1cdc3a89d5de90b2299c56f4a46c3de590c5184d1Ted Kremenek// RUN: %clang_cc1 -analyze -analyzer-checker=core,unix.cstring,alpha.unix.cstring,debug.ExprInspection -analyzer-store=region -Wno-null-dereference -verify %s
2cdc3a89d5de90b2299c56f4a46c3de590c5184d1Ted Kremenek// RUN: %clang_cc1 -analyze -DUSE_BUILTINS -analyzer-checker=core,unix.cstring,alpha.unix.cstring,debug.ExprInspection -analyzer-store=region -Wno-null-dereference -verify %s
3cdc3a89d5de90b2299c56f4a46c3de590c5184d1Ted Kremenek// RUN: %clang_cc1 -analyze -DVARIANT -analyzer-checker=core,unix.cstring,alpha.unix.cstring,debug.ExprInspection -analyzer-store=region -Wno-null-dereference -verify %s
4cdc3a89d5de90b2299c56f4a46c3de590c5184d1Ted Kremenek// RUN: %clang_cc1 -analyze -DUSE_BUILTINS -DVARIANT -analyzer-checker=alpha.security.taint,core,unix.cstring,alpha.unix.cstring,debug.ExprInspection -analyzer-store=region -Wno-null-dereference -verify %s
519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose//===----------------------------------------------------------------------===
719c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// Declarations
819c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose//===----------------------------------------------------------------------===
919c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
1019c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// Some functions are so similar to each other that they follow the same code
1119c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// path, such as memcpy and __memcpy_chk, or memcmp and bcmp. If VARIANT is
1219c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// defined, make sure to use the variants instead to make sure they are still
1319c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// checked by the analyzer.
1419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
1519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// Some functions are implemented as builtins. These should be #defined as
1619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// BUILTIN(f), which will prepend "__builtin_" if USE_BUILTINS is defined.
1719c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
18fc8f0e14ad142ed811e90fbd9a30e419e301c717Chris Lattner// Functions that have variants and are also available as builtins should be
1919c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// declared carefully! See memcpy() for an example.
2019c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
2119c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose#ifdef USE_BUILTINS
2219c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose# define BUILTIN(f) __builtin_ ## f
2319c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose#else /* USE_BUILTINS */
2419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose# define BUILTIN(f) f
2519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose#endif /* USE_BUILTINS */
2619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
27e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define NULL 0
2819c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosetypedef typeof(sizeof(int)) size_t;
2943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose
3043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rosevoid clang_analyzer_eval(int);
3143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose
32e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaksint scanf(const char *restrict format, ...);
3319c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
3419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose//===----------------------------------------------------------------------===
3519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose// strlen()
3619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose//===----------------------------------------------------------------------===
3719c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
3819c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose#define strlen BUILTIN(strlen)
3919c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosesize_t strlen(const char *s);
4019c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
4119c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosevoid strlen_constant0() {
4243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen("123") == 3); // expected-warning{{TRUE}}
4319c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
4419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
4519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosevoid strlen_constant1() {
4619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose  const char *a = "123";
4743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(a) == 3); // expected-warning{{TRUE}}
4819c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
4919c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
5019c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosevoid strlen_constant2(char x) {
5119c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose  char a[] = "123";
5243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(a) == 3); // expected-warning{{TRUE}}
5343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose
5419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose  a[0] = x;
5543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(a) == 3); // expected-warning{{UNKNOWN}}
5619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
5719c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
5819c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosesize_t strlen_null() {
599e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strlen(0); // expected-warning{{Null pointer argument in call to string length function}}
6019c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
6119c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
6219c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosesize_t strlen_fn() {
639e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strlen((char*)&strlen_fn); // expected-warning{{Argument to string length function is the address of the function 'strlen_fn', which is not a null-terminated string}}
6419c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
6519c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose
6619c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rosesize_t strlen_nonloc() {
6719c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Roselabel:
689e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strlen((char*)&&label); // expected-warning{{Argument to string length function is the address of the label 'label', which is not a null-terminated string}}
6919c5dd120e42b1ba0642309a185c70f4a41aadbdJordy Rose}
70a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
71a5261549754fab80e30e893d8fa706bfb31e430aJordy Rosevoid strlen_subregion() {
72e224ba7e3e604113aa160c379293bcb6425e8f36Carl Norum  struct two_strings { char a[2], b[2]; };
73a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  extern void use_two_strings(struct two_strings *);
74a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
75a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  struct two_strings z;
76a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  use_two_strings(&z);
77a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
78a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t a = strlen(z.a);
79a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  z.b[0] = 5;
80a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t b = strlen(z.a);
8143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
8243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(b == 0); // expected-warning{{TRUE}}
83a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
84a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  use_two_strings(&z);
85a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
86a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t c = strlen(z.a);
8743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
8843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(c == 0); // expected-warning{{UNKNOWN}}
89a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose}
90a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
91a5261549754fab80e30e893d8fa706bfb31e430aJordy Roseextern void use_string(char *);
92a5261549754fab80e30e893d8fa706bfb31e430aJordy Rosevoid strlen_argument(char *x) {
93a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t a = strlen(x);
94a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t b = strlen(x);
9543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
9643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(b == 0); // expected-warning{{TRUE}}
97a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
98a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  use_string(x);
99a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
100a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t c = strlen(x);
10143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
10243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(c == 0); // expected-warning{{UNKNOWN}}
103a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose}
104a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
105a5261549754fab80e30e893d8fa706bfb31e430aJordy Roseextern char global_str[];
106a5261549754fab80e30e893d8fa706bfb31e430aJordy Rosevoid strlen_global() {
107a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t a = strlen(global_str);
108a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t b = strlen(global_str);
10943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0) {
11043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(b == 0); // expected-warning{{TRUE}}
11143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    // Make sure clang_analyzer_eval does not invalidate globals.
