infer_clone/infer/tests/codetoanalyze/cpp/pulse/use_after_delete.cpp

/*
 * Copyright (c) 2018-present, Facebook, Inc.
 *
 * This source code is licensed under the MIT license found in the
 * LICENSE file in the root directory of this source tree.
 */

#include <memory>
#include <string>
#include <vector>

struct Simple {
  int f;
};

void deref_deleted_bad() {
  auto s = new Simple{1};
  delete s;
  Simple tmp = *s;
}

Simple* return_deleted_bad() {
  auto s = new Simple{1};
  delete s;
  return s;
}

Simple* reassign_deleted_ok() {
  auto s = new Simple{1};
  delete s;
  s = new Simple{2};
  return s;
}

void reassign_field_of_deleted_bad() {
  auto s = new Simple{1};
  delete s;
  s->f = 7;
}

void reassign_field_of_reinitialized_ok(Simple* tmp) {
  auto s = new Simple{1};
  delete s;
  s = tmp;
  s->f = 7;
}

void double_delete_bad() {
  auto s = new Simple{1};
  delete s;
  delete s;
}

Simple* FN_delete_in_branch_bad(bool b) {
  auto s = new Simple{1};
  if (b) {
    delete s;
  }
  return s;
}

void delete_in_branch_ok(bool b) {
  auto s = new Simple{1};
  if (b) {
    delete s;
  } else {
    delete s;
  }
}

void use_in_branch_bad(bool b) {
  auto s = new Simple{1};
  delete s;
  if (b) {
    auto tmp = *s;
  }
}

void FN_delete_in_loop_bad() {
  auto s = new Simple{1};
  for (int i = 0; i < 10; i++) {
    delete s;
  }
}

void delete_in_loop_ok() {
  for (int i = 0; i < 10; i++) {
    auto s = new Simple{1};
    delete s;
  }
}

void delete_ref_in_loop_ok(int j, std::vector<std::string> v) {
  for (int i = 0; i < 10; i++) {
    auto s = &v[i];
    delete s;
  }
}

void use_in_loop_bad() {
  auto s = new Simple{1};
  delete s;
  for (int i = 0; i < 10; i++) {
    s->f = i;
  }
}

Simple* gated_delete_abort_ok(bool b) {
  auto s = new Simple{1};
  if (b) {
    delete s;
    std::abort();
  }
  return s;
}

Simple* gated_exit_abort_ok(bool b) {
  auto s = new Simple{1};
  if (b) {
    delete s;
    exit(1);
  }
  return s;
}

Simple* gated_delete_throw_ok(bool b) {
  auto s = new Simple{1};
  if (b) {
    delete s;
    throw 5;
  }
  return s;
}