]>
Commit | Line | Data |
---|---|---|
885824d3 | 1 | # include "bool.h" |
2 | ||
3 | void g(int *y); | |
4 | ||
5 | /*@truenull@*/ bool ptrpred (/*@out@*/ /*@null@*/ int *x) | |
6 | { | |
7 | return (x == NULL); | |
8 | } | |
9 | ||
10 | /*@only@*/ int *f(/*@null@*/ int *x1, /*@null@*/ int *x2, | |
11 | /*@null@*/ int *x3, /*@null@*/ int *x4) | |
12 | { | |
13 | bool test; | |
14 | ||
15 | test = x1 && (*x1 == 3); /* okay */ | |
16 | test = !x2 && (*x2 == 3); /* 1. Possible dereference of null pointer: *x2 */ | |
17 | test = x3 || (*x3 == 3); /* 2. Possible dereference of null pointer: *x3 */ | |
18 | test = !x4 || (*x4 == 3); /* okay */ | |
19 | ||
20 | test = ptrpred(x1) && (*x1 == 3); /* 3. Possible dereference of null pointer: *x1 */ | |
21 | test = !ptrpred(x1) && (*x1 == 3); /* okay */ | |
22 | ||
23 | if (x4 && (*x4 == 3)) | |
24 | { | |
25 | *x4 = 6; /* okay */ | |
26 | } | |
27 | ||
28 | if (!x4 || (*x4 == 6)) | |
29 | { | |
30 | *x4 = 12; /* 4. Possible dereference of null pointer: *x4 */ | |
31 | } | |
32 | ||
33 | if (!x1 || (*x1 == 6)) | |
34 | { | |
35 | return (x3); /* 5, 6. Unqualified storage returned as only: (x3), | |
36 | Possibly null storage returned as non-null: (x3) */ | |
37 | } | |
38 | ||
39 | return (x1); /* 7. Unqualified storage returned as only: (x1) | |
40 | not: null as non-null (because of || semantics) */ | |
41 | } | |
42 | ||
43 |