02b64d46a0
Summary: Instead of digging through the ExplodedGraph, to figure out which edge brought us here, I compute the value of conditional expression by looking at the sub-expression values. To do this, I needed to change the liveness algorithm a bit -- now, the full conditional expression also depends on all atomic sub-expressions, not only the outermost ones. Reviewers: jordan_rose CC: cfe-commits Differential Revision: http://llvm-reviews.chandlerc.com/D1340 llvm-svn: 189090
40 lines
1.1 KiB
C
40 lines
1.1 KiB
C
// RUN: %clang_cc1 -analyze -analyzer-checker=core,debug.ExprInspection -verify %s
|
|
|
|
void clang_analyzer_eval(int);
|
|
|
|
void testAnd(int i, int *p) {
|
|
int *nullP = 0;
|
|
int *knownP = &i;
|
|
clang_analyzer_eval((knownP && knownP) == 1); // expected-warning{{TRUE}}
|
|
clang_analyzer_eval((knownP && nullP) == 0); // expected-warning{{TRUE}}
|
|
clang_analyzer_eval((knownP && p) == 1); // expected-warning{{UNKNOWN}}
|
|
}
|
|
|
|
void testOr(int i, int *p) {
|
|
int *nullP = 0;
|
|
int *knownP = &i;
|
|
clang_analyzer_eval((nullP || knownP) == 1); // expected-warning{{TRUE}}
|
|
clang_analyzer_eval((nullP || nullP) == 0); // expected-warning{{TRUE}}
|
|
clang_analyzer_eval((nullP || p) == 1); // expected-warning{{UNKNOWN}}
|
|
}
|
|
|
|
|
|
// PR13461
|
|
int testTypeIsInt(int i, void *p) {
|
|
if (i | (p && p))
|
|
return 1;
|
|
return 0;
|
|
}
|
|
|
|
// These crashed the analyzer at some point.
|
|
int between(char *x) {
|
|
extern char start[];
|
|
extern char end[];
|
|
return x >= start && x < end;
|
|
}
|
|
|
|
int undef(void) {} // expected-warning{{control reaches end of non-void function}}
|
|
void useUndef(void) { 0 || undef(); }
|
|
|
|
void testPointer(void) { (void) (1 && testPointer && 0); }
|