1 | // RUN: %clang_analyze_cc1 -triple hexagon-unknown-linux -verify %s \ |
2 | // RUN: -analyzer-checker=core,valist.Uninitialized,valist.CopyToSelf \ |
3 | // RUN: -analyzer-disable-checker=core.CallAndMessage \ |
4 | // RUN: -analyzer-output=text |
5 | // |
6 | // RUN: %clang_analyze_cc1 -triple x86_64-pc-linux-gnu -verify %s \ |
7 | // RUN: -analyzer-checker=core,valist.Uninitialized,valist.CopyToSelf \ |
8 | // RUN: -analyzer-disable-checker=core.CallAndMessage \ |
9 | // RUN: -analyzer-output=text |
10 | // |
11 | // RUN: %clang_analyze_cc1 -triple x86_64-pc-linux-gnu %s \ |
12 | // RUN: -analyzer-checker=core,valist.Uninitialized |
13 | |
14 | #include "Inputs/system-header-simulator-for-valist.h" |
15 | |
16 | void f1(int fst, ...) { |
17 | va_list va; |
18 | (void)va_arg(va, int); // expected-warning{{va_arg() is called on an uninitialized va_list}} |
19 | // expected-note@-1{{va_arg() is called on an uninitialized va_list}} |
20 | } |
21 | |
22 | int f2(int fst, ...) { |
23 | va_list va; |
24 | va_start(va, fst); // expected-note{{Initialized va_list}} |
25 | va_end(va); // expected-note{{Ended va_list}} |
26 | return va_arg(va, int); // expected-warning{{va_arg() is called on an uninitialized va_list}} |
27 | // expected-note@-1{{va_arg() is called on an uninitialized va_list}} |
28 | } |
29 | |
30 | void f3(int fst, ...) { |
31 | va_list va, va2; |
32 | va_start(va, fst); |
33 | va_copy(va2, va); |
34 | va_end(va); |
35 | (void)va_arg(va2, int); |
36 | va_end(va2); |
37 | } //no-warning |
38 | |
39 | void f4(int cond, ...) { |
40 | va_list va; |
41 | if (cond) { // expected-note{{Assuming 'cond' is 0}} |
42 | // expected-note@-1{{Taking false branch}} |
43 | va_start(va, cond); |
44 | (void)va_arg(va,int); |
45 | } |
46 | va_end(va); //expected-warning{{va_end() is called on an uninitialized va_list}} |
47 | // expected-note@-1{{va_end() is called on an uninitialized va_list}} |
48 | } |
49 | |
50 | void f5(va_list fst, ...) { |
51 | va_start(fst, fst); |
52 | (void)va_arg(fst, int); |
53 | va_end(fst); |
54 | } // no-warning |
55 | |
56 | void f7(int *fst, ...) { |
57 | va_list x; |
58 | va_list *y = &x; |
59 | va_start(*y,fst); |
60 | (void)va_arg(x, int); |
61 | va_end(x); |
62 | } // no-warning |
63 | |
64 | void f8(int *fst, ...) { |
65 | va_list x; |
66 | va_list *y = &x; |
67 | va_start(*y,fst); // expected-note{{Initialized va_list}} |
68 | va_end(x); // expected-note{{Ended va_list}} |
69 | (void)va_arg(*y, int); //expected-warning{{va_arg() is called on an uninitialized va_list}} |
70 | // expected-note@-1{{va_arg() is called on an uninitialized va_list}} |
71 | } |
72 | |
73 | // This only contains problems which are handled by varargs.Unterminated. |
74 | void reinit(int *fst, ...) { |
75 | va_list va; |
76 | va_start(va, fst); |
77 | va_start(va, fst); |
78 | (void)va_arg(va, int); |
79 | } // no-warning |
80 | |
81 | void reinitOk(int *fst, ...) { |
82 | va_list va; |
83 | va_start(va, fst); |
84 | (void)va_arg(va, int); |
85 | va_end(va); |
86 | va_start(va, fst); |
87 | (void)va_arg(va, int); |
88 | va_end(va); |
89 | } // no-warning |
90 | |
91 | void reinit3(int *fst, ...) { |
92 | va_list va; |
93 | va_start(va, fst); // expected-note{{Initialized va_list}} |
94 | (void)va_arg(va, int); |
95 | va_end(va); // expected-note{{Ended va_list}} |
96 | va_start(va, fst); // expected-note{{Initialized va_list}} |
