40 std::ostream &out)
const
42 for(valuest::const_iterator
49 const entryt &e=v_it->second;
61 identifier=symbol.
name;
77 const auto &entries = object_map.
read();
79 o_it != entries.end();
86 if(o.
id()==ID_invalid || o.
id()==ID_unknown)
91 if(o.
type().
id()==ID_unknown)
99 result=
"<"+
from_expr(ns, identifier, o)+
", ";
108 if(o.
type().
id()==ID_unknown)
118 width+=result.size();
123 if(next != entries.end())
147 std::cout <<
"FLATTEN: Done.\n";
163 bool generalize_index =
false;
165 seen.insert(identifier + e.
suffix);
171 if(o.
type().
id()==
"#REF#")
173 if(seen.find(o.
get(ID_identifier))!=seen.end())
175 generalize_index =
true;
179 valuest::const_iterator fi =
values.find(o.
get(ID_identifier));
196 if(t_it->second && object_entry.second)
198 *t_it->second += *object_entry.second;
201 t_it->second.reset();
204 for(
const auto &object_entry : temp.
read())
205 insert(dest, object_entry);
209 insert(dest, object_entry);
214 for(
auto &object_entry : dest.
write())
215 object_entry.second.reset();
218 seen.erase(identifier + e.
suffix);
225 if(
object.
id()==ID_invalid ||
226 object.
id()==ID_unknown)
238 return std::move(od);
246 for(valuest::const_iterator
247 it=new_values.begin();
248 it!=new_values.end();
251 valuest::iterator it2=
values.find(it->first);
257 "value_set::dynamic_object") ||
259 "value_set::return_value"))
269 const entryt &new_e=it->second;
284 for(
const auto &object_entry : src.
read())
286 if(
insert(dest, object_entry))
301 for(
const auto &object_entry : object_map.
read())
304 if(
object.type().id()==
"#REF#")
306 DATA_INVARIANT(
object.
id() == ID_symbol,
"reference to symbol required");
308 const irep_idt &ident =
object.get(ID_identifier);
309 valuest::const_iterator v_it =
values.find(ident);
320 if(t_it->second && object_entry.second)
322 *t_it->second += *object_entry.second;
325 t_it->second.reset();
327 flat_map.
write()[t_it->first]=t_it->second;
332 flat_map.
write()[object_entry.first] = object_entry.second;
335 std::vector<exprt> result;
336 for(
const auto &object_entry : flat_map.
read())
337 result.push_back(
to_expr(object_entry));
341 for(std::list<exprt>::const_iterator it=value_set.begin();
344 assert(it->type().id()!=
"#REF");
348 for(expr_sett::const_iterator it=value_set.begin(); it!=value_set.end(); it++)
349 std::cout <<
"GET_VALUE_SET: " <<
format(*it) <<
'\n';
364 bool includes_nondet_pointer =
false;
366 tmp, dest, includes_nondet_pointer,
"", tmp.
type(), ns, recset);
372 bool &includes_nondet_pointer,
373 const std::string &suffix,
374 const typet &original_type,
379 std::cout <<
"GET_VALUE_SET_REC EXPR: " <<
format(expr)
381 std::cout <<
"GET_VALUE_SET_REC SUFFIX: " << suffix <<
'\n';
385 if(expr.
type().
id()==
"#REF#")
387 valuest::const_iterator fi =
values.find(expr.
get(ID_identifier));
391 for(
const auto &object_entry : fi->second.object_map.read())
396 includes_nondet_pointer,
410 else if(expr.
id()==ID_unknown || expr.
id()==ID_invalid)
415 else if(expr.
id()==ID_index)
419 if(type.
id() == ID_array)
424 includes_nondet_pointer,
435 else if(expr.
id()==ID_member)
439 if(compound.is_not_nil())
444 type.
id() == ID_struct || type.
