Daniel Marjamäki
|
5789eb116d
|
astyle formatting
|
2010-06-02 18:09:25 +02:00 |
Zachary Blair
|
33b4254d33
|
Fixed #568 (string functions with command line arguments may overflow buffer)
|
2010-06-01 22:41:07 -07:00 |
Daniel Marjamäki
|
7601089bee
|
astyle formatting
|
2010-05-29 11:19:56 +02:00 |
Zachary Blair
|
59086fa599
|
Fixed #818 (Detect sprintf buffer overrun with struct members)
|
2010-05-28 22:51:28 -07:00 |
Daniel Marjamäki
|
d23f63c805
|
astyle formatting
|
2010-05-26 19:21:34 +02:00 |
Zachary Blair
|
619cfbc56f
|
Fixed #168 (buffer overflow: not enough room for the null terminator)
|
2010-05-26 01:56:34 -07:00 |
Daniel Marjamäki
|
c31accc52a
|
Fixed #1695 (Ticket #1614 is broken using latest from git)
|
2010-05-19 19:23:09 +02:00 |
Daniel Marjamäki
|
f8442391af
|
astyle formatting
|
2010-05-17 19:51:35 +02:00 |
Monika Lukow
|
71e5c56bf9
|
Fixed #1418 (false negative: buffer access out of bounds)
|
2010-05-16 23:53:42 +02:00 |
Daniel Marjamäki
|
01034cd48d
|
Refactoring: Removed 'possible error' message about cin
|
2010-05-16 19:09:36 +02:00 |
Daniel Marjamäki
|
26fab24de4
|
Refactoring: Removed some inconclusive checking in CheckBufferOverrun
|
2010-05-16 15:30:39 +02:00 |
Daniel Marjamäki
|
0415560912
|
refactoring: changed the severity for strncatUsage from possibleError to style
|
2010-05-02 09:54:08 +02:00 |
Daniel Marjamäki
|
883d462553
|
refactoring: Use style severity instead of possible error for the 'The size argument is given as a char constant'
|
2010-05-02 09:16:45 +02:00 |
Daniel Marjamäki
|
0444ff5298
|
Fixed #1627 (###### If you see this, there is a bug ###### - Token::Match('%varid% [ %num% ]', 0))
|
2010-04-26 18:52:40 +02:00 |
Daniel Marjamäki
|
1a34e7daf6
|
Fixed #948 (array index out of bound not detected 'a[i-1] = 0')
|
2010-04-25 07:34:50 +02:00 |
Daniel Marjamäki
|
8ccd95a643
|
Fixed #836 (buffer overrun: memmove)
|
2010-04-24 21:48:58 +02:00 |
Martin Ettl
|
5eb9c78533
|
added further testcases to multidimensional out of bounds unit test
|
2010-04-23 22:04:49 +02:00 |
Martin Ettl
|
bd4bead561
|
update in todo testcase (line number was wrong)
|
2010-04-23 21:59:46 +02:00 |
Martin Ettl
|
572ae0c1b4
|
added todo testcases for multidimensional out of bounds checking
|
2010-04-23 21:56:35 +02:00 |
Daniel Marjamäki
|
a3b781a181
|
Fixed #819 (array index out of bounds not detected for multidimension arrays)
|
2010-04-23 16:26:40 +02:00 |
Daniel Marjamäki
|
b9d8f52cca
|
CheckBufferOverrun: Fixed false positives caused by refactorings
|
2010-04-22 19:22:23 +02:00 |
Daniel Marjamäki
|
f9f6927e63
|
CheckBufferOverrun: Don't give false positives when reading from array with strncpy/strncat
|
2010-04-21 20:02:58 +02:00 |
Daniel Marjamäki
|
f057e127a0
|
CheckBufferOverrun: Refactoring the checking of function calls
|
2010-04-21 19:27:28 +02:00 |
Daniel Marjamäki
|
798aa84151
|
Refactoring: CheckBufferOverrun refactorings. split up the checkScope into two separate functions. The ArrayInfo usage was improved. Also broke out for-loop handling into separate functions.