11243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(strlen(global_str) == 0); // expected-warning{{TRUE}}
11343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  }
114a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
115a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  // Call a function with unknown effects, which should invalidate globals.
116a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  use_string(0);
117a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
118a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t c = strlen(global_str);
11943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
12043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(c == 0); // expected-warning{{UNKNOWN}}
121a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose}
122a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
123a5261549754fab80e30e893d8fa706bfb31e430aJordy Rosevoid strlen_indirect(char *x) {
124a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t a = strlen(x);
125a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  char *p = x;
126a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  char **p2 = &p;
127a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t b = strlen(x);
12843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
12943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(b == 0); // expected-warning{{TRUE}}
130a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
131a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  extern void use_string_ptr(char*const*);
132a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  use_string_ptr(p2);
133a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
134a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  size_t c = strlen(x);
13543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
13643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(c == 0); // expected-warning{{UNKNOWN}}
137a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose}
138a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose
1392cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaksvoid strlen_indirect2(char *x) {
1402cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  size_t a = strlen(x);
1412cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  char *p = x;
1422cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  char **p2 = &p;
1432cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  extern void use_string_ptr2(char**);
1442cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  use_string_ptr2(p2);
1452cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks
1462cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks  size_t c = strlen(x);
14743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (a == 0)
14843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(c == 0); // expected-warning{{UNKNOWN}}
1492cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks}
1502cbe791d3e9b26f30196c4852da75d9ad67b4ad9Anna Zaks
151a5261549754fab80e30e893d8fa706bfb31e430aJordy Rosevoid strlen_liveness(const char *x) {
152a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose  if (strlen(x) < 5)
153a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose    return;
15443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) < 5); // expected-warning{{FALSE}}
155a5261549754fab80e30e893d8fa706bfb31e430aJordy Rose}
156e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
157e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose//===----------------------------------------------------------------------===
158be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek// strnlen()
159be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek//===----------------------------------------------------------------------===
160be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
161be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremeneksize_t strnlen(const char *s, size_t maxlen);
162be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
163be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant0() {
16443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen("123", 10) == 3); // expected-warning{{TRUE}}
165be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
166be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
167be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant1() {
168be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  const char *a = "123";
16943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 10) == 3); // expected-warning{{TRUE}}
170be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
171be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
172be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant2(char x) {
173be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  char a[] = "123";
17443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 10) == 3); // expected-warning{{TRUE}}
175be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  a[0] = x;
17643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 10) == 3); // expected-warning{{UNKNOWN}}
177be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
178be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
179be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant4() {
18043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen("123456", 3) == 3); // expected-warning{{TRUE}}
181be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
182be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
183be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant5() {
184be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  const char *a = "123456";
18543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 3) == 3); // expected-warning{{TRUE}}
186be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
187be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
188be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenekvoid strnlen_constant6(char x) {
189be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  char a[] = "123456";
19043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 3) == 3); // expected-warning{{TRUE}}
191be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek  a[0] = x;
19243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(a, 3) == 3); // expected-warning{{UNKNOWN}}
193be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
194be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
195be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremeneksize_t strnlen_null() {
1969e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strnlen(0, 3); // expected-warning{{Null pointer argument in call to string length function}}
197be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
198be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
199be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremeneksize_t strnlen_fn() {
2009e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strnlen((char*)&strlen_fn, 3); // expected-warning{{Argument to string length function is the address of the function 'strlen_fn', which is not a null-terminated string}}
201be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
202be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
203be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremeneksize_t strnlen_nonloc() {
204be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremeneklabel:
2059e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  return strnlen((char*)&&label, 3); // expected-warning{{Argument to string length function is the address of the label 'label', which is not a null-terminated string}}
206be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
207be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
208793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosevoid strnlen_zero() {
20943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen("abc", 0) == 0); // expected-warning{{TRUE}}
21043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(NULL, 0) == 0); // expected-warning{{TRUE}}
211793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose}
212be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
213793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosesize_t strnlen_compound_literal() {
214793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  // This used to crash because we don't model the string lengths of
215793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  // compound literals.
216793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  return strnlen((char[]) { 'a', 'b', 0 }, 1);
217793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose}
218be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
219793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosesize_t strnlen_unknown_limit(float f) {
220793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  // This used to crash because we don't model the integer values of floats.
221793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  return strnlen("abc", (int)f);
222793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose}
223be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
224793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosevoid strnlen_is_not_strlen(char *x) {
22543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strnlen(x, 10) == strlen(x)); // expected-warning{{UNKNOWN}}
226be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
227be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
228793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosevoid strnlen_at_limit(char *x) {
229793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  size_t len = strnlen(x, 10);
23043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(len <= 10); // expected-warning{{TRUE}}
23143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(len == 10); // expected-warning{{UNKNOWN}}
23243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(len < 10); // expected-warning{{UNKNOWN}}
233be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
234be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
235793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rosevoid strnlen_at_actual(size_t limit) {
236793bff3fb7ca2a31e81aa7f4f3f21f921459010bJordy Rose  size_t len = strnlen("abc", limit);
23743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(len <= 3); // expected-warning{{TRUE}}
23843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  // This is due to eager assertion in strnlen.
