reference, declaration → definition
definition → references, declarations, derived classes, virtual overrides
reference to multiple definitions → definitions
unreferenced

    1
    2
    3
    4
    5
    6
    7
    8
    9
   10
   11
   12
   13
   14
   15
   16
   17
   18
   19
   20
   21
   22
   23
   24
   25
   26
   27
   28
   29
   30
   31
   32
   33
   34
   35
   36
   37
   38
   39
   40
   41
   42
   43

// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s
// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s

extern int coin();

int foo() {
    int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
    while (coin()) { // expected-note{{Loop condition is true}}
        if (coin())  // expected-note {{Taking true branch}}
                     // expected-note@-1 {{Assuming the condition is true}}
            return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
                       // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
    }
    return 0;
}

void bar() {
    while(coin())
        if (coin())
            foo();
}

int foo2() {
    int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
    while (coin()) { // expected-note{{Loop condition is true}}
        if (coin())  // expected-note {{Taking false branch}}
                     // expected-note@-1 {{Assuming the condition is false}}
            return false;
        else
            return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
                       // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
    }
    return 0;
}

void bar2() {
    while(coin()) // expected-note{{Loop condition is true}}
        if (coin()) // expected-note {{Assuming the condition is false}}
                    // expected-note@-1 {{Taking false branch}}
          return;
        else
            foo(); // expected-note{{Calling 'foo'}}
}