1a393e68bSGeorge Karpenkov // RUN: %clang_analyze_cc1 -w -x c++ -analyzer-checker=core -analyzer-output=text -verify %s 22064e822SArtem Dergachev 32064e822SArtem Dergachev namespace pr34731 { 42064e822SArtem Dergachev int b; 52064e822SArtem Dergachev class c { 62064e822SArtem Dergachev class B { 72064e822SArtem Dergachev public: 82064e822SArtem Dergachev double ***d; 92064e822SArtem Dergachev B(); 102064e822SArtem Dergachev }; 112064e822SArtem Dergachev void e(double **, int); 122064e822SArtem Dergachev void f(B &, int &); 132064e822SArtem Dergachev }; 142064e822SArtem Dergachev 152064e822SArtem Dergachev // Properly track the null pointer in the array field back to the default 162064e822SArtem Dergachev // constructor of 'h'. f(B & g,int & i)172064e822SArtem Dergachevvoid c::f(B &g, int &i) { 182064e822SArtem Dergachev e(g.d[9], i); // expected-warning{{Array access (via field 'd') results in a null pointer dereference}} 192064e822SArtem Dergachev // expected-note@-1{{Array access (via field 'd') results in a null pointer dereference}} 202064e822SArtem Dergachev B h, a; // expected-note{{Value assigned to 'h.d'}} 212064e822SArtem Dergachev a.d == __null; // expected-note{{Assuming the condition is true}} 22*d1f0ec3fSCsaba Dabis a.d != h.d; // expected-note{{Assuming 'a.d' is equal to 'h.d'}} 232064e822SArtem Dergachev f(h, b); // expected-note{{Calling 'c::f'}} 242064e822SArtem Dergachev } 252064e822SArtem Dergachev } 26