1 | // RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-store=region -fblocks -verify %s |
2 | |
3 | int* f1() { |
4 | int x = 0; |
5 | return &x; // expected-warning{{Address of stack memory associated with local variable 'x' returned}} expected-warning{{address of stack memory associated with local variable 'x' returned}} |
6 | } |
7 | |
8 | int* f2(int y) { |
9 | return &y; // expected-warning{{Address of stack memory associated with local variable 'y' returned}} expected-warning{{address of stack memory associated with parameter 'y' returned}} |
10 | } |
11 | |
12 | int* f3(int x, int *y) { |
13 | int w = 0; |
14 | |
15 | if (x) |
16 | y = &w; |
17 | |
18 | return y; // expected-warning{{Address of stack memory associated with local variable 'w' returned to caller}} |
19 | } |
20 | |
21 | void* compound_literal(int x, int y) { |
22 | if (x) |
23 | return &(unsigned short){((unsigned short)0x22EF)}; // expected-warning{{Address of stack memory}} |
24 | |
25 | int* array[] = {}; |
26 | struct s { int z; double y; int w; }; |
27 | |
28 | if (y) |
29 | return &((struct s){ 2, 0.4, 5 * 8 }); // expected-warning{{Address of stack memory}} |
30 | |
31 | |
32 | void* p = &((struct s){ 42, 0.4, x ? 42 : 0 }); |
33 | return p; // expected-warning{{Address of stack memory}} |
34 | } |
35 | |
36 | void* alloca_test() { |
37 | void* p = __builtin_alloca(10); |
38 | return p; // expected-warning{{Address of stack memory}} |
39 | } |
40 | |
41 | int array_test(int x[2]) { |
42 | return x[0]; // no-warning |
43 | } |
44 | |
45 | struct baz { |
46 | int x; |
47 | int y[2]; |
48 | }; |
49 | |
50 | int struct_test(struct baz byVal, int flag) { |
51 | if (flag) |
52 | return byVal.x; // no-warning |
53 | else { |
54 | return byVal.y[0]; // no-warning |
55 | } |
56 | } |
57 | |
58 | typedef int (^ComparatorBlock)(int a, int b); |
59 | ComparatorBlock test_return_block(void) { |
60 | // This block is a global since it has no captures. |
61 | ComparatorBlock b = ^int(int a, int b){ return a > b; }; |
62 | return b; // no-warning |
63 | } |
64 | |
65 | ComparatorBlock test_return_block_with_capture(int x) { |
66 | // This block is stack allocated because it has captures. |
67 | ComparatorBlock b = ^int(int a, int b){ return a > b + x; }; |
68 | return b; // expected-warning{{Address of stack-allocated block}} |
69 | } |
70 | |
71 | ComparatorBlock test_return_block_neg_aux(void); |
72 | ComparatorBlock test_return_block_neg(void) { |
73 | ComparatorBlock b = test_return_block_neg_aux(); |
74 | return b; // no-warning |
75 | } |
76 | |
77 | // <rdar://problem/7523821> |
78 | int *rdar_7523821_f2() { |
79 | int a[3]; |
80 | return a; // expected-warning 2 {{ddress of stack memory associated with local variable 'a' returned}} |
81 | }; |
82 | |
83 | // Handle blocks that have no captures or are otherwise declared 'static'. |
84 | // <rdar://problem/10348049> |
85 | typedef int (^RDar10348049)(int value); |
86 | RDar10348049 test_rdar10348049(void) { |
87 | static RDar10348049 b = ^int(int x) { |
88 | return x + 2; |
89 | }; |
90 | return b; // no-warning |
91 | } |
92 | |
93 | void testRegister(register const char *reg) { |
94 | if (reg) (void)reg[0]; |
95 | } |
96 | void callTestRegister() { |
97 | char buf[20]; |
98 | testRegister(buf); // no-warning |
99 | } |
100 | |