1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
// RUN: %clang_analyze_cc1 -verify %s \
// RUN: -analyzer-checker=alpha.unix.cstring.BufferOverlap
//
// RUN: %clang_analyze_cc1 -verify %s -DUSE_BUILTINS \
// RUN: -analyzer-checker=alpha.unix.cstring.BufferOverlap
//
// RUN: %clang_analyze_cc1 -verify %s -DVARIANT \
// RUN: -analyzer-checker=alpha.unix.cstring.BufferOverlap
//
// RUN: %clang_analyze_cc1 -verify %s -DVARIANT -DUSE_BUILTINS \
// RUN: -analyzer-checker=alpha.unix.cstring.BufferOverlap
// This provides us with four possible sprintf() definitions.
#ifdef USE_BUILTINS
#define BUILTIN(f) __builtin_##f
#else /* USE_BUILTINS */
#define BUILTIN(f) f
#endif /* USE_BUILTINS */
typedef typeof(sizeof(int)) size_t;
#ifdef VARIANT
#define __sprintf_chk BUILTIN(__sprintf_chk)
#define __snprintf_chk BUILTIN(__snprintf_chk)
int __sprintf_chk (char * __restrict str, int flag, size_t os,
const char * __restrict fmt, ...);
int __snprintf_chk (char * __restrict str, size_t len, int flag, size_t os,
const char * __restrict fmt, ...);
#define sprintf(str, ...) __sprintf_chk(str, 0, __builtin_object_size(str, 0), __VA_ARGS__)
#define snprintf(str, len, ...) __snprintf_chk(str, len, 0, __builtin_object_size(str, 0), __VA_ARGS__)
#else /* VARIANT */
#define sprintf BUILTIN(sprintf)
int sprintf(char *restrict buffer, const char *restrict format, ... );
int snprintf(char *restrict buffer, size_t bufsz,
const char *restrict format, ... );
#endif /* VARIANT */
void test_sprintf1() {
char a[4] = {0};
sprintf(a, "%d/%s", 1, a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_sprintf2() {
char a[4] = {0};
sprintf(a, "%s", a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_sprintf3() {
char a[4] = {0};
sprintf(a, "%s/%s", a, a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_sprintf4() {
char a[4] = {0};
sprintf(a, "%d", 42); // no-warning
}
void test_sprintf5() {
char a[4] = {0};
char b[4] = {0};
sprintf(a, "%s", b); // no-warning
}
void test_snprintf1() {
char a[4] = {0};
snprintf(a, sizeof(a), "%d/%s", 1, a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_snprintf2() {
char a[4] = {0};
snprintf(a+1, sizeof(a)-1, "%d/%s", 1, a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_snprintf3() {
char a[4] = {0};
snprintf(a, sizeof(a), "%s", a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_snprintf4() {
char a[4] = {0};
snprintf(a, sizeof(a), "%s/%s", a, a); // expected-warning{{Arguments must not be overlapping buffers}}
}
void test_snprintf5() {
char a[4] = {0};
snprintf(a, sizeof(a), "%d", 42); // no-warning
}
void test_snprintf6() {
char a[4] = {0};
char b[4] = {0};
snprintf(a, sizeof(a), "%s", b); // no-warning
}
|
