f9088f1eb5
- Closes #151529 `ParenExpr` should be ignored before reaching `ExprEngine::Visit`. Failing to do so triggers the assertion.
78 lines
3.6 KiB
C++
78 lines
3.6 KiB
C++
// RUN: %clang_analyze_cc1 -std=c++11 -verify %s \
|
|
// RUN: -triple=x86_64-unknown-linux-gnu \
|
|
// RUN: -analyzer-checker=core,security.ArrayBound,debug.ExprInspection
|
|
|
|
void clang_analyzer_eval(bool);
|
|
void clang_analyzer_value(int);
|
|
void clang_analyzer_dump(int);
|
|
|
|
// From: https://github.com/llvm/llvm-project/issues/100762
|
|
extern int arrOf10[10];
|
|
void using_builtin(int x) {
|
|
__builtin_assume(x > 101); // CallExpr
|
|
arrOf10[x] = 404; // expected-warning {{Out of bound access to memory}}
|
|
}
|
|
|
|
void using_assume_attr(int ax) {
|
|
[[assume(ax > 100)]]; // NullStmt with an "assume" attribute.
|
|
arrOf10[ax] = 405; // expected-warning {{Out of bound access to memory}}
|
|
}
|
|
|
|
void using_many_assume_attr(int yx) {
|
|
[[assume(yx > 104), assume(yx > 200), assume(yx < 300)]]; // NullStmt with an attribute
|
|
arrOf10[yx] = 406; // expected-warning{{Out of bound access to memory}}
|
|
}
|
|
|
|
int using_assume_attr_has_no_sideeffects(int y) {
|
|
int orig_y = y;
|
|
clang_analyzer_value(y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_value(orig_y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_dump(y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_dump(orig_y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
|
|
// We should not apply sideeffects of the argument of [[assume(...)]].
|
|
// "y" should not get incremented;
|
|
[[assume(++y == 43)]]; // expected-warning {{assumption is ignored because it contains (potential) side-effects}}
|
|
|
|
clang_analyzer_dump(y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_dump(orig_y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_value(y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_value(orig_y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_eval(y == orig_y); // expected-warning {{TRUE}} Good.
|
|
|
|
return y;
|
|
}
|
|
|
|
int using_builtin_assume_has_no_sideeffects(int y) {
|
|
int orig_y = y;
|
|
clang_analyzer_value(y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_value(orig_y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_dump(y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_dump(orig_y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
|
|
// We should not apply sideeffects of the argument of __builtin_assume(...)
|
|
// "u" should not get incremented;
|
|
__builtin_assume(++y == 43); // expected-warning {{assumption is ignored because it contains (potential) side-effects}}
|
|
|
|
clang_analyzer_dump(y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_dump(orig_y); // expected-warning-re {{{{^}}reg_${{[0-9]+}}<int y> [debug.ExprInspection]{{$}}}}
|
|
clang_analyzer_value(y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_value(orig_y); // expected-warning {{32s:{ [-2147483648, 2147483647] }}}
|
|
clang_analyzer_eval(y == orig_y); // expected-warning {{TRUE}} Good.
|
|
|
|
return y;
|
|
}
|
|
|
|
template <int ...args>
|
|
bool issue151529() {
|
|
// no-crash
|
|
[[assume((true))]];
|
|
// no-crash
|
|
[[assume(((args >= 0) && ...))]]; // expected-warning {{pack fold expression is a C++17 extension}}
|
|
return ((args >= 0) && ...); // expected-warning {{pack fold expression is a C++17 extension}}
|
|
}
|
|
|
|
void instantiate_issue151529() {
|
|
issue151529<0>();
|
|
}
|