blob: 6813b8ebf8d5670ce4e0b8c191ad05c9bb496a5b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
// RUN: %clang_cc1 -analyze -analyzer-checker=core,unix.Malloc,debug.ExprInspection -verify %s
typedef unsigned int NSUInteger;
typedef __typeof__(sizeof(int)) size_t;
void *malloc(size_t);
void *calloc(size_t nmemb, size_t size);
void free(void *);
void clang_analyzer_eval(int);
@interface A
- (NSUInteger)foo;
@end
NSUInteger f8(A* x){
const NSUInteger n = [x foo];
int* bogus;
if (n > 0) { // tests const cast transfer function logic
NSUInteger i;
for (i = 0; i < n; ++i)
bogus = 0;
if (bogus) // no-warning
return n+1;
}
return n;
}
// PR10163 -- don't warn for default-initialized float arrays.
// (An additional test is in uninit-vals-ps-region.m)
void test_PR10163(float);
void PR10163 (void) {
float x[2] = {0};
test_PR10163(x[1]); // no-warning
}
typedef struct {
float x;
float y;
} Point;
typedef struct {
Point origin;
int size;
} Circle;
Point makePoint(float x, float y) {
Point result;
result.x = x;
result.y = y;
return result;
}
void PR14765_test() {
Circle *testObj = calloc(sizeof(Circle), 1);
clang_analyzer_eval(testObj->size == 0); // expected-warning{{TRUE}}
testObj->origin = makePoint(0.0, 0.0);
if (testObj->size > 0) { ; } // warning occurs here
// FIXME: Assigning to 'testObj->origin' kills the default binding for the
// whole region, meaning that we've forgotten that testObj->size should also
// default to 0. Tracked by <rdar://problem/12701038>.
// This should be TRUE.
clang_analyzer_eval(testObj->size == 0); // expected-warning{{UNKNOWN}}
free(testObj);
}
void PR14765_incorrectBehavior(Circle *testObj) {
int oldSize = testObj->size;
clang_analyzer_eval(testObj->size == oldSize); // expected-warning{{TRUE}}
testObj->origin = makePoint(0.0, 0.0);
// FIXME: Assigning to 'testObj->origin' kills the default binding for the
// whole region, meaning that we've forgotten that testObj->size should also
// default to 0. Tracked by <rdar://problem/12701038>.
// This should be TRUE.
clang_analyzer_eval(testObj->size == oldSize); // expected-warning{{UNKNOWN}}
free(testObj);
}
void rdar13292559(Circle input) {
extern void useCircle(Circle);
Circle obj = input;
useCircle(obj); // no-warning
// This generated an "uninitialized 'size' field" warning for a (short) while.
obj.origin = makePoint(0.0, 0.0);
useCircle(obj); // no-warning
}
|