inline.cpp revision fbdbed3bde8577815826b9d15790e5effb913f7b
1// RUN: %clang_cc1 -analyze -analyzer-checker=core,unix.Malloc,debug.ExprInspection -analyzer-config ipa=inlining -verify %s 2 3void clang_analyzer_eval(bool); 4void clang_analyzer_checkInlined(bool); 5 6typedef __typeof__(sizeof(int)) size_t; 7extern "C" void *malloc(size_t); 8 9// This is the standard placement new. 10inline void* operator new(size_t, void* __p) throw() 11{ 12 return __p; 13} 14 15 16class A { 17public: 18 int getZero() { return 0; } 19 virtual int getNum() { return 0; } 20}; 21 22void test(A &a) { 23 clang_analyzer_eval(a.getZero() == 0); // expected-warning{{TRUE}} 24 clang_analyzer_eval(a.getNum() == 0); // expected-warning{{UNKNOWN}} 25 26 A copy(a); 27 clang_analyzer_eval(copy.getZero() == 0); // expected-warning{{TRUE}} 28 clang_analyzer_eval(copy.getNum() == 0); // expected-warning{{TRUE}} 29} 30 31 32class One : public A { 33public: 34 virtual int getNum() { return 1; } 35}; 36 37void testPathSensitivity(int x) { 38 A a; 39 One b; 40 41 A *ptr; 42 switch (x) { 43 case 0: 44 ptr = &a; 45 break; 46 case 1: 47 ptr = &b; 48 break; 49 default: 50 return; 51 } 52 53 // This should be true on both branches. 54 clang_analyzer_eval(ptr->getNum() == x); // expected-warning {{TRUE}} 55} 56 57 58namespace PureVirtualParent { 59 class Parent { 60 public: 61 virtual int pureVirtual() const = 0; 62 int callVirtual() const { 63 return pureVirtual(); 64 } 65 }; 66 67 class Child : public Parent { 68 public: 69 virtual int pureVirtual() const { 70 clang_analyzer_checkInlined(true); // expected-warning{{TRUE}} 71 return 42; 72 } 73 }; 74 75 void testVirtual() { 76 Child x; 77 78 clang_analyzer_eval(x.pureVirtual() == 42); // expected-warning{{TRUE}} 79 clang_analyzer_eval(x.callVirtual() == 42); // expected-warning{{TRUE}} 80 } 81} 82 83 84namespace PR13569 { 85 class Parent { 86 protected: 87 int m_parent; 88 virtual int impl() const = 0; 89 90 Parent() : m_parent(0) {} 91 92 public: 93 int interface() const { 94 clang_analyzer_checkInlined(true); // expected-warning{{TRUE}} 95 return impl(); 96 } 97 }; 98 99 class Child : public Parent { 100 protected: 101 virtual int impl() const { 102 clang_analyzer_checkInlined(true); // expected-warning{{TRUE}} 103 return m_parent + m_child; 104 } 105 106 public: 107 Child() : m_child(0) {} 108 109 int m_child; 110 }; 111 112 void testVirtual() { 113 Child x; 114 x.m_child = 42; 115 116 // Don't crash when inlining and devirtualizing. 117 x.interface(); 118 } 119 120 121 class Grandchild : public Child {}; 122 123 void testDevirtualizeToMiddle() { 124 Grandchild x; 125 x.m_child = 42; 126 127 // Don't crash when inlining and devirtualizing. 128 x.interface(); 129 } 130} 131 132namespace PR13569_virtual { 133 class Parent { 134 protected: 135 int m_parent; 136 virtual int impl() const = 0; 137 138 Parent() : m_parent(0) {} 139 140 public: 141 int interface() const { 142 clang_analyzer_checkInlined(true); // expected-warning{{TRUE}} 143 return impl(); 144 } 145 }; 146 147 class Child : virtual public Parent { 148 protected: 149 virtual int impl() const { 150 clang_analyzer_checkInlined(true); // expected-warning{{TRUE}} 151 return m_parent + m_child; 152 } 153 154 public: 155 Child() : m_child(0) {} 156 157 int m_child; 158 }; 159 160 void testVirtual() { 161 Child x; 162 x.m_child = 42; 163 164 // Don't crash when inlining and devirtualizing. 