Ted Kremenek | 17a295d | 2008-06-11 06:19:49 +0000 | [diff] [blame] | 1 | <html> |
| 2 | <head> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 3 | <title>"Clang" CFE Internals Manual</title> |
Ted Kremenek | 17a295d | 2008-06-11 06:19:49 +0000 | [diff] [blame] | 4 | <link type="text/css" rel="stylesheet" href="../menu.css" /> |
| 5 | <link type="text/css" rel="stylesheet" href="../content.css" /> |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 6 | <style type="text/css"> |
| 7 | td { |
| 8 | vertical-align: top; |
| 9 | } |
| 10 | </style> |
Ted Kremenek | 17a295d | 2008-06-11 06:19:49 +0000 | [diff] [blame] | 11 | </head> |
| 12 | <body> |
| 13 | |
| 14 | <!--#include virtual="../menu.html.incl"--> |
| 15 | |
| 16 | <div id="content"> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 17 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 18 | <h1>"Clang" CFE Internals Manual</h1> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 19 | |
| 20 | <ul> |
| 21 | <li><a href="#intro">Introduction</a></li> |
| 22 | <li><a href="#libsystem">LLVM System and Support Libraries</a></li> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 23 | <li><a href="#libbasic">The Clang 'Basic' Library</a> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 24 | <ul> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 25 | <li><a href="#Diagnostics">The Diagnostics Subsystem</a></li> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 26 | <li><a href="#SourceLocation">The SourceLocation and SourceManager |
| 27 | classes</a></li> |
| 28 | </ul> |
| 29 | </li> |
| 30 | <li><a href="#liblex">The Lexer and Preprocessor Library</a> |
| 31 | <ul> |
| 32 | <li><a href="#Token">The Token class</a></li> |
| 33 | <li><a href="#Lexer">The Lexer class</a></li> |
Chris Lattner | 3932fe0 | 2009-01-06 06:02:08 +0000 | [diff] [blame] | 34 | <li><a href="#AnnotationToken">Annotation Tokens</a></li> |
Chris Lattner | 7928125 | 2008-03-09 02:27:26 +0000 | [diff] [blame] | 35 | <li><a href="#TokenLexer">The TokenLexer class</a></li> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 36 | <li><a href="#MultipleIncludeOpt">The MultipleIncludeOpt class</a></li> |
| 37 | </ul> |
| 38 | </li> |
| 39 | <li><a href="#libparse">The Parser Library</a> |
| 40 | <ul> |
| 41 | </ul> |
| 42 | </li> |
| 43 | <li><a href="#libast">The AST Library</a> |
| 44 | <ul> |
| 45 | <li><a href="#Type">The Type class and its subclasses</a></li> |
| 46 | <li><a href="#QualType">The QualType class</a></li> |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 47 | <li><a href="#DeclarationName">Declaration names</a></li> |
Douglas Gregor | 074149e | 2009-01-05 19:45:36 +0000 | [diff] [blame] | 48 | <li><a href="#DeclContext">Declaration contexts</a> |
| 49 | <ul> |
| 50 | <li><a href="#Redeclarations">Redeclarations and Overloads</a></li> |
| 51 | <li><a href="#LexicalAndSemanticContexts">Lexical and Semantic |
| 52 | Contexts</a></li> |
| 53 | <li><a href="#TransparentContexts">Transparent Declaration Contexts</a></li> |
| 54 | <li><a href="#MultiDeclContext">Multiply-Defined Declaration Contexts</a></li> |
| 55 | </ul> |
| 56 | </li> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 57 | <li><a href="#CFG">The CFG class</a></li> |
Chris Lattner | 7bad199 | 2008-11-16 21:48:07 +0000 | [diff] [blame] | 58 | <li><a href="#Constants">Constant Folding in the Clang AST</a></li> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 59 | </ul> |
| 60 | </li> |
| 61 | </ul> |
| 62 | |
| 63 | |
| 64 | <!-- ======================================================================= --> |
| 65 | <h2 id="intro">Introduction</h2> |
| 66 | <!-- ======================================================================= --> |
| 67 | |
| 68 | <p>This document describes some of the more important APIs and internal design |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 69 | decisions made in the Clang C front-end. The purpose of this document is to |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 70 | both capture some of this high level information and also describe some of the |
| 71 | design decisions behind it. This is meant for people interested in hacking on |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 72 | Clang, not for end-users. The description below is categorized by |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 73 | libraries, and does not describe any of the clients of the libraries.</p> |
| 74 | |
| 75 | <!-- ======================================================================= --> |
| 76 | <h2 id="libsystem">LLVM System and Support Libraries</h2> |
| 77 | <!-- ======================================================================= --> |
| 78 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 79 | <p>The LLVM libsystem library provides the basic Clang system abstraction layer, |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 80 | which is used for file system access. The LLVM libsupport library provides many |
| 81 | underlying libraries and <a |
| 82 | href="http://llvm.org/docs/ProgrammersManual.html">data-structures</a>, |
| 83 | including command line option |
| 84 | processing and various containers.</p> |
| 85 | |
| 86 | <!-- ======================================================================= --> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 87 | <h2 id="libbasic">The Clang 'Basic' Library</h2> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 88 | <!-- ======================================================================= --> |
| 89 | |
| 90 | <p>This library certainly needs a better name. The 'basic' library contains a |
| 91 | number of low-level utilities for tracking and manipulating source buffers, |
| 92 | locations within the source buffers, diagnostics, tokens, target abstraction, |
| 93 | and information about the subset of the language being compiled for.</p> |
| 94 | |
| 95 | <p>Part of this infrastructure is specific to C (such as the TargetInfo class), |
| 96 | other parts could be reused for other non-C-based languages (SourceLocation, |
| 97 | SourceManager, Diagnostics, FileManager). When and if there is future demand |
| 98 | we can figure out if it makes sense to introduce a new library, move the general |
| 99 | classes somewhere else, or introduce some other solution.</p> |
| 100 | |
| 101 | <p>We describe the roles of these classes in order of their dependencies.</p> |
| 102 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 103 | |
| 104 | <!-- ======================================================================= --> |
| 105 | <h3 id="Diagnostics">The Diagnostics Subsystem</h3> |
| 106 | <!-- ======================================================================= --> |
| 107 | |
| 108 | <p>The Clang Diagnostics subsystem is an important part of how the compiler |
| 109 | communicates with the human. Diagnostics are the warnings and errors produced |
| 110 | when the code is incorrect or dubious. In Clang, each diagnostic produced has |
| 111 | (at the minimum) a unique ID, a <a href="#SourceLocation">SourceLocation</a> to |
| 112 | "put the caret", an English translation associated with it, and a severity (e.g. |
| 113 | <tt>WARNING</tt> or <tt>ERROR</tt>). They can also optionally include a number |
| 114 | of arguments to the dianostic (which fill in "%0"'s in the string) as well as a |
| 115 | number of source ranges that related to the diagnostic.</p> |
| 116 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 117 | <p>In this section, we'll be giving examples produced by the Clang command line |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 118 | driver, but diagnostics can be <a href="#DiagnosticClient">rendered in many |
| 119 | different ways</a> depending on how the DiagnosticClient interface is |
| 120 | implemented. A representative example of a diagonstic is:</p> |
| 121 | |
| 122 | <pre> |
| 123 | t.c:38:15: error: invalid operands to binary expression ('int *' and '_Complex float') |
| 124 | <font color="darkgreen">P = (P-42) + Gamma*4;</font> |
| 125 | <font color="blue">~~~~~~ ^ ~~~~~~~</font> |
| 126 | </pre> |
| 127 | |
| 128 | <p>In this example, you can see the English translation, the severity (error), |
| 129 | you can see the source location (the caret ("^") and file/line/column info), |
| 130 | the source ranges "~~~~", arguments to the diagnostic ("int*" and "_Complex |
| 131 | float"). You'll have to believe me that there is a unique ID backing the |
| 132 | diagnostic :).</p> |
| 133 | |
| 134 | <p>Getting all of this to happen has several steps and involves many moving |
| 135 | pieces, this section describes them and talks about best practices when adding |
| 136 | a new diagnostic.</p> |
| 137 | |
| 138 | <!-- ============================ --> |
| 139 | <h4>The DiagnosticKinds.def file</h4> |
| 140 | <!-- ============================ --> |
| 141 | |
| 142 | <p>Diagnostics are created by adding an entry to the <tt><a |
| 143 | href="http://llvm.org/svn/llvm-project/cfe/trunk/include/clang/Basic/DiagnosticKinds.def" |
| 144 | >DiagnosticKinds.def</a></tt> file. This file encodes the unique ID of the |
| 145 | diagnostic (as an enum, the first argument), the severity of the diagnostic |
| 146 | (second argument) and the English translation + format string.</p> |
| 147 | |
| 148 | <p>There is little sanity with the naming of the unique ID's right now. Some |
| 149 | start with err_, warn_, ext_ to encode the severity into the name. Since the |
| 150 | enum is referenced in the C++ code that produces the diagnostic, it is somewhat |
| 151 | useful for it to be reasonably short.</p> |
| 152 | |
| 153 | <p>The severity of the diagnostic comes from the set {<tt>NOTE</tt>, |
| 154 | <tt>WARNING</tt>, <tt>EXTENSION</tt>, <tt>EXTWARN</tt>, <tt>ERROR</tt>}. The |
| 155 | <tt>ERROR</tt> severity is used for diagnostics indicating the program is never |
| 156 | acceptable under any circumstances. When an error is emitted, the AST for the |
| 157 | input code may not be fully built. The <tt>EXTENSION</tt> and <tt>EXTWARN</tt> |
| 158 | severities are used for extensions to the language that Clang accepts. This |
| 159 | means that Clang fully understands and can represent them in the AST, but we |
| 160 | produce diagnostics to tell the user their code is non-portable. The difference |
| 161 | is that the former are ignored by default, and the later warn by default. The |
| 162 | <tt>WARNING</tt> severity is used for constructs that are valid in the currently |
| 163 | selected source language but that are dubious in some way. The <tt>NOTE</tt> |
| 164 | level is used to staple more information onto a previous diagnostics.</p> |
| 165 | |
| 166 | <p>These <em>severities</em> are mapped into a smaller set (the |
| 167 | Diagnostic::Level enum, {<tt>Ignored</tt>, <tt>Note</tt>, <tt>Warning</tt>, |
| 168 | <tt>Error</tt> }) of output <em>levels</em> by the diagnostics subsystem based |
| 169 | on various configuration options. For example, if the user specifies |
| 170 | <tt>-pedantic</tt>, <tt>EXTENSION</tt> maps to <tt>Warning</tt>, if they specify |
| 171 | <tt>-pedantic-errors</tt>, it turns into <tt>Error</tt>. Clang also internally |
| 172 | supports a fully fine grained mapping mechanism that allows you to map any |
| 173 | diagnostic that doesn't have <tt>ERRROR</tt> severity to any output level that |
| 174 | you want. This is used to implement options like <tt>-Wunused_macros</tt>, |
| 175 | <tt>-Wundef</tt> etc.</p> |
| 176 | |
| 177 | <!-- ================= --> |
| 178 | <h4>The Format String</h4> |
| 179 | <!-- ================= --> |
| 180 | |
| 181 | <p>The format string for the diagnostic is very simple, but it has some power. |
| 182 | It takes the form of a string in English with markers that indicate where and |
| 183 | how arguments to the diagnostic are inserted and formatted. For example, here |
| 184 | are some simple format strings:</p> |
| 185 | |
| 186 | <pre> |
| 187 | "binary integer literals are an extension" |
| 188 | "format string contains '\\0' within the string body" |
| 189 | "more '<b>%%</b>' conversions than data arguments" |
Chris Lattner | 545b368 | 2008-11-23 20:27:13 +0000 | [diff] [blame] | 190 | "invalid operands to binary expression (<b>%0</b> and <b>%1</b>)" |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 191 | "overloaded '<b>%0</b>' must be a <b>%select{unary|binary|unary or binary}2</b> operator" |
| 192 | " (has <b>%1</b> parameter<b>%s1</b>)" |
| 193 | </pre> |
| 194 | |
| 195 | <p>These examples show some important points of format strings. You can use any |
