LNO support.
[xonotic/xonotic.git] / misc / tools / progs-analyzer.pl
1 #!/usr/bin/perl
2
3 use strict;
4 use warnings;
5 use Digest::SHA;
6 use Carp;
7
8 sub id()
9 {
10         return sub { $_[0]; };
11 }
12
13 sub signed($)
14 {
15         my ($bits) = @_;
16         return sub { $_[0] >= (2**($bits-1)) ? $_[0]-(2**$bits) : $_[0]; };
17 }
18
19 use constant OPCODE_E => [qw[
20         DONE
21         MUL_F MUL_V MUL_FV MUL_VF
22         DIV_F
23         ADD_F ADD_V
24         SUB_F SUB_V
25         EQ_F EQ_V EQ_S EQ_E EQ_FNC
26         NE_F NE_V NE_S NE_E NE_FNC
27         LE GE LT GT
28         LOAD_F LOAD_V LOAD_S LOAD_ENT LOAD_FLD LOAD_FNC
29         ADDRESS
30         STORE_F STORE_V STORE_S STORE_ENT STORE_FLD STORE_FNC
31         STOREP_F STOREP_V STOREP_S STOREP_ENT STOREP_FLD STOREP_FNC
32         RETURN
33         NOT_F NOT_V NOT_S NOT_ENT NOT_FNC
34         IF IFNOT
35         CALL0 CALL1 CALL2 CALL3 CALL4 CALL5 CALL6 CALL7 CALL8
36         STATE
37         GOTO
38         AND OR
39         BITAND BITOR
40 ]];
41 use constant ETYPE_E => [qw[
42         void
43         string
44         float
45         vector
46         entity
47         field
48         function
49         pointer
50 ]];
51 use constant DEF_SAVEGLOBAL => 32768;
52 sub typesize($)
53 {
54         my ($type) = @_;
55         return 3 if $type eq 'vector';
56         return 1;
57 }
58
59 sub checkop($)
60 {
61         my ($op) = @_;
62         if($op =~ /^IF.*_V$/)
63         {
64                 return { a => 'inglobalvec', b => 'ipoffset', isjump => 'b', isconditional => 1 };
65         }
66         if($op =~ /^IF/)
67         {
68                 return { a => 'inglobal', b => 'ipoffset', isjump => 'b', isconditional => 1 };
69         }
70         if($op eq 'GOTO')
71         {
72                 return { a => 'ipoffset', isjump => 'a', isconditional => 0 };
73         }
74         if($op =~ /^ADD_V$|^SUB_V$/)
75         {
76                 return { a => 'inglobalvec', b => 'inglobalvec', c => 'outglobalvec' };
77         }
78         if($op =~ /^MUL_V$|^EQ_V$|^NE_V$/)
79         {
80                 return { a => 'inglobalvec', b => 'inglobalvec', c => 'outglobal' };
81         }
82         if($op eq 'MUL_FV')
83         {
84                 return { a => 'inglobal', b => 'inglobalvec', c => 'outglobalvec' };
85         }
86         if($op eq 'MUL_VF')
87         {
88                 return { a => 'inglobalvec', b => 'inglobal', c => 'outglobalvec' };
89         }
90         if($op eq 'LOAD_V')
91         {
92                 return { a => 'inglobal', b => 'inglobal', c => 'outglobalvec' };
93         }
94         if($op =~ /^NOT_V/)
95         {
96                 return { a => 'inglobalvec', c => 'outglobal' };
97         }
98         if($op =~ /^NOT_/)
99         {
100                 return { a => 'inglobal', c => 'outglobal' };
101         }
102         if($op eq 'STOREP_V')
103         {
104                 return { a => 'inglobalvec', b => 'inglobal' };
105         }
106         if($op eq 'STORE_V')
107         {
108                 return { a => 'inglobalvec', b => 'outglobalvec' };
109         }
110         if($op =~ /^STOREP_/)
111         {
112                 return { a => 'inglobal', b => 'inglobal' };
113         }
114         if($op =~ /^STORE_/)
115         {
116                 return { a => 'inglobal', b => 'outglobal' };
117         }
118         if($op =~ /^CALL/)
119         {
120                 return { a => 'inglobalfunc', iscall => 1 };
121         }
122         if($op =~ /^DONE$|^RETURN$/)
123         {
124                 return { a => 'inglobalvec', isreturn => 1 };
125         }
126         if($op eq 'STATE')
127         {
128                 return { a => 'inglobal', b => 'inglobalfunc' };
129         }
130         if($op =~ /^INVALID#/)
131         {
132                 return { isinvalid => 1 };
133         }
134         return { a => 'inglobal', b => 'inglobal', c => 'outglobal' };
135 }
136
137 use constant TYPES => {
138         int => ['V', 4, signed 32],
139         ushort => ['v', 2, id],
140         short => ['v', 2, signed 16],
141         opcode => ['v', 2, sub { OPCODE_E->[$_[0]] or do { warn "Invalid opcode: $_[0]"; "INVALID#$_[0]"; }; }],
142         float => ['f', 4, id],
143         uchar8 => ['a8', 8, sub { [unpack 'C8', $_[0]] }],
144         global => ['i', 4, sub { { int => $_[0], float => unpack "f", pack "L", $_[0] }; }],
145         deftype => ['v', 2, sub { { type => ETYPE_E->[$_[0] & ~DEF_SAVEGLOBAL], save => !!($_[0] & DEF_SAVEGLOBAL) }; }],
146 };
147
148 use constant DPROGRAMS_T => [
149         [int => 'version'],
150         [int => 'crc'],
151         [int => 'ofs_statements'],
152         [int => 'numstatements'],
153         [int => 'ofs_globaldefs'],
154         [int => 'numglobaldefs'],
155         [int => 'ofs_fielddefs'],
156         [int => 'numfielddefs'],
157         [int => 'ofs_functions'],
158         [int => 'numfunctions'],
159         [int => 'ofs_strings'],
160         [int => 'numstrings'],
161         [int => 'ofs_globals'],
162         [int => 'numglobals'],
163         [int => 'entityfields']
164 ];
165
166 use constant DSTATEMENT_T => [
167         [opcode => 'op'],
168         [short => 'a'],
169         [short => 'b'],
170         [short => 'c']
171 ];
172
173 use constant DDEF_T => [
174         [deftype => 'type'],
175         [ushort => 'ofs'],
176         [int => 's_name']
177 ];
178
179 use constant DGLOBAL_T => [
180         [global => 'v'],
181 ];
182
183 use constant DFUNCTION_T => [
184         [int => 'first_statement'],
185         [int => 'parm_start'],
186         [int => 'locals'],
187         [int => 'profile'],
188         [int => 's_name'],
189         [int => 's_file'],
190         [int => 'numparms'],
191         [uchar8 => 'parm_size'],
192 ];
193
194 use constant LNOHEADER_T => [
195         [int => 'lnotype'],
196         [int => 'version'],
197         [int => 'numglobaldefs'],
198         [int => 'numglobals'],
199         [int => 'numfielddefs'],
200         [int => 'numstatements'],
201 ];
202
203 use constant LNO_T => [
204         [int => 'v'],
205 ];
206
207 sub get_section($$$)
208 {
209         my ($fh, $start, $len) = @_;
210         seek $fh, $start, 0
211                 or die "seek: $!";
212         $len == read $fh, my $buf, $len
213                 or die "short read from $start length $len (malformed progs header)";
214         return $buf;
215 }
216
217 sub parse_section($$$$$)
218 {
219         my ($fh, $struct, $start, $len, $cnt) = @_;
220
221         my $itemlen = 0;
222         $itemlen += TYPES->{$_->[0]}->[1]
223                 for @$struct;
224         my $packspec = join '', map { TYPES->{$_->[0]}->[0]; } @$struct;
225         my @packnames = map { $_->[1]; } @$struct;
226
227         $len = $cnt * $itemlen
228                 if not defined $len and defined $cnt;
229         $cnt = int($len / $itemlen)
230                 if not defined $cnt and defined $len;
231         die "Invalid length specification"
232                 unless defined $len and defined $cnt and $len == $cnt * $itemlen;
233         die "Invalid length specification in scalar context"
234                 unless wantarray or $cnt == 1;
235
236         seek $fh, $start, 0
237                 or die "seek: $!";
238         my @out = map
239         {
240                 $itemlen == read $fh, my $buf, $itemlen
241                         or die "short read from $start length $cnt * $itemlen $(malformed progs header)";
242                 my %h = ();
243                 @h{@packnames} = unpack $packspec, $buf;
244                 $h{$_->[1]} = TYPES->{$_->[0]}->[2]->($h{$_->[1]})
245                         for @$struct;
246                 \%h;
247         }
248         0..($cnt-1);
249         return @out
250                 if wantarray;
251         return $out[0];
252 }
253
254 sub nfa_default_state_checker()
255 {
