[cfe-dev] How to identify the end of a branch in the symbolic execution in clang?

Jordan Rose via cfe-dev cfe-dev at lists.llvm.org
Wed Dec 9 09:08:39 PST 2015


(Resending with the correct Clang list CCed.)

> On Dec 9, 2015, at 9:05 , Jordan Rose <jordan_rose at apple.com> wrote:
> 
> Hi, Pengfei. I'm not really working on the static analyzer any more; most of my time goes to Swift. Anna and Devin (CCed) are probably the best people to help you, as well as others on the cfe-dev mailing list.
> 
> Best,
> Jordan
> 
>> On Dec 9, 2015, at 3:23 , wpengfeinudt at gmail.com wrote:
>> 
>> Hello Jordan
>> 
>> I am writing a taint tracking checker of clang static analyzer,  and currently I want to do something when a branch is finished being analyzed. Aka I need to know when the symbolic execution reaches the end of an If code block or Else code block. I have tried the CompoundStmt, but it didn't work in the callback function CheckPostStmt<CompoundStmt>, and neither did the BlockExpr work. 
>> It seems that the control flow stmt can only be analyzed in a path-insensitive way, such as using the ASTDecl and ASTCodeBody callbacks. 
>> Are there any other possible ways during the symbolic execution to achieve this goal? Thank you!
>> 
>> Kind regards
>> Pengfei
>> 
>> _____________________________________
>> Sent from http://clang-developers.42468.n3.nabble.com
>> 
> 



More information about the cfe-dev mailing list