| // RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection %s -analyzer-store=region -verify |
| |
| void clang_analyzer_eval(int); |
| |
| unsigned foo(); |
| typedef struct bf { unsigned x:2; } bf; |
| void bar() { |
| bf y; |
| *(unsigned*)&y = foo(); |
| y.x = 1; |
| } |
| |
| struct s { |
| int n; |
| }; |
| |
| void f() { |
| struct s a; |
| int *p = &(a.n) + 1; // expected-warning{{Pointer arithmetic on}} |
| } |
| |
| typedef struct { |
| int x,y; |
| } Point; |
| |
| Point getit(void); |
| void test() { |
| Point p; |
| (void)(p = getit()).x; |
| } |
| |
| #define true ((bool)1) |
| #define false ((bool)0) |
| typedef _Bool bool; |
| |
| |
| void testLazyCompoundVal() { |
| Point p = {42, 0}; |
| Point q; |
| clang_analyzer_eval((q = p).x == 42); // expected-warning{{TRUE}} |
| clang_analyzer_eval(q.x == 42); // expected-warning{{TRUE}} |
| } |
| |
| |
| struct Bits { |
| unsigned a : 1; |
| unsigned b : 2; |
| unsigned c : 1; |
| |
| bool x; |
| |
| struct InnerBits { |
| bool y; |
| |
| unsigned d : 16; |
| unsigned e : 6; |
| unsigned f : 2; |
| } inner; |
| }; |
| |
| void testBitfields() { |
| struct Bits bits; |
| |
| if (foo() && bits.b) // expected-warning {{garbage}} |
| return; |
| if (foo() && bits.inner.e) // expected-warning {{garbage}} |
| return; |
| |
| bits.c = 1; |
| clang_analyzer_eval(bits.c == 1); // expected-warning {{TRUE}} |
| |
| if (foo() && bits.b) // expected-warning {{garbage}} |
| return; |
| if (foo() && bits.x) // expected-warning {{garbage}} |
| return; |
| |
| bits.x = true; |
| clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}} |
| bits.b = 2; |
| clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}} |
| if (foo() && bits.c) // no-warning |
| return; |
| |
| bits.inner.e = 50; |
| if (foo() && bits.inner.e) // no-warning |
| return; |
| if (foo() && bits.inner.y) // expected-warning {{garbage}} |
| return; |
| if (foo() && bits.inner.f) // expected-warning {{garbage}} |
| return; |
| |
| extern struct InnerBits getInner(); |
| bits.inner = getInner(); |
| |
| if (foo() && bits.inner.e) // no-warning |
| return; |
| if (foo() && bits.inner.y) // no-warning |
| return; |
| if (foo() && bits.inner.f) // no-warning |
| return; |
| |
| bits.inner.f = 1; |
| |
| if (foo() && bits.inner.e) // no-warning |
| return; |
| if (foo() && bits.inner.y) // no-warning |
| return; |
| if (foo() && bits.inner.f) // no-warning |
| return; |
| |
| if (foo() && bits.a) // expected-warning {{garbage}} |
| return; |
| } |
| |
| |
| //----------------------------------------------------------------------------- |
| // Incorrect behavior |
| //----------------------------------------------------------------------------- |
| |
| void testTruncation() { |
| struct Bits bits; |
| bits.c = 0x11; // expected-warning{{implicit truncation}} |
| // FIXME: We don't model truncation of bitfields. |
| clang_analyzer_eval(bits.c == 1); // expected-warning {{FALSE}} |
| } |