[cfe-dev] How to identify the end of a branch in the symbolic execution in clang?
Jordan Rose via cfe-dev
cfe-dev at lists.llvm.org
Wed Dec 9 09:08:39 PST 2015
(Resending with the correct Clang list CCed.)
> On Dec 9, 2015, at 9:05 , Jordan Rose <jordan_rose at apple.com> wrote:
> Hi, Pengfei. I'm not really working on the static analyzer any more; most of my time goes to Swift. Anna and Devin (CCed) are probably the best people to help you, as well as others on the cfe-dev mailing list.
>> On Dec 9, 2015, at 3:23 , wpengfeinudt at gmail.com wrote:
>> Hello Jordan
>> I am writing a taint tracking checker of clang static analyzer, and currently I want to do something when a branch is finished being analyzed. Aka I need to know when the symbolic execution reaches the end of an If code block or Else code block. I have tried the CompoundStmt, but it didn't work in the callback function CheckPostStmt<CompoundStmt>, and neither did the BlockExpr work.
>> It seems that the control flow stmt can only be analyzed in a path-insensitive way, such as using the ASTDecl and ASTCodeBody callbacks.
>> Are there any other possible ways during the symbolic execution to achieve this goal? Thank you!
>> Kind regards
>> Sent from http://clang-developers.42468.n3.nabble.com
More information about the cfe-dev