1*67e74705SXin Li // RUN: %clang_cc1 -triple x86_64-apple-darwin9 -analyze -analyzer-checker=core,alpha.core,debug.ExprInspection -analyzer-store=region -verify %s
2*67e74705SXin Li // RUN: %clang_cc1 -triple i386-apple-darwin9 -analyze -analyzer-checker=core,alpha.core,debug.ExprInspection -analyzer-store=region -verify %s
3*67e74705SXin Li
4*67e74705SXin Li extern void clang_analyzer_eval(_Bool);
5*67e74705SXin Li
6*67e74705SXin Li // Test if the 'storage' region gets properly initialized after it is cast to
7*67e74705SXin Li // 'struct sockaddr *'.
8*67e74705SXin Li
9*67e74705SXin Li typedef unsigned char __uint8_t;
10*67e74705SXin Li typedef unsigned int __uint32_t;
11*67e74705SXin Li typedef __uint32_t __darwin_socklen_t;
12*67e74705SXin Li typedef __uint8_t sa_family_t;
13*67e74705SXin Li typedef __darwin_socklen_t socklen_t;
14*67e74705SXin Li struct sockaddr { sa_family_t sa_family; };
15*67e74705SXin Li struct sockaddr_storage {};
16*67e74705SXin Li
17*67e74705SXin Li void getsockname();
18*67e74705SXin Li
f(int sock)19*67e74705SXin Li void f(int sock) {
20*67e74705SXin Li struct sockaddr_storage storage;
21*67e74705SXin Li struct sockaddr* sockaddr = (struct sockaddr*)&storage;
22*67e74705SXin Li socklen_t addrlen = sizeof(storage);
23*67e74705SXin Li getsockname(sock, sockaddr, &addrlen);
24*67e74705SXin Li switch (sockaddr->sa_family) { // no-warning
25*67e74705SXin Li default:
26*67e74705SXin Li ;
27*67e74705SXin Li }
28*67e74705SXin Li }
29*67e74705SXin Li
30*67e74705SXin Li struct s {
31*67e74705SXin Li struct s *value;
32*67e74705SXin Li };
33*67e74705SXin Li
f1(struct s ** pval)34*67e74705SXin Li void f1(struct s **pval) {
35*67e74705SXin Li int *tbool = ((void*)0);
36*67e74705SXin Li struct s *t = *pval;
37*67e74705SXin Li pval = &(t->value);
38*67e74705SXin Li tbool = (int *)pval; // use the cast-to type 'int *' to create element region.
39*67e74705SXin Li char c = (unsigned char) *tbool; // Should use cast-to type to create symbol.
40*67e74705SXin Li if (*tbool == -1) // here load the element region with the correct type 'int'
41*67e74705SXin Li (void)3;
42*67e74705SXin Li }
43*67e74705SXin Li
f2(const char * str)44*67e74705SXin Li void f2(const char *str) {
45*67e74705SXin Li unsigned char ch, cl, *p;
46*67e74705SXin Li
47*67e74705SXin Li p = (unsigned char *)str;
48*67e74705SXin Li ch = *p++; // use cast-to type 'unsigned char' to create element region.
49*67e74705SXin Li cl = *p++;
50*67e74705SXin Li if(!cl)
51*67e74705SXin Li cl = 'a';
52*67e74705SXin Li }
53*67e74705SXin Li
54*67e74705SXin Li // Test cast VariableSizeArray to pointer does not crash.