256         my %seen;
257         return sub
258         {
259                 my ($ip, $state) = @_;
260                 return $seen{"$ip $state"}++;
261         };
262 }
263
264 sub run_nfa($$$$$$)
265 {
266         my ($progs, $ip, $state, $copy_handler, $state_checker, $instruction_handler) = @_;
267
268         my $statements = $progs->{statements};
269
270         my $nfa;
271         $nfa = sub
272         {
273                 no warnings 'recursion';
274
275                 my ($ip, $state) = @_;
276                 my $ret = 0;
277
278                 for(;;)
279                 {
280                         return $ret
281                                 if $state_checker->($ip, $state);
282
283                         my $s = $statements->[$ip];
284                         my $c = checkop $s->{op};
285
286                         if(($ret = $instruction_handler->($ip, $state, $s, $c)))
287                         {
288                                 # abort execution
289                                 last;
290                         }
291
292                         if($c->{isreturn})
293                         {
294                                 last;
295                         }
296                         elsif($c->{iscall})
297                         {
298                                 my $func = $s->{a};
299                                 my $funcid = $progs->{globals}[$func]{v}{int};
300                                 last
301                                         if $progs->{error_func}{$funcid};
302                                 $ip += 1;
303                         }
304                         elsif($c->{isjump})
305                         {
306                                 if($c->{isconditional})
307                                 {
308                                         if(rand 2)
309                                         {
310                                                 if(($ret = $nfa->($ip+$s->{$c->{isjump}}, $copy_handler->($state))) < 0)
311                                                 {
312                                                         last;
313                                                 }
314                                                 $ip += 1;
315                                         }
316                                         else
317                                         {
318                                                 $nfa->($ip+1, $copy_handler->($state));
319                                                 $ip += $s->{$c->{isjump}};
320                                         }
321                                 }
322                                 else
323                                 {
324                                         $ip += $s->{$c->{isjump}};
325                                 }
326                         }
327                         else
328                         {
329                                 $ip += 1;
330                         }
331                 }
332
333                 return $ret;
334         };
335
336         $nfa->($ip, $copy_handler->($state));
337 }
338
339 sub get_constant($$)
340 {
341         my ($progs, $g) = @_;
342         if($g->{int} == 0)
343         {
344                 return 0;
345         }
346         elsif($g->{int} > 0 && $g->{int} < 8388608)
347         {
348                 if($g->{int} < length $progs->{strings} && $g->{int} > 0)
349                 {
350                         return str($progs->{getstring}->($g->{int}));
351                 }
352                 else
353                 {
354                         return $g->{int} . "i";
355                 }
356         }
357         else
358         {
359                 return $g->{float};
360         }
361 }
362
363 use constant PRE_MARK_STATEMENT => "";
364 use constant POST_MARK_STATEMENT => "";
365 use constant PRE_MARK_OPERAND => "*** ";
366 use constant POST_MARK_OPERAND => " ***";
367
368 use constant INSTRUCTION_FORMAT => "%8s %3s | %-12s ";
369 use constant OPERAND_FORMAT => "%s";
370 use constant OPERAND_SEPARATOR => ", ";
371 use constant INSTRUCTION_SEPARATOR => "\n";
372
373 sub str($)
374 {
375         my ($str) = @_;
376         $str =~ s/[\000-\037\\\"\177-\377]/sprintf "\\%03o", ord $&/ge;
377         return "\"$str\"";
378 }
379
380 sub debugpos($$$) {
381         my ($progs, $func, $ip) = @_;
382         my $s = $func->{debugname};
383         if ($progs->{cno}) {
384                 my $column = $progs->{cno}[$ip]{v};
385                 $s =~ s/:/:$column:/;
386         }
387         if ($progs->{lno}) {
388                 my $line = $progs->{lno}[$ip]{v};
389                 $s =~ s/:/:$line:/;
390         }
391         return $s;
392 }
393
394 sub disassemble_function($$;$)
395 {
396         my ($progs, $func, $highlight) = @_;
397
398         print "$func->{debugname}:\n";
399
400         if($func->{first_statement} < 0) # builtin
401         {
402                 printf INSTRUCTION_FORMAT, '', '', '.BUILTIN';
403                 printf OPERAND_FORMAT, -$func->{first_statement};
404                 print INSTRUCTION_SEPARATOR;
405                 return;
406         }
407
408         my $initializer = sub
409         {
410                 my ($ofs) = @_;
411                 my $g = get_constant($progs, $progs->{globals}[$ofs]{v});
412                 print " = $g"
413                         if defined $g;
414         };
415
416         printf INSTRUCTION_FORMAT, '', '', '.PARM_START';
417         printf OPERAND_FORMAT, "$func->{parm_start}";
418         print INSTRUCTION_SEPARATOR;
419
420         printf INSTRUCTION_FORMAT, '', '', '.LOCALS';
421         printf OPERAND_FORMAT, "$func->{locals}";
422         print INSTRUCTION_SEPARATOR;
423
424         my %override_locals = ();
425         my $p = $func->{parm_start};
426         for(0..($func->{numparms}-1))
427         {
428                 $override_locals{$p} //= "argv_$_";
429                 for my $comp(0..($func->{parm_size}[$_]-1))
430                 {
431                         $override_locals{$p} //= "argv_$_\[$comp]";
432                         ++$p;
433                 }
434                 printf INSTRUCTION_FORMAT, '', '', '.ARG';
435                 printf OPERAND_FORMAT, "argv_$_";
436                 print OPERAND_SEPARATOR;
437                 printf OPERAND_FORMAT, $func->{parm_size}[$_];
438                 print INSTRUCTION_SEPARATOR;
439         }
440         for($func->{parm_start}..($func->{parm_start} + $func->{locals} - 1))
441         {
442                 next
443                         if exists $override_locals{$_};
444                 $override_locals{$_} = "local_$_";
445
446                 printf INSTRUCTION_FORMAT, '', '', '.LOCAL';
447                 printf OPERAND_FORMAT, "local_$_";
448                 $initializer->($_);
449                 print INSTRUCTION_SEPARATOR;
450         }
451
452         my $getname = sub
453         {
454                 my ($ofs) = @_;
455                 return $override_locals{$ofs}
456                         if exists $override_locals{$ofs};
457                 my $def = $progs->{globaldef_byoffset}->($ofs);
458                 return $def->{debugname};
459         };
460
461         my $operand = sub
462         {
463                 my ($ip, $type, $operand) = @_;
464                 if($type eq 'inglobal')
465                 {
466                         my $name = $getname->($operand);
467                         printf OPERAND_FORMAT, "$name";
468                 }
469                 elsif($type eq 'outglobal')
470                 {
471                         my $name = $getname->($operand);
472                         printf OPERAND_FORMAT, "&$name";
473                 }
474                 elsif($type eq 'inglobalvec')
475                 {
476                         my $name = $getname->($operand);
