1// RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-output=text -verify %s
2
3struct S {
4  int *x;
5  int y;
6};
7
8S &getSomeReference();
9void test(S *p) {
10  S &r = *p;   //expected-note {{'r' initialized here}}
11  if (p) return;
12               //expected-note@-1{{Taking false branch}}
13               //expected-note@-2{{Assuming 'p' is null}}
14  r.y = 5; // expected-warning {{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
15           // expected-note@-1{{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}}
16}
17
18void testRefParam(int *ptr) {
19	int &ref = *ptr; // expected-note {{'ref' initialized here}}
20	if (ptr)
21    // expected-note@-1{{Assuming 'ptr' is null}}
22    // expected-note@-2{{Taking false branch}}
23		return;
24
25	extern void use(int &ref);
26	use(ref); // expected-warning{{Forming reference to null pointer}}
27            // expected-note@-1{{Forming reference to null pointer}}
28}
29
30int testRefToNullPtr() {
31  int *p = 0; // expected-note {{'p' initialized to a null pointer value}}
32  int *const &p2 = p; // expected-note{{'p2' initialized here}}
33  int *p3 = p2; // expected-note {{'p3' initialized to a null pointer value}}
34  return *p3; // expected-warning {{Dereference of null pointer}}
35              // expected-note@-1{{Dereference of null pointer}}
36}
37
38int testRefToNullPtr2() {
39  int *p = 0; // expected-note {{'p' initialized to a null pointer value}}
40  int *const &p2 = p;// expected-note{{'p2' initialized here}}
41  return *p2; //expected-warning {{Dereference of null pointer}}
42              // expected-note@-1{{Dereference of null pointer}}
43}