Uninitialized variables: Fixed false positive when address of variable is taken inside = { .. }. Ticket: #3369

lib/checkuninitvar.cpp

@@ -1126,9 +1126,19 @@ bool CheckUninitVar::checkScopeForVariable(const Token *tok, const unsigned int
             }
         }
 
-        // skip = { .. }
-        if (Token::simpleMatch(tok, "= {"))
-            tok = tok->next()->link();
+        // = { .. }
+        if (Token::simpleMatch(tok, "= {")) {
+            // end token
+            const Token *end = tok->next()->link();
+
+            // If address of variable is taken in the block then bail out
+            if (Token::findmatch(tok->tokAt(2), "& %varid%", end, varid))
+                return true;
+
+            // Skip block
+            tok = end;
+            continue;
+        }
 
         // TODO: handle loops, try, etc
         if (tok->str() == "for" || Token::simpleMatch(tok, ") {") || Token::Match(tok, "%var% {")) {

test/testuninitvar.cpp

@@ -1732,6 +1732,15 @@ private:
                         "}");
         ASSERT_EQUALS("[test.cpp:3]: (error) Uninitialized variable: x\n", errout.str());
 
+        // = { .. }
+        checkUninitVar2("int f() {\n"
+                        "    int a;\n"
+                        "    int *p[] = { &a };\n"
+                        "    *p[0] = 0;\n"
+                        "    return a;\n"
+                        "}");
+        ASSERT_EQUALS("", errout.str());
+
         // >> => initialization / usage
         {
             const char code[] = "void f() {\n"