clang/test/Analysis/uninit-const.cpp

   1 // RUN: %clang_analyze_cc1 -analyzer-output=text -verify %s \
   2 // RUN:   -analyzer-checker=core \
   3 // RUN:   -analyzer-checker=cplusplus.NewDelete \
   4 // RUN:   -analyzer-config core.CallAndMessage:ArgPointeeInitializedness=true
   5
   6 // RUN: %clang_analyze_cc1 -analyzer-output=text -verify %s \
   7 // RUN:   -DTEST_INLINABLE_ALLOCATORS \
   8 // RUN:   -analyzer-checker=core \
   9 // RUN:   -analyzer-checker=cplusplus.NewDelete \
  10 // RUN:   -analyzer-config core.CallAndMessage:ArgPointeeInitializedness=true
  11
  12 // Passing uninitialized const data to unknown function
  13
  14 #include "Inputs/system-header-simulator-cxx.h"
  15
  16 void doStuff6(const int& c);
  17 void doStuff4(const int y);
  18 void doStuff3(int& g);
  19 void doStuff_uninit(const int *u);
  20
  21
  22 int f10(void) {
  23   int *ptr;
  24                  // FIXME: The message is misleading -- we should state that
  25                  // a pointer to an uninitialized value is stored.
  26   ptr = new int; // expected-note{{Storing uninitialized value}}
  27   if(*ptr) { // expected-warning{{Branch condition evaluates to a garbage value [core.uninitialized.Branch]}}
  28              // expected-note@-1 {{Branch condition evaluates to a garbage value}}
  29     doStuff4(*ptr);
  30   }
  31   delete ptr;
  32   return 0;
  33 }
  34
  35 int f9(void) {
  36   int *ptr;
  37                  // FIXME: The message is misleading -- we should state that
  38                  // a pointer to an uninitialized value is stored.
  39   ptr = new int; // expected-note{{Storing uninitialized value}}
  40                  // expected-note@-1{{Value assigned to 'ptr'}}
  41   doStuff_uninit(ptr); // expected-warning{{1st function call argument is a pointer to uninitialized value [core.CallAndMessage]}}
  42                        // expected-note@-1{{1st function call argument is a pointer to uninitialized value}}
  43   delete ptr;
  44   return 0;
  45 }
  46
  47 int f8(void) {
  48   int *ptr;
  49
  50   ptr = new int;
  51   *ptr = 25;
  52
  53   doStuff_uninit(ptr); // no warning?
  54   delete ptr;
  55   return 0;
  56 }
  57
  58 void f7(void) {
  59   int m = 3;
  60   doStuff6(m); // no warning
  61 }
  62
  63
  64 int& f6_1_sub(int &p) {
  65   return p; // expected-note{{Returning without writing to 'p'}}
  66             // expected-note@-1{{Returning pointer (reference to 't')}}
  67 }
  68
  69 void f6_1(void) {
  70   int t;               // expected-note{{'t' declared without an initial value}}
  71   int p = f6_1_sub(t); //expected-warning {{Assigned value is garbage or undefined}}
  72                        //expected-note@-1 {{Passing value via 1st parameter 'p'}}
  73                        //expected-note@-2 {{Calling 'f6_1_sub'}}
  74                        //expected-note@-3 {{Returning from 'f6_1_sub'}}
  75                        //expected-note@-4 {{Assigned value is garbage or undefined}}
  76   int q = p;
  77   doStuff6(q);
  78 }
  79
  80 void f6_2(void) {
  81   int t;       //expected-note {{'t' declared without an initial value}}
  82   int &p = t;  //expected-note {{'p' initialized here}}
  83   int &s = p;  //expected-note {{'s' initialized to the value of 'p'}}
  84   int &q = s;  //expected-note {{'q' initialized to the value of 's'}}
  85   doStuff6(q); //expected-warning {{1st function call argument is an uninitialized value}}
  86                //expected-note@-1 {{1st function call argument is an uninitialized value}}
  87 }
  88
  89 void doStuff6_3(int& q_, int *ptr_) {}
  90
  91 void f6_3(void) {
  92   int *ptr;    //expected-note {{'ptr' declared without an initial value}}
  93   int t;
  94   int &p = t;
  95   int &s = p;
  96   int &q = s;
  97   doStuff6_3(q,ptr); //expected-warning {{2nd function call argument is an uninitialized value}}
  98                //expected-note@-1 {{2nd function call argument is an uninitialized value}}
  99
 100 }
 101
 102 void f6(void) {
 103   int k;       // expected-note {{'k' declared without an initial value}}
 104   doStuff6(k); // expected-warning {{1st function call argument is an uninitialized value}}
 105                // expected-note@-1 {{1st function call argument is an uninitialized value}}
 106
 107 }
 108
 109
 110
 111 void f5(void) {
 112   int t;               // expected-note {{'t' declared without an initial value}}
 113   int* tp = &t;        // expected-note {{'tp' initialized here}}
 114   doStuff_uninit(tp);  // expected-warning {{1st function call argument is a pointer to uninitialized value}}
 115                        // expected-note@-1 {{1st function call argument is a pointer to uninitialized value}}
 116 }
 117
 118
 119 void f4(void) {
 120       int y;        // expected-note {{'y' declared without an initial value}}
 121       doStuff4(y);  // expected-warning {{1st function call argument is an uninitialized value}}
 122                     // expected-note@-1 {{1st function call argument is an uninitialized value}}
 123 }
 124
 125 void f3(void) {
 126       int g;
 127       doStuff3(g); // no warning
 128 }
 129
 130 int z;
 131 void f2(void) {
 132       doStuff_uninit(&z);  // no warning
 133 }
 134
 135 void f1(void) {
 136       int x_=5;
 137       doStuff_uninit(&x_);  // no warning
 138 }
 139
 140 void f_uninit(void) {
 141       int x;               // expected-note {{'x' declared without an initial value}}
 142       doStuff_uninit(&x);  // expected-warning {{1st function call argument is a pointer to uninitialized value}}
 143                            // expected-note@-1 {{1st function call argument is a pointer to uninitialized value}}
 144 }