(* * Copyright (c) 2009 - 2013 Monoidics ltd. * Copyright (c) 2013 - present Facebook, Inc. * All rights reserved. * * This source code is licensed under the BSD style license found in the * LICENSE file in the root directory of this source tree. An additional grant * of patent rights can be found in the PATENTS file in the same directory. *) (** The Smallfoot Intermediate Language *) open! IStd module F = Format (** {2 Programs and Types} *) val elist_to_eset : Exp.t list -> Exp.Set.t (** Convert expression lists to expression sets. *) (** Kind of prune instruction *) type if_kind = | Ik_bexp (** boolean expressions, and exp ? exp : exp *) | Ik_dowhile | Ik_for | Ik_if | Ik_land_lor (** obtained from translation of && or || *) | Ik_while | Ik_switch [@@deriving compare] (** An instruction. *) type instr = (* Note for frontend writers: [x] must be used in a subsequent instruction, otherwise the entire `Load` instruction may be eliminated by copy-propagation. *) | Load of Ident.t * Exp.t * Typ.t * Location.t (** Load a value from the heap into an identifier. [x = *lexp:typ] where [lexp] is an expression denoting a heap address [typ] is the root type of [lexp]. *) | Store of Exp.t * Typ.t * Exp.t * Location.t (** Store the value of an expression into the heap. [*lexp1:typ = exp2] where [lexp1] is an expression denoting a heap address [typ] is the root type of [lexp1] [exp2] is the expression whose value is store. *) | Prune of Exp.t * Location.t * bool * if_kind (** prune the state based on [exp=1], the boolean indicates whether true branch *) | Call of (Ident.t * Typ.t) option * Exp.t * (Exp.t * Typ.t) list * Location.t * CallFlags.t (** [Call (ret_id, e_fun, arg_ts, loc, call_flags)] represents an instruction [ret_id = e_fun(arg_ts);]. The return value is ignored when [ret_id = None]. *) | Nullify of Pvar.t * Location.t (** nullify stack variable *) | Abstract of Location.t (** apply abstraction *) | Remove_temps of Ident.t list * Location.t (** remove temporaries *) | Declare_locals of (Pvar.t * Typ.t) list * Location.t (** declare local variables *) [@@deriving compare] val equal_instr : instr -> instr -> bool val compare_structural_instr : instr -> instr -> Exp.t Exp.Map.t -> int * Exp.t Exp.Map.t (** compare instructions from different procedures without considering loc's, ident's, and pvar's. the [exp_map] param gives a mapping of names used in the procedure of [instr1] to identifiers used in the procedure of [instr2] *) val skip_instr : instr val instr_is_auxiliary : instr -> bool (** Check if an instruction is auxiliary, or if it comes from source instructions. *) (** Offset for an lvalue. *) type offset = Off_fld of Typ.Fieldname.t * Typ.t | Off_index of Exp.t (** {2 Components of Propositions} *) (** an atom is a pure atomic formula *) type atom = | Aeq of Exp.t * Exp.t (** equality *) | Aneq of Exp.t * Exp.t (** disequality *) | Apred of PredSymb.t * Exp.t list (** predicate symbol applied to exps *) | Anpred of PredSymb.t * Exp.t list (** negated predicate symbol applied to exps *) [@@deriving compare] val equal_atom : atom -> atom -> bool val atom_has_local_addr : atom -> bool (** kind of lseg or dllseg predicates *) type lseg_kind = | Lseg_NE (** nonempty (possibly circular) listseg *) | Lseg_PE (** possibly empty (possibly circular) listseg *) [@@deriving compare] val equal_lseg_kind : lseg_kind -> lseg_kind -> bool (** The boolean is true when the pointer was dereferenced without testing for zero. *) type zero_flag = bool option (** True when the value was obtained by doing case analysis on null in a procedure call. *) type null_case_flag = bool (** instrumentation of heap values *) type inst = | Iabstraction | Iactual_precondition | Ialloc | Iformal of zero_flag * null_case_flag | Iinitial | Ilookup | Inone | Inullify | Irearrange of zero_flag * null_case_flag * int * PredSymb.path_pos | Itaint | Iupdate of zero_flag * null_case_flag * int * PredSymb.path_pos | Ireturn_from_call of int [@@deriving compare] val equal_inst : inst -> inst -> bool val inst_actual_precondition : inst val inst_formal : inst val inst_initial : inst (** for formal parameters and heap values at the