id() == ID_union,
445 "operand 0 of member expression must be struct or union");
447 const std::string &component_name =
453 includes_nondet_pointer,
454 "." + component_name + suffix,
462 else if(expr.
id()==ID_symbol)
467 valuest::const_iterator v_it=
values.find(ident);
474 else if(v_it!=
values.end())
482 else if(expr.
id()==ID_if)
487 includes_nondet_pointer,
495 includes_nondet_pointer,
503 else if(expr.
id()==ID_address_of)
509 else if(expr.
id()==ID_dereference)
515 if(object_map.
begin()!=object_map.
end())
517 for(
const auto &object_entry : object_map)
523 includes_nondet_pointer,
545 else if(expr.
id()==ID_typecast)
550 includes_nondet_pointer,
558 else if(expr.
id()==ID_plus || expr.
id()==ID_minus)
561 throw expr.
id_string()+
" expected to have at least two operands";
563 if(expr.
type().
id()==ID_pointer)
566 const exprt *ptr_operand=
nullptr;
568 for(
const auto &op : expr.
operands())
570 if(op.type().id() == ID_pointer)
572 if(ptr_operand==
nullptr)
575 throw "more than one pointer operand in pointer arithmetic";
579 if(ptr_operand==
nullptr)
580 throw "pointer type sum expected to have pointer operand";
586 includes_nondet_pointer,
592 for(
const auto &object_entry : pointer_expr_set.
read())
594 offsett offset = object_entry.second;
604 *offset = (expr.
id() == ID_plus) ? *i : -*i;
612 *offset = (expr.
id() == ID_plus) ? *i : -*i;
618 insert(dest, object_entry.first, offset);
624 else if(expr.
id()==ID_side_effect)
628 if(statement==ID_function_call)
631 throw "unexpected function_call sideeffect";
633 else if(statement==ID_allocate)
635 if(expr.
type().
id()!=ID_pointer)
636 throw "malloc expected to return pointer type";
640 const typet &dynamic_type=
641 static_cast<const typet &
>(expr.
find(ID_C_cxx_alloc_type));
652 else if(statement==ID_cpp_new ||
653 statement==ID_cpp_new_array)
668 else if(expr.
id()==ID_struct)
674 else if(expr.
id()==ID_with)
677 throw "unexpected value in get_value_set: "+expr.
id_string();
679 else if(expr.
id()==ID_array_of ||
683 for(
const auto &op : expr.
operands())
688 includes_nondet_pointer,
695 else if(expr.
id()==ID_dynamic_object)
700 const std::string name=
701 "value_set::dynamic_object"+
706 valuest::const_iterator v_it=
values.find(name);
723 if(src.
id()==ID_typecast)
741 for(
const auto &object_entry : object_map.
read())
745 if(
object.type().id() ==
"#REF#")
747 const irep_idt &ident =
object.get(ID_identifier);
748 valuest::const_iterator vit =
values.find(ident);
753 dest.insert(
exprt(ID_unknown,
object.type()));
764 if(t_it->second && object_entry.second)
766 *t_it->second += *object_entry.second;
769 t_it->second.reset();
772 for(
const auto &o : omt.
read())
777 dest.insert(
to_expr(object_entry));
789 for(
const auto &object_entry : object_map.
read())
790 dest.insert(
to_expr(object_entry));
799 std::cout <<
"GET_REFERENCE_SET_REC EXPR: " <<
format(expr)
803 if(expr.
type().
id()==
"#REF#")
805 valuest::const_iterator fi =
values.find(expr.
get(ID_identifier));
808 for(
const auto &object_entry : fi->second.object_map.read())
816 else if(expr.
id()==ID_symbol ||
817 expr.
id()==ID_dynamic_object ||
818 expr.
id()==ID_string_constant)
821 expr.
type().
id() == ID_array &&
831 else if(expr.
id()==ID_dereference)
835 bool includes_nondet_pointer =
false;
839 includes_nondet_pointer,
846 for(
const auto &object_entry : temp.
