blob: 7eb55ab1e1253fe94037e7a995d59182f5589ee8 [file] [log] [blame]
// RUN: %clang_cc1 -analyze -analyzer-checker=core,debug.ExprInspection -verify -analyzer-constraints=range %s
void clang_analyzer_eval(int);
#define UINT_MAX (~0U)
#define INT_MAX (UINT_MAX & (UINT_MAX >> 1))
#define INT_MIN (-INT_MAX - 1)
// Each of these adjusted ranges has an adjustment small enough to split the
// solution range across an overflow boundary (Min for <, Max for >).
// This corresponds to one set of branches in RangeConstraintManager.
void smallAdjustmentGT (unsigned a) {
if (a+2 > 1)
clang_analyzer_eval(a < UINT_MAX-1); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a == UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
}
void smallAdjustmentGE (unsigned a) {
if (a+2 >= 1)
clang_analyzer_eval(a < UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a == UINT_MAX-1); // expected-warning{{TRUE}}
}
void smallAdjustmentLT (unsigned a) {
if (a+1 < 2)
clang_analyzer_eval(a == 0 || a == UINT_MAX); // expected-warning{{TRUE}}
}
void smallAdjustmentLE (unsigned a) {
if (a+1 <= 2)
clang_analyzer_eval(a == 0 || a == 1 || a == UINT_MAX); // expected-warning{{TRUE}}
}
// Each of these adjusted ranges has an adjustment large enough to push the
// comparison value over an overflow boundary (Min for <, Max for >).
// This corresponds to one set of branches in RangeConstraintManager.
void largeAdjustmentGT (unsigned a) {
if (a-2 > UINT_MAX-1)
clang_analyzer_eval(a == 1); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a != 1); // expected-warning{{TRUE}}
}
void largeAdjustmentGE (unsigned a) {
if (a-2 >= UINT_MAX-1)
clang_analyzer_eval(a == 1 || a == 0); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a > 1); // expected-warning{{TRUE}}
}
void largeAdjustmentLT (unsigned a) {
if (a+2 < 1)
clang_analyzer_eval(a == UINT_MAX-1); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a != UINT_MAX-1); // expected-warning{{TRUE}}
}
void largeAdjustmentLE (unsigned a) {
if (a+2 <= 1)
clang_analyzer_eval(a == UINT_MAX-1 || a == UINT_MAX); // expected-warning{{TRUE}}
else
clang_analyzer_eval(a < UINT_MAX-1); // expected-warning{{TRUE}}
}
// Test the nine cases in RangeConstraintManager's pinning logic.
// For out-of-range tautologies, it may be the negation that actually
// triggers the case in question.
void mixedComparisons1(signed char a) {
// Case 1: The range is entirely below the symbol's range.
int min = INT_MIN;
clang_analyzer_eval((a - 2) >= (min + 5LL)); // expected-warning{{TRUE}}
clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
void mixedComparisons2(signed char a) {
// Case 2: Only the lower end of the range is outside.
clang_analyzer_eval((a - 5) < (-0x81LL)); // expected-warning{{UNKNOWN}}
if ((a - 5) < (-0x81LL)) {
clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
}
void mixedComparisons3(signed char a) {
// Case 3: The entire symbol range is covered.
clang_analyzer_eval((a - 0x200) < -0x100LL); // expected-warning{{TRUE}}
clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
void mixedComparisons4(signed char a) {
// Case 4: The range wraps around, but the lower wrap is out-of-range.
clang_analyzer_eval((a - 5) > 0LL); // expected-warning{{UNKNOWN}}
if ((a - 5) > 0LL) {
clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
}
}
void mixedComparisons5(signed char a) {
// Case 5: The range is inside and may or may not wrap.
clang_analyzer_eval((a + 5) == 0LL); // expected-warning{{UNKNOWN}}
if ((a + 5) == 0LL) {
clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
} else {
clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
}
void mixedComparisons6(signed char a) {
// Case 6: Only the upper end of the range is outside.
clang_analyzer_eval((a + 5) > 0x81LL); // expected-warning{{UNKNOWN}}
if ((a + 5) > 0x81LL) {
clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{FALSE}}
}
}
void mixedComparisons7(signed char a) {
// Case 7: The range wraps around but is entirely outside the symbol's range.
int min = INT_MIN;
clang_analyzer_eval((a + 2) >= (min + 5LL)); // expected-warning{{TRUE}}
clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
void mixedComparisons8(signed char a) {
// Case 8: The range wraps, but the upper wrap is out of range.
clang_analyzer_eval((a + 5) < 0LL); // expected-warning{{UNKNOWN}}
if ((a + 5) < 0LL) {
clang_analyzer_eval(a == 0); // expected-warning{{FALSE}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{FALSE}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}
}
void mixedComparisons9(signed char a) {
// Case 9: The range is entirely above the symbol's range.
int max = INT_MAX;
clang_analyzer_eval((a + 2) <= (max - 5LL)); // expected-warning{{TRUE}}
clang_analyzer_eval(a == 0); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == 0x7F); // expected-warning{{UNKNOWN}}
clang_analyzer_eval(a == -0x80); // expected-warning{{UNKNOWN}}
}