31 lines · c
1// Check the bugpath related to the reports.2// RUN: %clang_analyze_cc1 %s \3// RUN: -analyzer-checker=core \4// RUN: -analyzer-checker=unix.StdCLibraryFunctions \5// RUN: -analyzer-checker=debug.StdCLibraryFunctionsTester \6// RUN: -analyzer-checker=debug.ExprInspection \7// RUN: -triple x86_64-unknown-linux-gnu \8// RUN: -analyzer-output=text \9// RUN: -verify=bugpath10 11typedef typeof(sizeof(int)) size_t;12 13int __buf_size_arg_constraint(const void *, size_t);14void test_buf_size_concrete(void) {15 char buf[3]; // bugpath-note{{'buf' initialized here}}16 int s = 4; // bugpath-note{{'s' initialized to 4}}17 __buf_size_arg_constraint(buf, s); // \18 // bugpath-warning{{The 1st argument to '__buf_size_arg_constraint' is a buffer with size 3 but should be a buffer with size equal to or greater than the value of the 2nd argument}} \19 // bugpath-note{{The 1st argument to '__buf_size_arg_constraint' is a buffer with size 3 but should be a buffer with size equal to or greater than the value of the 2nd argument}}20}21 22int __buf_size_arg_constraint_mul(const void *, size_t, size_t);23void test_buf_size_concrete_with_multiplication(void) {24 short buf[3]; // bugpath-note{{'buf' initialized here}}25 int s1 = 4; // bugpath-note{{'s1' initialized to 4}}26 int s2 = sizeof(short); // bugpath-note{{'s2' initialized to}}27 __buf_size_arg_constraint_mul(buf, s1, s2); // \28 // bugpath-warning{{The 1st argument to '__buf_size_arg_constraint_mul' is a buffer with size 6 but should be a buffer with size equal to or greater than the value of the 2nd argument (which is 4) times the 3rd argument (which is 2)}} \29 // bugpath-note{{The 1st argument to '__buf_size_arg_constraint_mul' is a buffer with size 6 but should be a buffer with size equal to or greater than the value of the 2nd argument (which is 4) times the 3rd argument (which is 2)}}30}31