Flood with bottom for Deinit, StorageLive and StorageDead
This commit is contained in:
parent
eab77320e6
commit
2f66e9417f
1 changed files with 5 additions and 4 deletions
|
@ -91,12 +91,13 @@ pub trait ValueAnalysis<'tcx> {
|
|||
self.handle_intrinsic(intrinsic, state);
|
||||
}
|
||||
StatementKind::StorageLive(local) | StatementKind::StorageDead(local) => {
|
||||
// It is UB to read from an unitialized or unallocated local.
|
||||
state.flood(Place::from(*local).as_ref(), self.map());
|
||||
// We can flood with bottom here, because `StorageLive` makes the local
|
||||
// uninitialized, and `StorageDead` makes it UB to access.
|
||||
state.flood_with(Place::from(*local).as_ref(), self.map(), Self::Value::bottom());
|
||||
}
|
||||
StatementKind::Deinit(box place) => {
|
||||
// It is UB to read `uninit` bytes.
|
||||
state.flood(place.as_ref(), self.map());
|
||||
// The bottom states denotes uninitialized values.
|
||||
state.flood_with(place.as_ref(), self.map(), Self::Value::bottom());
|
||||
}
|
||||
StatementKind::Nop
|
||||
| StatementKind::Retag(..)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue