118 lines
2.7 KiB
C
118 lines
2.7 KiB
C
// RUN: %clang_cc1 -analyze -analyzer-checker=core,debug.ExprInspection -verify %s
|
|
|
|
void clang_analyzer_eval(int);
|
|
void clang_analyzer_checkInlined(int);
|
|
|
|
int test1_f1() {
|
|
int y = 1;
|
|
y++;
|
|
clang_analyzer_checkInlined(1); // expected-warning{{TRUE}}
|
|
return y;
|
|
}
|
|
|
|
void test1_f2() {
|
|
int x = 1;
|
|
x = test1_f1();
|
|
if (x == 1) {
|
|
int *p = 0;
|
|
*p = 3; // no-warning
|
|
}
|
|
if (x == 2) {
|
|
int *p = 0;
|
|
*p = 3; // expected-warning{{Dereference of null pointer (loaded from variable 'p')}}
|
|
}
|
|
}
|
|
|
|
// Test that inlining works when the declared function has less arguments
|
|
// than the actual number in the declaration.
|
|
void test2_f1() {}
|
|
int test2_f2();
|
|
|
|
void test2_f3() {
|
|
test2_f1(test2_f2()); // expected-warning{{too many arguments in call to 'test2_f1'}}
|
|
}
|
|
|
|
// Test that inlining works with recursive functions.
|
|
|
|
unsigned factorial(unsigned x) {
|
|
if (x <= 1)
|
|
return 1;
|
|
return x * factorial(x - 1);
|
|
}
|
|
|
|
void test_factorial() {
|
|
if (factorial(3) == 6) {
|
|
int *p = 0;
|
|
*p = 0xDEADBEEF; // expected-warning {{null}}
|
|
}
|
|
else {
|
|
int *p = 0;
|
|
*p = 0xDEADBEEF; // no-warning
|
|
}
|
|
}
|
|
|
|
void test_factorial_2() {
|
|
unsigned x = factorial(3);
|
|
if (x == factorial(3)) {
|
|
int *p = 0;
|
|
*p = 0xDEADBEEF; // expected-warning {{null}}
|
|
}
|
|
else {
|
|
int *p = 0;
|
|
*p = 0xDEADBEEF; // no-warning
|
|
}
|
|
}
|
|
|
|
// Test that returning stack memory from a parent stack frame does
|
|
// not trigger a warning.
|
|
static char *return_buf(char *buf) {
|
|
return buf + 10;
|
|
}
|
|
|
|
void test_return_stack_memory_ok() {
|
|
char stack_buf[100];
|
|
char *pos = return_buf(stack_buf);
|
|
(void) pos;
|
|
}
|
|
|
|
char *test_return_stack_memory_bad() {
|
|
char stack_buf[100];
|
|
char *x = stack_buf;
|
|
return x; // expected-warning {{stack memory associated}}
|
|
}
|
|
|
|
// Test that passing a struct value with an uninitialized field does
|
|
// not trigger a warning if we are inlining and the body is available.
|
|
struct rdar10977037 { int x, y; };
|
|
int test_rdar10977037_aux(struct rdar10977037 v) { return v.y; }
|
|
int test_rdar10977037_aux_2(struct rdar10977037 v);
|
|
int test_rdar10977037() {
|
|
struct rdar10977037 v;
|
|
v.y = 1;
|
|
v. y += test_rdar10977037_aux(v); // no-warning
|
|
return test_rdar10977037_aux_2(v); // expected-warning {{Passed-by-value struct argument contains uninitialized data}}
|
|
}
|
|
|
|
|
|
// Test inlining a forward-declared function.
|
|
// This regressed when CallEvent was first introduced.
|
|
int plus1(int x);
|
|
void test() {
|
|
clang_analyzer_eval(plus1(2) == 3); // expected-warning{{TRUE}}
|
|
}
|
|
|
|
int plus1(int x) {
|
|
return x + 1;
|
|
}
|
|
|
|
|
|
void never_called_by_anyone() {
|
|
clang_analyzer_checkInlined(0); // no-warning
|
|
}
|
|
|
|
|
|
void knr_one_argument(a) int a; { }
|
|
|
|
void call_with_less_arguments() {
|
|
knr_one_argument(); // expected-warning{{too few arguments}} expected-warning{{Function taking 1 argument}}
|
|
}
|