166 lines · c
1// RUN: %clang_analyze_cc1 -triple hexagon-unknown-linux -analyzer-checker=core,security.VAList -analyzer-output=text -verify %s2// RUN: %clang_analyze_cc1 -triple x86_64-pc-linux-gnu -analyzer-checker=core,security.VAList -analyzer-output=text -verify %s3 4#include "Inputs/system-header-simulator-for-valist.h"5 6void f1(int fst, ...) {7 va_list va;8 va_start(va, fst); // expected-note{{Initialized va_list}}9 return; // expected-warning{{Initialized va_list 'va' is leaked}}10 // expected-note@-1{{Initialized va_list 'va' is leaked}}11}12 13void f2(int fst, ...) {14 va_list va;15 va_start(va, fst); // expected-note{{Initialized va_list}}16 va_end(va); // expected-note{{Ended va_list}}17 va_start(va, fst); // expected-note{{Initialized va_list}}18} // expected-warning{{Initialized va_list 'va' is leaked}}19 // expected-note@-1{{Initialized va_list 'va' is leaked}}20 21void f3(int fst, ...) {22 va_list va, va2;23 va_start(va, fst);24 va_copy(va2, va); // expected-note{{Initialized va_list}}25 va_end(va); // expected-warning{{Initialized va_list 'va2' is leaked}}26 // expected-note@-1{{Initialized va_list 'va2' is leaked}}27}28 29void f4(va_list *fst, ...) {30 va_start(*fst, fst); // expected-note{{Initialized va_list}}31 return; // expected-warning{{Initialized va_list is leaked}}32 // expected-note@-1{{Initialized va_list is leaked}}33}34 35void f5(va_list fst, ...) {36 va_start(fst, fst); // expected-note{{Initialized va_list}}37} // expected-warning{{Initialized va_list}}38 // expected-note@-1{{Initialized va_list}}39 40void f6(va_list *fst, ...) {41 va_start(*fst, fst); // expected-note{{Initialized va_list}}42 (void)va_arg(*fst, int);43 //FIXME: this should NOT cause a warning44 va_end(*fst); // expected-warning{{Initialized va_list is leaked}}45 // expected-note@-1{{Initialized va_list is leaked}}46}47 48void f7(int *fst, ...) {49 va_list x;50 va_list *y = &x;51 va_start(*y,fst); // expected-note{{Initialized va_list}}52} // expected-warning{{Initialized va_list 'x' is leaked}}53 // expected-note@-1{{Initialized va_list 'x' is leaked}}54 55void f8(int *fst, ...) {56 va_list x;57 va_list *y = &x;58 va_start(*y,fst);59 va_end(x);60} // no-warning 61 62void reinit(int *fst, ...) {63 va_list va;64 va_start(va, fst); // expected-note{{Initialized va_list}}65 // expected-note@-1{{Initialized va_list}}66 va_start(va, fst); // expected-warning{{Initialized va_list 'va' is initialized again}}67 // expected-note@-1{{Initialized va_list 'va' is initialized again}}68} // expected-warning{{Initialized va_list 'va' is leaked}}69 // expected-note@-1{{Initialized va_list 'va' is leaked}}70 71void reinitOk(int *fst, ...) {72 va_list va;73 va_start(va, fst);74 va_end(va);75 va_start(va, fst);76 va_end(va);77} // no-warning78 79void copyself(int fst, ...) {80 va_list va;81 va_start(va, fst); // expected-note{{Initialized va_list}}82 va_copy(va, va); // expected-warning{{va_list 'va' is copied onto itself}}83 // expected-note@-1{{va_list 'va' is copied onto itself}}84 va_end(va);85}86 87void copyselfUninit(int fst, ...) {88 va_list va;89 va_copy(va, va); // expected-warning{{va_list 'va' is copied onto itself}}90 // expected-note@-1{{va_list 'va' is copied onto itself}}91}92 93void copyOverwrite(int fst, ...) {94 va_list va, va2;95 va_start(va, fst); // expected-note{{Initialized va_list}}96 va_copy(va, va2); // expected-warning{{Initialized va_list 'va' is overwritten by an uninitialized one}}97 // expected-note@-1{{Initialized va_list 'va' is overwritten by an uninitialized one}}98}99 100void copyOverwriteUnknown(va_list other, int fst, ...) {101 va_list va;102 va_start(va, fst); // expected-note{{Initialized va_list}}103 va_copy(va, other); // expected-warning{{Initialized va_list 'va' is overwritten by an unknown one}}104 // expected-note@-1{{Initialized va_list 'va' is overwritten by an unknown one}}105}106 107void copyOverwriteReleased(int fst, ...) {108 va_list va, va2;109 va_start(va2, fst);110 va_end(va2);111 va_start(va, fst); // expected-note{{Initialized va_list}}112 va_copy(va, va2); // expected-warning{{Initialized va_list 'va' is overwritten by an already released one}}113 // expected-note@-1{{Initialized va_list 'va' is overwritten by an already released one}}114}115 116void recopy(int fst, ...) {117 va_list va, va2;118 va_start(va, fst);119 va_copy(va2, va); // expected-note{{Initialized va_list}}120 va_copy(va2, va); // expected-warning{{Initialized va_list 'va2' is overwritten by another initialized one}}121 // expected-note@-1{{Initialized va_list 'va2' is overwritten by another initialized one}}122 va_end(va);123 va_end(va2);124}125 126void doublemsg(int fst, ...) {127 va_list va, va2;128 va_start(va, fst), va_start(va2, fst); // expected-warning{{Initialized va_list 'va' is leaked}}129 // expected-warning@-1{{Initialized va_list 'va2' is leaked}}130 // expected-note@-2{{Initialized va_list}}131 // expected-note@-3{{Initialized va_list}}132 // expected-note@-4{{Initialized va_list}}133 // expected-note@-5{{Initialized va_list 'va' is leaked}} 134} 135 136void in_array(int fst, ...) {137 va_list va_array[8];138 va_start(va_array[3], fst); // expected-note{{Initialized va_list}}139} // expected-warning{{Initialized va_list 'va_array[3]' is leaked}}140 // expected-note@-1{{Initialized va_list 'va_array[3]' is leaked}}141 142struct containing_a_valist {143 va_list vafield;144 int foobar;145};146 147void in_struct(int fst, ...) {148 struct containing_a_valist s;149 va_start(s.vafield, fst); // expected-note{{Initialized va_list}}150} // expected-warning{{Initialized va_list 's.vafield' is leaked}}151 // expected-note@-1{{Initialized va_list 's.vafield' is leaked}}152 153void casting(int fst, ...) {154 char mem[sizeof(va_list)];155 va_start(*(va_list *) mem, fst); // expected-note{{Initialized va_list}}156} // expected-warning{{Initialized va_list 'mem[0]' is leaked}}157 // expected-note@-1{{Initialized va_list 'mem[0]' is leaked}}158 159 160void castingOk(int fst, ...) {161 char mem[sizeof(va_list)];162 va_start(*(va_list *) mem, fst);163 va_end(*(va_list *) mem);164} // no-warning165 166