clang/test/Analysis/null-deref-path-notes.cpp

// RUN: %clang_analyze_cc1 -w -x c++ -analyzer-checker=core -analyzer-output=text -verify %s

namespace pr34731 {
int b;
class c {
  class B {
   public:
    double ***d;
    B();
  };
  void e(double **, int);
  void f(B &, int &);
};

// Properly track the null pointer in the array field back to the default
// constructor of 'h'.
void c::f(B &g, int &i) {
  e(g.d[9], i); // expected-warning{{Array access (via field 'd') results in a null pointer dereference}}
                // expected-note@-1{{Array access (via field 'd') results in a null pointer dereference}}
  B h, a; // expected-note{{Value assigned to 'h.d'}}
  a.d == __null; // expected-note{{Assuming the condition is true}}
  a.d != h.d; // expected-note{{Assuming 'a.d' is equal to 'h.d'}}
  f(h, b); // expected-note{{Calling 'c::f'}}
}
}

namespace GH124975 {
void no_crash_in_br_visitors(int *p) {
  if (p) {}
  // expected-note@-1 {{Assuming 'p' is null}}
  // expected-note@-2 {{Taking false branch}}

  extern bool ExternLocalCoin;
  // expected-note@+2 {{Assuming 'ExternLocalCoin' is false}}
  // expected-note@+1 {{Taking false branch}}
  if (ExternLocalCoin)
    return;

  *p = 4;
  // expected-warning@-1 {{Dereference of null pointer (loaded from variable 'p')}}
  // expected-note@-2    {{Dereference of null pointer (loaded from variable 'p')}}
}

// Thread local variables are implicitly static, so let's test them too.
void thread_local_alternative(int *p) {
  if (p) {}
  // expected-note@-1 {{Assuming 'p' is null}}
  // expected-note@-2 {{Taking false branch}}

  thread_local bool ThreadLocalCoin;
  // expected-note@+2 {{'ThreadLocalCoin' is false}}
  // expected-note@+1 {{Taking false branch}}
  if (ThreadLocalCoin)
    return;

  *p = 4;
  // expected-warning@-1 {{Dereference of null pointer (loaded from variable 'p')}}
  // expected-note@-2    {{Dereference of null pointer (loaded from variable 'p')}}
}
} // namespace GH124975