477                         printf OPERAND_FORMAT, "$name\[\]";
478                 }
479                 elsif($type eq 'outglobalvec')
480                 {
481                         my $name = $getname->($operand);
482                         printf OPERAND_FORMAT, "&$name\[\]";
483                 }
484                 elsif($type eq 'inglobalfunc')
485                 {
486                         my $name = $getname->($operand);
487                         printf OPERAND_FORMAT, "$name()";
488                 }
489                 elsif($type eq 'ipoffset')
490                 {
491                         printf OPERAND_FORMAT, "@{[$ip + $operand]}" . sprintf ' ($%+d)', $operand;
492                 }
493                 else
494                 {
495                         die "unknown type: $type";
496                 }
497         };
498
499         my $statements = $func->{statements};
500         my $come_from = $func->{come_from};
501
502         my $ipprev = undef;
503         for my $ip(sort { $a <=> $b } keys %$statements)
504         {
505                 if($ip == $func->{first_statement})
506                 {
507                         printf INSTRUCTION_FORMAT, $ip, '', '.ENTRY';
508                         print INSTRUCTION_SEPARATOR;
509                 }
510                 if(defined $ipprev && $ip != $ipprev + 1)
511                 {
512                         printf INSTRUCTION_FORMAT, $ip, '', '.SKIP';
513                         printf OPERAND_FORMAT, $ip - $ipprev - 1;
514                         print INSTRUCTION_SEPARATOR;
515                 }
516                 if(my $cf = $come_from->{$ip})
517                 {
518                         printf INSTRUCTION_FORMAT, $ip, '', '.XREF';
519                         my $cnt = 0;
520                         for(sort { $a <=> $b } keys %$cf)
521                         {
522                                 print OPERAND_SEPARATOR
523                                         if $cnt++;
524                                 printf OPERAND_FORMAT, ($cf->{$_} ? 'c' : 'j') . $_ . sprintf ' ($%+d)', $_ - $ip;
525                         }
526                         print INSTRUCTION_SEPARATOR;
527                 }
528
529                 my $op = $progs->{statements}[$ip]{op};
530                 my $ipt = $progs->{statements}[$ip];
531                 my $opprop = checkop $op;
532
533                 if($highlight and $highlight->{$ip})
534                 {
535                         for(values %{$highlight->{$ip}})
536                         {
537                                 for(sort keys %$_)
538                                 {
539                                         print PRE_MARK_STATEMENT;
540                                         printf INSTRUCTION_FORMAT, '', '<!>', '.WARN';
541                                         my $pos = debugpos $progs, $func, $ip;
542                                         printf OPERAND_FORMAT, "$_ (in $pos)";
543                                         print INSTRUCTION_SEPARATOR;
544                                 }
545                         }
546                 }
547
548                 print PRE_MARK_STATEMENT
549                         if $highlight and $highlight->{$ip};
550
551                 my $showip = $opprop->{isjump};
552                 printf INSTRUCTION_FORMAT, $showip ? $ip : '', $highlight->{$ip} ? '<!>' : '', $op;
553
554                 my $cnt = 0;
555                 for my $o(qw(a b c))
556                 {
557                         next
558                                 if not defined $opprop->{$o};
559                         print OPERAND_SEPARATOR
560                                 if $cnt++;
561                         print PRE_MARK_OPERAND
562                                 if $highlight and $highlight->{$ip} and $highlight->{$ip}{$o};
563                         $operand->($ip, $opprop->{$o}, $ipt->{$o});
564                         print POST_MARK_OPERAND
565                                 if $highlight and $highlight->{$ip} and $highlight->{$ip}{$o};
566                 }
567
568                 print POST_MARK_STATEMENT
569                         if $highlight and $highlight->{$ip};
570
571                 print INSTRUCTION_SEPARATOR;
572         }
573 }
574
575 sub find_uninitialized_locals($$)
576 {
577         my ($progs, $func) = @_;
578
579         return
580                 if $func->{first_statement} < 0; # builtin
581
582         print STDERR "Checking $func->{debugname}...\n";
583
584         my $p = $func->{parm_start};
585         for(0..($func->{numparms}-1))
586         {
587                 $p += $func->{parm_size}[$_];
588         }
589
590         use constant WATCHME_R => 1;
591         use constant WATCHME_W => 2;
592         use constant WATCHME_X => 4;
593         use constant WATCHME_T => 8;
594         my %watchme = map { $_ => WATCHME_X } ($func->{parm_start} .. ($func->{parm_start} + $func->{locals} - 1));
595
596         for(keys %{$progs->{temps}})
597         {
598                 next
599                         if exists $watchme{$_};
600                 if($progs->{temps}{$_})
601                 {
602                         # shared temp
603                         $watchme{$_} = WATCHME_T | WATCHME_X
604                 }
605                 else
606                 {
607                         # unique temp
608                         $watchme{$_} = WATCHME_X
609                 }
610         }
611
612         $watchme{$_} |= WATCHME_R
613                 for keys %{$func->{globals_read}};
614         $watchme{$_} |= WATCHME_W
615                 for keys %{$func->{globals_written}};
616
617         my %write_places = ();
618         for my $ofs(keys %{$func->{globals_written}})
619         {
620                 next
621                         unless exists $watchme{$ofs} and $watchme{$ofs} & WATCHME_X;
622                 for my $ip(keys %{$func->{globals_written}{$ofs}})
623                 {
624                         for my $op(keys %{$func->{globals_written}{$ofs}{$ip}})
625                         {
626                                 push @{$write_places{$ip}{$op}}, $ofs;
627                         }
628                 }
629         }
630
631         for(keys %watchme)
632         {
633                 delete $watchme{$_}
634                         if ($watchme{$_} & (WATCHME_R | WATCHME_W | WATCHME_X)) != (WATCHME_R | WATCHME_W | WATCHME_X);
635         }
636
637         return
638                 if not keys %watchme;
639
640         for(keys %watchme)
641         {
642                 $watchme{$_} = {
643                         flags => $watchme{$_},
644                         valid => [0, undef, undef]
645                 };
646         }
647
648         # mark parameters as initialized
649         for($func->{parm_start} .. ($p-1))
650         {
651                 $watchme{$_}{valid} = [1, undef, undef]
652                         if defined $watchme{$_};
653         }
654
655         my %warned = ();
656         my %ip_seen = ();
657         run_nfa $progs, $func->{first_statement}, \%watchme,
658                 sub {
659                         my ($h) = @_;
660                         return { map { $_ => { %{$h->{$_}} } } keys %$h };
661                 },
662                 sub {
663                         my ($ip, $state) = @_;
664
665                         my $s = $ip_seen{$ip};
666                         if($s)
667                         {
668                                 # if $state is stronger or equal to $s, return 1
669
670                                 for(keys %$state)
671                                 {
672                                         if($state->{$_}{valid}[0] < $s->{$_})
673                                         {
674                                                 # The current state is LESS valid than the previously run one. We NEED to run this.