165 x.interface(); 166 } 167 168 169 class Grandchild : virtual public Child {}; 170 171 void testDevirtualizeToMiddle() { 172 Grandchild x; 173 x.m_child = 42; 174 175 // Don't crash when inlining and devirtualizing. 176 x.interface(); 177 } 178} 179 180namespace Invalidation { 181 struct X { 182 void touch(int &x) const { 183 x = 0; 184 } 185 186 void touch2(int &x) const; 187 188 virtual void touchV(int &x) const { 189 x = 0; 190 } 191 192 virtual void touchV2(int &x) const; 193 194 int test() const { 195 // We were accidentally not invalidating under inlining 196 // at one point for virtual methods with visible definitions. 197 int a, b, c, d; 198 touch(a); 199 touch2(b); 200 touchV(c); 201 touchV2(d); 202 return a + b + c + d; // no-warning 203 } 204 }; 205} 206 207namespace DefaultArgs { 208 int takesDefaultArgs(int i = 42) { 209 return -i; 210 } 211 212 void testFunction() { 213 clang_analyzer_eval(takesDefaultArgs(1) == -1); // expected-warning{{TRUE}} 214 clang_analyzer_eval(takesDefaultArgs() == -42); // expected-warning{{TRUE}} 215 } 216 217 class Secret { 218 public: 219 static const int value = 40 + 2; 220 int get(int i = value) { 221 return i; 222 } 223 }; 224 225 void testMethod() { 226 Secret obj; 227 clang_analyzer_eval(obj.get(1) == 1); // expected-warning{{TRUE}} 228 clang_analyzer_eval(obj.get() == 42); // expected-warning{{TRUE}} 229 clang_analyzer_eval(Secret::value == 42); // expected-warning{{TRUE}} 230 } 231 232 enum ABC { 233 A = 0, 234 B = 1, 235 C = 2 236 }; 237 238 int enumUser(ABC input = B) { 239 return static_cast<int>(input); 240 } 241 242 void testEnum() { 243 clang_analyzer_eval(enumUser(C) == 2); // expected-warning{{TRUE}} 244 clang_analyzer_eval(enumUser() == 1); // expected-warning{{TRUE}} 245 } 246 247 248 int exprUser(int input = 2 * 4) { 249 return input; 250 } 251 252 int complicatedExprUser(int input = 2 * Secret::value) { 253 return input; 254 } 255 256 void testExprs() { 257 clang_analyzer_eval(exprUser(1) == 1); // expected-warning{{TRUE}} 258 clang_analyzer_eval(exprUser() == 8); // expected-warning{{TRUE}} 259 260 clang_analyzer_eval(complicatedExprUser(1) == 1); // expected-warning{{TRUE}} 261 clang_analyzer_eval(complicatedExprUser() == 84); // expected-warning{{TRUE}} 262 } 263 264 int defaultReference(const int &input = 42) { 265 return input; 266 } 267 268 void testReference() { 269 clang_analyzer_eval(defaultReference(1) == 1); // expected-warning{{TRUE}} 270 clang_analyzer_eval(defaultReference() == 42); // expected-warning{{TRUE}} 271 } 272} 273 274namespace OperatorNew { 275 class IntWrapper { 276 public: 277 int value; 278 279 IntWrapper(int input) : value(input) { 280 // We don't want this constructor to be inlined unless we can actually 281 // use the proper region for operator new. 282 // See PR12014 and <rdar://problem/12180598>. 