.
    S.Diag(D->getLocation(), diag::note_access_protected_restricted_noobject)
      << S.Context.getTypeDeclType(ECRecord);
    return true;
  }

  const CXXRecordDecl *InstanceContext = Target.resolveInstanceContext(S);
  assert(InstanceContext && "diagnosing dependent access")(static_cast <bool> (InstanceContext && "diagnosing dependent access"
) ? void (0) : __assert_fail ("InstanceContext && \"diagnosing dependent access\""
, "clang/lib/Sema/SemaAccess.cpp", 1074, __extension__ __PRETTY_FUNCTION__
));

  switch (IsDerivedFromInclusive(InstanceContext, ECRecord)) {
  case AR_accessible: continue;
  case AR_dependent: continue;
  case AR_inaccessible:
    break;
  }

  // Okay, the restriction seems to be what's limiting us.

  // Use a special diagnostic for constructors and destructors.
  if (isa<CXXConstructorDecl>(D) || isa<CXXDestructorDecl>(D) ||
      (isa<FunctionTemplateDecl>(D) &&
       isa<CXXConstructorDecl>(
              cast<FunctionTemplateDecl>(D)->getTemplatedDecl()))) {
    return S.Diag(D->getLocation(),
                  diag::note_access_protected_restricted_ctordtor)
           << isa<CXXDestructorDecl>(D->getAsFunction());
  }

  // Otherwise, use the generic diagnostic.
  return S.Diag(D->getLocation(),
                diag::note_access_protected_restricted_object)
         << S.Context.getTypeDeclType(ECRecord);
}

return false;
1102}

1104/// We are unable to access a given declaration due to its direct
1105/// access control;  diagnose that.
1106static void diagnoseBadDirectAccess(Sema &S,
                                  const EffectiveContext &EC,
                                  AccessTarget &entity) {
assert(entity.isMemberAccess())(static_cast <bool> (entity.isMemberAccess()) ? void (0
) : __assert_fail ("entity.isMemberAccess()", "clang/lib/Sema/SemaAccess.cpp"
, 1109, __extension__ __PRETTY_FUNCTION__));
NamedDecl *D = entity.getTargetDecl();

if (D->getAccess() == AS_protected &&
    TryDiagnoseProtectedAccess(S, EC, entity))
  return;

// Find an original declaration.
while (D->isOutOfLine()) {
  NamedDecl *PrevDecl = nullptr;
  if (VarDecl *VD = dyn_cast<VarDecl>(D))
    PrevDecl = VD->getPreviousDecl();
  else if (FunctionDecl *FD = dyn_cast<FunctionDecl>(D))
    PrevDecl = FD->getPreviousDecl();
  else if (TypedefNameDecl *TND = dyn_cast<TypedefNameDecl>(D))
    PrevDecl = TND->getPreviousDecl();
  else if (TagDecl *TD = dyn_cast<TagDecl>(D)) {
    if (isa<RecordDecl>(D) && cast<RecordDecl>(D)->isInjectedClassName())
      break;
    PrevDecl = TD->getPreviousDecl();
  }
  if (!PrevDecl) break;
  D = PrevDecl;
}

CXXRecordDecl *DeclaringClass = FindDeclaringClass(D);
Decl *ImmediateChild;
if (D->getDeclContext() == DeclaringClass)
  ImmediateChild = D;
else {
  DeclContext *DC = D->getDeclContext();
  while (DC->getParent() != DeclaringClass)
    DC = DC->getParent();
  ImmediateChild = cast<Decl>(DC);
}

// Check whether there's an AccessSpecDecl preceding this in the
// chain of the DeclContext.
bool isImplicit = true;
for (const auto *I : DeclaringClass->decls()) {
  if (I == ImmediateChild) break;
  if (isa<AccessSpecDecl>(I)) {
    isImplicit = false;
    break;
  }
}

S.Diag(D->getLocation(), diag::note_access_natural)
  << (unsigned) (D->getAccess() == AS_protected)
  << isImplicit;
1159}

1161/// Diagnose the path which caused the given declaration or base class
1162/// to become inaccessible.
1163static void DiagnoseAccessPath(Sema &S,
                             const EffectiveContext &EC,
                             AccessTarget &entity) {
// Save the instance context to preserve invariants.
AccessTarget::SavedInstanceContext _ = entity.saveInstanceContext();

// This basically repeats the main algorithm but keeps some more
// information.

// The natural access so far.
AccessSpecifier accessSoFar = AS_public;

// Check whether we have special rights to the declaring class.
if (entity.isMemberAccess()) {
23
←
Taking false branch→
  NamedDecl *D = entity.getTargetDecl();
  accessSoFar = D->getAccess();
  const CXXRecordDecl *declaringClass = entity.getDeclaringClass();

  switch (HasAccess(S, EC, declaringClass, accessSoFar, entity)) {
  // If the declaration is accessible when named in its declaring
  // class, then we must be constrained by the path.
  case AR_accessible:
    accessSoFar = AS_public;
    entity.suppressInstanceContext();
    break;

  case AR_inaccessible:
    if (accessSoFar == AS_private ||
        declaringClass == entity.getEffectiveNamingClass())
      return diagnoseBadDirectAccess(S, EC, entity);
    break;

  case AR_dependent:
    llvm_unreachable("cannot diagnose dependent access")::llvm::llvm_unreachable_internal("cannot diagnose dependent access"
, "clang/lib/Sema/SemaAccess.cpp", 1196);
  }
}