23943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  if (limit == 0) {
24043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(len == 0); // expected-warning{{TRUE}}
24143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  } else {
24243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(len == 3); // expected-warning{{UNKNOWN}}
24343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose    clang_analyzer_eval(len < 3); // expected-warning{{UNKNOWN}}
24443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  }
245be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek}
246be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek
247be4242ce039f0542ea0dd5f234aa0ee698f90c53Ted Kremenek//===----------------------------------------------------------------------===
248e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose// strcpy()
249e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose//===----------------------------------------------------------------------===
250e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
251e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#ifdef VARIANT
252e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
253e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define __strcpy_chk BUILTIN(__strcpy_chk)
254e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosechar *__strcpy_chk(char *restrict s1, const char *restrict s2, size_t destlen);
255e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
256e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define strcpy(a,b) __strcpy_chk(a,b,(size_t)-1)
257e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
258e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#else /* VARIANT */
259e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
260e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define strcpy BUILTIN(strcpy)
261e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosechar *strcpy(char *restrict s1, const char *restrict s2);
262e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
263e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#endif /* VARIANT */
264e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
265e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
266e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_null_dst(char *x) {
2679e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcpy(NULL, x); // expected-warning{{Null pointer argument in call to string copy function}}
268e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
269e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
270e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_null_src(char *x) {
2719e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcpy(x, NULL); // expected-warning{{Null pointer argument in call to string copy function}}
272e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
273e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
274e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_fn(char *x) {
2759e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcpy(x, (char*)&strcpy_fn); // expected-warning{{Argument to string copy function is the address of the function 'strcpy_fn', which is not a null-terminated string}}
276e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
277e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
278ce8ef16b1c58a304b7b59fad9836ad32d6ed020cAnna Zaksvoid strcpy_fn_const(char *x) {
279ce8ef16b1c58a304b7b59fad9836ad32d6ed020cAnna Zaks  strcpy(x, (const char*)&strcpy_fn); // expected-warning{{Argument to string copy function is the address of the function 'strcpy_fn', which is not a null-terminated string}}
280ce8ef16b1c58a304b7b59fad9836ad32d6ed020cAnna Zaks}
281ce8ef16b1c58a304b7b59fad9836ad32d6ed020cAnna Zaks
282f8e2c06cea1548c437761cb65cfbf97d50a057a7Jordan Roseextern int globalInt;
283e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_effects(char *x, char *y) {
284e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char a = x[0];
285f8e2c06cea1548c437761cb65cfbf97d50a057a7Jordan Rose  if (globalInt != 42)
286f8e2c06cea1548c437761cb65cfbf97d50a057a7Jordan Rose    return;
287e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
28843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcpy(x, y) == x); // expected-warning{{TRUE}}
28943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) == strlen(y)); // expected-warning{{TRUE}}
29043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(a == x[0]); // expected-warning{{UNKNOWN}}
291f8e2c06cea1548c437761cb65cfbf97d50a057a7Jordan Rose  clang_analyzer_eval(globalInt == 42); // expected-warning{{TRUE}}
292e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
293e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
294e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_overflow(char *y) {
295e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char x[4];
296e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  if (strlen(y) == 4)
2979e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose    strcpy(x, y); // expected-warning{{String copy function overflows destination buffer}}
298e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
299e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
300e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid strcpy_no_overflow(char *y) {
301e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char x[4];
302e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  if (strlen(y) == 3)
303e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose    strcpy(x, y); // no-warning
304e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
305e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
306e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose//===----------------------------------------------------------------------===
307e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose// stpcpy()
308e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose//===----------------------------------------------------------------------===
309e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
310e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#ifdef VARIANT
311e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
312e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define __stpcpy_chk BUILTIN(__stpcpy_chk)
313e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosechar *__stpcpy_chk(char *restrict s1, const char *restrict s2, size_t destlen);
314e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
315e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define stpcpy(a,b) __stpcpy_chk(a,b,(size_t)-1)
316e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
317e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#else /* VARIANT */
318e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
319e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#define stpcpy BUILTIN(stpcpy)
320e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosechar *stpcpy(char *restrict s1, const char *restrict s2);
321e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
322e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose#endif /* VARIANT */
323e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
324e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
325e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid stpcpy_effect(char *x, char *y) {
326e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char a = x[0];
327e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
32843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(stpcpy(x, y) == &x[strlen(y)]); // expected-warning{{TRUE}}
32943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) == strlen(y)); // expected-warning{{TRUE}}
33043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(a == x[0]); // expected-warning{{UNKNOWN}}
331e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
332e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
333e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid stpcpy_overflow(char *y) {
334e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char x[4];
335e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  if (strlen(y) == 4)
3369e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose    stpcpy(x, y); // expected-warning{{String copy function overflows destination buffer}}
337e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
338e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose
339e64f311c11a8751867c2538807054f4817c1f5cbJordy Rosevoid stpcpy_no_overflow(char *y) {
340e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  char x[4];
341e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose  if (strlen(y) == 3)
342e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose    stpcpy(x, y); // no-warning
343e64f311c11a8751867c2538807054f4817c1f5cbJordy Rose}
344067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
345067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani//===----------------------------------------------------------------------===
346067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani// strcat()
347067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani//===----------------------------------------------------------------------===
348067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
349067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#ifdef VARIANT
350067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
351067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define __strcat_chk BUILTIN(__strcat_chk)
352067bbd0e11c71a33b51832532e836971be697699Lenny Maioranichar *__strcat_chk(char *restrict s1, const char *restrict s2, size_t destlen);
353067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
354067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define strcat(a,b) __strcat_chk(a,b,(size_t)-1)
355067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
356067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#else /* VARIANT */
357067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
358067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define strcat BUILTIN(strcat)
359067bbd0e11c71a33b51832532e836971be697699Lenny Maioranichar *strcat(char *restrict s1, const char *restrict s2);
360067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
361067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#endif /* VARIANT */
362067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
363067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
364067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_null_dst(char *x) {
3659e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcat(NULL, x); // expected-warning{{Null pointer argument in call to string copy function}}
366067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
367067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
368067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_null_src(char *x) {
3699e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcat(x, NULL); // expected-warning{{Null pointer argument in call to string copy function}}
370067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
371067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
372067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_fn(char *x) {
3739e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcat(x, (char*)&strcat_fn); // expected-warning{{Argument to string copy function is the address of the function 'strcat_fn', which is not a null-terminated string}}
374067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
375067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
376067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_effects(char *y) {