675                                                 # The saved state can safely become the intersection [citation needed].
676                                                 for(keys %$state)
677                                                 {
678                                                         $s->{$_} = $state->{$_}{valid}[0]
679                                                                 if $state->{$_}{valid}[0] < $s->{$_};
680                                                 }
681                                                 return 0;
682                                         }
683                                 }
684                                 # if we get here, $state is stronger or equal. No need to try it.
685                                 return 1;
686                         }
687                         else
688                         {
689                                 # Never seen this IP yet.
690                                 $ip_seen{$ip} = { map { ($_ => $state->{$_}{valid}[0]); } keys %$state };
691                                 return 0;
692                         }
693                 },
694                 sub {
695                         my ($ip, $state, $s, $c) = @_;
696                         my $op = $s->{op};
697
698                         # QCVM BUG: RETURN always takes vector, there is no float equivalent
699                         my $return_hack = $c->{isreturn} // 0;
700
701                         if($op eq 'STORE_V')
702                         {
703                                 # COMPILER BUG of QCC: params are always copied using STORE_V
704                                 if($s->{b} >= 4 && $s->{b} < 28) # parameter range
705                                 {
706                                         $return_hack = 1;
707                                 }
708                         }
709
710                         if($c->{isinvalid})
711                         {
712                                 ++$warned{$ip}{''}{"Invalid opcode"};
713                         }
714                         for(qw(a b c))
715                         {
716                                 my $type = $c->{$_};
717                                 next
718                                         unless defined $type;
719
720                                 my $ofs = $s->{$_};
721
722                                 my $read = sub
723                                 {
724                                         my ($ofs) = @_;
725                                         ++$return_hack
726                                                 if $return_hack;
727                                         return
728                                                 if not exists $state->{$ofs};
729                                         my $valid = $state->{$ofs}{valid};
730                                         if($valid->[0] == 0)
731                                         {
732                                                 # COMPILER BUG of FTEQCC: AND and OR may take uninitialized as second argument (logicops)
733                                                 if($return_hack <= 2 and ($op ne 'OR' && $op ne 'AND' || $_ ne 'b'))
734                                                 {
735                                                         ++$warned{$ip}{$_}{"Use of uninitialized value"};
736                                                 }
737                                         }
738                                         elsif($valid->[0] < 0)
739                                         {
740                                                 # COMPILER BUG of FTEQCC: AND and OR may take uninitialized as second argument (logicops)
741                                                 if($return_hack <= 2 and ($op ne 'OR' && $op ne 'AND' || $_ ne 'b'))
742                                                 {
743                                                         ++$warned{$ip}{$_}{"Use of temporary across CALL"};
744                                                 }
745                                         }
746                                         else
747                                         {
748                                                 # it's VALID
749                                                 if(defined $valid->[1])
750                                                 {
751                                                         delete $write_places{$valid->[1]}{$valid->[2]};
752                                                 }
753                                         }
754                                 };
755                                 my $write = sub
756                                 {
757                                         my ($ofs) = @_;
758                                         $state->{$ofs}{valid} = [1, $ip, $_]
759                                                 if exists $state->{$ofs};
760                                 };
761
762                                 if($type eq 'inglobal' || $type eq 'inglobalfunc')
763                                 {
764                                         $read->($ofs);
765                                 }
766                                 elsif($type eq 'inglobalvec')
767                                 {
768                                         $read->($ofs);
769                                         $read->($ofs+1);
770                                         $read->($ofs+2);
771                                 }
772                                 elsif($type eq 'outglobal')
773                                 {
774                                         $write->($ofs);
775                                 }
776                                 elsif($type eq 'outglobalvec')
777                                 {
778                                         $write->($ofs);
779                                         $write->($ofs+1);
780                                         $write->($ofs+2);
781                                 }
782                                 elsif($type eq 'ipoffset')
783                                 {
784                                         ++$warned{$ip}{$_}{"Endless loop"}
785                                                 if $ofs == 0;
786                                         ++$warned{$ip}{$_}{"No-operation jump"}
787                                                 if $ofs == 1;
788                                 }
789                         }
790                         if($c->{iscall})
791                         {
792                                 # builtin calls may clobber stuff
793                                 my $func = $s->{a};
794                                 my $funcid = $progs->{globals}[$func]{v}{int};
795                                 my $funcobj = $progs->{functions}[$funcid];
796                                 if(!$funcobj || $funcobj->{first_statement} >= 0)
797                                 {
798                                         # invalidate temps
799                                         for(values %$state)
800                                         {
801                                                 if($_->{flags} & WATCHME_T)
802                                                 {
803                                                         $_->{valid} = [-1, undef, undef];
804                                                 }
805                                         }
806                                 }
807                         }
808
809                         return 0;
810                 };
811
812         for my $ip(keys %write_places)
813         {
814                 for my $operand(keys %{$write_places{$ip}})
815                 {
816                         # TODO verify it
817                         my %left = map { $_ => 1 } @{$write_places{$ip}{$operand}};
818                         my $isread = 0;
819
820                         my %writeplace_seen = ();
821                         run_nfa $progs, $ip+1, \%left,
822                                 sub
823                                 {