read())
849 if(obj.
type().
id()==
"#REF#")
852 valuest::const_iterator v_it =
values.find(ident);
863 if(t_it->second && object_entry.second)
865 *t_it->second += *object_entry.second;
868 t_it->second.reset();
871 for(
const auto &t2_object_entry : t2.
read())
872 insert(dest, t2_object_entry);
880 insert(dest, object_entry);
884 for(expr_sett::const_iterator it=value_set.begin();
887 std::cout <<
"VALUE_SET: " <<
format(*it) <<
'\n';
892 else if(expr.
id()==ID_index)
899 array_type.
id() == ID_array,
"index takes array-typed operand");
906 for(
const auto &object_entry : object_map)
910 if(
object.
id()==ID_unknown)
920 if(
object.type().
id() !=
"#REF#" &&
object.type() != array_type)
923 casted_index = index_expr;
925 offsett o = object_entry.second;
936 insert(dest, casted_index, o);
942 else if(expr.
id()==ID_member)
944 const irep_idt &component_name=expr.
get(ID_component_name);
951 for(
const auto &object_entry : struct_references.
read())
954 const typet &obj_type =
object.type();
956 if(
object.
id()==ID_unknown)
959 obj_type.
id() != ID_struct && obj_type.
id() != ID_union &&
960 obj_type.
id() != ID_struct_tag && obj_type.
id() != ID_union_tag)
968 offsett o = object_entry.second;
979 insert(dest, member_expr, o);
985 else if(expr.
id()==ID_if)
1001 std::cout <<
"ASSIGN LHS: " <<
format(lhs) <<
'\n';
1002 std::cout <<
"ASSIGN RHS: " <<
format(rhs) <<
'\n';
1014 if(type.
id()==ID_struct ||
1015 type.
id()==ID_union)
1021 for(struct_typet::componentst::const_iterator
1026 const typet &subtype=c_it->type();
1027 const irep_idt &name = c_it->get_name();
1031 subtype.
id() != ID_code,
1032 "struct/union member must not be of code type");
1033 if(c_it->get_is_padding())
1040 if(rhs.
id()==ID_unknown ||
1041 rhs.
id()==ID_invalid)
1043 rhs_member=
exprt(rhs.
id(), subtype);
1048 throw "value_set_fit::assign type mismatch: "
1055 no < rhs.
operands().size(),
"component index must be in bounds");
1058 else if(rhs.
id()==ID_with)
1062 const exprt &member_operand = rhs_with.where();
1065 member_operand.
get(ID_component_name);
1067 if(component_name==name)
1070 rhs_member = rhs_with.new_value();
1075 rhs_member=
exprt(ID_member, subtype);
1077 rhs_member.
set(ID_component_name, name);
1082 rhs_member=
exprt(ID_member, subtype);
1084 rhs_member.
set(ID_component_name, name);
1087 assign(lhs_member, rhs_member, ns);
1091 else if(type.
id()==ID_array)
1098 if(rhs.
id()==ID_unknown ||
1099 rhs.
id()==ID_invalid)
1110 if(rhs.
type() != type)
1111 throw "value_set_fit::assign type mismatch: "
1115 if(rhs.
id()==ID_array_of)
1121 for(
const auto &op : rhs.
operands())
1123 assign(lhs_index, op, ns);
1126 else if(rhs.
id()==ID_with)
1133 assign(lhs_index, op0_index, ns);
1142 assign(lhs_index, rhs_index, ns);
1161 const std::string &suffix,
1166 std::cout <<
"ASSIGN_REC LHS: " <<
format(lhs) <<
'\n';
1167 std::cout <<
"ASSIGN_REC SUFFIX: " << suffix <<
'\n';
1170 it!=values_rhs.
read().
end(); it++)
1171 std::cout <<
"ASSIGN_REC RHS: " <<
to_expr(it) <<
'\n';
1174 if(lhs.
