Skip to content
Open
Show file tree
Hide file tree
Changes from 26 commits
Commits
Show all changes
37 commits
Select commit Hold shift + click to select a range
a1e4bb8
WIP
msridhar Jan 29, 2026
22fb655
test case
msridhar Feb 6, 2026
e86b344
tweak test
msridhar Feb 6, 2026
81f952c
better tests
msridhar Feb 6, 2026
03ce931
WIP
msridhar Feb 6, 2026
dfba3e5
docs
msridhar Feb 6, 2026
fdf01ee
WIP
msridhar Feb 6, 2026
4446516
simplify
msridhar Feb 6, 2026
dc3a227
more
msridhar Feb 6, 2026
471701d
simplify
msridhar Feb 6, 2026
aea98ae
simplify
msridhar Feb 6, 2026
0e2df18
reuse helper method
msridhar Feb 6, 2026
e607850
bug fix
msridhar Feb 6, 2026
d1636f7
fix nested constructors
msridhar Feb 7, 2026
c6c1e9a
fix diagnostic message
msridhar Feb 7, 2026
68ad56d
simplify
msridhar Feb 7, 2026
02d32b6
small fix
msridhar Feb 8, 2026
ec32f89
another fix
msridhar Feb 8, 2026
bae860f
Merge branch 'master' into issue-1451
msridhar Feb 8, 2026
e1d8386
Merge branch 'master' into issue-1451
msridhar Feb 14, 2026
89bb268
failing test
msridhar Feb 14, 2026
36ac60c
test fix
msridhar Feb 14, 2026
65fc519
tweaks
msridhar Feb 14, 2026
2454efd
docs
msridhar Feb 15, 2026
df8f89e
add issue links
msridhar Feb 15, 2026
82e633e
remove unnecessary code
msridhar Feb 15, 2026
319f453
more coderabbit comments
msridhar Feb 15, 2026
1374e89
Merge branch 'master' into issue-1451
msridhar Feb 17, 2026
4babffe
test of Void without @Nullable
msridhar Feb 18, 2026
78501f2
extract helper to check for raw types and use for NewClassTrees
msridhar Feb 18, 2026
2c50426
add tracking issue
msridhar Feb 18, 2026
95ee81d
add another link to issue
msridhar Feb 18, 2026
39898d7
tweak comment
msridhar Feb 18, 2026
bfd95f7
get rid of withPathToSubtree
msridhar Feb 19, 2026
d50bf7b
WIP
msridhar Feb 19, 2026
bc76012
fixes
msridhar Feb 19, 2026
2883e5a
add case and TODO for ConditionalExpressionTree
msridhar Feb 19, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
214 changes: 191 additions & 23 deletions nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@
import com.sun.source.tree.Tree;
import com.sun.source.tree.VariableTree;
import com.sun.source.util.TreePath;
import com.sun.source.util.TreePathScanner;
import com.sun.source.util.TreeScanner;
import com.sun.tools.javac.code.Attribute;
import com.sun.tools.javac.code.Symbol;
Expand All @@ -36,6 +37,7 @@
import com.sun.tools.javac.code.Type;
import com.sun.tools.javac.code.Types;
import com.sun.tools.javac.tree.JCTree;
import com.sun.tools.javac.tree.TreeInfo;
import com.sun.tools.javac.util.Name;
import com.sun.tools.javac.util.Names;
import com.uber.nullaway.CodeAnnotationInfo;
Expand Down Expand Up @@ -434,14 +436,26 @@ private void reportInvalidOverridingMethodParamTypeError(
}
return result;
}
if (tree instanceof NewClassTree
&& ((NewClassTree) tree).getIdentifier() instanceof ParameterizedTypeTree paramTypedTree) {
if (paramTypedTree.getTypeArguments().isEmpty()) {
// diamond operator, which we do not yet support; for now, return null
// TODO: support diamond operators
return null;
if (tree instanceof NewClassTree newClassTree) {
if (TreeInfo.isDiamond((JCTree) newClassTree)) {
if (newClassTree.getClassBody() != null) {
// Keep existing behavior for diamond anonymous classes, which are not yet fully
// supported.
return null;
}
// For constructor calls using diamond operator, infer from assignment context.
// TODO handle diamond constructor calls passed to generic methods
// https://github.com/uber/NullAway/issues/1470
Type fromAssignmentContext = getDiamondTypeFromContext(newClassTree, state);
if (fromAssignmentContext != null) {
return fromAssignmentContext;
}
}
return typeWithPreservedAnnotations(paramTypedTree);
if (newClassTree.getIdentifier() instanceof ParameterizedTypeTree paramTypedTree
&& !paramTypedTree.getTypeArguments().isEmpty()) {
return typeWithPreservedAnnotations(paramTypedTree);
}
return ASTHelpers.getType(tree);
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is this last case? Just new without either generics or a diamond operator, right? Do we need any of the handling we have below for raw types or that's only relevant to invocations that aren't new ...?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point! We had tests for raw constructor invocations that passed without any checking here (probably due to defensive checking for raw types elsewhere). But better to be consistent; fixed in 78501f2 (and added a related helper function)

