diff options
Diffstat (limited to 'test/Analysis/uninit-vals.c')
| -rw-r--r-- | test/Analysis/uninit-vals.c | 199 |
1 files changed, 199 insertions, 0 deletions
diff --git a/test/Analysis/uninit-vals.c b/test/Analysis/uninit-vals.c new file mode 100644 index 000000000000..d24b45874738 --- /dev/null +++ b/test/Analysis/uninit-vals.c @@ -0,0 +1,199 @@ +// RUN: %clang_analyze_cc1 -analyzer-checker=core -fblocks -verify -analyzer-output=text %s + +struct FPRec { + void (*my_func)(int * x); +}; + +int bar(int x); + +int f1_a(struct FPRec* foo) { + int x; + (*foo->my_func)(&x); + return bar(x)+1; // no-warning +} + +int f1_b() { + int x; // expected-note{{'x' declared without an initial value}} + return bar(x)+1; // expected-warning{{1st function call argument is an uninitialized value}} + // expected-note@-1{{1st function call argument is an uninitialized value}} +} + +int f2() { + + int x; // expected-note{{'x' declared without an initial value}} + + if (x+1) // expected-warning{{The left operand of '+' is a garbage value}} + // expected-note@-1{{The left operand of '+' is a garbage value}} + return 1; + + return 2; +} + +int f2_b() { + int x; // expected-note{{'x' declared without an initial value}} + + return ((1+x)+2+((x))) + 1 ? 1 : 2; // expected-warning{{The right operand of '+' is a garbage value}} + // expected-note@-1{{The right operand of '+' is a garbage value}} +} + +int f3(void) { + int i; // expected-note{{'i' declared without an initial value}} + int *p = &i; + if (*p > 0) // expected-warning{{The left operand of '>' is a garbage value}} + // expected-note@-1{{The left operand of '>' is a garbage value}} + return 0; + else + return 1; +} + +void f4_aux(float* x); +float f4(void) { + float x; + f4_aux(&x); + return x; // no-warning +} + +struct f5_struct { int x; }; +void f5_aux(struct f5_struct* s); +int f5(void) { + struct f5_struct s; + f5_aux(&s); + return s.x; // no-warning +} + +void f6(int x) { + int a[20]; + if (x == 25) {} // expected-note{{Assuming 'x' is equal to 25}} + // expected-note@-1{{Taking true branch}} + if (a[x] == 123) {} // expected-warning{{The left operand of '==' is a garbage value due to array index out of bounds}} + // expected-note@-1{{The left operand of '==' is a garbage value due to array index out of bounds}} +} + +int ret_uninit() { + int i; // expected-note{{'i' declared without an initial value}} + int *p = &i; + return *p; // expected-warning{{Undefined or garbage value returned to caller}} + // expected-note@-1{{Undefined or garbage value returned to caller}} +} + +// <rdar://problem/6451816> +typedef unsigned char Boolean; +typedef const struct __CFNumber * CFNumberRef; +typedef signed long CFIndex; +typedef CFIndex CFNumberType; +typedef unsigned long UInt32; +typedef UInt32 CFStringEncoding; +typedef const struct __CFString * CFStringRef; +extern Boolean CFNumberGetValue(CFNumberRef number, CFNumberType theType, void *valuePtr); +extern CFStringRef CFStringConvertEncodingToIANACharSetName(CFStringEncoding encoding); + +CFStringRef rdar_6451816(CFNumberRef nr) { + CFStringEncoding encoding; + // &encoding is casted to void*. This test case tests whether or not + // we properly invalidate the value of 'encoding'. + CFNumberGetValue(nr, 9, &encoding); + return CFStringConvertEncodingToIANACharSetName(encoding); // no-warning +} + +// PR 4630 - false warning with nonnull attribute +// This false positive (due to a regression) caused the analyzer to falsely +// flag a "return of uninitialized value" warning in the first branch due to +// the nonnull attribute. +void pr_4630_aux(char *x, int *y) __attribute__ ((nonnull (1))); +void pr_4630_aux_2(char *x, int *y); +int pr_4630(char *a, int y) { + int x; + if (y) { + pr_4630_aux(a, &x); + return x; // no-warning + } + else { + pr_4630_aux_2(a, &x); + return x; // no-warning + } +} + +// PR 4631 - False positive with union initializer +// Previously the analyzer didn't examine the compound initializers of unions, +// resulting in some false positives for initializers with side-effects. +union u_4631 { int a; }; +struct s_4631 { int a; }; +int pr4631_f2(int *p); +int pr4631_f3(void *q); +int pr4631_f1(void) +{ + int x; + union u_4631 m = { pr4631_f2(&x) }; + pr4631_f3(&m); // tell analyzer that we use m + return x; // no-warning +} +int pr4631_f1_b(void) +{ + int x; + struct s_4631 m = { pr4631_f2(&x) }; + pr4631_f3(&m); // tell analyzer that we use m + return x; // no-warning +} + +// <rdar://problem/12278788> - FP when returning a void-valued expression from +// a void function...or block. +void foo_radar12278788() { return; } +void test_radar12278788() { + return foo_radar12278788(); // no-warning +} + +void foo_radar12278788_fp() { return; } +typedef int (*RetIntFuncType)(); +typedef void (*RetVoidFuncType)(); +int test_radar12278788_FP() { + RetVoidFuncType f = foo_radar12278788_fp; + return ((RetIntFuncType)f)(); //expected-warning {{Undefined or garbage value returned to caller}} + //expected-note@-1 {{Undefined or garbage value returned to caller}} + //expected-note@-2 {{Calling 'foo_radar12278788_fp'}} + //expected-note@-3 {{Returning from 'foo_radar12278788_fp'}} +} + +void rdar13665798() { + ^() { + return foo_radar12278788(); // no-warning + }(); + ^void() { + return foo_radar12278788(); // no-warning + }(); + ^int() { // expected-note{{Calling anonymous block}} + RetVoidFuncType f = foo_radar12278788_fp; + return ((RetIntFuncType)f)(); //expected-warning {{Undefined or garbage value returned to caller}} + //expected-note@-1 {{Undefined or garbage value returned to caller}} + //expected-note@-2 {{Calling 'foo_radar12278788_fp'}} + //expected-note@-3 {{Returning from 'foo_radar12278788_fp'}} + }(); +} + +struct Point { + int x, y; +}; + +struct Point getHalfPoint() { + struct Point p; + p.x = 0; + return p; +} + +void use(struct Point p); + +void testUseHalfPoint() { + struct Point p = getHalfPoint(); // expected-note{{Calling 'getHalfPoint'}} + // expected-note@-1{{Returning from 'getHalfPoint'}} + // expected-note@-2{{'p' initialized here}} + use(p); // expected-warning{{uninitialized}} + // expected-note@-1{{uninitialized}} +} + +void testUseHalfPoint2() { + struct Point p; + p = getHalfPoint(); // expected-note{{Calling 'getHalfPoint'}} + // expected-note@-1{{Returning from 'getHalfPoint'}} + // expected-note@-2{{Value assigned to 'p'}} + use(p); // expected-warning{{uninitialized}} + // expected-note@-1{{uninitialized}} +} |