File: deref-track-symbolic-region.cpp

package info (click to toggle)
llvm-toolchain-19 1%3A19.1.7-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 1,998,520 kB
  • sloc: cpp: 6,951,680; ansic: 1,486,157; asm: 913,598; python: 232,024; f90: 80,126; objc: 75,281; lisp: 37,276; pascal: 16,990; sh: 10,009; ml: 5,058; perl: 4,724; awk: 3,523; makefile: 3,167; javascript: 2,504; xml: 892; fortran: 664; cs: 573
file content (74 lines) | stat: -rw-r--r-- 3,544 bytes parent folder | download | duplicates (8)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
// RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-output=text -verify %s

struct S {
  int *x;
  int y;
};

S &getSomeReference();
void test(S *p) {
  S &r = *p;   //expected-note {{'r' initialized here}}
  if (p) return;
               //expected-note@-1{{Taking false branch}}
               //expected-note@-2{{Assuming 'p' is null}}
  r.y = 5; // expected-warning {{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
           // expected-note@-1{{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
}

void testRefParam(int *ptr) {
	int &ref = *ptr; // expected-note {{'ref' initialized here}}
	if (ptr)
    // expected-note@-1{{Assuming 'ptr' is null}}
    // expected-note@-2{{Taking false branch}}
		return;

	extern void use(int &ref);
	use(ref); // expected-warning{{Forming reference to null pointer}}
            // expected-note@-1{{Forming reference to null pointer}}
}

int testRefToNullPtr() {
  int *p = 0;         // expected-note {{'p' initialized to a null pointer value}}
  int *const &p2 = p; // expected-note{{'p2' initialized here}}
  int *p3 = p2;       // expected-note {{'p3' initialized to a null pointer value}}
  return *p3;         // expected-warning {{Dereference of null pointer}}
                      // expected-note@-1{{Dereference of null pointer}}
}

int testRefToNullPtr2() {
  int *p = 0;         // expected-note {{'p' initialized to a null pointer value}}
  int *const &p2 = p; // expected-note{{'p2' initialized here}}
  return *p2;         //expected-warning {{Dereference of null pointer}}
                      // expected-note@-1{{Dereference of null pointer}}
}

void testMemberNullPointerDeref() {
  struct Wrapper {char c; int *ptr; };  
  Wrapper w = {'a', nullptr};           // expected-note {{'w.ptr' initialized to a null pointer value}}
  *w.ptr = 1;                           //expected-warning {{Dereference of null pointer}}
                                        // expected-note@-1{{Dereference of null pointer}}
}

void testMemberNullReferenceDeref() {
  struct Wrapper {char c; int &ref; };
  Wrapper w = {.c = 'a', .ref = *(int *)0 }; // expected-note {{'w.ref' initialized to a null pointer value}}
                                             // expected-warning@-1 {{binding dereferenced null pointer to reference has undefined behavior}}
  w.ref = 1;                                 //expected-warning {{Dereference of null pointer}}
                                             // expected-note@-1{{Dereference of null pointer}}
}

void testReferenceToPointerWithNullptr() {
  int *i = nullptr;                   // expected-note {{'i' initialized to a null pointer value}}
  struct Wrapper {char c; int *&a;};
  Wrapper w {'c', i};                 // expected-note{{'w.a' initialized here}}
  *(w.a) = 25;                        // expected-warning {{Dereference of null pointer}}
                                      // expected-note@-1 {{Dereference of null pointer}}
}

void testNullReferenceToPointer() {
  struct Wrapper {char c; int *&a;};
  Wrapper w {'c', *(int **)0 };           // expected-note{{'w.a' initialized to a null pointer value}}
                                          // expected-warning@-1 {{binding dereferenced null pointer to reference has undefined behavior}}
  w.a = nullptr;                          // expected-warning {{Dereference of null pointer}}
                                          // expected-note@-1 {{Dereference of null pointer}}
}