} else if (tree instanceof NewArrayTree
&& ((NewArrayTree) tree).getType() instanceof AnnotatedTypeTree) {
return typeWithPreservedAnnotations(tree);
Expand Down Expand Up @@ -522,6 +536,149 @@ private void reportInvalidOverridingMethodParamTypeError(
}
}

/**
* Gets the type of a constructor call using a diamond operator from its assignment context, if
* available.
*/
private @Nullable Type getDiamondTypeFromContext(NewClassTree tree, VisitorState state) {
TreePath treePath = findPathToSubtree(state.getPath(), tree);
if (treePath == null) {
return null;
}
return getDiamondTypeFromParentContext(tree, state, castToNonNull(treePath.getParentPath()));
}

/**
* Computes the assignment-context type for an inferred constructor call, given a path to its
* parent context.
*/
private @Nullable Type getDiamondTypeFromParentContext(
NewClassTree tree, VisitorState state, TreePath parentPath) {
Tree parent = parentPath.getLeaf();
while (parent instanceof ParenthesizedTree) {
parentPath = parentPath.getParentPath();
if (parentPath == null) {
return null;
}
parent = parentPath.getLeaf();
}
if (parent instanceof VariableTree || parent instanceof AssignmentTree) {
return getTreeType(parent, state);
}
if (parent instanceof ReturnTree) {
TreePath enclosingMethodOrLambda =
NullabilityUtil.findEnclosingMethodOrLambdaOrInitializer(parentPath);
if (enclosingMethodOrLambda != null
&& enclosingMethodOrLambda.getLeaf() instanceof MethodTree enclosingMethod) {
Symbol.MethodSymbol methodSymbol = ASTHelpers.getSymbol(enclosingMethod);
if (methodSymbol != null) {
return methodSymbol.getReturnType();
}
}
return null;
}
if (parent instanceof MethodInvocationTree parentInvocation) {
if (isGenericCallNeedingInference(parentInvocation)) {
// TODO support full integration of diamond constructor calls with generic method inference
// for now, just give up and return null
return null;
}
Type methodType = ASTHelpers.getType(parentInvocation.getMethodSelect());
if (methodType == null) {
return null;
}
return getFormalParameterTypeForArgument(parentInvocation, methodType.asMethodType(), tree);
}
if (parent instanceof NewClassTree parentConstructorCall) {
// get the type returned by the parent constructor call
Type parentClassType = getTreeType(parentConstructorCall, state.withPath(parentPath));
if (parentClassType != null) {
Symbol parentCtorSymbol = ASTHelpers.getSymbol(parentConstructorCall);
// get the proper type for the constructor, as a member of the type returned by the
// constructor
Type parentCtorType =
TypeSubstitutionUtils.memberType(
state.getTypes(), parentClassType, parentCtorSymbol, config);
return getFormalParameterTypeForArgument(
parentConstructorCall, parentCtorType.asMethodType(), tree);
}
}
Comment on lines +598 to +611
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Search for ASTHelpers.getSymbol usage with NewClassTree in the codebase
rg -n --type=java 'ASTHelpers\.getSymbol\(' nullaway/src/main/java/ | head -50

