# Test if --verify works using the juliet testsuite # The Juliet test suite can be downloaded from: # https://samate.nist.gov/SRD/testsuite.php import glob import os import re import sys import subprocess JULIET_PATH = os.path.expanduser('~/juliet') if sys.argv[0] in ('test/verify/juliet.py', './test/verify/juliet.py'): CPPCHECK_PATH = './cppcheck' else: CPPCHECK_PATH = '../../cppcheck' def get_files(juliet_path:str, test_cases:str): ret = [] g = os.path.join(juliet_path, test_cases) print(g) for f in sorted(glob.glob(g)): res = re.match(r'(.*[0-9][0-9])[a-x]?.(cp*)$', f) if res is None: print('Non-match!! ' + f) sys.exit(1) f = res.group(1) + '*.' + res.group(2) if f not in ret: ret.append(f) return ret def check(tc:str, warning_id:str): num_ok = 0 num_failed = 0 for f in get_files(JULIET_PATH, tc): cmd = [CPPCHECK_PATH, '-I' + os.path.join(JULIET_PATH, 'C/testcasesupport'), '-DOMIT_GOOD', '-DAF_INET=1', '-DINADDR_ANY=1', '--library=posix', '--verify', '--platform=unix64'] cmd += glob.glob(f) p = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE) comm = p.communicate() stdout = comm[0].decode(encoding='utf-8', errors='ignore') stderr = comm[1].decode(encoding='utf-8', errors='ignore') if warning_id in stderr: num_ok += 1 else: print(f'fail: ' + ' '.join(cmd)) num_failed += 1 cwepos = tc.find('CWE') cwe = tc[cwepos:cwepos+6] return f'{cwe} ok:{num_ok}, fail:{num_failed}\n' final_report = '' final_report += check('C/testcases/CWE369_Divide_by_Zero/s*/*_int_*.c', 'verificationDivByZero') #final_report += check('C/testcases/CWE476_*/*.c', 'verificationNullPointerDereference') print(final_report)