565 lines
19 KiB
C++
565 lines
19 KiB
C++
/*
|
|
* Cppcheck - A tool for static C/C++ code analysis
|
|
* Copyright (C) 2007-2015 Daniel Marjamäki and Cppcheck team.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "testsuite.h"
|
|
#include "tokenize.h"
|
|
#include "token.h"
|
|
#include "settings.h"
|
|
#include "check.h"
|
|
|
|
|
|
class TestGarbage : public TestFixture {
|
|
public:
|
|
TestGarbage() : TestFixture("TestGarbage") {
|
|
}
|
|
|
|
private:
|
|
|
|
void run() {
|
|
// don't freak out when the syntax is wrong
|
|
TEST_CASE(wrong_syntax1);
|
|
TEST_CASE(wrong_syntax2);
|
|
TEST_CASE(wrong_syntax3); // #3544
|
|
TEST_CASE(wrong_syntax4); // #3618
|
|
TEST_CASE(wrong_syntax_if_macro); // #2518 - if MACRO()
|
|
TEST_CASE(wrong_syntax_class_x_y); // #3585 - class x y { };
|
|
TEST_CASE(syntax_case_default);
|
|
TEST_CASE(garbageCode1);
|
|
TEST_CASE(garbageCode2); // #4300
|
|
TEST_CASE(garbageCode3); // #4869
|
|
TEST_CASE(garbageCode4); // #4887
|
|
TEST_CASE(garbageCode5); // #5168
|
|
TEST_CASE(garbageCode6); // #5214
|
|
TEST_CASE(garbageCode7);
|
|
TEST_CASE(garbageCode8); // #5511
|
|
TEST_CASE(garbageCode9); // #5604
|
|
TEST_CASE(garbageCode10); // #6127
|
|
TEST_CASE(garbageCode11);
|
|
TEST_CASE(garbageCode12);
|
|
TEST_CASE(garbageCode13); // Ticket #2607 - crash
|
|
TEST_CASE(garbageCode14); // Ticket #5595 - crash
|
|
TEST_CASE(garbageCode15); // Ticket #5203
|
|
TEST_CASE(garbageCode16);
|
|
TEST_CASE(garbageCode17);
|
|
TEST_CASE(garbageCode18);
|
|
TEST_CASE(garbageCode19);
|
|
TEST_CASE(garbageCode20);
|
|
TEST_CASE(garbageCode21);
|
|
TEST_CASE(garbageCode22);
|
|
TEST_CASE(garbageCode23);
|
|
TEST_CASE(garbageCode24); // Ticket #6361 - crash
|
|
TEST_CASE(garbageCode25);
|
|
TEST_CASE(garbageCode26);
|
|
TEST_CASE(garbageCode27);
|
|
TEST_CASE(garbageCode28);
|
|
TEST_CASE(garbageCode29);
|
|
TEST_CASE(garbageCode30); // #5867
|
|
TEST_CASE(garbageCode31); // #6539
|
|
TEST_CASE(garbageCode32); // #6135
|
|
TEST_CASE(garbageCode33); // #6613
|
|
TEST_CASE(garbageCode34); // #6626
|
|
TEST_CASE(garbageCode35); // #2599, #2604
|
|
TEST_CASE(garbageCode36); // #6334
|
|
TEST_CASE(garbageCode37); // #5166
|
|
|
|
TEST_CASE(garbageValueFlow);
|
|
TEST_CASE(garbageSymbolDatabase);
|
|
TEST_CASE(garbageAST);
|
|
TEST_CASE(templateSimplifierCrashes);
|
|
}
|
|
|
|
std::string checkCode(const char code[], const char filename[] = "test.cpp") {
|
|
errout.str("");
|
|
|
|
Settings settings;
|
|
settings.debugwarnings = true;
|
|
settings.addEnabled("style");
|
|
settings.addEnabled("warning");
|
|
settings.addEnabled("portability");
|
|
settings.addEnabled("performance");
|
|
settings.inconclusive = true;
|
|
settings.experimental = true;
|
|
|
|
// tokenize..