CXXBasePaths paths;
CXXBasePath &path = *FindBestPath(S, EC, entity, accessSoFar, paths);
assert(path.Access != AS_public)(static_cast <bool> (path.Access != AS_public) ? void (
0) : __assert_fail ("path.Access != AS_public", "clang/lib/Sema/SemaAccess.cpp"
, 1202, __extension__ __PRETTY_FUNCTION__));
24
←
Assuming field 'Access' is not equal to AS_public→
25
←
'?' condition is true→

CXXBasePath::iterator i = path.end(), e = path.begin();
CXXBasePath::iterator constrainingBase = i;
while (i != e) {
26
←
Assuming 'i' is not equal to 'e'→
27
←
Loop condition is true.  Entering loop body→
35
←
Loop condition is false. Execution continues on line 1246→
  --i;

  assert(accessSoFar != AS_none && accessSoFar != AS_private)(static_cast <bool> (accessSoFar != AS_none && accessSoFar
 != AS_private) ? void (0) : __assert_fail ("accessSoFar != AS_none && accessSoFar != AS_private"
, "clang/lib/Sema/SemaAccess.cpp", 1209, __extension__ __PRETTY_FUNCTION__
));
28
←
'?' condition is true→

  // Is the entity accessible when named in the deriving class, as
  // modified by the base specifier?
  const CXXRecordDecl *derivingClass = i->Class->getCanonicalDecl();
  const CXXBaseSpecifier *base = i->Base;

  // If the access to this base is worse than the access we have to
  // the declaration, remember it.
  AccessSpecifier baseAccess = base->getAccessSpecifier();
  if (baseAccess > accessSoFar) {
29
←
Assuming 'baseAccess' is <= 'accessSoFar'→
30
←
Taking false branch→
    constrainingBase = i;
    accessSoFar = baseAccess;
  }

  switch (HasAccess(S, EC, derivingClass, accessSoFar, entity)) {
31
←
Control jumps to 'case AR_accessible:'  at line 1226→
  case AR_inaccessible: break;
  case AR_accessible:
    accessSoFar = AS_public;
    entity.suppressInstanceContext();
    constrainingBase = nullptr;
32
←
Null pointer value stored to 'constrainingBase'→
    break;
  case AR_dependent:
    llvm_unreachable("cannot diagnose dependent access")::llvm::llvm_unreachable_internal("cannot diagnose dependent access"
, "clang/lib/Sema/SemaAccess.cpp", 1232);
  }

  // If this was private inheritance, but we don't have access to
  // the deriving class, we're done.
  if (accessSoFar33.1
'accessSoFar' is not equal to AS_private
 == AS_private) {
33
←
 Execution continues on line 1237→
34
←
Taking false branch→
    assert(baseAccess == AS_private)(static_cast <bool> (baseAccess == AS_private) ? void (
0) : __assert_fail ("baseAccess == AS_private", "clang/lib/Sema/SemaAccess.cpp"
, 1238, __extension__ __PRETTY_FUNCTION__));
    assert(constrainingBase == i)(static_cast <bool> (constrainingBase == i) ? void (0) :
 __assert_fail ("constrainingBase == i", "clang/lib/Sema/SemaAccess.cpp"
, 1239, __extension__ __PRETTY_FUNCTION__));
    break;
  }
}

// If we don't have a constraining base, the access failure must be
// due to the original declaration.
if (constrainingBase == path.end())
36
←
Assuming the condition is false→
37
←
Taking false branch→
  return diagnoseBadDirectAccess(S, EC, entity);

// We're constrained by inheritance, but we want to say
// "declared private here" if we're diagnosing a hierarchy
// conversion and this is the final step.
unsigned diagnostic;
if (entity.isMemberAccess() ||
38
←
Assuming the condition is true→
    constrainingBase + 1 != path.end()) {
  diagnostic = diag::note_access_constrained_by_path;
} else {
  diagnostic = diag::note_access_natural;
}

const CXXBaseSpecifier *base = constrainingBase->Base;
39
←
Access to field 'Base' results in a dereference of a null pointer (loaded from variable 'constrainingBase')

S.Diag(base->getSourceRange().getBegin(), diagnostic)
  << base->getSourceRange()
  << (base->getAccessSpecifier() == AS_protected)
  << (base->getAccessSpecifierAsWritten() == AS_none);

if (entity.isMemberAccess())
  S.Diag(entity.getTargetDecl()->getLocation(),
         diag::note_member_declared_at);
1270}

1272static void DiagnoseBadAccess(Sema &S, SourceLocation Loc,
                            const EffectiveContext &EC,
                            AccessTarget &Entity) {
const CXXRecordDecl *NamingClass = Entity.getNamingClass();
const CXXRecordDecl *DeclaringClass = Entity.getDeclaringClass();
NamedDecl *D = (Entity.isMemberAccess() ? Entity.getTargetDecl() : nullptr);
18
←
Assuming the condition is false→
19
←
'?' condition is false→

S.Diag(Loc, Entity.getDiag())
  << (Entity.getAccess() == AS_protected)
20
←
Assuming the condition is false→
  << (D20.1
'D' is null
 ? D->getDeclName() : DeclarationName())
21
←
'?' condition is false→
  << S.Context.getTypeDeclType(NamingClass)
  << S.Context.getTypeDeclType(DeclaringClass);
DiagnoseAccessPath(S, EC, Entity);
22
←
Calling 'DiagnoseAccessPath'→
1285}

