Ted Kremenek | a7ac944 | 2009-01-22 20:27:48 +0000 | [diff] [blame^] | 1 | // RUN: clang -analyze -checker-simple -analyzer-store-basic -verify %s && |
2 | // RUN: clang -analyze -checker-cfref -analyzer-store-basic -verify %s && | ||||
3 | // RUN: clang -analyze -checker-cfref -analyzer-store-region -verify %s | ||||
Zhongxing Xu | ef8b28e | 2008-10-17 05:19:52 +0000 | [diff] [blame] | 4 | |
Zhongxing Xu | 72e1682 | 2008-10-24 08:51:58 +0000 | [diff] [blame] | 5 | struct s { |
6 | int data; | ||||
7 | int data_array[10]; | ||||
8 | }; | ||||
Zhongxing Xu | ef8b28e | 2008-10-17 05:19:52 +0000 | [diff] [blame] | 9 | |
Zhongxing Xu | 234a7d2 | 2008-10-27 09:19:25 +0000 | [diff] [blame] | 10 | typedef struct { |
11 | int data; | ||||
12 | } STYPE; | ||||
13 | |||||
Zhongxing Xu | 04b90bc | 2008-11-02 13:17:44 +0000 | [diff] [blame] | 14 | void g1(struct s* p); |
15 | |||||
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 16 | // Array to pointer conversion. Array in the struct field. |
Zhongxing Xu | ef8b28e | 2008-10-17 05:19:52 +0000 | [diff] [blame] | 17 | void f(void) { |
18 | int a[10]; | ||||
19 | int (*p)[10]; | ||||
20 | p = &a; | ||||
21 | (*p)[3] = 1; | ||||
22 | |||||
23 | struct s d; | ||||
24 | struct s *q; | ||||
25 | q = &d; | ||||
Zhongxing Xu | 72e1682 | 2008-10-24 08:51:58 +0000 | [diff] [blame] | 26 | q->data = 3; |
27 | d.data_array[9] = 17; | ||||
Zhongxing Xu | ef8b28e | 2008-10-17 05:19:52 +0000 | [diff] [blame] | 28 | } |
Zhongxing Xu | 2e97120 | 2008-10-25 14:11:23 +0000 | [diff] [blame] | 29 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 30 | // StringLiteral in lvalue context and pointer to array type. |
31 | // p: ElementRegion, q: StringRegion | ||||
Zhongxing Xu | 2e97120 | 2008-10-25 14:11:23 +0000 | [diff] [blame] | 32 | void f2() { |
33 | char *p = "/usr/local"; | ||||
34 | char (*q)[4]; | ||||
35 | q = &"abc"; | ||||
36 | } | ||||
Zhongxing Xu | 234a7d2 | 2008-10-27 09:19:25 +0000 | [diff] [blame] | 37 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 38 | // Typedef'ed struct definition. |
Zhongxing Xu | 234a7d2 | 2008-10-27 09:19:25 +0000 | [diff] [blame] | 39 | void f3() { |
40 | STYPE s; | ||||
41 | } | ||||
Zhongxing Xu | df2aa1e | 2008-10-31 10:23:14 +0000 | [diff] [blame] | 42 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 43 | // Initialize array with InitExprList. |
Zhongxing Xu | df2aa1e | 2008-10-31 10:23:14 +0000 | [diff] [blame] | 44 | void f4() { |
45 | int a[] = { 1, 2, 3}; | ||||
46 | int b[3] = { 1, 2 }; | ||||
47 | } | ||||
Zhongxing Xu | 04b90bc | 2008-11-02 13:17:44 +0000 | [diff] [blame] | 48 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 49 | // Struct variable in lvalue context. |
Zhongxing Xu | 5834ed6 | 2009-01-13 01:49:57 +0000 | [diff] [blame] | 50 | // Assign UnknownVal to the whole struct. |
Zhongxing Xu | 04b90bc | 2008-11-02 13:17:44 +0000 | [diff] [blame] | 51 | void f5() { |
52 | struct s data; | ||||
53 | g1(&data); | ||||
54 | } | ||||
Zhongxing Xu | b670133 | 2008-11-13 07:59:15 +0000 | [diff] [blame] | 55 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 56 | // AllocaRegion test. |
Zhongxing Xu | b670133 | 2008-11-13 07:59:15 +0000 | [diff] [blame] | 57 | void f6() { |
58 | char *p; | ||||
59 | p = __builtin_alloca(10); | ||||
60 | p[1] = 'a'; | ||||
61 | } | ||||
Zhongxing Xu | fb75b25 | 2008-11-13 08:44:52 +0000 | [diff] [blame] | 62 | |
63 | struct s2; | ||||
64 | |||||
65 | void g2(struct s2 *p); | ||||
66 | |||||
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 67 | // Incomplete struct pointer used as function argument. |
Zhongxing Xu | fb75b25 | 2008-11-13 08:44:52 +0000 | [diff] [blame] | 68 | void f7() { |
69 | struct s2 *p = __builtin_alloca(10); | ||||
70 | g2(p); | ||||
71 | } | ||||
Zhongxing Xu | 26134a1 | 2008-11-13 09:20:05 +0000 | [diff] [blame] | 72 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 73 | // sizeof() is unsigned while -1 is signed in array index. |
Zhongxing Xu | 26134a1 | 2008-11-13 09:20:05 +0000 | [diff] [blame] | 74 | void f8() { |
75 | int a[10]; | ||||
Zhongxing Xu | 33d7cbf | 2008-11-24 23:45:56 +0000 | [diff] [blame] | 76 | a[sizeof(a)/sizeof(int) - 1] = 1; // no-warning |
Zhongxing Xu | 26134a1 | 2008-11-13 09:20:05 +0000 | [diff] [blame] | 77 | } |
Zhongxing Xu | 617ff31 | 2008-11-18 13:30:46 +0000 | [diff] [blame] | 78 | |
Zhongxing Xu | 661fc39 | 2008-11-25 01:45:11 +0000 | [diff] [blame] | 79 | // Initialization of struct array elements. |
Zhongxing Xu | 617ff31 | 2008-11-18 13:30:46 +0000 | [diff] [blame] | 80 | void f9() { |
81 | struct s a[10]; | ||||
82 | } | ||||
Zhongxing Xu | 27cae9e | 2008-11-30 05:51:19 +0000 | [diff] [blame] | 83 | |
84 | // Initializing array with string literal. | ||||
85 | void f10() { | ||||
86 | char a1[4] = "abc"; | ||||
Zhongxing Xu | 27cae9e | 2008-11-30 05:51:19 +0000 | [diff] [blame] | 87 | char a3[6] = "abc"; |
88 | } |