97 | (void)va_arg(va, int); |
98 | va_end(va); // expected-note{{Ended va_list}} |
99 | (void)va_arg(va, int); //expected-warning{{va_arg() is called on an uninitialized va_list}} |
100 | // expected-note@-1{{va_arg() is called on an uninitialized va_list}} |
101 | } |
102 | |
103 | void copyself(int fst, ...) { |
104 | va_list va; |
105 | va_start(va, fst); // expected-note{{Initialized va_list}} |
106 | va_copy(va, va); // expected-warning{{va_list 'va' is copied onto itself}} |
107 | // expected-note@-1{{va_list 'va' is copied onto itself}} |
108 | va_end(va); |
109 | } |
110 | |
111 | void copyselfUninit(int fst, ...) { |
112 | va_list va; |
113 | va_copy(va, va); // expected-warning{{va_list 'va' is copied onto itself}} |
114 | // expected-note@-1{{va_list 'va' is copied onto itself}} |
115 | } |
116 | |
117 | void copyOverwrite(int fst, ...) { |
118 | va_list va, va2; |
119 | va_start(va, fst); // expected-note{{Initialized va_list}} |
120 | va_copy(va, va2); // expected-warning{{Initialized va_list 'va' is overwritten by an uninitialized one}} |
121 | // expected-note@-1{{Initialized va_list 'va' is overwritten by an uninitialized one}} |
122 | } |
123 | |
124 | void copyUnint(int fst, ...) { |
125 | va_list va, va2; |
126 | va_copy(va, va2); // expected-warning{{Uninitialized va_list is copied}} |
127 | // expected-note@-1{{Uninitialized va_list is copied}} |
128 | } |
129 | |
130 | void g1(int fst, ...) { |
131 | va_list va; |
132 | va_end(va); // expected-warning{{va_end() is called on an uninitialized va_list}} |
133 | // expected-note@-1{{va_end() is called on an uninitialized va_list}} |
134 | } |
135 | |
136 | void g2(int fst, ...) { |
137 | va_list va; |
138 | va_start(va, fst); // expected-note{{Initialized va_list}} |
139 | va_end(va); // expected-note{{Ended va_list}} |
140 | va_end(va); // expected-warning{{va_end() is called on an uninitialized va_list}} |
141 | // expected-note@-1{{va_end() is called on an uninitialized va_list}} |
142 | } |
143 | |
144 | void is_sink(int fst, ...) { |
145 | va_list va; |
146 | va_end(va); // expected-warning{{va_end() is called on an uninitialized va_list}} |
147 | // expected-note@-1{{va_end() is called on an uninitialized va_list}} |
148 | *((volatile int *)0) = 1; |
149 | } |
150 | |
151 | // NOTE: this is invalid, as the man page of va_end requires that "Each invocation of va_start() |
152 | // must be matched by a corresponding invocation of va_end() in the same function." |
153 | void ends_arg(va_list arg) { |
154 | va_end(arg); |
155 | } //no-warning |
156 | |
157 | void uses_arg(va_list arg) { |
158 | (void)va_arg(arg, int); |
159 | } //no-warning |
160 | |
161 | void call_vprintf_ok(int isstring, ...) { |
162 | va_list va; |
163 | va_start(va, isstring); |
164 | vprintf(isstring ? "%s" : "%d", va); |
165 | va_end(va); |
166 | } //no-warning |
167 | |
168 | void call_some_other_func(int n, ...) { |
169 | va_list va; |
170 | some_library_function(n, va); |
171 | } //no-warning |
172 | |
173 | void inlined_uses_arg_good(va_list arg) { |
174 | (void)va_arg(arg, int); |
175 | } |
176 | |
177 | void call_inlined_uses_arg_good(int fst, ...) { |
178 | va_list va; |
179 | va_start(va, fst); |
180 | inlined_uses_arg_good(va); |
181 | va_end(va); |
182 | } |
183 | |
184 | void va_copy_test(va_list arg) { |
185 | va_list dst; |
186 | va_copy(dst, arg); |
187 | va_end(dst); |
188 | } |
189 | |