824                                         return { %{$_[0]} };
825                                 },
826                                 sub
827                                 {
828                                         my ($ip, $state) = @_;
829                                         return $writeplace_seen{"$ip " . join " ", sort keys %$state}++;
830                                 },
831                                 sub
832                                 {
833                                         my ($ip, $state, $s, $c) = @_;
834                                         for(qw(a b c))
835                                         {
836                                                 my $type = $c->{$_};
837                                                 next
838                                                         unless defined $type;
839
840                                                 my $ofs = $s->{$_};
841                                                 if($type eq 'inglobal' || $type eq 'inglobalfunc')
842                                                 {
843                                                         if($state->{$ofs})
844                                                         {
845                                                                 $isread = 1;
846                                                                 return -1; # exit TOTALLY
847                                                         }
848                                                 }
849                                                 elsif($type eq 'inglobalvec')
850                                                 {
851                                                         if($state->{$ofs} || $state->{$ofs+1} || $state->{$ofs+2})
852                                                         {
853                                                                 $isread = 1;
854                                                                 return -1; # exit TOTALLY
855                                                         }
856                                                 }
857                                                 elsif($type eq 'outglobal')
858                                                 {
859                                                         delete $state->{$ofs};
860                                                         return 1
861                                                                 if !%$state;
862                                                 }
863                                                 elsif($type eq 'outglobalvec')
864                                                 {
865                                                         delete $state->{$ofs};
866                                                         delete $state->{$ofs+1};
867                                                         delete $state->{$ofs+2};
868                                                         return 1
869                                                                 if !%$state;
870                                                 }
871                                         }
872                                         return 0;
873                                 };
874
875                         if(!$isread)
876                         {
877                                 ++$warned{$ip}{$operand}{"Value is never used"};
878                         }
879                 }
880         }
881         
882         disassemble_function($progs, $func, \%warned)
883                 if keys %warned;
884 }
885
886 use constant DEFAULTGLOBALS => [
887         "OFS_NULL",
888         "OFS_RETURN",
889         "OFS_RETURN[1]",
890         "OFS_RETURN[2]",
891         "OFS_PARM0",
892         "OFS_PARM0[1]",
893         "OFS_PARM0[2]",
894         "OFS_PARM1",
895         "OFS_PARM1[1]",
896         "OFS_PARM1[2]",
897         "OFS_PARM2",
898         "OFS_PARM2[1]",
899         "OFS_PARM2[2]",
900         "OFS_PARM3",
901         "OFS_PARM3[1]",
902         "OFS_PARM3[2]",
903         "OFS_PARM4",
904         "OFS_PARM4[1]",
905         "OFS_PARM4[2]",
906         "OFS_PARM5",
907         "OFS_PARM5[1]",
908         "OFS_PARM5[2]",
909         "OFS_PARM6",
910         "OFS_PARM6[1]",
911         "OFS_PARM6[2]",
912         "OFS_PARM7",
913         "OFS_PARM7[1]",
914         "OFS_PARM7[2]"
915 ];
916
917 sub defaultglobal($)
918 {
919         my ($ofs) = @_;
920         if($ofs < @{(DEFAULTGLOBALS)})
921         {
922                 return { ofs => $ofs, s_name => undef, debugname => DEFAULTGLOBALS->[$ofs], type => undef };
923         }
924         return { ofs => $ofs, s_name => undef, debugname => "<undefined>\@$ofs", type => undef };
925 }
926
927 sub detect_constants($)
928 {
929         my ($progs) = @_;
930         use constant GLOBALFLAG_R => 1; # read
931         use constant GLOBALFLAG_W => 2; # written
932         use constant GLOBALFLAG_S => 4; # saved
933         use constant GLOBALFLAG_I => 8; # initialized
934         use constant GLOBALFLAG_N => 16; # named
935         use constant GLOBALFLAG_Q => 32; # unique to function
936         use constant GLOBALFLAG_U => 64; # unused
937         use constant GLOBALFLAG_P => 128; # possibly parameter passing
938         use constant GLOBALFLAG_D => 256; # has a def
939         my @globalflags = (GLOBALFLAG_Q | GLOBALFLAG_U) x (@{$progs->{globals}} + 2);
940
941         for(@{$progs->{functions}})
942         {
943                 for(keys %{$_->{globals_used}})
944                 {
945                         if($globalflags[$_] & GLOBALFLAG_U)
946                         {
947                                 $globalflags[$_] &= ~GLOBALFLAG_U;
948                         }
949                         elsif($globalflags[$_] & GLOBALFLAG_Q)
950                         {
951                                 $globalflags[$_] &= ~GLOBALFLAG_Q;
952                         }
953                 }
954                 $globalflags[$_] |= GLOBALFLAG_R
955                         for keys %{$_->{globals_read}};
956                 $globalflags[$_] |= GLOBALFLAG_W
957                         for keys %{$_->{globals_written}};
958                 next
959                         if $_->{first_statement} < 0;
960                 for my $ip($_->{first_statement} .. (@{$progs->{statements}}-1))
961                 {
962                         my $s = $progs->{statements}[$ip];
963                         if($s->{op} eq 'STORE_V')
964                         {
965                                 $globalflags[$s->{a}] |= GLOBALFLAG_P
966                                         if $s->{b} >= $_->{parm_start} and $s->{b} < $_->{parm_start} + $_->{locals};
967                                 $globalflags[$s->{a}+1] |= GLOBALFLAG_P
968                                         if $s->{b}+1 >= $_->{parm_start} and $s->{b}+1 < $_->{parm_start} + $_->{locals};
969                                 $globalflags[$s->{a}+2] |= GLOBALFLAG_P
970                                         if $s->{b}+2 >= $_->{parm_start} and $s->{b}+2 < $_->{parm_start} + $_->{locals};
971                         }
972                         elsif($s->{op} =~ /^STORE_/)
973                         {
974                                 $globalflags[$s->{a}] |= GLOBALFLAG_P
975                                         if $s->{b} >= $_->{parm_start} and $s->{b} < $_->{parm_start} + $_->{locals};
976                         }
977                         else
978                         {
979                                 last;
980                         }
981                 }
982         }
983
984         # parameter passing globals are only ever used in STORE_ instructions
985         for my $s(@{$progs->{statements}})
986         {
987                 next
988                         if $s->{op} =~ /^STORE_/;
989
990                 my $c = checkop $s->{op};
991
992                 for(qw(a b c))
993                 {
994                         my $type = $c->{$_};
995                         next
996                                 unless defined $type;
997
998                         my $ofs = $s->{$_};