55*67e74705SXin Li void *memcpy(void *, void const *, unsigned long);
56*67e74705SXin Li typedef unsigned char Byte;
doit(char * data,int len)57*67e74705SXin Li void doit(char *data, int len) {
58*67e74705SXin Li if (len) {
59*67e74705SXin Li Byte buf[len];
60*67e74705SXin Li memcpy(buf, data, len);
61*67e74705SXin Li }
62*67e74705SXin Li }
63*67e74705SXin Li
64*67e74705SXin Li // PR 6013 and 6035 - Test that a cast of a pointer to long and then to int does not crash SValuator.
pr6013_6035_test(void * p)65*67e74705SXin Li void pr6013_6035_test(void *p) {
66*67e74705SXin Li unsigned int foo;
67*67e74705SXin Li foo = ((long)(p));
68*67e74705SXin Li (void) foo;
69*67e74705SXin Li }
70*67e74705SXin Li
71*67e74705SXin Li // PR12511 and radar://11215362 - Test that we support SymCastExpr, which represents symbolic int to float cast.
ttt(int intSeconds)72*67e74705SXin Li char ttt(int intSeconds) {
73*67e74705SXin Li double seconds = intSeconds;
74*67e74705SXin Li if (seconds)
75*67e74705SXin Li return 0;
76*67e74705SXin Li return 0;
77*67e74705SXin Li }
78*67e74705SXin Li
foo(int * p)79*67e74705SXin Li int foo (int* p) {
80*67e74705SXin Li int y = 0;
81*67e74705SXin Li if (p == 0) {
82*67e74705SXin Li if ((*((void**)&p)) == (void*)0) // Test that the cast to void preserves the symbolic region.
83*67e74705SXin Li return 0;
84*67e74705SXin Li else
85*67e74705SXin Li return 5/y; // This code should be unreachable: no-warning.
86*67e74705SXin Li }
87*67e74705SXin Li return 0;
88*67e74705SXin Li }
89*67e74705SXin Li
castsToBool()90*67e74705SXin Li void castsToBool() {
91*67e74705SXin Li clang_analyzer_eval(0); // expected-warning{{FALSE}}
92*67e74705SXin Li clang_analyzer_eval(0U); // expected-warning{{FALSE}}
93*67e74705SXin Li clang_analyzer_eval((void *)0); // expected-warning{{FALSE}}
94*67e74705SXin Li
95*67e74705SXin Li clang_analyzer_eval(1); // expected-warning{{TRUE}}
96*67e74705SXin Li clang_analyzer_eval(1U); // expected-warning{{TRUE}}
97*67e74705SXin Li clang_analyzer_eval(-1); // expected-warning{{TRUE}}
98*67e74705SXin Li clang_analyzer_eval(0x100); // expected-warning{{TRUE}}
99*67e74705SXin Li clang_analyzer_eval(0x100U); // expected-warning{{TRUE}}
100*67e74705SXin Li clang_analyzer_eval((void *)0x100); // expected-warning{{TRUE}}
101*67e74705SXin Li
102*67e74705SXin Li extern int symbolicInt;
103*67e74705SXin Li clang_analyzer_eval(symbolicInt); // expected-warning{{UNKNOWN}}
104*67e74705SXin Li if (symbolicInt)
105*67e74705SXin Li clang_analyzer_eval(symbolicInt); // expected-warning{{TRUE}}
106*67e74705SXin Li
107*67e74705SXin Li extern void *symbolicPointer;
108*67e74705SXin Li clang_analyzer_eval(symbolicPointer); // expected-warning{{UNKNOWN}}
109*67e74705SXin Li if (symbolicPointer)
110*67e74705SXin Li clang_analyzer_eval(symbolicPointer); // expected-warning{{TRUE}}
111*67e74705SXin Li
112*67e74705SXin Li int localInt;
113*67e74705SXin Li int* ptr = &localInt;
114*67e74705SXin Li clang_analyzer_eval(ptr); // expected-warning{{TRUE}}
115*67e74705SXin Li clang_analyzer_eval(&castsToBool); // expected-warning{{TRUE}}
116*67e74705SXin Li clang_analyzer_eval("abc"); // expected-warning{{TRUE}}
117*67e74705SXin Li
118*67e74705SXin Li extern float globalFloat;
119*67e74705SXin Li clang_analyzer_eval(globalFloat); // expected-warning{{UNKNOWN}}
120*67e74705SXin Li }
121