// RUN: %clang_analyze_cc1 \ // RUN: -analyzer-checker=core,apiModeling.llvm.CastValue,debug.ExprInspection\ // RUN: -analyzer-output=text -verify %s #include "Inputs/llvm.h" namespace clang { struct Shape { template const T *castAs() const; template const T *getAs() const; }; class Triangle : public Shape {}; class Circle : public Shape {}; } // namespace clang using namespace llvm; using namespace clang; void evalReferences(const Shape &S) { const auto &C = dyn_cast(S); // expected-note@-1 {{Assuming 'S' is not a 'Circle'}} // expected-note@-2 {{Dereference of null pointer}} // expected-warning@-3 {{Dereference of null pointer}} } void evalNonNullParamNonNullReturnReference(const Shape &S) { // Unmodeled cast from reference to pointer. const auto *C = dyn_cast_or_null(S); // expected-note@-1 {{'C' initialized here}} if (!dyn_cast_or_null(C)) { // expected-note@-1 {{'C' is a 'Circle'}} // expected-note@-2 {{Taking false branch}} return; } if (dyn_cast_or_null(C)) { // expected-note@-1 {{Assuming 'C' is not a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } if (isa(C)) { // expected-note@-1 {{'C' is not a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } if (isa(C)) { // expected-note@-1 {{'C' is a 'Circle'}} // expected-note@-2 {{Taking true branch}} (void)(1 / !C); // expected-note@-1 {{'C' is non-null}} // expected-note@-2 {{Division by zero}} // expected-warning@-3 {{Division by zero}} } } void evalNonNullParamNonNullReturn(const Shape *S) { const auto *C = cast(S); // expected-note@-1 {{'S' is a 'Circle'}} // expected-note@-2 {{'C' initialized here}} if (!isa(C)) { // expected-note@-1 {{Assuming 'C' is a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } if (!isa(C)) { // expected-note@-1 {{'C' is a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } (void)(1 / !C); // expected-note@-1 {{'C' is non-null}} // expected-note@-2 {{Division by zero}} // expected-warning@-3 {{Division by zero}} } void evalNonNullParamNullReturn(const Shape *S) { const auto *C = dyn_cast_or_null(S); // expected-note@-1 {{Assuming 'S' is not a 'Circle'}} if (const auto *T = dyn_cast_or_null(S)) { // expected-note@-1 {{Assuming 'S' is a 'Triangle'}} // expected-note@-2 {{'T' initialized here}} // expected-note@-3 {{'T' is non-null}} // expected-note@-4 {{Taking true branch}} (void)(1 / !T); // expected-note@-1 {{'T' is non-null}} // expected-note@-2 {{Division by zero}} // expected-warning@-3 {{Division by zero}} } } void evalNullParamNullReturn(const Shape *S) { const auto *C = dyn_cast_or_null(S); // expected-note@-1 {{Assuming null pointer is passed into cast}} // expected-note@-2 {{'C' initialized to a null pointer value}} (void)(1 / (bool)C); // expected-note@-1 {{Division by zero}} // expected-warning@-2 {{Division by zero}} } void evalZeroParamNonNullReturnPointer(const Shape *S) { const auto *C = S->castAs(); // expected-note@-1 {{'S' is a 'Circle'}} // expected-note@-2 {{'C' initialized here}} (void)(1 / !C); // expected-note@-1 {{'C' is non-null}} // expected-note@-2 {{Division by zero}} // expected-warning@-3 {{Division by zero}} } void evalZeroParamNonNullReturn(const Shape &S) { const auto *C = S.castAs(); // expected-note@-1 {{'C' initialized here}} (void)(1 / !C); // expected-note@-1 {{'C' is non-null}} // expected-note@-2 {{Division by zero}} // expected-warning@-3 {{Division by zero}} } void evalZeroParamNullReturn(const Shape *S) { const auto &C = S->getAs(); // expected-note@-1 {{Assuming 'S' is not a 'Circle'}} // expected-note@-2 {{Storing null pointer value}} // expected-note@-3 {{'C' initialized here}} if (!dyn_cast_or_null(S)) { // expected-note@-1 {{Assuming 'S' is a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } if (!dyn_cast_or_null(S)) { // expected-note@-1 {{'S' is a 'Triangle'}} // expected-note@-2 {{Taking false branch}} return; } (void)(1 / (bool)C); // expected-note@-1 {{Division by zero}} // expected-warning@-2 {{Division by zero}} }