1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 | // RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection %s -analyzer-store=region -verify void clang_analyzer_eval(int); unsigned foo(); typedef struct bf { unsigned x:2; } bf; void bar() { bf y; *(unsigned*)&y = foo(); y.x = 1; } struct s { int n; }; void f() { struct s a; int *p = &(a.n) + 1; // expected-warning{{Pointer arithmetic on}} } typedef struct { int x,y; } Point; Point getit(void); void test() { Point p; (void)(p = getit()).x; } #define true ((bool)1) #define false ((bool)0) typedef _Bool bool; void testLazyCompoundVal() { Point p = {42, 0}; Point q; clang_analyzer_eval((q = p).x == 42); // expected-warning{{TRUE}} clang_analyzer_eval(q.x == 42); // expected-warning{{TRUE}} } struct Bits { unsigned a : 1; unsigned b : 2; unsigned c : 1; bool x; struct InnerBits { bool y; unsigned d : 16; unsigned e : 6; unsigned f : 2; } inner; }; void testBitfields() { struct Bits bits; if (foo() && bits.b) // expected-warning {{garbage}} return; if (foo() && bits.inner.e) // expected-warning {{garbage}} return; bits.c = 1; clang_analyzer_eval(bits.c == 1); // expected-warning {{TRUE}} if (foo() && bits.b) // expected-warning {{garbage}} return; if (foo() && bits.x) // expected-warning {{garbage}} return; bits.x = true; clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}} bits.b = 2; clang_analyzer_eval(bits.x == true); // expected-warning{{TRUE}} if (foo() && bits.c) // no-warning return; bits.inner.e = 50; if (foo() && bits.inner.e) // no-warning return; if (foo() && bits.inner.y) // expected-warning {{garbage}} return; if (foo() && bits.inner.f) // expected-warning {{garbage}} return; extern struct InnerBits getInner(); bits.inner = getInner(); if (foo() && bits.inner.e) // no-warning return; if (foo() && bits.inner.y) // no-warning return; if (foo() && bits.inner.f) // no-warning return; bits.inner.f = 1; if (foo() && bits.inner.e) // no-warning return; if (foo() && bits.inner.y) // no-warning return; if (foo() && bits.inner.f) // no-warning return; if (foo() && bits.a) // expected-warning {{garbage}} return; } //----------------------------------------------------------------------------- // Incorrect behavior //----------------------------------------------------------------------------- void testTruncation() { struct Bits bits; bits.c = 0x11; // expected-warning{{implicit truncation}} // FIXME: We don't model truncation of bitfields. clang_analyzer_eval(bits.c == 1); // expected-warning {{FALSE}} } |