060f9556a2
According to https://clang.llvm.org/docs/LanguageExtensions.html#checked-arithmetic-builtins, result of builtin_*_overflow functions will be initialized even in case of overflow. Align analyzer logic to docs and always initialize 3rd argument of such builtins. Closes #136292
35 lines
1.3 KiB
C
35 lines
1.3 KiB
C
// RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-output text \
|
|
// RUN: -verify %s
|
|
|
|
void test_no_overflow_note(int a, int b)
|
|
{
|
|
int res;
|
|
|
|
if (__builtin_add_overflow(a, b, &res)) // expected-note {{Assuming no overflow}}
|
|
// expected-note@-1 {{Taking false branch}}
|
|
return;
|
|
|
|
if (res) { // expected-note {{Assuming 'res' is not equal to 0}}
|
|
// expected-note@-1 {{Taking true branch}}
|
|
int *ptr = 0; // expected-note {{'ptr' initialized to a null pointer value}}
|
|
int var = *(int *) ptr; //expected-warning {{Dereference of null pointer}}
|
|
//expected-note@-1 {{Dereference of null pointer}}
|
|
}
|
|
}
|
|
|
|
void test_overflow_note(int a, int b)
|
|
{
|
|
int res;
|
|
|
|
if (__builtin_add_overflow(a, b, &res)) { // expected-note {{Assuming overflow}}
|
|
// expected-note@-1 {{Taking true branch}}
|
|
if (res) { // expected-note {{Assuming 'res' is not equal to 0}}
|
|
// expected-note@-1 {{Taking true branch}}
|
|
int *ptr = 0; // expected-note {{'ptr' initialized to a null pointer value}}
|
|
int var = *(int *) ptr; //expected-warning {{Dereference of null pointer}}
|
|
//expected-note@-1 {{Dereference of null pointer}}
|
|
}
|
|
return;
|
|
}
|
|
}
|