1287/// MSVC has a bug where if during an using declaration name lookup,
1288/// the declaration found is unaccessible (private) and that declaration
1289/// was bring into scope via another using declaration whose target
1290/// declaration is accessible (public) then no error is generated.
1291/// Example:
1292///   class A {
1293///   public:
1294///     int f();
1295///   };
1296///   class B : public A {
1297///   private:
1298///     using A::f;
1299///   };
1300///   class C : public B {
1301///   private:
1302///     using B::f;
1303///   };
1304///
1305/// Here, B::f is private so this should fail in Standard C++, but
1306/// because B::f refers to A::f which is public MSVC accepts it.
1307static bool IsMicrosoftUsingDeclarationAccessBug(Sema& S,
                                               SourceLocation AccessLoc,
                                               AccessTarget &Entity) {
if (UsingShadowDecl *Shadow =
        dyn_cast<UsingShadowDecl>(Entity.getTargetDecl()))
  if (UsingDecl *UD = dyn_cast<UsingDecl>(Shadow->getIntroducer())) {
    const NamedDecl *OrigDecl = Entity.getTargetDecl()->getUnderlyingDecl();
    if (Entity.getTargetDecl()->getAccess() == AS_private &&
        (OrigDecl->getAccess() == AS_public ||
         OrigDecl->getAccess() == AS_protected)) {
      S.Diag(AccessLoc, diag::ext_ms_using_declaration_inaccessible)
          << UD->getQualifiedNameAsString()
          << OrigDecl->getQualifiedNameAsString();
      return true;
    }
  }
return false;
1324}

1326/// Determines whether the accessed entity is accessible.  Public members
1327/// have been weeded out by this point.
1328static AccessResult IsAccessible(Sema &S,
                               const EffectiveContext &EC,
                               AccessTarget &Entity) {
// Determine the actual naming class.
const CXXRecordDecl *NamingClass = Entity.getEffectiveNamingClass();

AccessSpecifier UnprivilegedAccess = Entity.getAccess();
assert(UnprivilegedAccess != AS_public && "public access not weeded out")(static_cast <bool> (UnprivilegedAccess != AS_public &&
 "public access not weeded out") ? void (0) : __assert_fail (
"UnprivilegedAccess != AS_public && \"public access not weeded out\""
, "clang/lib/Sema/SemaAccess.cpp", 1335, __extension__ __PRETTY_FUNCTION__
));

// Before we try to recalculate access paths, try to white-list
// accesses which just trade in on the final step, i.e. accesses
// which don't require [M4] or [B4]. These are by far the most
// common forms of privileged access.
if (UnprivilegedAccess != AS_none) {
  switch (HasAccess(S, EC, NamingClass, UnprivilegedAccess, Entity)) {
  case AR_dependent:
    // This is actually an interesting policy decision.  We don't
    // *have* to delay immediately here: we can do the full access
    // calculation in the hope that friendship on some intermediate
    // class will make the declaration accessible non-dependently.
    // But that's not cheap, and odds are very good (note: assertion
    // made without data) that the friend declaration will determine
    // access.
    return AR_dependent;

  case AR_accessible: return AR_accessible;
  case AR_inaccessible: break;
  }
}

AccessTarget::SavedInstanceContext _ = Entity.saveInstanceContext();

// We lower member accesses to base accesses by pretending that the
// member is a base class of its declaring class.
AccessSpecifier FinalAccess;

if (Entity.isMemberAccess()) {
  // Determine if the declaration is accessible from EC when named
  // in its declaring class.
  NamedDecl *Target = Entity.getTargetDecl();
  const CXXRecordDecl *DeclaringClass = Entity.getDeclaringClass();

  FinalAccess = Target->getAccess();
  switch (HasAccess(S, EC, DeclaringClass, FinalAccess, Entity)) {
  case AR_accessible:
    // Target is accessible at EC when named in its declaring class.
    // We can now hill-climb and simply check whether the declaring
    // class is accessible as a base of the naming class.  This is
    // equivalent to checking the access of a notional public
    // member with no instance context.
    FinalAccess = AS_public;
    Entity.suppressInstanceContext();
    break;
  case AR_inaccessible: break;
  case AR_dependent: return AR_dependent; // see above
  }

  if (DeclaringClass == NamingClass)
    return (FinalAccess == AS_public ? AR_accessible : AR_inaccessible);
} else {
  FinalAccess = AS_public;
}

assert(Entity.getDeclaringClass() != NamingClass)(static_cast <bool> (Entity.getDeclaringClass() != NamingClass
) ? void (0) : __assert_fail ("Entity.getDeclaringClass() != NamingClass"
, "clang/lib/Sema/SemaAccess.cpp", 1391, __extension__ __PRETTY_FUNCTION__
));

// Append the declaration's access if applicable.
CXXBasePaths Paths;
CXXBasePath *Path = FindBestPath(S, EC, Entity, FinalAccess, Paths);
if (!Path)
  return AR_dependent;

assert(Path->Access <= UnprivilegedAccess &&(static_cast <bool> (Path->Access <= UnprivilegedAccess
 && "access along best path worse than direct?") ? void
 (0) : __assert_fail ("Path->Access <= UnprivilegedAccess && \"access along best path worse than direct?\""
, "clang/lib/Sema/SemaAccess.cpp", 1400, __extension__ __PRETTY_FUNCTION__
))
       "access along best path worse than direct?")(static_cast <bool> (Path->Access <= UnprivilegedAccess
 && "access along best path worse than direct?") ? void
 (0) : __assert_fail ("Path->Access <= UnprivilegedAccess && \"access along best path worse than direct?\""
, "clang/lib/Sema/SemaAccess.cpp", 1400, __extension__ __PRETTY_FUNCTION__
));
if (Path->Access == AS_public)
  return AR_accessible;
return AR_inaccessible;
1404}

