1 files changed, 75 insertions, 0 deletions
diff --git a/gcc/testsuite/gcc.dg/analyzer/attr-malloc-1.c b/gcc/testsuite/gcc.dg/analyzer/attr-malloc-1.c
new file mode 100644
index 0000000..3de32b1
--- /dev/null
+++ b/gcc/testsuite/gcc.dg/analyzer/attr-malloc-1.c
@@ -0,0 +1,75 @@
+extern void free (void *);
+
+struct foo
+{
+  int m_int;
+};
+
+extern void foo_release (struct foo *);
+extern struct foo *foo_acquire (void)
+  __attribute__ ((malloc (foo_release)));
+extern void use_foo (const struct foo *)
+  __attribute__((nonnull));
+
+void test_1 (void)
+{
+  struct foo *p = foo_acquire ();
+  foo_release (p);
+}
+
+void test_2 (void)
+{
+  struct foo *p = foo_acquire (); /* { dg-message "this call could return NULL" } */
+  p->m_int = 42; /* { dg-warning "dereference of possibly-NULL 'p'" } */
+  foo_release (p);
+}
+
+void test_2a (void)
+{
+  struct foo *p = foo_acquire (); /* { dg-message "this call could return NULL" } */
+  use_foo (p); /* { dg-warning "use of possibly-NULL 'p' where non-null expected" } */
+  foo_release (p);
+}
+
+void test_3 (void)
+{
+  struct foo *p = foo_acquire (); /* { dg-message "allocated here" } */
+} /* { dg-warning "leak of 'p'" } */
+
+void test_4 (struct foo *p)
+{
+  foo_release (p);
+  foo_release (p); /* { dg-warning "double-'foo_release' of 'p'" } */
+}
+
+void test_4a (void)
+{
+  struct foo *p = foo_acquire ();
+  foo_release (p);
+  foo_release (p); /* { dg-warning "double-'foo_release' of 'p'" } */
+}
+
+void test_5 (void)
+{
+  struct foo *p = foo_acquire (); /* { dg-message "allocated here \\(expects deallocation with 'foo_release'\\)" } */
+  free (p); /* { dg-warning "'p' should have been deallocated with 'foo_release' but was deallocated with 'free'" } */
+}
+
+void test_6 (struct foo *p)
+{
+  foo_release (p);
+  free (p); // TODO: double-release warning!
+}
+
+void test_7 ()
+{
+  struct foo f;
+  foo_release (&f); /* { dg-warning "not on the heap" "analyzer" } */
+  /* { dg-warning "'foo_release' called on unallocated object 'f'" "non-analyzer" { target *-*-* } .-1 } */
+}
+
+int test_8 (struct foo *p)
+{
+  foo_release (p);
+  return p->m_int; /* { dg-warning "use after 'foo_release' of 'p'" } */
+}