| // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s |
| // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s |
| |
| extern int coin(); |
| |
| int foo() { |
| int *x = 0; // expected-note {{'x' initialized to a null pointer value}} |
| while (coin()) { // expected-note{{Loop condition is true}} |
| if (coin()) // expected-note {{Taking true branch}} |
| // expected-note@-1 {{Assuming the condition is true}} |
| return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}} |
| // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}} |
| } |
| return 0; |
| } |
| |
| void bar() { |
| while(coin()) |
| if (coin()) |
| foo(); |
| } |
| |
| int foo2() { |
| int *x = 0; // expected-note {{'x' initialized to a null pointer value}} |
| while (coin()) { // expected-note{{Loop condition is true}} |
| if (coin()) // expected-note {{Taking false branch}} |
| // expected-note@-1 {{Assuming the condition is false}} |
| return false; |
| else |
| return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}} |
| // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}} |
| } |
| return 0; |
| } |
| |
| void bar2() { |
| while(coin()) // expected-note{{Loop condition is true}} |
| if (coin()) // expected-note {{Assuming the condition is false}} |
| // expected-note@-1 {{Taking false branch}} |
| return; |
| else |
| foo(); // expected-note{{Calling 'foo'}} |
| } |
