Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions clang/docs/ReleaseNotes.rst
Original file line number Diff line number Diff line change
Expand Up @@ -414,6 +414,13 @@ Improvements to Clang's diagnostics
- Clang now emits a diagnostic in case `vector_size` or `ext_vector_type`
attributes are used with a negative size (#GH165463).

- Fixed: ``-Wuninitialized`` now emits a warning for uninitialized fixed-size local arrays. For example:

.. code-block:: c

int arr[4];
int x = arr[2]; // warning: variable 'arr' is uninitialized when used here (#GH165239)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reference the issue in text, not in code blocks.


Improvements to Clang's time-trace
----------------------------------

Expand Down
75 changes: 70 additions & 5 deletions clang/lib/Analysis/UninitializedValues.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -61,8 +61,8 @@ static bool isTrackedVar(const VarDecl *vd, const DeclContext *dc) {
vd->getDeclContext() == dc) {
QualType ty = vd->getType();
if (const auto *RD = ty->getAsRecordDecl())
return recordIsNotEmpty(RD);
return ty->isScalarType() || ty->isVectorType() || ty->isRVVSizelessBuiltinType();
return recordIsNotEmpty(RD);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unrelated changes?

return ty->isScalarType() || ty->isVectorType() || ty->isRVVSizelessBuiltinType() || ty->isArrayType();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please add tests with arrays whose element type is struct (not a scalar type)?

}
return false;
}
Expand Down Expand Up @@ -291,6 +291,7 @@ class ClassifyRefs : public StmtVisitor<ClassifyRefs> {
public:
ClassifyRefs(AnalysisDeclContext &AC) : DC(cast<DeclContext>(AC.getDecl())) {}

void VisitArraySubscriptExpr(ArraySubscriptExpr *ASE);
void VisitDeclStmt(DeclStmt *DS);
void VisitUnaryOperator(UnaryOperator *UO);
void VisitBinaryOperator(BinaryOperator *BO);
Expand All @@ -310,6 +311,10 @@ class ClassifyRefs : public StmtVisitor<ClassifyRefs> {
if (!VD || !isTrackedVar(VD))
return Ignore;

// Default to Use instead of Init for arrays - CRITICAL FIX
if (VD->getType()->isArrayType())
return Use;

return Init;
}
};
Expand All @@ -331,6 +336,26 @@ static const DeclRefExpr *getSelfInitExpr(VarDecl *VD) {
void ClassifyRefs::classify(const Expr *E, Class C) {
// The result of a ?: could also be an lvalue.
E = E->IgnoreParens();

// Handle array subscripts - THE KEY FIX
if (const auto *ASE = dyn_cast<ArraySubscriptExpr>(E)) {
// For ANY array subscript expression, the base array is being USED
// This is the critical fix - don't check C, just mark as Use
FindVarResult Var = findVar(ASE->getBase(), DC);
if (const VarDecl *VD = Var.getDecl()) {
if (VD->getType()->isArrayType()) {
// Directly mark the array DeclRefExpr as Use
if (const DeclRefExpr *DRE = Var.getDeclRefExpr())
Classification[DRE] = Use;
}
}

// Process base and index normally
classify(ASE->getBase(), C);
Visit(const_cast<Expr*>(ASE->getIdx()));
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You should not call Visit. All sub-expressions will be visited by StmtVisitor. Ditto elsewhere.

return;
}

if (const auto *CO = dyn_cast<ConditionalOperator>(E)) {
classify(CO->getTrueExpr(), C);
classify(CO->getFalseExpr(), C);
Expand Down Expand Up @@ -376,6 +401,13 @@ void ClassifyRefs::classify(const Expr *E, Class C) {
}
}

void ClassifyRefs::VisitArraySubscriptExpr(ArraySubscriptExpr *ASE) {
// For array subscript expressions, classify the base as a use
classify(ASE->getBase(), Use);
// Also visit the index expression
Visit(ASE->getIdx());
}

void ClassifyRefs::VisitDeclStmt(DeclStmt *DS) {
for (auto *DI : DS->decls()) {
auto *VD = dyn_cast<VarDecl>(DI);
Expand All @@ -393,10 +425,27 @@ void ClassifyRefs::VisitBinaryOperator(BinaryOperator *BO) {
// use.
if (BO->isCompoundAssignmentOp())
classify(BO->getLHS(), Use);
else if (BO->getOpcode() == BO_Assign || BO->getOpcode() == BO_Comma)
classify(BO->getLHS(), Ignore);
else if (BO->getOpcode() == BO_Assign || BO->getOpcode() == BO_Comma) {
// For array subscript expressions on LHS of assignment, don't classify as use
if (isa<ArraySubscriptExpr>(BO->getLHS())) {
// Don't classify array base as use when it's being assigned to
// But we still need to visit the index expression
if (auto *ASE = dyn_cast<ArraySubscriptExpr>(BO->getLHS())) {
Comment on lines +430 to +433
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate checks?

Visit(ASE->getIdx());
}
} else {
classify(BO->getLHS(), Ignore);
}
// ALWAYS visit the right-hand side - this is crucial for array subscripts
Visit(BO->getRHS());
} else {
// For all other binary operators, visit both operands normally
Visit(BO->getLHS());
Visit(BO->getRHS());
}
}


void ClassifyRefs::VisitUnaryOperator(UnaryOperator *UO) {
// Increment and decrement are uses despite there being no lvalue-to-rvalue
// conversion.
Expand Down Expand Up @@ -491,6 +540,7 @@ class TransferFunctions : public StmtVisitor<TransferFunctions> {
void reportConstRefUse(const Expr *ex, const VarDecl *vd);
void reportConstPtrUse(const Expr *ex, const VarDecl *vd);

void VisitArraySubscriptExpr(ArraySubscriptExpr *ASE);
void VisitBinaryOperator(BinaryOperator *bo);
void VisitBlockExpr(BlockExpr *be);
void VisitCallExpr(CallExpr *ce);
Expand Down Expand Up @@ -661,8 +711,23 @@ class TransferFunctions : public StmtVisitor<TransferFunctions> {

} // namespace

void TransferFunctions::reportUse(const Expr *ex, const VarDecl *vd) {
void TransferFunctions::VisitArraySubscriptExpr(ArraySubscriptExpr *ASE) {
// Handle array subscript expressions like arr[i]
// Check if the base array variable is uninitialized
FindVarResult Var = findVar(ASE->getBase());

if (const VarDecl *VD = Var.getDecl()) {
if (VD->getType()->isArrayType())
reportUse(ASE, VD);
}

// Also visit index expression
Visit(ASE->getIdx());
}

void TransferFunctions::reportUse(const Expr *ex, const VarDecl *vd) {
Value v = vals[vd];

Comment on lines +728 to +730
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unrelated changes?

if (isUninitialized(v))
handler.handleUseOfUninitVariable(vd, getUninitUse(ex, vd, v));
}
Expand Down
17 changes: 17 additions & 0 deletions clang/test/Sema/uninit-arrays.c
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
// RUN: %clang_cc1 -Wall -Wextra -Wuninitialized -fsyntax-only %s 2>&1 | FileCheck %s
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.


void test1() {
int arr[5];
int x = arr[0]; // expected-warning{{variable 'arr' is uninitialized when used here}}
}

void test2() {
int a[3][3];
int y = a[1][1]; // expected-warning{{variable 'a' is uninitialized when used here}}
}

void test3() {
int n;
int vla[n]; // expected-note{{declared here}}
int z = vla[2]; // expected-warning{{variable 'vla' is uninitialized when used here}}
}