1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
// RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core,debug.ExprInspection %s -std=c++11 -verify
// RUN: %clang_analyze_cc1 -triple x86_64-pc-windows-msvc19.11.0 -fms-extensions -analyzer-checker=core,debug.ExprInspection %s -std=c++11 -verify
#include "Inputs/system-header-simulator-cxx.h"
namespace std {
// Intentionally not using an "auto" return type here, as such must also have a definition.
template <typename T, typename U> constexpr int&& forward_like(U&& x) noexcept;
template <typename T> const T& move_if_noexcept(T& x) noexcept;
} // namespace std
template <typename T> void clang_analyzer_dump_ref(T&&);
template <typename T> void clang_analyzer_dump_ptr(T*);
void clang_analyzer_eval(bool);
void clang_analyzer_warnIfReached();
void testAddressof(int x) {
clang_analyzer_eval(&x == __builtin_addressof(x)); // expected-warning{{TRUE}}
}
void testStdBuiltinLikeFunctions(int x) {
clang_analyzer_dump_ptr(std::addressof(x)); // expected-warning{{&x}}
clang_analyzer_dump_ptr(std::__addressof(x)); // expected-warning{{&x}}
clang_analyzer_dump_ref(std::as_const(x)); // expected-warning{{&x}}
clang_analyzer_dump_ref(std::forward<int &>(x)); // expected-warning{{&x}}
clang_analyzer_dump_ref(std::forward_like<int &>(x)); // expected-warning{{&x}}
clang_analyzer_dump_ref(std::move(x)); // expected-warning{{&x}}
clang_analyzer_dump_ref(std::move_if_noexcept(x)); // expected-warning{{&x}}
}
void testSize() {
struct {
int x;
int y;
char z;
} object;
clang_analyzer_eval(__builtin_object_size(&object.y, 0) == sizeof(object) - sizeof(int)); // expected-warning{{TRUE}}
// Clang can't actually evaluate these builtin "calls", but importantly they don't actually evaluate the argument expression either.
int i = 0;
char buf[10];
clang_analyzer_eval(__builtin_object_size(&buf[i++], 0) == sizeof(buf)); // expected-warning{{FALSE}}
clang_analyzer_eval(__builtin_object_size(&buf[++i], 0) == sizeof(buf) - 1); // expected-warning{{FALSE}}
clang_analyzer_eval(i == 0); // expected-warning{{TRUE}}
}
void test_assume_aligned_1(char *p) {
char *q;
q = (char*) __builtin_assume_aligned(p, 16);
clang_analyzer_eval(p == q); // expected-warning{{TRUE}}
}
void test_assume_aligned_2(char *p) {
char *q;
q = (char*) __builtin_assume_aligned(p, 16, 8);
clang_analyzer_eval(p == q); // expected-warning{{TRUE}}
}
void test_assume_aligned_3(char *p) {
void *q;
q = __builtin_assume_aligned(p, 16, 8);
clang_analyzer_eval(p == q); // expected-warning{{TRUE}}
}
void test_assume_aligned_4(char *p) {
char *q;
q = (char*) __builtin_assume_aligned(p + 1, 16);
clang_analyzer_eval(p == q); // expected-warning{{FALSE}}
}
void f(int i) {
__builtin_assume(i < 10);
clang_analyzer_eval(i < 15); // expected-warning {{TRUE}}
}
void g(int i) {
if (i > 5) {
__builtin_assume(i < 5);
clang_analyzer_warnIfReached(); // Assumtion contradicts constraints.
// We give up the analysis on this path.
}
}
#ifdef _WIN32
namespace ms {
void f(int i) {
__assume(i < 10);
clang_analyzer_eval(i < 15); // expected-warning {{TRUE}}
}
void g(int i) {
if (i > 5) {
__assume(i < 5);
clang_analyzer_warnIfReached(); // Assumtion contradicts constraints.
// We give up the analysis on this path.
}
}
} // namespace ms
#endif
void test_constant_p(void *ptr) {
int i = 1;
const int j = 2;
constexpr int k = 3;
clang_analyzer_eval(__builtin_constant_p(42) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(i) == 0); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(j) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(k) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(i + 42) == 0); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(j + 42) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(k + 42) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(" ") == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(test_constant_p) == 0); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(k - 3) == 0); // expected-warning {{FALSE}}
clang_analyzer_eval(__builtin_constant_p(k - 3) == 1); // expected-warning {{TRUE}}
clang_analyzer_eval(__builtin_constant_p(ptr == 0)); // expected-warning {{FALSE}}
}
|