// RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha -analyzer-max-loop 2 -analyzer-config widen-loops=true -analyzer-output=text -verify %s int *p_a; int bar(); int flag_a; int test_for_bug_25609() { if (p_a == 0) // expected-note {{Assuming 'p_a' is equal to null}} // expected-note@-1 {{Taking true branch}} bar(); for (int i = 0; // expected-note {{Loop condition is true. Entering loop body}} // expected-note@-1 {{Loop condition is false. Execution continues on line 16}} ++i, // expected-note {{Value assigned to 'p_a'}} i < flag_a; ++i) {} *p_a = 25609; // no-crash expected-warning {{Dereference of null pointer (loaded from variable 'p_a')}} // expected-note@-1 {{Dereference of null pointer (loaded from variable 'p_a')}} return *p_a; } int flag_b; int while_analyzer_output() { flag_b = 100; int num = 10; while (flag_b-- > 0) { // expected-note {{Loop condition is true. Entering loop body}} // expected-note@-1 {{Value assigned to 'num'}} // expected-note@-2 {{Loop condition is false. Execution continues on line 30}} num = flag_b; } if (num < 0) // expected-note {{Assuming 'num' is >= 0}} // expected-note@-1 {{Taking false branch}} flag_b = 0; else if (num >= 1) // expected-note {{Assuming 'num' is < 1}} // expected-note@-1 {{Taking false branch}} flag_b = 50; else flag_b = 100; return flag_b / num; // no-crash expected-warning {{Division by zero}} // expected-note@-1 {{Division by zero}} } int flag_c; int do_while_analyzer_output() { int num = 10; do { // expected-note {{Loop condition is true. Execution continues on line 47}} // expected-note@-1 {{Loop condition is false. Exiting loop}} num--; } while (flag_c-- > 0); //expected-note {{Value assigned to 'num'}} int local = 0; if (num == 0) // expected-note {{Assuming 'num' is equal to 0}} // expected-note@-1 {{Taking true branch}} local = 10 / num; // no-crash expected-warning {{Division by zero}} // expected-note@-1 {{Division by zero}} return local; } int flag_d; int test_for_loop() { int num = 10; for (int i = 0; // expected-note {{Loop condition is true. Entering loop body}} // expected-note@-1 {{Loop condition is false. Execution continues on line 67}} new int(10), // expected-note {{Value assigned to 'num'}} i < flag_d; ++i) { ++num; } if (num == 0) // expected-note {{Assuming 'num' is equal to 0}} // expected-note@-1 {{Taking true branch}} flag_d += 10; return flag_d / num; // no-crash expected-warning {{Division by zero}} // expected-note@-1 {{Division by zero}} } |