blob: 4988f53b94cbc8d4756813abcfde460db1505ed4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
/* { dg-additional-options "-fanalyzer-transitivity" } */
/* { dg-require-effective-target alloca } */
#include <stddef.h>
#include <stdlib.h>
extern void do_stuff (const void *);
#define LIMIT 1024
void test_1 (size_t sz)
{
void *ptr;
if (sz >= LIMIT)
ptr = malloc (sz);
else
ptr = __builtin_alloca (sz);
do_stuff (ptr);
if (sz >= LIMIT)
free (ptr);
}
void test_2 (size_t sz)
{
void *ptr;
if (sz < LIMIT)
ptr = __builtin_alloca (sz);
else
ptr = malloc (sz);
do_stuff (ptr);
if (sz >= LIMIT)
free (ptr);
}
void test_3 (size_t sz)
{
void *ptr;
if (sz <= LIMIT)
ptr = __builtin_alloca (sz); /* { dg-message "region created on stack here" } */
else
ptr = malloc (sz);
do_stuff (ptr);
/* Bug: the "sz <= LIMIT" above should have been "sz < LIMIT",
so there's a free-of-alloca when sz == LIMIT. */
if (sz >= LIMIT)
free (ptr); /* { dg-warning "'free' of 'ptr' which points to memory on the stack" } */
}
/* { dg-bogus "leak of 'ptr'" } */
/* This can't happen, as "sz > 1024" && "sz <= 1023" is impossible. */
|
