|  | // RUN: %clang_analyze_cc1 -analyzer-checker=core,alpha.core,debug.ExprInspection,unix.Malloc,unix.cstring,alpha.unix.cstring,unix.API,osx.API,osx.cocoa.RetainCount -Wno-null-dereference -Wno-tautological-compare -fblocks -verify -analyzer-config eagerly-assume=false %s | 
|  | #define NULL 0 | 
|  | void clang_analyzer_eval(int); | 
|  | void myFunc(void); | 
|  | void myWeakFunc(void) __attribute__((weak_import)); | 
|  |  | 
|  | void testWeakFuncIsNull(void) | 
|  | { | 
|  | clang_analyzer_eval(myFunc == NULL);  // expected-warning{{FALSE}} | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{UNKNOWN}} | 
|  | if (myWeakFunc == NULL) { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{TRUE}} | 
|  | } else { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{FALSE}} | 
|  | } | 
|  | } | 
|  |  | 
|  | void testWeakFuncIsNot(void) | 
|  | { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{UNKNOWN}} | 
|  | if (!myWeakFunc) { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{TRUE}} | 
|  | } else { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{FALSE}} | 
|  | } | 
|  | } | 
|  |  | 
|  | void testWeakFuncIsTrue(void) | 
|  | { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{UNKNOWN}} | 
|  | if (myWeakFunc) { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{FALSE}} | 
|  | } else { | 
|  | clang_analyzer_eval(myWeakFunc == NULL);  // expected-warning{{TRUE}} | 
|  | } | 
|  | } | 
|  |  | 
|  | //===----------------------------------------------------------------------=== | 
|  | // func.c | 
|  | //===----------------------------------------------------------------------=== | 
|  | void f(void) __attribute__((weak_import)); | 
|  | void g(void (*fp)(void)) __attribute__((weak_import)); | 
|  |  | 
|  | void f(void) { | 
|  | void (*p)(void); | 
|  | p = f; | 
|  | p = &f; | 
|  | p(); | 
|  | (*p)(); | 
|  | } | 
|  |  | 
|  | void g(void (*fp)(void)); | 
|  |  | 
|  | void f2(void) { | 
|  | g(f); | 
|  | } | 
|  |  | 
|  | void f3(void (*f)(void), void (*g)(void)) { | 
|  | clang_analyzer_eval(!f); // expected-warning{{UNKNOWN}} | 
|  | f(); | 
|  | clang_analyzer_eval(!f); // expected-warning{{FALSE}} | 
|  |  | 
|  | clang_analyzer_eval(!g); // expected-warning{{UNKNOWN}} | 
|  | (*g)(); | 
|  | clang_analyzer_eval(!g); // expected-warning{{FALSE}} | 
|  | } | 
|  |  | 
|  | //===----------------------------------------------------------------------=== | 
|  | // free.c | 
|  | //===----------------------------------------------------------------------=== | 
|  | void free(void *) __attribute__((weak_import)); | 
|  |  | 
|  | void t10 (void) { | 
|  | free((void*)&t10); | 
|  | // expected-warning@-1{{Argument to 'free()' is the address of the function 't10', which is not memory allocated by 'malloc()'}} | 
|  | // expected-warning@-2{{attempt to call free on non-heap object 't10'}} | 
|  | } | 
|  |  | 
|  | //===----------------------------------------------------------------------=== | 
|  | // string.c : strnlen() | 
|  | //===----------------------------------------------------------------------=== | 
|  | typedef typeof(sizeof(int)) size_t; | 
|  | size_t strlen(const char *s) __attribute__((weak_import)); | 
|  |  | 
|  | size_t strlen_fn(void) { | 
|  | return strlen((char*)&strlen_fn); // expected-warning{{Argument to string length function is the address of the function 'strlen_fn', which is not a null-terminated string}} | 
|  | } | 
|  |  | 
|  | //===----------------------------------------------------------------------=== | 
|  | // unix-fns.c : dispatch_once | 
|  | //===----------------------------------------------------------------------=== | 
|  | typedef void (^dispatch_block_t)(void); | 
|  | typedef long dispatch_once_t; | 
|  | void dispatch_once(dispatch_once_t *predicate, dispatch_block_t block) __attribute__((weak_import)); | 
|  |  | 
|  | void test_dispatch_once(void) { | 
|  | dispatch_once_t pred = 0; | 
|  | do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^(void) {})); } while (0); // expected-warning{{Call to 'dispatch_once' uses the local variable 'pred' for the predicate value}} | 
|  | } | 
|  | void test_dispatch_once_neg(void) { | 
|  | static dispatch_once_t pred = 0; | 
|  | do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^(void) {})); } while (0); // no-warning | 
|  | } | 
|  |  | 
|  | //===----------------------------------------------------------------------=== | 
|  | // retain-release-path-notes.m | 
|  | //===----------------------------------------------------------------------=== | 
|  | typedef struct CFType *CFTypeRef; | 
|  | CFTypeRef CFCreateSomething(void) __attribute__((weak_import)); | 
|  | CFTypeRef CFGetSomething(void) __attribute__((weak_import)); | 
|  |  | 
|  | CFTypeRef CFCopyRuleViolation (void) { | 
|  | CFTypeRef object = CFGetSomething(); | 
|  | return object; // expected-warning{{Object with a +0 retain count returned to caller where a +1 (owning) retain count is expected}} | 
|  | } | 
|  |  | 
|  | CFTypeRef CFGetRuleViolation (void) { | 
|  | CFTypeRef object = CFCreateSomething(); // expected-warning{{Potential leak of an object stored into 'object'}} | 
|  | return object; } |