1 // RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-store=region -fblocks -verify %s
2
f1()3 int* f1() {
4 int x = 0;
5 return &x; // expected-warning{{Address of stack memory associated with local variable 'x' returned}} expected-warning{{address of stack memory associated with local variable 'x' returned}}
6 }
7
f2(int y)8 int* f2(int y) {
9 return &y; // expected-warning{{Address of stack memory associated with local variable 'y' returned}} expected-warning{{address of stack memory associated with local variable 'y' returned}}
10 }
11
f3(int x,int * y)12 int* f3(int x, int *y) {
13 int w = 0;
14
15 if (x)
16 y = &w;
17
18 return y; // expected-warning{{Address of stack memory associated with local variable 'w' returned to caller}}
19 }
20
compound_literal(int x,int y)21 void* compound_literal(int x, int y) {
22 if (x)
23 return &(unsigned short){((unsigned short)0x22EF)}; // expected-warning{{Address of stack memory}}
24
25 int* array[] = {};
26 struct s { int z; double y; int w; };
27
28 if (y)
29 return &((struct s){ 2, 0.4, 5 * 8 }); // expected-warning{{Address of stack memory}}
30
31
32 void* p = &((struct s){ 42, 0.4, x ? 42 : 0 });
33 return p; // expected-warning{{Address of stack memory}}
34 }
35
alloca_test()36 void* alloca_test() {
37 void* p = __builtin_alloca(10);
38 return p; // expected-warning{{Address of stack memory}}
39 }
40
array_test(int x[2])41 int array_test(int x[2]) {
42 return x[0]; // no-warning
43 }
44
45 struct baz {
46 int x;
47 int y[2];
48 };
49
struct_test(struct baz byVal,int flag)50 int struct_test(struct baz byVal, int flag) {
51 if (flag)
52 return byVal.x; // no-warning
53 else {
54 return byVal.y[0]; // no-warning
55 }
56 }
57
58 typedef int (^ComparatorBlock)(int a, int b);
test_return_block(void)59 ComparatorBlock test_return_block(void) {
60 // This block is a global since it has no captures.
61 ComparatorBlock b = ^int(int a, int b){ return a > b; };
62 return b; // no-warning
63 }
64
test_return_block_with_capture(int x)65 ComparatorBlock test_return_block_with_capture(int x) {
66 // This block is stack allocated because it has captures.
67 ComparatorBlock b = ^int(int a, int b){ return a > b + x; };
68 return b; // expected-warning{{Address of stack-allocated block}}
69 }
70
71 ComparatorBlock test_return_block_neg_aux(void);
test_return_block_neg(void)72 ComparatorBlock test_return_block_neg(void) {
73 ComparatorBlock b = test_return_block_neg_aux();
74 return b; // no-warning
75 }
76
77 // <rdar://problem/7523821>
rdar_7523821_f2()78 int *rdar_7523821_f2() {
79 int a[3];
80 return a; // expected-warning 2 {{ddress of stack memory associated with local variable 'a' returned}}
81 };
82
83 // Handle blocks that have no captures or are otherwise declared 'static'.
84 // <rdar://problem/10348049>
85 typedef int (^RDar10348049)(int value);
test_rdar10348049(void)86 RDar10348049 test_rdar10348049(void) {
87 static RDar10348049 b = ^int(int x) {
88 return x + 2;
89 };
90 return b; // no-warning
91 }
92
testRegister(register const char * reg)93 void testRegister(register const char *reg) {
94 if (reg) (void)reg[0];
95 }
callTestRegister()96 void callTestRegister() {
97 char buf[20];
98 testRegister(buf); // no-warning
99 }
100