// RUN: %clang_cc1 -triple x86_64-apple-darwin10 -analyze -analyzer-checker=core,unix.API,osx.API %s -analyzer-store=region -analyzer-output=plist -analyzer-ipa=inlining -analyzer-eagerly-assume -analyzer-config faux-bodies=true -fblocks -verify -o %t.plist // RUN: FileCheck --input-file=%t.plist %s struct _opaque_pthread_once_t { long __sig; char __opaque[8]; }; typedef struct _opaque_pthread_once_t __darwin_pthread_once_t; typedef __darwin_pthread_once_t pthread_once_t; int pthread_once(pthread_once_t *, void (*)(void)); typedef long unsigned int __darwin_size_t; typedef __darwin_size_t size_t; void *calloc(size_t, size_t); void *malloc(size_t); void *realloc(void *, size_t); void *reallocf(void *, size_t); void *alloca(size_t); void *valloc(size_t); typedef union { struct _os_object_s *_os_obj; struct dispatch_object_s *_do; struct dispatch_continuation_s *_dc; struct dispatch_queue_s *_dq; struct dispatch_queue_attr_s *_dqa; struct dispatch_group_s *_dg; struct dispatch_source_s *_ds; struct dispatch_source_attr_s *_dsa; struct dispatch_semaphore_s *_dsema; struct dispatch_data_s *_ddata; struct dispatch_io_s *_dchannel; struct dispatch_operation_s *_doperation; struct dispatch_disk_s *_ddisk; } dispatch_object_t __attribute__((__transparent_union__)); typedef void (^dispatch_block_t)(void); typedef long dispatch_once_t; typedef struct dispatch_queue_s *dispatch_queue_t; void dispatch_once(dispatch_once_t *predicate, dispatch_block_t block); void dispatch_sync(dispatch_queue_t queue, dispatch_block_t block); #ifndef O_CREAT #define O_CREAT 0x0200 #define O_RDONLY 0x0000 #endif int open(const char *, int, ...); int close(int fildes); void test_open(const char *path) { int fd; fd = open(path, O_RDONLY); // no-warning if (!fd) close(fd); fd = open(path, O_CREAT); // expected-warning{{Call to 'open' requires a third argument when the 'O_CREAT' flag is set}} if (!fd) close(fd); } void test_dispatch_once() { dispatch_once_t pred = 0; do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^() {})); } while (0); // expected-warning{{Call to 'dispatch_once' uses the local variable 'pred' for the predicate value}} } void test_dispatch_once_neg() { static dispatch_once_t pred = 0; do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^() {})); } while (0); // no-warning } void test_pthread_once_aux(); void test_pthread_once() { pthread_once_t pred = {0x30B1BCBA, {0}}; pthread_once(&pred, test_pthread_once_aux); // expected-warning{{Call to 'pthread_once' uses the local variable 'pred' for the "control" value}} } void test_pthread_once_neg() { static pthread_once_t pred = {0x30B1BCBA, {0}}; pthread_once(&pred, test_pthread_once_aux); // no-warning } // PR 2899 - warn of zero-sized allocations to malloc(). void pr2899() { char* foo = malloc(0); // expected-warning{{Call to 'malloc' has an allocation size of 0 bytes}} for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void pr2899_nowarn(size_t size) { char* foo = malloc(size); // no-warning for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_calloc(void) { char *foo = calloc(0, 42); // expected-warning{{Call to 'calloc' has an allocation size of 0 bytes}} for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_calloc2(void) { char *foo = calloc(42, 0); // expected-warning{{Call to 'calloc' has an allocation size of 0 bytes}} for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_calloc_nowarn(size_t nmemb, size_t size) { char *foo = calloc(nmemb, size); // no-warning for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_realloc(char *ptr) { char *foo = realloc(ptr, 0); // expected-warning{{Call to 'realloc' has an allocation size of 0 bytes}} for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_reallocf(char *ptr) { char *foo = reallocf(ptr, 0); // expected-warning{{Call to 'reallocf' has an allocation size of 0 bytes}} for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_realloc_nowarn(char *ptr, size_t size) { char *foo = realloc(ptr, size); // no-warning for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_reallocf_nowarn(char *ptr, size_t size) { char *foo = reallocf(ptr, size); // no-warning for (unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_alloca() { char *foo = alloca(0); // expected-warning{{Call to 'alloca' has an allocation size of 0 bytes}} for(unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_alloca_nowarn(size_t sz) { char *foo = alloca(sz); // no-warning for(unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_builtin_alloca() { char *foo2 = __builtin_alloca(0); // expected-warning{{Call to 'alloca' has an allocation size of 0 bytes}} for(unsigned i = 0; i < 100; i++) { foo2[i] = 0; } } void test_builtin_alloca_nowarn(size_t sz) { char *foo2 = __builtin_alloca(sz); // no-warning for(unsigned i = 0; i < 100; i++) { foo2[i] = 0; } } void test_valloc() { char *foo = valloc(0); // expected-warning{{Call to 'valloc' has an allocation size of 0 bytes}} for(unsigned i = 0; i < 100; i++) { foo[i] = 0; } } void test_valloc_nowarn(size_t sz) { char *foo = valloc(sz); // no-warning for(unsigned i = 0; i < 100; i++) { foo[i] = 0; } } // Test dispatch_once being a macro that wraps a call to _dispatch_once, which in turn // calls the real dispatch_once. static inline void _dispatch_once(dispatch_once_t *predicate, dispatch_block_t block) { dispatch_once(predicate, block); } #define dispatch_once _dispatch_once void test_dispatch_once_in_macro() { dispatch_once_t pred = 0; dispatch_once(&pred, ^(){}); // expected-warning {{Call to 'dispatch_once' uses the local variable 'pred' for the predicate value}} } // Test inlining of dispatch_sync. void test_dispatch_sync(dispatch_queue_t queue, int *q) { int *p = 0; dispatch_sync(queue, ^(void){ if (q) { *p = 1; // expected-warning {{null pointer}} } }); } // Test inlining if dispatch_once. void test_inline_dispatch_once() { static dispatch_once_t pred; int *p = 0; dispatch_once(&pred, ^(void) { *p = 1; // expected-warning {{null}} }); }