1406static void DelayDependentAccess(Sema &S,
                               const EffectiveContext &EC,
                               SourceLocation Loc,
                               const AccessTarget &Entity) {
assert(EC.isDependent() && "delaying non-dependent access")(static_cast <bool> (EC.isDependent() && "delaying non-dependent access"
) ? void (0) : __assert_fail ("EC.isDependent() && \"delaying non-dependent access\""
, "clang/lib/Sema/SemaAccess.cpp", 1410, __extension__ __PRETTY_FUNCTION__
));
DeclContext *DC = EC.getInnerContext();
assert(DC->isDependentContext() && "delaying non-dependent access")(static_cast <bool> (DC->isDependentContext() &&
 "delaying non-dependent access") ? void (0) : __assert_fail (
"DC->isDependentContext() && \"delaying non-dependent access\""
, "clang/lib/Sema/SemaAccess.cpp", 1412, __extension__ __PRETTY_FUNCTION__
));
DependentDiagnostic::Create(S.Context, DC, DependentDiagnostic::Access,
                            Loc,
                            Entity.isMemberAccess(),
                            Entity.getAccess(),
                            Entity.getTargetDecl(),
                            Entity.getNamingClass(),
                            Entity.getBaseObjectType(),
                            Entity.getDiag());
1421}

1423/// Checks access to an entity from the given effective context.
1424static AccessResult CheckEffectiveAccess(Sema &S,
                                       const EffectiveContext &EC,
                                       SourceLocation Loc,
                                       AccessTarget &Entity) {
assert(Entity.getAccess() != AS_public && "called for public access!")(static_cast <bool> (Entity.getAccess() != AS_public &&
 "called for public access!") ? void (0) : __assert_fail ("Entity.getAccess() != AS_public && \"called for public access!\""
, "clang/lib/Sema/SemaAccess.cpp", 1428, __extension__ __PRETTY_FUNCTION__
));
13
←
'?' condition is true→

switch (IsAccessible(S, EC, Entity)) {
14
←
Control jumps to 'case AR_inaccessible:'  at line 1435→
case AR_dependent:
  DelayDependentAccess(S, EC, Loc, Entity);
  return AR_dependent;

case AR_inaccessible:
  if (S.getLangOpts().MSVCCompat &&
15
←
Assuming field 'MSVCCompat' is 0→
      IsMicrosoftUsingDeclarationAccessBug(S, Loc, Entity))
    return AR_accessible;
  if (!Entity.isQuiet())
16
←
Taking true branch→
    DiagnoseBadAccess(S, Loc, EC, Entity);
17
←
Calling 'DiagnoseBadAccess'→
  return AR_inaccessible;

case AR_accessible:
  return AR_accessible;
}

// silence unnecessary warning
llvm_unreachable("invalid access result")::llvm::llvm_unreachable_internal("invalid access result", "clang/lib/Sema/SemaAccess.cpp"
, 1448);
1449}

1451static Sema::AccessResult CheckAccess(Sema &S, SourceLocation Loc,
                                    AccessTarget &Entity) {
// If the access path is public, it's accessible everywhere.
if (Entity.getAccess() == AS_public)
  return Sema::AR_accessible;

// If we're currently parsing a declaration, we may need to delay
// access control checking, because our effective context might be
// different based on what the declaration comes out as.
//
// For example, we might be parsing a declaration with a scope
// specifier, like this:
//   A::private_type A::foo() { ... }
//
// Or we might be parsing something that will turn out to be a friend:
//   void foo(A::private_type);
//   void B::foo(A::private_type);
if (S.DelayedDiagnostics.shouldDelayDiagnostics()) {
  S.DelayedDiagnostics.add(DelayedDiagnostic::makeAccess(Loc, Entity));
  return Sema::AR_delayed;
}

EffectiveContext EC(S.CurContext);
switch (CheckEffectiveAccess(S, EC, Loc, Entity)) {
case AR_accessible: return Sema::AR_accessible;
case AR_inaccessible: return Sema::AR_inaccessible;
case AR_dependent: return Sema::AR_dependent;
}
llvm_unreachable("invalid access result")::llvm::llvm_unreachable_internal("invalid access result", "clang/lib/Sema/SemaAccess.cpp"
, 1479);
1480}

1482void Sema::HandleDelayedAccessCheck(DelayedDiagnostic &DD, Decl *D) {
// Access control for names used in the declarations of functions
// and function templates should normally be evaluated in the context
// of the declaration, just in case it's a friend of something.
// However, this does not apply to local extern declarations.

DeclContext *DC = D->getDeclContext();
if (D->isLocalExternDecl()) {
  DC = D->getLexicalDeclContext();
} else if (FunctionDecl *FN = dyn_cast<FunctionDecl>(D)) {
  DC = FN;
} else if (TemplateDecl *TD = dyn_cast<TemplateDecl>(D)) {
  if (isa<DeclContext>(TD->getTemplatedDecl()))
    DC = cast<DeclContext>(TD->getTemplatedDecl());
}

EffectiveContext EC(DC);

AccessTarget Target(DD.getAccessData());

if (CheckEffectiveAccess(*this, EC, DD.Loc, Target) == ::AR_inaccessible)
  DD.Triggered = true;
1504}

1506void Sema::HandleDependentAccessCheck(const DependentDiagnostic &DD,
                      const MultiLevelTemplateArgumentList &TemplateArgs) {
SourceLocation Loc = DD.getAccessLoc();
AccessSpecifier Access = DD.getAccess();

