2e7b95e4c0
The commit adds serialization and de-serialization implementations for the stored regions. Basically, the serialized representation of the regions of a PP is a (ordered) sequence of source location encodings. For de-serialization, regions from loaded files are stored by their ASTs. When later one queries if a loaded location L is in an opt-out region, PP looks up the regions of the loaded AST where L is at. (Background if helps: a pair of `#pragma clang unsafe_buffer_usage begin/end` pragmas marks a warning-opt-out region. The begin and end locations (opt-out regions) are stored in preprocessor instances (PP) and will be queried by the `-Wunsafe-buffer-usage` analyzer.) The reported issue at upstream: https://github.com/llvm/llvm-project/issues/90501 rdar://124035402
152 lines
5.7 KiB
C++
152 lines
5.7 KiB
C++
// RUN: rm -rf %t
|
|
// RUN: mkdir -p %t
|
|
// RUN: split-file %s %t
|
|
|
|
// RUN: %clang_cc1 -fmodules -fimplicit-module-maps -emit-module -fmodule-name=safe_buffers_test_base -x c++ %t/safe_buffers_test.modulemap -std=c++20\
|
|
// RUN: -o %t/safe_buffers_test_base.pcm -Wunsafe-buffer-usage
|
|
// RUN: %clang_cc1 -fmodules -fimplicit-module-maps -emit-module -fmodule-name=safe_buffers_test_textual -x c++ %t/safe_buffers_test.modulemap -std=c++20\
|
|
// RUN: -o %t/safe_buffers_test_textual.pcm -Wunsafe-buffer-usage
|
|
// RUN: %clang_cc1 -fmodules -fimplicit-module-maps -emit-module -fmodule-name=safe_buffers_test_optout -x c++ %t/safe_buffers_test.modulemap -std=c++20\
|
|
// RUN: -fmodule-file=%t/safe_buffers_test_base.pcm -fmodule-file=%t/safe_buffers_test_textual.pcm \
|
|
// RUN: -o %t/safe_buffers_test_optout.pcm -Wunsafe-buffer-usage
|
|
// RUN: %clang_cc1 -fmodules -fimplicit-module-maps -fmodule-file=%t/safe_buffers_test_optout.pcm -I %t -std=c++20 -Wunsafe-buffer-usage\
|
|
// RUN: -verify %t/safe_buffers_optout-explicit.cpp
|
|
|
|
|
|
// RUN: %clang_cc1 -fmodules -fimplicit-module-maps -verify -fmodules-cache-path=%t -fmodule-map-file=%t/safe_buffers_test.modulemap -I%t\
|
|
// RUN: -x c++ -std=c++20 -Wunsafe-buffer-usage %t/safe_buffers_optout-implicit.cpp
|
|
|
|
//--- safe_buffers_test.modulemap
|
|
module safe_buffers_test_base {
|
|
header "base.h"
|
|
}
|
|
|
|
module safe_buffers_test_textual {
|
|
textual header "textual.h"
|
|
}
|
|
|
|
module safe_buffers_test_optout {
|
|
explicit module test_sub1 { header "test_sub1.h" }
|
|
explicit module test_sub2 { header "test_sub2.h" }
|
|
use safe_buffers_test_base
|
|
}
|
|
|
|
//--- base.h
|
|
#ifdef __cplusplus
|
|
int base(int *p) {
|
|
int x = p[5];
|
|
#pragma clang unsafe_buffer_usage begin
|
|
int y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
return x + y;
|
|
}
|
|
#endif
|
|
|
|
//--- test_sub1.h
|
|
#include "base.h"
|
|
|
|
#ifdef __cplusplus
|
|
int sub1(int *p) {
|
|
int x = p[5];
|
|
#pragma clang unsafe_buffer_usage begin
|
|
int y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
return x + y + base(p);
|
|
}
|
|
|
|
template <typename T>
|
|
T sub1_T(T *p) {
|
|
T x = p[5];
|
|
#pragma clang unsafe_buffer_usage begin
|
|
T y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
return x + y;
|
|
}
|
|
#endif
|
|
|
|
//--- test_sub2.h
|
|
#include "base.h"
|
|
|
|
#ifdef __cplusplus
|
|
int sub2(int *p) {
|
|
int x = p[5];
|
|
#pragma clang unsafe_buffer_usage begin
|
|
int y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
return x + y + base(p);
|
|
}
|
|
#endif
|
|
|
|
//--- textual.h
|
|
#ifdef __cplusplus
|
|
int textual(int *p) {
|
|
int x = p[5];
|
|
int y = p[5];
|
|
return x + y;
|
|
}
|
|
#endif
|
|
|
|
//--- safe_buffers_optout-explicit.cpp
|
|
#include "test_sub1.h"
|
|
#include "test_sub2.h"
|
|
|
|
// Testing safe buffers opt-out region serialization with modules: this
|
|
// file loads 2 submodules from top-level module
|
|
// `safe_buffers_test_optout`, which uses another top-level module
|
|
// `safe_buffers_test_base`. (So the module dependencies form a DAG.)