999                         if($type eq 'inglobal' || $type eq 'inglobalfunc' || $type eq 'outglobal')
1000                         {
1001                                 $globalflags[$ofs] &= ~GLOBALFLAG_P;
1002                         }
1003                         if($type eq 'inglobalvec' || $type eq 'outglobalvec')
1004                         {
1005                                 $globalflags[$ofs] &= ~GLOBALFLAG_P;
1006                                 $globalflags[$ofs+1] &= ~GLOBALFLAG_P;
1007                                 $globalflags[$ofs+2] &= ~GLOBALFLAG_P;
1008                         }
1009                 }
1010         }
1011
1012         my %offsets_saved = ();
1013         for(@{$progs->{globaldefs}})
1014         {
1015                 my $type = $_->{type};
1016                 my $name = $progs->{getstring}->($_->{s_name});
1017                 $name = ''
1018                         if $name eq 'IMMEDIATE' or $name =~ /^\./;
1019                 $_->{debugname} = $name
1020                         if $name ne '';
1021                 $globalflags[$_->{ofs}] |= GLOBALFLAG_D;
1022                 if($type->{save})
1023                 {
1024                         $globalflags[$_->{ofs}] |= GLOBALFLAG_S;
1025                 }
1026                 if(defined $_->{debugname})
1027                 {
1028                         $globalflags[$_->{ofs}] |= GLOBALFLAG_N;
1029                 }
1030         }
1031         # fix up vectors
1032         my @extradefs = ();
1033         for(@{$progs->{globaldefs}})
1034         {
1035                 my $type = $_->{type};
1036                 for my $i(1..(typesize($type->{type})-1))
1037                 {
1038                         # add missing def
1039                         if(!($globalflags[$_->{ofs}+$i] & GLOBALFLAG_D))
1040                         {
1041                                 print "Missing globaldef for a component@{[defined $_->{debugname} ? ' of ' . $_->{debugname} : '']} at $_->{ofs}+$i\n";
1042                                 push @extradefs, {
1043                                         type => {
1044                                                 saved => 0,
1045                                                 type => 'float'
1046                                         },
1047                                         ofs => $_->{ofs} + $i,
1048                                         debugname => defined $_->{debugname} ? $_->{debugname} . "[$i]" : undef
1049                                 };
1050                         }
1051                         # "saved" and "named" states hit adjacent globals too
1052                         $globalflags[$_->{ofs}+$i] |= $globalflags[$_->{ofs}] & (GLOBALFLAG_S | GLOBALFLAG_N | GLOBALFLAG_D);
1053                 }
1054         }
1055         push @{$progs->{globaldefs}}, @extradefs;
1056
1057         my %offsets_initialized = ();
1058         for(0..(@{$progs->{globals}}-1))
1059         {
1060                 if($progs->{globals}[$_]{v}{int})
1061                 {
1062                         $globalflags[$_] |= GLOBALFLAG_I;
1063                 }
1064         }
1065
1066         my @globaltypes = (undef) x @{$progs->{globals}};
1067
1068         my %istemp = ();
1069         for(0..(@{$progs->{globals}}-1))
1070         {
1071                 next
1072                         if $_ < @{(DEFAULTGLOBALS)};
1073                 if(($globalflags[$_] & (GLOBALFLAG_R | GLOBALFLAG_W)) == 0)
1074                 {
1075                         $globaltypes[$_] = "unused";
1076                 }
1077                 elsif(($globalflags[$_] & (GLOBALFLAG_R | GLOBALFLAG_W)) == GLOBALFLAG_R)
1078                 {
1079                         # so it is ro
1080                         if(($globalflags[$_] & GLOBALFLAG_N) == GLOBALFLAG_N)
1081                         {
1082                                 $globaltypes[$_] = "read_only";
1083                         }
1084                         elsif(($globalflags[$_] & GLOBALFLAG_S) == 0)
1085                         {
1086                                 $globaltypes[$_] = "const";
1087                         }
1088                         else
1089                         {
1090                                 $globaltypes[$_] = "read_only";
1091                         }
1092                 }
1093                 elsif(($globalflags[$_] & (GLOBALFLAG_R | GLOBALFLAG_W)) == GLOBALFLAG_W)
1094                 {
1095                         $globaltypes[$_] = "write_only";
1096                 }
1097                 else
1098                 {
1099                         # now we know it is rw
1100                         if(($globalflags[$_] & GLOBALFLAG_N) == GLOBALFLAG_N)
1101                         {
1102                                 $globaltypes[$_] = "global";
1103                         }
1104                         elsif(($globalflags[$_] & (GLOBALFLAG_S | GLOBALFLAG_I)) == 0)
1105                         {
1106                                 if($globalflags[$_] & GLOBALFLAG_P)
1107                                 {
1108                                         $globaltypes[$_] = "OFS_PARM";
1109                                 }
1110                                 elsif($globalflags[$_] & GLOBALFLAG_Q)
1111                                 {
1112                                         $globaltypes[$_] = "uniquetemp";
1113                                         $istemp{$_} = 0;
1114                                 }
1115                                 else
1116                                 {
1117                                         $globaltypes[$_] = "temp";
1118                                         $istemp{$_} = 1;
1119                                 }
1120                         }
1121                         elsif(($globalflags[$_] & (GLOBALFLAG_S | GLOBALFLAG_I)) == GLOBALFLAG_I)
1122                         {
1123                                 $globaltypes[$_] = "not_saved";
1124                         }
1125                         else
1126                         {
1127                                 $globaltypes[$_] = "global";
1128                         }
1129                 }
1130         }
1131         $progs->{temps} = \%istemp;
1132
1133         # globaldefs
1134         my @globaldefs = (undef) x @{$progs->{globals}};
1135         for(@{$progs->{globaldefs}})
1136         {
1137                 $globaldefs[$_->{ofs}] //= $_
1138                         if defined $_->{debugname};
1139         }
1140         for(@{$progs->{globaldefs}})
1141         {
1142                 $globaldefs[$_->{ofs}] //= $_;
1143         }
1144         for(0..(@{$progs->{globals}}-1))
1145         {
1146                 $globaldefs[$_] //= {
1147                         ofs => $_,
1148                         s_name => undef,
1149                         debugname => undef,
1150                         type => undef
1151                 };
1152         }
1153         for(0..(@{(DEFAULTGLOBALS)}-1))
1154         {
1155                 $globaldefs[$_] = { ofs => $_, s_name => undef, debugname => DEFAULTGLOBALS->[$_], type => undef };
1156                 $globaltypes[$_] = 'defglobal';
1157         }
1158         my %globaldefs_namecount = ();
1159         for(@globaldefs)
1160         {
1161                 $_->{globaltype} = $globaltypes[$_->{ofs}];
1162                 if(defined $_->{debugname})
1163                 {
1164                         # already has debugname
1165                 }
1166                 elsif($_->{globaltype} eq 'const')
1167                 {
1168                         $_->{debugname} = get_constant($progs, $progs->{globals}[$_->{ofs}]{v});
1169                 }
1170                 else
1171                 {
1172                         $_->{debugname} = "$_->{globaltype}_$_->{ofs}";
1173                 }
1174                 ++$globaldefs_namecount{$_->{debugname}};
1175         }
1176         for(@globaldefs)
1177         {
1178                 next
1179                         if $globaldefs_namecount{$_->{debugname}} <= 1 && !$ENV{FORCE_OFFSETS};
1180                 #print "Not unique: $_->{debugname} at $_->{ofs}\n";
