blob: 11bc964922b58d96559d8e27b1c441fd58580002 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
#include <string.h>
#include <stdlib.h>
#include "analyzer-decls.h"
extern void requires_nonnull (void *ptr)
__attribute__((nonnull));
void test_1 (const char *s)
{
char *p = strdup (s); /* { dg-message "allocated here" } */
} /* { dg-warning "leak of 'p'" } */
void test_2 (const char *s)
{
char *p = strdup (s);
free (p);
}
void test_3 (const char *s)
{
char *p = strdup (s); /* { dg-message "this call could return NULL" } */
requires_nonnull (p); /* { dg-warning "use of possibly-NULL 'p'" } */
}
/* Repeat tests for __builtin_strdup. */
void test_4 (const char *s)
{
char *p = __builtin_strdup (s); /* { dg-message "allocated here" } */
} /* { dg-warning "leak of 'p'" } */
void test_5 (const char *s)
{
char *p = __builtin_strdup (s);
free (p);
}
void test_6 (const char *s)
{
char *p = __builtin_strdup (s); /* { dg-message "this call could return NULL" } */
requires_nonnull (p); /* { dg-warning "use of possibly-NULL 'p'" } */
}
char *test_unterminated (void)
{
char buf[3] = "abc";
return strdup (buf); /* { dg-warning "stack-based buffer over-read" } */
/* { dg-message "while looking for null terminator for argument 1 \\('&buf'\\) of 'strdup'..." "event" { target *-*-* } .-1 } */
}
char *test_uninitialized (void)
{
char buf[16];
return strdup (buf); /* { dg-warning "use of uninitialized value 'buf\\\[0\\\]'" } */
/* { dg-message "while looking for null terminator for argument 1 \\('&buf'\\) of 'strdup'..." "event" { target *-*-* } .-1 } */
}
char *test_concrete_strlen (void)
{
char *p = strdup ("abc");
if (!p)
return p;
__analyzer_eval (__analyzer_get_strlen (p) == 3); /* { dg-warning "TRUE" } */
__analyzer_eval (p[0] == 'a'); /* { dg-warning "TRUE" } */
__analyzer_eval (p[1] == 'b'); /* { dg-warning "TRUE" } */
__analyzer_eval (p[2] == 'c'); /* { dg-warning "TRUE" } */
__analyzer_eval (p[3] == '\0'); /* { dg-warning "TRUE" } */
return p;
}
char *test_symbolic_strlen (const char *p)
{
char *q = strdup (p);
if (!q)
return q;
__analyzer_eval (__analyzer_get_strlen (p) == __analyzer_get_strlen (q)); /* { dg-warning "UNKNOWN" } */
// TODO: should be TRUE
__analyzer_eval (p[0] == q[0]); /* { dg-warning "UNKNOWN" } */
// TODO: should be TRUE
return q;
}
|
