251 lines · c
1// RUN: %clang_analyze_cc1 -triple x86_64-apple-darwin10 -analyzer-checker=core,unix.API,osx.API,optin.portability %s -analyzer-output=plist -analyzer-config faux-bodies=true -fblocks -verify -o %t.plist2// RUN: %normalize_plist <%t.plist | diff -ub %S/Inputs/expected-plists/unix-fns.c.plist -3// RUN: %clang_analyze_cc1 -triple x86_64-unknown-linux -analyzer-checker=core,unix.API,osx.API,optin.portability %s -analyzer-output=plist -analyzer-config faux-bodies=true -fblocks -verify -o %t.plist4// RUN: %normalize_plist <%t.plist | diff -ub %S/Inputs/expected-plists/unix-fns.c.plist -5// RUN: mkdir -p %t.dir6// RUN: %clang_analyze_cc1 -analyzer-checker=core,unix.API,osx.API,optin.portability -analyzer-output=html -analyzer-config faux-bodies=true -fblocks -o %t.dir %s7// RUN: rm -fR %t.dir8 9 10struct _opaque_pthread_once_t {11 long __sig;12 char __opaque[8];13};14typedef struct _opaque_pthread_once_t __darwin_pthread_once_t;15typedef __darwin_pthread_once_t pthread_once_t;16int pthread_once(pthread_once_t *, void (*)(void));17typedef long unsigned int __darwin_size_t;18typedef __darwin_size_t size_t;19void *calloc(size_t, size_t);20void *malloc(size_t);21void *realloc(void *, size_t);22void *reallocf(void *, size_t);23void *alloca(size_t);24void *valloc(size_t);25typedef union {26 struct _os_object_s *_os_obj;27 struct dispatch_object_s *_do;28 struct dispatch_continuation_s *_dc;29 struct dispatch_queue_s *_dq;30 struct dispatch_queue_attr_s *_dqa;31 struct dispatch_group_s *_dg;32 struct dispatch_source_s *_ds;33 struct dispatch_source_attr_s *_dsa;34 struct dispatch_semaphore_s *_dsema;35 struct dispatch_data_s *_ddata;36 struct dispatch_io_s *_dchannel;37 struct dispatch_operation_s *_doperation;38 struct dispatch_disk_s *_ddisk;39} dispatch_object_t __attribute__((__transparent_union__));40typedef void (^dispatch_block_t)(void);41typedef struct dispatch_queue_s *dispatch_queue_t;42void dispatch_sync(dispatch_queue_t queue, dispatch_block_t block);43 44typedef long dispatch_once_t;45 46extern47__attribute__((__nonnull__))48__attribute__((__nothrow__))49void dispatch_once(dispatch_once_t *predicate,50 __attribute__((__noescape__)) dispatch_block_t block);51 52// Inlined fast-path dispatch_once defers to the real dispatch_once53// on the slow path.54static55__inline__56__attribute__((__always_inline__))57__attribute__((__nonnull__))58__attribute__((__nothrow__))59void _dispatch_once(dispatch_once_t *predicate,60 __attribute__((__noescape__)) dispatch_block_t block)61{62 if (__builtin_expect((*predicate), (~0l)) != ~0l) {63 dispatch_once(predicate, block);64 } else {65 __asm__ __volatile__("" ::: "memory");66 }67 __builtin_assume(*predicate == ~0l);68}69 70// Macro so that user calls to dispatch_once() call the inlined fast-path71// variant.72#undef dispatch_once73#define dispatch_once _dispatch_once74 75#ifndef O_CREAT76#define O_CREAT 0x020077#define O_RDONLY 0x000078#endif79int open(const char *, int, ...);80int openat(int, const char *, int, ...);81int close(int fildes);82 83void test_open(const char *path) {84 int fd;85 fd = open(path, O_RDONLY); // no-warning86 if (!fd)87 close(fd);88 89 fd = open(path, O_CREAT); // expected-warning{{Call to 'open' requires a 3rd argument when the 'O_CREAT' flag is set}}90 if (!fd)91 close(fd);92} 93 94void test_open_at(int directory_fd, const char *relative_path) {95 int fd;96 fd = openat(directory_fd, relative_path, O_RDONLY); // no-warning97 if (!fd)98 close(fd);99 100 fd = openat(directory_fd, relative_path, O_CREAT); // expected-warning{{Call to 'openat' requires a 4th argument when the 'O_CREAT' flag is set}}101 if (!fd)102 close(fd);103}104 105void test_dispatch_once(void) {106 dispatch_once_t pred = 0;107 do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^(void) {})); } while (0); // expected-warning{{Call to 'dispatch_once' uses the local variable 'pred' for the predicate value}}108}109void test_dispatch_once_neg(void) {110 static dispatch_once_t pred = 0;111 do { if (__builtin_expect(*(&pred), ~0l) != ~0l) dispatch_once((&pred), (^(void) {})); } while (0); // no-warning112}113 114void