1 // RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-store=region -verify %s 2 3 // FIXME: Only the stack-address checking in Sema catches this right now, and 4 // the stack analyzer doesn't handle the ImplicitCastExpr (lvalue). 5 const int& g() { 6 int s; 7 return s; // expected-warning{{Address of stack memory associated with local variable 's' returned}} expected-warning{{reference to stack memory associated with local variable 's' returned}} 8 } 9 10 const int& g2() { 11 int s1; 12 int &s2 = s1; // expected-note {{binding reference variable 's2' here}} 13 return s2; // expected-warning{{Address of stack memory associated with local variable 's1' returned}} expected-warning {{reference to stack memory associated with local variable 's1' returned}} 14 } 15 16 const int& g3() { 17 int s1; 18 int &s2 = s1; // expected-note {{binding reference variable 's2' here}} 19 int &s3 = s2; // expected-note {{binding reference variable 's3' here}} 20 return s3; // expected-warning{{Address of stack memory associated with local variable 's1' returned}} expected-warning {{reference to stack memory associated with local variable 's1' returned}} 21 } 22 23 int get_value(); 24 25 const int &get_reference1() { return get_value(); } // expected-warning{{Address of stack memory associated with temporary object of type 'int' returned}} expected-warning {{returning reference to local temporary}} 26 27 const int &get_reference2() { 28 const int &x = get_value(); // expected-note {{binding reference variable 'x' here}} 29 return x; // expected-warning{{Address of stack memory associated with temporary object of type 'int' returned}} expected-warning {{returning reference to local temporary}} 30 } 31 32 const int &get_reference3() { 33 const int &x1 = get_value(); // expected-note {{binding reference variable 'x1' here}} 34 const int &x2 = x1; // expected-note {{binding reference variable 'x2' here}} 35 return x2; // expected-warning{{Address of stack memory associated with temporary object of type 'int' returned}} expected-warning {{returning reference to local temporary}} 36 } 37 38 int global_var; 39 int *f1() { 40 int &y = global_var; 41 return &y; 42 } 43 44 int *f2() { 45 int x1; 46 int &x2 = x1; // expected-note {{binding reference variable 'x2' here}} 47 return &x2; // expected-warning{{Address of stack memory associated with local variable 'x1' returned}} expected-warning {{address of stack memory associated with local variable 'x1' returned}} 48 } 49 50 int *f3() { 51 int x1; 52 int *const &x2 = &x1; // expected-note {{binding reference variable 'x2' here}} 53 return x2; // expected-warning {{address of stack memory associated with local variable 'x1' returned}} expected-warning {{Address of stack memory associated with local variable 'x1' returned to caller}} 54 } 55 56 const int *f4() { 57 const int &x1 = get_value(); // expected-note {{binding reference variable 'x1' here}} 58 const int &x2 = x1; // expected-note {{binding reference variable 'x2' here}} 59 return &x2; // expected-warning{{Address of stack memory associated with temporary object of type 'int' returned}} expected-warning {{returning address of local temporary}} 60 } 61 62 struct S { 63 int x; 64 }; 65 66 int *mf() { 67 S s1; 68 S &s2 = s1; // expected-note {{binding reference variable 's2' here}} 69 int &x = s2.x; // expected-note {{binding reference variable 'x' here}} 70 return &x; // expected-warning{{Address of stack memory associated with local variable 's1' returned}} expected-warning {{address of stack memory associated with local variable 's1' returned}} 71 } 72 73 void *lf() { 74 label: 75 void *const &x = &&label; // expected-note {{binding reference variable 'x' here}} 76 return x; // expected-warning {{returning address of label, which is local}} 77 } 78 79 template <typename T> 80 struct TS { 81 int *get(); 82 int *m() { 83 int *&x = get(); 84 return x; 85 } 86 }; 87 88 // rdar://11345441 89 int* f5() { 90 int& i = i; // expected-warning {{Assigned value is garbage or undefined}} expected-note {{binding reference variable 'i' here}} expected-warning{{reference 'i' is not yet bound to a value when used within its own initialization}} 91 return &i; // expected-warning {{address of stack memory associated with local variable 'i' returned}} 92 } 93 94 void *radar13226577() { 95 void *p = &p; 96 return p; // expected-warning {{stack memory associated with local variable 'p' returned to caller}} 97 } 98 99
