forked from OSchip/llvm-project
				
			
		
			
				
	
	
		
			156 lines
		
	
	
		
			4.4 KiB
		
	
	
	
		
			C++
		
	
	
	
			
		
		
	
	
			156 lines
		
	
	
		
			4.4 KiB
		
	
	
	
		
			C++
		
	
	
	
| // RUN: %clang_analyze_cc1 -std=c++14 \
 | |
| // RUN:  -analyzer-checker=core,apiModeling.llvm.CastValue,debug.ExprInspection\
 | |
| // RUN:  -analyzer-output=text -verify %s
 | |
| 
 | |
| #include "Inputs/llvm.h"
 | |
| 
 | |
| namespace clang {
 | |
| struct Shape {
 | |
|   template <typename T>
 | |
|   const T *castAs() const;
 | |
| 
 | |
|   template <typename T>
 | |
|   const T *getAs() const;
 | |
| };
 | |
| class Triangle : public Shape {};
 | |
| class Circle : public Shape {};
 | |
| } // namespace clang
 | |
| 
 | |
| using namespace llvm;
 | |
| using namespace clang;
 | |
| 
 | |
| void evalReferences(const Shape &S) {
 | |
|   const auto &C = dyn_cast<Circle>(S);
 | |
|   // expected-note@-1 {{Assuming 'S' is not a 'Circle'}}
 | |
|   // expected-note@-2 {{Dereference of null pointer}}
 | |
|   // expected-warning@-3 {{Dereference of null pointer}}
 | |
| }
 | |
| 
 | |
| void evalNonNullParamNonNullReturnReference(const Shape &S) {
 | |
|   // Unmodeled cast from reference to pointer.
 | |
|   const auto *C = dyn_cast_or_null<Circle>(S);
 | |
|   // expected-note@-1 {{'C' initialized here}}
 | |
| 
 | |
|   if (!dyn_cast_or_null<Circle>(C)) {
 | |
|     // expected-note@-1 {{'C' is a 'Circle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   if (dyn_cast_or_null<Triangle>(C)) {
 | |
|     // expected-note@-1 {{Assuming 'C' is not a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   if (isa<Triangle>(C)) {
 | |
|     // expected-note@-1 {{'C' is not a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   if (isa<Circle>(C)) {
 | |
|     // expected-note@-1 {{'C' is a 'Circle'}}
 | |
|     // expected-note@-2 {{Taking true branch}}
 | |
| 
 | |
|     (void)(1 / !C);
 | |
|     // expected-note@-1 {{'C' is non-null}}
 | |
|     // expected-note@-2 {{Division by zero}}
 | |
|     // expected-warning@-3 {{Division by zero}}
 | |
|   }
 | |
| }
 | |
| 
 | |
| void evalNonNullParamNonNullReturn(const Shape *S) {
 | |
|   const auto *C = cast<Circle>(S);
 | |
|   // expected-note@-1 {{'S' is a 'Circle'}}
 | |
|   // expected-note@-2 {{'C' initialized here}}
 | |
| 
 | |
|   if (!isa<Triangle>(C)) {
 | |
|     // expected-note@-1 {{Assuming 'C' is a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   if (!isa<Triangle>(C)) {
 | |
|     // expected-note@-1 {{'C' is a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   (void)(1 / !C);
 | |
|   // expected-note@-1 {{'C' is non-null}}
 | |
|   // expected-note@-2 {{Division by zero}}
 | |
|   // expected-warning@-3 {{Division by zero}}
 | |
| }
 | |
| 
 | |
| void evalNonNullParamNullReturn(const Shape *S) {
 | |
|   const auto *C = dyn_cast_or_null<Circle>(S);
 | |
|   // expected-note@-1 {{Assuming 'S' is not a 'Circle'}}
 | |
| 
 | |
|   if (const auto *T = dyn_cast_or_null<Triangle>(S)) {
 | |
|     // expected-note@-1 {{Assuming 'S' is a 'Triangle'}}
 | |
|     // expected-note@-2 {{'T' initialized here}}
 | |
|     // expected-note@-3 {{'T' is non-null}}
 | |
|     // expected-note@-4 {{Taking true branch}}
 | |
| 
 | |
|     (void)(1 / !T);
 | |
|     // expected-note@-1 {{'T' is non-null}}
 | |
|     // expected-note@-2 {{Division by zero}}
 | |
|     // expected-warning@-3 {{Division by zero}}
 | |
|   }
 | |
| }
 | |
| 
 | |
| void evalNullParamNullReturn(const Shape *S) {
 | |
|   const auto *C = dyn_cast_or_null<Circle>(S);
 | |
|   // expected-note@-1 {{Assuming null pointer is passed into cast}}
 | |
|   // expected-note@-2 {{'C' initialized to a null pointer value}}
 | |
| 
 | |
|   (void)(1 / (bool)C);
 | |
|   // expected-note@-1 {{Division by zero}}
 | |
|   // expected-warning@-2 {{Division by zero}}
 | |
| }
 | |
| 
 | |
| void evalZeroParamNonNullReturnPointer(const Shape *S) {
 | |
|   const auto *C = S->castAs<Circle>();
 | |
|   // expected-note@-1 {{'S' is a 'Circle'}}
 | |
|   // expected-note@-2 {{'C' initialized here}}
 | |
| 
 | |
|   (void)(1 / !C);
 | |
|   // expected-note@-1 {{'C' is non-null}}
 | |
|   // expected-note@-2 {{Division by zero}}
 | |
|   // expected-warning@-3 {{Division by zero}}
 | |
| }
 | |
| 
 | |
| void evalZeroParamNonNullReturn(const Shape &S) {
 | |
|   const auto *C = S.castAs<Circle>();
 | |
|   // expected-note@-1 {{'C' initialized here}}
 | |
| 
 | |
|   (void)(1 / !C);
 | |
|   // expected-note@-1 {{'C' is non-null}}
 | |
|   // expected-note@-2 {{Division by zero}}
 | |
|   // expected-warning@-3 {{Division by zero}}
 | |
| }
 | |
| 
 | |
| void evalZeroParamNullReturn(const Shape *S) {
 | |
|   const auto &C = S->getAs<Circle>();
 | |
|   // expected-note@-1 {{Assuming 'S' is not a 'Circle'}}
 | |
|   // expected-note@-2 {{Storing null pointer value}}
 | |
|   // expected-note@-3 {{'C' initialized here}}
 | |
| 
 | |
|   if (!dyn_cast_or_null<Triangle>(S)) {
 | |
|     // expected-note@-1 {{Assuming 'S' is a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   if (!dyn_cast_or_null<Triangle>(S)) {
 | |
|     // expected-note@-1 {{'S' is a 'Triangle'}}
 | |
|     // expected-note@-2 {{Taking false branch}}
 | |
|     return;
 | |
|   }
 | |
| 
 | |
|   (void)(1 / (bool)C);
 | |
|   // expected-note@-1 {{Division by zero}}
 | |
|   // expected-warning@-2 {{Division by zero}}
 | |
| }
 |