Skip to content

Commit bbf4aac

Browse files
committed
value-set-dereference: factor out should_ignore_value
Rather than build_reference_to returning a tuple which may indicate a value is ignored, seperately test whether it ought to be ignored beforehand and then build references to those values which are not ignored.
1 parent b77b5b0 commit bbf4aac

File tree

3 files changed

+46
-37
lines changed

3 files changed

+46
-37
lines changed

src/goto-symex/symex_main.cpp

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -623,19 +623,16 @@ void goto_symext::try_filter_value_sets(
623623
}
624624

625625
const bool exclude_null_derefs = false;
626-
value_set_dereferencet::valuet possible_value =
627-
value_set_dereferencet::build_reference_to(
628-
value_set_element,
629-
*symbol_expr,
630-
exclude_null_derefs,
631-
language_mode,
632-
ns);
633-
634-
if(possible_value.ignore)
626+
if(value_set_dereferencet::should_ignore_value(
627+
value_set_element, exclude_null_derefs, language_mode))
635628
{
636629
continue;
637630
}
638631

632+
value_set_dereferencet::valuet possible_value =
633+
value_set_dereferencet::build_reference_to(
634+
value_set_element, *symbol_expr, ns);
635+
639636
exprt replacement_expr =
640637
possible_value.value.is_nil()
641638
? static_cast<exprt>(null_pointer_exprt{symbol_type})

src/pointer-analysis/value_set_dereference.cpp

Lines changed: 34 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -67,26 +67,23 @@ exprt value_set_dereferencet::dereference(const exprt &pointer)
6767

6868
// get the values of these
6969

70+
std::vector<exprt> retained_values;
71+
for(const auto &value : points_to_set)
72+
{
73+
if(!should_ignore_value(value, exclude_null_derefs, language_mode))
74+
retained_values.push_back(value);
75+
}
76+
7077
std::list<valuet> values;
7178

72-
for(value_setst::valuest::const_iterator
73-
it=points_to_set.begin();
74-
it!=points_to_set.end();
75-
it++)
79+
for(const auto &value : retained_values)
7680
{
77-
valuet value =
78-
build_reference_to(*it, pointer, exclude_null_derefs, language_mode, ns);
79-
81+
values.push_back(build_reference_to(value, pointer, ns));
8082
#if 0
8183
std::cout << "V: " << format(value.pointer_guard) << " --> ";
8284
std::cout << format(value.value);
83-
if(value.ignore)
84-
std::cout << " (ignored)";
8585
std::cout << '\n';
8686
#endif
87-
88-
if(!value.ignore)
89-
values.push_back(value);
9087
}
9188

9289
// can this fail?
@@ -243,6 +240,31 @@ bool value_set_dereferencet::dereference_type_compare(
243240
return false;
244241
}
245242

243+
bool value_set_dereferencet::should_ignore_value(
244+
const exprt &what,
245+
bool exclude_null_derefs,
246+
const irep_idt &language_mode)
247+
{
248+
if(what.id() == ID_unknown || what.id() == ID_invalid)
249+
{
250+
return false;
251+
}
252+
253+
const object_descriptor_exprt &o = to_object_descriptor_expr(what);
254+
255+
const exprt &root_object = o.root_object();
256+
if(root_object.id() == ID_null_object)
257+
{
258+
return exclude_null_derefs;
259+
}
260+
else if(root_object.id() == ID_integer_address)
261+
{
262+
return language_mode == ID_java;
263+
}
264+
265+
return false;
266+
}
267+
246268
/// \param what: value set entry to convert to an expression: either
247269
/// ID_unknown, ID_invalid, or an object_descriptor_exprt giving a referred
248270
/// object and offset.
@@ -266,8 +288,6 @@ bool value_set_dereferencet::dereference_type_compare(
266288
value_set_dereferencet::valuet value_set_dereferencet::build_reference_to(
267289
const exprt &what,
268290
const exprt &pointer_expr,
269-
const bool exclude_null_derefs,
270-
const irep_idt language_mode,
271291
const namespacet &ns)
272292
{
273293
const typet &dereference_type = pointer_expr.type().subtype();
@@ -294,10 +314,6 @@ value_set_dereferencet::valuet value_set_dereferencet::build_reference_to(
294314

295315
if(root_object.id() == ID_null_object)
296316
{
297-
if(exclude_null_derefs)
298-
{
299-
result.ignore = true;
300-
}
301317
}
302318
else if(root_object.id()==ID_dynamic_object)
303319
{
@@ -313,12 +329,6 @@ value_set_dereferencet::valuet value_set_dereferencet::build_reference_to(
313329
// This is stuff like *((char *)5).
314330
// This is turned into an access to __CPROVER_memory[...].
315331

316-
if(language_mode == ID_java)
317-
{
318-
result.ignore = true;
319-
return result;
320-
}
321-
322332
const symbolt &memory_symbol=ns.lookup(CPROVER_PREFIX "memory");
323333
const symbol_exprt symbol_expr(memory_symbol.name, memory_symbol.type);
324334

src/pointer-analysis/value_set_dereference.h

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -60,18 +60,20 @@ class value_set_dereferencet final
6060
public:
6161
exprt value;
6262
exprt pointer_guard;
63-
bool ignore;
6463

65-
valuet():value(nil_exprt()), pointer_guard(false_exprt()), ignore(false)
64+
valuet() : value(nil_exprt()), pointer_guard(false_exprt())
6665
{
6766
}
6867
};
6968

69+
static bool should_ignore_value(
70+
const exprt &what,
71+
bool exclude_null_derefs,
72+
const irep_idt &language_mode);
73+
7074
static valuet build_reference_to(
7175
const exprt &what,
7276
const exprt &pointer,
73-
bool exclude_null_derefs,
74-
irep_idt language_mode,
7577
const namespacet &ns);
7678

7779
static bool dereference_type_compare(

0 commit comments

Comments
 (0)