1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
// RUN: %clang_analyze_cc1 -analyzer-checker=alpha.webkit.UncountedCallArgsChecker -verify %s
#include "mock-types.h"
class Base {
public:
void ref();
void deref();
void doWork();
};
class Derived : public Base {
public:
virtual ~Derived();
void ref() const;
void deref() const;
};
class SubDerived final : public Derived {
};
class OtherObject {
public:
Derived* obj();
Base* base();
};
class String {
};
template<typename Target, typename Source>
inline Target* dynamicDowncast(Source* source)
{
return static_cast<Target*>(source);
}
template<typename Target, typename Source>
inline Target* checkedDowncast(Source* source)
{
return static_cast<Target*>(source);
}
template<typename Target, typename Source>
inline Target* uncheckedDowncast(Source* source)
{
return static_cast<Target*>(source);
}
template<typename Target, typename Source>
Target* [[clang::annotate_type("webkit.pointerconversion")]] newCastFunction(Source*);
template<typename Target, typename Source>
Target* [[clang::annotate_type("unrelated-annotation")]] badCastFunction(Source*);
template<typename... Types>
String toString(const Types&... values);
void foo(OtherObject* other)
{
dynamicDowncast<SubDerived>(other->obj());
checkedDowncast<SubDerived>(other->obj());
uncheckedDowncast<SubDerived>(other->obj());
newCastFunction<SubDerived>(other->obj());
badCastFunction<SubDerived>(other->obj());
// expected-warning@-1{{Call argument is uncounted and unsafe}}
toString(other->obj());
}
struct SomeStruct {
Derived* [[clang::annotate_type("webkit.pointerconversion")]] ptrConversion(Base*);
void foo(OtherObject& otherObj) {
RefPtr ptr = otherObj.base();
ptrConversion(ptr.get())->doWork();
}
};
|
