1 // RUN: %clang_analyze_cc1 -analyzer-checker=core,debug.ExprInspection -verify %s 2 3 void clang_analyzer_eval(bool); 4 5 struct A { 6 // This conversion operator allows implicit conversion to bool but not to other integer types. 7 typedef A * (A::*MemberPointer); 8 operator MemberPointer() const { return m_ptr ? &A::m_ptr : 0; } 9 10 A *m_ptr; 11 12 A *getPtr(); 13 typedef A * (A::*MemberFnPointer)(void); 14 }; 15 16 void testConditionalUse() { 17 A obj; 18 19 obj.m_ptr = &obj; 20 clang_analyzer_eval(obj.m_ptr); // expected-warning{{TRUE}} 21 clang_analyzer_eval(&A::m_ptr); // expected-warning{{TRUE}} 22 clang_analyzer_eval(obj); // expected-warning{{TRUE}} 23 24 obj.m_ptr = 0; 25 clang_analyzer_eval(obj.m_ptr); // expected-warning{{FALSE}} 26 clang_analyzer_eval(A::MemberPointer(0)); // expected-warning{{FALSE}} 27 clang_analyzer_eval(obj); // expected-warning{{FALSE}} 28 29 clang_analyzer_eval(&A::getPtr); // expected-warning{{TRUE}} 30 clang_analyzer_eval(A::MemberFnPointer(0)); // expected-warning{{FALSE}} 31 } 32 33 34 void testComparison() { 35 clang_analyzer_eval(&A::getPtr == &A::getPtr); // expected-warning{{TRUE}} 36 clang_analyzer_eval(&A::getPtr == 0); // expected-warning{{FALSE}} 37 38 clang_analyzer_eval(&A::m_ptr == &A::m_ptr); // expected-warning{{TRUE}} 39 } 40 41 namespace PR15742 { 42 template <class _T1, class _T2> struct A { 43 A (const _T1 &, const _T2 &); 44 }; 45 46 typedef void *NPIdentifier; 47 48 template <class T> class B { 49 public: 50 typedef A<NPIdentifier, bool (T::*) (const NPIdentifier *, unsigned, 51 NPIdentifier *)> MethodMapMember; 52 }; 53 54 class C : public B<C> { 55 public: 56 bool Find(const NPIdentifier *, unsigned, NPIdentifier *); 57 }; 58 59 void InitStaticData () { 60 C::MethodMapMember(0, &C::Find); // don't crash 61 } 62 } 63 64 bool testDereferencing() { 65 A obj; 66 obj.m_ptr = 0; 67 68 A::MemberPointer member = &A::m_ptr; 69 70 clang_analyzer_eval(obj.*member == 0); // expected-warning{{TRUE}} 71 72 member = 0; 73 74 return obj.*member; // expected-warning{{The result of the '.*' expression is undefined}} 75 } 76 77 namespace testPointerToMemberFunction { 78 struct A { 79 virtual int foo() { return 1; } 80 int bar() { return 2; } 81 int static staticMemberFunction(int p) { return p + 1; }; 82 }; 83 84 struct B : public A { 85 virtual int foo() { return 3; } 86 }; 87 88 typedef int (A::*AFnPointer)(); 89 typedef int (B::*BFnPointer)(); 90 91 void testPointerToMemberCasts() { 92 AFnPointer AFP = &A::bar; 93 BFnPointer StaticCastedBase2Derived = static_cast<BFnPointer>(&A::bar), 94 CCastedBase2Derived = (BFnPointer) (&A::bar); 95 A a; 96 B b; 97 98 clang_analyzer_eval((a.*AFP)() == 2); // expected-warning{{TRUE}} 99 clang_analyzer_eval((b.*StaticCastedBase2Derived)() == 2); // expected-warning{{TRUE}} 100 clang_analyzer_eval(((b.