1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
#include <stdbool.h>
#include <stdlib.h>
// A function defining an assignable target
void foo_assigns(char *ptr, const size_t size)
{
__CPROVER_object_upto(ptr, size);
// an unauthorized side effect that must be detected
if(ptr && size > 0)
ptr[0] = 0;
}
// A function defining an freeable target
void foo_frees(char *ptr, const size_t size)
{
__CPROVER_freeable(ptr);
// an unauthorized side effect that must be detected
if(ptr && size > 0)
ptr[0] = 0;
}
char *foo(char *ptr, const size_t size, const size_t new_size)
// clang-format off
__CPROVER_requires(__CPROVER_is_fresh(ptr, size))
__CPROVER_assigns(foo_assigns(ptr, size))
__CPROVER_frees(foo_frees(ptr, size))
// clang-format on
{
if(ptr && new_size > size)
{
free(ptr);
ptr = malloc(new_size);
return ptr;
}
else
{
if(size > 0)
{
ptr[0] = 0;
}
return ptr;
}
}
int main()
{
size_t size;
size_t new_size;
char *ptr;
ptr = foo(ptr, size, new_size);
return 0;
}
|
