968c60a554
New rules of invalidation/escape of the source buffer of memcpy: the source buffer contents is invalidated and escape while the source buffer region itself is neither invalidated, nor escape.
In the current modeling of memcpy the information about allocation state of regions, accessible through the source buffer, is not copied to the destination buffer and we can not track the allocation state of those regions anymore. So we invalidate/escape the source buffer indirect regions in anticipation of their being invalidated for real later. This eliminates false-positive leaks reported by the unix.Malloc and alpha.cplusplus.NewDeleteLeaks checkers for the cases like
char *f() {
void *x = malloc(47);
char *a;
memcpy(&a, &x, sizeof a);
return a;
}
llvm-svn: 194953
89 lines
3.0 KiB
C
89 lines
3.0 KiB
C
// Like the compiler, the static analyzer treats some functions differently if
|
|
// they come from a system header -- for example, it is assumed that system
|
|
// functions do not arbitrarily free() their parameters, and that some bugs
|
|
// found in system headers cannot be fixed by the user and should be
|
|
// suppressed.
|
|
#pragma clang system_header
|
|
|
|
#ifdef __cplusplus
|
|
#define restrict /*restrict*/
|
|
#endif
|
|
|
|
typedef struct _FILE FILE;
|
|
extern FILE *stdin;
|
|
extern FILE *stdout;
|
|
extern FILE *stderr;
|
|
// Include a variant of standard streams that occur in the pre-processed file.
|
|
extern FILE *__stdinp;
|
|
extern FILE *__stdoutp;
|
|
extern FILE *__stderrp;
|
|
|
|
int scanf(const char *restrict format, ...);
|
|
int fscanf(FILE *restrict, const char *restrict, ...);
|
|
int printf(const char *restrict format, ...);
|
|
int fprintf(FILE *restrict, const char *restrict, ...);
|
|
int getchar(void);
|
|
|
|
// Note, on some platforms errno macro gets replaced with a function call.
|
|
extern int errno;
|
|
|
|
typedef __typeof(sizeof(int)) size_t;
|
|
|
|
size_t strlen(const char *);
|
|
|
|
char *strcpy(char *restrict, const char *restrict);
|
|
void *memcpy(void *dst, const void *src, size_t n);
|
|
|
|
typedef unsigned long __darwin_pthread_key_t;
|
|
typedef __darwin_pthread_key_t pthread_key_t;
|
|
int pthread_setspecific(pthread_key_t, const void *);
|
|
|
|
typedef long long __int64_t;
|
|
typedef __int64_t __darwin_off_t;
|
|
typedef __darwin_off_t fpos_t;
|
|
|
|
void setbuf(FILE * restrict, char * restrict);
|
|
int setvbuf(FILE * restrict, char * restrict, int, size_t);
|
|
|
|
FILE *fopen(const char * restrict, const char * restrict);
|
|
int fclose(FILE *);
|
|
FILE *funopen(const void *,
|
|
int (*)(void *, char *, int),
|
|
int (*)(void *, const char *, int),
|
|
fpos_t (*)(void *, fpos_t, int),
|
|
int (*)(void *));
|
|
|
|
int sqlite3_bind_text_my(int, const char*, int n, void(*)(void*));
|
|
|
|
typedef void (*freeCallback) (void*);
|
|
typedef struct {
|
|
int i;
|
|
freeCallback fc;
|
|
} StWithCallback;
|
|
|
|
int dealocateMemWhenDoneByVal(void*, StWithCallback);
|
|
int dealocateMemWhenDoneByRef(StWithCallback*, const void*);
|
|
|
|
typedef struct CGContext *CGContextRef;
|
|
CGContextRef CGBitmapContextCreate(void *data/*, size_t width, size_t height,
|
|
size_t bitsPerComponent, size_t bytesPerRow,
|
|
CGColorSpaceRef space,
|
|
CGBitmapInfo bitmapInfo*/);
|
|
void *CGBitmapContextGetData(CGContextRef context);
|
|
|
|
// Include xpc.
|
|
typedef struct _xpc_connection_s * xpc_connection_t;
|
|
typedef void (*xpc_finalizer_t)(void *value);
|
|
void xpc_connection_set_context(xpc_connection_t connection, void *context);
|
|
void xpc_connection_set_finalizer_f(xpc_connection_t connection, xpc_finalizer_t finalizer);
|
|
void xpc_connection_resume(xpc_connection_t connection);
|
|
|
|
//The following are fake system header functions for generic testing.
|
|
void fakeSystemHeaderCallInt(int *);
|
|
void fakeSystemHeaderCallIntPtr(int **);
|
|
|
|
typedef struct __SomeStruct {
|
|
char * p;
|
|
} SomeStruct;
|
|
void fakeSystemHeaderCall(SomeStruct *);
|