| 1 | // RUN: %clang_analyze_cc1 -analyzer-checker=core,debug.ExprInspection -verify -analyzer-config eagerly-assume=false %s |
| 2 | |
| 3 | void clang_analyzer_eval(int); |
| 4 | |
| 5 | // There should be no warnings unless otherwise indicated. |
| 6 | |
| 7 | void testComparisons (int a) { |
| 8 | // Sema can already catch the simple comparison a==a, |
| 9 | // since that's usually a logic error (and not path-dependent). |
| 10 | int b = a; |
| 11 | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} |
| 12 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
| 13 | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} |
| 14 | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} |
| 15 | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} |
| 16 | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} |
| 17 | } |
| 18 | |
| 19 | void testSelfOperations (int a) { |
| 20 | clang_analyzer_eval((a|a) == a); // expected-warning{{TRUE}} |
| 21 | clang_analyzer_eval((a&a) == a); // expected-warning{{TRUE}} |
| 22 | clang_analyzer_eval((a^a) == 0); // expected-warning{{TRUE}} |
| 23 | clang_analyzer_eval((a-a) == 0); // expected-warning{{TRUE}} |
| 24 | } |
| 25 | |
| 26 | void testIdempotent (int a) { |
| 27 | clang_analyzer_eval((a*1) == a); // expected-warning{{TRUE}} |
| 28 | clang_analyzer_eval((a/1) == a); // expected-warning{{TRUE}} |
| 29 | clang_analyzer_eval((a+0) == a); // expected-warning{{TRUE}} |
| 30 | clang_analyzer_eval((a-0) == a); // expected-warning{{TRUE}} |
| 31 | clang_analyzer_eval((a<<0) == a); // expected-warning{{TRUE}} |
| 32 | clang_analyzer_eval((a>>0) == a); // expected-warning{{TRUE}} |
| 33 | clang_analyzer_eval((a^0) == a); // expected-warning{{TRUE}} |
| 34 | clang_analyzer_eval((a&(~0)) == a); // expected-warning{{TRUE}} |
| 35 | clang_analyzer_eval((a|0) == a); // expected-warning{{TRUE}} |
| 36 | } |
| 37 | |
| 38 | void testReductionToConstant (int a) { |
| 39 | clang_analyzer_eval((a*0) == 0); // expected-warning{{TRUE}} |
| 40 | clang_analyzer_eval((a&0) == 0); // expected-warning{{TRUE}} |
| 41 | clang_analyzer_eval((a|(~0)) == (~0)); // expected-warning{{TRUE}} |
| 42 | } |
| 43 | |
| 44 | void testSymmetricIntSymOperations (int a) { |
| 45 | clang_analyzer_eval((2+a) == (a+2)); // expected-warning{{TRUE}} |
| 46 | clang_analyzer_eval((2*a) == (a*2)); // expected-warning{{TRUE}} |
| 47 | clang_analyzer_eval((2&a) == (a&2)); // expected-warning{{TRUE}} |
| 48 | clang_analyzer_eval((2^a) == (a^2)); // expected-warning{{TRUE}} |
| 49 | clang_analyzer_eval((2|a) == (a|2)); // expected-warning{{TRUE}} |
| 50 | } |
| 51 | |
| 52 | void testAsymmetricIntSymOperations (int a) { |
| 53 | clang_analyzer_eval(((~0) >> a) == (~0)); // expected-warning{{TRUE}} |
| 54 | clang_analyzer_eval((0 >> a) == 0); // expected-warning{{TRUE}} |
| 55 | clang_analyzer_eval((0 << a) == 0); // expected-warning{{TRUE}} |
| 56 | |
| 57 | // Unsigned right shift shifts in zeroes. |
| 58 | clang_analyzer_eval(((~0U) >> a) != (~0U)); // expected-warning{{UNKNOWN}} |
| 59 | } |
