teak-llvm/clang/test/Analysis/malloc-three-arg.c
Jordan Rose 6b33c6f234 [analyzer] Handle the M_ZERO and __GFP_ZERO flags in kernel mallocs.
Add M_ZERO awareness to malloc() static analysis in Clang for FreeBSD,
NetBSD, and OpenBSD in a similar fashion to O_CREAT for open(2).
These systems have a three-argument malloc() in the kernel where the
third argument contains flags; the M_ZERO flag will zero-initialize the
allocated buffer.

This should reduce the number of false positives when running static
analysis on BSD kernels.

Additionally, add kmalloc() (Linux kernel malloc()) and treat __GFP_ZERO
like M_ZERO on Linux.

Future work involves a better method of checking for named flags without
hardcoding values.

Patch by Conrad Meyer, with minor modifications by me.

llvm-svn: 204832
2014-03-26 17:05:46 +00:00

59 lines
983 B
C

// RUN: %clang -target x86_64-unknown-freebsd --analyze %s
#include "Inputs/system-header-simulator.h"
#define M_ZERO 0x0100
#define NULL ((void *)0)
void *malloc(size_t, void *, int);
struct test {
};
void foo(struct test *);
void test_zeroed() {
struct test **list, *t;
int i;
list = malloc(sizeof(*list) * 10, NULL, M_ZERO);
if (list == NULL)
return;
for (i = 0; i < 10; i++) {
t = list[i];
foo(t);
}
free(list); // no-warning
}
void test_nonzero() {
struct test **list, *t;
int i;
list = malloc(sizeof(*list) * 10, NULL, 0);
if (list == NULL)
return;
for (i = 0; i < 10; i++) {
t = list[i]; // expected-warning{{undefined}}
foo(t);
}
free(list);
}
void test_indeterminate(int flags) {
struct test **list, *t;
int i;
list = malloc(sizeof(*list) * 10, NULL, flags);
if (list == NULL)
return;
for (i = 0; i < 10; i++) {
t = list[i]; // expected-warning{{undefined}}
foo(t);
}
free(list);
}