1 // RUN: %clang_cc1 -analyze -analyzer-checker=core,debug.ExprInspection -verify %s 2 3 void clang_analyzer_eval(bool); 4 5 struct A { 6 // This conversion operator allows implicit conversion to bool but not to other integer types. 7 typedef A * (A::*MemberPointer); 8 operator MemberPointer() const { return m_ptr ? &A::m_ptr : 0; } 9 10 A *m_ptr; 11 12 A *getPtr(); 13 typedef A * (A::*MemberFnPointer)(void); 14 }; 15 16 void testConditionalUse() { 17 A obj; 18 19 obj.m_ptr = &obj; 20 clang_analyzer_eval(obj.m_ptr); // expected-warning{{TRUE}} 21 clang_analyzer_eval(&A::m_ptr); // expected-warning{{TRUE}} 22 clang_analyzer_eval(obj); // expected-warning{{TRUE}} 23 24 obj.m_ptr = 0; 25 clang_analyzer_eval(obj.m_ptr); // expected-warning{{FALSE}} 26 clang_analyzer_eval(A::MemberPointer(0)); // expected-warning{{FALSE}} 27 clang_analyzer_eval(obj); // expected-warning{{FALSE}} 28 29 clang_analyzer_eval(&A::getPtr); // expected-warning{{TRUE}} 30 clang_analyzer_eval(A::MemberFnPointer(0)); // expected-warning{{FALSE}} 31 } 32 33 34 void testComparison() { 35 clang_analyzer_eval(&A::getPtr == &A::getPtr); // expected-warning{{TRUE}} 36 clang_analyzer_eval(&A::getPtr == 0); // expected-warning{{FALSE}} 37 38 clang_analyzer_eval(&A::m_ptr == &A::m_ptr); // expected-warning{{TRUE}} 39 } 40 41 namespace PR15742 { 42 template <class _T1, class _T2> struct A { 43 A (const _T1 &, const _T2 &); 44 }; 45 46 typedef void *NPIdentifier; 47 48 template <class T> class B { 49 public: 50 typedef A<NPIdentifier, bool (T::*) (const NPIdentifier *, unsigned, 51 NPIdentifier *)> MethodMapMember; 52 }; 53 54 class C : public B<C> { 55 public: 56 bool Find(const NPIdentifier *, unsigned, NPIdentifier *); 57 }; 58 59 void InitStaticData () { 60 C::MethodMapMember(0, &C::Find); // don't crash 61 } 62 } 63 64 bool testDereferencing() { 65 A obj; 66 obj.m_ptr = 0; 67 68 A::MemberPointer member = &A::m_ptr; 69 70 clang_analyzer_eval(obj.*member == 0); // expected-warning{{TRUE}} 71 72 member = 0; 73 74 return obj.*member; // expected-warning{{The result of the '.*' expression is undefined}} 75 } 76 77 namespace testPointerToMemberFunction { 78 struct A { 79 virtual int foo() { return 1; } 80 int bar() { return 2; } 81 }; 82 83 struct B : public A { 84 virtual int foo() { return 3; } 85 }; 86 87 typedef int (A::*AFnPointer)(); 88 typedef int (B::*BFnPointer)(); 89 90 void testPointerToMemberCasts() { 91 AFnPointer AFP = &A::bar; 92 BFnPointer StaticCastedBase2Derived = static_cast<BFnPointer>(&A::bar), 93 CCastedBase2Derived = (BFnPointer) (&A::bar); 94 A a; 95 B b; 96 97 clang_analyzer_eval((a.*AFP)() == 2); // expected-warning{{TRUE}} 98 clang_analyzer_eval((b.*StaticCastedBase2Derived)() == 2); // expected-warning{{TRUE}} 99 clang_analyzer_eval(((b.