1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
// RUN: %clang_analyze_cc1 -triple x86_64-unknown-unknown -verify %s \
// RUN: -analyzer-checker=core,debug.ExprInspection
template <typename T> void clang_analyzer_dump(T);
using size_t = decltype(sizeof(int));
__attribute__((always_inline)) static inline constexpr unsigned int _castf32_u32(float __A) {
return __builtin_bit_cast(unsigned int, __A); // no-warning
}
void test(int i) {
_castf32_u32(42);
float f = 42;
// Loading from a floating point value results in unknown,
// which later materializes as a conjured value.
auto g = __builtin_bit_cast(unsigned int, f);
clang_analyzer_dump(g);
// expected-warning-re@-1 {{{{^conj_\$[0-9]+{unsigned int,}}}}
auto g2 = __builtin_bit_cast(unsigned int, 42.0f);
clang_analyzer_dump(g2);
// expected-warning-re@-1 {{{{^conj_\$[0-9]+{unsigned int,}}}}
auto g3 = __builtin_bit_cast(unsigned int, i);
clang_analyzer_dump(g3);
// expected-warning-re@-1 {{{{^reg_\$[0-9]+<int i>}}}}
auto g4 = __builtin_bit_cast(unsigned long, &i);
clang_analyzer_dump(g4);
// expected-warning@-1 {{&i [as 64 bit integer]}}
}
struct A {
int n;
void set(int x) {
n = x;
}
};
void gh_69922(size_t p) {
// expected-warning-re@+1 {{(reg_${{[0-9]+}}<size_t p>) & 1U}}
clang_analyzer_dump(__builtin_bit_cast(A*, p & 1));
__builtin_bit_cast(A*, p & 1)->set(2); // no-crash
// However, since the `this` pointer is expected to be a Loc, but we have
// NonLoc there, we simply give up and resolve it as `Unknown`.
// Then, inside the `set()` member function call we can't evaluate the
// store to the member variable `n`.
clang_analyzer_dump(__builtin_bit_cast(A*, p & 1)->n); // Ideally, this should print "2".
// expected-warning-re@-1 {{(reg_${{[0-9]+}}<size_t p>) & 1U}}
}
|