Decl *NamingD = FindInstantiatedDecl(Loc, DD.getAccessNamingClass(),
                                     TemplateArgs);
if (!NamingD) return;
Decl *TargetD = FindInstantiatedDecl(Loc, DD.getAccessTarget(),
                                     TemplateArgs);
if (!TargetD) return;

if (DD.isAccessToMember()) {
  CXXRecordDecl *NamingClass = cast<CXXRecordDecl>(NamingD);
  NamedDecl *TargetDecl = cast<NamedDecl>(TargetD);
  QualType BaseObjectType = DD.getAccessBaseObjectType();
  if (!BaseObjectType.isNull()) {
    BaseObjectType = SubstType(BaseObjectType, TemplateArgs, Loc,
                               DeclarationName());
    if (BaseObjectType.isNull()) return;
  }

  AccessTarget Entity(Context,
                      AccessTarget::Member,
                      NamingClass,
                      DeclAccessPair::make(TargetDecl, Access),
                      BaseObjectType);
  Entity.setDiag(DD.getDiagnostic());
  CheckAccess(*this, Loc, Entity);
} else {
  AccessTarget Entity(Context,
                      AccessTarget::Base,
                      cast<CXXRecordDecl>(TargetD),
                      cast<CXXRecordDecl>(NamingD),
                      Access);
  Entity.setDiag(DD.getDiagnostic());
  CheckAccess(*this, Loc, Entity);
}
1544}

1546Sema::AccessResult Sema::CheckUnresolvedLookupAccess(UnresolvedLookupExpr *E,
                                                   DeclAccessPair Found) {
if (!getLangOpts().AccessControl ||
    !E->getNamingClass() ||
    Found.getAccess() == AS_public)
  return AR_accessible;

AccessTarget Entity(Context, AccessTarget::Member, E->getNamingClass(),
                    Found, QualType());
Entity.setDiag(diag::err_access) << E->getSourceRange();

return CheckAccess(*this, E->getNameLoc(), Entity);
1558}

1560/// Perform access-control checking on a previously-unresolved member
1561/// access which has now been resolved to a member.
1562Sema::AccessResult Sema::CheckUnresolvedMemberAccess(UnresolvedMemberExpr *E,
                                                   DeclAccessPair Found) {
if (!getLangOpts().AccessControl ||
    Found.getAccess() == AS_public)
  return AR_accessible;

QualType BaseType = E->getBaseType();
if (E->isArrow())
  BaseType = BaseType->castAs<PointerType>()->getPointeeType();

AccessTarget Entity(Context, AccessTarget::Member, E->getNamingClass(),
                    Found, BaseType);
Entity.setDiag(diag::err_access) << E->getSourceRange();

return CheckAccess(*this, E->getMemberLoc(), Entity);
1577}

1579/// Is the given member accessible for the purposes of deciding whether to
1580/// define a special member function as deleted?
1581bool Sema::isMemberAccessibleForDeletion(CXXRecordDecl *NamingClass,
                                       DeclAccessPair Found,
                                       QualType ObjectType,
                                       SourceLocation Loc,
                                       const PartialDiagnostic &Diag) {
// Fast path.
if (Found.getAccess() == AS_public || !getLangOpts().AccessControl)
  return true;

AccessTarget Entity(Context, AccessTarget::Member, NamingClass, Found,
                    ObjectType);

// Suppress diagnostics.
Entity.setDiag(Diag);

switch (CheckAccess(*this, Loc, Entity)) {
case AR_accessible: return true;
case AR_inaccessible: return false;
case AR_dependent: llvm_unreachable("dependent for =delete computation")::llvm::llvm_unreachable_internal("dependent for =delete computation"
, "clang/lib/Sema/SemaAccess.cpp", 1599);
case AR_delayed: llvm_unreachable("cannot delay =delete computation")::llvm::llvm_unreachable_internal("cannot delay =delete computation"
, "clang/lib/Sema/SemaAccess.cpp", 1600);
}
llvm_unreachable("bad access result")::llvm::llvm_unreachable_internal("bad access result", "clang/lib/Sema/SemaAccess.cpp"
, 1602);
1603}

1605Sema::AccessResult Sema::CheckDestructorAccess(SourceLocation Loc,
                                             CXXDestructorDecl *Dtor,
                                             const PartialDiagnostic &PDiag,
                                             QualType ObjectTy) {
if (!getLangOpts().AccessControl)
  return AR_accessible;

// There's never a path involved when checking implicit destructor access.
AccessSpecifier Access = Dtor->getAccess();
if (Access == AS_public)
  return AR_accessible;

CXXRecordDecl *NamingClass = Dtor->getParent();
if (ObjectTy.isNull()) ObjectTy = Context.getTypeDeclType(NamingClass);

AccessTarget Entity(Context, AccessTarget::Member, NamingClass,
                    DeclAccessPair::make(Dtor, Access),
                    ObjectTy);
Entity.setDiag(PDiag); // TODO: avoid copy

return CheckAccess(*this, Loc, Entity);
1626}

1628/// Checks access to a constructor.
1629Sema::AccessResult Sema::CheckConstructorAccess(SourceLocation UseLoc,
                                              CXXConstructorDecl *Constructor,
                                              DeclAccessPair Found,
                                              const InitializedEntity &Entity,
                                              bool IsCopyBindingRefToTemp) {
if (!getLangOpts().AccessControl || Found.getAccess() == AS_public)
  return AR_accessible;

