| // RUN: %clang_analyze_cc1 -w -x c++ -analyzer-checker=core -analyzer-output=text -analyzer-eagerly-assume -verify %s |
| |
| namespace pr34731 { |
| int b; |
| class c { |
| class B { |
| public: |
| double ***d; |
| B(); |
| }; |
| void e(double **, int); |
| void f(B &, int &); |
| }; |
| |
| // Properly track the null pointer in the array field back to the default |
| // constructor of 'h'. |
| void c::f(B &g, int &i) { |
| e(g.d[9], i); // expected-warning{{Array access (via field 'd') results in a null pointer dereference}} |
| // expected-note@-1{{Array access (via field 'd') results in a null pointer dereference}} |
| B h, a; // expected-note{{Value assigned to 'h.d'}} |
| a.d == __null; // expected-note{{Assuming the condition is true}} |
| a.d != h.d; // expected-note{{Assuming pointer value is null}} |
| f(h, b); // expected-note{{Calling 'c::f'}} |
| } |
| } |