|
2010-04-21 18:33:21 +02:00 |
Reijo Tomperi
|
96d66af478
|
Change "Array index -1 corresponds with 4294967295..." error message into "Array index -1 is out of bounds"
|
2010-04-20 21:44:31 +03:00 |
Daniel Marjamäki
|
7e2f39290d
|
Fixed #1614 (negative array index issues in latest from git)
|
2010-04-20 16:43:51 +02:00 |
Daniel Marjamäki
|
8eff4fcbba
|
Buffer overruns: Added testcase for negative index when using 2-dimensional array
|
2010-04-18 21:07:21 +02:00 |
Daniel Marjamäki
|
b6ab419a06
|
Buffer Overrun: Broke out the checking for negative array index
|
2010-04-18 20:51:39 +02:00 |
Daniel Marjamäki
|
a473345f18
|
Buffer overruns: First change to detect overruns in multidimensional arrays (#819)
|
2010-04-18 11:08:29 +02:00 |
Daniel Marjamäki
|
6db4ab68ef
|
Unit Testing: added assertions for todo testcases to detect changes
|
2010-04-17 15:01:18 +02:00 |
Daniel Marjamäki
|
c0e9a546f7
|
Refactoring: Refactoring the Settings class
|
2010-04-17 09:23:54 +02:00 |
Reijo Tomperi
|
35d2a27b9c
|
Update copyright year in all source files
|
2010-04-13 22:23:17 +03:00 |
Reijo Tomperi
|
d102369196
|
Fix #1590 (False negative: Array index out of bounds: "0 <= i")
http://sourceforge.net/apps/trac/cppcheck/ticket/1590
|
2010-04-12 22:04:59 +03:00 |
Reijo Tomperi
|
7f7e621ecb
|
More tests added to test/testbufferoverrun.cpp
|
2010-04-11 23:22:16 +03:00 |
Daniel Marjamäki
|
6f74c0af5e
|
Fixed #1587 (Crash while processing file)
|
2010-04-11 20:57:30 +02:00 |
Daniel Marjamäki
|
5fed938f56
|
Fixed #1190 (array index out of bounds when index variable is assigned in a condition)
|
2010-04-10 21:12:00 +02:00 |
Daniel Marjamäki
|
e17cce6ac4
|
Unit Testing: Added an ASSERT
|
2010-04-10 18:54:12 +02:00 |
Daniel Marjamäki
|
15da4fe689
|
Refactoring: simplified test case
|
2010-04-10 18:50:28 +02:00 |
Daniel Marjamäki
|
e9b4ea44a2
|
Refactoring: Disable inconclusive checks. They can still be activated for debugging/testing purposes
|
2010-04-10 14:05:33 +02:00 |
Daniel Marjamäki
|
b4e9185177
|
Fixed #1134 (improve check: pointer access out of bounds not detected (allocated with malloc))
|
2010-04-10 07:57:29 +02:00 |
Daniel Marjamäki
|
9a4707c025
|
Fixed #1576 ('Index out of bounds' false positive)
|
2010-04-08 19:57:38 +02:00 |
Martin Ettl
|
2e11805c1a
|
added TODO testcase for checking fwrite() and fread() check for buffer overrun
|
2010-04-06 20:56:01 +02:00 |
Reijo Tomperi
|
c28b365ea0
|
astyle fix
|
2010-04-06 16:56:06 +03:00 |
Martin Ettl
|
c4d1d47f6b
|
fixed ticket 997, now fread and fwrite checked for bufferoverrun
|
2010-04-06 13:55:03 +02:00 |
Reijo Tomperi
|
928163b0cf
|
Fix line number in previously committed unit test
|
2010-04-05 23:37:30 +03:00 |
Daniel Marjamäki
|
0cffe547f9
|
Unit Testing: Added unit test for untested code in CheckBufferOverrun. Using memset on struct.
|
2010-04-05 21:50:40 +02:00 |
Reijo Tomperi
|
d3c251f53a
|
Refactor and fix "After a strncpy() the buffer should be zero-terminated" checking,
|
2010-04-05 21:47:50 +03:00 |
Daniel Marjamäki
|
6327ed55a2
|
Unit Testing: Buffer overruns when using memchr/memset/memcpy/etc
|
2010-04-05 20:02:28 +02:00 |
Daniel Marjamäki
|
0cad22314e
|
Reverted 'astyle fix'. Those changes are not in sync with my astyle configuration/setup.
