1 // Refer issue 55019 for more details.
2 // A supplemental test case of pr22954.c for other functions modeled in
3 // the CStringChecker.
4
5 // RUN: %clang_analyze_cc1 %s -verify \
6 // RUN: -analyzer-checker=core \
7 // RUN: -analyzer-checker=unix \
8 // RUN: -analyzer-checker=debug.ExprInspection
9
10 #include "Inputs/system-header-simulator.h"
11 #include "Inputs/system-header-simulator-cxx.h"
12
13 void *malloc(size_t);
14 void free(void *);
15
16 struct mystruct {
17 void *ptr;
18 char arr[4];
19 };
20
21 void clang_analyzer_dump(const void *);
22
23 // CStringChecker::memsetAux
fmemset()24 void fmemset() {
25 mystruct x;
26 x.ptr = malloc(1);
27 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
28 memset(x.arr, 0, sizeof(x.arr));
29 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
30 free(x.ptr); // no-leak-warning
31 }
32
33 // CStringChecker::evalCopyCommon
fmemcpy()34 void fmemcpy() {
35 mystruct x;
36 x.ptr = malloc(1);
37 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
38 memcpy(x.arr, "hi", 2);
39 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
40 free(x.ptr); // no-leak-warning
41 }
42
43 // CStringChecker::evalStrcpyCommon
fstrcpy()44 void fstrcpy() {
45 mystruct x;
46 x.ptr = malloc(1);
47 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
48 strcpy(x.arr, "hi");
49 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
50 free(x.ptr); // no-leak-warning
51 }
52
fstrncpy()53 void fstrncpy() {
54 mystruct x;
55 x.ptr = malloc(1);
56 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
57 strncpy(x.arr, "hi", sizeof(x.arr));
58 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
59 free(x.ptr); // no-leak-warning
60 }
61
62 // CStringChecker::evalStrsep
fstrsep()63 void fstrsep() {
64 mystruct x;
65 x.ptr = malloc(1);
66 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
67 char *p = x.arr;
68 (void)strsep(&p, "x");
69 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
70 free(x.ptr); // no-leak-warning
71 }
72
73 // CStringChecker::evalStdCopyCommon
fstdcopy()74 void fstdcopy() {
75 mystruct x;
76 x.ptr = new char;
77 clang_analyzer_dump(x.ptr); // expected-warning {{HeapSymRegion}}
78
79 const char *p = "x";
80 std::copy(p, p + 1, x.arr);
81
82 // FIXME: As we currently cannot know whether the copy overflows, the checker
83 // invalidates the entire `x` object. When the copy size through iterators
84 // can be correctly modeled, we can then update the verify direction from
85 // SymRegion to HeapSymRegion as this std::copy call never overflows and
86 // hence the pointer `x.ptr` shall not be invalidated.
87 clang_analyzer_dump(x.ptr); // expected-warning {{SymRegion}}
88 delete static_cast<char*>(x.ptr); // no-leak-warning
89 }
90