42 lines
1000 B
C
42 lines
1000 B
C
|
// RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection -analyzer-store=region -verify -analyzer-config eagerly-assume=false %s
|
||
|
|
|
||
|
|
void clang_analyzer_eval(int);
|
||
|
|
void clang_analyzer_warnIfReached();
|
||
|
|
|
||
|
|
void f(void) {
|
||
|
|
void (*p)(void);
|
||
|
|
p = f;
|
||
|
|
p = &f;
|
||
|
|
p();
|
||
|
|
(*p)();
|
||
|
|
}
|
||
|
|
|
||
|
|
void g(void (*fp)(void));
|
||
|
|
|
||
|
|
void f2() {
|
||
|
|
g(f);
|
||
|
|
}
|
||
|
|
|
||
|
|
void f3(void (*f)(void), void (*g)(void)) {
|
||
|
|
clang_analyzer_eval(!f); // expected-warning{{UNKNOWN}}
|
||
|
|
f();
|
||
|
|
clang_analyzer_eval(!f); // expected-warning{{FALSE}}
|
||
|
|
|
||
|
|
clang_analyzer_eval(!g); // expected-warning{{UNKNOWN}}
|
||
|
|
(*g)();
|
||
|
|
clang_analyzer_eval(!g); // expected-warning{{FALSE}}
|
||
|
|
}
|
||
|
|
|
||
|
|
void nullFunctionPointerConstant() {
|
||
|
|
void (*f)(void) = 0;
|
||
|
|
f(); // expected-warning{{Called function pointer is null}}
|
||
|
|
clang_analyzer_warnIfReached(); // no-warning
|
||
|
|
}
|
||
|
|
|
||
|
|
void nullFunctionPointerConstraint(void (*f)(void)) {
|
||
|
|
if (f)
|
||
|
|
return;
|
||
|
|
f(); // expected-warning{{Called function pointer is null}}
|
||
|
|
clang_analyzer_warnIfReached(); // no-warning
|
||
|
|
}
|