1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
| // RUN: %clang_analyze_cc1 -analyzer-checker=core,debug.ExprInspection -verify -analyzer-config eagerly-assume=false %s
void clang_analyzer_eval(int);
void clang_analyzer_warnIfReached();
#define INT_MIN 0x80000000
#define INT_MAX 0x7fffffff
// PR16833: Analyzer consumes memory until killed by kernel OOM killer
// while analyzing large case ranges.
void PR16833(unsigned op) {
switch (op) {
case 0x02 << 26 ... 0x03 << 26: // Analyzer should not hang here.
return;
}
}
void testAdjustment(int t) {
switch (t + 1) {
case 2:
clang_analyzer_eval(t == 1); // expected-warning{{TRUE}}
break;
case 3 ... 10:
clang_analyzer_eval(t > 1); // expected-warning{{TRUE}}
clang_analyzer_eval(t + 2 <= 11); // expected-warning{{TRUE}}
clang_analyzer_eval(t > 2); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(t + 1 == 3); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(t + 1 == 10); // expected-warning{{UNKNOWN}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
}
void testUnknownVal(int value, int mask) {
// Once ConstraintManager will process '&' and this test will require some changes.
switch (value & mask) {
case 1:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
case 3 ... 10:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
}
void testSwitchCond(int arg) {
if (arg > 10) {
switch (arg) {
case INT_MIN ... 10:
clang_analyzer_warnIfReached(); // no-warning
break;
case 11 ... 20:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
switch (arg) {
case INT_MIN ... 9:
clang_analyzer_warnIfReached(); // no-warning
break;
case 10 ... 20:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg > 10); // expected-warning{{TRUE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
} // arg > 10
}
void testDefaultUnreachable(int arg) {
if (arg > 10) {
switch (arg) {
case INT_MIN ... 9:
clang_analyzer_warnIfReached(); // no-warning
break;
case 10 ... INT_MAX:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg > 10); // expected-warning{{TRUE}}
break;
default:
clang_analyzer_warnIfReached(); // no-warning
}
}
}
void testBranchReachability(int arg) {
if (arg > 10 && arg < 20) {
switch (arg) {
case INT_MIN ... 4:
clang_analyzer_warnIfReached(); // no-warning
break;
case 5 ... 9:
clang_analyzer_warnIfReached(); // no-warning
break;
case 10 ... 15:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg > 10 && arg <= 15); // expected-warning{{TRUE}}
break;
default:
clang_analyzer_warnIfReached(); // no-warning
break;
case 17 ... 25:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg >= 17 && arg < 20); // expected-warning{{TRUE}}
break;
case 26 ... INT_MAX:
clang_analyzer_warnIfReached(); // no-warning
break;
case 16:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg == 16); // expected-warning{{TRUE}}
break;
}
}
}
void testDefaultBranchRange(int arg) {
switch (arg) {
case INT_MIN ... 9:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
case 20 ... INT_MAX:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg >= 20); // expected-warning{{TRUE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
clang_analyzer_eval(arg == 16); // expected-warning{{FALSE}}
clang_analyzer_eval(arg > 9); // expected-warning{{TRUE}}
clang_analyzer_eval(arg <= 20); // expected-warning{{TRUE}}
case 16:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
}
void testAllUnreachableButDefault(int arg) {
if (arg < 0) {
switch (arg) {
case 0 ... 9:
clang_analyzer_warnIfReached(); // no-warning
break;
case 20 ... INT_MAX:
clang_analyzer_warnIfReached(); // no-warning
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
case 16:
clang_analyzer_warnIfReached(); // no-warning
}
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
}
void testAllUnreachable(int arg) {
if (arg < 0) {
switch (arg) {
case 0 ... 9:
clang_analyzer_warnIfReached(); // no-warning
break;
case 20 ... INT_MAX:
clang_analyzer_warnIfReached(); // no-warning
break;
case 16:
clang_analyzer_warnIfReached(); // no-warning
}
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
}
}
void testDifferentTypes(int arg) {
switch (arg) {
case -1U ... 400000000LL:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
}
}
void testDifferentTypes2(unsigned long arg) {
switch (arg) {
case 1UL ... 400000000UL:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
}
}
void testDifferentTypes3(int arg) {
switch (arg) {
case 1UL ... 400000000UL:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
}
}
void testConstant() {
switch (3) {
case 1 ... 5:
clang_analyzer_warnIfReached(); // expected-warning{{REACHABLE}}
break;
default:
clang_analyzer_warnIfReached(); // no-warning
break;
}
}
|