| 196 | plain ASCII character in the diagnostic string except "%" without a problem, |
| 197 | but these are C strings, so you have to use and be aware of all the C escape |
| 198 | sequences (as in the second example). If you want to produce a "%" in the |
| 199 | output, use the "%%" escape sequence, like the third diagnostic. Finally, |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 200 | Clang uses the "%...[digit]" sequences to specify where and how arguments to |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 201 | the diagnostic are formatted.</p> |
| 202 | |
| 203 | <p>Arguments to the diagnostic are numbered according to how they are specified |
| 204 | by the C++ code that <a href="#producingdiag">produces them</a>, and are |
| 205 | referenced by <tt>%0</tt> .. <tt>%9</tt>. If you have more than 10 arguments |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 206 | to your diagnostic, you are doing something wrong :). Unlike printf, there |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 207 | is no requirement that arguments to the diagnostic end up in the output in |
| 208 | the same order as they are specified, you could have a format string with |
| 209 | <tt>"%1 %0"</tt> that swaps them, for example. The text in between the |
| 210 | percent and digit are formatting instructions. If there are no instructions, |
| 211 | the argument is just turned into a string and substituted in.</p> |
| 212 | |
| 213 | <p>Here are some "best practices" for writing the English format string:</p> |
| 214 | |
| 215 | <ul> |
| 216 | <li>Keep the string short. It should ideally fit in the 80 column limit of the |
| 217 | <tt>DiagnosticKinds.def</tt> file. This avoids the diagnostic wrapping when |
| 218 | printed, and forces you to think about the important point you are conveying |
| 219 | with the diagnostic.</li> |
| 220 | <li>Take advantage of location information. The user will be able to see the |
| 221 | line and location of the caret, so you don't need to tell them that the |
| 222 | problem is with the 4th argument to the function: just point to it.</li> |
| 223 | <li>Do not capitalize the diagnostic string, and do not end it with a |
| 224 | period.</li> |
| 225 | <li>If you need to quote something in the diagnostic string, use single |
| 226 | quotes.</li> |
| 227 | </ul> |
| 228 | |
| 229 | <p>Diagnostics should never take random English strings as arguments: you |
| 230 | shouldn't use <tt>"you have a problem with %0"</tt> and pass in things like |
| 231 | <tt>"your argument"</tt> or <tt>"your return value"</tt> as arguments. Doing |
| 232 | this prevents <a href="translation">translating</a> the Clang diagnostics to |
| 233 | other languages (because they'll get random English words in their otherwise |
| 234 | localized diagnostic). The exceptions to this are C/C++ language keywords |
| 235 | (e.g. auto, const, mutable, etc) and C/C++ operators (<tt>/=</tt>). Note |
| 236 | that things like "pointer" and "reference" are not keywords. On the other |
| 237 | hand, you <em>can</em> include anything that comes from the user's source code, |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 238 | including variable names, types, labels, etc. The 'select' format can be |
| 239 | used to achieve this sort of thing in a localizable way, see below.</p> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 240 | |
| 241 | <!-- ==================================== --> |
| 242 | <h4>Formatting a Diagnostic Argument</a></h4> |
| 243 | <!-- ==================================== --> |
| 244 | |
| 245 | <p>Arguments to diagnostics are fully typed internally, and come from a couple |
| 246 | different classes: integers, types, names, and random strings. Depending on |
| 247 | the class of the argument, it can be optionally formatted in different ways. |
| 248 | This gives the DiagnosticClient information about what the argument means |
| 249 | without requiring it to use a specific presentation (consider this MVC for |
| 250 | Clang :).</p> |
| 251 | |
| 252 | <p>Here are the different diagnostic argument formats currently supported by |
| 253 | Clang:</p> |
| 254 | |
| 255 | <table> |
| 256 | <tr><td colspan="2"><b>"s" format</b></td></tr> |
| 257 | <tr><td>Example:</td><td><tt>"requires %1 parameter%s1"</tt></td></tr> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 258 | <tr><td>Class:</td><td>Integers</td></tr> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 259 | <tr><td>Description:</td><td>This is a simple formatter for integers that is |
| 260 | useful when producing English diagnostics. When the integer is 1, it prints |
| 261 | as nothing. When the integer is not 1, it prints as "s". This allows some |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 262 | simple grammatical forms to be to be handled correctly, and eliminates the |
| 263 | need to use gross things like <tt>"requires %1 parameter(s)"</tt>.</td></tr> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 264 | |
| 265 | <tr><td colspan="2"><b>"select" format</b></td></tr> |
| 266 | <tr><td>Example:</td><td><tt>"must be a %select{unary|binary|unary or binary}2 |
| 267 | operator"</tt></td></tr> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 268 | <tr><td>Class:</td><td>Integers</td></tr> |
Chris Lattner | cc54334 | 2008-11-22 23:50:47 +0000 | [diff] [blame] | 269 | <tr><td>Description:</td><td>This format specifier is used to merge multiple |
| 270 | related diagnostics together into one common one, without requiring the |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 271 | difference to be specified as an English string argument. Instead of |
Chris Lattner | cc54334 | 2008-11-22 23:50:47 +0000 | [diff] [blame] | 272 | specifying the string, the diagnostic gets an integer argument and the |
| 273 | format string selects the numbered option. In this case, the "%2" value |
| 274 | must be an integer in the range [0..2]. If it is 0, it prints 'unary', if |
| 275 | it is 1 it prints 'binary' if it is 2, it prints 'unary or binary'. This |
| 276 | allows other language translations to substitute reasonable words (or entire |
| 277 | phrases) based on the semantics of the diagnostic instead of having to do |
| 278 | things textually.</td></tr> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 279 | |
| 280 | <tr><td colspan="2"><b>"plural" format</b></td></tr> |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 281 | <tr><td>Example:</td><td><tt>"you have %1 %plural{1:mouse|:mice}1 connected to |
| 282 | your computer"</tt></td></tr> |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 283 | <tr><td>Class:</td><td>Integers</td></tr> |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 284 | <tr><td>Description:</td><td><p>This is a formatter for complex plural forms. |
| 285 | It is designed to handle even the requirements of languages with very |
| 286 | complex plural forms, as many Baltic languages have. The argument consists |
| 287 | of a series of expression/form pairs, separated by ':', where the first form |
| 288 | whose expression evaluates to true is the result of the modifier.</p> |
| 289 | <p>An expression can be empty, in which case it is always true. See the |
| 290 | example at the top. Otherwise, it is a series of one or more numeric |
| 291 | conditions, separated by ','. If any condition matches, the expression |
| 292 | matches. Each numeric condition can take one of three forms.</p> |
| 293 | <ul> |
| 294 | <li>number: A simple decimal number matches if the argument is the same |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 295 | as the number. Example: <tt>"%plural{1:mouse|:mice}4"</tt></li> |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 296 | <li>range: A range in square brackets matches if the argument is within |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 297 | the range. Then range is inclusive on both ends. Example: |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 298 | <tt>"%plural{0:none|1:one|[2,5]:some|:many}2"</tt></li> |
| 299 | <li>modulo: A modulo operator is followed by a number, and |
| 300 | equals sign and either a number or a range. The tests are the |
| 301 | same as for plain |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 302 | numbers and ranges, but the argument is taken modulo the number first. |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 303 | Example: <tt>"%plural{%100=0:even hundred|%100=[1,50]:lower half|:everything |
| 304 | else}1"</tt></li> |
Sebastian Redl | 6816856 | 2008-11-22 22:16:45 +0000 | [diff] [blame] | 305 | </ul> |
| 306 | <p>The parser is very unforgiving. A syntax error, even whitespace, will |
| 307 | abort, as will a failure to match the argument against any |
| 308 | expression.</p></td></tr> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 309 | |
Chris Lattner | 077bf5e | 2008-11-24 03:33:13 +0000 | [diff] [blame] | 310 | <tr><td colspan="2"><b>"objcclass" format</b></td></tr> |
| 311 | <tr><td>Example:</td><td><tt>"method %objcclass0 not found"</tt></td></tr> |
| 312 | <tr><td>Class:</td><td>DeclarationName</td></tr> |
| 313 | <tr><td>Description:</td><td><p>This is a simple formatter that indicates the |
| 314 | DeclarationName corresponds to an Objective-C class method selector. As |
| 315 | such, it prints the selector with a leading '+'.</p></td></tr> |
| 316 | |
| 317 | <tr><td colspan="2"><b>"objcinstance" format</b></td></tr> |
| 318 | <tr><td>Example:</td><td><tt>"method %objcinstance0 not found"</tt></td></tr> |
| 319 | <tr><td>Class:</td><td>DeclarationName</td></tr> |
| 320 | <tr><td>Description:</td><td><p>This is a simple formatter that indicates the |
| 321 | DeclarationName corresponds to an Objective-C instance method selector. As |
| 322 | such, it prints the selector with a leading '-'.</p></td></tr> |
| 323 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 324 | </table> |
| 325 | |
Chris Lattner | cc54334 | 2008-11-22 23:50:47 +0000 | [diff] [blame] | 326 | <p>It is really easy to add format specifiers to the Clang diagnostics system, |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 327 | but they should be discussed before they are added. If you are creating a lot |
| 328 | of repetitive diagnostics and/or have an idea for a useful formatter, please |
| 329 | bring it up on the cfe-dev mailing list.</p> |
Chris Lattner | cc54334 | 2008-11-22 23:50:47 +0000 | [diff] [blame] | 330 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 331 | <!-- ===================================================== --> |
| 332 | <h4><a name="#producingdiag">Producing the Diagnostic</a></h4> |
| 333 | <!-- ===================================================== --> |
| 334 | |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 335 | <p>Now that you've created the diagnostic in the DiagnosticKinds.def file, you |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 336 | need to write the code that detects the condition in question and emits the |
| 337 | new diagnostic. Various components of Clang (e.g. the preprocessor, Sema, |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 338 | etc) provide a helper function named "Diag". It creates a diagnostic and |
| 339 | accepts the arguments, ranges, and other information that goes along with |
| 340 | it.</p> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 341 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 342 | <p>For example, the binary expression error comes from code like this:</p> |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 343 | |
| 344 | <pre> |
| 345 | if (various things that are bad) |
| 346 | Diag(Loc, diag::err_typecheck_invalid_operands) |
| 347 | << lex->getType() << rex->getType() |
| 348 | << lex->getSourceRange() << rex->getSourceRange(); |
| 349 | </pre> |
| 350 | |
| 351 | <p>This shows that use of the Diag method: they take a location (a <a |
| 352 | href="#SourceLocation">SourceLocation</a> object) and a diagnostic enum value |
| 353 | (which matches the name from DiagnosticKinds.def). If the diagnostic takes |
| 354 | arguments, they are specified with the << operator: the first argument |
| 355 | becomes %0, the second becomes %1, etc. The diagnostic interface allows you to |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 356 | specify arguments of many different types, including <tt>int</tt> and |
| 357 | <tt>unsigned</tt> for integer arguments, <tt>const char*</tt> and |
| 358 | <tt>std::string</tt> for string arguments, <tt>DeclarationName</tt> and |
