partial fix for #2960 (false negative: buffer access out of bounds)
This commit is contained in:
parent
40009d091d
commit
3f517b5f23
|
@ -1511,7 +1511,7 @@ void CheckBufferOverrun::checkStructVariable()
|
|||
if (func_scope->type != Scope::eFunction)
|
||||
continue;
|
||||
|
||||
// is this a member function of this class/struct?
|
||||
// check for member variables
|
||||
if (func_scope->functionOf == &*scope)
|
||||
{
|
||||
// only check non-empty function
|
||||
|
@ -1523,9 +1523,6 @@ void CheckBufferOverrun::checkStructVariable()
|
|||
}
|
||||
}
|
||||
|
||||
// not a member function of this class/struct
|
||||
else
|
||||
{
|
||||
// skip inner scopes..
|
||||
/** @todo false negatives: handle inner scopes someday */
|
||||
if (scope->nestedIn->isClassOrStruct())
|
||||
|
@ -1650,7 +1647,6 @@ void CheckBufferOverrun::checkStructVariable()
|
|||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
//---------------------------------------------------------------------------
|
||||
|
||||
|
|
|
@ -112,6 +112,7 @@ private:
|
|||
TEST_CASE(array_index_33); // ticket #3044
|
||||
TEST_CASE(array_index_34); // ticket #3063
|
||||
TEST_CASE(array_index_35); // ticket #2889
|
||||
TEST_CASE(array_index_36); // ticket #2960
|
||||
TEST_CASE(array_index_multidim);
|
||||
TEST_CASE(array_index_switch_in_for);
|
||||
TEST_CASE(array_index_for_in_for); // FP: #2634
|
||||
|
@ -1281,6 +1282,20 @@ private:
|
|||
ASSERT_EQUALS("", errout.str());
|
||||
}
|
||||
|
||||
void array_index_36() // ticket #2960
|
||||
{
|
||||
check("class Fred {\n"
|
||||
" Fred(const Fred &);\n"
|
||||
"private:\n"
|
||||
" bool m_b[2];\n"
|
||||
"};\n"
|
||||
"Fred::Fred(const Fred & rhs) {\n"
|
||||
" m_b[2] = rhs.m_b[2];\n"
|
||||
"}\n");
|
||||
ASSERT_EQUALS("[test.cpp:7]: (error) Array 'm_b[2]' index 2 out of bounds\n"
|
||||
"[test.cpp:7]: (error) Array 'rhs.m_b[2]' index 2 out of bounds\n", errout.str());
|
||||
}
|
||||
|
||||
void array_index_multidim()
|
||||
{
|
||||
check("void f()\n"
|
||||
|
|
Loading…
Reference in New Issue