1181                 $_->{debugname} .= "\@$_->{ofs}";
1182         }
1183         $progs->{globaldef_byoffset} = sub
1184         {
1185                 my ($ofs) = @_;
1186                 my $def = $globaldefs[$ofs];
1187                 return $def;
1188         };
1189 }
1190
1191 sub parse_progs($$)
1192 {
1193         my ($fh, $lnofh) = @_;
1194
1195         my %p = ();
1196
1197         print STDERR "Parsing header...\n";
1198         $p{header} = parse_section $fh, DPROGRAMS_T, 0, undef, 1;
1199         
1200         if (defined $lnofh) {
1201                 print STDERR "Parsing LNO...\n";
1202                 my $lnoheader = parse_section $lnofh, LNOHEADER_T, 0, undef, 1;
1203                 eval {
1204                         die "Not a LNOF"
1205                                 if $lnoheader->{lnotype} != unpack 'V', 'LNOF';
1206                         die "Not version 1"
1207                                 if $lnoheader->{version} != 1;
1208                         die "Not same count of globaldefs"
1209                                 if $lnoheader->{numglobaldefs} != $p{header}{numglobaldefs};
1210                         die "Not same count of globals"
1211                                 if $lnoheader->{numglobals} != $p{header}{numglobals};
1212                         die "Not same count of fielddefs"
1213                                 if $lnoheader->{numfielddefs} != $p{header}{numfielddefs};
1214                         die "Not same count of statements"
1215                                 if $lnoheader->{numstatements} != $p{header}{numstatements};
1216                         $p{lno} = [parse_section $lnofh, LNO_T, 24, undef, $lnoheader->{numstatements}];
1217                         eval {
1218                                 $p{lno} = [parse_section $lnofh, LNO_T, 24, undef, $lnoheader->{numstatements} * 2];
1219                                 $p{cno} = [splice $p{lno}, $lnoheader->{numstatements}];
1220                                 print STDERR "Cool, this LNO even has column number info!\n";
1221                         };
1222                 } or warn "Skipping LNO: $@";
1223         }
1224
1225         print STDERR "Parsing strings...\n";
1226         $p{strings} = get_section $fh, $p{header}{ofs_strings}, $p{header}{numstrings};
1227         $p{getstring} = sub
1228         {
1229                 my ($startpos) = @_;
1230                 my $endpos = index $p{strings}, "\0", $startpos;
1231                 return substr $p{strings}, $startpos, $endpos - $startpos;
1232         };
1233
1234         print STDERR "Parsing globals...\n";
1235         $p{globals} = [parse_section $fh, DGLOBAL_T, $p{header}{ofs_globals}, undef, $p{header}{numglobals}];
1236
1237         print STDERR "Parsing globaldefs...\n";
1238         $p{globaldefs} = [parse_section $fh, DDEF_T, $p{header}{ofs_globaldefs}, undef, $p{header}{numglobaldefs}];
1239
1240         print STDERR "Range checking globaldefs...\n";
1241         for(0 .. (@{$p{globaldefs}}-1))
1242         {
1243                 my $g = $p{globaldefs}[$_];
1244                 die "Out of range name in globaldef $_"
1245                         if $g->{s_name} < 0 || $g->{s_name} >= length $p{strings};
1246                 my $name = $p{getstring}->($g->{s_name});
1247                 die "Out of range ofs $g->{ofs} in globaldef $_ (name: \"$name\")"
1248                         if $g->{ofs} >= $p{globals};
1249         }
1250
1251         print STDERR "Parsing fielddefs...\n";
1252         $p{fielddefs} = [parse_section $fh, DDEF_T, $p{header}{ofs_fielddefs}, undef, $p{header}{numfielddefs}];
1253
1254         print STDERR "Range checking fielddefs...\n";
1255         for(0 .. (@{$p{fielddefs}}-1))
1256         {
1257                 my $g = $p{fielddefs}[$_];
1258                 die "Out of range name in fielddef $_"
1259                         if $g->{s_name} < 0 || $g->{s_name} >= length $p{strings};
1260                 my $name = $p{getstring}->($g->{s_name});
1261                 die "Out of range ofs $g->{ofs} in fielddef $_ (name: \"$name\")"
1262                         if $g->{ofs} >= $p{header}{entityfields};
1263         }
1264
1265         print STDERR "Parsing statements...\n";
1266         $p{statements} = [parse_section $fh, DSTATEMENT_T, $p{header}{ofs_statements}, undef, $p{header}{numstatements}];
1267
1268         print STDERR "Parsing functions...\n";
1269         $p{functions} = [parse_section $fh, DFUNCTION_T, $p{header}{ofs_functions}, undef, $p{header}{numfunctions}];
1270
1271         print STDERR "Range checking functions...\n";
1272         for(0 .. (@{$p{functions}} - 1))
1273         {
1274                 my $f = $p{functions}[$_];
1275                 die "Out of range name in function $_"
1276                         if $f->{s_name} < 0 || $f->{s_name} >= length $p{strings};
1277                 my $name = $p{getstring}->($f->{s_name});
1278                 die "Out of range file in function $_"
1279                         if $f->{s_file} < 0 || $f->{s_file} >= length $p{strings};
1280                 my $file = $p{getstring}->($f->{s_file});
1281                 die "Out of range first_statement in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1282                         if $f->{first_statement} >= @{$p{statements}};
1283                 if($f->{first_statement} >= 0)
1284                 {
1285                         die "Out of range parm_start in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1286                                 if $f->{parm_start} < 0 || $f->{parm_start} >= @{$p{globals}};
1287                         die "Out of range locals in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1288                                 if $f->{locals} < 0 || $f->{parm_start} + $f->{locals} > @{$p{globals}};
1289                         die "Out of range numparms $f->{numparms} in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1290                                 if $f->{numparms} < 0 || $f->{numparms} > 8;
1291                         my $totalparms = 0;
1292                         for(0..($f->{numparms}-1))
1293                         {
1294                                 die "Out of range parm_size[$_] in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1295                                         unless { 0 => 1, 1 => 1, 3 => 1 }->{$f->{parm_size}[$_]};
1296                                 $totalparms += $f->{parm_size}[$_];
1297                         }
1298                         die "Out of range parms in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1299                                 if $f->{parm_start} + $totalparms > @{$p{globals}};
1300                         die "More parms than locals in function $_ (name: \"$name\", file: \"$file\", first statement: $f->{first_statement})"
1301                                 if $totalparms > $f->{locals};
1302                 }
1303         }
1304
1305         print STDERR "Range checking statements...\n";
1306         for my $ip(0 .. (@{$p{statements}}-1))
1307         {
1308                 my $s = $p{statements}[$ip];
1309                 my $c = checkop $s->{op};
1310
1311                 for(qw(a b c))
1312                 {
1313                         my $type = $c->{$_};
1314                         next
1315                                 unless defined $type;
1316
1317                         if($type eq 'inglobal' || $type eq 'inglobalfunc')
1318                         {
1319                                 $s->{$_} &= 0xFFFF;
1320                                 die "Out of range global offset in statement $ip - cannot continue"
1321                                         if $s->{$_} >= @{$p{globals}};
1322                         }
1323                         elsif($type eq 'inglobalvec')
1324                         {
1325                                 $s->{$_} &= 0xFFFF;
1326                                 if($c->{isreturn})
1327                                 {
1328                                         die "Out of range global offset in statement $ip - cannot continue"
1329                                                 if $s->{$_} >= @{$p{globals}};
