[analyzer] add more buffer overflow tests to show we handle sizeof(VLA) in obstruse ways...

llvm-svn: 137007

1 files changed, 18 insertions, 0 deletions

diff --git a/clang/test/Analysis/outofbound.c b/clang/test/Analysis/outofbound.c
index 665195565d3..f5a24c90683 100644
--- a/clang/test/Analysis/outofbound.c
+++ b/clang/test/Analysis/outofbound.c
@@ -72,6 +72,24 @@ void sizeof_vla(int a) {
   }
 }
 
+void sizeof_vla_2(int a) {
+  if (a == 5) {
+    char x[a];
+    int y[sizeof(x) / sizeof(char)];
+    y[4] = 4; // no-warning
+    y[5] = 5; // expected-warning{{out-of-bound}}
+  }
+}
+
+void sizeof_vla_3(int a) {
+  if (a == 5) {
+    char x[a];
+    int y[sizeof(*&*&*&x)];
+    y[4] = 4; // no-warning
+    y[5] = 5; // expected-warning{{out-of-bound}}
+  }
+}
+
 void alloca_region(int a) {
   if (a == 5) {
     char *x = __builtin_alloca(a);