1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
// RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection %s -analyzer-store=region -verify
void clang_analyzer_eval(int);
unsigned foo();
typedef struct bf { unsigned x:2; } bf;
void bar() {
bf y;
*(unsigned*)&y = foo();
y.x = 1;
}
struct s {
int n;
};
void f() {
struct s a;
int *p = &(a.n) + 1; // expected-warning{{Pointer arithmetic on}}
}
typedef struct {
int x,y;
} Point;
Point getit(void);
void test() {
Point p;
(void)(p = getit()).x;
}
#define true ((bool)1)
#define false ((bool)0)
typedef _Bool bool;
void testLazyCompoundVal() {
Point p = {42, 0};
Point q;
clang_analyzer_eval((q = p).x == 42); // expected-warning{{TRUE}}
clang_analyzer_eval(q.x == 42); // expected-warning{{TRUE}}
}
struct Bits {
unsigned a : 1;
unsigned b : 2;
unsigned c : 1;
bool x;
struct InnerBits {
bool y;
unsigned d : 16;
unsigned e : 6;
unsigned f : 2;
} inner;
};
void testBitfields() {
struct Bits bits;
if (foo() && bits.b) // expected-warning {{garbage}}
return;
if (foo() && bits.inner.e) // expected-warning {{garbage}}
return;
bits.c = 1;
clang_analyzer_eval(bits.c == 1); // expected-warning {{TRUE}}
if (foo() && bits.b) // expected-warning {{garbage}}
return;
if (foo() && bits.x) // expected-warning {{garbage}}
return;
bits.x = true;
clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}}
bits.b = 2;
clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}}
if (foo() && bits.c) // no-warning
return;
bits.inner.e = 50;
if (foo() && bits.inner.e) // no-warning
return;
if (foo() && bits.inner.y) // expected-warning {{garbage}}
return;
if (foo() && bits.inner.f) // expected-warning {{garbage}}
return;
extern struct InnerBits getInner();
bits.inner = getInner();
if (foo() && bits.inner.e) // no-warning
return;
if (foo() && bits.inner.y) // no-warning
return;
if (foo() && bits.inner.f) // no-warning
return;
bits.inner.f = 1;
if (foo() && bits.inner.e) // no-warning
return;
if (foo() && bits.inner.y) // no-warning
return;
if (foo() && bits.inner.f) // no-warning
return;
if (foo() && bits.a) // expected-warning {{garbage}}
return;
}
//-----------------------------------------------------------------------------
// Incorrect behavior
//-----------------------------------------------------------------------------
void testTruncation() {
struct Bits bits;
bits.c = 0x11; // expected-warning{{implicit truncation}}
// FIXME: We don't model truncation of bitfields.
clang_analyzer_eval(bits.c == 1); // expected-warning {{FALSE}}
}
|