|
2010-04-02 07:30:58 +02:00 |
Martin Ettl
|
193aa7d1d3
|
astyle fix
|
2010-04-02 02:21:53 +02:00 |
Reijo Tomperi
|
c7d36b73ed
|
Fix #1548 (False positive: array index out of bounds in for-loop)
http://sourceforge.net/apps/trac/cppcheck/ticket/1548
|
2010-04-01 22:35:36 +03:00 |
Robert Reif
|
32e597e343
|
Fixed #1539 (False positive: possible error Array index out of bounds)
|
2010-03-30 17:33:17 +02:00 |
Robert Reif
|
0bddd1977f
|
Fixed #1536 (###### If you see this, there is a bug ###### Token::Match() - varid was 0)
|
2010-03-29 17:25:38 +02:00 |
Robert Reif
|
62d2845014
|
Fixed #1492 (false negatives: array index out of bounds)
|
2010-03-28 15:56:13 +02:00 |
Robert Reif
|
c50469dba6
|
Fixed #1523 (false negative:: buffer access out of bounds when using shift operator)
|
2010-03-27 07:21:08 +01:00 |
Reijo Tomperi
|
88840e6a08
|
Fix #1453 (possible infinite loop processing GNU Go's engine/montecarlo.c)
http://sourceforge.net/apps/trac/cppcheck/ticket/1453
|
2010-02-27 23:47:56 +02:00 |
Daniel Marjamäki
|
8f4edb5e45
|
Fixed #1409 (False positive: Buffer access out-of-bounds with strncpy and an array in typedef'ed struct)
|
2010-02-21 15:23:50 +01:00 |
Reijo Tomperi
|
e44f0b1b8d
|
Fix #1392 (Segfault in CheckBufferOverrun::checkScope)
http://sourceforge.net/apps/trac/cppcheck/ticket/1392
|
2010-02-15 23:20:09 +02:00 |
Monika Lukow
|
e9e5174797
|
Fixed #1333 (Detect access out of bounds 'for (i = 100; i > 0; --i) a[i] = 0;')
|
2010-02-14 23:10:15 +01:00 |
Reijo Tomperi
|
2a78637da7
|
Fix #1340 (False positive: Array out of bounds for re-initialised array pointer)
http://sourceforge.net/apps/trac/cppcheck/ticket/1340
|
2010-02-10 23:11:08 +02:00 |
Reijo Tomperi
|
9852ab86e9
|
Fix #1358 (False negative: out-of-bounds not found near return)
http://sourceforge.net/apps/trac/cppcheck/ticket/1358
|
2010-02-05 23:55:10 +02:00 |
Reijo Tomperi
|
db2aff03c7
|
Added test case for #1333 (Detect access out of bounds 'for (i = 100; i > 0; --i) a[i] = 0;')
http://sourceforge.net/apps/trac/cppcheck/ticket/1333
|
2010-01-31 22:02:26 +02:00 |
Daniel Marjamäki
|
c666a9662b
|
BufferOverrun: negative index is out of bounds
|
2010-01-11 21:18:07 +01:00 |
Daniel Marjamäki
|
57d1da3910
|
Ticket #1228 : Handle tokensBack in the Token class. When adding&removing tokens the Token class can make sure that this pointer is updated accordingly. It is very important that the tokensBack has the same scope as the token list, otherwise there will be a dead pointer problem.
|
2010-01-06 20:19:27 +01:00 |
Daniel Marjamäki
|
e6d5c76138
|
refactoring
|
2010-01-03 15:52:52 +01:00 |
Daniel Marjamäki
|
79223b71d5
|
added test case for #1193 (false negative: array out of bounds in loop when there is calculation)
|
2010-01-03 15:49:17 +01:00 |
Daniel Marjamäki
|
5925b88b38
|
Robert Reif: improve check: array index out of bounds, show name of array, array size and array index
|
2009-12-25 15:25:58 +01:00 |
Daniel Marjamäki
|
8a1940e043
|
astyle
|
2009-12-19 17:57:58 +01:00 |
Daniel Marjamäki
|
0da0b5ffed
|
ericsesterhenn: Fixed #1106 (check if buffer is zero terminated after a strncpy)
|
2009-12-18 17:26:15 +01:00 |
Daniel Marjamäki
|
0b09c36851
|
Fixed #1026 (false positive: buffer access out of bounds)
|
2009-12-05 11:41:30 +01:00 |
Martin Ettl
|
03e7914c98
|
partial fix of ticket #997; added check for write() two testcases
|
2009-11-28 13:41:24 +01:00 |
Daniel Marjamäki
|
f75c9619d1
|
Fixed #1021 (Out-of-bounds access false positive)
|
2009-11-28 12:51:23 +01:00 |
Reijo Tomperi
|
12a87fa3a4
|
Fix #1007 (False positive array index out of bounds concerning a switch statement in a for loop)
Bailout if switch is found in for loop.
