1  /* { dg-additional-options "-fanalyzer-checker=taint" } */
       2  // TODO: remove need for this option
       3  
       4  #include "analyzer-decls.h"
       5  
       6  int v_start;
       7  
       8  __attribute__((tainted_args))
       9  void test (int v_tainted, int v_has_lb, int v_has_ub, int v_stop)
      10  {
      11    /* Get each var into the 5 different taintedness states.  */
      12    if (v_has_lb < 10)
      13      return;
      14    if (v_has_ub > 100)
      15      return;
      16    if (v_stop < 0 || v_stop > 100)
      17      return;
      18  
      19    /* Verify that we have the taintedness states we expect.  */
      20  
      21    __analyzer_dump_state ("taint", v_start); /* { dg-warning "state: 'start'" } */
      22    __analyzer_dump_state ("taint", v_tainted); /* { dg-warning "state: 'tainted'" } */
      23    __analyzer_dump_state ("taint", v_has_lb); /* { dg-warning "state: 'has_lb'" } */
      24    __analyzer_dump_state ("taint", v_has_ub); /* { dg-warning "state: 'has_ub'" } */
      25    __analyzer_dump_state ("taint", v_stop); /* { dg-warning "state: 'stop'" } */
      26  
      27    /* Check all combinations of taintedness state.  */
      28    __analyzer_dump_state ("taint", v_start + v_start); /* { dg-warning "state: 'start'" } */
      29    __analyzer_dump_state ("taint", v_start + v_tainted); /* { dg-warning "state: 'tainted'" } */
      30    __analyzer_dump_state ("taint", v_start + v_has_lb); /* { dg-warning "state: 'has_lb'" } */
      31    __analyzer_dump_state ("taint", v_start + v_has_ub); /* { dg-warning "state: 'has_ub'" } */
      32    __analyzer_dump_state ("taint", v_start + v_stop); /* { dg-warning "state: 'stop'" } */
      33  
      34    __analyzer_dump_state ("taint", v_tainted + v_start); /* { dg-warning "state: 'tainted'" } */
      35    __analyzer_dump_state ("taint", v_tainted + v_tainted); /* { dg-warning "state: 'tainted'" } */
      36    __analyzer_dump_state ("taint", v_tainted + v_has_lb); /* { dg-warning "state: 'tainted'" } */
      37    __analyzer_dump_state ("taint", v_tainted + v_has_ub); /* { dg-warning "state: 'tainted'" } */
      38    __analyzer_dump_state ("taint", v_tainted + v_stop); /* { dg-warning "state: 'tainted'" } */
      39  
      40    __analyzer_dump_state ("taint", v_has_lb + v_start); /* { dg-warning "state: 'has_lb'" } */
      41    __analyzer_dump_state ("taint", v_has_lb + v_tainted); /* { dg-warning "state: 'tainted'" } */
      42    __analyzer_dump_state ("taint", v_has_lb + v_has_lb); /* { dg-warning "state: 'has_lb'" } */
      43    __analyzer_dump_state ("taint", v_has_lb + v_has_ub); /* { dg-warning "state: 'tainted'" } */
      44    __analyzer_dump_state ("taint", v_has_lb + v_stop); /* { dg-warning "state: 'has_lb'" } */
      45  
      46    __analyzer_dump_state ("taint", v_has_ub + v_start); /* { dg-warning "state: 'has_ub'" } */
      47    __analyzer_dump_state ("taint", v_has_ub + v_tainted); /* { dg-warning "state: 'tainted'" } */
      48    __analyzer_dump_state ("taint", v_has_ub + v_has_lb); /* { dg-warning "state: 'tainted'" } */
      49    __analyzer_dump_state ("taint", v_has_ub + v_has_ub); /* { dg-warning "state: 'has_ub'" } */
      50    __analyzer_dump_state ("taint", v_has_ub + v_stop); /* { dg-warning "state: 'has_ub'" } */
      51  
      52    __analyzer_dump_state ("taint", v_stop + v_start); /* { dg-warning "state: 'stop'" } */
      53    __analyzer_dump_state ("taint", v_stop + v_tainted); /* { dg-warning "state: 'tainted'" } */
      54    __analyzer_dump_state ("taint", v_stop + v_has_lb); /* { dg-warning "state: 'has_lb'" } */
      55    __analyzer_dump_state ("taint", v_stop + v_has_ub); /* { dg-warning "state: 'has_ub'" } */
      56    __analyzer_dump_state ("taint", v_stop + v_stop); /* { dg-warning "state: 'stop'" } */
      57  }