377067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[8] = "123";
378067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  size_t orig_len = strlen(x);
379067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char a = x[0];
380067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
381067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) != 4)
382067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani    return;
383067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
38443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcat(x, y) == x); // expected-warning{{TRUE}}
38543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval((int)strlen(x) == (orig_len + strlen(y))); // expected-warning{{TRUE}}
386067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
387067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
388067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_overflow_0(char *y) {
389067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
390067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 4)
3919e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose    strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}
392067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
393067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
394067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_overflow_1(char *y) {
395067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
396067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 3)
3979e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose    strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}
398067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
399067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
400067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_overflow_2(char *y) {
401067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
402067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 2)
4039e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose    strcat(x, y); // expected-warning{{String copy function overflows destination buffer}}
404067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
405067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
406067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strcat_no_overflow(char *y) {
407067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[5] = "12";
408067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 2)
409067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani    strcat(x, y); // no-warning
410067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
411067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
412d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rosevoid strcat_symbolic_dst_length(char *dst) {
413d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose	strcat(dst, "1234");
41443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
415d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose}
416d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose
417e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaksvoid strcat_symbolic_dst_length_taint(char *dst) {
418e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaks  scanf("%s", dst); // Taint data.
419e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaks  strcat(dst, "1234");
42043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
421e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaks}
422e3d250e488241cbfe71a592df4d07d03ad89434aAnna Zaks
423d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rosevoid strcat_unknown_src_length(char *src, int offset) {
424d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose	char dst[8] = "1234";
425d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose	strcat(dst, &src[offset]);
42643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
427d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose}
428d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose
429d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose// There is no strcat_unknown_dst_length because if we can't get a symbolic
430d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose// length for the "before" strlen, we won't be able to set one for "after".
431d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose
432d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rosevoid strcat_too_big(char *dst, char *src) {
433a728e927c6e58f26b2c8615a8baa761d2f157e4bJordan Rose  // We assume this can never actually happen, so we don't get a warning.
434d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose	if (strlen(dst) != (((size_t)0) - 2))
435d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose		return;
436d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose	if (strlen(src) != 2)
437d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose		return;
438a728e927c6e58f26b2c8615a8baa761d2f157e4bJordan Rose	strcat(dst, src);
439d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose}
440d5af0e17b00ab2ee6a8c1f352bb9eeb1cc5b2d07Jordy Rose
441067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
442067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani//===----------------------------------------------------------------------===
4435e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose// strncpy()
4445e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose//===----------------------------------------------------------------------===
4455e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4465e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#ifdef VARIANT
4475e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4485e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#define __strncpy_chk BUILTIN(__strncpy_chk)
4495e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosechar *__strncpy_chk(char *restrict s1, const char *restrict s2, size_t n, size_t destlen);
4505e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4515e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#define strncpy(a,b,n) __strncpy_chk(a,b,n,(size_t)-1)
4525e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4535e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#else /* VARIANT */
4545e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4555e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#define strncpy BUILTIN(strncpy)
4565e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosechar *strncpy(char *restrict s1, const char *restrict s2, size_t n);
4575e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4585e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose#endif /* VARIANT */
4595e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4605e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4615e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_null_dst(char *x) {
4625e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  strncpy(NULL, x, 5); // expected-warning{{Null pointer argument in call to string copy function}}
4635e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4645e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4655e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_null_src(char *x) {
4665e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  strncpy(x, NULL, 5); // expected-warning{{Null pointer argument in call to string copy function}}
4675e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4685e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4695e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_fn(char *x) {
4705e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  strncpy(x, (char*)&strcpy_fn, 5); // expected-warning{{Argument to string copy function is the address of the function 'strcpy_fn', which is not a null-terminated string}}
4715e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4725e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4735e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_effects(char *x, char *y) {
4745e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char a = x[0];
4755e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
47643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncpy(x, y, 5) == x); // expected-warning{{TRUE}}
47743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) == strlen(y)); // expected-warning{{UNKNOWN}}
47843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(a == x[0]); // expected-warning{{UNKNOWN}}
4795e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4805e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4815e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_overflow(char *y) {
4825e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char x[4];
4835e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  if (strlen(y) == 4)
4845e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose    strncpy(x, y, 5); // expected-warning{{Size argument is greater than the length of the destination buffer}}
4855e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4865e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4875e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_no_overflow(char *y) {
4885e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char x[4];
4895e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  if (strlen(y) == 3)
4905e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose    strncpy(x, y, 5); // expected-warning{{Size argument is greater than the length of the destination buffer}}
4915e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
4925e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4935e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_no_overflow2(char *y, int n) {
4945e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose	if (n <= 4)
4955e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose		return;
4965e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
4975e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char x[4];
4985e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  if (strlen(y) == 3)
4995e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose    strncpy(x, y, n); // expected-warning{{Size argument is greater than the length of the destination buffer}}
5005e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
5015e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
5025e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_truncate(char *y) {
5035e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char x[4];
5045e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  if (strlen(y) == 4)
5055e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose    strncpy(x, y, 3); // no-warning
5065e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
5075e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
5085e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_no_truncate(char *y) {
5095e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  char x[4];
5105e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose  if (strlen(y) == 3)
5115e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose    strncpy(x, y, 3); // no-warning
5125e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
5135e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
5145e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rosevoid strncpy_exactly_matching_buffer(char *y) {
5155e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose	char x[4];
5165e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose	strncpy(x, y, 4); // no-warning
5175e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
5185e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose	// strncpy does not null-terminate, so we have no idea what the strlen is
5195e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose	// after this.