| 60 | |
| 61 | void testLocations (char *a) { |
| 62 | char *b = a; |
| 63 | clang_analyzer_eval(b == a); // expected-warning{{TRUE}} |
| 64 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
| 65 | clang_analyzer_eval(b <= a); // expected-warning{{TRUE}} |
| 66 | clang_analyzer_eval(b != a); // expected-warning{{FALSE}} |
| 67 | clang_analyzer_eval(b > a); // expected-warning{{FALSE}} |
| 68 | clang_analyzer_eval(b < a); // expected-warning{{FALSE}} |
| 69 | } |
| 70 | |
| 71 | void testMixedTypeComparisons (char a, unsigned long b) { |
| 72 | if (a != 0) return; |
| 73 | if (b != 0x100) return; |
| 74 | |
| 75 | clang_analyzer_eval(a <= b); // expected-warning{{TRUE}} |
| 76 | clang_analyzer_eval(b >= a); // expected-warning{{TRUE}} |
| 77 | clang_analyzer_eval(a != b); // expected-warning{{TRUE}} |
| 78 | } |
| 79 | |
| 80 | void testBitwiseRules(unsigned int a, int b) { |
| 81 | clang_analyzer_eval((a | 1) >= 1); // expected-warning{{TRUE}} |
| 82 | clang_analyzer_eval((a | -1) >= -1); // expected-warning{{TRUE}} |
| 83 | clang_analyzer_eval((a | 2) >= 2); // expected-warning{{TRUE}} |
| 84 | clang_analyzer_eval((a | 5) >= 5); // expected-warning{{TRUE}} |
| 85 | clang_analyzer_eval((a | 10) >= 10); // expected-warning{{TRUE}} |
| 86 | |
| 87 | // Argument order should not influence this |
| 88 | clang_analyzer_eval((1 | a) >= 1); // expected-warning{{TRUE}} |
| 89 | |
| 90 | clang_analyzer_eval((a & 1) <= 1); // expected-warning{{TRUE}} |
| 91 | clang_analyzer_eval((a & 2) <= 2); // expected-warning{{TRUE}} |
| 92 | clang_analyzer_eval((a & 5) <= 5); // expected-warning{{TRUE}} |
| 93 | clang_analyzer_eval((a & 10) <= 10); // expected-warning{{TRUE}} |
| 94 | clang_analyzer_eval((a & -10) <= 10); // expected-warning{{UNKNOWN}} |
| 95 | |
| 96 | // Again, check for different argument order. |
| 97 | clang_analyzer_eval((1 & a) <= 1); // expected-warning{{TRUE}} |
| 98 | |
| 99 | unsigned int c = a; |
| 100 | c |= 1; |
| 101 | clang_analyzer_eval((c | 0) == 0); // expected-warning{{FALSE}} |
| 102 | |
| 103 | // Rules don't apply to signed typed, as the values might be negative. |
| 104 | clang_analyzer_eval((b | 1) > 0); // expected-warning{{UNKNOWN}} |
| 105 | |
| 106 | // Even for signed values, bitwise OR with a non-zero is always non-zero. |
| 107 | clang_analyzer_eval((b | 1) == 0); // expected-warning{{FALSE}} |
| 108 | clang_analyzer_eval((b | -2) == 0); // expected-warning{{FALSE}} |
| 109 | clang_analyzer_eval((b | 10) == 0); // expected-warning{{FALSE}} |
| 110 | clang_analyzer_eval((b | 0) == 0); // expected-warning{{UNKNOWN}} |
| 111 | #ifdef ANALYZER_CM_Z3 |
| 112 | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{FALSE}} |
| 113 | #else |
| 114 | clang_analyzer_eval((b | -2) >= 0); // expected-warning{{UNKNOWN}} |
| 115 | #endif |
| 116 | |
| 117 | // Check that dynamically computed constants also work. |
| 118 | int constant = 1 << 3; |
| 119 | unsigned int d = a | constant; |
| 120 | clang_analyzer_eval(constant > 0); // expected-warning{{TRUE}} |
| 121 | } |
| 122 | |