Repository: uber/NullAway

Length of output: 7770


🏁 Script executed:

#!/bin/bash
# Check the specific file and surrounding context for how getSymbol is used with NewClassTree
# Also look for other NewClassTree getSymbol usages
rg -n --type=java -B2 -A2 'NewClassTree' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | grep -A5 -B5 'getSymbol'

Repository: uber/NullAway

Length of output: 39


🏁 Script executed:

#!/bin/bash
# Look at the exact context in the file at lines 598-611 and check for null checks
sed -n '590,620p' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java

Repository: uber/NullAway

Length of output: 1324


🏁 Script executed:

#!/bin/bash
# Check TypeSubstitutionUtils.memberType implementation to see if it handles null
rg -n --type=java 'public.*memberType' nullaway/src/main/java/com/uber/nullaway/

Repository: uber/NullAway

Length of output: 218


🏁 Script executed:

#!/bin/bash
# Search for TypeSubstitutionUtils.memberType to understand its signature
rg -n --type=java -A10 'static.*memberType' nullaway/src/main/java/com/uber/nullaway/

Repository: uber/NullAway

Length of output: 1493


🏁 Script executed:

#!/bin/bash
# Check if there are other places in the codebase where getSymbol(NewClassTree) is used
# and how they handle potential null
rg -n --type=java -B3 -A3 'NewClassTree' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | head -100

Repository: uber/NullAway

Length of output: 4962


🏁 Script executed:

#!/bin/bash
# Check the implementation details and null handling in TypeSubstitutionUtils.memberType
cat -n nullaway/src/main/java/com/uber/nullaway/generics/TypeSubstitutionUtils.java | sed -n '67,77p'

Repository: uber/NullAway

Length of output: 690


🏁 Script executed:

#!/bin/bash
# Look for any defensive null checks after getSymbol(NewClassTree) in the codebase
rg -n --type=java -B2 -A5 'NewClassTree.*=' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | grep -A5 'getSymbol'

Repository: uber/NullAway

Length of output: 39


🏁 Script executed:

#!/bin/bash
# Check if there are other instances where getSymbol result from NewClassTree is used
# and whether null checks are applied
rg -n --type=java 'instanceof NewClassTree' nullaway/src/main/java/ -A10 | grep -A10 'getSymbol'

Repository: uber/NullAway

Length of output: 1358


🏁 Script executed:

#!/bin/bash
# Check Error Prone's ASTHelpers documentation or implementation for getSymbol behavior
# First, let's see if there's any documentation in NullAway about this
rg -n --type=java 'getSymbol.*NewClass' nullaway/src/main/java/ -B5 -A10

Repository: uber/NullAway

Length of output: 39


🏁 Script executed:

#!/bin/bash
# Check if there are any null checks or error handling after getSymbol(NewClassTree)
# in the entire codebase
rg -n --type=java 'getSymbol\(' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | grep -A2 -B2 '602'

Repository: uber/NullAway

Length of output: 436


🏁 Script executed:

#!/bin/bash
# Look at how getSymbol is typically used after being called
# Check patterns of null checking around line 522 where memberSelectSymbol is retrieved
sed -n '515,530p' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java

Repository: uber/NullAway

Length of output: 925


🏁 Script executed:

#!/bin/bash
# Let's see the context around line 522 more clearly to confirm null checking pattern
sed -n '520,530p' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java