type().
id()==
"#REF#")
1179 bool includes_nondet_pointer =
false;
1183 includes_nondet_pointer,
1189 if(recursion_set.find(ident)!=recursion_set.end())
1191 recursion_set.insert(ident);
1193 for(
const auto &object_entry : temp.
read())
1197 if(
object.
id() != ID_unknown)
1198 assign_rec(
object, values_rhs, suffix, ns, recursion_set);
1201 recursion_set.erase(ident);
1204 else if(lhs.
id()==ID_symbol)
1209 "value_set::dynamic_object") ||
1211 "value_set::return_value") ||
1221 else if(lhs.
id()==ID_dynamic_object)
1226 const std::string name=
1227 "value_set::dynamic_object"+
1233 else if(lhs.
id()==ID_dereference)
1236 throw lhs.
id_string()+
" expected to have one operand";
1241 for(
const auto &object_entry : reference_set.
read())
1245 if(
object.
id()!=ID_unknown)
1246 assign_rec(
object, values_rhs, suffix, ns, recursion_set);
1249 else if(lhs.
id()==ID_index)
1253 if(type.
id() == ID_array)
1263 else if(lhs.
id()==ID_member)
1268 const std::string &component_name=lhs.
get_string(ID_component_name);
1273 type.
id() == ID_struct || type.
id() == ID_union,
1274 "operand 0 of member expression must be struct or union");
1279 "." + component_name + suffix,
1283 else if(lhs.
id()==
"valid_object" ||
1284 lhs.
id()==
"dynamic_type")
1288 else if(lhs.
id()==ID_string_constant)
1293 else if(lhs.
id() == ID_null_object)
1297 else if(lhs.
id()==ID_typecast)
1301 assign_rec(typecast_expr.
op(), values_rhs, suffix, ns, recursion_set);
1304 lhs.
id() ==
"zero_string" || lhs.
id() ==
"is_zero_string" ||
1305 lhs.
id() ==
"zero_string_length" || lhs.
id() == ID_address_of)
1309 else if(lhs.
id()==ID_byte_extract_little_endian ||
1310 lhs.
id()==ID_byte_extract_big_endian)
1316 throw "assign NYI: '" + lhs.
id_string() +
"'";
1334 for(std::size_t i=0; i<arguments.size(); i++)
1336 const std::string identifier=
"value_set::" +
id2string(function) +
"::" +
1337 "argument$"+std::to_string(i);
1339 const symbol_exprt dummy_lhs(identifier, arguments[i].type());
1340 assign(dummy_lhs, arguments[i], ns);
1347 for(code_typet::parameterst::const_iterator
1348 it=parameter_types.begin();
1349 it!=parameter_types.end();
1352 const irep_idt &identifier=it->get_identifier();
1353 if(identifier.
empty())
1360 "argument$"+std::to_string(i), it->type());
1363 assign(actual_lhs, v_expr, ns);
1375 std::string rvs =
"value_set::return_value" + std::to_string(
from_function);
1385 if(statement==ID_block)
1390 else if(statement==ID_function_call)
1395 else if(statement==ID_assign)
1398 throw "assignment expected to have two operands";
1402 else if(statement==ID_decl)
1405 throw "decl expected to have one operand";
1409 if(lhs.
id()!=ID_symbol)
1410 throw "decl expected to have symbol on lhs";
1414 else if(statement==ID_expression)
1418 else if(statement==ID_cpp_delete ||
1419 statement==ID_cpp_delete_array)
1423 else if(statement==
"lock" || statement==
"unlock")
1427 else if(statement==ID_asm)
1431 else if(statement==ID_nondet)
1435 else if(statement==ID_printf)
1439 else if(statement==ID_return)
1443 std::string rvs =
"value_set::return_value" + std::to_string(
from_function);
1447 else if(statement==ID_fence)
1451 statement == ID_array_copy || statement == ID_array_replace ||
1452 statement == ID_array_set || statement == ID_array_equal)
1459 else if(statement == ID_havoc_object)
1465 "value_set_fit: unexpected statement: "+
id2string(statement);
Expression classes for byte-level operators.