| 359 | <tt>const IdentifierInfo*</tt> for names, <tt>QualType</tt> for types, etc. |
| 360 | SourceRanges are also specified with the << operator, but do not have a |
| 361 | specific ordering requirement.</p> |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 362 | |
| 363 | <p>As you can see, adding and producing a diagnostic is pretty straightforward. |
| 364 | The hard part is deciding exactly what you need to say to help the user, picking |
| 365 | a suitable wording, and providing the information needed to format it correctly. |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 366 | The good news is that the call site that issues a diagnostic should be |
| 367 | completely independent of how the diagnostic is formatted and in what language |
| 368 | it is rendered. |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 369 | </p> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 370 | |
| 371 | <!-- ============================================================= --> |
| 372 | <h4><a name="DiagnosticClient">The DiagnosticClient Interface</a></h4> |
| 373 | <!-- ============================================================= --> |
| 374 | |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 375 | <p>Once code generates a diagnostic with all of the arguments and the rest of |
| 376 | the relevant information, Clang needs to know what to do with it. As previously |
| 377 | mentioned, the diagnostic machinery goes through some filtering to map a |
| 378 | severity onto a diagnostic level, then (assuming the diagnostic is not mapped to |
| 379 | "<tt>Ignore</tt>") it invokes an object that implements the DiagnosticClient |
| 380 | interface with the information.</p> |
| 381 | |
| 382 | <p>It is possible to implement this interface in many different ways. For |
| 383 | example, the normal Clang DiagnosticClient (named 'TextDiagnosticPrinter') turns |
| 384 | the arguments into strings (according to the various formatting rules), prints |
| 385 | out the file/line/column information and the string, then prints out the line of |
| 386 | code, the source ranges, and the caret. However, this behavior isn't required. |
| 387 | </p> |
| 388 | |
| 389 | <p>Another implementation of the DiagnosticClient interface is the |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 390 | 'TextDiagnosticBuffer' class, which is used when Clang is in -verify mode. |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 391 | Instead of formatting and printing out the diagnostics, this implementation just |
| 392 | captures and remembers the diagnostics as they fly by. Then -verify compares |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 393 | the list of produced diagnostics to the list of expected ones. If they disagree, |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 394 | it prints out its own output. |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 395 | </p> |
| 396 | |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 397 | <p>There are many other possible implementations of this interface, and this is |
| 398 | why we prefer diagnostics to pass down rich structured information in arguments. |
| 399 | For example, an HTML output might want declaration names be linkified to where |
| 400 | they come from in the source. Another example is that a GUI might let you click |
| 401 | on typedefs to expand them. This application would want to pass significantly |
| 402 | more information about types through to the GUI than a simple flat string. The |
| 403 | interface allows this to happen.</p> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 404 | |
| 405 | <!-- ====================================================== --> |
| 406 | <h4><a name="translation">Adding Translations to Clang</a></h4> |
| 407 | <!-- ====================================================== --> |
| 408 | |
Chris Lattner | 627b705 | 2008-11-23 00:28:33 +0000 | [diff] [blame] | 409 | <p>Not possible yet! Diagnostic strings should be written in UTF-8, the client |
Chris Lattner | fd408ea | 2008-11-23 00:42:53 +0000 | [diff] [blame] | 410 | can translate to the relevant code page if needed. Each translation completely |
| 411 | replaces the format string for the diagnostic.</p> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 412 | |
| 413 | |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 414 | <!-- ======================================================================= --> |
| 415 | <h3 id="SourceLocation">The SourceLocation and SourceManager classes</h3> |
| 416 | <!-- ======================================================================= --> |
| 417 | |
| 418 | <p>Strangely enough, the SourceLocation class represents a location within the |
| 419 | source code of the program. Important design points include:</p> |
| 420 | |
| 421 | <ol> |
| 422 | <li>sizeof(SourceLocation) must be extremely small, as these are embedded into |
| 423 | many AST nodes and are passed around often. Currently it is 32 bits.</li> |
| 424 | <li>SourceLocation must be a simple value object that can be efficiently |
| 425 | copied.</li> |
| 426 | <li>We should be able to represent a source location for any byte of any input |
| 427 | file. This includes in the middle of tokens, in whitespace, in trigraphs, |
| 428 | etc.</li> |
| 429 | <li>A SourceLocation must encode the current #include stack that was active when |
| 430 | the location was processed. For example, if the location corresponds to a |
| 431 | token, it should contain the set of #includes active when the token was |
| 432 | lexed. This allows us to print the #include stack for a diagnostic.</li> |
| 433 | <li>SourceLocation must be able to describe macro expansions, capturing both |
| 434 | the ultimate instantiation point and the source of the original character |
| 435 | data.</li> |
| 436 | </ol> |
| 437 | |
| 438 | <p>In practice, the SourceLocation works together with the SourceManager class |
| 439 | to encode two pieces of information about a location: it's physical location |
| 440 | and it's virtual location. For most tokens, these will be the same. However, |
| 441 | for a macro expansion (or tokens that came from a _Pragma directive) these will |
| 442 | describe the location of the characters corresponding to the token and the |
| 443 | location where the token was used (i.e. the macro instantiation point or the |
| 444 | location of the _Pragma itself).</p> |
| 445 | |
Chris Lattner | 3fcbb89 | 2008-11-23 08:32:53 +0000 | [diff] [blame] | 446 | <p>For efficiency, we only track one level of macro instantiations: if a token was |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 447 | produced by multiple instantiations, we only track the source and ultimate |
| 448 | destination. Though we could track the intermediate instantiation points, this |
| 449 | would require extra bookkeeping and no known client would benefit substantially |
| 450 | from this.</p> |
| 451 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 452 | <p>The Clang front-end inherently depends on the location of a token being |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 453 | tracked correctly. If it is ever incorrect, the front-end may get confused and |
| 454 | die. The reason for this is that the notion of the 'spelling' of a Token in |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 455 | Clang depends on being able to find the original input characters for the token. |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 456 | This concept maps directly to the "physical" location for the token.</p> |
| 457 | |
| 458 | <!-- ======================================================================= --> |
| 459 | <h2 id="liblex">The Lexer and Preprocessor Library</h2> |
| 460 | <!-- ======================================================================= --> |
| 461 | |
| 462 | <p>The Lexer library contains several tightly-connected classes that are involved |
| 463 | with the nasty process of lexing and preprocessing C source code. The main |
| 464 | interface to this library for outside clients is the large <a |
| 465 | href="#Preprocessor">Preprocessor</a> class. |
| 466 | It contains the various pieces of state that are required to coherently read |
| 467 | tokens out of a translation unit.</p> |
| 468 | |
| 469 | <p>The core interface to the Preprocessor object (once it is set up) is the |
| 470 | Preprocessor::Lex method, which returns the next <a href="#Token">Token</a> from |
| 471 | the preprocessor stream. There are two types of token providers that the |
| 472 | preprocessor is capable of reading from: a buffer lexer (provided by the <a |
| 473 | href="#Lexer">Lexer</a> class) and a buffered token stream (provided by the <a |
Chris Lattner | 7928125 | 2008-03-09 02:27:26 +0000 | [diff] [blame] | 474 | href="#TokenLexer">TokenLexer</a> class). |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 475 | |
| 476 | |
| 477 | <!-- ======================================================================= --> |
| 478 | <h3 id="Token">The Token class</h3> |
| 479 | <!-- ======================================================================= --> |
| 480 | |
| 481 | <p>The Token class is used to represent a single lexed token. Tokens are |
| 482 | intended to be used by the lexer/preprocess and parser libraries, but are not |
| 483 | intended to live beyond them (for example, they should not live in the ASTs).<p> |
| 484 | |
| 485 | <p>Tokens most often live on the stack (or some other location that is efficient |
| 486 | to access) as the parser is running, but occasionally do get buffered up. For |
| 487 | example, macro definitions are stored as a series of tokens, and the C++ |
Chris Lattner | 3fcbb89 | 2008-11-23 08:32:53 +0000 | [diff] [blame] | 488 | front-end periodically needs to buffer tokens up for tentative parsing and |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 489 | various pieces of look-ahead. As such, the size of a Token matter. On a 32-bit |
| 490 | system, sizeof(Token) is currently 16 bytes.</p> |
| 491 | |
Chris Lattner | 3932fe0 | 2009-01-06 06:02:08 +0000 | [diff] [blame] | 492 | <p>Tokens occur in two forms: "<a href="#AnnotationToken">Annotation |
| 493 | Tokens</a>" and normal tokens. Normal tokens are those returned by the lexer, |
| 494 | annotation tokens represent semantic information and are produced by the parser, |
| 495 | replacing normal tokens in the token stream. Normal tokens contain the |
| 496 | following information:</p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 497 | |
| 498 | <ul> |
| 499 | <li><b>A SourceLocation</b> - This indicates the location of the start of the |
| 500 | token.</li> |
| 501 | |
| 502 | <li><b>A length</b> - This stores the length of the token as stored in the |
| 503 | SourceBuffer. For tokens that include them, this length includes trigraphs and |
| 504 | escaped newlines which are ignored by later phases of the compiler. By pointing |
| 505 | into the original source buffer, it is always possible to get the original |
| 506 | spelling of a token completely accurately.</li> |
| 507 | |
| 508 | <li><b>IdentifierInfo</b> - If a token takes the form of an identifier, and if |
| 509 | identifier lookup was enabled when the token was lexed (e.g. the lexer was not |
| 510 | reading in 'raw' mode) this contains a pointer to the unique hash value for the |
| 511 | identifier. Because the lookup happens before keyword identification, this |
| 512 | field is set even for language keywords like 'for'.</li> |
| 513 | |
| 514 | <li><b>TokenKind</b> - This indicates the kind of token as classified by the |
| 515 | lexer. This includes things like <tt>tok::starequal</tt> (for the "*=" |
| 516 | operator), <tt>tok::ampamp</tt> for the "&&" token, and keyword values |
| 517 | (e.g. <tt>tok::kw_for</tt>) for identifiers that correspond to keywords. Note |
| 518 | that some tokens can be spelled multiple ways. For example, C++ supports |
| 519 | "operator keywords", where things like "and" are treated exactly like the |
| 520 | "&&" operator. In these cases, the kind value is set to |
| 521 | <tt>tok::ampamp</tt>, which is good for the parser, which doesn't have to |
| 522 | consider both forms. For something that cares about which form is used (e.g. |
| 523 | the preprocessor 'stringize' operator) the spelling indicates the original |
| 524 | form.</li> |
| 525 | |
| 526 | <li><b>Flags</b> - There are currently four flags tracked by the |
| 527 | lexer/preprocessor system on a per-token basis: |
| 528 | |
| 529 | <ol> |
| 530 | <li><b>StartOfLine</b> - This was the first token that occurred on its input |