52043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) > 4); // expected-warning{{UNKNOWN}}
5215e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose}
5225e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose
5236e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rosevoid strncpy_zero(char *src) {
5246e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char dst[] = "123";
5256e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  strncpy(dst, src, 0); // no-warning
5266e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose}
5276e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose
5286e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rosevoid strncpy_empty() {
5296e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char dst[] = "123";
5306e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char src[] = "";
5316e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  strncpy(dst, src, 4); // no-warning
5326e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose}
5336e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose
5345e5f15062bcf4b62fda9062b453178f8b9bd0c2dJordy Rose//===----------------------------------------------------------------------===
535067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani// strncat()
536067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani//===----------------------------------------------------------------------===
537067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
538067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#ifdef VARIANT
539067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
540067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define __strncat_chk BUILTIN(__strncat_chk)
541067bbd0e11c71a33b51832532e836971be697699Lenny Maioranichar *__strncat_chk(char *restrict s1, const char *restrict s2, size_t n, size_t destlen);
542067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
543067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define strncat(a,b,c) __strncat_chk(a,b,c, (size_t)-1)
544067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
545067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#else /* VARIANT */
546067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
547067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#define strncat BUILTIN(strncat)
548067bbd0e11c71a33b51832532e836971be697699Lenny Maioranichar *strncat(char *restrict s1, const char *restrict s2, size_t n);
549067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
550067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani#endif /* VARIANT */
551067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
552067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
553067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_null_dst(char *x) {
5549e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncat(NULL, x, 4); // expected-warning{{Null pointer argument in call to string copy function}}
555067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
556067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
557067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_null_src(char *x) {
5589e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncat(x, NULL, 4); // expected-warning{{Null pointer argument in call to string copy function}}
559067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
560067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
561067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_fn(char *x) {
5629e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncat(x, (char*)&strncat_fn, 4); // expected-warning{{Argument to string copy function is the address of the function 'strncat_fn', which is not a null-terminated string}}
563067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
564067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
565067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_effects(char *y) {
566067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[8] = "123";
567067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  size_t orig_len = strlen(x);
568067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char a = x[0];
569067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
570067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) != 4)
571067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani    return;
572067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
57343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncat(x, y, strlen(y)) == x); // expected-warning{{TRUE}}
57443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(x) == (orig_len + strlen(y))); // expected-warning{{TRUE}}
575067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
576067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
577067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_overflow_0(char *y) {
578067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
579067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 4)
5808912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
581067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
582067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
583067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_overflow_1(char *y) {
584067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
585067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 3)
5868912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
587067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
588067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
589067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_overflow_2(char *y) {
590067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
591067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 2)
5928912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    strncat(x, y, strlen(y)); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
593067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
594067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
595067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_overflow_3(char *y) {
596067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
597067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 4)
5988912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    strncat(x, y, 2); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
599067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
600067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_no_overflow_1(char *y) {
601067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[5] = "12";
602067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 2)
603067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani    strncat(x, y, strlen(y)); // no-warning
604067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
605067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani
606067bbd0e11c71a33b51832532e836971be697699Lenny Maioranivoid strncat_no_overflow_2(char *y) {
607067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  char x[4] = "12";
608067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani  if (strlen(y) == 4)
609067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani    strncat(x, y, 1); // no-warning
610067bbd0e11c71a33b51832532e836971be697699Lenny Maiorani}
611318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
6128912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_symbolic_dst_length(char *dst) {
6138912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst, "1234", 5);
61443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
6158912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6168912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6178912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_symbolic_src_length(char *src) {
6188912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst[8] = "1234";
6198912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst, src, 3);
62043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
6218912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6228912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst2[8] = "1234";
6238912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst2, src, 4); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
6248912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6258912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6268912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_unknown_src_length(char *src, int offset) {
6278912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst[8] = "1234";
6288912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst, &src[offset], 3);
62943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
6308912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6318912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst2[8] = "1234";
6328912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst2, &src[offset], 4); // expected-warning{{Size argument is greater than the free space in the destination buffer}}
6338912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6348912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6358912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose// There is no strncat_unknown_dst_length because if we can't get a symbolic
6368912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose// length for the "before" strlen, we won't be able to set one for "after".