beginning of the function *) val inst_lookup : inst (** for initial values *) val inst_none : inst val inst_nullify : inst val inst_rearrange : bool -> Location.t -> PredSymb.path_pos -> inst (** the boolean indicates whether the pointer is known nonzero *) val inst_update : Location.t -> PredSymb.path_pos -> inst val inst_set_null_case_flag : inst -> inst (** Set the null case flag of the inst. *) val inst_new_loc : Location.t -> inst -> inst (** update the location of the instrumentation *) val update_inst : inst -> inst -> inst (** Update [inst_old] to [inst_new] preserving the zero flag *) exception JoinFail val inst_partial_join : inst -> inst -> inst (** join of instrumentations, can raise JoinFail *) val inst_partial_meet : inst -> inst -> inst (** meet of instrumentations *) (** structured expressions represent a value of structured type, such as an array or a struct. *) type 'inst strexp0 = | Eexp of Exp.t * 'inst (** Base case: expression with instrumentation *) | Estruct of (Typ.Fieldname.t * 'inst strexp0) list * 'inst (** C structure *) | Earray of Exp.t * (Exp.t * 'inst strexp0) list * 'inst (** Array of given length There are two conditions imposed / used in the array case. First, if some index and value pair appears inside an array in a strexp, then the index is less than the length of the array. For instance, x |->[10 | e1: v1] implies that e1 <= 9. Second, if two indices appear in an array, they should be different. For instance, x |->[10 | e1: v1, e2: v2] implies that e1 != e2. *) [@@deriving compare] type strexp = inst strexp0 val compare_strexp : ?inst:bool -> strexp -> strexp -> int (** Comparison function for strexp. The inst:: parameter specifies whether instumentations should also be considered (false by default). *) val equal_strexp : ?inst:bool -> strexp -> strexp -> bool (** Equality function for strexp. The inst:: parameter specifies whether instumentations should also be considered (false by default). *) (** an atomic heap predicate *) type 'inst hpred0 = | Hpointsto of Exp.t * 'inst strexp0 * Exp.t (** represents [exp|->strexp:typexp] where [typexp] is an expression representing a type, e.h. [sizeof(t)]. *) | Hlseg of lseg_kind * 'inst hpara0 * Exp.t * Exp.t * Exp.t list (** higher - order predicate for singly - linked lists. Should ensure that exp1!= exp2 implies that exp1 is allocated. This assumption is used in the rearrangement. The last [exp list] parameter is used to denote the shared links by all the nodes in the list. *) | Hdllseg of lseg_kind * 'inst hpara_dll0 * Exp.t * Exp.t * Exp.t * Exp.t * Exp.t list (** higher-order predicate for doubly-linked lists. Parameter for the higher-order singly-linked list predicate. Means "lambda (root,next,svars). Exists evars. body". Assume that root, next, svars, evars are disjoint sets of primed identifiers, and include all the free primed identifiers in body. body should not contain any non - primed identifiers or program variables (i.e. pvars). *) [@@deriving compare] and 'inst hpara0 = {root: Ident.t; next: Ident.t; svars: Ident.t list; evars: Ident.t list; body: 'inst hpred0 list} [@@deriving compare] (** parameter for the higher-order doubly-linked list predicates. Assume that all the free identifiers in body_dll should belong to cell, blink, flink, svars_dll, evars_dll. *) and 'inst hpara_dll0 = { cell: Ident.t (** address cell *) ; blink: Ident.t (** backward link *) ; flink: Ident.t (** forward link *) ; svars_dll: Ident.t list ; evars_dll: Ident.t list ; body_dll: 'inst hpred0 list } [@@deriving compare] type hpred = inst hpred0 type hpara = inst hpara0 type hpara_dll = inst hpara_dll0 val compare_hpred : ?inst:bool -> hpred -> hpred -> int (** Comparison function for hpred. The inst:: parameter specifies whether instumentations should also be considered (false by default). *) val equal_hpred : ?inst:bool -> hpred -> hpred -> bool (** Equality function for hpred. The inst:: parameter specifies whether instumentations should also be considered (false by default). *) (** Sets of heap predicates *) module HpredSet : Caml.Set.S with type elt = hpred (** {2 Compaction} *) type sharing_env val create_sharing_env : unit -> sharing_env (** Create a sharing env to store canonical representations *) val hpred_compact : sharing_env -> hpred -> hpred (** Return a compact representation of the exp *) val is_objc_object : hpred -> bool (** {2 Comparision And Inspection Functions} *) val zero_value_of_numerical_type_option : Typ.t -> Exp.t option (** Returns the zero value of a type, for int, float and ptr types, None othwewise *) val zero_value_of_numerical_type : Typ.t -> Exp.t (** Returns the zero value of a type, for int, float and ptr types, fail otherwise *) val is_static_local_name : string -> Pvar.t -> bool (** Check if a pvar is a local static in objc *) val is_block_pvar : Pvar.t -> bool (** Check if a pvar is a local pointing to a block in objc *) val add_with_block_parameters_flag : instr -> instr (** Adds a with_blocks_parameters flag to a method call, when the arguments contain an Objective-C block, and the method is an Objective-C method (to be extended to other methods) *) (** {2 Pretty Printing} *) val color_pre_wrapper : Pp.env -> F.formatter -> 'a -> Pp.env * bool (** Begin change color if using diff printing, return updated printenv and change status *) val color_post_wrapper : bool -> F.formatter -> unit (** Close color annotation if changed *) val pp_exp_printenv : Pp.env -> F.formatter -> Exp.t -> unit (** Pretty print an expression. *) val d_exp : Exp.t -> unit (** dump an expression. *) val pp_texp : Pp.env -> F.formatter -> Exp.t -> unit (** Pretty print a type. *) val pp_texp_full : Pp.env -> F.formatter -> Exp.t -> unit (** Pretty print a type with all the details. *) val d_texp_full : Exp.t -> unit (** Dump a type expression with all the details. *) val pp_exp_list : Pp.env -> F.formatter -> Exp.t list -> unit (** Pretty print a list of expressions. *) val d_exp_list : Exp.t list -> unit (** Dump a list of expressions. *) val pp_offset : Pp.env -> F.formatter -> offset -> unit (** Pretty print an offset *) val offset_to_string : offset -> string (** Convert an offset to a string *) val pp_offset_list : Pp.env -> F.formatter -> offset list -> unit (** Pretty print a list of offsets *) val d_offset_list : offset list -> unit (** Dump a list of offsets *) val instr_get_loc : instr -> Location.t (** Get the location of the instruction *) val instr_get_exps : instr -> Exp.t list (** get the expressions occurring in the instruction *) val pp_instr : Pp.env -> F.formatter -> instr -> unit (** Pretty print an instruction. *) val d_instr : instr -> unit (** Dump an instruction. *) val pp_instr_list : Pp.env -> F.formatter -> instr list -> unit (** Pretty print a list of instructions. *) val pp_atom : Pp.env -> F.formatter -> atom -> unit (** Pretty print an atom. *) val d_atom : atom -> unit (** Dump an atom. *) val inst_to_string : inst -> string (** return a string representing the inst *) val pp_sexp : Pp.env -> F.formatter -> strexp -> unit (** Pretty print a strexp. *) val d_sexp : strexp -> unit (** Dump a strexp. *) val pp_sexp_list : Pp.env -> F.formatter -> strexp list -> unit (** Pretty print a strexp list. *) val pp_hpred : Pp.env -> F.formatter -> hpred -> unit (** Pretty print a hpred. *) val d_hpred : hpred -> unit (** Dump a hpred. *) val pp_hpara : Pp.env -> F.formatter -> hpara -> unit (** Pretty print a hpara. *) val pp_hpara_dll : Pp.env -> F.formatter -> hpara_dll -> unit (** Pretty print a hpara_dll. *) (** Module Predicates records the occurrences of predicates as parameters of (doubly -)linked lists and Epara. Provides unique numbering for predicates and an iterator. *) module Predicates : sig (** predicate environment *) type env val empty_env : unit -> env (** create an empty predicate environment *) val is_empty : env -> bool (** return true if the environment is empty *) val iter : env -> (int -> hpara -> unit) -> (int -> hpara_dll -> unit) -> unit (** [iter env f f_dll] iterates [f] and [f_dll] on all the hpara and hpara_dll, passing the unique id to the functions. The iterator can only be used once. *) val process_hpred : env -> hpred -> unit (** Process one hpred, updating the predicate environment *) end val pp_hpred_env : Pp.env -> Predicates.env