| 531 | source line.</li> |
| 532 | <li><b>LeadingSpace</b> - There was a space character either immediately |
| 533 | before the token or transitively before the token as it was expanded |
| 534 | through a macro. The definition of this flag is very closely defined by |
| 535 | the stringizing requirements of the preprocessor.</li> |
| 536 | <li><b>DisableExpand</b> - This flag is used internally to the preprocessor to |
| 537 | represent identifier tokens which have macro expansion disabled. This |
| 538 | prevents them from being considered as candidates for macro expansion ever |
| 539 | in the future.</li> |
| 540 | <li><b>NeedsCleaning</b> - This flag is set if the original spelling for the |
| 541 | token includes a trigraph or escaped newline. Since this is uncommon, |
| 542 | many pieces of code can fast-path on tokens that did not need cleaning. |
| 543 | </p> |
| 544 | </ol> |
| 545 | </li> |
| 546 | </ul> |
| 547 | |
Chris Lattner | 3932fe0 | 2009-01-06 06:02:08 +0000 | [diff] [blame] | 548 | <p>One interesting (and somewhat unusual) aspect of normal tokens is that they |
| 549 | don't contain any semantic information about the lexed value. For example, if |
| 550 | the token was a pp-number token, we do not represent the value of the number |
| 551 | that was lexed (this is left for later pieces of code to decide). Additionally, |
| 552 | the lexer library has no notion of typedef names vs variable names: both are |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 553 | returned as identifiers, and the parser is left to decide whether a specific |
| 554 | identifier is a typedef or a variable (tracking this requires scope information |
Chris Lattner | 3932fe0 | 2009-01-06 06:02:08 +0000 | [diff] [blame] | 555 | among other things). The parser can do this translation by replacing tokens |
| 556 | returned by the preprocessor with "Annotation Tokens".</p> |
| 557 | |
| 558 | <!-- ======================================================================= --> |
| 559 | <h3 id="AnnotationToken">Annotation Tokens</h3> |
| 560 | <!-- ======================================================================= --> |
| 561 | |
| 562 | <p>Annotation Tokens are tokens that are synthesized by the parser and injected |
| 563 | into the preprocessor's token stream (replacing existing tokens) to record |
| 564 | semantic information found by the parser. For example, if "foo" is found to be |
| 565 | a typedef, the "foo" <tt>tok::identifier</tt> token is replaced with an |
| 566 | <tt>tok::annot_typename</tt>. This is useful for a couple of reasons: 1) this |
| 567 | makes it easy to handle qualified type names (e.g. "foo::bar::baz<42>::t") |
| 568 | in C++ as a single "token" in the parser. 2) if the parser backtracks, the |
| 569 | reparse does not need to redo semantic analysis to determine whether a token |
| 570 | sequence is a variable, type, template, etc.</p> |
| 571 | |
| 572 | <p>Annotation Tokens are created by the parser and reinjected into the parser's |
| 573 | token stream (when backtracking is enabled). Because they can only exist in |
| 574 | tokens that the preprocessor-proper is done with, it doesn't need to keep around |
| 575 | flags like "start of line" that the preprocessor uses to do its job. |
| 576 | Additionally, an annotation token may "cover" a sequence of preprocessor tokens |
| 577 | (e.g. <tt>a::b::c</tt> is five preprocessor tokens). As such, the valid fields |
| 578 | of an annotation token are different than the fields for a normal token (but |
| 579 | they are multiplexed into the normal Token fields):</p> |
| 580 | |
| 581 | <ul> |
| 582 | <li><b>SourceLocation "Location"</b> - The SourceLocation for the annotation |
| 583 | token indicates the first token replaced by the annotation token. In the example |
| 584 | above, it would be the location of the "a" identifier.</li> |
| 585 | |
| 586 | <li><b>SourceLocation "AnnotationEndLoc"</b> - This holds the location of the |
| 587 | last token replaced with the annotation token. In the example above, it would |
| 588 | be the location of the "c" identifier.</li> |
| 589 | |
| 590 | <li><b>void* "AnnotationValue"</b> - This contains an opaque object that the |
| 591 | parser gets from Sema through an Actions module, it is passed around and Sema |
| 592 | intepretes it, based on the type of annotation token.</li> |
| 593 | |
| 594 | <li><b>TokenKind "Kind"</b> - This indicates the kind of Annotation token this |
| 595 | is. See below for the different valid kinds.</li> |
| 596 | </ul> |
| 597 | |
| 598 | <p>Annotation tokens currently come in three kinds:</p> |
| 599 | |
| 600 | <ol> |
| 601 | <li><b>tok::annot_typename</b>: This annotation token represents a |
| 602 | resolved typename token that is potentially qualified. The AnnotationValue |
| 603 | field contains a pointer returned by Action::isTypeName(). In the case of the |
| 604 | Sema actions module, this is a <tt>Decl*</tt> for the type.</li> |
| 605 | |
| 606 | <li><b>tok::annot_cxxscope</b>: This annotation token represents a C++ scope |
| 607 | specifier, such as "A::B::". This corresponds to the grammar productions "::" |
| 608 | and ":: [opt] nested-name-specifier". The AnnotationValue pointer is returned |
| 609 | by the Action::ActOnCXXGlobalScopeSpecifier and |
| 610 | Action::ActOnCXXNestedNameSpecifier callbacks. In the case of Sema, this is a |
| 611 | <tt>DeclContext*</tt>.</li> |
| 612 | |
| 613 | <li><b>tok::annot_template_id</b>: This annotation token represents a C++ |
| 614 | template-id such as "foo<int, 4>", which may refer to a function or type |
| 615 | depending on whether foo is a function template or class template. The |
| 616 | AnnotationValue pointer is a pointer to a malloc'd TemplateIdAnnotation object. |
| 617 | FIXME: I don't think the parsing logic is right for this. Shouldn't type |
| 618 | templates be turned into annot_typename??</li> |
| 619 | |
| 620 | </ol> |
| 621 | |
| 622 | <p>As mentioned above, annotation tokens are not returned bye the preprocessor, |
| 623 | they are formed on demand by the parser. This means that the parser has to be |
| 624 | aware of cases where an annotation could occur and form it where appropriate. |
| 625 | This is somewhat similar to how the parser handles Translation Phase 6 of C99: |
| 626 | String Concatenation (see C99 5.1.1.2). In the case of string concatenation, |
| 627 | the preprocessor just returns distinct tok::string_literal and |
| 628 | tok::wide_string_literal tokens and the parser eats a sequence of them wherever |
| 629 | the grammar indicates that a string literal can occur.</p> |
| 630 | |
| 631 | <p>In order to do this, whenever the parser expects a tok::identifier or |
| 632 | tok::coloncolon, it should call the TryAnnotateTypeOrScopeToken or |
| 633 | TryAnnotateCXXScopeToken methods to form the annotation token. These methods |
| 634 | will maximally form the specified annotation tokens and replace the current |
| 635 | token with them, if applicable. If the current tokens is not valid for an |
| 636 | annotation token, it will remain an identifier or :: token.</p> |
| 637 | |
| 638 | |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 639 | |
| 640 | <!-- ======================================================================= --> |
| 641 | <h3 id="Lexer">The Lexer class</h3> |
| 642 | <!-- ======================================================================= --> |
| 643 | |
| 644 | <p>The Lexer class provides the mechanics of lexing tokens out of a source |
| 645 | buffer and deciding what they mean. The Lexer is complicated by the fact that |
| 646 | it operates on raw buffers that have not had spelling eliminated (this is a |
| 647 | necessity to get decent performance), but this is countered with careful coding |
| 648 | as well as standard performance techniques (for example, the comment handling |
| 649 | code is vectorized on X86 and PowerPC hosts).</p> |
| 650 | |
| 651 | <p>The lexer has a couple of interesting modal features:</p> |
| 652 | |
| 653 | <ul> |
| 654 | <li>The lexer can operate in 'raw' mode. This mode has several features that |
| 655 | make it possible to quickly lex the file (e.g. it stops identifier lookup, |
| 656 | doesn't specially handle preprocessor tokens, handles EOF differently, etc). |
| 657 | This mode is used for lexing within an "<tt>#if 0</tt>" block, for |
| 658 | example.</li> |
| 659 | <li>The lexer can capture and return comments as tokens. This is required to |
| 660 | support the -C preprocessor mode, which passes comments through, and is |
| 661 | used by the diagnostic checker to identifier expect-error annotations.</li> |
| 662 | <li>The lexer can be in ParsingFilename mode, which happens when preprocessing |
Chris Lattner | 8438624 | 2007-09-16 19:25:23 +0000 | [diff] [blame] | 663 | after reading a #include directive. This mode changes the parsing of '<' |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 664 | to return an "angled string" instead of a bunch of tokens for each thing |
| 665 | within the filename.</li> |
| 666 | <li>When parsing a preprocessor directive (after "<tt>#</tt>") the |
| 667 | ParsingPreprocessorDirective mode is entered. This changes the parser to |
| 668 | return EOM at a newline.</li> |
| 669 | <li>The Lexer uses a LangOptions object to know whether trigraphs are enabled, |
| 670 | whether C++ or ObjC keywords are recognized, etc.</li> |
| 671 | </ul> |
| 672 | |
| 673 | <p>In addition to these modes, the lexer keeps track of a couple of other |
| 674 | features that are local to a lexed buffer, which change as the buffer is |
| 675 | lexed:</p> |
| 676 | |
| 677 | <ul> |
| 678 | <li>The Lexer uses BufferPtr to keep track of the current character being |
| 679 | lexed.</li> |
| 680 | <li>The Lexer uses IsAtStartOfLine to keep track of whether the next lexed token |
| 681 | will start with its "start of line" bit set.</li> |
| 682 | <li>The Lexer keeps track of the current #if directives that are active (which |
| 683 | can be nested).</li> |
| 684 | <li>The Lexer keeps track of an <a href="#MultipleIncludeOpt"> |
| 685 | MultipleIncludeOpt</a> object, which is used to |
| 686 | detect whether the buffer uses the standard "<tt>#ifndef XX</tt> / |
| 687 | <tt>#define XX</tt>" idiom to prevent multiple inclusion. If a buffer does, |
| 688 | subsequent includes can be ignored if the XX macro is defined.</li> |
| 689 | </ul> |
| 690 | |
| 691 | <!-- ======================================================================= --> |
Chris Lattner | 7928125 | 2008-03-09 02:27:26 +0000 | [diff] [blame] | 692 | <h3 id="TokenLexer">The TokenLexer class</h3> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 693 | <!-- ======================================================================= --> |
| 694 | |
Chris Lattner | 7928125 | 2008-03-09 02:27:26 +0000 | [diff] [blame] | 695 | <p>The TokenLexer class is a token provider that returns tokens from a list |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 696 | of tokens that came from somewhere else. It typically used for two things: 1) |
| 697 | returning tokens from a macro definition as it is being expanded 2) returning |
| 698 | tokens from an arbitrary buffer of tokens. The later use is used by _Pragma and |
| 699 | will most likely be used to handle unbounded look-ahead for the C++ parser.</p> |
| 700 | |
| 701 | <!-- ======================================================================= --> |
| 702 | <h3 id="MultipleIncludeOpt">The MultipleIncludeOpt class</h3> |
| 703 | <!-- ======================================================================= --> |
| 704 | |
| 705 | <p>The MultipleIncludeOpt class implements a really simple little state machine |
| 706 | that is used to detect the standard "<tt>#ifndef XX</tt> / <tt>#define XX</tt>" |
| 707 | idiom that people typically use to prevent multiple inclusion of headers. If a |
| 708 | buffer uses this idiom and is subsequently #include'd, the preprocessor can |
| 709 | simply check to see whether the guarding condition is defined or not. If so, |
| 710 | the preprocessor can completely ignore the include of the header.</p> |
| 711 | |
| 712 | |
| 713 | |
| 714 | <!-- ======================================================================= --> |
| 715 | <h2 id="libparse">The Parser Library</h2> |
| 716 | <!-- ======================================================================= --> |
| 717 | |
| 718 | <!-- ======================================================================= --> |
| 719 | <h2 id="libast">The AST Library</h2> |
