[cfe-dev] Can IfStmt be analyzed in a path sensitive checker?

Pengfei Wang via cfe-dev cfe-dev at lists.llvm.org
Tue Dec 8 09:09:16 PST 2015


Hi, all,

I am writing a taint tracking checker with clang static analyzer,  and
currently I want to do something when a branch is finished being analyzed.
So I need to know when the symbolic execution reaches the end of a branch,
which means how can I notice that the symbolic execution reaches the end of
an If code block or Else code block? I have tried the CompoundStmt, but it
didn't work in the callback function CheckPostStmt<CompoundStmt>, and
neither did the BlockExpr work.

It seems that the control flow stmt can only be analyzed in a
path-insensitive way, such as using the ASTDecl and ASTCodeBody callbacks. Are
there any other possible ways during the symbolic execution to achieve this
goal?

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20151208/25f4dfb8/attachment.html>


More information about the cfe-dev mailing list