55 lines · c
1// RUN: %clang_analyze_cc1 -Wno-alloc-size -analyzer-checker=unix.MallocSizeof -verify %s2 3#include <stddef.h>4 5void *malloc(size_t size);6void *calloc(size_t nmemb, size_t size);7void *realloc(void *ptr, size_t size);8void free(void *ptr);9 10struct A {};11struct B {};12 13void foo(unsigned int unsignedInt, unsigned int readSize) {14 int *ip1 = malloc(sizeof(1));15 int *ip2 = malloc(4 * sizeof(int));16 17 long *lp1 = malloc(sizeof(short)); // expected-warning {{Result of 'malloc' is converted to a pointer of type 'long', which is incompatible with sizeof operand type 'short'}}18 long *lp2 = malloc(5 * sizeof(double)); // expected-warning {{Result of 'malloc' is converted to a pointer of type 'long', which is incompatible with sizeof operand type 'double'}}19 char *cp3 = malloc(5 * sizeof(char) + 2); // no warning20 unsigned char *buf = malloc(readSize + sizeof(unsignedInt)); // no warning21 22 struct A *ap1 = calloc(1, sizeof(struct A));23 struct A *ap2 = calloc(2, sizeof(*ap1));24 struct A *ap3 = calloc(2, sizeof(ap1)); // expected-warning {{Result of 'calloc' is converted to a pointer of type 'struct A', which is incompatible with sizeof operand type 'struct A *'}}25 struct A *ap4 = calloc(3, sizeof(struct A*)); // expected-warning {{Result of 'calloc' is converted to a pointer of type 'struct A', which is incompatible with sizeof operand type 'struct A *'}}26 struct A *ap5 = calloc(4, sizeof(struct B)); // expected-warning {{Result of 'calloc' is converted to a pointer of type 'struct A', which is incompatible with sizeof operand type 'struct B'}}27 struct A *ap6 = realloc(ap5, sizeof(struct A));28 struct A *ap7 = realloc(ap5, sizeof(struct B)); // expected-warning {{Result of 'realloc' is converted to a pointer of type 'struct A', which is incompatible with sizeof operand type 'struct B'}}29 30 void **vpp1 = (void **)malloc(sizeof(struct A*)); // no warning31}32 33// Don't warn when the types differ only by constness.34void ignore_const(void) {35 const char **x = (const char **)malloc(1 * sizeof(char *)); // no-warning36 const char ***y = (const char ***)malloc(1 * sizeof(char *)); // expected-warning {{Result of 'malloc' is converted to a pointer of type 'const char **', which is incompatible with sizeof operand type 'char *'}}37 free(x);38}39 40int *mallocArraySize(void) {41 static const int sTable[10];42 static const int nestedTable[10][2];43 int *table = malloc(sizeof sTable);44 int *table1 = malloc(sizeof nestedTable);45 int (*table2)[2] = malloc(sizeof nestedTable);46 int (*table3)[10][2] = malloc(sizeof nestedTable);47 return table;48}49 50int *mallocWrongArraySize(void) {51 static const double sTable[10];52 int *table = malloc(sizeof sTable); // expected-warning {{Result of 'malloc' is converted to a pointer of type 'int', which is incompatible with sizeof operand type 'const double[10]'}}53 return table;54}55