blob: fb6b2089f078f68fe7cffabdd4cf65a5b5a02829 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
// RUN: clang -checker-simple -verify %s
#include<stdint.h>
#include <assert.h>
void f1(int *p) {
if (p) *p = 1;
else *p = 0; // expected-warning{{ereference}}
}
struct foo_struct {
int x;
};
int f2(struct foo_struct* p) {
if (p)
p->x = 1;
return p->x++; // expected-warning{{Dereference of null pointer.}}
}
int f3(char* x) {
int i = 2;
if (x)
return x[i - 1];
return x[i+1]; // expected-warning{{Dereference of null pointer.}}
}
int f3_b(char* x) {
int i = 2;
if (x)
return x[i - 1];
return x[i+1]++; // expected-warning{{Dereference of null pointer.}}
}
int f4(int *p) {
uintptr_t x = (uintptr_t) p;
if (x)
return 1;
int *q = (int*) x;
return *q; // expected-warning{{Dereference of null pointer.}}
}
int f5() {
char *s = "hello world";
return s[0]; // no-warning
}
int bar(int* p, int q) __attribute__((nonnull));
int f6(int *p) {
return !p ? bar(p, 1) // expected-warning {{Null pointer passed as an argument to a 'nonnull' parameter}}
: bar(p, 0); // no-warning
}
int* qux();
int f7(int x) {
int* p = 0;
if (0 == x)
p = qux();
if (0 == x)
*p = 1; // no-warning
return x;
}
int f8(int *p, int *q) {
if (!p)
if (p)
*p = 1; // no-warning
if (q)
if (!q)
*q = 1; // no-warning
}
int* qux();
int f9(int len) {
assert (len != 0);
int *p = 0;
for (int i = 0; i < len; ++i)
p = qux(i);
return *p++; // no-warning
}
|
