1 // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s
2 // RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s
3
4 extern int coin();
5
foo()6 int foo() {
7 int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
8 while (coin()) { // expected-note{{Loop condition is true}}
9 if (coin()) // expected-note {{Taking true branch}}
10 // expected-note@-1 {{Assuming the condition is true}}
11 return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
12 // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
13 }
14 return 0;
15 }
16
bar()17 void bar() {
18 while(coin())
19 if (coin())
20 foo();
21 }
22
foo2()23 int foo2() {
24 int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
25 while (coin()) { // expected-note{{Loop condition is true}}
26 if (coin()) // expected-note {{Taking false branch}}
27 // expected-note@-1 {{Assuming the condition is false}}
28 return false;
29 else
30 return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
31 // expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
32 }
33 return 0;
34 }
35
bar2()36 void bar2() {
37 while(coin()) // expected-note{{Loop condition is true}}
38 if (coin()) // expected-note {{Assuming the condition is false}}
39 // expected-note@-1 {{Taking false branch}}
40 return;
41 else
42 foo(); // expected-note{{Calling 'foo'}}
43 }
44