option -> F.formatter -> hpred -> unit (** Pretty print a hpred with optional predicate env *) (** {2 Functions for traversing SIL data types} *) val array_clean_new_index : bool -> Exp.t -> Exp.t (** This function should be used before adding a new index to Earray. The [exp] is the newly created index. This function "cleans" [exp] according to whether it is the footprint or current part of the prop. The function faults in the re - execution mode, as an internal check of the tool. *) val strexp_expmap : (Exp.t * inst option -> Exp.t * inst option) -> strexp -> strexp (** Change exps in strexp using [f]. WARNING: the result might not be normalized. *) val hpred_expmap : (Exp.t * inst option -> Exp.t * inst option) -> hpred -> hpred (** Change exps in hpred by [f]. WARNING: the result might not be normalized. *) val hpred_instmap : (inst -> inst) -> hpred -> hpred (** Change instrumentations in hpred using [f]. *) val hpred_list_expmap : (Exp.t * inst option -> Exp.t * inst option) -> hpred list -> hpred list (** Change exps in hpred list by [f]. WARNING: the result might not be normalized. *) val atom_expmap : (Exp.t -> Exp.t) -> atom -> atom (** Change exps in atom by [f]. WARNING: the result might not be normalized. *) val hpred_list_get_lexps : (Exp.t -> bool) -> hpred list -> Exp.t list val hpred_entries : hpred -> Exp.t list (** {2 Function for computing lexps in sigma} *) (** Type of free variables. These include primed, normal and footprint variables. We remember the order in which variables are added. *) type fav val fav_duplicates : bool ref (** flag to indicate whether fav's are stored in duplicate form. Only to be used with fav_to_list *) val pp_fav : F.formatter -> fav -> unit [@@warning "-32"] (** Pretty print a fav. *) val fav_new : unit -> fav (** Create a new [fav]. *) val fav_is_empty : fav -> bool (** Emptyness check. *) val fav_for_all : fav -> (Ident.t -> bool) -> bool (** Check whether a predicate holds for all elements. *) val fav_exists : fav -> (Ident.t -> bool) -> bool (** Check whether a predicate holds for some elements. *) val fav_mem : fav -> Ident.t -> bool (** Membership test fot [fav] *) val fav_from_list : Ident.t list -> fav (** Convert a list to a fav. *) val fav_to_list : fav -> Ident.t list (** Convert a [fav] to a list of identifiers while preserving the order that identifiers were added to [fav]. *) val fav_imperative_to_functional : (fav -> 'a -> unit) -> 'a -> fav (** Turn a xxx_fav_add function into a xxx_fav function *) val fav_filter_ident : fav -> (Ident.t -> bool) -> unit (** [fav_filter_ident fav f] only keeps [id] if [f id] is true. *) val fav_copy_filter_ident : fav -> (Ident.t -> bool) -> fav (** Like [fav_filter_ident] but return a copy. *) val ident_list_fav_add : Ident.t list -> fav -> unit (** add identifier list to fav *) val exp_fav_add : fav -> Exp.t -> unit (** [exp_fav_add fav exp] extends [fav] with the free variables of [exp] *) val exp_fav : Exp.t -> fav val exp_fav_list : Exp.t -> Ident.t list val ident_in_exp : Ident.t -> Exp.t -> bool val strexp_fav_add : fav -> strexp -> unit val atom_fav_add : fav -> atom -> unit val atom_fav : atom -> fav val hpred_fav_add : fav -> hpred -> unit val hpred_fav : hpred -> fav val hpara_shallow_av : hpara -> fav (** Variables in hpara, excluding bound vars in the body *) val hpara_dll_shallow_av : hpara_dll -> fav (** Variables in hpara_dll, excluding bound vars in the body *) (** {2 Substitution} *) type exp_subst [@@deriving compare] type subst = [`Exp of exp_subst | `Typ of Typ.type_subst_t] [@@deriving compare] val equal_exp_subst : exp_subst -> exp_subst -> bool (** Equality for substitutions. *) val exp_subst_of_list : (Ident.t * Exp.t) list -> exp_subst (** Create a substitution from a list of pairs. For all (id1, e1), (id2, e2) in the input list, if id1 = id2, then e1 = e2. *) val subst_of_list : (Ident.t * Exp.t) list -> subst val exp_subst_of_list_duplicates : (Ident.t * Exp.t) list -> exp_subst (** like exp_subst_of_list, but allow duplicate ids and only keep the first occurrence *) val sub_to_list : exp_subst -> (Ident.t * Exp.t) list (** Convert a subst to a list of pairs. *) val