1 | // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s |
2 | // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s |
3 | |
4 | extern int coin(); |
5 | |
6 | int foo() { |
7 | int *x = 0; // expected-note {{'x' initialized to a null pointer value}} |
8 | while (coin()) { // expected-note{{Loop condition is true}} |
9 | if (coin()) // expected-note {{Taking true branch}} |
10 | // expected-note@-1 {{Assuming the condition is true}} |
11 | return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}} |
12 | // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}} |
13 | } |
14 | return 0; |
15 | } |
16 | |
17 | void bar() { |
18 | while(coin()) |
19 | if (coin()) |
20 | foo(); |
21 | } |
22 | |
23 | int foo2() { |
24 | int *x = 0; // expected-note {{'x' initialized to a null pointer value}} |
25 | while (coin()) { // expected-note{{Loop condition is true}} |
26 | if (coin()) // expected-note {{Taking false branch}} |
27 | // expected-note@-1 {{Assuming the condition is false}} |
28 | return false; |
29 | else |
30 | return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}} |
31 | // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}} |
32 | } |
33 | return 0; |
34 | } |
35 | |
36 | void bar2() { |
37 | while(coin()) // expected-note{{Loop condition is true}} |
38 | if (coin()) // expected-note {{Assuming the condition is false}} |
39 | // expected-note@-1 {{Taking false branch}} |
40 | return; |
41 | else |
42 | foo(); // expected-note{{Calling 'foo'}} |
43 | } |
44 | |