1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
// RUN: %clang_analyze_cc1 -verify %s \
// RUN: -analyzer-checker=core,alpha.unix.cstring \
// RUN: -analyzer-output=text
#include "Inputs/system-header-simulator.h"
// Inspired by a report on ffmpeg, libavcodec/tiertexseqv.c, seq_decode_op1().
int coin();
void maybeWrite(const char *src, unsigned size, int *dst) {
if (coin()) // expected-note{{Assuming the condition is false}}
// expected-note@-1{{Taking false branch}}
memcpy(dst, src, size);
} // expected-note{{Returning without writing to '*dst'}}
void returning_without_writing_to_memcpy(const char *src, unsigned size) {
int block[8 * 8]; // expected-note{{'block' initialized here}}
// expected-note@+1{{Calling 'maybeWrite'}}
maybeWrite(src, size, block); // expected-note{{Returning from 'maybeWrite'}}
int buf[8 * 8];
memcpy(buf, &block[0], 8); // expected-warning{{The first element of the 2nd argument is undefined [alpha.unix.cstring.UninitializedRead]}}
// expected-note@-1{{The first element of the 2nd argument is undefined}}
// expected-note@-2{{Other elements might also be undefined}}
}
|