const byte_extract_exprt & to_byte_extract_expr(const exprt &expr)
bitvector_typet c_index_type()
Operator to return the address of an object.
const typet & element_type() const
The type of the elements of the array.
code_operandst & statements()
goto_instruction_codet representation of a "return from afunction" statement.
const exprt & return_value() const
std::vector< parametert > parameterst
const parameterst & parameters() const
Data structure for representing an arbitrary statement in a program.
dstringt has one field, an unsigned integer no which is an index into a static table of strings.
Representation of heap-allocated objects.
unsigned int get_instance() const
void set_instance(unsigned int instance)
Base class for all expressions.
std::vector< exprt > operandst
void copy_to_operands(const exprt &expr)
Copy the given argument to the end of exprt's operands.
bool is_zero() const
Return whether the expression is a constant representing 0.
bool is_constant() const
Return whether the expression is a constant.
typet & type()
Return the type of the expression.
std::string pretty(unsigned indent=0, unsigned max_indent=0) const
const irept & find(const irep_idt &name) const
const irep_idt & get(const irep_idt &name) const
void set(const irep_idt &name, const irep_idt &value)
const std::string & id_string() const
const irep_idt & id() const
const std::string & get_string(const irep_idt &name) const
Extract member of struct or union.
const exprt & compound() const
const typet & follow(const typet &) const
Resolve type symbol to the type it points to.
A namespacet is essentially one or two symbol tables bound together, to allow for symbol lookups in t...
bool lookup(const irep_idt &name, const symbolt *&symbol) const override
See documentation for namespace_baset::lookup().
Split an expression into a base object and a (byte) offset.
const typet & base_type() const
The type of the data what we point to.
const irep_idt & get_statement() const
Base type for structs and unions.
const componentst & components() const
Expression to hold a symbol (variable)
const irep_idt & get_identifier() const
typet type
Type of symbol.
irep_idt name
The unique identifier.
const irep_idt & display_name() const
Return language specific display name if present.
The Boolean constant true.
Type with a single subtype.
const typet & subtype() const
Semantic type conversion.
The type of an expression, extends irept.
data_typet::value_type value_type
data_typet::const_iterator const_iterator
static const object_map_dt blank
data_typet::iterator iterator
void get_reference_set_sharing(const exprt &expr, expr_sett &expr_set, const namespacet &ns) const
optionalt< mp_integer > offsett
Represents the offset into an object: either a unique integer offset, or an unknown value,...
static object_numberingt object_numbering
std::unordered_set< idt, string_hash > gvs_recursion_sett
void get_reference_set(const exprt &expr, expr_sett &expr_set, const namespacet &ns) const
void assign(const exprt &lhs, const exprt &rhs, const namespacet &ns)
static numberingt< irep_idt > function_numbering
void add_var(const idt &id)
bool make_union(object_mapt &dest, const object_mapt &src) const
std::vector< exprt > get_value_set(const exprt &expr, const namespacet &ns) const
void apply_code(const codet &code, const namespacet &ns)
void get_value_set_rec(const exprt &expr, object_mapt &dest, bool &includes_nondet_pointer, const std::string &suffix, const typet &original_type, const namespacet &ns, gvs_recursion_sett &recursion_set) const
void assign_rec(const exprt &lhs, const object_mapt &values_rhs, const std::string &suffix, const namespacet &ns, assign_recursion_sett &recursion_set)
void dereference_rec(const exprt &src, exprt &dest) const
std::unordered_map< idt, entryt, string_hash > valuest
std::unordered_set< idt, string_hash > assign_recursion_sett
void output(const namespacet &ns, std::ostream &out) const
void flatten_rec(const entryt &, object_mapt &, flatten_seent &) const
std::unordered_set< exprt, irep_hash > expr_sett
void do_end_function(const exprt &lhs, const namespacet &ns)
void flatten(const entryt &e, object_mapt &dest) const
bool offset_is_zero(const offsett &offset) const
entryt & get_entry(const idt &id, const std::string &suffix)
unsigned from_target_index
bool insert(object_mapt &dest, const object_map_dt::value_type &it) const
std::unordered_set< idt, string_hash > flatten_seent
exprt to_expr(const object_map_dt::value_type &it) const
void do_function_call(const irep_idt &function, const exprt::operandst &arguments, const namespacet &ns)
void get_reference_set_sharing_rec(const exprt &expr, object_mapt &dest, const namespacet &ns) const
bool has_prefix(const std::string &s, const std::string &prefix)
bool is_null_pointer(const constant_exprt &expr)
Returns true if expr has a pointer type and a value NULL; it also returns true when expr has value ze...
