# Test if --verify works using the juliet testsuite import glob import os import re import sys import subprocess JULIET_PATH = os.path.expanduser('~/juliet') CPPCHECK_PATH = '../../cppcheck' def get_files(juliet_path:str, test_cases:str): ret = [] g = os.path.join(juliet_path, test_cases) print(g) for f in sorted(glob.glob(g)): res = re.match(r'(.*[0-9][0-9])[a-x]?.(cp*)$', f) if res is None: print('Non-match!! ' + f) sys.exit(1) f = res.group(1) + '*.' + res.group(2) if f not in ret: ret.append(f) return ret def check(tc:str, warning_id:str): num_ok = 0 num_failed = 0 for f in get_files(JULIET_PATH, tc): cmd = [CPPCHECK_PATH, '-I' + os.path.join(JULIET_PATH, 'C/testcasesupport'), '-DOMIT_GOOD', '--library=posix', '--verify', '--platform=unix64'] cmd += glob.glob(f) p = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE) comm = p.communicate() stdout = comm[0].decode(encoding='utf-8', errors='ignore') stderr = comm[1].decode(encoding='utf-8', errors='ignore') if warning_id in stderr: num_ok += 1 else: print(f'fail: ' + ' '.join(cmd)) num_failed += 1 cwepos = tc.find('CWE') cwe = tc[cwepos:cwepos+6] return f'{cwe} ok:{num_ok}, fail:{num_failed}\n' final_report = '' final_report += check('C/testcases/CWE369_Divide_by_Zero/s*/*_int_*.c', 'verificationDivByZero') final_report += check('C/testcases/CWE476_*/*.c', 'verificationNullPointerDereference') print(final_report) assert final_report == ('CWE369 ok:456, fail:0\n' 'CWE476 ok:186, fail:84\n')