PartialDiagnostic PD(PDiag());
switch (Entity.getKind()) {
default:
  PD = PDiag(IsCopyBindingRefToTemp
               ? diag::ext_rvalue_to_reference_access_ctor
               : diag::err_access_ctor);

  break;

case InitializedEntity::EK_Base:
  PD = PDiag(diag::err_access_base_ctor);
  PD << Entity.isInheritedVirtualBase()
     << Entity.getBaseSpecifier()->getType() << getSpecialMember(Constructor);
  break;

case InitializedEntity::EK_Member: {
  const FieldDecl *Field = cast<FieldDecl>(Entity.getDecl());
  PD = PDiag(diag::err_access_field_ctor);
  PD << Field->getType() << getSpecialMember(Constructor);
  break;
}

case InitializedEntity::EK_LambdaCapture: {
  StringRef VarName = Entity.getCapturedVarName();
  PD = PDiag(diag::err_access_lambda_capture);
  PD << VarName << Entity.getType() << getSpecialMember(Constructor);
  break;
}

}

return CheckConstructorAccess(UseLoc, Constructor, Found, Entity, PD);
1669}

1671/// Checks access to a constructor.
1672Sema::AccessResult Sema::CheckConstructorAccess(SourceLocation UseLoc,
                                              CXXConstructorDecl *Constructor,
                                              DeclAccessPair Found,
                                              const InitializedEntity &Entity,
                                              const PartialDiagnostic &PD) {
if (!getLangOpts().AccessControl ||
    Found.getAccess() == AS_public)
  return AR_accessible;

CXXRecordDecl *NamingClass = Constructor->getParent();

// Initializing a base sub-object is an instance method call on an
// object of the derived class.  Otherwise, we have an instance method
// call on an object of the constructed type.
//
// FIXME: If we have a parent, we're initializing the base class subobject
// in aggregate initialization. It's not clear whether the object class
// should be the base class or the derived class in that case.
CXXRecordDecl *ObjectClass;
if ((Entity.getKind() == InitializedEntity::EK_Base ||
     Entity.getKind() == InitializedEntity::EK_Delegating) &&
    !Entity.getParent()) {
  ObjectClass = cast<CXXConstructorDecl>(CurContext)->getParent();
} else if (auto *Shadow =
               dyn_cast<ConstructorUsingShadowDecl>(Found.getDecl())) {
  // If we're using an inheriting constructor to construct an object,
  // the object class is the derived class, not the base class.
  ObjectClass = Shadow->getParent();
} else {
  ObjectClass = NamingClass;
}

AccessTarget AccessEntity(
    Context, AccessTarget::Member, NamingClass,
    DeclAccessPair::make(Constructor, Found.getAccess()),
    Context.getTypeDeclType(ObjectClass));
AccessEntity.setDiag(PD);

return CheckAccess(*this, UseLoc, AccessEntity);
1711}

1713/// Checks access to an overloaded operator new or delete.
1714Sema::AccessResult Sema::CheckAllocationAccess(SourceLocation OpLoc,
                                             SourceRange PlacementRange,
                                             CXXRecordDecl *NamingClass,
                                             DeclAccessPair Found,
                                             bool Diagnose) {
if (!getLangOpts().AccessControl ||
    !NamingClass ||
    Found.getAccess() == AS_public)
  return AR_accessible;

AccessTarget Entity(Context, AccessTarget::Member, NamingClass, Found,
                    QualType());
if (Diagnose)
  Entity.setDiag(diag::err_access)
    << PlacementRange;

return CheckAccess(*this, OpLoc, Entity);
1731}

1733/// Checks access to a member.
1734Sema::AccessResult Sema::CheckMemberAccess(SourceLocation UseLoc,
                                         CXXRecordDecl *NamingClass,
                                         DeclAccessPair Found) {
if (!getLangOpts().AccessControl ||
    !NamingClass ||
    Found.getAccess() == AS_public)
  return AR_accessible;

AccessTarget Entity(Context, AccessTarget::Member, NamingClass,
                    Found, QualType());

return CheckAccess(*this, UseLoc, Entity);
1746}

1748/// Checks implicit access to a member in a structured binding.
1749Sema::AccessResult
1750Sema::CheckStructuredBindingMemberAccess(SourceLocation UseLoc,
                                       CXXRecordDecl *DecomposedClass,
                                       DeclAccessPair Field) {
if (!getLangOpts().AccessControl ||
    Field.getAccess() == AS_public)
  return AR_accessible;

AccessTarget Entity(Context, AccessTarget::Member, DecomposedClass, Field,
                    Context.getRecordType(DecomposedClass));
Entity.setDiag(diag::err_decomp_decl_inaccessible_field);

return CheckAccess(*this, UseLoc, Entity);
1762}

1764Sema::AccessResult Sema::CheckMemberOperatorAccess(SourceLocation OpLoc,
                                                 Expr *ObjectExpr,
                                                 const SourceRange &Range,
                                                 DeclAccessPair Found) {
if (!getLangOpts().AccessControl || Found.getAccess() == AS_public)
  return AR_accessible;

const RecordType *RT = ObjectExpr->getType()->castAs<RecordType>();
CXXRecordDecl *NamingClass = cast<CXXRecordDecl>(RT->getDecl());