1330                                         print "Potentially out of range global offset in statement $ip - may crash engines"
1331                                                 if $s->{$_} >= @{$p{globals}}-2;
1332                                 }
1333                                 else
1334                                 {
1335                                         die "Out of range global offset in statement $ip - cannot continue"
1336                                                 if $s->{$_} >= @{$p{globals}}-2;
1337                                 }
1338                         }
1339                         elsif($type eq 'outglobal')
1340                         {
1341                                 $s->{$_} &= 0xFFFF;
1342                                 die "Out of range global offset in statement $ip - cannot continue"
1343                                         if $s->{$_} >= @{$p{globals}};
1344                         }
1345                         elsif($type eq 'outglobalvec')
1346                         {
1347                                 $s->{$_} &= 0xFFFF;
1348                                 die "Out of range global offset in statement $ip - cannot continue"
1349                                         if $s->{$_} >= @{$p{globals}}-2;
1350                         }
1351                         elsif($type eq 'ipoffset')
1352                         {
1353                                 die "Out of range GOTO/IF/IFNOT in statement $ip - cannot continue"
1354                                         if $ip + $s->{$_} < 0 || $ip + $s->{$_} >= @{$p{statements}};
1355                         }
1356                 }
1357         }
1358
1359         print STDERR "Looking for error()...\n";
1360         $p{error_func} = {};
1361         for(@{$p{globaldefs}})
1362         {
1363                 next
1364                         if $p{getstring}($_->{s_name}) ne 'error';
1365                 my $v = $p{globals}[$_->{ofs}]{v}{int};
1366                 next
1367                         if $v <= 0 || $v >= @{$p{functions}};
1368                 my $first = $p{functions}[$v]{first_statement};
1369                 next
1370                         if $first >= 0;
1371                 print STDERR "Detected error() at offset $_->{ofs} (builtin #@{[-$first]})\n";
1372                 $p{error_func}{$_->{ofs}} = 1;
1373         }
1374
1375         print STDERR "Scanning functions...\n";
1376         for(@{$p{functions}})
1377         {
1378                 my $file = $p{getstring}->($_->{s_file});
1379                 my $name = $p{getstring}->($_->{s_name});
1380                 $name = "$file:$name"
1381                         if length $file;
1382                 $_->{debugname} = $name;
1383
1384                 next
1385                         if $_->{first_statement} < 0;
1386
1387                 my %statements = ();
1388                 my %come_from = ();
1389                 my %go_to = ();
1390                 my %globals_read = ();
1391                 my %globals_written = ();
1392                 my %globals_used = ();
1393
1394                 if($_->{first_statement} >= 0)
1395                 {
1396                         run_nfa \%p, $_->{first_statement}, "", id, nfa_default_state_checker,
1397                                 sub
1398                                 {
1399                                         my ($ip, $state, $s, $c) = @_;
1400                                         ++$statements{$ip};
1401
1402                                         if(my $j = $c->{isjump})
1403                                         {
1404                                                 my $t = $ip + $s->{$j};
1405                                                 $come_from{$t}{$ip} = $c->{isconditional};
1406                                                 $go_to{$ip}{$t} = $c->{isconditional};
1407                                         }
1408
1409                                         for my $o(qw(a b c))
1410                                         {
1411                                                 my $type = $c->{$o}
1412                                                         or next;
1413                                                 my $ofs = $s->{$o};
1414
1415                                                 my $read = sub
1416                                                 {
1417                                                         my ($ofs) = @_;
1418                                                         $globals_read{$ofs}{$ip}{$o} = 1;
1419                                                         $globals_used{$ofs} = 1;
1420                                                 };
1421                                                 my $write = sub
1422                                                 {
1423                                                         my ($ofs) = @_;
1424                                                         $globals_written{$ofs}{$ip}{$o} = 1;
1425                                                         $globals_used{$ofs} = 1;
1426                                                 };
1427
1428                                                 if($type eq 'inglobal' || $type eq 'inglobalfunc')
1429                                                 {
1430                                                         $read->($ofs);
1431                                                 }
1432                                                 elsif($type eq 'inglobalvec')
1433                                                 {
1434                                                         $read->($ofs);
1435                                                         $read->($ofs+1);
1436                                                         $read->($ofs+2);
1437                                                 }
1438                                                 elsif($type eq 'outglobal')
1439                                                 {
1440                                                         $write->($ofs);
1441                                                 }
1442                                                 elsif($type eq 'outglobalvec')
1443                                                 {
1444                                                         $write->($ofs);
1445                                                         $write->($ofs+1);
1446                                                         $write->($ofs+2);
1447                                                 }
1448                                         }
1449
1450                                         return 0;
1451                                 };
1452                 }
1453
1454                 $_->{statements} = \%statements;
1455                 $_->{come_from} = \%come_from;
1456                 $_->{go_to} = \%go_to;
1457                 $_->{globals_read} = \%globals_read;
1458                 $_->{globals_written} = \%globals_written;
1459                 $_->{globals_used} = \%globals_used;
1460
1461                 # using this info, we could now identify basic blocks
1462         }
1463
1464         print STDERR "Detecting constants and temps, and naming...\n";
1465         detect_constants \%p;
1466
1467         if($ENV{DUMP})
1468         {
1469                 use Data::Dumper;
1470                 print Dumper \%p;
1471                 return;
1472         }
1473
1474         # what do we want to do?
1475         my $checkfunc = \&find_uninitialized_locals;
1476         if($ENV{DISASSEMBLE})
1477         {
1478                 $checkfunc = \&disassemble_function;
1479         }
1480         for(sort { $a->{debugname} cmp $b->{debugname} } @{$p{functions}})
1481         {
1482                 $checkfunc->(\%p, $_);
1483         }
1484 }
1485
1486 for my $progs (@ARGV) {
1487         my $lno = "$progs.lno";
1488         $lno =~ s/\.dat\.lno$/.lno/;
1489
1490         open my $fh, '<', $progs
1491                 or die "$progs: $!";
1492
1493         open my $lnofh, '<', $lno
1494                 or warn "$lno: $!";
1495
1496         parse_progs $fh, $lnofh;
1497 }