File: Wuse-after-free-3.c

package info (click to toggle)
gcc-arm-none-eabi 15%3A12.2.rel1-1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 959,712 kB
  • sloc: cpp: 3,275,382; ansic: 2,061,766; ada: 840,956; f90: 208,513; makefile: 76,132; asm: 73,433; xml: 50,448; exp: 34,146; sh: 32,436; objc: 15,637; fortran: 14,012; python: 11,991; pascal: 6,787; awk: 4,779; perl: 3,054; yacc: 338; ml: 285; lex: 201; haskell: 122
file content (83 lines) | stat: -rw-r--r-- 1,646 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
/* Exercise -Wuse-after-free with user-defined deallocators.
   { dg-do compile }
   { dg-options "-O0 -Wall" } */

typedef __SIZE_TYPE__ size_t;

#if __cplusplus
#  define EXTERN_C extern "C"
#else
#  define EXTERN_C extern
#endif

#define A(...) __attribute__ ((malloc (__VA_ARGS__)))

EXTERN_C void free (void *);
EXTERN_C void* realloc (void *, size_t);

typedef struct List { struct List *next; } List;

// User-defined allocator/deallocator just like like realloc and free.
extern                     void  list_free (List *);
extern                     List* list_realloc (size_t, List *);
extern A (list_realloc, 2) List* list_realloc (size_t, List *);
extern A (list_free, 1)    List* list_realloc (size_t, List *);


void sink (void *);

extern int ei;
extern List *elp, *elpa[];

void nowarn_list_free (struct List *lp)
{
  {
    list_free (lp);
    lp = 0;
    sink (lp);
  }
  {
    list_free (elp);
    elp = 0;
    sink (elp);
  }
  {
    list_free (elpa[0]);
    elpa[0] = 0;
    sink (elpa[0]);
  }
  {
    void *vp = elpa[0];
    list_free (elpa[0]);
    sink (vp);
  }
  {
    List *p = elpa[1];
    if (ei & 1)
      list_free (p);
    if (ei & 2)
      sink (p);
  }
  {
    struct List *next = lp->next;
    list_free (lp);
    list_free (next);
  }
}


void nowarn_list_free_list (List *head)
{
  for (List *p = head, *q; p; p = q)
    {
      q = p->next;
      list_free (p);
    }
}

void warn_list_free_list (List *head)
{
  List *p = head;
  for (; p; p = p->next)      // { dg-warning "\\\[-Wuse-after-free" }
    list_free (p);            // { dg-message "call to '\(void \)?list_free\(\\(List\\*\\)\)?'" "note" }
}