AccessTarget Entity(Context, AccessTarget::Member, NamingClass, Found,
                    ObjectExpr->getType());
Entity.setDiag(diag::err_access) << ObjectExpr->getSourceRange() << Range;

return CheckAccess(*this, OpLoc, Entity);
1779}

1781/// Checks access to an overloaded member operator, including
1782/// conversion operators.
1783Sema::AccessResult Sema::CheckMemberOperatorAccess(SourceLocation OpLoc,
                                                 Expr *ObjectExpr,
                                                 Expr *ArgExpr,
                                                 DeclAccessPair Found) {
return CheckMemberOperatorAccess(
    OpLoc, ObjectExpr, ArgExpr ? ArgExpr->getSourceRange() : SourceRange(),
    Found);
1790}

1792Sema::AccessResult Sema::CheckMemberOperatorAccess(SourceLocation OpLoc,
                                                 Expr *ObjectExpr,
                                                 ArrayRef<Expr *> ArgExprs,
                                                 DeclAccessPair FoundDecl) {
SourceRange R;
if (!ArgExprs.empty()) {
  R = SourceRange(ArgExprs.front()->getBeginLoc(),
                  ArgExprs.back()->getEndLoc());
}

return CheckMemberOperatorAccess(OpLoc, ObjectExpr, R, FoundDecl);
1803}

1805/// Checks access to the target of a friend declaration.
1806Sema::AccessResult Sema::CheckFriendAccess(NamedDecl *target) {
assert(isa<CXXMethodDecl>(target->getAsFunction()))(static_cast <bool> (isa<CXXMethodDecl>(target->
getAsFunction())) ? void (0) : __assert_fail ("isa<CXXMethodDecl>(target->getAsFunction())"
, "clang/lib/Sema/SemaAccess.cpp", 1807, __extension__ __PRETTY_FUNCTION__
));

// Friendship lookup is a redeclaration lookup, so there's never an
// inheritance path modifying access.
AccessSpecifier access = target->getAccess();

if (!getLangOpts().AccessControl || access == AS_public)
  return AR_accessible;

CXXMethodDecl *method = cast<CXXMethodDecl>(target->getAsFunction());

AccessTarget entity(Context, AccessTarget::Member,
                    cast<CXXRecordDecl>(target->getDeclContext()),
                    DeclAccessPair::make(target, access),
                    /*no instance context*/ QualType());
entity.setDiag(diag::err_access_friend_function)
    << (method->getQualifier() ? method->getQualifierLoc().getSourceRange()
                               : method->getNameInfo().getSourceRange());

// We need to bypass delayed-diagnostics because we might be called
// while the ParsingDeclarator is active.
EffectiveContext EC(CurContext);
switch (CheckEffectiveAccess(*this, EC, target->getLocation(), entity)) {
case ::AR_accessible: return Sema::AR_accessible;
case ::AR_inaccessible: return Sema::AR_inaccessible;
case ::AR_dependent: return Sema::AR_dependent;
}
llvm_unreachable("invalid access result")::llvm::llvm_unreachable_internal("invalid access result", "clang/lib/Sema/SemaAccess.cpp"
, 1834);
1835}

1837Sema::AccessResult Sema::CheckAddressOfMemberAccess(Expr *OvlExpr,
                                                  DeclAccessPair Found) {
if (!getLangOpts().AccessControl ||
    Found.getAccess() == AS_none ||
    Found.getAccess() == AS_public)
  return AR_accessible;

OverloadExpr *Ovl = OverloadExpr::find(OvlExpr).Expression;
CXXRecordDecl *NamingClass = Ovl->getNamingClass();

AccessTarget Entity(Context, AccessTarget::Member, NamingClass, Found,
                    /*no instance context*/ QualType());
Entity.setDiag(diag::err_access)
  << Ovl->getSourceRange();

return CheckAccess(*this, Ovl->getNameLoc(), Entity);
1853}

1855/// Checks access for a hierarchy conversion.
1856///
1857/// \param ForceCheck true if this check should be performed even if access
1858///     control is disabled;  some things rely on this for semantics
1859/// \param ForceUnprivileged true if this check should proceed as if the
1860///     context had no special privileges
1861Sema::AccessResult Sema::CheckBaseClassAccess(SourceLocation AccessLoc,
                                            QualType Base,
                                            QualType Derived,
                                            const CXXBasePath &Path,
                                            unsigned DiagID,
                                            bool ForceCheck,
                                            bool ForceUnprivileged) {
if (!ForceCheck && !getLangOpts().AccessControl)
1
Assuming 'ForceCheck' is true→
  return AR_accessible;

if (Path.Access == AS_public)
2
←
Assuming field 'Access' is not equal to AS_public→
3
←
Taking false branch→
  return AR_accessible;

CXXRecordDecl *BaseD, *DerivedD;
BaseD = cast<CXXRecordDecl>(Base->castAs<RecordType>()->getDecl());
4
←
The object is a 'RecordType'→
5
←
The object is a 'CXXRecordDecl'→
DerivedD = cast<CXXRecordDecl>(Derived->castAs<RecordType>()->getDecl());
6
←
The object is a 'RecordType'→
7
←
The object is a 'CXXRecordDecl'→

AccessTarget Entity(Context, AccessTarget::Base, BaseD, DerivedD,
                    Path.Access);
if (DiagID)
8
←
Assuming 'DiagID' is 0→
9
←
Taking false branch→
  Entity.setDiag(DiagID) << Derived << Base;

if (ForceUnprivileged) {
10
←
Assuming 'ForceUnprivileged' is true→
11
←
Taking true branch→
  switch (CheckEffectiveAccess(*this, EffectiveContext(),
12
←
Calling 'CheckEffectiveAccess'→
                               AccessLoc, Entity)) {
  case ::AR_accessible: return Sema::AR_accessible;
  case ::AR_inaccessible: return Sema::AR_inaccessible;
  case ::AR_dependent: return Sema::AR_dependent;
  }
  llvm_unreachable("unexpected result from CheckEffectiveAccess")::llvm::llvm_unreachable_internal("unexpected result from CheckEffectiveAccess"
, "clang/lib/Sema/SemaAccess.cpp", 1890);
}
return CheckAccess(*this, AccessLoc, Entity);
1893}

