rdar-6541136-region.c revision 8be5b3aced37e1c7728741c60d47011f11649a58 
1// RUN: %clang_cc1 -verify -analyze -analyzer-checker=core.experimental.ArrayBound -analyzer-experimental-internal-checks -analyzer-check-objc-mem -analyzer-store=region %s
2
3struct tea_cheese { unsigned magic; };
4typedef struct tea_cheese kernel_tea_cheese_t;
5extern kernel_tea_cheese_t _wonky_gesticulate_cheese;
6
7// This test case exercises the ElementRegion::getRValueType() logic.
8
9void test1( void ) {
10  kernel_tea_cheese_t *wonky = &_wonky_gesticulate_cheese;
11  struct load_wine *cmd = (void*) &wonky[1];
12  cmd = cmd;
13  char *p = (void*) &wonky[1];
14  kernel_tea_cheese_t *q = &wonky[1];
15  // This test case tests both the RegionStore logic (doesn't crash) and
16  // the out-of-bounds checking.  We don't expect the warning for now since
17  // out-of-bound checking is temporarily disabled.
18  kernel_tea_cheese_t r = *q; // expected-warning{{Access out-of-bound array element (buffer overflow)}}
19}
20
21void test1_b( void ) {
22  kernel_tea_cheese_t *wonky = &_wonky_gesticulate_cheese;
23  struct load_wine *cmd = (void*) &wonky[1];
24  cmd = cmd;
25  char *p = (void*) &wonky[1];
26  *p = 1;  // expected-warning{{Access out-of-bound array element (buffer overflow)}}
27}
28