Repository: uber/NullAway

Length of output: 639


🏁 Script executed:

#!/bin/bash
# Look at how other similar cases handle getSymbol - check line 502 (assignmentTree)
sed -n '500,510p' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java

Repository: uber/NullAway

Length of output: 542


🏁 Script executed:

#!/bin/bash
# Check if there are Error Prone docs or other references about getSymbol nullability
# Let's look for any Nullable annotations on the method
rg -n --type=java '@Nullable.*getSymbol|getSymbol.*@Nullable' nullaway/src/

Repository: uber/NullAway

Length of output: 39


🏁 Script executed:

#!/bin/bash
# Final confirmation: check if there are any explicit null-safety guarantees in Error Prone
# by looking at how other overloads of getSymbol are documented/used in NullAway
rg -n --type=java 'ASTHelpers\.getSymbol\(' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | head -20

Repository: uber/NullAway

Length of output: 1665


🏁 Script executed:

#!/bin/bash
# Check the broader pattern: do all other Symbol assignments from getSymbol have null checks?
rg -n --type=java 'Symbol.*=.*ASTHelpers\.getSymbol' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java | wc -l

Repository: uber/NullAway

Length of output: 59


🏁 Script executed:

#!/bin/bash
# Count how many of these have immediate null checks following them
# Let's look at a few more examples to establish the pattern
sed -n '645,680p' nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java

Repository: uber/NullAway

Length of output: 1860


Add null guard for parentCtorSymbol to prevent potential NPE.

ASTHelpers.getSymbol(parentConstructorCall) can return null. The codebase pattern shows null checks for getSymbol() results on MemberSelectTree (line 522) and AssignmentTree (line 502). If parentCtorSymbol is null, TypeSubstitutionUtils.memberType() at line 606 will dereference sym.type and throw an NPE.

🛡️ Proposed null guard
     if (parent instanceof NewClassTree parentConstructorCall) {
       // get the type returned by the parent constructor call
       Type parentClassType = getTreeType(parentConstructorCall, state.withPath(parentPath));
       if (parentClassType != null) {
         Symbol parentCtorSymbol = ASTHelpers.getSymbol(parentConstructorCall);
+        if (parentCtorSymbol == null) {
+          return null;
+        }
         // get the proper type for the constructor, as a member of the type returned by the
         // constructor
         Type parentCtorType =
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@nullaway/src/main/java/com/uber/nullaway/generics/GenericsChecks.java` around
lines 598 - 611, The block handling parent instanceof NewClassTree must
null-check the constructor symbol: after obtaining Symbol parentCtorSymbol =
ASTHelpers.getSymbol(parentConstructorCall) guard if (parentCtorSymbol == null)
and return/fallback (e.g., return null) instead of calling
TypeSubstitutionUtils.memberType with a null symbol; specifically add the null
check before invoking TypeSubstitutionUtils.memberType and only call
getFormalParameterTypeForArgument(parentConstructorCall,
parentCtorType.asMethodType(), tree) when parentCtorSymbol is non-null.

return null;
}

/** Returns the inferred/declared formal parameter type corresponding to {@code argumentTree}. */
private @Nullable Type getFormalParameterTypeForArgument(
Tree invocationTree, Type.MethodType invocationType, Tree argumentTree) {
AtomicReference<@Nullable Type> formalParamTypeRef = new AtomicReference<>();
new InvocationArguments(invocationTree, invocationType)
.forEach(
(arg, pos, formalParamType, unused) -> {
if (ASTHelpers.stripParentheses(arg) == argumentTree) {
formalParamTypeRef.set(formalParamType);
}
});
return formalParamTypeRef.get();
}

/** Finds the path to {@code target} within {@code rootPath}, or null when not found. */
private static @Nullable TreePath findPathToSubtree(TreePath rootPath, Tree target) {
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same worry here. These sort of traversals, as opposed to keeping the current path in state somehow, is one of the reasons Checker Framework was slower than FBInfer/NullAway in the past, no? I guess this is not a traversal from the compilation unit root, but still feels like a bit of a potential smell.

