1 // RUN: %clang_cc1 -analyze -analyzer-checker=core -analyzer-store=region -fblocks -verify %s 2 3 int* f1() { 4 int x = 0; 5 return &x; // expected-warning{{Address of stack memory associated with local variable 'x' returned}} expected-warning{{address of stack memory associated with local variable 'x' returned}} 6 } 7 8 int* f2(int y) { 9 return &y; // expected-warning{{Address of stack memory associated with local variable 'y' returned}} expected-warning{{address of stack memory associated with local variable 'y' returned}} 10 } 11 12 int* f3(int x, int *y) { 13 int w = 0; 14 15 if (x) 16 y = &w; 17 18 return y; // expected-warning{{Address of stack memory associated with local variable 'w' returned to caller}} 19 } 20 21 void* compound_literal(int x, int y) { 22 if (x) 23 return &(unsigned short){((unsigned short)0x22EF)}; // expected-warning{{Address of stack memory}} 24 25 int* array[] = {}; 26 struct s { int z; double y; int w; }; 27 28 if (y) 29 return &((struct s){ 2, 0.4, 5 * 8 }); // expected-warning{{Address of stack memory}} 30 31 32 void* p = &((struct s){ 42, 0.4, x ? 42 : 0 }); 33 return p; // expected-warning{{Address of stack memory}} 34 } 35 36 void* alloca_test() { 37 void* p = __builtin_alloca(10); 38 return p; // expected-warning{{Address of stack memory}} 39 } 40 41 int array_test(int x[2]) { 42 return x[0]; // no-warning 43 } 44 45 struct baz { 46 int x; 47 int y[2]; 48 }; 49 50 int struct_test(struct baz byVal, int flag) { 51 if (flag) 52 return byVal.x; // no-warning 53 else { 54 return byVal.y[0]; // no-warning 55 } 56 } 57 58 typedef int (^ComparatorBlock)(int a, int b); 59 ComparatorBlock test_return_block(void) { 60 // This block is a global since it has no captures. 61 ComparatorBlock b = ^int(int a, int b){ return a > b; }; 62 return b; // no-warning 63 } 64 65 ComparatorBlock test_return_block_with_capture(int x) { 66 // This block is stack allocated because it has captures. 67 ComparatorBlock b = ^int(int a, int b){ return a > b + x; }; 68 return b; // expected-warning{{Address of stack-allocated block}} 69 } 70 71 ComparatorBlock test_return_block_neg_aux(void); 72 ComparatorBlock test_return_block_neg(void) { 73 ComparatorBlock b = test_return_block_neg_aux(); 74 return b; // no-warning 75 } 76 77 // <rdar://problem/7523821> 78 int *rdar_7523821_f2() { 79 int a[3]; 80 return a; // expected-warning 2 {{ddress of stack memory associated with local variable 'a' returned}} 81 }; 82 83 // Handle blocks that have no captures or are otherwise declared 'static'. 84 // <rdar://problem/10348049> 85 typedef int (^RDar10348049)(int value); 86 RDar10348049 test_rdar10348049(void) { 87 static RDar10348049 b = ^int(int x) { 88 return x + 2; 89 }; 90 return b; // no-warning 91 } 92 93 void testRegister(register const char *reg) { 94 if (reg) (void)reg[0]; 95 } 96 void callTestRegister() { 97 char buf[20]; 98 testRegister(buf); // no-warning 99 } 100