| 720 | <!-- ======================================================================= --> |
| 721 | |
| 722 | <!-- ======================================================================= --> |
| 723 | <h3 id="Type">The Type class and its subclasses</h3> |
| 724 | <!-- ======================================================================= --> |
| 725 | |
| 726 | <p>The Type class (and its subclasses) are an important part of the AST. Types |
| 727 | are accessed through the ASTContext class, which implicitly creates and uniques |
| 728 | them as they are needed. Types have a couple of non-obvious features: 1) they |
| 729 | do not capture type qualifiers like const or volatile (See |
| 730 | <a href="#QualType">QualType</a>), and 2) they implicitly capture typedef |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 731 | information. Once created, types are immutable (unlike decls).</p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 732 | |
| 733 | <p>Typedefs in C make semantic analysis a bit more complex than it would |
| 734 | be without them. The issue is that we want to capture typedef information |
| 735 | and represent it in the AST perfectly, but the semantics of operations need to |
| 736 | "see through" typedefs. For example, consider this code:</p> |
| 737 | |
| 738 | <code> |
| 739 | void func() {<br> |
Bill Wendling | 30d1775 | 2007-10-06 01:56:01 +0000 | [diff] [blame] | 740 | typedef int foo;<br> |
| 741 | foo X, *Y;<br> |
| 742 | typedef foo* bar;<br> |
| 743 | bar Z;<br> |
| 744 | *X; <i>// error</i><br> |
| 745 | **Y; <i>// error</i><br> |
| 746 | **Z; <i>// error</i><br> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 747 | }<br> |
| 748 | </code> |
| 749 | |
| 750 | <p>The code above is illegal, and thus we expect there to be diagnostics emitted |
| 751 | on the annotated lines. In this example, we expect to get:</p> |
| 752 | |
| 753 | <pre> |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 754 | <b>test.c:6:1: error: indirection requires pointer operand ('foo' invalid)</b> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 755 | *X; // error |
| 756 | <font color="blue">^~</font> |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 757 | <b>test.c:7:1: error: indirection requires pointer operand ('foo' invalid)</b> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 758 | **Y; // error |
| 759 | <font color="blue">^~~</font> |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 760 | <b>test.c:8:1: error: indirection requires pointer operand ('foo' invalid)</b> |
| 761 | **Z; // error |
| 762 | <font color="blue">^~~</font> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 763 | </pre> |
| 764 | |
| 765 | <p>While this example is somewhat silly, it illustrates the point: we want to |
| 766 | retain typedef information where possible, so that we can emit errors about |
| 767 | "<tt>std::string</tt>" instead of "<tt>std::basic_string<char, std:...</tt>". |
| 768 | Doing this requires properly keeping typedef information (for example, the type |
| 769 | of "X" is "foo", not "int"), and requires properly propagating it through the |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 770 | various operators (for example, the type of *Y is "foo", not "int"). In order |
| 771 | to retain this information, the type of these expressions is an instance of the |
| 772 | TypedefType class, which indicates that the type of these expressions is a |
| 773 | typedef for foo. |
| 774 | </p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 775 | |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 776 | <p>Representing types like this is great for diagnostics, because the |
| 777 | user-specified type is always immediately available. There are two problems |
| 778 | with this: first, various semantic checks need to make judgements about the |
Chris Lattner | 33fc68a | 2007-07-31 18:54:50 +0000 | [diff] [blame] | 779 | <em>actual structure</em> of a type, ignoring typdefs. Second, we need an |
| 780 | efficient way to query whether two types are structurally identical to each |
| 781 | other, ignoring typedefs. The solution to both of these problems is the idea of |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 782 | canonical types.</p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 783 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 784 | <!-- =============== --> |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 785 | <h4>Canonical Types</h4> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 786 | <!-- =============== --> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 787 | |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 788 | <p>Every instance of the Type class contains a canonical type pointer. For |
| 789 | simple types with no typedefs involved (e.g. "<tt>int</tt>", "<tt>int*</tt>", |
| 790 | "<tt>int**</tt>"), the type just points to itself. For types that have a |
| 791 | typedef somewhere in their structure (e.g. "<tt>foo</tt>", "<tt>foo*</tt>", |
| 792 | "<tt>foo**</tt>", "<tt>bar</tt>"), the canonical type pointer points to their |
| 793 | structurally equivalent type without any typedefs (e.g. "<tt>int</tt>", |
| 794 | "<tt>int*</tt>", "<tt>int**</tt>", and "<tt>int*</tt>" respectively).</p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 795 | |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 796 | <p>This design provides a constant time operation (dereferencing the canonical |
| 797 | type pointer) that gives us access to the structure of types. For example, |
| 798 | we can trivially tell that "bar" and "foo*" are the same type by dereferencing |
| 799 | their canonical type pointers and doing a pointer comparison (they both point |
| 800 | to the single "<tt>int*</tt>" type).</p> |
| 801 | |
| 802 | <p>Canonical types and typedef types bring up some complexities that must be |
| 803 | carefully managed. Specifically, the "isa/cast/dyncast" operators generally |
| 804 | shouldn't be used in code that is inspecting the AST. For example, when type |
| 805 | checking the indirection operator (unary '*' on a pointer), the type checker |
| 806 | must verify that the operand has a pointer type. It would not be correct to |
| 807 | check that with "<tt>isa<PointerType>(SubExpr->getType())</tt>", |
| 808 | because this predicate would fail if the subexpression had a typedef type.</p> |
| 809 | |
| 810 | <p>The solution to this problem are a set of helper methods on Type, used to |
| 811 | check their properties. In this case, it would be correct to use |
| 812 | "<tt>SubExpr->getType()->isPointerType()</tt>" to do the check. This |
| 813 | predicate will return true if the <em>canonical type is a pointer</em>, which is |
| 814 | true any time the type is structurally a pointer type. The only hard part here |
| 815 | is remembering not to use the <tt>isa/cast/dyncast</tt> operations.</p> |
| 816 | |
| 817 | <p>The second problem we face is how to get access to the pointer type once we |
| 818 | know it exists. To continue the example, the result type of the indirection |
| 819 | operator is the pointee type of the subexpression. In order to determine the |
| 820 | type, we need to get the instance of PointerType that best captures the typedef |
| 821 | information in the program. If the type of the expression is literally a |
| 822 | PointerType, we can return that, otherwise we have to dig through the |
| 823 | typedefs to find the pointer type. For example, if the subexpression had type |
| 824 | "<tt>foo*</tt>", we could return that type as the result. If the subexpression |
| 825 | had type "<tt>bar</tt>", we want to return "<tt>foo*</tt>" (note that we do |
| 826 | <em>not</em> want "<tt>int*</tt>"). In order to provide all of this, Type has |
Chris Lattner | 11406c1 | 2007-07-31 16:50:51 +0000 | [diff] [blame] | 827 | a getAsPointerType() method that checks whether the type is structurally a |
Chris Lattner | 8a2bc62 | 2007-07-31 06:37:39 +0000 | [diff] [blame] | 828 | PointerType and, if so, returns the best one. If not, it returns a null |
| 829 | pointer.</p> |
| 830 | |
| 831 | <p>This structure is somewhat mystical, but after meditating on it, it will |
| 832 | make sense to you :).</p> |
Chris Lattner | 86920d3 | 2007-07-31 05:42:17 +0000 | [diff] [blame] | 833 | |
| 834 | <!-- ======================================================================= --> |
| 835 | <h3 id="QualType">The QualType class</h3> |
| 836 | <!-- ======================================================================= --> |
| 837 | |
| 838 | <p>The QualType class is designed as a trivial value class that is small, |
| 839 | passed by-value and is efficient to query. The idea of QualType is that it |
| 840 | stores the type qualifiers (const, volatile, restrict) separately from the types |
| 841 | themselves: QualType is conceptually a pair of "Type*" and bits for the type |
| 842 | qualifiers.</p> |
| 843 | |
| 844 | <p>By storing the type qualifiers as bits in the conceptual pair, it is |
| 845 | extremely efficient to get the set of qualifiers on a QualType (just return the |
| 846 | field of the pair), add a type qualifier (which is a trivial constant-time |
| 847 | operation that sets a bit), and remove one or more type qualifiers (just return |
| 848 | a QualType with the bitfield set to empty).</p> |
| 849 | |
| 850 | <p>Further, because the bits are stored outside of the type itself, we do not |
| 851 | need to create duplicates of types with different sets of qualifiers (i.e. there |
| 852 | is only a single heap allocated "int" type: "const int" and "volatile const int" |
| 853 | both point to the same heap allocated "int" type). This reduces the heap size |
| 854 | used to represent bits and also means we do not have to consider qualifiers when |
| 855 | uniquing types (<a href="#Type">Type</a> does not even contain qualifiers).</p> |
| 856 | |
| 857 | <p>In practice, on hosts where it is safe, the 3 type qualifiers are stored in |
| 858 | the low bit of the pointer to the Type object. This means that QualType is |
| 859 | exactly the same size as a pointer, and this works fine on any system where |
| 860 | malloc'd objects are at least 8 byte aligned.</p> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 861 | |
| 862 | <!-- ======================================================================= --> |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 863 | <h3 id="DeclarationName">Declaration names</h3> |
| 864 | <!-- ======================================================================= --> |
| 865 | |
| 866 | <p>The <tt>DeclarationName</tt> class represents the name of a |
| 867 | declaration in Clang. Declarations in the C family of languages can |
Chris Lattner | 3fcbb89 | 2008-11-23 08:32:53 +0000 | [diff] [blame] | 868 | take several different forms. Most declarations are named by |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 869 | simple identifiers, e.g., "<code>f</code>" and "<code>x</code>" in |
| 870 | the function declaration <code>f(int x)</code>. In C++, declaration |
| 871 | names can also name class constructors ("<code>Class</code>" |
| 872 | in <code>struct Class { Class(); }</code>), class destructors |
| 873 | ("<code>~Class</code>"), overloaded operator names ("operator+"), |
| 874 | and conversion functions ("<code>operator void const *</code>"). In |
| 875 | Objective-C, declaration names can refer to the names of Objective-C |
| 876 | methods, which involve the method name and the parameters, |
Chris Lattner | 3fcbb89 | 2008-11-23 08:32:53 +0000 | [diff] [blame] | 877 | collectively called a <i>selector</i>, e.g., |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 878 | "<code>setWidth:height:</code>". Since all of these kinds of |
Chris Lattner | 3fcbb89 | 2008-11-23 08:32:53 +0000 | [diff] [blame] | 879 | entities - variables, functions, Objective-C methods, C++ |
| 880 | constructors, destructors, and operators - are represented as |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 881 | subclasses of Clang's common <code>NamedDecl</code> |
| 882 | class, <code>DeclarationName</code> is designed to efficiently |
| 883 | represent any kind of name.</p> |
| 884 | |
| 885 | <p>Given |
| 886 | a <code>DeclarationName</code> <code>N</code>, <code>N.getNameKind()</code> |
Douglas Gregor | 2def483 | 2008-11-17 20:34:05 +0000 | [diff] [blame] | 887 | will produce a value that describes what kind of name <code>N</code> |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 888 | stores. There are 8 options (all of the names are inside |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 889 | the <code>DeclarationName</code> class)</p> |
