Bug Summary

File:tools/clang/lib/AST/StmtCXX.cpp
Warning:line 106, column 21
Access to field 'NumParams' results in a dereference of a null pointer (loaded from variable 'Result')

Annotated Source Code

Press '?' to see keyboard shortcuts

clang -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -disable-llvm-verifier -discard-value-names -main-file-name StmtCXX.cpp -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-eagerly-assume -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=cplusplus -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -mrelocation-model pic -pic-level 2 -mthread-model posix -relaxed-aliasing -fmath-errno -masm-verbose -mconstructor-aliases -munwind-tables -fuse-init-array -target-cpu x86-64 -dwarf-column-info -debugger-tuning=gdb -momit-leaf-frame-pointer -ffunction-sections -fdata-sections -resource-dir /usr/lib/llvm-7/lib/clang/7.0.0 -D _DEBUG -D _GNU_SOURCE -D __STDC_CONSTANT_MACROS -D __STDC_FORMAT_MACROS -D __STDC_LIMIT_MACROS -I /build/llvm-toolchain-snapshot-7~svn329677/build-llvm/tools/clang/lib/AST -I /build/llvm-toolchain-snapshot-7~svn329677/tools/clang/lib/AST -I /build/llvm-toolchain-snapshot-7~svn329677/tools/clang/include -I /build/llvm-toolchain-snapshot-7~svn329677/build-llvm/tools/clang/include -I /build/llvm-toolchain-snapshot-7~svn329677/build-llvm/include -I /build/llvm-toolchain-snapshot-7~svn329677/include -U NDEBUG -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/7.3.0/../../../../include/c++/7.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/7.3.0/../../../../include/x86_64-linux-gnu/c++/7.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/7.3.0/../../../../include/x86_64-linux-gnu/c++/7.3.0 -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/7.3.0/../../../../include/c++/7.3.0/backward -internal-isystem /usr/include/clang/7.0.0/include/ -internal-isystem /usr/local/include -internal-isystem /usr/lib/llvm-7/lib/clang/7.0.0/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -O2 -Wno-unused-parameter -Wwrite-strings -Wno-missing-field-initializers -Wno-long-long -Wno-maybe-uninitialized -Wno-comment -std=c++11 -fdeprecated-macro -fdebug-compilation-dir /build/llvm-toolchain-snapshot-7~svn329677/build-llvm/tools/clang/lib/AST -ferror-limit 19 -fmessage-length 0 -fvisibility-inlines-hidden -fobjc-runtime=gcc -fno-common -fdiagnostics-show-option -vectorize-loops -vectorize-slp -analyzer-checker optin.performance.Padding -analyzer-output=html -analyzer-config stable-report-filename=true -o /tmp/scan-build-2018-04-11-031539-24776-1 -x c++ /build/llvm-toolchain-snapshot-7~svn329677/tools/clang/lib/AST/StmtCXX.cpp
1//===--- StmtCXX.cpp - Classes for representing C++ statements ------------===//
2//
3// The LLVM Compiler Infrastructure
4//
5// This file is distributed under the University of Illinois Open Source
6// License. See LICENSE.TXT for details.
7//
8//===----------------------------------------------------------------------===//
9//
10// This file implements the subclesses of Stmt class declared in StmtCXX.h
11//
12//===----------------------------------------------------------------------===//
13
14#include "clang/AST/StmtCXX.h"
15
16#include "clang/AST/ASTContext.h"
17
18using namespace clang;
19
20QualType CXXCatchStmt::getCaughtType() const {
21 if (ExceptionDecl)
22 return ExceptionDecl->getType();
23 return QualType();
24}
25
26CXXTryStmt *CXXTryStmt::Create(const ASTContext &C, SourceLocation tryLoc,
27 Stmt *tryBlock, ArrayRef<Stmt *> handlers) {
28 std::size_t Size = sizeof(CXXTryStmt);
29 Size += ((handlers.size() + 1) * sizeof(Stmt *));
30
31 void *Mem = C.Allocate(Size, alignof(CXXTryStmt));
32 return new (Mem) CXXTryStmt(tryLoc, tryBlock, handlers);
33}
34
35CXXTryStmt *CXXTryStmt::Create(const ASTContext &C, EmptyShell Empty,
36 unsigned numHandlers) {
37 std::size_t Size = sizeof(CXXTryStmt);
38 Size += ((numHandlers + 1) * sizeof(Stmt *));
39
40 void *Mem = C.Allocate(Size, alignof(CXXTryStmt));
41 return new (Mem) CXXTryStmt(Empty, numHandlers);
42}
43
44CXXTryStmt::CXXTryStmt(SourceLocation tryLoc, Stmt *tryBlock,
45 ArrayRef<Stmt *> handlers)
46 : Stmt(CXXTryStmtClass), TryLoc(tryLoc), NumHandlers(handlers.size()) {
