|
|
@ -13,3 +13,45 @@ int const_local_no_abduce(int* p) {
|
|
|
|
return p ? *p : 0;
|
|
|
|
return p ? *p : 0;
|
|
|
|
// We shouldn't get a stack address escape warning here
|
|
|
|
// We shouldn't get a stack address escape warning here
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void set_ptr(int* ptr, int val) { *ptr = val; }
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
int set_ptr_local_array() {
|
|
|
|
|
|
|
|
int buf[2];
|
|
|
|
|
|
|
|
set_ptr(buf, 1);
|
|
|
|
|
|
|
|
return buf[0];
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void set_ptr_local_array_return_true_ok() {
|
|
|
|
|
|
|
|
int* p = 0;
|
|
|
|
|
|
|
|
if (!set_ptr_local_array())
|
|
|
|
|
|
|
|
// not reachable if the analysis of set_ptr_local_array is correct
|
|
|
|
|
|
|
|
*p = 42;
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
int set_ptr_param_array(int buf[]) {
|
|
|
|
|
|
|
|
set_ptr(buf, 1);
|
|
|
|
|
|
|
|
return buf[0];
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void set_ptr_param_array_return_true_ok() {
|
|
|
|
|
|
|
|
int buf[2];
|
|
|
|
|
|
|
|
int* p = 0;
|
|
|
|
|
|
|
|
if (!set_ptr_param_array(buf))
|
|
|
|
|
|
|
|
// not reachable if the analysis of set_ptr_local_array is correct
|
|
|
|
|
|
|
|
*p = 42;
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void set_ptr_param_array_get_ptr_ok() {
|
|
|
|
|
|
|
|
int x = 0;
|
|
|
|
|
|
|
|
int* p = 0;
|
|
|
|
|
|
|
|
if (!set_ptr_param_array(&x))
|
|
|
|
|
|
|
|
// not reachable if the analysis of set_ptr_local_array is correct
|
|
|
|
|
|
|
|
*p = 42;
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void FN_set_ptr_param_array_get_null_bad() {
|
|
|
|
|
|
|
|
// A null pointer dereference is expected here, but currently we get a
|
|
|
|
|
|
|
|
// PRECONDITION_NOT_MET
|
|
|
|
|
|
|
|
set_ptr_param_array(0);
|
|
|
|
|
|
|
|
}
|
|
|
|