| 890 | <dl> |
| 891 | <dt>Identifier</dt> |
| 892 | <dd>The name is a simple |
| 893 | identifier. Use <code>N.getAsIdentifierInfo()</code> to retrieve the |
| 894 | corresponding <code>IdentifierInfo*</code> pointing to the actual |
| 895 | identifier. Note that C++ overloaded operators (e.g., |
| 896 | "<code>operator+</code>") are represented as special kinds of |
| 897 | identifiers. Use <code>IdentifierInfo</code>'s <code>getOverloadedOperatorID</code> |
| 898 | function to determine whether an identifier is an overloaded |
| 899 | operator name.</dd> |
| 900 | |
| 901 | <dt>ObjCZeroArgSelector, ObjCOneArgSelector, |
| 902 | ObjCMultiArgSelector</dt> |
| 903 | <dd>The name is an Objective-C selector, which can be retrieved as a |
| 904 | <code>Selector</code> instance |
| 905 | via <code>N.getObjCSelector()</code>. The three possible name |
| 906 | kinds for Objective-C reflect an optimization within |
| 907 | the <code>DeclarationName</code> class: both zero- and |
| 908 | one-argument selectors are stored as a |
| 909 | masked <code>IdentifierInfo</code> pointer, and therefore require |
| 910 | very little space, since zero- and one-argument selectors are far |
| 911 | more common than multi-argument selectors (which use a different |
| 912 | structure).</dd> |
| 913 | |
| 914 | <dt>CXXConstructorName</dt> |
| 915 | <dd>The name is a C++ constructor |
| 916 | name. Use <code>N.getCXXNameType()</code> to retrieve |
| 917 | the <a href="#QualType">type</a> that this constructor is meant to |
| 918 | construct. The type is always the canonical type, since all |
| 919 | constructors for a given type have the same name.</dd> |
| 920 | |
| 921 | <dt>CXXDestructorName</dt> |
| 922 | <dd>The name is a C++ destructor |
| 923 | name. Use <code>N.getCXXNameType()</code> to retrieve |
| 924 | the <a href="#QualType">type</a> whose destructor is being |
| 925 | named. This type is always a canonical type.</dd> |
| 926 | |
| 927 | <dt>CXXConversionFunctionName</dt> |
| 928 | <dd>The name is a C++ conversion function. Conversion functions are |
| 929 | named according to the type they convert to, e.g., "<code>operator void |
| 930 | const *</code>". Use <code>N.getCXXNameType()</code> to retrieve |
| 931 | the type that this conversion function converts to. This type is |
| 932 | always a canonical type.</dd> |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 933 | |
| 934 | <dt>CXXOperatorName</dt> |
| 935 | <dd>The name is a C++ overloaded operator name. Overloaded operators |
| 936 | are named according to their spelling, e.g., |
| 937 | "<code>operator+</code>" or "<code>operator new |
| 938 | []</code>". Use <code>N.getCXXOverloadedOperator()</code> to |
| 939 | retrieve the overloaded operator (a value of |
| 940 | type <code>OverloadedOperatorKind</code>).</dd> |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 941 | </dl> |
| 942 | |
| 943 | <p><code>DeclarationName</code>s are cheap to create, copy, and |
| 944 | compare. They require only a single pointer's worth of storage in |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 945 | the common cases (identifiers, zero- |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 946 | and one-argument Objective-C selectors) and use dense, uniqued |
| 947 | storage for the other kinds of |
| 948 | names. Two <code>DeclarationName</code>s can be compared for |
| 949 | equality (<code>==</code>, <code>!=</code>) using a simple bitwise |
| 950 | comparison, can be ordered |
| 951 | with <code><</code>, <code>></code>, <code><=</code>, |
| 952 | and <code>>=</code> (which provide a lexicographical ordering for |
| 953 | normal identifiers but an unspecified ordering for other kinds of |
| 954 | names), and can be placed into LLVM <code>DenseMap</code>s |
| 955 | and <code>DenseSet</code>s.</p> |
| 956 | |
| 957 | <p><code>DeclarationName</code> instances can be created in different |
| 958 | ways depending on what kind of name the instance will store. Normal |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 959 | identifiers (<code>IdentifierInfo</code> pointers) and Objective-C selectors |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 960 | (<code>Selector</code>) can be implicitly converted |
| 961 | to <code>DeclarationName</code>s. Names for C++ constructors, |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 962 | destructors, conversion functions, and overloaded operators can be retrieved from |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 963 | the <code>DeclarationNameTable</code>, an instance of which is |
| 964 | available as <code>ASTContext::DeclarationNames</code>. The member |
| 965 | functions <code>getCXXConstructorName</code>, <code>getCXXDestructorName</code>, |
Douglas Gregor | e94ca9e4 | 2008-11-18 14:39:36 +0000 | [diff] [blame] | 966 | <code>getCXXConversionFunctionName</code>, and <code>getCXXOperatorName</code>, respectively, |
| 967 | return <code>DeclarationName</code> instances for the four kinds of |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 968 | C++ special function names.</p> |
| 969 | |
| 970 | <!-- ======================================================================= --> |
Douglas Gregor | 074149e | 2009-01-05 19:45:36 +0000 | [diff] [blame] | 971 | <h3 id="DeclContext">Declaration contexts</h3> |
| 972 | <!-- ======================================================================= --> |
| 973 | <p>Every declaration in a program exists within some <i>declaration |
| 974 | context</i>, such as a translation unit, namespace, class, or |
| 975 | function. Declaration contexts in Clang are represented by |
| 976 | the <code>DeclContext</code> class, from which the various |
| 977 | declaration-context AST nodes |
| 978 | (<code>TranslationUnitDecl</code>, <code>NamespaceDecl</code>, <code>RecordDecl</code>, <code>FunctionDecl</code>, |
| 979 | etc.) will derive. The <code>DeclContext</code> class provides |
| 980 | several facilities common to each declaration context:</p> |
| 981 | <dl> |
| 982 | <dt>Source-centric vs. Semantics-centric View of Declarations</dt> |
| 983 | <dd><code>DeclContext</code> provides two views of the declarations |
| 984 | stored within a declaration context. The source-centric view |
| 985 | accurately represents the program source code as written, including |
| 986 | multiple declarations of entities where present (see the |
| 987 | section <a href="#Redeclarations">Redeclarations and |
| 988 | Overloads</a>), while the semantics-centric view represents the |
| 989 | program semantics. The two views are kept synchronized by semantic |
| 990 | analysis while the ASTs are being constructed.</dd> |
| 991 | |
| 992 | <dt>Storage of declarations within that context</dt> |
| 993 | <dd>Every declaration context can contain some number of |
| 994 | declarations. For example, a C++ class (represented |
| 995 | by <code>RecordDecl</code>) contains various member functions, |
| 996 | fields, nested types, and so on. All of these declarations will be |
| 997 | stored within the <code>DeclContext</code>, and one can iterate |
| 998 | over the declarations via |
| 999 | [<code>DeclContext::decls_begin()</code>, |
| 1000 | <code>DeclContext::decls_end()</code>). This mechanism provides |
| 1001 | the source-centric view of declarations in the context.</dd> |
| 1002 | |
| 1003 | <dt>Lookup of declarations within that context</dt> |
| 1004 | <dd>The <code>DeclContext</code> structure provides efficient name |
| 1005 | lookup for names within that declaration context. For example, |
| 1006 | if <code>N</code> is a namespace we can look for the |
| 1007 | name <code>N::f</code> |
| 1008 | using <code>DeclContext::lookup</code>. The lookup itself is |
| 1009 | based on a lazily-constructed array (for declaration contexts |
| 1010 | with a small number of declarations) or hash table (for |
| 1011 | declaration contexts with more declarations). The lookup |
| 1012 | operation provides the semantics-centric view of the declarations |
| 1013 | in the context.</dd> |
| 1014 | |
| 1015 | <dt>Ownership of declarations</dt> |
| 1016 | <dd>The <code>DeclContext</code> owns all of the declarations that |
| 1017 | were declared within its declaration context, and is responsible |
| 1018 | for the management of their memory as well as their |
| 1019 | (de-)serialization.</dd> |
| 1020 | </dl> |
| 1021 | |
| 1022 | <p>The declarations stored within each declaration context are |
| 1023 | called <i>scoped declarations</i> and the AST nodes for each of |
| 1024 | these declarations are |
| 1025 | derived from the <code>ScopedDecl</code> class, which provides |
| 1026 | information about the context in which that declaration lives. One |
| 1027 | can retrieve the <code>DeclContext</code> that contains a |
| 1028 | particular <code>ScopedDecl</code> |
| 1029 | using <code>ScopedDecl::getDeclContext</code>. However, see the |
| 1030 | section <a href="#LexicalAndSemanticContexts">Lexical and Semantic |
| 1031 | Contexts</a> for more information about how to interpret this |
| 1032 | context information.</p> |
| 1033 | |
| 1034 | <h4 id="Redeclarations">Redeclarations and Overloads</h4> |
| 1035 | <p>Within a translation unit, it is common for an entity to be |
| 1036 | declared several times. For example, we might declare a function "f" |
| 1037 | and then later re-declare it as part of an inlined definition:</p> |
| 1038 | |
| 1039 | <pre> |
| 1040 | void f(int x, int y, int z = 1); |
| 1041 | |
| 1042 | inline void f(int x, int y, int z) { /* ... */ } |
| 1043 | </pre> |
| 1044 | |
| 1045 | <p>The representation of "f" differs in the source-centric and |
| 1046 | semantics-centric views of a declaration context. In the |
| 1047 | source-centric view, all redeclarations will be present, in the |
| 1048 | order they occurred in the source code, making |
| 1049 | this view suitable for clients that wish to see the structure of |
| 1050 | the source code. In the semantics-centric view, only the most recent "f" |
| 1051 | will be found by the lookup, since it effectively replaces the first |
| 1052 | declaration of "f".</p> |
| 1053 | |
| 1054 | <p>In the semantics-centric view, overloading of functions is |
| 1055 | represented explicitly. For example, given two declarations of a |
| 1056 | function "g" that are overloaded, e.g.,</p> |
| 1057 | <pre> |
| 1058 | void g(); |
| 1059 | void g(int); |
| 1060 | </pre> |
| 1061 | <p>the <code>DeclContext::lookup</code> operation will return |
| 1062 | an <code>OverloadedFunctionDecl</code> that contains both |
| 1063 | declarations of "g". Clients that perform semantic analysis on a |
| 1064 | program that is not concerned with the actual source code will |
| 1065 | primarily use this semantics-centric view.</p> |
| 1066 | |
| 1067 | <h4 id="LexicalAndSemanticContexts">Lexical and Semantic Contexts</h4> |
| 1068 | <p>Each scoped declaration (whose AST node derived |
| 1069 | from <code>ScopedDecl</code>) has two potentially different |
| 1070 | declaration contexts: a <i>lexical</i> context, which corresponds to |
| 1071 | the source-centric view of the declaration context, and |
| 1072 | a <i>semantic</i> context, which corresponds to the |
| 1073 | semantics-centric view. The lexical context is accessible |
| 1074 | via <code>ScopedDecl::getLexicalDeclContext</code> while the |
| 1075 | semantic context is accessible |
| 1076 | via <code>ScopedDecl::getDeclContext</code>, both of which return |
| 1077 | <code>DeclContext</code> pointers. For most declarations, the two |
| 1078 | contexts are identical. For example:</p> |
| 1079 | |
| 1080 | <pre> |
| 1081 | class X { |
| 1082 | public: |
| 1083 | void f(int x); |
| 1084 | }; |
| 1085 | </pre> |
| 1086 | |
| 1087 | <p>Here, the semantic and lexical contexts of <code>X::f</code> are |
| 1088 | the <code>DeclContext</code> associated with the |
| 1089 | class <code>X</code> (itself stored as a <code>RecordDecl</code> AST |
| 1090 | node). However, we can now define <code>X::f</code> out-of-line:</p> |
| 1091 | |
| 1092 | <pre> |
| 1093 | void X::f(int x = 17) { /* ... */ } |
| 1094 | </pre> |
| 1095 | |
| 1096 | <p>This definition of has different lexical and semantic |
| 1097 | contexts. The lexical context corresponds to the declaration |
| 1098 | context in which the actual declaration occurred in the source |
| 1099 | code, e.g., the translation unit containing <code>X</code>. Thus, |
| 1100 | this declaration of <code>X::f</code> can be found by traversing |