6378912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6388912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_symbolic_limit(unsigned limit) {
6398912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst[6] = "1234";
6408912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char src[] = "567";
6418912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst, src, limit); // no-warning
64243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose
64343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
64443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) == 4); // expected-warning{{UNKNOWN}}
6458912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6468912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6478912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_unknown_limit(float limit) {
6488912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char dst[6] = "1234";
6498912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  char src[] = "567";
6508912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  strncat(dst, src, (size_t)limit); // no-warning
65143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose
65243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{TRUE}}
65343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strlen(dst) == 4); // expected-warning{{UNKNOWN}}
6548912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6558912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6568912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rosevoid strncat_too_big(char *dst, char *src) {
657a728e927c6e58f26b2c8615a8baa761d2f157e4bJordan Rose  // We assume this will never actually happen, so we don't get a warning.
6588912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  if (strlen(dst) != (((size_t)0) - 2))
6598912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    return;
6608912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose  if (strlen(src) != 2)
6618912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose    return;
662a728e927c6e58f26b2c8615a8baa761d2f157e4bJordan Rose  strncat(dst, src, 2);
6638912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose}
6648912aaedb413b15f6dd1d8997d80e1d505f7d52fJordy Rose
6656e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rosevoid strncat_zero(char *src) {
6666e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char dst[] = "123";
6676e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  strncat(dst, src, 0); // no-warning
6686e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose}
6696e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose
6706e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rosevoid strncat_empty() {
6716e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char dst[8] = "123";
6726e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  char src[] = "";
6736e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose  strncat(dst, src, 4); // no-warning
6746e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose}
6756e4244ee86a2d71af4eac791808f2dc50c7484e6Jordy Rose
676318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani//===----------------------------------------------------------------------===
677318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani// strcmp()
678318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani//===----------------------------------------------------------------------===
679318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
680318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani#define strcmp BUILTIN(strcmp)
681adc42d412d747391dbcee234610f00b0f087cf7bJordy Roseint strcmp(const char * s1, const char * s2);
682318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
683318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_constant0() {
68443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp("123", "123") == 0); // expected-warning{{TRUE}}
685318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
686318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
687318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_constant_and_var_0() {
688318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
68943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, "123") == 0); // expected-warning{{TRUE}}
690318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
691318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
692318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_constant_and_var_1() {
693318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
69443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp("123", x) == 0); // expected-warning{{TRUE}}
695318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
696318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
697318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_0() {
698318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
699318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "123";
70043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == 0); // expected-warning{{TRUE}}
701318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
702318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
703318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_1() {
704318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "234";
705318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "123";
70643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == 1); // expected-warning{{TRUE}}
707318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
708318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
709318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_2() {
710318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
711318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "234";
71243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == -1); // expected-warning{{TRUE}}
713318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
714318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
715318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_null_0() {
716318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = NULL;
717318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "123";
7189e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcmp(x, y); // expected-warning{{Null pointer argument in call to string comparison function}}
719318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
720318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
721318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_null_1() {
722318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
723318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = NULL;
7249e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcmp(x, y); // expected-warning{{Null pointer argument in call to string comparison function}}
725318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
726318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
727318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_diff_length_0() {
728318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "12345";
729318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "234";
73043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == -1); // expected-warning{{TRUE}}
731318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
732318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
733318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_diff_length_1() {
734318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
735318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "23456";
73643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == -1); // expected-warning{{TRUE}}
737318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
738318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
739318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_diff_length_2() {
740318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "12345";
741318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "123";
74243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == 1); // expected-warning{{TRUE}}
743318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
744318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
745318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maioranivoid strcmp_diff_length_3() {
746318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *x = "123";
747318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani  char *y = "12345";
74843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcmp(x, y) == -1); // expected-warning{{TRUE}}
749318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani}
750318dd92ad834857ea5bb91de288c1eb56cdbec1aLenny Maiorani
751adc42d412d747391dbcee234610f00b0f087cf7bJordy Rosevoid strcmp_embedded_null () {
75243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose	clang_analyzer_eval(strcmp("\0z", "\0y") == 0); // expected-warning{{TRUE}}
753adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose}
754adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose
755adc42d412d747391dbcee234610f00b0f087cf7bJordy Rosevoid strcmp_unknown_arg (char *unknown) {
75643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose	clang_analyzer_eval(strcmp(unknown, unknown) == 0); // expected-warning{{TRUE}}
757adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose}
758adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose
759357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani//===----------------------------------------------------------------------===
760357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani// strncmp()
761357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani//===----------------------------------------------------------------------===
762357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
763357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani#define strncmp BUILTIN(strncmp)
764adc42d412d747391dbcee234610f00b0f087cf7bJordy Roseint strncmp(const char *s1, const char *s2, size_t n);
765357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
766357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_constant0() {
76743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp("123", "123", 3) == 0); // expected-warning{{TRUE}}
768357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
769357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
770357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_constant_and_var_0() {
771357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
77243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, "123", 3) == 0); // expected-warning{{TRUE}}
773357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
774357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
775357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_constant_and_var_1() {
776357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
77743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp("123", x, 3) == 0); // expected-warning{{TRUE}}
778357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
779357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
780357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_0() {
781357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
782357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "123";
78343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == 0); // expected-warning{{TRUE}}
784357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
785357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
786357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_1() {
787357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "234";
788357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "123";
78943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == 1); // expected-warning{{TRUE}}
790357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
791357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
792357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_2() {
793357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
794357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "234";
79543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == -1); // expected-warning{{TRUE}}
796357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
