From 8312780b947ccda6899e4e922251c70400ec05f5 Mon Sep 17 00:00:00 2001 From: chrchr Date: Wed, 5 Jul 2023 16:14:11 +0200 Subject: [PATCH] Fix #11810 nullptr deref in compilePrecedence2() --- lib/tokenize.cpp | 2 +- test/testtokenize.cpp | 14 ++++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/lib/tokenize.cpp b/lib/tokenize.cpp index 4969542f88f..f64d79df585 100644 --- a/lib/tokenize.cpp +++ b/lib/tokenize.cpp @@ -7121,7 +7121,7 @@ void Tokenizer::simplifyVarDecl(Token * tokBegin, const Token * const tokEnd, co if (Token::Match(tok2, "{|(|[")) tok2 = tok2->link(); - else if (!isC() && tok2->str() == "<" && tok2->previous()->isName() && !tok2->previous()->varId()) + else if (!isC() && tok2->str() == "<" && ((tok2->previous()->isName() && !tok2->previous()->varId()) || tok2->strAt(-1) == "]")) tok2 = tok2->findClosingBracket(); else if (std::strchr(";,", tok2->str()[0])) { diff --git a/test/testtokenize.cpp b/test/testtokenize.cpp index 2a5055a7a90..f44e8c32aae 100644 --- a/test/testtokenize.cpp +++ b/test/testtokenize.cpp @@ -3501,6 +3501,20 @@ class TestTokenizer : public TestFixture { ASSERT_EQUALS(true, tok1->link() == tok2); ASSERT_EQUALS(true, tok2->link() == tok1); } + + { // #11810 + const char code[] = "void f() {\n" + " auto g = [] (A a, B&& b) { return a < b; };\n" + "}\n"; + errout.str(""); + Tokenizer tokenizer(&settings0, this); + std::istringstream istr(code); + ASSERT(tokenizer.tokenize(istr, "test.cpp")); + const Token* tok1 = Token::findsimplematch(tokenizer.tokens(), "< A"); + const Token* tok2 = Token::findsimplematch(tok1, "> ("); + ASSERT_EQUALS(true, tok1->link() == tok2); + ASSERT_EQUALS(true, tok2->link() == tok1); + } } void simplifyString() {