1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s
// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s
extern int coin();
int foo() {
int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
while (coin()) { // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Taking true branch}}
// expected-note@-1 {{Assuming the condition is true}}
return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
// expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
}
return 0;
}
void bar() {
while(coin())
if (coin())
foo();
}
int foo2() {
int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
while (coin()) { // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Taking false branch}}
// expected-note@-1 {{Assuming the condition is false}}
return false;
else
return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
// expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
}
return 0;
}
void bar2() {
while(coin()) // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Assuming the condition is false}}
// expected-note@-1 {{Taking false branch}}
return;
else
foo(); // expected-note{{Calling 'foo'}}
}
|
