blob: 538adaea6ee606598c9ca97b9a1e14e3a05b41c0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
/* Verify how paths are printed for signal-handler diagnostics. */
/* C only; attempting to generalize it for C++ leads
to an explosion of possibilities for the multiline output. */
/* { dg-options "-fanalyzer -fdiagnostics-show-line-numbers -fdiagnostics-path-format=inline-events -fdiagnostics-show-caret" } */
/* { dg-enable-nn-line-numbers "" } */
/* { dg-require-effective-target signal } */
#include <stdio.h>
#include <signal.h>
#include <stdlib.h>
extern void body_of_program(void);
void custom_logger(const char *msg)
{
fprintf(stderr, "LOG: %s", msg); /* { dg-warning "call to 'fprintf' from within signal handler" } */
}
static void int_handler(int signum)
{
custom_logger("got signal");
}
void test (void)
{
void *ptr = malloc (1024);
signal(SIGINT, int_handler);
body_of_program();
free (ptr);
}
/* "call to 'fprintf' from within signal handler [CWE-479]". */
/* { dg-begin-multiline-output "" }
NN | fprintf(stderr, "LOG: %s", msg);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'test': events 1-2
|
| NN | void test (void)
| | ^~~~
| | |
| | (1) entry to 'test'
|......
| NN | signal(SIGINT, int_handler);
| | ~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | (2) registering 'int_handler' as signal handler
|
event 3
|
|cc1:
| (3): later on, when the signal is delivered to the process
|
+--> 'int_handler': events 4-5
|
| NN | static void int_handler(int signum)
| | ^~~~~~~~~~~
| | |
| | (4) entry to 'int_handler'
| NN | {
| NN | custom_logger("got signal");
| | ~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | (5) calling 'custom_logger' from 'int_handler'
|
+--> 'custom_logger': events 6-7
|
| NN | void custom_logger(const char *msg)
| | ^~~~~~~~~~~~~
| | |
| | (6) entry to 'custom_logger'
| NN | {
| NN | fprintf(stderr, "LOG: %s", msg);
| | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | (7) call to 'fprintf' from within signal handler
|
{ dg-end-multiline-output "" } */
|
