1 // RUN: %clang_cc1 -analyze -analyzer-checker=core,debug.ExprInspection -verify -analyzer-constraints=range %s
3 void clang_analyzer_eval(int);
6 #define INT_MAX (UINT_MAX & (UINT_MAX >> 1))
7 #define INT_MIN (-INT_MAX - 1)
10 // Each of these adjusted ranges has an adjustment small enough to split the
11 // solution range across an overflow boundary (Min for <, Max for >).
12 // This corresponds to one set of branches in RangeConstraintManager.
13 void smallAdjustmentGT (unsigned a) {
15 clang_analyzer_eval(a < UINT_MAX-1); // expected-warning{{TRUE}}
17 clang_analyzer_eval(a == UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
20 void smallAdjustmentGE (unsigned a) {
22 clang_analyzer_eval(a < UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
24 clang_analyzer_eval(a == UINT_MAX-1); // expected-warning{{TRUE}}
27 void smallAdjustmentLT (unsigned a) {
29 clang_analyzer_eval(a == 0 || a == UINT_MAX); // expected-warning{{TRUE}}
32 void smallAdjustmentLE (unsigned a) {
34 clang_analyzer_eval(a == 0 || a == 1 || a == UINT_MAX); // expected-warning{{TRUE}}
38 // Each of these adjusted ranges has an adjustment large enough to push the
39 // comparison value over an overflow boundary (Min for <, Max for >).
40 // This corresponds to one set of branches in RangeConstraintManager.
41 void largeAdjustmentGT (unsigned a) {
43 clang_analyzer_eval(a == 1); // expected-warning{{TRUE}}
45 clang_analyzer_eval(a != 1); // expected-warning{{TRUE}}
48 void largeAdjustmentGE (unsigned a) {
49 if (a-2 >= UINT_MAX-1)
50 clang_analyzer_eval(a == 1 || a == 0); // expected-warning{{TRUE}}
52 clang_analyzer_eval(a > 1); // expected-warning{{TRUE}}
55 void largeAdjustmentLT (unsigned a) {
57 clang_analyzer_eval(a == UINT_MAX-1); // expected-warning{{TRUE}}
59 clang_analyzer_eval(a != UINT_MAX-1); // expected-warning{{TRUE}}
62 void largeAdjustmentLE (unsigned a) {
64 clang_analyzer_eval(a == UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
66 clang_analyzer_eval(a < UINT_MAX-1); // expected-warning{{TRUE}}
70 // Test the nine cases in RangeConstraintManager's pinning logic.
71 // For out-of-range tautologies, it may be the negation that actually
72 // triggers the case in question.
73 void mixedComparisons1(signed char a) {
74 // Case 1: The range is entirely below the symbol's range.
77 clang_analyzer_eval((a - 2) >= (min + 5LL)); // expected-warning{{TRUE}}
79 clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
80 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
81 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
84 void mixedComparisons2(signed char a) {
85 // Case 2: Only the lower end of the range is outside.
86 clang_analyzer_eval((a - 5) < (-0x81LL)); // expected-warning{{UNKNOWN}}
88 if ((a - 5) < (-0x81LL)) {
89 clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
90 clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
91 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
95 void mixedComparisons3(signed char a) {
96 // Case 3: The entire symbol range is covered.
97 clang_analyzer_eval((a - 0x200) < -0x100LL); // expected-warning{{TRUE}}
99 clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
100 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
101 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
104 void mixedComparisons4(signed char a) {
105 // Case 4: The range wraps around, but the lower wrap is out-of-range.
106 clang_analyzer_eval((a - 5) > 0LL); // expected-warning{{UNKNOWN}}
109 clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
110 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
111 clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
115 void mixedComparisons5(signed char a) {
116 // Case 5: The range is inside and may or may not wrap.
117 clang_analyzer_eval((a + 5) == 0LL); // expected-warning{{UNKNOWN}}
119 if ((a + 5) == 0LL) {
120 clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
121 clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
122 clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
124 clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
125 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
126 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
130 void mixedComparisons6(signed char a) {
131 // Case 6: Only the upper end of the range is outside.
132 clang_analyzer_eval((a + 5) > 0x81LL); // expected-warning{{UNKNOWN}}
134 if ((a + 5) > 0x81LL) {
135 clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
136 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
137 clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
141 void mixedComparisons7(signed char a) {
142 // Case 7: The range wraps around but is entirely outside the symbol's range.
145 clang_analyzer_eval((a + 2) >= (min + 5LL)); // expected-warning{{TRUE}}
147 clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
148 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
149 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
152 void mixedComparisons8(signed char a) {
153 // Case 8: The range wraps, but the upper wrap is out of range.
154 clang_analyzer_eval((a + 5) < 0LL); // expected-warning{{UNKNOWN}}
157 clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
158 clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
159 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
163 void mixedComparisons9(signed char a) {
164 // Case 9: The range is entirely above the symbol's range.
167 clang_analyzer_eval((a + 2) <= (max - 5LL)); // expected-warning{{TRUE}}
169 clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
170 clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
171 clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}