blob: df3a8f22811e65ae1d60ceb48cd9fda84d575d40 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
// RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-config suppress-inlined-defensive-checks=true -verify %s
// Perform inline defensive checks.
void idc(int *p) {
if (p)
;
}
int test01(int *p) {
if (p)
;
return *p; // expected-warning {{Dereference of null pointer}}
}
int test02(int *p, int *x) {
if (p)
;
idc(p);
if (x)
;
return *p; // expected-warning {{Dereference of null pointer}}
}
int test03(int *p, int *x) {
idc(p);
if (p)
;
return *p; // False negative
}
int deref04(int *p) {
return *p; // expected-warning {{Dereference of null pointer}}
}
int test04(int *p) {
if (p)
;
idc(p);
return deref04(p);
}
int test11(int *q, int *x) {
int *p = q;
if (q)
;
if (x)
;
return *p; // expected-warning{{Dereference of null pointer}}
}
int test12(int *q) {
int *p = q;
idc(q);
return *p;
}
int test13(int *q) {
int *p = q;
idc(p);
return *p;
}
int test21(int *q, int *x) {
if (q)
;
if (x)
;
int *p = q;
return *p; // expected-warning{{Dereference of null pointer}}
}
int test22(int *q, int *x) {
idc(q);
if (x)
;
int *p = q;
return *p;
}
int test23(int *q, int *x) {
idc(q);
if (x)
;
int *p = q;
if (!p)
;
return *p; // False negative
}
void use(char *p) {
if (!p)
return;
p[0] = 'a';
}
void test24(char *buffer) {
use(buffer);
buffer[1] = 'b';
}
|