c++如何使用LLVM/Clang LibTooling_c++编写自己的静态分析工具

class MallocCallHandler : public MatchFinder::MatchCallback {
public:
  virtual void run(const MatchFinder::MatchResult &Result) {
    const CallExpr *Call = Result.Nodes.getNodeAs<CallExpr>("mallocCall");
    const FunctionDecl *Func = Result.Nodes.getNodeAs<FunctionDecl>("func");

    if (Call && Func) {
      SourceManager &SM = *Result.SourceManager;
      llvm::outs() << "Found malloc call in function: " << Func->getName()
                   << " at " << SM.getSpellingLineNumber(Call->getBeginLoc())
                   << ":" << SM.getSpellingColumnNumber(Call->getBeginLoc())
                   << "\n";
    }
  }
};

class MallocFindAction : public ASTFrontendAction {
public:
  MallocFindAction() {}

  std::unique_ptr<ASTConsumer> CreateASTConsumer(CompilerInstance &CI,
                                                StringRef file) override {
    std::unique_ptr<ASTConsumer> Consumer = std::make_unique<ASTConsumer>();
    Finder.addMatcher(
        callExpr(callee(functionDecl(hasName("malloc")))).bind("mallocCall"),
        &Handler
    );
    return Consumer;
  }

  void ExecuteAction() override {
    // 获取当前编译单元的ASTContext
    ASTContext &Context = getCompilerInstance().getASTContext();
    Finder.matchAST(Context);
  }

private:
  MallocCallHandler Handler;
  MatchFinder Finder;
};

int main(int argc, const char **argv) {
  CommonOptionsParser OptionsParser(argc, argv, llvm::cl::GeneralCategory);
  ClangTool Tool(OptionsParser.getCompilations(),
                 OptionsParser.getSourcePathList());

  MallocFindActionFactory Factory; // 需要包装成Factory
  return Tool.run(&Factory);
}

callExpr(
  callee(functionDecl(hasName("malloc"))),
  unless(isExpansionInSystemHeader())
).bind("mallocCall")