1 | // RUN: %clang_analyze_cc1 -analyzer-checker=core,debug.ExprInspection -verify -analyzer-config eagerly-assume=false %s |
2 | |
3 | void clang_analyzer_eval(int); |
4 | |
5 | // There should be no warnings unless otherwise indicated. |
6 | |
7 | void testComparisons (int a) { |
8 | // Sema can already catch the simple comparison a==a, |
9 | // since that's usually a logic error (and not path-dependent). |
10 | int b = a; |
11 | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} |
12 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
13 | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} |
14 | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} |
15 | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} |
16 | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} |
17 | } |
18 | |
19 | void testSelfOperations (int a) { |
20 | clang_analyzer_eval((a|a) == a); // expected-warning{{TRUE}} |
21 | clang_analyzer_eval((a&a) == a); // expected-warning{{TRUE}} |
22 | clang_analyzer_eval((a^a) == 0); // expected-warning{{TRUE}} |
23 | clang_analyzer_eval((a-a) == 0); // expected-warning{{TRUE}} |
24 | } |
25 | |
26 | void testIdempotent (int a) { |
27 | clang_analyzer_eval((a*1) == a); // expected-warning{{TRUE}} |
28 | clang_analyzer_eval((a/1) == a); // expected-warning{{TRUE}} |
29 | clang_analyzer_eval((a+0) == a); // expected-warning{{TRUE}} |
30 | clang_analyzer_eval((a-0) == a); // expected-warning{{TRUE}} |
31 | clang_analyzer_eval((a<<0) == a); // expected-warning{{TRUE}} |
32 | clang_analyzer_eval((a>>0) == a); // expected-warning{{TRUE}} |
33 | clang_analyzer_eval((a^0) == a); // expected-warning{{TRUE}} |
34 | clang_analyzer_eval((a&(~0)) == a); // expected-warning{{TRUE}} |
35 | clang_analyzer_eval((a|0) == a); // expected-warning{{TRUE}} |
36 | } |
37 | |
38 | void testReductionToConstant (int a) { |
39 | clang_analyzer_eval((a*0) == 0); // expected-warning{{TRUE}} |
40 | clang_analyzer_eval((a&0) == 0); // expected-warning{{TRUE}} |
41 | clang_analyzer_eval((a|(~0)) == (~0)); // expected-warning{{TRUE}} |
42 | } |
43 | |
44 | void testSymmetricIntSymOperations (int a) { |
45 | clang_analyzer_eval((2+a) == (a+2)); // expected-warning{{TRUE}} |
46 | clang_analyzer_eval((2*a) == (a*2)); // expected-warning{{TRUE}} |
47 | clang_analyzer_eval((2&a) == (a&2)); // expected-warning{{TRUE}} |
48 | clang_analyzer_eval((2^a) == (a^2)); // expected-warning{{TRUE}} |
49 | clang_analyzer_eval((2|a) == (a|2)); // expected-warning{{TRUE}} |
50 | } |
51 | |
52 | void testAsymmetricIntSymOperations (int a) { |
53 | clang_analyzer_eval(((~0) >> a) == (~0)); // expected-warning{{TRUE}} |
54 | clang_analyzer_eval((0 >> a) == 0); // expected-warning{{TRUE}} |
55 | clang_analyzer_eval((0 << a) == 0); // expected-warning{{TRUE}} |
56 | |
57 | // Unsigned right shift shifts in zeroes. |
58 | clang_analyzer_eval(((~0U) >> a) != (~0U)); // expected-warning{{UNKNOWN}} |
59 | } |
60 | |
61 | void testLocations (char *a) { |
62 | char *b = a; |
63 | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} |
64 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
65 | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} |
66 | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} |
67 | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} |
68 | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} |
69 | } |
70 | |
71 | void testMixedTypeComparisons (char a, unsigned long b) { |
72 | if (a != 0) return; |
73 | if (b != 0x100) return; |
74 | |
75 | clang_analyzer_eval(a <= b); // expected-warning{{TRUE}} |
76 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
77 | clang_analyzer_eval(a != b); // expected-warning{{TRUE}} |
78 | } |
79 | |
80 | void testBitwiseRules(unsigned int a, int b) { |
81 | clang_analyzer_eval((a | 1) >= 1); // expected-warning{{TRUE}} |
82 | clang_analyzer_eval((a | -1) >= -1); // expected-warning{{TRUE}} |
83 | clang_analyzer_eval((a | 2) >= 2); // expected-warning{{TRUE}} |
84 | clang_analyzer_eval((a | 5) >= 5); // expected-warning{{TRUE}} |
85 | clang_analyzer_eval((a | 10) >= 10); // expected-warning{{TRUE}} |
86 | |
87 | // Argument order should not influence this |
88 | clang_analyzer_eval((1 | a) >= 1); // expected-warning{{TRUE}} |
89 | |
90 | clang_analyzer_eval((a & 1) <= 1); // expected-warning{{TRUE}} |
91 | clang_analyzer_eval((a & 2) <= 2); // expected-warning{{TRUE}} |
92 | clang_analyzer_eval((a & 5) <= 5); // expected-warning{{TRUE}} |
93 | clang_analyzer_eval((a & 10) <= 10); // expected-warning{{TRUE}} |
94 | clang_analyzer_eval((a & -10) <= 10); // expected-warning{{UNKNOWN}} |
95 | |
96 | // Again, check for different argument order. |
97 | clang_analyzer_eval((1 & a) <= 1); // expected-warning{{TRUE}} |
98 | |
99 | unsigned int c = a; |
100 | c |= 1; |
101 | clang_analyzer_eval((c | 0) == 0); // expected-warning{{FALSE}} |
102 | |
103 | // Rules don't apply to signed typed, as the values might be negative. |
104 | clang_analyzer_eval((b | 1) > 0); // expected-warning{{UNKNOWN}} |
105 | |
106 | // Even for signed values, bitwise OR with a non-zero is always non-zero. |
107 | clang_analyzer_eval((b | 1) == 0); // expected-warning{{FALSE}} |
108 | clang_analyzer_eval((b | -2) == 0); // expected-warning{{FALSE}} |
109 | clang_analyzer_eval((b | 10) == 0); // expected-warning{{FALSE}} |
110 | clang_analyzer_eval((b | 0) == 0); // expected-warning{{UNKNOWN}} |
111 | #ifdef ANALYZER_CM_Z3 |
112 | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{FALSE}} |
113 | #else |
114 | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{UNKNOWN}} |
115 | #endif |
116 | |
117 | // Check that dynamically computed constants also work. |
118 | int constant = 1 << 3; |
119 | unsigned int d = a | constant; |
120 | clang_analyzer_eval(constant > 0); // expected-warning{{TRUE}} |
121 | } |
122 | |