1895/// Checks access to all the declarations in the given result set.
1896void Sema::CheckLookupAccess(const LookupResult &R) {
assert(getLangOpts().AccessControl(static_cast <bool> (getLangOpts().AccessControl &&
 "performing access check without access control") ? void (0)
 : __assert_fail ("getLangOpts().AccessControl && \"performing access check without access control\""
, "clang/lib/Sema/SemaAccess.cpp", 1898, __extension__ __PRETTY_FUNCTION__
))
       && "performing access check without access control")(static_cast <bool> (getLangOpts().AccessControl &&
 "performing access check without access control") ? void (0)
 : __assert_fail ("getLangOpts().AccessControl && \"performing access check without access control\""
, "clang/lib/Sema/SemaAccess.cpp", 1898, __extension__ __PRETTY_FUNCTION__
));
assert(R.getNamingClass() && "performing access check without naming class")(static_cast <bool> (R.getNamingClass() && "performing access check without naming class"
) ? void (0) : __assert_fail ("R.getNamingClass() && \"performing access check without naming class\""
, "clang/lib/Sema/SemaAccess.cpp", 1899, __extension__ __PRETTY_FUNCTION__
));

for (LookupResult::iterator I = R.begin(), E = R.end(); I != E; ++I) {
  if (I.getAccess() != AS_public) {
    AccessTarget Entity(Context, AccessedEntity::Member,
                        R.getNamingClass(), I.getPair(),
                        R.getBaseObjectType());
    Entity.setDiag(diag::err_access);
    CheckAccess(*this, R.getNameLoc(), Entity);
  }
}
1910}

1912/// Checks access to Target from the given class. The check will take access
1913/// specifiers into account, but no member access expressions and such.
1914///
1915/// \param Target the declaration to check if it can be accessed
1916/// \param NamingClass the class in which the lookup was started.
1917/// \param BaseType type of the left side of member access expression.
1918///        \p BaseType and \p NamingClass are used for C++ access control.
1919///        Depending on the lookup case, they should be set to the following:
1920///        - lhs.target (member access without a qualifier):
1921///          \p BaseType and \p NamingClass are both the type of 'lhs'.
1922///        - lhs.X::target (member access with a qualifier):
1923///          BaseType is the type of 'lhs', NamingClass is 'X'
1924///        - X::target (qualified lookup without member access):
1925///          BaseType is null, NamingClass is 'X'.
1926///        - target (unqualified lookup).
1927///          BaseType is null, NamingClass is the parent class of 'target'.
1928/// \return true if the Target is accessible from the Class, false otherwise.
1929bool Sema::IsSimplyAccessible(NamedDecl *Target, CXXRecordDecl *NamingClass,
                            QualType BaseType) {
// Perform the C++ accessibility checks first.
if (Target->isCXXClassMember() && NamingClass) {
  if (!getLangOpts().CPlusPlus)
    return false;
  // The unprivileged access is AS_none as we don't know how the member was
  // accessed, which is described by the access in DeclAccessPair.
  // `IsAccessible` will examine the actual access of Target (i.e.
  // Decl->getAccess()) when calculating the access.
  AccessTarget Entity(Context, AccessedEntity::Member, NamingClass,
                      DeclAccessPair::make(Target, AS_none), BaseType);
  EffectiveContext EC(CurContext);
  return ::IsAccessible(*this, EC, Entity) != ::AR_inaccessible;
}

if (ObjCIvarDecl *Ivar = dyn_cast<ObjCIvarDecl>(Target)) {
  // @public and @package ivars are always accessible.
  if (Ivar->getCanonicalAccessControl() == ObjCIvarDecl::Public ||
      Ivar->getCanonicalAccessControl() == ObjCIvarDecl::Package)
    return true;

  // If we are inside a class or category implementation, determine the
  // interface we're in.
  ObjCInterfaceDecl *ClassOfMethodDecl = nullptr;
  if (ObjCMethodDecl *MD = getCurMethodDecl())
    ClassOfMethodDecl =  MD->getClassInterface();
  else if (FunctionDecl *FD = getCurFunctionDecl()) {
    if (ObjCImplDecl *Impl
          = dyn_cast<ObjCImplDecl>(FD->getLexicalDeclContext())) {
      if (ObjCImplementationDecl *IMPD
            = dyn_cast<ObjCImplementationDecl>(Impl))
        ClassOfMethodDecl = IMPD->getClassInterface();
      else if (ObjCCategoryImplDecl* CatImplClass
                 = dyn_cast<ObjCCategoryImplDecl>(Impl))
        ClassOfMethodDecl = CatImplClass->getClassInterface();
    }
  }

  // If we're not in an interface, this ivar is inaccessible.
  if (!ClassOfMethodDecl)
    return false;

  // If we're inside the same interface that owns the ivar, we're fine.
  if (declaresSameEntity(ClassOfMethodDecl, Ivar->getContainingInterface()))
    return true;

  // If the ivar is private, it's inaccessible.
  if (Ivar->getCanonicalAccessControl() == ObjCIvarDecl::Private)
    return false;

  return Ivar->getContainingInterface()->isSuperClassOf(ClassOfMethodDecl);
}

return true;
1984}