797357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
798357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_null_0() {
799357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = NULL;
800357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "123";
8019e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncmp(x, y, 3); // expected-warning{{Null pointer argument in call to string comparison function}}
802357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
803357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
804357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_null_1() {
805357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
806357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = NULL;
8079e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncmp(x, y, 3); // expected-warning{{Null pointer argument in call to string comparison function}}
808357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
809357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
810357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_0() {
811357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "12345";
812357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "234";
81343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 5) == -1); // expected-warning{{TRUE}}
814357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
815357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
816357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_1() {
817357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
818357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "23456";
81943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 5) == -1); // expected-warning{{TRUE}}
820357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
821357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
822357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_2() {
823357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "12345";
824357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "123";
82543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 5) == 1); // expected-warning{{TRUE}}
826357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
827357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
828357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_3() {
829357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
830357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "12345";
83143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 5) == -1); // expected-warning{{TRUE}}
832357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
833357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
834357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_4() {
835357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "123";
836357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "12345";
83743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == 0); // expected-warning{{TRUE}}
838357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
839357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
840357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_5() {
841357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "012";
842357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "12345";
84343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == -1); // expected-warning{{TRUE}}
844357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
845357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
846357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maioranivoid strncmp_diff_length_6() {
847357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *x = "234";
848357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani  char *y = "12345";
84943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncmp(x, y, 3) == 1); // expected-warning{{TRUE}}
850357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani}
851357f6ee9f1f6f8e5027377cb3e5907c62c4fe3dfLenny Maiorani
852adc42d412d747391dbcee234610f00b0f087cf7bJordy Rosevoid strncmp_embedded_null () {
85343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose	clang_analyzer_eval(strncmp("ab\0zz", "ab\0yy", 4) == 0); // expected-warning{{TRUE}}
854adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose}
855adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose
856bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani//===----------------------------------------------------------------------===
857bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani// strcasecmp()
858bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani//===----------------------------------------------------------------------===
859bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
860bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani#define strcasecmp BUILTIN(strcasecmp)
861adc42d412d747391dbcee234610f00b0f087cf7bJordy Roseint strcasecmp(const char *s1, const char *s2);
862bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
863bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_constant0() {
86443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp("abc", "Abc") == 0); // expected-warning{{TRUE}}
865bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
866bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
867bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_constant_and_var_0() {
868bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abc";
86943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, "Abc") == 0); // expected-warning{{TRUE}}
870bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
871bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
872bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_constant_and_var_1() {
873bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abc";
87443d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp("Abc", x) == 0); // expected-warning{{TRUE}}
875bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
876bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
877bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_0() {
878bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abc";
879bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "Abc";
88043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == 0); // expected-warning{{TRUE}}
881bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
882bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
883bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_1() {
884bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "Bcd";
885bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "abc";
88643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == 1); // expected-warning{{TRUE}}
887bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
888bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
889bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_2() {
890bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abc";
891bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "Bcd";
89243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == -1); // expected-warning{{TRUE}}
893bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
894bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
895bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_null_0() {
896bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = NULL;
897bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "123";
8989e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcasecmp(x, y); // expected-warning{{Null pointer argument in call to string comparison function}}
899bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
900bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
901bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_null_1() {
902bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "123";
903bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = NULL;
9049e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strcasecmp(x, y); // expected-warning{{Null pointer argument in call to string comparison function}}
905bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
906bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
907bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_diff_length_0() {
908bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abcde";
909bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "aBd";
91043d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == -1); // expected-warning{{TRUE}}
911bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
912bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
913bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_diff_length_1() {
914bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "abc";
915bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "aBdef";
91643d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == -1); // expected-warning{{TRUE}}
917bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
918bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
919bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_diff_length_2() {
920bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "aBcDe";
921bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "abc";
92243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == 1); // expected-warning{{TRUE}}
923bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
924bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani
925bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maioranivoid strcasecmp_diff_length_3() {
926bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *x = "aBc";
927bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani  char *y = "abcde";
92843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strcasecmp(x, y) == -1); // expected-warning{{TRUE}}
929bd1d16a1792cd6ea5ede9869e18d781e3fc1a8c3Lenny Maiorani}
930454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
931adc42d412d747391dbcee234610f00b0f087cf7bJordy Rosevoid strcasecmp_embedded_null () {
93243d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose	clang_analyzer_eval(strcasecmp("ab\0zz", "ab\0yy") == 0); // expected-warning{{TRUE}}
933adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose}
934adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose
935454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani//===----------------------------------------------------------------------===
936454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani// strncasecmp()
937454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani//===----------------------------------------------------------------------===
938454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
939454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani#define strncasecmp BUILTIN(strncasecmp)
940adc42d412d747391dbcee234610f00b0f087cf7bJordy Roseint strncasecmp(const char *s1, const char *s2, size_t n);
941454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
942454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_constant0() {
94343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp("abc", "Abc", 3) == 0); // expected-warning{{TRUE}}
944454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
945454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
946454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_constant_and_var_0() {
947454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abc";
94843d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, "Abc", 3) == 0); // expected-warning{{TRUE}}
949454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
950454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
951454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_constant_and_var_1() {
952454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abc";
95343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp("Abc", x, 3) == 0); // expected-warning{{TRUE}}
954454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
955454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
956454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_0() {
957454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abc";
958454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "Abc";
95943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == 0); // expected-warning{{TRUE}}