| 1101 | the declarations provided by |
| 1102 | [<code>decls_begin()</code>, <code>decls_end()</code>) in the |
| 1103 | translation unit.</p> |
| 1104 | |
| 1105 | <p>The semantic context of <code>X::f</code> corresponds to the |
| 1106 | class <code>X</code>, since this member function is (semantically) a |
| 1107 | member of <code>X</code>. Lookup of the name <code>f</code> into |
| 1108 | the <code>DeclContext</code> associated with <code>X</code> will |
| 1109 | then return the definition of <code>X::f</code> (including |
| 1110 | information about the default argument).</p> |
| 1111 | |
| 1112 | <h4 id="TransparentContexts">Transparent Declaration Contexts</h4> |
| 1113 | <p>In C and C++, there are several contexts in which names that are |
| 1114 | logically declared inside another declaration will actually "leak" |
| 1115 | out into the enclosing scope from the perspective of name |
| 1116 | lookup. The most obvious instance of this behavior is in |
| 1117 | enumeration types, e.g.,</p> |
| 1118 | <pre> |
| 1119 | enum Color { |
| 1120 | Red, |
| 1121 | Green, |
| 1122 | Blue |
| 1123 | }; |
| 1124 | </pre> |
| 1125 | |
| 1126 | <p>Here, <code>Color</code> is an enumeration, which is a declaration |
| 1127 | context that contains the |
| 1128 | enumerators <code>Red</code>, <code>Green</code>, |
| 1129 | and <code>Blue</code>. Thus, traversing the list of declarations |
| 1130 | contained in the enumeration <code>Color</code> will |
| 1131 | yield <code>Red</code>, <code>Green</code>, |
| 1132 | and <code>Blue</code>. However, outside of the scope |
| 1133 | of <code>Color</code> one can name the enumerator <code>Red</code> |
| 1134 | without qualifying the name, e.g.,</p> |
| 1135 | |
| 1136 | <pre> |
| 1137 | Color c = Red; |
| 1138 | </pre> |
| 1139 | |
| 1140 | <p>There are other entities in C++ that provide similar behavior. For |
| 1141 | example, linkage specifications that use curly braces:</p> |
| 1142 | |
| 1143 | <pre> |
| 1144 | extern "C" { |
| 1145 | void f(int); |
| 1146 | void g(int); |
| 1147 | } |
| 1148 | // f and g are visible here |
| 1149 | </pre> |
| 1150 | |
| 1151 | <p>For source-level accuracy, we treat the linkage specification and |
| 1152 | enumeration type as a |
| 1153 | declaration context in which its enclosed declarations ("Red", |
| 1154 | "Green", and "Blue"; "f" and "g") |
| 1155 | are declared. However, these declarations are visible outside of the |
| 1156 | scope of the declaration context.</p> |
| 1157 | |
| 1158 | <p>These language features (and several others, described below) have |
| 1159 | roughly the same set of |
| 1160 | requirements: declarations are declared within a particular lexical |
| 1161 | context, but the declarations are also found via name lookup in |
| 1162 | scopes enclosing the declaration itself. This feature is implemented |
| 1163 | via <i>transparent</i> declaration contexts |
| 1164 | (see <code>DeclContext::isTransparentContext()</code>), whose |
| 1165 | declarations are visible in the nearest enclosing non-transparent |
| 1166 | declaration context. This means that the lexical context of the |
| 1167 | declaration (e.g., an enumerator) will be the |
| 1168 | transparent <code>DeclContext</code> itself, as will the semantic |
| 1169 | context, but the declaration will be visible in every outer context |
| 1170 | up to and including the first non-transparent declaration context (since |
| 1171 | transparent declaration contexts can be nested).</p> |
| 1172 | |
| 1173 | <p>The transparent <code>DeclContexts</code> are:</p> |
| 1174 | <ul> |
| 1175 | <li>Enumerations (but not C++0x "scoped enumerations"): |
| 1176 | <pre> |
| 1177 | enum Color { |
| 1178 | Red, |
| 1179 | Green, |
| 1180 | Blue |
| 1181 | }; |
| 1182 | // Red, Green, and Blue are in scope |
| 1183 | </pre></li> |
| 1184 | <li>C++ linkage specifications: |
| 1185 | <pre> |
| 1186 | extern "C" { |
| 1187 | void f(int); |
| 1188 | void g(int); |
| 1189 | } |
| 1190 | // f and g are in scope |
| 1191 | </pre></li> |
| 1192 | <li>Anonymous unions and structs: |
| 1193 | <pre> |
| 1194 | struct LookupTable { |
| 1195 | bool IsVector; |
| 1196 | union { |
| 1197 | std::vector<Item> *Vector; |
| 1198 | std::set<Item> *Set; |
| 1199 | }; |
| 1200 | }; |
| 1201 | |
| 1202 | LookupTable LT; |
| 1203 | LT.Vector = 0; // Okay: finds Vector inside the unnamed union |
| 1204 | </pre> |
| 1205 | </li> |
| 1206 | <li>C++0x inline namespaces: |
| 1207 | <pre> |
| 1208 | namespace mylib { |
| 1209 | inline namespace debug { |
| 1210 | class X; |
| 1211 | } |
| 1212 | } |
| 1213 | mylib::X *xp; // okay: mylib::X refers to mylib::debug::X |
| 1214 | </pre> |
| 1215 | </li> |
| 1216 | </ul> |
| 1217 | |
| 1218 | |
| 1219 | <h4 id="MultiDeclContext">Multiply-Defined Declaration Contexts</h4> |
| 1220 | <p>C++ namespaces have the interesting--and, so far, unique--property that |
| 1221 | the namespace can be defined multiple times, and the declarations |
| 1222 | provided by each namespace definition are effectively merged (from |
| 1223 | the semantic point of view). For example, the following two code |
| 1224 | snippets are semantically indistinguishable:</p> |
| 1225 | <pre> |
| 1226 | // Snippet #1: |
| 1227 | namespace N { |
| 1228 | void f(); |
| 1229 | } |
| 1230 | namespace N { |
| 1231 | void f(int); |
| 1232 | } |
| 1233 | |
| 1234 | // Snippet #2: |
| 1235 | namespace N { |
| 1236 | void f(); |
| 1237 | void f(int); |
| 1238 | } |
| 1239 | </pre> |
| 1240 | |
| 1241 | <p>In Clang's representation, the source-centric view of declaration |
| 1242 | contexts will actually have two separate <code>NamespaceDecl</code> |
| 1243 | nodes in Snippet #1, each of which is a declaration context that |
| 1244 | contains a single declaration of "f". However, the semantics-centric |
| 1245 | view provided by name lookup into the namespace <code>N</code> for |
| 1246 | "f" will return an <code>OverloadedFunctionDecl</code> that contains |
| 1247 | both declarations of "f".</p> |
| 1248 | |
| 1249 | <p><code>DeclContext</code> manages multiply-defined declaration |
| 1250 | contexts internally. The |
| 1251 | function <code>DeclContext::getPrimaryContext</code> retrieves the |
| 1252 | "primary" context for a given <code>DeclContext</code> instance, |
| 1253 | which is the <code>DeclContext</code> responsible for maintaining |
| 1254 | the lookup table used for the semantics-centric view. Given the |
| 1255 | primary context, one can follow the chain |
| 1256 | of <code>DeclContext</code> nodes that define additional |
| 1257 | declarations via <code>DeclContext::getNextContext</code>. Note that |
| 1258 | these functions are used internally within the lookup and insertion |
| 1259 | methods of the <code>DeclContext</code>, so the vast majority of |
| 1260 | clients can ignore them.</p> |
| 1261 | |
| 1262 | <!-- ======================================================================= --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1263 | <h3 id="CFG">The <tt>CFG</tt> class</h3> |
| 1264 | <!-- ======================================================================= --> |
| 1265 | |
| 1266 | <p>The <tt>CFG</tt> class is designed to represent a source-level |
| 1267 | control-flow graph for a single statement (<tt>Stmt*</tt>). Typically |
| 1268 | instances of <tt>CFG</tt> are constructed for function bodies (usually |
| 1269 | an instance of <tt>CompoundStmt</tt>), but can also be instantiated to |
| 1270 | represent the control-flow of any class that subclasses <tt>Stmt</tt>, |
| 1271 | which includes simple expressions. Control-flow graphs are especially |
| 1272 | useful for performing |
| 1273 | <a href="http://en.wikipedia.org/wiki/Data_flow_analysis#Sensitivities">flow- |
| 1274 | or path-sensitive</a> program analyses on a given function.</p> |
| 1275 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1276 | <!-- ============ --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1277 | <h4>Basic Blocks</h4> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1278 | <!-- ============ --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1279 | |
| 1280 | <p>Concretely, an instance of <tt>CFG</tt> is a collection of basic |
| 1281 | blocks. Each basic block is an instance of <tt>CFGBlock</tt>, which |
| 1282 | simply contains an ordered sequence of <tt>Stmt*</tt> (each referring |
| 1283 | to statements in the AST). The ordering of statements within a block |
| 1284 | indicates unconditional flow of control from one statement to the |
| 1285 | next. <a href="#ConditionalControlFlow">Conditional control-flow</a> |
| 1286 | is represented using edges between basic blocks. The statements |
| 1287 | within a given <tt>CFGBlock</tt> can be traversed using |
| 1288 | the <tt>CFGBlock::*iterator</tt> interface.</p> |
| 1289 | |
| 1290 | <p> |
Ted Kremenek | 18e17e7 | 2007-10-18 22:50:52 +0000 | [diff] [blame] | 1291 | A <tt>CFG</tt> object owns the instances of <tt>CFGBlock</tt> within |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1292 | the control-flow graph it represents. Each <tt>CFGBlock</tt> within a |
| 1293 | CFG is also uniquely numbered (accessible |
| 1294 | via <tt>CFGBlock::getBlockID()</tt>). Currently the number is |
| 1295 | based on the ordering the blocks were created, but no assumptions |
| 1296 | should be made on how <tt>CFGBlock</tt>s are numbered other than their |
| 1297 | numbers are unique and that they are numbered from 0..N-1 (where N is |
| 1298 | the number of basic blocks in the CFG).</p> |
| 1299 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1300 | <!-- ===================== --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1301 | <h4>Entry and Exit Blocks</h4> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1302 | <!-- ===================== --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1303 | |
| 1304 | Each instance of <tt>CFG</tt> contains two special blocks: |
| 1305 | an <i>entry</i> block (accessible via <tt>CFG::getEntry()</tt>), which |
| 1306 | has no incoming edges, and an <i>exit</i> block (accessible |
| 1307 | via <tt>CFG::getExit()</tt>), which has no outgoing edges. Neither |
| 1308 | block contains any statements, and they serve the role of providing a |
| 1309 | clear entrance and exit for a body of code such as a function body. |
| 1310 | The presence of these empty blocks greatly simplifies the |
| 1311 | implementation of many analyses built on top of CFGs. |
| 1312 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1313 | <!-- ===================================================== --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1314 | <h4 id ="ConditionalControlFlow">Conditional Control-Flow</h4> |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1315 | <!-- ===================================================== --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1316 | |
| 1317 | <p>Conditional control-flow (such as those induced by if-statements |
| 1318 | and loops) is represented as edges between <tt>CFGBlock</tt>s. |
| 1319 | Because different C language constructs can induce control-flow, |
| 1320 | each <tt>CFGBlock</tt> also records an extra <tt>Stmt*</tt> that |
| 1321 | represents the <i>terminator</i> of the block. A terminator is simply |
| 1322 | the statement that caused the control-flow, and is used to identify |
| 1323 | the nature of the conditional control-flow between blocks. For |
| 1324 | example, in the case of an if-statement, the terminator refers to |
| 1325 | the <tt>IfStmt</tt> object in the AST that represented the given |
| 1326 | branch.</p> |
| 1327 | |
| 1328 | <p>To illustrate, consider the following code example:</p> |
| 1329 | |
| 1330 | <code> |
| 1331 | int foo(int x) {<br> |
| 1332 | x = x + 1;<br> |
| 1333 | <br> |
| 1334 | if (x > 2) x++;<br> |
| 1335 | else {<br> |
| 1336 | x += 2;<br> |
| 1337 | x *= 2;<br> |
| 1338 | }<br> |
| 1339 | <br> |
| 1340 | return x;<br> |
| 1341 | } |
| 1342 | </code> |
| 1343 | |
| 1344 | <p>After invoking the parser+semantic analyzer on this code fragment, |
| 1345 | the AST of the body of <tt>foo</tt> is referenced by a |
| 1346 | single <tt>Stmt*</tt>. We can then construct an instance |
| 1347 | of <tt>CFG</tt> representing the control-flow graph of this function |
| 1348 | body by single call to a static class method:</p> |
| 1349 | |
| 1350 | <code> |
| 1351 | Stmt* FooBody = ...<br> |
| 1352 | CFG* FooCFG = <b>CFG::buildCFG</b>(FooBody); |
| 1353 | </code> |
| 1354 | |
| 1355 | <p>It is the responsibility of the caller of <tt>CFG::buildCFG</tt> |
