| // RUN: %clang_cc1 -std=c++11 -Wno-conversion-null -analyze -analyzer-checker=core -analyzer-store region -verify %s |
| |
| // test to see if nullptr is detected as a null pointer |
| void foo1(void) { |
| char *np = nullptr; |
| *np = 0; // expected-warning{{Dereference of null pointer}} |
| } |
| |
| // check if comparing nullptr to nullptr is detected properly |
| void foo2(void) { |
| char *np1 = nullptr; |
| char *np2 = np1; |
| char c; |
| if (np1 == np2) |
| np1 = &c; |
| *np1 = 0; // no-warning |
| } |
| |
| // invoving a nullptr in a more complex operation should be cause a warning |
| void foo3(void) { |
| struct foo { |
| int a, f; |
| }; |
| char *np = nullptr; |
| // casting a nullptr to anything should be caught eventually |
| int *ip = &(((struct foo *)np)->f); |
| *ip = 0; // expected-warning{{Dereference of null pointer}} |
| // should be error here too, but analysis gets stopped |
| // *np = 0; |
| } |
| |
| // nullptr is implemented as a zero integer value, so should be able to compare |
| void foo4(void) { |
| char *np = nullptr; |
| if (np != 0) |
| *np = 0; // no-warning |
| char *cp = 0; |
| if (np != cp) |
| *np = 0; // no-warning |
| } |
| |
| int pr10372(void *& x) { |
| // GNU null is a pointer-sized integer, not a pointer. |
| x = __null; |
| // This used to crash. |
| return __null; |
| } |
| |
| void zoo1() { |
| char **p = 0; |
| delete *(p + 0); // expected-warning{{Dereference of null pointer}} |
| } |
| |
| void zoo2() { |
| int **a = 0; |
| int **b = 0; |
| asm ("nop" |
| :"=r"(*a) |
| :"0"(*b) // expected-warning{{Dereference of null pointer}} |
| ); |
| } |
| |
| int exprWithCleanups() { |
| struct S { |
| S(int a):a(a){} |
| ~S() {} |
| |
| int a; |
| }; |
| |
| int *x = 0; |
| return S(*x).a; // expected-warning{{Dereference of null pointer}} |
| } |
| |
| int materializeTempExpr() { |
| int *n = 0; |
| struct S { |
| int a; |
| S(int i): a(i) {} |
| }; |
| const S &s = S(*n); // expected-warning{{Dereference of null pointer}} |
| return s.a; |
| } |