diff options
Diffstat (limited to 'clang')
| -rw-r--r-- | clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp | 24 | ||||
| -rw-r--r-- | clang/test/Analysis/std-c-library-functions-POSIX.c | 55 |
2 files changed, 73 insertions, 6 deletions
diff --git a/clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp b/clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp index d18e6f63..f5f6e3a 100644 --- a/clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp +++ b/clang/lib/StaticAnalyzer/Checkers/StdLibraryFunctionsChecker.cpp @@ -3096,7 +3096,10 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( auto Recvfrom = Summary(NoEvalCall) .Case({ReturnValueCondition(LessThanOrEq, ArgNo(2)), - ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, + ErrnoMustNotBeChecked, GenericSuccessMsg) + .Case({ReturnValueCondition(WithinRange, SingleValue(0)), + ArgumentCondition(2, WithinRange, SingleValue(0))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint(ArgumentCondition(0, WithinRange, Range(0, IntMax))) @@ -3123,7 +3126,10 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( auto Sendto = Summary(NoEvalCall) .Case({ReturnValueCondition(LessThanOrEq, ArgNo(2)), - ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, + ErrnoMustNotBeChecked, GenericSuccessMsg) + .Case({ReturnValueCondition(WithinRange, SingleValue(0)), + ArgumentCondition(2, WithinRange, SingleValue(0))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint(ArgumentCondition(0, WithinRange, Range(0, IntMax))) @@ -3161,7 +3167,10 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( RetType{Ssize_tTy}), Summary(NoEvalCall) .Case({ReturnValueCondition(LessThanOrEq, ArgNo(2)), - ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, + ErrnoMustNotBeChecked, GenericSuccessMsg) + .Case({ReturnValueCondition(WithinRange, SingleValue(0)), + ArgumentCondition(2, WithinRange, SingleValue(0))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint(ArgumentCondition(0, WithinRange, Range(0, IntMax))) @@ -3179,7 +3188,7 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( Signature(ArgTypes{IntTy, StructMsghdrPtrTy, IntTy}, RetType{Ssize_tTy}), Summary(NoEvalCall) - .Case({ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + .Case({ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint( @@ -3191,7 +3200,7 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( Signature(ArgTypes{IntTy, ConstStructMsghdrPtrTy, IntTy}, RetType{Ssize_tTy}), Summary(NoEvalCall) - .Case({ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + .Case({ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint( @@ -3233,7 +3242,10 @@ void StdLibraryFunctionsChecker::initFunctionSummaries( RetType{Ssize_tTy}), Summary(NoEvalCall) .Case({ReturnValueCondition(LessThanOrEq, ArgNo(2)), - ReturnValueCondition(WithinRange, Range(0, Ssize_tMax))}, + ReturnValueCondition(WithinRange, Range(1, Ssize_tMax))}, + ErrnoMustNotBeChecked, GenericSuccessMsg) + .Case({ReturnValueCondition(WithinRange, SingleValue(0)), + ArgumentCondition(2, WithinRange, SingleValue(0))}, ErrnoMustNotBeChecked, GenericSuccessMsg) .Case(ReturnsMinusOne, ErrnoNEZeroIrrelevant, GenericFailureMsg) .ArgConstraint(ArgumentCondition(0, WithinRange, Range(0, IntMax))) diff --git a/clang/test/Analysis/std-c-library-functions-POSIX.c b/clang/test/Analysis/std-c-library-functions-POSIX.c index 07cbf0f..870af4f 100644 --- a/clang/test/Analysis/std-c-library-functions-POSIX.c +++ b/clang/test/Analysis/std-c-library-functions-POSIX.c @@ -141,6 +141,8 @@ #include "Inputs/std-c-library-functions-POSIX.h" +void clang_analyzer_eval(int); + void test_open(void) { open(0, 0); // \ // expected-warning{{The 1st argument to 'open' is NULL but should not be NULL}} @@ -150,3 +152,56 @@ void test_open_additional_arg(void) { open(0, 0, 0); // \ // expected-warning{{The 1st argument to 'open' is NULL but should not be NULL}} } + +void test_recvfrom(int socket, void *restrict buffer, size_t length, int flags, + struct sockaddr *restrict address, + socklen_t *restrict address_len) { + ssize_t Ret = recvfrom(socket, buffer, length, flags, address, address_len); + if (Ret == 0) + clang_analyzer_eval(length == 0); // expected-warning{{TRUE}} + if (Ret > 0) + clang_analyzer_eval(length > 0); // expected-warning{{TRUE}} + if (Ret == -1) + clang_analyzer_eval(length == 0); // expected-warning{{UNKNOWN}} +} + +void test_sendto(int socket, const void *message, size_t length, int flags, + const struct sockaddr *dest_addr, socklen_t dest_len) { + ssize_t Ret = sendto(socket, message, length, flags, dest_addr, dest_len); + if (Ret == 0) + clang_analyzer_eval(length == 0); // expected-warning{{TRUE}} + if (Ret > 0) + clang_analyzer_eval(length > 0); // expected-warning{{TRUE}} + if (Ret == -1) + clang_analyzer_eval(length == 0); // expected-warning{{UNKNOWN}} +} + +void test_recv(int sockfd, void *buf, size_t len, int flags) { + ssize_t Ret = recv(sockfd, buf, len, flags); + if (Ret == 0) + clang_analyzer_eval(len == 0); // expected-warning{{TRUE}} + if (Ret > 0) + clang_analyzer_eval(len > 0); // expected-warning{{TRUE}} + if (Ret == -1) + clang_analyzer_eval(len == 0); // expected-warning{{UNKNOWN}} +} + +void test_send(int sockfd, void *buf, size_t len, int flags) { + ssize_t Ret = send(sockfd, buf, len, flags); + if (Ret == 0) + clang_analyzer_eval(len == 0); // expected-warning{{TRUE}} + if (Ret > 0) + clang_analyzer_eval(len > 0); // expected-warning{{TRUE}} + if (Ret == -1) + clang_analyzer_eval(len == 0); // expected-warning{{UNKNOWN}} +} + +void test_recvmsg(int sockfd, struct msghdr *msg, int flags) { + ssize_t Ret = recvmsg(sockfd, msg, flags); + clang_analyzer_eval(Ret != 0); // expected-warning{{TRUE}} +} + +void test_sendmsg(int sockfd, const struct msghdr *msg, int flags) { + ssize_t Ret = sendmsg(sockfd, msg, flags); + clang_analyzer_eval(Ret != 0); // expected-warning{{TRUE}} +} |