| 1 | // RUN: %clang_analyze_cc1 -analyzer-checker=core -analyzer-store=region -fblocks -verify %s |
| 2 | |
| 3 | int* f1() { |
| 4 | int x = 0; |
| 5 | return &x; // expected-warning{{Address of stack memory associated with local variable 'x' returned}} expected-warning{{address of stack memory associated with local variable 'x' returned}} |
| 6 | } |
| 7 | |
| 8 | int* f2(int y) { |
| 9 | return &y; // expected-warning{{Address of stack memory associated with local variable 'y' returned}} expected-warning{{address of stack memory associated with parameter 'y' returned}} |
| 10 | } |
| 11 | |
| 12 | int* f3(int x, int *y) { |
| 13 | int w = 0; |
| 14 | |
| 15 | if (x) |
| 16 | y = &w; |
| 17 | |
| 18 | return y; // expected-warning{{Address of stack memory associated with local variable 'w' returned to caller}} |
| 19 | } |
| 20 | |
| 21 | void* compound_literal(int x, int y) { |
| 22 | if (x) |
| 23 | return &(unsigned short){((unsigned short)0x22EF)}; // expected-warning{{Address of stack memory}} |
| 24 | |
| 25 | int* array[] = {}; |
| 26 | struct s { int z; double y; int w; }; |
| 27 | |
| 28 | if (y) |
| 29 | return &((struct s){ 2, 0.4, 5 * 8 }); // expected-warning{{Address of stack memory}} |
| 30 | |
| 31 | |
| 32 | void* p = &((struct s){ 42, 0.4, x ? 42 : 0 }); |
| 33 | return p; // expected-warning{{Address of stack memory}} |
| 34 | } |
| 35 | |
| 36 | void* alloca_test() { |
| 37 | void* p = __builtin_alloca(10); |
| 38 | return p; // expected-warning{{Address of stack memory}} |
| 39 | } |
| 40 | |
| 41 | int array_test(int x[2]) { |
| 42 | return x[0]; // no-warning |
| 43 | } |
| 44 | |
| 45 | struct baz { |
| 46 | int x; |
| 47 | int y[2]; |
| 48 | }; |
| 49 | |
| 50 | int struct_test(struct baz byVal, int flag) { |
| 51 | if (flag) |
| 52 | return byVal.x; // no-warning |
| 53 | else { |
| 54 | return byVal.y[0]; // no-warning |
| 55 | } |
| 56 | } |
| 57 | |
| 58 | typedef int (^ComparatorBlock)(int a, int b); |
| 59 | ComparatorBlock test_return_block(void) { |
| 60 | // This block is a global since it has no captures. |
| 61 | ComparatorBlock b = ^int(int a, int b){ return a > b; }; |
| 62 | return b; // no-warning |
| 63 | } |
| 64 | |
| 65 | ComparatorBlock test_return_block_with_capture(int x) { |
| 66 | // This block is stack allocated because it has captures. |
| 67 | ComparatorBlock b = ^int(int a, int b){ return a > b + x; }; |
| 68 | return b; // expected-warning{{Address of stack-allocated block}} |
| 69 | } |
| 70 | |
| 71 | ComparatorBlock test_return_block_neg_aux(void); |
| 72 | ComparatorBlock test_return_block_neg(void) { |
| 73 | ComparatorBlock b = test_return_block_neg_aux(); |
| 74 | return b; // no-warning |
| 75 | } |
| 76 | |
| 77 | // <rdar://problem/7523821> |
| 78 | int *rdar_7523821_f2() { |
| 79 | int a[3]; |
| 80 | return a; // expected-warning 2 {{ddress of stack memory associated with local variable 'a' returned}} |
| 81 | }; |
| 82 | |
| 83 | // Handle blocks that have no captures or are otherwise declared 'static'. |
| 84 | // <rdar://problem/10348049> |
| 85 | typedef int (^RDar10348049)(int value); |
| 86 | RDar10348049 test_rdar10348049(void) { |
| 87 | static RDar10348049 b = ^int(int x) { |
| 88 | return x + 2; |
| 89 | }; |
| 90 | return b; // no-warning |
| 91 | } |
| 92 | |
| 93 | void testRegister(register const char *reg) { |
| 94 | if (reg) (void)reg[0]; |
| 95 | } |
| 96 | void callTestRegister() { |
| 97 | char buf[20]; |
| 98 | testRegister(buf); // no-warning |
| 99 | } |
| 100 | |