Deprecated expression utility functions.
bool can_cast_expr< code_inputt >(const exprt &base)
bool can_cast_expr< code_outputt >(const exprt &base)
const code_returnt & to_code_return(const goto_instruction_codet &code)
const std::string & id2string(const irep_idt &d)
std::string from_expr(const namespacet &ns, const irep_idt &identifier, const exprt &expr)
std::string from_type(const namespacet &ns, const irep_idt &identifier, const typet &type)
const std::string integer2string(const mp_integer &n, unsigned base)
API to expression classes for Pointers.
const address_of_exprt & to_address_of_expr(const exprt &expr)
Cast an exprt to an address_of_exprt.
const pointer_typet & to_pointer_type(const typet &type)
Cast a typet to a pointer_typet.
const dereference_exprt & to_dereference_expr(const exprt &expr)
Cast an exprt to a dereference_exprt.
const dynamic_object_exprt & to_dynamic_object_expr(const exprt &expr)
Cast an exprt to a dynamic_object_exprt.
bool simplify(exprt &expr, const namespacet &ns)
#define CHECK_RETURN(CONDITION)
#define UNREACHABLE
This should be used to mark dead code.
#define DATA_INVARIANT(CONDITION, REASON)
This condition should be used to document that assumptions that are made on goto_functions,...
#define PRECONDITION(CONDITION)
side_effect_exprt & to_side_effect_expr(exprt &expr)
const code_blockt & to_code_block(const codet &code)
const array_of_exprt & to_array_of_expr(const exprt &expr)
Cast an exprt to an array_of_exprt.
const index_exprt & to_index_expr(const exprt &expr)
Cast an exprt to an index_exprt.
const typecast_exprt & to_typecast_expr(const exprt &expr)
Cast an exprt to a typecast_exprt.
const binary_exprt & to_binary_expr(const exprt &expr)
Cast an exprt to a binary_exprt.
const if_exprt & to_if_expr(const exprt &expr)
Cast an exprt to an if_exprt.
const member_exprt & to_member_expr(const exprt &expr)
Cast an exprt to a member_exprt.
const constant_exprt & to_constant_expr(const exprt &expr)
Cast an exprt to a constant_exprt.
const symbol_exprt & to_symbol_expr(const exprt &expr)
Cast an exprt to a symbol_exprt.
const with_exprt & to_with_expr(const exprt &expr)
Cast an exprt to a with_exprt.
const code_typet & to_code_type(const typet &type)
Cast a typet to a code_typet.
const array_typet & to_array_type(const typet &type)
Cast a typet to an array_typet.
const struct_union_typet & to_struct_union_type(const typet &type)
Cast a typet to a struct_union_typet.
const type_with_subtypet & to_type_with_subtype(const typet &type)
static const char * alloc_adapter_prefix
Value Set (Flow Insensitive, Sharing)