1 // RUN: %clang_cc1 -analyze -analyzer-store=region -analyzer-checker=core,unix.Malloc -fblocks -verify %s
2 // RUN: %clang_cc1 -analyze -analyzer-store=region -analyzer-checker=core,alpha.unix.MallocWithAnnotations -fblocks -verify %s
3 void free(void *);
4 
5 void t1 () {
6   int a[] = { 1 };
7   free(a); // expected-warning {{Argument to free() is the address of the local variable 'a', which is not memory allocated by malloc()}}
8 }
9 
10 void t2 () {
11   int a = 1;
12   free(&a); // expected-warning {{Argument to free() is the address of the local variable 'a', which is not memory allocated by malloc()}}
13 }
14 
15 void t3 () {
16   static int a[] = { 1 };
17   free(a); // expected-warning {{Argument to free() is the address of the static variable 'a', which is not memory allocated by malloc()}}
18 }
19 
20 void t4 (char *x) {
21   free(x); // no-warning
22 }
23 
24 void t5 () {
25   extern char *ptr();
26   free(ptr()); // no-warning
27 }
28 
29 void t6 () {
30   free((void*)1000); // expected-warning {{Argument to free() is a constant address (1000), which is not memory allocated by malloc()}}
31 }
32 
33 void t7 (char **x) {
34   free(*x); // no-warning
35 }
36 
37 void t8 (char **x) {
38   // ugh
39   free((*x)+8); // no-warning
40 }
41 
42 void t9 () {
43 label:
44   free(&&label); // expected-warning {{Argument to free() is the address of the label 'label', which is not memory allocated by malloc()}}
45 }
46 
47 void t10 () {
48   free((void*)&t10); // expected-warning {{Argument to free() is the address of the function 't10', which is not memory allocated by malloc()}}
49 }
50 
51 void t11 () {
52   char *p = (char*)__builtin_alloca(2);
53   free(p); // expected-warning {{Memory allocated by alloca() should not be deallocated}}
54 }
55 
56 void t12 () {
57   free(^{return;}); // expected-warning {{Argument to free() is a block, which is not memory allocated by malloc()}}
58 }
59 
60 void t13 (char a) {
61   free(&a); // expected-warning {{Argument to free() is the address of the parameter 'a', which is not memory allocated by malloc()}}
62 }
63 
64 static int someGlobal[2];
65 void t14 () {
66   free(someGlobal); // expected-warning {{Argument to free() is the address of the global variable 'someGlobal', which is not memory allocated by malloc()}}
67 }
68 
69 void t15 (char **x, int offset) {
70   // Unknown value
71   free(x[offset]); // no-warning
72 }
73