1cdc3a89d5de90b2299c56f4a46c3de590c5184d1Ted Kremenek// RUN: %clang_cc1 -triple x86_64-apple-darwin9 -analyze -analyzer-checker=core,alpha.core -analyzer-store=region -verify %s
28e8fb3be5bd78f0564444eca02b404566a5f3b5dAndy Gibbs// expected-no-diagnostics
34253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek
44253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// PR 4164: http://llvm.org/bugs/show_bug.cgi?id=4164
54253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek//
64253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// Eventually this should be pulled into misc-ps.m.  This is in a separate test
74253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// file for now to play around with the specific issues for BasicStoreManager
84253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// and StoreManager (i.e., we can make a copy of this file for either
94253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// StoreManager should one start to fail in the near future).
104253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek//
114253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// The basic issue is that the VarRegion for 'size' is casted to (char*),
124253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// resulting in an ElementRegion.  'getsockopt' is an unknown function that
134253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// takes a void*, which means the ElementRegion should get stripped off.
144253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenektypedef unsigned int __uint32_t;
154253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenektypedef __uint32_t __darwin_socklen_t;
164253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenektypedef __darwin_socklen_t socklen_t;
174253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenekint getsockopt(int, int, int, void * restrict, socklen_t * restrict);
184253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek
194253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenekint test1() {
204253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  int s = -1;
214253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  int size;
224253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  socklen_t size_len = sizeof(size);
234253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  if (getsockopt(s, 0xffff, 0x1001, (char *)&size, &size_len) < 0)
244253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek          return -1;
254253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek
264253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  return size; // no-warning
274253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek}
284253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek
294253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// Similar case: instead of passing a 'void*', we pass 'char*'.  In this
304253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// case we pass an ElementRegion to the invalidation logic.  Since it is
314253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// an ElementRegion that just layers on top of another typed region and the
324253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// ElementRegion itself has elements whose type are integral (essentially raw
334253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek// data) we strip off the ElementRegion when doing the invalidation.
344253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenekint takes_charptr(char* p);
354253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenekint test2() {
364253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  int size;
374253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  if (takes_charptr((char*)&size))
384253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek    return -1;
394253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek  return size; // no-warning
404253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek}
414253051c16d0c2a5ae13af3d22383b61071ecb4cTed Kremenek
42