forked from OSchip/llvm-project
				
			
		
			
				
	
	
		
			126 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			C
		
	
	
	
			
		
		
	
	
			126 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			C
		
	
	
	
| // RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection %s -analyzer-store=region -verify
 | |
| 
 | |
| void clang_analyzer_eval(int);
 | |
| 
 | |
| unsigned foo();
 | |
| typedef struct bf { unsigned x:2; } bf;
 | |
| void bar() {
 | |
|   bf y;
 | |
|   *(unsigned*)&y = foo();
 | |
|   y.x = 1;
 | |
| }
 | |
| 
 | |
| struct s {
 | |
|   int n;
 | |
| };
 | |
| 
 | |
| void f() {
 | |
|   struct s a;
 | |
|   int *p = &(a.n) + 1; // expected-warning{{Pointer arithmetic on}}
 | |
| }
 | |
| 
 | |
| typedef struct {
 | |
|   int x,y;
 | |
| } Point;
 | |
| 
 | |
| Point getit(void);
 | |
| void test() {
 | |
|   Point p;
 | |
|   (void)(p = getit()).x;
 | |
| }
 | |
| 
 | |
| #define true ((bool)1)
 | |
| #define false ((bool)0)
 | |
| typedef _Bool bool;
 | |
| 
 | |
| 
 | |
| void testLazyCompoundVal() {
 | |
|   Point p = {42, 0};
 | |
|   Point q;
 | |
|   clang_analyzer_eval((q = p).x == 42); // expected-warning{{TRUE}}
 | |
|   clang_analyzer_eval(q.x == 42); // expected-warning{{TRUE}}
 | |
| }
 | |
| 
 | |
| 
 | |
| struct Bits {
 | |
|   unsigned a : 1;
 | |
|   unsigned b : 2;
 | |
|   unsigned c : 1;
 | |
| 
 | |
|   bool x;
 | |
| 
 | |
|   struct InnerBits {
 | |
|     bool y;
 | |
| 
 | |
|     unsigned d : 16;
 | |
|     unsigned e : 6;
 | |
|     unsigned f : 2;
 | |
|   } inner;
 | |
| };
 | |
| 
 | |
| void testBitfields() {
 | |
|   struct Bits bits;
 | |
| 
 | |
|   if (foo() && bits.b) // expected-warning {{garbage}}
 | |
|     return;
 | |
|   if (foo() && bits.inner.e) // expected-warning {{garbage}}
 | |
|     return;
 | |
| 
 | |
|   bits.c = 1;
 | |
|   clang_analyzer_eval(bits.c == 1); // expected-warning {{TRUE}}
 | |
| 
 | |
|   if (foo() && bits.b) // expected-warning {{garbage}}
 | |
|     return;
 | |
|   if (foo() && bits.x) // expected-warning {{garbage}}
 | |
|     return;
 | |
| 
 | |
|   bits.x = true;
 | |
|   clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}}
 | |
|   bits.b = 2;
 | |
|   clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}}
 | |
|   if (foo() && bits.c) // no-warning
 | |
|     return;
 | |
| 
 | |
|   bits.inner.e = 50;
 | |
|   if (foo() && bits.inner.e) // no-warning
 | |
|     return;
 | |
|   if (foo() && bits.inner.y) // expected-warning {{garbage}}
 | |
|     return;
 | |
|   if (foo() && bits.inner.f) // expected-warning {{garbage}}
 | |
|     return;
 | |
| 
 | |
|   extern struct InnerBits getInner();
 | |
|   bits.inner = getInner();
 | |
|   
 | |
|   if (foo() && bits.inner.e) // no-warning
 | |
|     return;
 | |
|   if (foo() && bits.inner.y) // no-warning
 | |
|     return;
 | |
|   if (foo() && bits.inner.f) // no-warning
 | |
|     return;
 | |
| 
 | |
|   bits.inner.f = 1;
 | |
|   
 | |
|   if (foo() && bits.inner.e) // no-warning
 | |
|     return;
 | |
|   if (foo() && bits.inner.y) // no-warning
 | |
|     return;
 | |
|   if (foo() && bits.inner.f) // no-warning
 | |
|     return;
 | |
| 
 | |
|   if (foo() && bits.a) // expected-warning {{garbage}}
 | |
|     return;
 | |
| }
 | |
| 
 | |
| 
 | |
| //-----------------------------------------------------------------------------
 | |
| // Incorrect behavior
 | |
| //-----------------------------------------------------------------------------
 | |
| 
 | |
| void testTruncation() {
 | |
|   struct Bits bits;
 | |
|   bits.c = 0x11; // expected-warning{{implicit truncation}}
 | |
|   // FIXME: We don't model truncation of bitfields.
 | |
|   clang_analyzer_eval(bits.c == 1); // expected-warning {{FALSE}}
 | |
| }
 |