|
|
|
|
// No expected warnings from base.h because base.h is a separate
|
|
// module and in a separate TU that is not textually included. The
|
|
// explicit command that builds base.h has no `-Wunsafe-buffer-usage`.
|
|
|
|
// expected-warning@base.h:3{{unsafe buffer access}}
|
|
// expected-note@base.h:3{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub1.h:5{{unsafe buffer access}}
|
|
// expected-note@test_sub1.h:5{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub1.h:14{{unsafe buffer access}}
|
|
// expected-note@test_sub1.h:14{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub2.h:5{{unsafe buffer access}}
|
|
// expected-note@test_sub2.h:5{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
int foo(int * p) {
|
|
int x = p[5]; // expected-warning{{unsafe buffer access}} expected-note{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
#pragma clang unsafe_buffer_usage begin
|
|
int y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
sub1_T(p); // instantiate template
|
|
return sub1(p) + sub2(p);
|
|
}
|
|
|
|
#pragma clang unsafe_buffer_usage begin
|
|
#include "textual.h" // This header is textually included (i.e., it is in the same TU as %s), so warnings are suppressed
|
|
#pragma clang unsafe_buffer_usage end
|
|
|
|
//--- safe_buffers_optout-implicit.cpp
|
|
#include "test_sub1.h"
|
|
#include "test_sub2.h"
|
|
|
|
// Testing safe buffers opt-out region serialization with modules: this
|
|
// file loads 2 submodules from top-level module
|
|
// `safe_buffers_test_optout`, which uses another top-level module
|
|
// `safe_buffers_test_base`. (So the module dependencies form a DAG.)
|
|
|
|
// expected-warning@base.h:3{{unsafe buffer access}}
|
|
// expected-note@base.h:3{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub1.h:5{{unsafe buffer access}}
|
|
// expected-note@test_sub1.h:5{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub1.h:14{{unsafe buffer access}}
|
|
// expected-note@test_sub1.h:14{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
// expected-warning@test_sub2.h:5{{unsafe buffer access}}
|
|
// expected-note@test_sub2.h:5{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
int foo(int * p) {
|
|
int x = p[5]; // expected-warning{{unsafe buffer access}} expected-note{{pass -fsafe-buffer-usage-suggestions to receive code hardening suggestions}}
|
|
#pragma clang unsafe_buffer_usage begin
|
|
int y = p[5];
|
|
#pragma clang unsafe_buffer_usage end
|
|
sub1_T(p); // instantiate template
|
|
return sub1(p) + sub2(p);
|
|
}
|
|
|
|
#pragma clang unsafe_buffer_usage begin
|
|
#include "textual.h" // This header is textually included (i.e., it is in the same TU as %s), so warnings are suppressed
|
|
#pragma clang unsafe_buffer_usage end
|