2011-10-14 06:29:44 +08:00
|
|
|
// RUN: %clang_cc1 -std=c++11 -analyze -analyzer-checker=core -analyzer-store region -verify %s
|
2011-04-23 02:01:30 +08:00
|
|
|
|
|
|
|
// test to see if nullptr is detected as a null pointer
|
|
|
|
void foo1(void) {
|
|
|
|
char *np = nullptr;
|
|
|
|
*np = 0; // expected-warning{{Dereference of null pointer}}
|
|
|
|
}
|
|
|
|
|
|
|
|
// check if comparing nullptr to nullptr is detected properly
|
|
|
|
void foo2(void) {
|
|
|
|
char *np1 = nullptr;
|
|
|
|
char *np2 = np1;
|
|
|
|
char c;
|
|
|
|
if (np1 == np2)
|
|
|
|
np1 = &c;
|
|
|
|
*np1 = 0; // no-warning
|
|
|
|
}
|
|
|
|
|
|
|
|
// invoving a nullptr in a more complex operation should be cause a warning
|
|
|
|
void foo3(void) {
|
|
|
|
struct foo {
|
|
|
|
int a, f;
|
|
|
|
};
|
|
|
|
char *np = nullptr;
|
|
|
|
// casting a nullptr to anything should be caught eventually
|
|
|
|
int *ip = &(((struct foo *)np)->f);
|
|
|
|
*ip = 0; // expected-warning{{Dereference of null pointer}}
|
|
|
|
// should be error here too, but analysis gets stopped
|
|
|
|
// *np = 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
// nullptr is implemented as a zero integer value, so should be able to compare
|
|
|
|
void foo4(void) {
|
|
|
|
char *np = nullptr;
|
|
|
|
if (np != 0)
|
|
|
|
*np = 0; // no-warning
|
|
|
|
char *cp = 0;
|
|
|
|
if (np != cp)
|
|
|
|
*np = 0; // no-warning
|
|
|
|
}
|
|
|
|
|
2011-07-16 04:29:02 +08:00
|
|
|
|
|
|
|
int pr10372(void *& x) {
|
|
|
|
// GNU null is a pointer-sized integer, not a pointer.
|
|
|
|
x = __null;
|
|
|
|
// This used to crash.
|
|
|
|
return __null;
|
|
|
|
}
|
|
|
|
|