| 1356 | to <tt>delete</tt> the returned <tt>CFG*</tt> when the CFG is no |
| 1357 | longer needed.</p> |
| 1358 | |
| 1359 | <p>Along with providing an interface to iterate over |
| 1360 | its <tt>CFGBlock</tt>s, the <tt>CFG</tt> class also provides methods |
| 1361 | that are useful for debugging and visualizing CFGs. For example, the |
| 1362 | method |
| 1363 | <tt>CFG::dump()</tt> dumps a pretty-printed version of the CFG to |
| 1364 | standard error. This is especially useful when one is using a |
| 1365 | debugger such as gdb. For example, here is the output |
| 1366 | of <tt>FooCFG->dump()</tt>:</p> |
| 1367 | |
| 1368 | <code> |
| 1369 | [ B5 (ENTRY) ]<br> |
| 1370 | Predecessors (0):<br> |
| 1371 | Successors (1): B4<br> |
| 1372 | <br> |
| 1373 | [ B4 ]<br> |
| 1374 | 1: x = x + 1<br> |
| 1375 | 2: (x > 2)<br> |
| 1376 | <b>T: if [B4.2]</b><br> |
| 1377 | Predecessors (1): B5<br> |
| 1378 | Successors (2): B3 B2<br> |
| 1379 | <br> |
| 1380 | [ B3 ]<br> |
| 1381 | 1: x++<br> |
| 1382 | Predecessors (1): B4<br> |
| 1383 | Successors (1): B1<br> |
| 1384 | <br> |
| 1385 | [ B2 ]<br> |
| 1386 | 1: x += 2<br> |
| 1387 | 2: x *= 2<br> |
| 1388 | Predecessors (1): B4<br> |
| 1389 | Successors (1): B1<br> |
| 1390 | <br> |
| 1391 | [ B1 ]<br> |
| 1392 | 1: return x;<br> |
| 1393 | Predecessors (2): B2 B3<br> |
| 1394 | Successors (1): B0<br> |
| 1395 | <br> |
| 1396 | [ B0 (EXIT) ]<br> |
| 1397 | Predecessors (1): B1<br> |
| 1398 | Successors (0): |
| 1399 | </code> |
| 1400 | |
| 1401 | <p>For each block, the pretty-printed output displays for each block |
| 1402 | the number of <i>predecessor</i> blocks (blocks that have outgoing |
| 1403 | control-flow to the given block) and <i>successor</i> blocks (blocks |
| 1404 | that have control-flow that have incoming control-flow from the given |
| 1405 | block). We can also clearly see the special entry and exit blocks at |
| 1406 | the beginning and end of the pretty-printed output. For the entry |
| 1407 | block (block B5), the number of predecessor blocks is 0, while for the |
| 1408 | exit block (block B0) the number of successor blocks is 0.</p> |
| 1409 | |
| 1410 | <p>The most interesting block here is B4, whose outgoing control-flow |
| 1411 | represents the branching caused by the sole if-statement |
| 1412 | in <tt>foo</tt>. Of particular interest is the second statement in |
| 1413 | the block, <b><tt>(x > 2)</tt></b>, and the terminator, printed |
| 1414 | as <b><tt>if [B4.2]</tt></b>. The second statement represents the |
| 1415 | evaluation of the condition of the if-statement, which occurs before |
| 1416 | the actual branching of control-flow. Within the <tt>CFGBlock</tt> |
| 1417 | for B4, the <tt>Stmt*</tt> for the second statement refers to the |
| 1418 | actual expression in the AST for <b><tt>(x > 2)</tt></b>. Thus |
| 1419 | pointers to subclasses of <tt>Expr</tt> can appear in the list of |
| 1420 | statements in a block, and not just subclasses of <tt>Stmt</tt> that |
| 1421 | refer to proper C statements.</p> |
| 1422 | |
| 1423 | <p>The terminator of block B4 is a pointer to the <tt>IfStmt</tt> |
| 1424 | object in the AST. The pretty-printer outputs <b><tt>if |
| 1425 | [B4.2]</tt></b> because the condition expression of the if-statement |
| 1426 | has an actual place in the basic block, and thus the terminator is |
| 1427 | essentially |
| 1428 | <i>referring</i> to the expression that is the second statement of |
| 1429 | block B4 (i.e., B4.2). In this manner, conditions for control-flow |
| 1430 | (which also includes conditions for loops and switch statements) are |
| 1431 | hoisted into the actual basic block.</p> |
| 1432 | |
Chris Lattner | 62fd278 | 2008-11-22 21:41:31 +0000 | [diff] [blame] | 1433 | <!-- ===================== --> |
| 1434 | <!-- <h4>Implicit Control-Flow</h4> --> |
| 1435 | <!-- ===================== --> |
Ted Kremenek | 8bc0571 | 2007-10-10 23:01:43 +0000 | [diff] [blame] | 1436 | |
| 1437 | <!-- |
| 1438 | <p>A key design principle of the <tt>CFG</tt> class was to not require |
| 1439 | any transformations to the AST in order to represent control-flow. |
| 1440 | Thus the <tt>CFG</tt> does not perform any "lowering" of the |
| 1441 | statements in an AST: loops are not transformed into guarded gotos, |
| 1442 | short-circuit operations are not converted to a set of if-statements, |
| 1443 | and so on.</p> |
| 1444 | --> |
Ted Kremenek | 17a295d | 2008-06-11 06:19:49 +0000 | [diff] [blame] | 1445 | |
Chris Lattner | 7bad199 | 2008-11-16 21:48:07 +0000 | [diff] [blame] | 1446 | |
| 1447 | <!-- ======================================================================= --> |
| 1448 | <h3 id="Constants">Constant Folding in the Clang AST</h3> |
| 1449 | <!-- ======================================================================= --> |
| 1450 | |
| 1451 | <p>There are several places where constants and constant folding matter a lot to |
| 1452 | the Clang front-end. First, in general, we prefer the AST to retain the source |
| 1453 | code as close to how the user wrote it as possible. This means that if they |
| 1454 | wrote "5+4", we want to keep the addition and two constants in the AST, we don't |
| 1455 | want to fold to "9". This means that constant folding in various ways turns |
| 1456 | into a tree walk that needs to handle the various cases.</p> |
| 1457 | |
| 1458 | <p>However, there are places in both C and C++ that require constants to be |
| 1459 | folded. For example, the C standard defines what an "integer constant |
| 1460 | expression" (i-c-e) is with very precise and specific requirements. The |
| 1461 | language then requires i-c-e's in a lot of places (for example, the size of a |
| 1462 | bitfield, the value for a case statement, etc). For these, we have to be able |
| 1463 | to constant fold the constants, to do semantic checks (e.g. verify bitfield size |
| 1464 | is non-negative and that case statements aren't duplicated). We aim for Clang |
| 1465 | to be very pedantic about this, diagnosing cases when the code does not use an |
| 1466 | i-c-e where one is required, but accepting the code unless running with |
| 1467 | <tt>-pedantic-errors</tt>.</p> |
| 1468 | |
| 1469 | <p>Things get a little bit more tricky when it comes to compatibility with |
| 1470 | real-world source code. Specifically, GCC has historically accepted a huge |
| 1471 | superset of expressions as i-c-e's, and a lot of real world code depends on this |
| 1472 | unfortuate accident of history (including, e.g., the glibc system headers). GCC |
| 1473 | accepts anything its "fold" optimizer is capable of reducing to an integer |
| 1474 | constant, which means that the definition of what it accepts changes as its |
| 1475 | optimizer does. One example is that GCC accepts things like "case X-X:" even |
| 1476 | when X is a variable, because it can fold this to 0.</p> |
| 1477 | |
| 1478 | <p>Another issue are how constants interact with the extensions we support, such |
| 1479 | as __builtin_constant_p, __builtin_inf, __extension__ and many others. C99 |
| 1480 | obviously does not specify the semantics of any of these extensions, and the |
| 1481 | definition of i-c-e does not include them. However, these extensions are often |
| 1482 | used in real code, and we have to have a way to reason about them.</p> |
| 1483 | |
| 1484 | <p>Finally, this is not just a problem for semantic analysis. The code |
| 1485 | generator and other clients have to be able to fold constants (e.g. to |
| 1486 | initialize global variables) and has to handle a superset of what C99 allows. |
| 1487 | Further, these clients can benefit from extended information. For example, we |
| 1488 | know that "foo()||1" always evaluates to true, but we can't replace the |
| 1489 | expression with true because it has side effects.</p> |
| 1490 | |
| 1491 | <!-- ======================= --> |
| 1492 | <h4>Implementation Approach</h4> |
| 1493 | <!-- ======================= --> |
| 1494 | |
| 1495 | <p>After trying several different approaches, we've finally converged on a |
| 1496 | design (Note, at the time of this writing, not all of this has been implemented, |
| 1497 | consider this a design goal!). Our basic approach is to define a single |
| 1498 | recursive method evaluation method (<tt>Expr::Evaluate</tt>), which is |
| 1499 | implemented in <tt>AST/ExprConstant.cpp</tt>. Given an expression with 'scalar' |
| 1500 | type (integer, fp, complex, or pointer) this method returns the following |
| 1501 | information:</p> |
| 1502 | |
| 1503 | <ul> |
| 1504 | <li>Whether the expression is an integer constant expression, a general |
| 1505 | constant that was folded but has no side effects, a general constant that |
| 1506 | was folded but that does have side effects, or an uncomputable/unfoldable |
| 1507 | value. |
| 1508 | </li> |
| 1509 | <li>If the expression was computable in any way, this method returns the APValue |
| 1510 | for the result of the expression.</li> |
| 1511 | <li>If the expression is not evaluatable at all, this method returns |
| 1512 | information on one of the problems with the expression. This includes a |
| 1513 | SourceLocation for where the problem is, and a diagnostic ID that explains |
| 1514 | the problem. The diagnostic should be have ERROR type.</li> |
| 1515 | <li>If the expression is not an integer constant expression, this method returns |
| 1516 | information on one of the problems with the expression. This includes a |
| 1517 | SourceLocation for where the problem is, and a diagnostic ID that explains |
| 1518 | the problem. The diagnostic should be have EXTENSION type.</li> |
| 1519 | </ul> |
| 1520 | |
| 1521 | <p>This information gives various clients the flexibility that they want, and we |
| 1522 | will eventually have some helper methods for various extensions. For example, |
| 1523 | Sema should have a <tt>Sema::VerifyIntegerConstantExpression</tt> method, which |
| 1524 | calls Evaluate on the expression. If the expression is not foldable, the error |
| 1525 | is emitted, and it would return true. If the expression is not an i-c-e, the |
| 1526 | EXTENSION diagnostic is emitted. Finally it would return false to indicate that |
| 1527 | the AST is ok.</p> |
| 1528 | |
| 1529 | <p>Other clients can use the information in other ways, for example, codegen can |
| 1530 | just use expressions that are foldable in any way.</p> |
| 1531 | |
| 1532 | <!-- ========== --> |
| 1533 | <h4>Extensions</h4> |
| 1534 | <!-- ========== --> |
| 1535 | |
Chris Lattner | 552de0a | 2008-11-23 08:16:56 +0000 | [diff] [blame] | 1536 | <p>This section describes how some of the various extensions Clang supports |
Chris Lattner | 7bad199 | 2008-11-16 21:48:07 +0000 | [diff] [blame] | 1537 | interacts with constant evaluation:</p> |
| 1538 | |
| 1539 | <ul> |
| 1540 | <li><b><tt>__extension__</tt></b>: The expression form of this extension causes |
| 1541 | any evaluatable subexpression to be accepted as an integer constant |
| 1542 | expression.</li> |
| 1543 | <li><b><tt>__builtin_constant_p</tt></b>: This returns true (as a integer |
Chris Lattner | 28daa53 | 2008-12-12 06:55:44 +0000 | [diff] [blame] | 1544 | constant expression) if the operand is any evaluatable constant. As a |
| 1545 | special case, if <tt>__builtin_constant_p</tt> is the (potentially |
| 1546 | parenthesized) condition of a conditional operator expression ("?:"), only |
Chris Lattner | 42b83dd | 2008-12-12 18:00:51 +0000 | [diff] [blame] | 1547 | the true side of the conditional operator is considered, and it is evaluated |
| 1548 | with full constant folding.</li> |
Chris Lattner | 7bad199 | 2008-11-16 21:48:07 +0000 | [diff] [blame] | 1549 | <li><b><tt>__builtin_choose_expr</tt></b>: The condition is required to be an |
| 1550 | integer constant expression, but we accept any constant as an "extension of |
| 1551 | an extension". This only evaluates one operand depending on which way the |
| 1552 | condition evaluates.</li> |
| 1553 | <li><b><tt>__builtin_classify_type</tt></b>: This always returns an integer |
| 1554 | constant expression.</li> |
| 1555 | <li><b><tt>__builtin_inf,nan,..</tt></b>: These are treated just like a |
| 1556 | floating-point literal.</li> |
| 1557 | <li><b><tt>__builtin_abs,copysign,..</tt></b>: These are constant folded as |
| 1558 | general constant expressions.</li> |
| 1559 | </ul> |
| 1560 | |
| 1561 | |
| 1562 | |
| 1563 | |
Ted Kremenek | 17a295d | 2008-06-11 06:19:49 +0000 | [diff] [blame] | 1564 | </div> |
| 1565 | </body> |
Douglas Gregor | 2e1cd42 | 2008-11-17 14:58:09 +0000 | [diff] [blame] | 1566 | </html> |