if (rootPath.getLeaf() == target) {
return rootPath;
}
return new TreePathScanner<@Nullable TreePath, @Nullable TreePath>() {
@Override
public @Nullable TreePath scan(Tree tree, @Nullable TreePath prevPath) {
if (tree == target) {
TreePath currentPath = getCurrentPath();
if (currentPath != null && currentPath.getLeaf() == tree) {
return currentPath;
}
// When overriding scan(), getCurrentPath() can still point at the parent.
return new TreePath(currentPath, tree);
}
return super.scan(tree, null);
}

@Override
public @Nullable TreePath reduce(@Nullable TreePath r1, @Nullable TreePath r2) {
// we should only find the target once, so at most one of r1 and r2 should be non-null
Verify.verify(r1 == null || r2 == null);
return r1 != null ? r1 : r2;
}
}.scan(rootPath, null);
}

/**
* Creates a state whose path points to {@code subtree}, when that subtree is reachable.
*
* @param state the original state with a path to some subtree of the AST
* @param subtree the subtree to find within the original state's path
* @return a state with the same information as the original, but with a path to {@code subtree}
* if it is reachable from the original state's path, or the original state if {@code subtree}
* is not reachable
*/
private static VisitorState withPathToSubtree(VisitorState state, Tree subtree) {
TreePath subtreePath = findPathToSubtree(state.getPath(), subtree);
return subtreePath == null ? state : state.withPath(subtreePath);
}

/**
* Returns true when javac inferred class type arguments for a constructor call, i.e. there are
* instantiated type arguments at the type level, but no explicit non-diamond source type args.
*/
private static boolean hasInferredClassTypeArguments(NewClassTree newClassTree) {
if (newClassTree.getClassBody() != null) {
// we still need to properly handle anonymous classes
return false;
}
if (!TreeInfo.isDiamond((JCTree) newClassTree)) {
// explicit class type arguments in source
return false;
}
Type newClassType = ASTHelpers.getType(newClassTree);
return newClassType != null && !newClassType.getTypeArguments().isEmpty();
}

/**
* Gets the inferred type of lambda parameter, if the lambda was passed to a generic method and
* its type was inferred previously
Expand Down Expand Up @@ -606,7 +763,7 @@ public void checkTypeParameterNullnessForAssignability(Tree tree, VisitorState s
&& isAssignmentToField(tree)) {
maybeStoreLambdaTypeFromTarget(lambdaExpressionTree, lhsType);
}
Type rhsType = getTreeType(rhsTree, state);
Type rhsType = getTreeType(rhsTree, withPathToSubtree(state, rhsTree));
if (rhsType != null) {
if (isGenericCallNeedingInference(rhsTree)) {
rhsType =
Expand Down Expand Up @@ -1124,6 +1281,7 @@ private Type updateTypeWithNullness(
private static boolean isGenericCallNeedingInference(ExpressionTree argument) {
// For now, we only support calls to generic methods.
// TODO also support calls to generic constructors that use the diamond operator
// https://github.com/uber/NullAway/issues/1470
if (argument instanceof MethodInvocationTree methodInvocation) {
Symbol.MethodSymbol methodSymbol = ASTHelpers.getSymbol(methodInvocation);
// true for generic method calls with no explicit type arguments
Expand Down Expand Up @@ -1154,7 +1312,7 @@ public void checkTypeParameterNullnessForFunctionReturnType(
// bail out of any checking involving raw types for now
return;
}
Type returnExpressionType = getTreeType(retExpr, state);
Type returnExpressionType = getTreeType(retExpr, withPathToSubtree(state, retExpr));
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we maintain these paths manually? Should we? I worry that withPathToSubtree is long term a dangerous method to have from a performance standpoint, but not sure exactly how bad maintaining a separate tree-path for each of these use cases would get.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lazaroclapp thanks for pushing me on this. I dug in and rewrote the code so we don't need withPathToSubtree or findPathToSubtree anymore, by maintaining paths manually. In particular, I added a method com.uber.nullaway.NullabilityUtil#stripParensAndUpdateTreePath that both strips parentheses from an expression and also updates a VisitorState to have a path to the nested expression (without the parens).

