mirror of
https://github.com/Gericom/teak-llvm.git
synced 2025-06-21 12:35:47 -04:00

In ProgramState::getSVal(Location, Type) API which dereferences a pointer value, when the optional Type parameter is not supplied and the Location is not typed, type should have been guessed on a best-effort basis by inspecting the Location more deeply. However, this never worked; the auto-detected type was instead a pointer type to the correct type. Fixed the issue and added various test cases to demonstrate which parts of the analyzer were affected (uninitialized pointer argument checker, C++ trivial copy modeling, Google test API modeling checker). Additionally, autodetected void types are automatically replaced with char, in order to simplify checker APIs. Which means that if the location is a void pointer, getSVal() would read the first byte through this pointer and return its symbolic value. Fixes pr34305. Differential Revision: https://reviews.llvm.org/D38358 llvm-svn: 314910
32 lines
1.1 KiB
C
32 lines
1.1 KiB
C
// RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core -analyzer-store=region -verify %s
|
|
//
|
|
// Just exercise the analyzer on code that has at one point caused issues
|
|
// (i.e., no assertions or crashes).
|
|
|
|
|
|
static void f1(const char *x, char *y) {
|
|
while (*x != 0) {
|
|
*y++ = *x++;
|
|
}
|
|
}
|
|
|
|
// This following case checks that we properly handle typedefs when getting
|
|
// the RvalueType of an ElementRegion.
|
|
typedef struct F12_struct {} F12_typedef;
|
|
typedef void* void_typedef;
|
|
void_typedef f2_helper();
|
|
static void f2(void *buf) {
|
|
F12_typedef* x;
|
|
x = f2_helper();
|
|
memcpy((&x[1]), (buf), 1); // expected-warning{{implicitly declaring library function 'memcpy' with type 'void *(void *, const void *}} \
|
|
// expected-note{{include the header <string.h> or explicitly provide a declaration for 'memcpy'}}
|
|
}
|
|
|
|
// AllocaRegion is untyped. Void pointer isn't of much help either. Before
|
|
// realizing that the value is undefined, we need to somehow figure out
|
|
// what type of value do we expect.
|
|
void f3(void *dest) {
|
|
void *src = __builtin_alloca(5);
|
|
memcpy(dest, src, 1); // expected-warning{{2nd function call argument is a pointer to uninitialized value}}
|
|
}
|