*CCastedBase2Derived)() == 2)); // expected-warning{{TRUE}} 100 } 101 102 void testPointerToMemberVirtualCall() { 103 A a; 104 B b; 105 A *APtr = &a; 106 AFnPointer AFP = &A::foo; 107 108 clang_analyzer_eval((APtr->*AFP)() == 1); // expected-warning{{TRUE}} 109 110 APtr = &b; 111 112 clang_analyzer_eval((APtr->*AFP)() == 3); // expected-warning{{TRUE}} 113 } 114 } // end of testPointerToMemberFunction namespace 115 116 namespace testPointerToMemberData { 117 struct A { 118 int i; 119 }; 120 121 void testPointerToMemberData() { 122 int A::*AMdPointer = &A::i; 123 A a; 124 125 a.i = 42; 126 a.*AMdPointer += 1; 127 128 clang_analyzer_eval(a.i == 43); // expected-warning{{TRUE}} 129 } 130 } // end of testPointerToMemberData namespace 131 132 namespace testPointerToMemberMiscCasts { 133 struct B { 134 int f; 135 }; 136 137 struct D : public B { 138 int g; 139 }; 140 141 void foo() { 142 D d; 143 d.f = 7; 144 145 int B::* pfb = &B::f; 146 int D::* pfd = pfb; 147 int v = d.*pfd; 148 149 clang_analyzer_eval(v == 7); // expected-warning{{TRUE}} 150 } 151 } // end of testPointerToMemberMiscCasts namespace 152 153 namespace testPointerToMemberMiscCasts2 { 154 struct B { 155 int f; 156 }; 157 struct L : public B { }; 158 struct R : public B { }; 159 struct D : public L, R { }; 160 161 void foo() { 162 D d; 163 164 int B::* pb = &B::f; 165 int L::* pl = pb; 166 int R::* pr = pb; 167 168 int D::* pdl = pl; 169 int D::* pdr = pr; 170 171 clang_analyzer_eval(pdl == pdr); // expected-warning{{FALSE}} 172 clang_analyzer_eval(pb == pl); // expected-warning{{TRUE}} 173 } 174 } // end of testPointerToMemberMiscCasts2 namespace 175 176 namespace testPointerToMemberDiamond { 177 struct B { 178 int f; 179 }; 180 struct L1 : public B { }; 181 struct R1 : public B { }; 182 struct M : public L1, R1 { }; 183 struct L2 : public M { }; 184 struct R2 : public M { }; 185 struct D2 : public L2, R2 { }; 186 187 void diamond() { 188 M m; 189 190 static_cast<L1 *>(&m)->f = 7; 191 static_cast<R1 *>(&m)->f = 16; 192 193 int L1::* pl1 = &B::f; 194 int M::* pm_via_l1 = pl1; 195 196 int R1::* pr1 = &B::f; 197 int M::* pm_via_r1 = pr1; 198 199 clang_analyzer_eval(m.*(pm_via_l1) == 7); // expected-warning {{TRUE}} 200 clang_analyzer_eval(m.*(pm_via_r1) == 16); // expected-warning {{TRUE}} 201 } 202 203 void double_diamond() { 204 D2 d2; 205 206 static_cast<L1 *>(static_cast<L2 *>(&d2))->f = 1; 207 static_cast<L1 *>(static_cast<R2 *>(&d2))->f = 2; 208 static_cast<R1 *>(static_cast<L2 *>(&d2))->f = 3; 209 static_cast<R1 *>(static_cast<R2 *>(&d2))->f = 4; 210 211 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int L2::*>(static_cast<int L1::*>(&B::f)))) == 1); // expected-warning {{TRUE}} 212 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int R2::*>(static_cast<int L1::*>(&B::f)))) == 2); // expected-warning {{TRUE}} 213 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int L2::*>(static_cast<int R1::*>(&B::f)))) == 3); // expected-warning {{TRUE}} 214 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int R2::*>(static_cast<int R1::*>(&B::f)))) == 4); // expected-warning {{TRUE}} 215 } 216 } // end of testPointerToMemberDiamond namespace 217