teak-llvm/clang/test/Analysis/new-ctor-null.cpp
Csaba Dabis 077f13c612 [analyzer] ReturnVisitor: Bypass everything to see inlined calls
Summary:
When we traversed backwards on ExplodedNodes to see where processed the
given statement we `break` too early. With the current approach we do not
miss the CallExitEnd ProgramPoint which stands for an inlined call.

Reviewers: NoQ, xazax.hun, ravikandhadai, baloghadamsoftware, Szelethus

Reviewed By: NoQ

Subscribers: szepet, rnkovacs, a.sidorin, mikhail.ramalho, donat.nagy,
             dkrupp, cfe-commits

Tags: #clang

Differential Revision: https://reviews.llvm.org/D62926

llvm-svn: 363491
2019-06-15 10:05:49 +00:00

40 lines
943 B
C++

// RUN: %clang_analyze_cc1 \
// RUN: -analyzer-checker=core,debug.ExprInspection \
// RUN: -verify %s
void clang_analyzer_eval(bool);
void clang_analyzer_warnIfReached();
typedef __typeof__(sizeof(int)) size_t;
void *operator new(size_t size) throw() {
return nullptr;
}
void *operator new[](size_t size) throw() {
return nullptr;
}
struct S {
int x;
S() : x(1) {
// FIXME: Constructor should not be called with null this, even if it was
// returned by operator new().
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
~S() {}
};
void testArrays() {
S *s = new S[10]; // no-crash
s[0].x = 2;
// no-warning: 'Dereference of null pointer' suppressed by ReturnVisitor.
}
int global;
void testInvalidationOnConstructionIntoNull() {
global = 0;
S *s = new S();
// FIXME: Should be FALSE - we should not invalidate globals.
clang_analyzer_eval(global); // expected-warning{{UNKNOWN}}
}