| // RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core,debug.ExprInspection %s -std=c++11 -verify |
| |
| void clang_analyzer_eval(bool); |
| void clang_analyzer_warnIfReached(); |
| |
| void testAddressof(int x) { |
| clang_analyzer_eval(&x == __builtin_addressof(x)); // expected-warning{{TRUE}} |
| } |
| |
| void testSize() { |
| struct { |
| int x; |
| int y; |
| char z; |
| } object; |
| clang_analyzer_eval(__builtin_object_size(&object.y, 0) == sizeof(object) - sizeof(int)); // expected-warning{{TRUE}} |
| |
| // Clang can't actually evaluate these builtin "calls", but importantly they don't actually evaluate the argument expression either. |
| int i = 0; |
| char buf[10]; |
| clang_analyzer_eval(__builtin_object_size(&buf[i++], 0) == sizeof(buf)); // expected-warning{{FALSE}} |
| clang_analyzer_eval(__builtin_object_size(&buf[++i], 0) == sizeof(buf) - 1); // expected-warning{{FALSE}} |
| |
| clang_analyzer_eval(i == 0); // expected-warning{{TRUE}} |
| } |
| |
| void test_assume_aligned_1(char *p) { |
| char *q; |
| |
| q = (char*) __builtin_assume_aligned(p, 16); |
| clang_analyzer_eval(p == q); // expected-warning{{TRUE}} |
| } |
| |
| void test_assume_aligned_2(char *p) { |
| char *q; |
| |
| q = (char*) __builtin_assume_aligned(p, 16, 8); |
| clang_analyzer_eval(p == q); // expected-warning{{TRUE}} |
| } |
| |
| void test_assume_aligned_3(char *p) { |
| void *q; |
| |
| q = __builtin_assume_aligned(p, 16, 8); |
| clang_analyzer_eval(p == q); // expected-warning{{TRUE}} |
| } |
| |
| void test_assume_aligned_4(char *p) { |
| char *q; |
| |
| q = (char*) __builtin_assume_aligned(p + 1, 16); |
| clang_analyzer_eval(p == q); // expected-warning{{FALSE}} |
| } |
| |
| void f(int i) { |
| __builtin_assume(i < 10); |
| clang_analyzer_eval(i < 15); // expected-warning {{TRUE}} |
| } |
| |
| void g(int i) { |
| if (i > 5) { |
| __builtin_assume(i < 5); |
| clang_analyzer_warnIfReached(); // Assumtion contradicts constraints. |
| // We give up the analysis on this path. |
| } |
| } |