1 // RUN: %clang_analyze_cc1 -analyzer-checker=core -verify -std=c99 -Dbool=_Bool -Wno-bool-conversion %s
2 // RUN: %clang_analyze_cc1 -analyzer-checker=core -verify -x c++ -Wno-bool-conversion %s
3
4 typedef __INTPTR_TYPE__ intptr_t;
5 char const *p;
6
f0()7 void f0() {
8 char const str[] = "This will change";
9 p = str;
10 } // expected-warning{{Address of stack memory associated with local variable 'str' is still referred to by the global variable 'p' upon returning to the caller. This will be a dangling reference}}
11
f1()12 void f1() {
13 char const str[] = "This will change";
14 p = str;
15 p = 0; // no-warning
16 }
17
f2()18 void f2() {
19 p = (const char *) __builtin_alloca(12);
20 } // expected-warning{{Address of stack memory allocated by call to alloca() on line 19 is still referred to by the global variable 'p' upon returning to the caller. This will be a dangling reference}}
21
22 // PR 7383 - previously the stack address checker would crash on this example
23 // because it would attempt to do a direct load from 'pr7383_list'.
pr7383(__const char * __)24 static int pr7383(__const char *__)
25 {
26 return 0;
27 }
28 extern __const char *__const pr7383_list[];
29
30 // Test that we catch multiple returns via globals when analyzing a function.
test_multi_return()31 void test_multi_return() {
32 static int *a, *b;
33 int x;
34 a = &x;
35 b = &x;
36 } // expected-warning{{Address of stack memory associated with local variable 'x' is still referred to by the static variable 'a' upon returning}} expected-warning{{Address of stack memory associated with local variable 'x' is still referred to by the static variable 'b' upon returning}}
37
returnAsNonLoc()38 intptr_t returnAsNonLoc() {
39 int x;
40 return (intptr_t)&x; // expected-warning{{Address of stack memory associated with local variable 'x' returned to caller}} expected-warning{{address of stack memory associated with local variable 'x' returned}}
41 }
42
returnAsBool()43 bool returnAsBool() {
44 int x;
45 return &x; // no-warning
46 }
47
assignAsNonLoc()48 void assignAsNonLoc() {
49 extern intptr_t ip;
50 int x;
51 ip = (intptr_t)&x;
52 } // expected-warning{{Address of stack memory associated with local variable 'x' is still referred to by the global variable 'ip' upon returning}}
53
assignAsBool()54 void assignAsBool() {
55 extern bool b;
56 int x;
57 b = &x;
58 } // no-warning
59