1*752e1037SKristóf Umann // RUN: %clang_analyze_cc1 -verify %s \ 2*752e1037SKristóf Umann // RUN: -analyzer-checker=core,alpha.unix.cstring \ 3*752e1037SKristóf Umann // RUN: -analyzer-output=text 4*752e1037SKristóf Umann 5*752e1037SKristóf Umann #include "Inputs/system-header-simulator.h" 6*752e1037SKristóf Umann 7*752e1037SKristóf Umann // Inspired by a report on ffmpeg, libavcodec/tiertexseqv.c, seq_decode_op1(). 8*752e1037SKristóf Umann int coin(); 9*752e1037SKristóf Umann 10*752e1037SKristóf Umann void maybeWrite(const char *src, unsigned size, int *dst) { 11*752e1037SKristóf Umann if (coin()) // expected-note{{Assuming the condition is false}} 12*752e1037SKristóf Umann // expected-note@-1{{Taking false branch}} 13*752e1037SKristóf Umann memcpy(dst, src, size); 14*752e1037SKristóf Umann } // expected-note{{Returning without writing to '*dst'}} 15*752e1037SKristóf Umann 16*752e1037SKristóf Umann void returning_without_writing_to_memcpy(const char *src, unsigned size) { 17*752e1037SKristóf Umann int block[8 * 8]; // expected-note{{'block' initialized here}} 18*752e1037SKristóf Umann // expected-note@+1{{Calling 'maybeWrite'}} 19*752e1037SKristóf Umann maybeWrite(src, size, block); // expected-note{{Returning from 'maybeWrite'}} 20*752e1037SKristóf Umann 21*752e1037SKristóf Umann int buf[8 * 8]; 22*752e1037SKristóf Umann memcpy(buf, &block[0], 8); // expected-warning{{The first element of the 2nd argument is undefined [alpha.unix.cstring.UninitializedRead]}} 23*752e1037SKristóf Umann // expected-note@-1{{The first element of the 2nd argument is undefined}} 24*752e1037SKristóf Umann // expected-note@-2{{Other elements might also be undefined}} 25*752e1037SKristóf Umann } 26