sub_empty : subst (** The empty substitution. *) val exp_sub_empty : exp_subst val is_sub_empty : subst -> bool (* let to_exp_subst : [< `Exp exp_subst] => exp_subst; *) val sub_join : exp_subst -> exp_subst -> exp_subst (** Compute the common id-exp part of two inputs [subst1] and [subst2]. The first component of the output is this common part. The second and third components are the remainder of [subst1] and [subst2], respectively. *) val sub_symmetric_difference : exp_subst -> exp_subst -> exp_subst * exp_subst * exp_subst (** Compute the common id-exp part of two inputs [subst1] and [subst2]. The first component of the output is this common part. The second and third components are the remainder of [subst1] and [subst2], respectively. *) val sub_find : (Ident.t -> bool) -> exp_subst -> Exp.t (** [sub_find filter sub] returns the expression associated to the first identifier that satisfies [filter]. Raise [Not_found] if there isn't one. *) val sub_filter : (Ident.t -> bool) -> exp_subst -> exp_subst (** [sub_filter filter sub] restricts the domain of [sub] to the identifiers satisfying [filter]. *) val sub_filter_pair : exp_subst -> f:(Ident.t * Exp.t -> bool) -> exp_subst (** [sub_filter_exp filter sub] restricts the domain of [sub] to the identifiers satisfying [filter(id, sub(id))]. *) val sub_range_partition : (Exp.t -> bool) -> exp_subst -> exp_subst * exp_subst (** [sub_range_partition filter sub] partitions [sub] according to whether range expressions satisfy [filter]. *) val sub_domain_partition : (Ident.t -> bool) -> exp_subst -> exp_subst * exp_subst (** [sub_domain_partition filter sub] partitions [sub] according to whether domain identifiers satisfy [filter]. *) val sub_domain : exp_subst -> Ident.t list (** Return the list of identifiers in the domain of the substitution. *) val sub_range : exp_subst -> Exp.t list (** Return the list of expressions in the range of the substitution. *) val sub_range_map : (Exp.t -> Exp.t) -> exp_subst -> exp_subst (** [sub_range_map f sub] applies [f] to the expressions in the range of [sub]. *) val sub_map : (Ident.t -> Ident.t) -> (Exp.t -> Exp.t) -> exp_subst -> exp_subst (** [sub_map f g sub] applies the renaming [f] to identifiers in the domain of [sub] and the substitution [g] to the expressions in the range of [sub]. *) val extend_sub : exp_subst -> Ident.t -> Exp.t -> exp_subst option (** Extend substitution and return [None] if not possible. *) val sub_fav_add : fav -> exp_subst -> unit (** Free auxilary variables in the domain and range of the substitution. *) (** substitution functions WARNING: these functions do not ensure that the results are normalized. *) val exp_sub : subst -> Exp.t -> Exp.t val atom_sub : subst -> atom -> atom val instr_sub : subst -> instr -> instr (** apply [subst] to all id's in [instr], including LHS id's *) val hpred_sub : subst -> hpred -> hpred (** {2 Functions for replacing occurrences of expressions.} *) val atom_replace_exp : (Exp.t * Exp.t) list -> atom -> atom val hpred_replace_exp : (Exp.t * Exp.t) list -> hpred -> hpred (** {2 Functions for constructing or destructing entities in this module} *) val exp_get_offsets : Exp.t -> offset list (** Compute the offset list of an expression *) val exp_add_offsets : Exp.t -> offset list -> Exp.t (** Add the offset list to an expression *) val sigma_to_sigma_ne : hpred list -> (atom list * hpred list) list val hpara_instantiate : hpara -> Exp.t -> Exp.t -> Exp.t list -> Ident.t list * hpred list (** [hpara_instantiate para e1 e2 elist] instantiates [para] with [e1], [e2] and [elist]. If [para = lambda (x, y, xs). exists zs. b], then the result of the instantiation is [b\[e1 / x, e2 / y, elist / xs, _zs'/ zs\]] for some fresh [_zs'].*) val hpara_dll_instantiate : hpara_dll -> Exp.t -> Exp.t -> Exp.t -> Exp.t list -> Ident.t list * hpred list (** [hpara_dll_instantiate para cell blink flink elist] instantiates [para] with [cell], [blink], [flink], and [elist]. If [para = lambda (x, y, z, xs). exists zs. b], then the result of the instantiation is [b\[cell / x, blink / y, flink / z, elist / xs, _zs'/ zs\]] for some fresh [_zs'].*) val custom_error : Pvar.t