1 // RUN: %clang_cc1 -triple x86_64-apple-darwin10 -analyze -analyzer-checker=core -analyzer-store=region -fblocks -analyzer-opt-analyze-nested-blocks -verify %s
2 // RUN: %clang_cc1 -triple x86_64-apple-darwin10 -analyze -analyzer-checker=core -analyzer-store=region -fblocks -analyzer-opt-analyze-nested-blocks -verify -x objective-c++ %s
4 //===----------------------------------------------------------------------===//
5 // The following code is reduced using delta-debugging from Mac OS X headers:
6 //===----------------------------------------------------------------------===//
8 typedef __builtin_va_list va_list;
9 typedef unsigned int uint32_t;
10 typedef struct dispatch_queue_s *dispatch_queue_t;
11 typedef struct dispatch_queue_attr_s *dispatch_queue_attr_t;
12 typedef void (^dispatch_block_t)(void);
13 void dispatch_async(dispatch_queue_t queue, dispatch_block_t block);
14 __attribute__((visibility("default"))) __attribute__((__malloc__)) __attribute__((__warn_unused_result__)) __attribute__((__nothrow__)) dispatch_queue_t dispatch_queue_create(const char *label, dispatch_queue_attr_t attr);
15 typedef long dispatch_once_t;
16 void dispatch_once(dispatch_once_t *predicate, dispatch_block_t block);
18 dispatch_queue_create(const char *label, dispatch_queue_attr_t attr);
21 typedef signed char BOOL;
22 typedef unsigned long NSUInteger;
23 typedef struct _NSZone NSZone;
24 @class NSInvocation, NSMethodSignature, NSCoder, NSString, NSEnumerator;
26 - (BOOL)isEqual:(id)object;
27 - (oneway void)release;
29 @protocol NSCopying - (id)copyWithZone:(NSZone *)zone; @end
30 @protocol NSMutableCopying - (id)mutableCopyWithZone:(NSZone *)zone; @end
31 @protocol NSCoding - (void)encodeWithCoder:(NSCoder *)aCoder; @end
32 @interface NSObject <NSObject> {}
37 extern id NSAllocateObject(Class aClass, NSUInteger extraBytes, NSZone *zone);
38 @interface NSString : NSObject <NSCopying, NSMutableCopying, NSCoding>
40 - (const char *)UTF8String;
41 - (id)initWithFormat:(NSString *)format arguments:(va_list)argList __attribute__((format(__NSString__, 1, 0)));
43 @class NSString, NSData;
44 typedef struct cssm_sample {} CSSM_SAMPLEGROUP, *CSSM_SAMPLEGROUP_PTR;
45 typedef struct __aslclient *aslclient;
46 typedef struct __aslmsg *aslmsg;
47 aslclient asl_open(const char *ident, const char *facility, uint32_t opts);
48 int asl_log(aslclient asl, aslmsg msg, int level, const char *format, ...) __attribute__((__format__ (__printf__, 4, 5)));
50 //===----------------------------------------------------------------------===//
51 // Begin actual test cases.
52 //===----------------------------------------------------------------------===//
54 // test1 - This test case exposed logic that caused the analyzer to crash because of a memory bug
55 // in BlockDataRegion. It represents real code that contains two block literals. Eventually
56 // via IPA 'logQueue' and 'client' should be updated after the call to 'dispatch_once'.
57 void test1(NSString *format, ...) {
58 static dispatch_queue_t logQueue;
59 static aslclient client;
60 static dispatch_once_t pred;
62 if (__builtin_expect(*(&pred), ~0l) != ~0l)
63 dispatch_once(&pred, ^{
64 logQueue = dispatch_queue_create("com.mycompany.myproduct.asl", 0);
65 client = asl_open(((char*)0), "com.mycompany.myproduct", 0);
70 __builtin_va_start(args, format);
72 NSString *str = [[NSString alloc] initWithFormat:format arguments:args];
73 dispatch_async(logQueue, ^{ asl_log(client, ((aslmsg)0), 4, "%s", [str UTF8String]); });
76 __builtin_va_end(args);
79 // test2 - Test that captured variables that are uninitialized are flagged
84 ^{ y = x + 1; }(); // expected-warning{{Variable 'x' is uninitialized when captured by block}}
90 ^{ y = x + 1; }(); // expected-warning {{left operand of '+' is a garbage value}}
94 typedef void (^myblock)(void);
95 myblock f = ^() { f(); }; // expected-warning{{Variable 'f' is uninitialized when captured by block}}
99 void testMessaging() {
100 // <rdar://problem/12119814>
101 [[^(){} copy] release];
105 @interface rdar12415065 : NSObject
108 @implementation rdar12415065
110 // At one point this crashed because we created a path note at a
111 // PreStmtPurgeDeadSymbols point but only knew how to deal with PostStmt
112 // points. <rdar://problem/12687586>
114 extern dispatch_queue_t queue;
119 // This previously was a false positive with 'x' being flagged as being
120 // uninitialized when captured by the exterior block (when it is only
121 // captured by the interior block).
122 dispatch_async(queue, ^{
125 dispatch_async(queue, ^{ (void)x; });
132 void testReturnVariousSignatures() {
150 // This test used to cause infinite loop in the region invalidation.
151 void blockCapturesItselfInTheLoop(int x, int m) {
152 void (^assignData)(int) = ^(int x){