forked from OSchip/llvm-project
129 lines
2.8 KiB
C++
129 lines
2.8 KiB
C++
// RUN: %clang_cc1 -std=c++11 -Wno-conversion-null -analyze -analyzer-checker=core,debug.ExprInspection -analyzer-store region -verify %s
|
|
|
|
void clang_analyzer_eval(int);
|
|
|
|
// test to see if nullptr is detected as a null pointer
|
|
void foo1(void) {
|
|
char *np = nullptr;
|
|
*np = 0; // expected-warning{{Dereference of null pointer}}
|
|
}
|
|
|
|
// check if comparing nullptr to nullptr is detected properly
|
|
void foo2(void) {
|
|
char *np1 = nullptr;
|
|
char *np2 = np1;
|
|
char c;
|
|
if (np1 == np2)
|
|
np1 = &c;
|
|
*np1 = 0; // no-warning
|
|
}
|
|
|
|
// invoving a nullptr in a more complex operation should be cause a warning
|
|
void foo3(void) {
|
|
struct foo {
|
|
int a, f;
|
|
};
|
|
char *np = nullptr;
|
|
// casting a nullptr to anything should be caught eventually
|
|
int *ip = &(((struct foo *)np)->f);
|
|
*ip = 0; // expected-warning{{Dereference of null pointer}}
|
|
// should be error here too, but analysis gets stopped
|
|
// *np = 0;
|
|
}
|
|
|
|
// nullptr is implemented as a zero integer value, so should be able to compare
|
|
void foo4(void) {
|
|
char *np = nullptr;
|
|
if (np != 0)
|
|
*np = 0; // no-warning
|
|
char *cp = 0;
|
|
if (np != cp)
|
|
*np = 0; // no-warning
|
|
}
|
|
|
|
int pr10372(void *& x) {
|
|
// GNU null is a pointer-sized integer, not a pointer.
|
|
x = __null;
|
|
// This used to crash.
|
|
return __null;
|
|
}
|
|
|
|
void zoo1() {
|
|
char **p = 0;
|
|
delete *(p + 0); // expected-warning{{Dereference of null pointer}}
|
|
}
|
|
|
|
void zoo2() {
|
|
int **a = 0;
|
|
int **b = 0;
|
|
asm ("nop"
|
|
:"=r"(*a)
|
|
:"0"(*b) // expected-warning{{Dereference of null pointer}}
|
|
);
|
|
}
|
|
|
|
int exprWithCleanups() {
|
|
struct S {
|
|
S(int a):a(a){}
|
|
~S() {}
|
|
|
|
int a;
|
|
};
|
|
|
|
int *x = 0;
|
|
return S(*x).a; // expected-warning{{Dereference of null pointer}}
|
|
}
|
|
|
|
int materializeTempExpr() {
|
|
int *n = 0;
|
|
struct S {
|
|
int a;
|
|
S(int i): a(i) {}
|
|
};
|
|
const S &s = S(*n); // expected-warning{{Dereference of null pointer}}
|
|
return s.a;
|
|
}
|
|
|
|
typedef decltype(nullptr) nullptr_t;
|
|
void testMaterializeTemporaryExprWithNullPtr() {
|
|
// Create MaterializeTemporaryExpr with a nullptr inside.
|
|
const nullptr_t &r = nullptr;
|
|
}
|
|
|
|
int getSymbol();
|
|
|
|
struct X {
|
|
virtual void f() {}
|
|
};
|
|
|
|
void invokeF(X* x) {
|
|
x->f(); // expected-warning{{Called C++ object pointer is null}}
|
|
}
|
|
|
|
struct Type {
|
|
decltype(nullptr) x;
|
|
};
|
|
|
|
void shouldNotCrash() {
|
|
decltype(nullptr) p;
|
|
if (getSymbol())
|
|
invokeF(p); // expected-warning{{Function call argument is an uninit}}
|
|
if (getSymbol())
|
|
invokeF(nullptr);
|
|
if (getSymbol()) {
|
|
X *x = Type().x;
|
|
x->f(); // expected-warning{{Called C++ object pointer is null}}
|
|
}
|
|
}
|
|
|
|
void f(decltype(nullptr) p) {
|
|
int *q = nullptr;
|
|
clang_analyzer_eval(p == 0); // expected-warning{{TRUE}}
|
|
clang_analyzer_eval(q == 0); // expected-warning{{TRUE}}
|
|
}
|
|
|
|
decltype(nullptr) returnsNullPtrType();
|
|
void fromReturnType() {
|
|
((X *)returnsNullPtrType())->f(); // expected-warning{{Called C++ object pointer is null}}
|
|
}
|