47 Stmt **Stmts = reinterpret_cast<Stmt **>(this + 1);
48 Stmts[0] = tryBlock;
49 std::copy(handlers.begin(), handlers.end(), Stmts + 1);
50}
51
52CXXForRangeStmt::CXXForRangeStmt(DeclStmt *Range,
53 DeclStmt *BeginStmt, DeclStmt *EndStmt,
54 Expr *Cond, Expr *Inc, DeclStmt *LoopVar,
55 Stmt *Body, SourceLocation FL,
56 SourceLocation CAL, SourceLocation CL,
57 SourceLocation RPL)
58 : Stmt(CXXForRangeStmtClass), ForLoc(FL), CoawaitLoc(CAL), ColonLoc(CL),
59 RParenLoc(RPL) {
60 SubExprs[RANGE] = Range;
61 SubExprs[BEGINSTMT] = BeginStmt;
62 SubExprs[ENDSTMT] = EndStmt;
63 SubExprs[COND] = Cond;
64 SubExprs[INC] = Inc;
65 SubExprs[LOOPVAR] = LoopVar;
66 SubExprs[BODY] = Body;
67}
68
69Expr *CXXForRangeStmt::getRangeInit() {
70 DeclStmt *RangeStmt = getRangeStmt();
71 VarDecl *RangeDecl = dyn_cast_or_null<VarDecl>(RangeStmt->getSingleDecl());
72 assert(RangeDecl && "for-range should have a single var decl")(static_cast <bool> (RangeDecl && "for-range should have a single var decl"
) ? void (0) : __assert_fail ("RangeDecl && \"for-range should have a single var decl\""
, "/build/llvm-toolchain-snapshot-7~svn329677/tools/clang/lib/AST/StmtCXX.cpp"
, 72, __extension__ __PRETTY_FUNCTION__))
;
73 return RangeDecl->getInit();
74}
75
76const Expr *CXXForRangeStmt::getRangeInit() const {
77 return const_cast<CXXForRangeStmt *>(this)->getRangeInit();
78}
79
80VarDecl *CXXForRangeStmt::getLoopVariable() {
81 Decl *LV = cast<DeclStmt>(getLoopVarStmt())->getSingleDecl();
82 assert(LV && "No loop variable in CXXForRangeStmt")(static_cast <bool> (LV && "No loop variable in CXXForRangeStmt"
) ? void (0) : __assert_fail ("LV && \"No loop variable in CXXForRangeStmt\""
, "/build/llvm-toolchain-snapshot-7~svn329677/tools/clang/lib/AST/StmtCXX.cpp"
, 82, __extension__ __PRETTY_FUNCTION__))
;
83 return cast<VarDecl>(LV);
84}
85
86const VarDecl *CXXForRangeStmt::getLoopVariable() const {
87 return const_cast<CXXForRangeStmt *>(this)->getLoopVariable();
88}
89
90CoroutineBodyStmt *CoroutineBodyStmt::Create(
91 const ASTContext &C, CoroutineBodyStmt::CtorArgs const &Args) {
92 std::size_t Size = totalSizeToAlloc<Stmt *>(
93 CoroutineBodyStmt::FirstParamMove + Args.ParamMoves.size());
94
95 void *Mem = C.Allocate(Size, alignof(CoroutineBodyStmt));
96 return new (Mem) CoroutineBodyStmt(Args);
97}
98
99CoroutineBodyStmt *CoroutineBodyStmt::Create(const ASTContext &C, EmptyShell,
100 unsigned NumParams) {
101 std::size_t Size = totalSizeToAlloc<Stmt *>(
102 CoroutineBodyStmt::FirstParamMove + NumParams);
103
104 void *Mem = C.Allocate(Size, alignof(CoroutineBodyStmt));
105 auto *Result = new (Mem) CoroutineBodyStmt(CtorArgs());
1
'Result' initialized to a null pointer value
106 Result->NumParams = NumParams;
2
Access to field 'NumParams' results in a dereference of a null pointer (loaded from variable 'Result')
107 auto *ParamBegin = Result->getStoredStmts() + SubStmt::FirstParamMove;
108 std::uninitialized_fill(ParamBegin, ParamBegin + NumParams,
109 static_cast<Stmt *>(nullptr));
110 return Result;
111}
112
113CoroutineBodyStmt::CoroutineBodyStmt(CoroutineBodyStmt::CtorArgs const &Args)
114 : Stmt(CoroutineBodyStmtClass), NumParams(Args.ParamMoves.size()) {
115 Stmt **SubStmts = getStoredStmts();
116 SubStmts[CoroutineBodyStmt::Body] = Args.Body;
117 SubStmts[CoroutineBodyStmt::Promise] = Args.Promise;
118 SubStmts[CoroutineBodyStmt::InitSuspend] = Args.InitialSuspend;
119 SubStmts[CoroutineBodyStmt::FinalSuspend] = Args.FinalSuspend;
120 SubStmts[CoroutineBodyStmt::OnException] = Args.OnException;
121 SubStmts[CoroutineBodyStmt::OnFallthrough] = Args.OnFallthrough;
122 SubStmts[CoroutineBodyStmt::Allocate] = Args.Allocate;
123 SubStmts[CoroutineBodyStmt::Deallocate] = Args.Deallocate;
124 SubStmts[CoroutineBodyStmt::ReturnValue] = Args.ReturnValue;
125 SubStmts[CoroutineBodyStmt::ResultDecl] = Args.ResultDecl;
126 SubStmts[CoroutineBodyStmt::ReturnStmt] = Args.ReturnStmt;
127 SubStmts[CoroutineBodyStmt::ReturnStmtOnAllocFailure] =
128 Args.ReturnStmtOnAllocFailure;
129 std::copy(Args.ParamMoves.begin(), Args.ParamMoves.end(),
130 const_cast<Stmt **>(getParamMoves().data()));
131}