[llvm-branch-commits] [clang] [LifetimeSafety] Detect dangling field of base class (PR #191831)

[Utkarsh Saxena via llvm-branch-commits]

https://github.com/usx95 created https://github.com/llvm/llvm-project/pull/191831

None

>From df11e430ccf6861f8b3b0260fccc03d0e12d3fb8 Mon Sep 17 00:00:00 2001
From: Utkarsh Saxena <usx at google.com>
Date: Mon, 13 Apr 2026 14:53:43 +0000
Subject: [PATCH] [LifetimeSafety] Detect dangling field of base class

---
 clang/lib/Analysis/LifetimeSafety/Origins.cpp  |  2 +-
 .../warn-lifetime-safety-dangling-field.cpp    | 12 ++++++++++++
 clang/test/Sema/warn-lifetime-safety.cpp       | 18 ++++++++++++++++++
 3 files changed, 31 insertions(+), 1 deletion(-)

diff --git a/clang/lib/Analysis/LifetimeSafety/Origins.cpp b/clang/lib/Analysis/LifetimeSafety/Origins.cpp
index abf9890b08522..fdd2671dee2e0 100644
--- a/clang/lib/Analysis/LifetimeSafety/Origins.cpp
+++ b/clang/lib/Analysis/LifetimeSafety/Origins.cpp
@@ -236,7 +236,7 @@ OriginList *OriginManager::getOrCreateList(const Expr *E) {
     ReferencedDecl = DRE->getDecl();
   else if (auto *ME = dyn_cast<MemberExpr>(E))
     if (auto *Field = dyn_cast<FieldDecl>(ME->getMemberDecl());
-        Field && isa<CXXThisExpr>(ME->getBase()))
+        Field && isa<CXXThisExpr>(ME->getBase()->IgnoreParenImpCasts()))
       ReferencedDecl = Field;
   if (ReferencedDecl) {
     OriginList *Head = nullptr;
diff --git a/clang/test/Sema/warn-lifetime-safety-dangling-field.cpp b/clang/test/Sema/warn-lifetime-safety-dangling-field.cpp
index fa45458371012..79b0183ed91ec 100644
--- a/clang/test/Sema/warn-lifetime-safety-dangling-field.cpp
+++ b/clang/test/Sema/warn-lifetime-safety-dangling-field.cpp
@@ -184,3 +184,15 @@ struct IndirectEscape2 {
     p = s.data();
   }
 };
+
+namespace DanglingPointerFieldInBaseClass {
+struct BaseWithPointer {
+  std::string_view view; // expected-note {{this field dangles}}
+};
+
+struct DerivedWithCtor : BaseWithPointer {
+  DerivedWithCtor(std::string s) {
+    view = s; // expected-warning {{address of stack memory escapes to a field}}
+  }
+};
+} // namespace DanglingPointerFieldInBaseClass
diff --git a/clang/test/Sema/warn-lifetime-safety.cpp b/clang/test/Sema/warn-lifetime-safety.cpp
index b1dea7f7340b3..d5e48eb326a22 100644
--- a/clang/test/Sema/warn-lifetime-safety.cpp
+++ b/clang/test/Sema/warn-lifetime-safety.cpp
@@ -2531,3 +2531,21 @@ int *noreturn_dead_nested(bool cond, bool cond2, int *num) {
 }
 
 } // namespace conditional_operator_control_flow
+
+//===----------------------------------------------------------------------===//
+// Base Class Field Tests
+//===----------------------------------------------------------------------===//
+namespace base_class_fields {
+struct X { int* x; }; // expected-note {{this field dangles}}
+struct Y : X {
+  int* y;
+  void bar() {
+    {
+      int a;
+      x = &a; // expected-warning {{address of stack memory escapes to a field}}
+    }
+    (void)x;
+  }
+};
+} // namespace base_class_fields
+