| 1 | // RUN: %clang_analyze_cc1 -w -x c++ -analyzer-checker=core -analyzer-output=text -verify %s |
|---|
| 2 | |
|---|
| 3 | namespace pr34731 { |
|---|
| 4 | int b; |
|---|
| 5 | class c { |
|---|
| 6 | class B { |
|---|
| 7 | public: |
|---|
| 8 | double ***d; |
|---|
| 9 | B(); |
|---|
| 10 | }; |
|---|
| 11 | void e(double **, int); |
|---|
| 12 | void f(B &, int &); |
|---|
| 13 | }; |
|---|
| 14 | |
|---|
| 15 | // Properly track the null pointer in the array field back to the default |
|---|
| 16 | // constructor of 'h'. |
|---|
| 17 | void c::f(B &g, int &i) { |
|---|
| 18 | e(g.d[9], i); // expected-warning{{Array access (via field 'd') results in a null pointer dereference}} |
|---|
| 19 | // expected-note@-1{{Array access (via field 'd') results in a null pointer dereference}} |
|---|
| 20 | B h, a; // expected-note{{Value assigned to 'h.d'}} |
|---|
| 21 | a.d == __null; // expected-note{{Assuming the condition is true}} |
|---|
| 22 | a.d != h.d; // expected-note{{Assuming pointer value is null}} |
|---|
| 23 | f(h, b); // expected-note{{Calling 'c::f'}} |
|---|
| 24 | } |
|---|
| 25 | } |
|---|
| 26 | |
|---|