http://sourceforge.net/apps/trac/cppcheck/ticket/1007
|
2009-11-25 22:40:51 +02:00 |
Reijo Tomperi
|
9bdf4502ed
|
Fix #995 (false positive: buffer access out of bounds when using fgets)
http://sourceforge.net/apps/trac/cppcheck/ticket/995
|
2009-11-21 15:45:52 +02:00 |
Reijo Tomperi
|
6417704577
|
Fix #985 (Detect buffer overrun with read())
http://sourceforge.net/apps/trac/cppcheck/ticket/985
|
2009-11-20 23:47:06 +02:00 |
Reijo Tomperi
|
9275b49688
|
Fix #964 (Integer division by zero exception)
http://sourceforge.net/apps/trac/cppcheck/ticket/964
|
2009-11-15 17:44:30 +02:00 |
Slava Semushin
|
6669a50634
|
Fixed #842 (out of bounds: when buffer is allocated with malloc)
http://sourceforge.net/apps/trac/cppcheck/ticket/842
|
2009-11-15 18:38:57 +06:00 |
Slava Semushin
|
3911dd79cb
|
Fixed #900 (Improve out-of-bounds check to detect error with "new char(x)")
http://sourceforge.net/apps/trac/cppcheck/ticket/900
|
2009-11-15 18:04:17 +06:00 |
Reijo Tomperi
|
3d5760b149
|
Fix #947 (Errors not detected when size_t is used instead of int)
http://sourceforge.net/apps/trac/cppcheck/ticket/947
|
2009-11-12 23:31:13 +02:00 |
Reijo Tomperi
|
0518eed937
|
Fix #946 (False positive: Buffer access out-of-bounds)
http://sourceforge.net/apps/trac/cppcheck/ticket/946
|
2009-11-12 23:24:44 +02:00 |
Daniel Marjamäki
|
1fe94d74b8
|
unit testing: minor syntax fixes
|
2009-11-09 20:34:36 +01:00 |
Daniel Marjamäki
|
52eb32eb5b
|
testbufferoverrun.cpp: fixed unit test error
|
2009-11-07 19:59:03 +01:00 |
Daniel Marjamäki
|
3b9b3b241e
|
testbufferoverrun.cpp: minor updates to make it work better as extracted code
|
2009-11-07 19:51:18 +01:00 |
Daniel Marjamäki
|
3bd36226d6
|
testbufferoverrun: minor updates to make the code more easily compilable
|
2009-11-07 18:03:33 +01:00 |
Reijo Tomperi
|
b222ef89be
|
Fix #903 (false positive: buffer access out of bounds)
http://sourceforge.net/apps/trac/cppcheck/ticket/903
|
2009-11-07 00:58:33 +02:00 |
Daniel Marjamäki
|
77b676937d
|
cleanup in testbufferoverrun.cpp
|
2009-11-06 19:15:59 +01:00 |
Reijo Tomperi
|
504ae8e22d
|
Fix #868 (False positive - buffer access out of bounds in for loop)
http://sourceforge.net/apps/trac/cppcheck/ticket/868
|
2009-10-29 16:04:23 +02:00 |
Reijo Tomperi
|
9db22d9b48
|
Modify CheckBufferOverrun::checkGlobalAndLocalVariable() to use varid only.
Also add some TODO test cases.
|
2009-10-28 22:42:54 +02:00 |
Reijo Tomperi
|
0e695ea527
|
Test case for #863 (false positive memset array of pointers)
http://sourceforge.net/apps/trac/cppcheck/ticket/863
|
2009-10-27 20:54:35 +02:00 |
Daniel Marjamäki
|
09859c1019
|
refactoring the folder structure
|
2009-10-25 12:49:06 +01:00 |
Reijo Tomperi
|
6fbf873d25
|
Improved countSprintfLength() to detect more errors with %d.
Fixed some errors from test cases.
Added more test cases.
|
2009-10-20 00:48:29 +03:00 |
Reijo Tomperi
|
aca743c9ed
|
Fix #826 (False positive: sprintf with "f%s")
http://sourceforge.net/apps/trac/cppcheck/ticket/826
|
2009-10-18 13:58:48 +03:00 |
Daniel Marjamäki
|
01af70cc88
|
Fixed #823 (Buffer overrun with memcpy)
|
2009-10-15 19:36:48 +02:00 |
Reijo Tomperi
|
be90d34962
|
Buffer overrun errors behind function call should be possible errors.
|
2009-10-14 00:09:37 +03:00 |
Reijo Tomperi
|
3dc45903bc
|
Move buffer overrun errors behind --all
Fix one possible error issue with arrayindexoutofbounds
Make sure that possible errors are not shown without --all
|
2009-10-13 23:33:41 +03:00 |
Reijo Tomperi
|
4036dd5eff
|
arrayIndexOutOfBounds check is now done without --all
Errors with buf[1] are still listed only with --all due to false positive risk in them.
|
2009-10-13 22:39:51 +03:00 |
Reijo Tomperi
|
b6999d010f
|
Fix #812 (False positive: sprintf with "%.4s" with --all)
http://sourceforge.net/apps/trac/cppcheck/ticket/812
|
2009-10-11 22:07:18 +03:00 |
Reijo Tomperi
|
59aad35137
|
Fix #694 (False (possible error) Buffer overrun with %-1s)
ashim2009 did most of the work
http://sourceforge.net/apps/trac/cppcheck/ticket/694
|
2009-10-11 21:36:22 +03:00 |
Reijo Tomperi
|
a078c9353d
|
More test cases for sprintf counter
|
2009-10-08 17:36:00 +03:00 |
Reijo Tomperi
|
5eee9af974
|
sprintf counter improvements
|
2009-10-08 16:27:46 +03:00 |