gcc/testsuite/gcc.dg/analyzer/uninit-4.c

   1 /* Example of interprocedural detection of an uninitialized field
   2    in a heap-allocated struct.  */
   3
   4 #include <stdlib.h>
   5 #include "analyzer-decls.h"
   6
   7 struct foo
   8 {
   9   int i;
  10   int j;
  11   int k;
  12 };
  13
  14 struct foo *__attribute__((noinline))
  15 alloc_foo (int a, int b)
  16 {
  17   struct foo *p = malloc (sizeof (struct foo)); /* { dg-message "region created on heap here" } */
  18   if (!p)
  19     return NULL;
  20   p->i = a;
  21   p->k = b;
  22   return p;
  23 }
  24
  25 void test_access_inited_fields (int x, int y, int z)
  26 {
  27   struct foo *p = alloc_foo (x, z);
  28   if (!p)
  29     return;
  30
  31   __analyzer_eval (p->i == x); /* { dg-warning "TRUE" } */
  32
  33   __analyzer_eval (p->k == z); /* { dg-warning "TRUE" } */
  34
  35   free (p);
  36 }
  37
  38 void test_stop_after_accessing_uninit (int x, int y, int z)
  39 {
  40   struct foo *p = alloc_foo (x, z);
  41   if (!p)
  42     return;
  43
  44   __analyzer_eval (p->i == x); /* { dg-warning "TRUE" } */
  45
  46   __analyzer_eval (p->j == y); /* { dg-warning "use of uninitialized value '\\*p\\.j'" } */
  47
  48   __analyzer_dump_path (); /* { dg-bogus "path" } */
  49 }