960454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
961454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
962454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_1() {
963454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "Bcd";
964454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "abc";
96543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == 1); // expected-warning{{TRUE}}
966454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
967454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
968454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_2() {
969454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abc";
970454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "Bcd";
97143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == -1); // expected-warning{{TRUE}}
972454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
973454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
974454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_null_0() {
975454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = NULL;
976454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "123";
9779e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncasecmp(x, y, 3); // expected-warning{{Null pointer argument in call to string comparison function}}
978454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
979454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
980454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_null_1() {
981454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "123";
982454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = NULL;
9839e49d9fbdc861c25c2480233147dee07f5fa9660Jordy Rose  strncasecmp(x, y, 3); // expected-warning{{Null pointer argument in call to string comparison function}}
984454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
985454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
986454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_0() {
987454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abcde";
988454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "aBd";
98943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 5) == -1); // expected-warning{{TRUE}}
990454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
991454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
992454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_1() {
993454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abc";
994454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "aBdef";
99543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 5) == -1); // expected-warning{{TRUE}}
996454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
997454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
998454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_2() {
999454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "aBcDe";
1000454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "abc";
100143d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 5) == 1); // expected-warning{{TRUE}}
1002454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
1003454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
1004454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_3() {
1005454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "aBc";
1006454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "abcde";
100743d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 5) == -1); // expected-warning{{TRUE}}
1008454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
1009454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
1010454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_4() {
1011454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abcde";
1012454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "aBc";
101343d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == 0); // expected-warning{{TRUE}}
1014454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
1015454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
1016454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_5() {
1017454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "abcde";
1018454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "aBd";
101943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == -1); // expected-warning{{TRUE}}
1020454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
1021454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani
1022454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maioranivoid strncasecmp_diff_length_6() {
1023454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *x = "aBDe";
1024454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani  char *y = "abc";
102543d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose  clang_analyzer_eval(strncasecmp(x, y, 3) == 1); // expected-warning{{TRUE}}
1026454fd2d3a1b6d0ef225c5d3927c1ad3b97510d1aLenny Maiorani}
1027adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose
1028adc42d412d747391dbcee234610f00b0f087cf7bJordy Rosevoid strncasecmp_embedded_null () {
102943d9f0d4e9b88dcab473a359a7b5579c2a619b22Jordy Rose	clang_analyzer_eval(strncasecmp("ab\0zz", "ab\0yy", 4) == 0); // expected-warning{{TRUE}}
1030adc42d412d747391dbcee234610f00b0f087cf7bJordy Rose}
103174c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks
103274c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks//===----------------------------------------------------------------------===
1033af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose// strsep()
1034af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose//===----------------------------------------------------------------------===
1035af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1036af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosechar *strsep(char **stringp, const char *delim);
1037af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1038af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_null_delim(char *s) {
1039af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  strsep(&s, NULL); // expected-warning{{Null pointer argument in call to strsep()}}
1040af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1041af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1042af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_null_search() {
1043af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  strsep(NULL, ""); // expected-warning{{Null pointer argument in call to strsep()}}
1044af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1045af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1046af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_return_original_pointer(char *s) {
1047af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *original = s;
1048af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *result = strsep(&s, ""); // no-warning
1049af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(original == result); // expected-warning{{TRUE}}
1050af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1051af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1052af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_null_string() {
1053af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *s = NULL;
1054af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *result = strsep(&s, ""); // no-warning
1055af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(result == NULL); // expected-warning{{TRUE}}
1056af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1057af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1058af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_changes_input_pointer(char *s) {
1059af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *original = s;
1060af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  strsep(&s, ""); // no-warning
1061af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(s == original); // expected-warning{{UNKNOWN}}
1062af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(s == NULL); // expected-warning{{UNKNOWN}}
1063af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1064af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  // Check that the value is symbolic.
1065af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  if (s == NULL) {
1066af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose    clang_analyzer_eval(s == NULL); // expected-warning{{TRUE}}
1067af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  }
1068af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1069af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1070af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rosevoid strsep_changes_input_string() {
1071af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char str[] = "abc";
1072af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1073af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(str[1] == 'b'); // expected-warning{{TRUE}}
1074af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1075af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  char *s = str;
1076af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  strsep(&s, "b"); // no-warning
1077af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1078af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  // The real strsep will change the first delimiter it finds into a NUL
1079af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  // character. For now, we just model the invalidation.
1080af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose  clang_analyzer_eval(str[1] == 'b'); // expected-warning{{UNKNOWN}}
1081af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose}
1082af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose
1083af22621352481e91488a54ea0e0b5e73f6551ab7Jordan Rose//===----------------------------------------------------------------------===
108474c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// FIXMEs
108574c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks//===----------------------------------------------------------------------===
108674c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks
108774c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// The analyzer_eval call below should evaluate to true. We are being too
108874c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// aggressive in marking the (length of) src symbol dead. The length of dst
108974c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// depends on src. This could be explicitely specified in the checker or the
109074c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// logic for handling MetadataSymbol in SymbolManager needs to change.
109174c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaksvoid strcat_symbolic_src_length(char *src) {
109274c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	char dst[8] = "1234";
109374c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	strcat(dst, src);
109474c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks  clang_analyzer_eval(strlen(dst) >= 4); // expected-warning{{UNKNOWN}}
109574c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks}
109674c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks
109774c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// The analyzer_eval call below should evaluate to true. Most likely the same
109874c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks// issue as the test above.
109974c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaksvoid strncpy_exactly_matching_buffer2(char *y) {
110074c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	if (strlen(y) >= 4)
110174c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks		return;
110274c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks
110374c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	char x[4];
110474c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	strncpy(x, y, 4); // no-warning
110574c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks
110674c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks	// This time, we know that y fits in x anyway.
110774c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks  clang_analyzer_eval(strlen(x) <= 3); // expected-warning{{UNKNOWN}}
110874c0d6988462c2cb882e7a8b8050fe119a5af56fAnna Zaks}
1109