[analyzer] ReturnVisitor: Bypass everything to see inlined calls
Summary:
When we traversed backwards on ExplodedNodes to see where processed the
given statement we `break` too early. With the current approach we do not
miss the CallExitEnd ProgramPoint which stands for an inlined call.
Reviewers: NoQ, xazax.hun, ravikandhadai, baloghadamsoftware, Szelethus
Reviewed By: NoQ
Subscribers: szepet, rnkovacs, a.sidorin, mikhail.ramalho, donat.nagy,
dkrupp, cfe-commits
Tags: #clang
Differential Revision: https://reviews.llvm.org/D62926
llvm-svn: 363491
2019-06-15 18:05:49 +08:00
|
|
|
// RUN: %clang_analyze_cc1 \
|
|
|
|
// RUN: -analyzer-checker=core,debug.ExprInspection \
|
|
|
|
// RUN: -verify %s
|
2018-01-18 06:58:35 +08:00
|
|
|
|
|
|
|
void clang_analyzer_eval(bool);
|
2018-01-25 04:32:26 +08:00
|
|
|
void clang_analyzer_warnIfReached();
|
2018-01-18 06:58:35 +08:00
|
|
|
|
|
|
|
typedef __typeof__(sizeof(int)) size_t;
|
|
|
|
|
|
|
|
void *operator new(size_t size) throw() {
|
|
|
|
return nullptr;
|
|
|
|
}
|
|
|
|
void *operator new[](size_t size) throw() {
|
|
|
|
return nullptr;
|
|
|
|
}
|
|
|
|
|
|
|
|
struct S {
|
|
|
|
int x;
|
2018-01-25 04:32:26 +08:00
|
|
|
S() : x(1) {
|
|
|
|
// FIXME: Constructor should not be called with null this, even if it was
|
|
|
|
// returned by operator new().
|
|
|
|
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
|
|
|
|
}
|
2018-01-18 06:58:35 +08:00
|
|
|
~S() {}
|
|
|
|
};
|
|
|
|
|
|
|
|
void testArrays() {
|
|
|
|
S *s = new S[10]; // no-crash
|
[analyzer] ReturnVisitor: Bypass everything to see inlined calls
Summary:
When we traversed backwards on ExplodedNodes to see where processed the
given statement we `break` too early. With the current approach we do not
miss the CallExitEnd ProgramPoint which stands for an inlined call.
Reviewers: NoQ, xazax.hun, ravikandhadai, baloghadamsoftware, Szelethus
Reviewed By: NoQ
Subscribers: szepet, rnkovacs, a.sidorin, mikhail.ramalho, donat.nagy,
dkrupp, cfe-commits
Tags: #clang
Differential Revision: https://reviews.llvm.org/D62926
llvm-svn: 363491
2019-06-15 18:05:49 +08:00
|
|
|
s[0].x = 2;
|
|
|
|
// no-warning: 'Dereference of null pointer' suppressed by ReturnVisitor.
|
2018-01-18 06:58:35 +08:00
|
|
|
}
|
2018-01-25 04:32:26 +08:00
|
|
|
|
|
|
|
int global;
|
|
|
|
void testInvalidationOnConstructionIntoNull() {
|
|
|
|
global = 0;
|
|
|
|
S *s = new S();
|
|
|
|
// FIXME: Should be FALSE - we should not invalidate globals.
|
|
|
|
clang_analyzer_eval(global); // expected-warning{{UNKNOWN}}
|
|
|
|
}
|