1*67e74705SXin Li // RUN: %clang_cc1 -verify -analyze -analyzer-checker=core,alpha.security.ArrayBound -analyzer-store=region %s 2*67e74705SXin Li 3*67e74705SXin Li struct tea_cheese { unsigned magic; }; 4*67e74705SXin Li typedef struct tea_cheese kernel_tea_cheese_t; 5*67e74705SXin Li extern kernel_tea_cheese_t _wonky_gesticulate_cheese; 6*67e74705SXin Li 7*67e74705SXin Li // This test case exercises the ElementRegion::getRValueType() logic. 8*67e74705SXin Li test1(void)9*67e74705SXin Livoid test1( void ) { 10*67e74705SXin Li kernel_tea_cheese_t *wonky = &_wonky_gesticulate_cheese; 11*67e74705SXin Li struct load_wine *cmd = (void*) &wonky[1]; 12*67e74705SXin Li cmd = cmd; 13*67e74705SXin Li char *p = (void*) &wonky[1]; 14*67e74705SXin Li kernel_tea_cheese_t *q = &wonky[1]; 15*67e74705SXin Li // This test case tests both the RegionStore logic (doesn't crash) and 16*67e74705SXin Li // the out-of-bounds checking. We don't expect the warning for now since 17*67e74705SXin Li // out-of-bound checking is temporarily disabled. 18*67e74705SXin Li kernel_tea_cheese_t r = *q; // expected-warning{{Access out-of-bound array element (buffer overflow)}} 19*67e74705SXin Li } 20*67e74705SXin Li test1_b(void)21*67e74705SXin Livoid test1_b( void ) { 22*67e74705SXin Li kernel_tea_cheese_t *wonky = &_wonky_gesticulate_cheese; 23*67e74705SXin Li struct load_wine *cmd = (void*) &wonky[1]; 24*67e74705SXin Li cmd = cmd; 25*67e74705SXin Li char *p = (void*) &wonky[1]; 26*67e74705SXin Li *p = 1; // expected-warning{{Access out-of-bound array element (buffer overflow)}} 27*67e74705SXin Li } 28