test/Analysis/diagnostics/deref-track-symbolic-region.cpp

   1 // RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-output=text -verify %s
   2
   3 struct S {
   4   int *x;
   5   int y;
   6 };
   7
   8 S &getSomeReference();
   9 void test(S *p) {
  10   S &r = *p;   //expected-note {{'r' initialized here}}
  11   if (p) return;
  12                //expected-note@-1{{Taking false branch}}
  13                //expected-note@-2{{Assuming 'p' is null}}
  14   r.y = 5; // expected-warning {{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
  15            // expected-note@-1{{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
  16 }
  17
  18 void testRefParam(int *ptr) {
  19         int &ref = *ptr; // expected-note {{'ref' initialized here}}
  20         if (ptr)
  21     // expected-note@-1{{Assuming 'ptr' is null}}
  22     // expected-note@-2{{Taking false branch}}
  23                 return;
  24
  25         extern void use(int &ref);
  26         use(ref); // expected-warning{{Forming reference to null pointer}}
  27             // expected-note@-1{{Forming reference to null pointer}}
  28 }
  29
  30 int testRefToNullPtr() {
  31   int *p = 0; // expected-note {{'p' initialized to a null pointer value}}
  32   int *const &p2 = p; // expected-note{{'p2' initialized here}}
  33   int *p3 = p2; // expected-note {{'p3' initialized to a null pointer value}}
  34   return *p3; // expected-warning {{Dereference of null pointer}}
  35               // expected-note@-1{{Dereference of null pointer}}
  36 }
  37
  38 int testRefToNullPtr2() {
  39   int *p = 0; // expected-note {{'p' initialized to a null pointer value}}
  40   int *const &p2 = p;// expected-note{{'p2' initialized here}}
  41   return *p2; //expected-warning {{Dereference of null pointer}}
  42               // expected-note@-1{{Dereference of null pointer}}
  43 }