blob: 30341061f4cc4e4b763a841f095521d05073df90 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
#include <string.h>
#include "analyzer-decls.h"
char *
test_1 (char *dst, char *src)
{
char *result = strcpy (dst, src);
__analyzer_eval (result == dst); /* { dg-warning "TRUE" } */
return result;
}
char *
test_1a (char *dst, char *src)
{
char *result = __strcpy_chk (dst, src, -1);
__analyzer_eval (result == dst); /* { dg-warning "TRUE" } */
return result;
}
char *test_unterminated (char *dst)
{
char buf[3] = "abc";
return strcpy (dst, buf); /* { dg-warning "stack-based buffer over-read" } */
/* { dg-message "while looking for null terminator for argument 2 \\('&buf'\\) of 'strcpy'..." "event" { target *-*-* } .-1 } */
}
char *test_uninitialized (char *dst)
{
char buf[16];
return strcpy (dst, buf); /* { dg-warning "use of uninitialized value 'buf\\\[0\\\]'" } */
/* { dg-message "while looking for null terminator for argument 2 \\('&buf'\\) of 'strcpy'..." "event" { target *-*-* } .-1 } */
}
extern void external_fn (void *ptr);
char *test_external_fn (void)
{
char src[10];
char dst[10];
external_fn (src);
strcpy (dst, src);
__analyzer_eval (strlen (dst) == strlen (src)); /* { dg-warning "UNKNOWN" } */
// TODO: ideally would be TRUE
}
void test_sprintf_strcpy (const char *a, const char *b)
{
char buf_1[10];
char buf_2[10];
__builtin_sprintf (buf_1, "%s/%s", a, b);
strcpy (buf_2, buf_1);
__analyzer_eval (strlen (buf_1) == strlen (buf_2)); /* { dg-warning "UNKNOWN" } */
// TODO: ideally would be TRUE
}
|
