1 // RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-output=text -verify %s 2 3 struct S { 4 int *x; 5 int y; 6 }; 7 8 S &getSomeReference(); 9 void test(S *p) { 10 S &r = *p; //expected-note {{'r' initialized here}} 11 if (p) return; 12 //expected-note@-1{{Taking false branch}} 13 //expected-note@-2{{Assuming 'p' is null}} 14 r.y = 5; // expected-warning {{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}} 15 // expected-note@-1{{Access to field 'y' results in a dereference of a null pointer (loaded from variable 'r')}} 16 } 17 18 void testRefParam(int *ptr) { 19 int &ref = *ptr; // expected-note {{'ref' initialized here}} 20 if (ptr) 21 // expected-note@-1{{Assuming 'ptr' is null}} 22 // expected-note@-2{{Taking false branch}} 23 return; 24 25 extern void use(int &ref); 26 use(ref); // expected-warning{{Forming reference to null pointer}} 27 // expected-note@-1{{Forming reference to null pointer}} 28 } 29 30 int testRefToNullPtr() { 31 int *p = 0; // expected-note {{'p' initialized to a null pointer value}} 32 int *const &p2 = p; // expected-note{{'p2' initialized here}} 33 int *p3 = p2; // expected-note {{'p3' initialized to a null pointer value}} 34 return *p3; // expected-warning {{Dereference of null pointer}} 35 // expected-note@-1{{Dereference of null pointer}} 36 } 37 38 int testRefToNullPtr2() { 39 int *p = 0; // expected-note {{'p' initialized to a null pointer value}} 40 int *const &p2 = p;// expected-note{{'p2' initialized here}} 41 return *p2; //expected-warning {{Dereference of null pointer}} 42 // expected-note@-1{{Dereference of null pointer}} 43 }