*CCastedBase2Derived)() == 2)); // expected-warning{{TRUE}} 101 } 102 103 void testPointerToMemberVirtualCall() { 104 A a; 105 B b; 106 A *APtr = &a; 107 AFnPointer AFP = &A::foo; 108 109 clang_analyzer_eval((APtr->*AFP)() == 1); // expected-warning{{TRUE}} 110 111 APtr = &b; 112 113 clang_analyzer_eval((APtr->*AFP)() == 3); // expected-warning{{TRUE}} 114 } 115 116 void testPointerToStaticMemberCall() { 117 int (*fPtr)(int) = &A::staticMemberFunction; 118 if (fPtr != 0) { // no-crash 119 clang_analyzer_eval(fPtr(2) == 3); // expected-warning{{TRUE}} 120 } 121 } 122 } // end of testPointerToMemberFunction namespace 123 124 namespace testPointerToMemberData { 125 struct A { 126 int i; 127 static int j; 128 }; 129 130 void testPointerToMemberData() { 131 int A::*AMdPointer = &A::i; 132 A a; 133 134 a.i = 42; 135 a.*AMdPointer += 1; 136 137 clang_analyzer_eval(a.i == 43); // expected-warning{{TRUE}} 138 139 int *ptrToStaticField = &A::j; 140 if (ptrToStaticField != 0) { 141 *ptrToStaticField = 7; 142 clang_analyzer_eval(*ptrToStaticField == 7); // expected-warning{{TRUE}} 143 clang_analyzer_eval(A::j == 7); // expected-warning{{TRUE}} 144 } 145 } 146 } // end of testPointerToMemberData namespace 147 148 namespace testPointerToMemberMiscCasts { 149 struct B { 150 int f; 151 }; 152 153 struct D : public B { 154 int g; 155 }; 156 157 void foo() { 158 D d; 159 d.f = 7; 160 161 int B::* pfb = &B::f; 162 int D::* pfd = pfb; 163 int v = d.*pfd; 164 165 clang_analyzer_eval(v == 7); // expected-warning{{TRUE}} 166 } 167 } // end of testPointerToMemberMiscCasts namespace 168 169 namespace testPointerToMemberMiscCasts2 { 170 struct B { 171 int f; 172 }; 173 struct L : public B { }; 174 struct R : public B { }; 175 struct D : public L, R { }; 176 177 void foo() { 178 D d; 179 180 int B::* pb = &B::f; 181 int L::* pl = pb; 182 int R::* pr = pb; 183 184 int D::* pdl = pl; 185 int D::* pdr = pr; 186 187 clang_analyzer_eval(pdl == pdr); // expected-warning{{FALSE}} 188 clang_analyzer_eval(pb == pl); // expected-warning{{TRUE}} 189 } 190 } // end of testPointerToMemberMiscCasts2 namespace 191 192 namespace testPointerToMemberDiamond { 193 struct B { 194 int f; 195 }; 196 struct L1 : public B { }; 197 struct R1 : public B { }; 198 struct M : public L1, R1 { }; 199 struct L2 : public M { }; 200 struct R2 : public M { }; 201 struct D2 : public L2, R2 { }; 202 203 void diamond() { 204 M m; 205 206 static_cast<L1 *>(&m)->f = 7; 207 static_cast<R1 *>(&m)->f = 16; 208 209 int L1::* pl1 = &B::f; 210 int M::* pm_via_l1 = pl1; 211 212 int R1::* pr1 = &B::f; 213 int M::* pm_via_r1 = pr1; 214 215 clang_analyzer_eval(m.*(pm_via_l1) == 7); // expected-warning {{TRUE}} 216 clang_analyzer_eval(m.*(pm_via_r1) == 16); // expected-warning {{TRUE}} 217 } 218 219 void double_diamond() { 220 D2 d2; 221 222 static_cast<L1 *>(static_cast<L2 *>(&d2))->f = 1; 223 static_cast<L1 *>(static_cast<R2 *>(&d2))->f = 2; 224 static_cast<R1 *>(static_cast<L2 *>(&d2))->f = 3; 225 static_cast<R1 *>(static_cast<R2 *>(&d2))->f = 4; 226 227 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int L2::*>(static_cast<int L1::*>(&B::f)))) == 1); // expected-warning {{TRUE}} 228 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int R2::*>(static_cast<int L1::*>(&B::f)))) == 2); // expected-warning {{TRUE}} 229 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int L2::*>(static_cast<int R1::*>(&B::f)))) == 3); // expected-warning {{TRUE}} 230 clang_analyzer_eval(d2.*(static_cast<int D2::*>(static_cast<int R2::*>(static_cast<int R1::*>(&B::f)))) == 4); // expected-warning {{TRUE}} 231 } 232 } // end of testPointerToMemberDiamond namespace 233