test_pthread_once_aux(void);115 116void test_pthread_once(void) {117 pthread_once_t pred = {0x30B1BCBA, {0}};118 pthread_once(&pred, test_pthread_once_aux); // expected-warning{{Call to 'pthread_once' uses the local variable 'pred' for the "control" value}}119}120void test_pthread_once_neg(void) {121 static pthread_once_t pred = {0x30B1BCBA, {0}};122 pthread_once(&pred, test_pthread_once_aux); // no-warning123}124 125// PR 2899 - warn of zero-sized allocations to malloc().126void pr2899(void) {127 char* foo = malloc(0); // expected-warning{{Call to 'malloc' has an allocation size of 0 bytes}}128 for (unsigned i = 0; i < 100; i++) {129 foo[i] = 0;130 }131}132void pr2899_nowarn(size_t size) {133 char* foo = malloc(size); // no-warning134 for (unsigned i = 0; i < 100; i++) {135 foo[i] = 0;136 }137}138void test_calloc(void) {139 char *foo = calloc(0, 42); // expected-warning{{Call to 'calloc' has an allocation size of 0 bytes}}140 for (unsigned i = 0; i < 100; i++) {141 foo[i] = 0;142 }143}144void test_calloc2(void) {145 char *foo = calloc(42, 0); // expected-warning{{Call to 'calloc' has an allocation size of 0 bytes}}146 for (unsigned i = 0; i < 100; i++) {147 foo[i] = 0;148 }149}150void test_calloc_nowarn(size_t nmemb, size_t size) {151 char *foo = calloc(nmemb, size); // no-warning152 for (unsigned i = 0; i < 100; i++) {153 foo[i] = 0;154 }155}156void test_realloc(char *ptr) {157 char *foo = realloc(ptr, 0); // expected-warning{{Call to 'realloc' has an allocation size of 0 bytes}}158 for (unsigned i = 0; i < 100; i++) {159 foo[i] = 0;160 }161}162void test_reallocf(char *ptr) {163 char *foo = reallocf(ptr, 0); // expected-warning{{Call to 'reallocf' has an allocation size of 0 bytes}}164 for (unsigned i = 0; i < 100; i++) {165 foo[i] = 0;166 }167}168void test_realloc_nowarn(char *ptr, size_t size) {169 char *foo = realloc(ptr, size); // no-warning170 for (unsigned i = 0; i < 100; i++) {171 foo[i] = 0;172 }173}174void test_reallocf_nowarn(char *ptr, size_t size) {175 char *foo = reallocf(ptr, size); // no-warning176 for (unsigned i = 0; i < 100; i++) {177 foo[i] = 0;178 }179}180void test_alloca(void) {181 char *foo = alloca(0); // expected-warning{{Call to 'alloca' has an allocation size of 0 bytes}}182 for(unsigned i = 0; i < 100; i++) {183 foo[i] = 0; 184 }185}186void test_alloca_nowarn(size_t sz) {187 char *foo = alloca(sz); // no-warning188 for(unsigned i = 0; i < 100; i++) {189 foo[i] = 0;190 }191}192void test_builtin_alloca(void) {193 char *foo2 = __builtin_alloca(0); // expected-warning{{Call to 'alloca' has an allocation size of 0 bytes}}194 for(unsigned i = 0; i < 100; i++) {195 foo2[i] = 0; 196 }197}198void test_builtin_alloca_nowarn(size_t sz) {199 char *foo2 = __builtin_alloca(sz); // no-warning200 for(unsigned i = 0; i < 100; i++) {201 foo2[i] = 0;202 }203}204void test_valloc(void) {205 char *foo = valloc(0); // expected-warning{{Call to 'valloc' has an allocation size of 0 bytes}}206 for(unsigned i = 0; i < 100; i++) {207 foo[i] = 0; 208 }209}210void test_valloc_nowarn(size_t sz) {211 char *foo = valloc(sz); // no-warning212 for(unsigned i = 0; i < 100; i++) {213 foo[i] = 0;214 }215}216 217void test_dispatch_once_in_macro(void) {218 dispatch_once_t pred = 0;219 dispatch_once(&pred, ^(void){}); // expected-warning {{Call to 'dispatch_once' uses the local variable 'pred' for the predicate value}}220}221 222// Test inlining of dispatch_sync.223void test_dispatch_sync(dispatch_queue_t queue, int *q) {224 int *p = 0;225 dispatch_sync(queue, ^(void){ 226 if (q) {227 *p = 1; // expected-warning {{null pointer}}228 }229 });230}231 232// Test inlining of dispatch_once.233void test_inline_dispatch_once(void) {234 static dispatch_once_t pred;235 int *p = 0;236 dispatch_once(&pred, ^(void) {237 *p = 1; // expected-warning {{null}}238 });239}240 241// Make sure code after call to dispatch once is reached.242void test_inline_dispatch_once_reachable(void) {243 static dispatch_once_t pred;244 __block int *p;245 dispatch_once(&pred, ^(void) {246 p = 0;247 });248 249 *p = 7; // expected-warning {{Dereference of null pointer (loaded from variable 'p')}}250}251