53 lines · c
1// RUN: %clang_analyze_cc1 -w -x c -analyzer-checker=core,unix -analyzer-output=text -verify %s2 3// Avoid the crash when finding the expression for tracking the origins4// of the null pointer for path notes.5void pr34373(void) {6 int *a = 0; // expected-note{{'a' initialized to a null pointer value}}7 (a + 0)[0]; // expected-warning{{Array access results in a null pointer dereference}}8 // expected-note@-1{{Array access results in a null pointer dereference}}9}10 11typedef __typeof(sizeof(int)) size_t;12void *memcpy(void *dest, const void *src, unsigned long count);13 14void f1(char *source) {15 char *destination = 0; // expected-note{{'destination' initialized to a null pointer value}}16 memcpy(destination + 0, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}17 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}18}19 20void f2(char *source) {21 char *destination = 0; // expected-note{{'destination' initialized to a null pointer value}}22 memcpy(destination - 0, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}23 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}24}25 26void f3(char *source) {27 char *destination = 0; // expected-note{{'destination' initialized to a null pointer value}}28 destination = destination + 0; // expected-note{{Null pointer value stored to 'destination'}}29 memcpy(destination, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}30 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}31}32 33void f4(char *source) {34 char *destination = 0; // expected-note{{'destination' initialized to a null pointer value}}35 destination = destination - 0; // expected-note{{Null pointer value stored to 'destination'}}36 memcpy(destination, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}37 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}38}39 40void f5(char *source) {41 char *destination1 = 0; // expected-note{{'destination1' initialized to a null pointer value}}42 char *destination2 = destination1 + 0; // expected-note{{'destination2' initialized to a null pointer value}}43 memcpy(destination2, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}44 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}45}46 47void f6(char *source) {48 char *destination1 = 0; // expected-note{{'destination1' initialized to a null pointer value}}49 char *destination2 = destination1 - 0; // expected-note{{'destination2' initialized to a null pointer value}}50 memcpy(destination2, source, 10); // expected-warning{{Null pointer passed as 1st argument to memory copy function}}51 // expected-note@-1{{Null pointer passed as 1st argument to memory copy function}}52}53