aboutsummaryrefslogtreecommitdiff
path: root/gcc/testsuite/gcc.dg/analyzer/out-of-bounds-read-struct-arr.c
blob: 0f50bb92290198013adf9705236972ff36083103 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
#include <stdint.h>

struct st
{
  char buf[16];
  int32_t x;
  int32_t y;
};

struct st arr[10];

int32_t struct_arr_read_x_element_before_start_far(void)
{
  return arr[-100].x; /* { dg-warning "buffer under-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte -2384 till byte -2381 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
}

int32_t struct_arr_read_x_element_before_start_near(void)
{
  return arr[-2].x; /* { dg-warning "buffer under-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte -32 till byte -29 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
}

int32_t struct_arr_read_x_element_before_start_off_by_one(void)
{
  return arr[-1].x; /* { dg-warning "buffer under-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte -8 till byte -5 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
}

int32_t struct_arr_read_x_element_at_start(void)
{
  return arr[0].x;
}

int32_t struct_arr_read_x_element_at_end(void)
{
  return arr[9].x;
}

int32_t struct_arr_read_x_element_after_end_off_by_one(void)
{
  return arr[10].x; /* { dg-warning "buffer over-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte 256 till byte 259 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
}

int32_t struct_arr_read_x_element_after_end_near(void)
{
  return arr[11].x; /* { dg-warning "buffer over-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte 280 till byte 283 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
}

int32_t struct_arr_read_x_element_after_end_far(void)
{
  return arr[100].x; /* { dg-warning "buffer over-read" "warning" } */
  /* { dg-message "out-of-bounds read from byte 2416 till byte 2419 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
}