283 clang_analyzer_checkInlined(false); // no-warning 284 } 285 }; 286 287 void test() { 288 IntWrapper *obj = new IntWrapper(42); 289 // should be TRUE 290 clang_analyzer_eval(obj->value == 42); // expected-warning{{UNKNOWN}} 291 } 292 293 void testPlacement() { 294 IntWrapper *obj = static_cast<IntWrapper *>(malloc(sizeof(IntWrapper))); 295 IntWrapper *alias = new (obj) IntWrapper(42); 296 297 clang_analyzer_eval(alias == obj); // expected-warning{{TRUE}} 298 299 // should be TRUE 300 clang_analyzer_eval(obj->value == 42); // expected-warning{{UNKNOWN}} 301 } 302} 303 304 305namespace VirtualWithSisterCasts { 306 // This entire set of tests exercises casts from sister classes and 307 // from classes outside the hierarchy, which can very much confuse 308 // code that uses DynamicTypeInfo or needs to construct CXXBaseObjectRegions. 309 // These examples used to cause crashes in +Asserts builds. 310 struct Parent { 311 virtual int foo(); 312 int x; 313 }; 314 315 struct A : Parent { 316 virtual int foo() { return 42; } 317 }; 318 319 struct B : Parent { 320 virtual int foo(); 321 }; 322 323 struct Grandchild : public A {}; 324 325 struct Unrelated {}; 326 327 void testDowncast(Parent *b) { 328 A *a = (A *)(void *)b; 329 clang_analyzer_eval(a->foo() == 42); // expected-warning{{UNKNOWN}} 330 331 a->x = 42; 332 clang_analyzer_eval(a->x == 42); // expected-warning{{TRUE}} 333 } 334 335 void testRelated(B *b) { 336 A *a = (A *)(void *)b; 337 clang_analyzer_eval(a->foo() == 42); // expected-warning{{UNKNOWN}} 338 339 a->x = 42; 340 clang_analyzer_eval(a->x == 42); // expected-warning{{TRUE}} 341 } 342 343 void testUnrelated(Unrelated *b) { 344 A *a = (A *)(void *)b; 345 clang_analyzer_eval(a->foo() == 42); // expected-warning{{UNKNOWN}} 346 347 a->x = 42; 348 clang_analyzer_eval(a->x == 42); // expected-warning{{TRUE}} 349 } 350 351 void testCastViaNew(B *b) { 352 Grandchild *g = new (b) Grandchild(); 353 // FIXME: We actually now have perfect type info because of 'new'. 354 // This should be TRUE. 355 clang_analyzer_eval(g->foo() == 42); // expected-warning{{UNKNOWN}} 356 357 g->x = 42; 358 clang_analyzer_eval(g->x == 42); // expected-warning{{TRUE}} 359 } 360} 361 362 363namespace QualifiedCalls { 364 void test(One *object) { 365 // This uses the One class from the top of the file. 366 clang_analyzer_eval(object->getNum() == 1); // expected-warning{{UNKNOWN}} 367 clang_analyzer_eval(object->One::getNum() == 1); // expected-warning{{TRUE}} 368 clang_analyzer_eval(object->A::getNum() == 0); // expected-warning{{TRUE}} 369 370 // getZero is non-virtual. 371 clang_analyzer_eval(object->getZero() == 0); // expected-warning{{TRUE}} 372 clang_analyzer_eval(object->One::getZero() == 0); // expected-warning{{TRUE}} 373 clang_analyzer_eval(object->A::getZero() == 0); // expected-warning{{TRUE}} 374} 375} 376 377 378namespace rdar12409977 { 379 struct Base { 380 int x; 381 }; 382 383 struct Parent : public Base { 384 virtual Parent *vGetThis(); 385 Parent *getThis() { return vGetThis(); } 386 }; 387 388 struct Child : public Parent { 389 virtual Child *vGetThis() { return this; } 390 }; 391 392 void test() { 393 Child obj; 394 obj.x = 42; 395 396 // Originally, calling a devirtualized method with a covariant return type 397 // caused a crash because the return value had the wrong type. When we then 398 // go to layer a CXXBaseObjectRegion on it, the base isn't a direct base of 399 // the object region and we get an assertion failure. 400 clang_analyzer_eval(obj.getThis()->x == 42); // expected-warning{{TRUE}} 401 } 402} 403