1 | // RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-output=text -verify %s |
2 | |
3 | struct S { |
4 | int *x; |
5 | int y; |
6 | }; |
7 | |
8 | S &getSomeReference(); |
9 | void test(S *p) { |
10 | S &r = *p; //expected-note {{'r' initialized here}} |
11 | if (p) return; |
12 | //expected-note@-1{{Taking false branch}} |
13 | //expected-note@-2{{Assuming 'p' is null}} |
14 | r.y = 5; // expected-warning {{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}} |
15 | // expected-note@-1{{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}} |
16 | } |
17 | |
18 | void testRefParam(int *ptr) { |
19 | int &ref = *ptr; // expected-note {{'ref' initialized here}} |
20 | if (ptr) |
21 | // expected-note@-1{{Assuming 'ptr' is null}} |
22 | // expected-note@-2{{Taking false branch}} |
23 | return; |
24 | |
25 | extern void use(int &ref); |
26 | use(ref); // expected-warning{{Forming reference to null pointer}} |
27 | // expected-note@-1{{Forming reference to null pointer}} |
28 | } |
29 | |
30 | int testRefToNullPtr() { |
31 | int *p = 0; // expected-note {{'p' initialized to a null pointer value}} |
32 | int *const &p2 = p; // expected-note{{'p2' initialized here}} |
33 | int *p3 = p2; // expected-note {{'p3' initialized to a null pointer value}} |
34 | return *p3; // expected-warning {{Dereference of null pointer}} |
35 | // expected-note@-1{{Dereference of null pointer}} |
36 | } |
37 | |
38 | int testRefToNullPtr2() { |
39 | int *p = 0; // expected-note {{'p' initialized to a null pointer value}} |
40 | int *const &p2 = p;// expected-note{{'p2' initialized here}} |
41 | return *p2; //expected-warning {{Dereference of null pointer}} |
42 | // expected-note@-1{{Dereference of null pointer}} |
43 | } |