// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first -analyzer-output=text -verify %s
// RUN: %clang_analyze_cc1 -w -analyzer-checker=core -analyzer-config exploration_strategy=unexplored_first_queue -analyzer-output=text -verify %s
extern int coin();
int foo() {
int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
while (coin()) { // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Taking true branch}}
// expected-note@-1 {{Assuming the condition is true}}
return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
// expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
}
return 0;
}
void bar() {
while(coin())
if (coin())
foo();
}
int foo2() {
int *x = 0; // expected-note {{'x' initialized to a null pointer value}}
while (coin()) { // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Taking false branch}}
// expected-note@-1 {{Assuming the condition is false}}
return false;
else
return *x; // expected-warning{{Dereference of null pointer (loaded from variable 'x')}}
// expected-note@-1{{Dereference of null pointer (loaded from variable 'x')}}
}
return 0;
}
void bar2() {
while(coin()) // expected-note{{Loop condition is true}}
if (coin()) // expected-note {{Assuming the condition is false}}
// expected-note@-1 {{Taking false branch}}
return;
else
foo(); // expected-note{{Calling 'foo'}}
}