|  | // RUN: %clang_analyze_cc1 -analyzer-checker=core,debug.ExprInspection -verify %s | 
|  |  | 
|  | void clang_analyzer_eval(int); | 
|  |  | 
|  | // There should be no warnings unless otherwise indicated. | 
|  |  | 
|  | void testComparisons (int a) { | 
|  | // Sema can already catch the simple comparison a==a, | 
|  | // since that's usually a logic error (and not path-dependent). | 
|  | int b = a; | 
|  | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} | 
|  | } | 
|  |  | 
|  | void testSelfOperations (int a) { | 
|  | clang_analyzer_eval((a|a) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a&a) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a^a) == 0); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a-a) == 0); // expected-warning{{TRUE}} | 
|  | } | 
|  |  | 
|  | void testIdempotent (int a) { | 
|  | clang_analyzer_eval((a*1) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a/1) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a+0) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a-0) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a<<0) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a>>0) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a^0) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a&(~0)) == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a|0) == a); // expected-warning{{TRUE}} | 
|  | } | 
|  |  | 
|  | void testReductionToConstant (int a) { | 
|  | clang_analyzer_eval((a*0) == 0); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a&0) == 0); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a|(~0)) == (~0)); // expected-warning{{TRUE}} | 
|  | } | 
|  |  | 
|  | void testSymmetricIntSymOperations (int a) { | 
|  | clang_analyzer_eval((2+a) == (a+2)); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((2*a) == (a*2)); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((2&a) == (a&2)); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((2^a) == (a^2)); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((2|a) == (a|2)); // expected-warning{{TRUE}} | 
|  | } | 
|  |  | 
|  | void testAsymmetricIntSymOperations (int a) { | 
|  | clang_analyzer_eval(((~0) >> a) == (~0)); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((0 >> a) == 0); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((0 << a) == 0); // expected-warning{{TRUE}} | 
|  |  | 
|  | // Unsigned right shift shifts in zeroes. | 
|  | clang_analyzer_eval(((~0U) >> a) != (~0U)); // expected-warning{{UNKNOWN}} | 
|  | } | 
|  |  | 
|  | void testLocations (char *a) { | 
|  | char *b = a; | 
|  | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} | 
|  | } | 
|  |  | 
|  | void testMixedTypeComparisons (char a, unsigned long b) { | 
|  | if (a != 0) return; | 
|  | if (b != 0x100) return; | 
|  |  | 
|  | clang_analyzer_eval(a <= b); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval(a != b); // expected-warning{{TRUE}} | 
|  | } | 
|  |  | 
|  | void testBitwiseRules(unsigned int a, int b) { | 
|  | clang_analyzer_eval((a | 1) >= 1); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a | -1) >= -1); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a | 2) >= 2); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a | 5) >= 5); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a | 10) >= 10); // expected-warning{{TRUE}} | 
|  |  | 
|  | // Argument order should not influence this | 
|  | clang_analyzer_eval((1 | a) >= 1); // expected-warning{{TRUE}} | 
|  |  | 
|  | clang_analyzer_eval((a & 1) <= 1); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a & 2) <= 2); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a & 5) <= 5); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a & 10) <= 10); // expected-warning{{TRUE}} | 
|  | clang_analyzer_eval((a & -10) <= 10); // expected-warning{{UNKNOWN}} | 
|  |  | 
|  | // Again, check for different argument order. | 
|  | clang_analyzer_eval((1 & a) <= 1); // expected-warning{{TRUE}} | 
|  |  | 
|  | unsigned int c = a; | 
|  | c |= 1; | 
|  | clang_analyzer_eval((c | 0) == 0); // expected-warning{{FALSE}} | 
|  |  | 
|  | // Rules don't apply to signed typed, as the values might be negative. | 
|  | clang_analyzer_eval((b | 1) > 0); // expected-warning{{UNKNOWN}} | 
|  |  | 
|  | // Even for signed values, bitwise OR with a non-zero is always non-zero. | 
|  | clang_analyzer_eval((b | 1) == 0); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval((b | -2) == 0); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval((b | 10) == 0); // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval((b | 0) == 0); // expected-warning{{UNKNOWN}} | 
|  | #ifdef ANALYZER_CM_Z3 | 
|  | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{FALSE}} | 
|  | #else | 
|  | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{UNKNOWN}} | 
|  | #endif | 
|  |  | 
|  | // Check that dynamically computed constants also work. | 
|  | int constant = 1 << 3; | 
|  | unsigned int d = a | constant; | 
|  | clang_analyzer_eval(constant > 0); // expected-warning{{TRUE}} | 
|  | } |