1*67e74705SXin Li // RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-store=region -fblocks -verify %s
2*67e74705SXin Li
f1()3*67e74705SXin Li int* f1() {
4*67e74705SXin Li int x = 0;
5*67e74705SXin Li return &x; // expected-warning{{Address of stack memory associated with local variable 'x' returned}} expected-warning{{address of stack memory associated with local variable 'x' returned}}
6*67e74705SXin Li }
7*67e74705SXin Li
f2(int y)8*67e74705SXin Li int* f2(int y) {
9*67e74705SXin Li return &y; // expected-warning{{Address of stack memory associated with local variable 'y' returned}} expected-warning{{address of stack memory associated with local variable 'y' returned}}
10*67e74705SXin Li }
11*67e74705SXin Li
f3(int x,int * y)12*67e74705SXin Li int* f3(int x, int *y) {
13*67e74705SXin Li int w = 0;
14*67e74705SXin Li
15*67e74705SXin Li if (x)
16*67e74705SXin Li y = &w;
17*67e74705SXin Li
18*67e74705SXin Li return y; // expected-warning{{Address of stack memory associated with local variable 'w' returned to caller}}
19*67e74705SXin Li }
20*67e74705SXin Li
compound_literal(int x,int y)21*67e74705SXin Li void* compound_literal(int x, int y) {
22*67e74705SXin Li if (x)
23*67e74705SXin Li return &(unsigned short){((unsigned short)0x22EF)}; // expected-warning{{Address of stack memory}}
24*67e74705SXin Li
25*67e74705SXin Li int* array[] = {};
26*67e74705SXin Li struct s { int z; double y; int w; };
27*67e74705SXin Li
28*67e74705SXin Li if (y)
29*67e74705SXin Li return &((struct s){ 2, 0.4, 5 * 8 }); // expected-warning{{Address of stack memory}}
30*67e74705SXin Li
31*67e74705SXin Li
32*67e74705SXin Li void* p = &((struct s){ 42, 0.4, x ? 42 : 0 });
33*67e74705SXin Li return p; // expected-warning{{Address of stack memory}}
34*67e74705SXin Li }
35*67e74705SXin Li
alloca_test()36*67e74705SXin Li void* alloca_test() {
37*67e74705SXin Li void* p = __builtin_alloca(10);
38*67e74705SXin Li return p; // expected-warning{{Address of stack memory}}
39*67e74705SXin Li }
40*67e74705SXin Li
array_test(int x[2])41*67e74705SXin Li int array_test(int x[2]) {
42*67e74705SXin Li return x[0]; // no-warning
43*67e74705SXin Li }
44*67e74705SXin Li
45*67e74705SXin Li struct baz {
46*67e74705SXin Li int x;
47*67e74705SXin Li int y[2];
48*67e74705SXin Li };
49*67e74705SXin Li
struct_test(struct baz byVal,int flag)50*67e74705SXin Li int struct_test(struct baz byVal, int flag) {
51*67e74705SXin Li if (flag)
52*67e74705SXin Li return byVal.x; // no-warning
53*67e74705SXin Li else {
54*67e74705SXin Li return byVal.y[0]; // no-warning
55*67e74705SXin Li }
56*67e74705SXin Li }
57*67e74705SXin Li
58*67e74705SXin Li typedef int (^ComparatorBlock)(int a, int b);
test_return_block(void)59*67e74705SXin Li ComparatorBlock test_return_block(void) {
60*67e74705SXin Li // This block is a global since it has no captures.
61*67e74705SXin Li ComparatorBlock b = ^int(int a, int b){ return a > b; };
62*67e74705SXin Li return b; // no-warning
63*67e74705SXin Li }
64*67e74705SXin Li
test_return_block_with_capture(int x)65*67e74705SXin Li ComparatorBlock test_return_block_with_capture(int x) {
66*67e74705SXin Li // This block is stack allocated because it has captures.
67*67e74705SXin Li ComparatorBlock b = ^int(int a, int b){ return a > b + x; };
68*67e74705SXin Li return b; // expected-warning{{Address of stack-allocated block}}
69*67e74705SXin Li }
70*67e74705SXin Li
71*67e74705SXin Li ComparatorBlock test_return_block_neg_aux(void);
test_return_block_neg(void)72*67e74705SXin Li ComparatorBlock test_return_block_neg(void) {
73*67e74705SXin Li ComparatorBlock b = test_return_block_neg_aux();
74*67e74705SXin Li return b; // no-warning
75*67e74705SXin Li }
76*67e74705SXin Li
77*67e74705SXin Li // <rdar://problem/7523821>
rdar_7523821_f2()78*67e74705SXin Li int *rdar_7523821_f2() {
79*67e74705SXin Li int a[3];
80*67e74705SXin Li return a; // expected-warning 2 {{ddress of stack memory associated with local variable 'a' returned}}
81*67e74705SXin Li };
82*67e74705SXin Li
83*67e74705SXin Li // Handle blocks that have no captures or are otherwise declared 'static'.
84*67e74705SXin Li // <rdar://problem/10348049>
85*67e74705SXin Li typedef int (^RDar10348049)(int value);
test_rdar10348049(void)86*67e74705SXin Li RDar10348049 test_rdar10348049(void) {
87*67e74705SXin Li static RDar10348049 b = ^int(int x) {
88*67e74705SXin Li return x + 2;
89*67e74705SXin Li };
90*67e74705SXin Li return b; // no-warning
91*67e74705SXin Li }
92*67e74705SXin Li
testRegister(register const char * reg)93*67e74705SXin Li void testRegister(register const char *reg) {
94*67e74705SXin Li if (reg) (void)reg[0];
95*67e74705SXin Li }
callTestRegister()96*67e74705SXin Li void callTestRegister() {
97*67e74705SXin Li char buf[20];
98*67e74705SXin Li testRegister(buf); // no-warning
99*67e74705SXin Li }
100