There might be some unhandled cases, but all the tests pass. In the future we might find another case that needs handling, but we should then augment the manual path construction to do so.

if (returnExpressionType != null) {
if (isGenericCallNeedingInference(retExpr)) {
returnExpressionType =
Expand Down Expand Up @@ -1304,7 +1462,21 @@ public void compareGenericTypeParameterNullabilityForCall(
return;
}
Type invokedMethodType = methodSymbol.type;
Type enclosingType = getEnclosingTypeForCallExpression(methodSymbol, tree, null, state, false);
Type enclosingType = null;
if (tree instanceof NewClassTree newClassTree) {
if (hasInferredClassTypeArguments(newClassTree)) {
TreePath currentPath = state.getPath();
if (currentPath != null && ASTHelpers.stripParentheses(currentPath.getLeaf()) == tree) {
TreePath parentPath = currentPath.getParentPath();
if (parentPath != null) {
enclosingType = getDiamondTypeFromParentContext(newClassTree, state, parentPath);
}
}
}
}
if (enclosingType == null) {
enclosingType = getEnclosingTypeForCallExpression(methodSymbol, tree, null, state, false);
}
if (enclosingType != null) {
invokedMethodType =
TypeSubstitutionUtils.memberType(state.getTypes(), enclosingType, methodSymbol, config);
Expand Down Expand Up @@ -1335,7 +1507,8 @@ public void compareGenericTypeParameterNullabilityForCall(
if (inferredPolyType != null) {
actualParameterType = inferredPolyType;
} else {
actualParameterType = getTreeType(currentActualParam, state);
actualParameterType =
getTreeType(currentActualParam, withPathToSubtree(state, currentActualParam));
}
if (actualParameterType != null) {
if (isGenericCallNeedingInference(currentActualParam)) {
Expand Down Expand Up @@ -1670,16 +1843,11 @@ private InvocationAndContext getInvocationAndContextForInference(
}
// the generic invocation is either a regular parameter to the parent call, or the
// receiver expression
AtomicReference<@Nullable Type> formalParamTypeRef = new AtomicReference<>();
Type type = ASTHelpers.getSymbol(parentInvocation).type;
new InvocationArguments(parentInvocation, type.asMethodType())
.forEach(
(arg, pos, formalParamType, unused) -> {
if (ASTHelpers.stripParentheses(arg) == invocation) {
formalParamTypeRef.set(formalParamType);
}
});
Type formalParamType = formalParamTypeRef.get();
Type formalParamType =
getFormalParameterTypeForArgument(
parentInvocation,
ASTHelpers.getSymbol(parentInvocation).type.asMethodType(),
invocation);
if (formalParamType == null) {
// this can happen if the invocation is the receiver expression of the call, e.g.,
// id(x).foo() (note that foo() need not be generic)
Expand Down Expand Up @@ -1830,14 +1998,14 @@ public Nullness getGenericParameterNullnessAtInvocation(
false,
calledFromDataflow);
} else {
enclosingType = getTreeType(receiver, state);
enclosingType = getTreeType(receiver, withPathToSubtree(state, receiver));
}
}
} else {
Verify.verify(tree instanceof NewClassTree);
// for a constructor invocation, the type from the invocation itself is the "enclosing type"
// for the purposes of determining type arguments
enclosingType = getTreeType(tree, state);
enclosingType = getTreeType(tree, withPathToSubtree(state, tree));
}
return enclosingType;
}
Expand Down
Loading
Loading