|
|
Tokenizer tokenizer(&settings, this);
|
|
std::istringstream istr(code);
|
|
tokenizer.tokenize(istr, filename);
|
|
|
|
// call all "runChecks" in all registered Check classes
|
|
for (std::list<Check *>::const_iterator it = Check::instances().begin(); it != Check::instances().end(); ++it) {
|
|
(*it)->runChecks(&tokenizer, &settings, this);
|
|
}
|
|
|
|
tokenizer.simplifyTokenList2();
|
|
// call all "runSimplifiedChecks" in all registered Check classes
|
|
for (std::list<Check *>::const_iterator it = Check::instances().begin(); it != Check::instances().end(); ++it) {
|
|
(*it)->runSimplifiedChecks(&tokenizer, &settings, this);
|
|
}
|
|
|
|
return tokenizer.tokens()->stringifyList(false, false, false, true, false, 0, 0);
|
|
}
|
|
|
|
void wrong_syntax1() {
|
|
{
|
|
const char code[] ="TR(kvmpio, PROTO(int rw), ARGS(rw), TP_(aa->rw;))";
|
|
ASSERT_EQUALS("TR ( kvmpio , PROTO ( int rw ) , ARGS ( rw ) , TP_ ( aa . rw ; ) )", checkCode(code));
|
|
ASSERT_EQUALS("", errout.str());
|
|
}
|
|
|
|
{
|
|
const char code[] ="struct A { template<int> struct { }; };";
|
|
ASSERT_THROW(checkCode(code), InternalError);
|
|
}
|
|
|
|
{
|
|
const char code[] ="enum ABC { A,B, typedef enum { C } };";
|
|
ASSERT_THROW(checkCode(code), InternalError);
|
|
}
|
|
}
|
|
|
|
void wrong_syntax2() { // #3504
|
|
const char code[] = "void f() {\n"
|
|
" X<int> x;\n"
|
|
" Y<int, int, int, int, int, char> y;\n"
|
|
"}\n"
|
|
"\n"
|
|
"void G( template <typename T> class (j) ) {}";
|
|
|
|
// don't segfault..
|
|
checkCode(code);
|
|
}
|
|
|
|
void wrong_syntax3() { // #3544
|
|
const char code[] = "X #define\n"
|
|
"{\n"
|
|
" (\n"
|
|
" for( #endif typedef typedef cb[N] )\n"
|
|
" ca[N]; = cb[i]\n"
|
|
" )\n"
|
|
"}";
|
|
|
|
Settings settings;
|
|
Tokenizer tokenizer(&settings, this);
|
|
std::istringstream istr(code);
|
|
try {
|
|
tokenizer.tokenize(istr, "test.cpp");
|
|
assertThrowFail(__FILE__, __LINE__);
|
|
} catch (InternalError& e) {
|
|
ASSERT_EQUALS("Analysis failed. If the code is valid then please report this failure.", e.errorMessage);
|
|
ASSERT_EQUALS("cppcheckError", e.id);
|
|
ASSERT_EQUALS(5, e.token->linenr());
|
|
}
|
|
}
|
|
|
|
void wrong_syntax4() { // #3618
|
|
const char code[] = "typedef void (x) (int); return x&";
|
|
|
|
ASSERT_THROW(checkCode(code), InternalError);
|
|
}
|
|
|
|
void wrong_syntax_if_macro() {
|
|
// #2518 #4171
|
|
ASSERT_THROW(checkCode("void f() { if MACRO(); }"), InternalError);
|
|
|
|
// #4668 - note there is no semicolon after MACRO()
|
|
ASSERT_THROW(checkCode("void f() { if (x) MACRO() {} }"), InternalError);
|
|
|
|
// #4810 - note there is no semicolon after MACRO()
|
|
ASSERT_THROW(checkCode("void f() { if (x) MACRO() else ; }"), InternalError);
|
|
}
|
|
|
|
void wrong_syntax_class_x_y() {
|
|
// #3585
|
|
const char code[] = "class x y { };";
|
|
|
|
errout.str("");
|
|
|
|
Settings settings;
|
|
settings.addEnabled("information");
|
|
Tokenizer tokenizer(&settings, this);
|
|
std::istringstream istr(code);
|
|
tokenizer.tokenize(istr, "test.c");
|
|
tokenizer.simplifyTokenList2();
|
|
|
|
ASSERT_EQUALS("[test.c:1]: (information) The code 'class x y {' is not handled. You can use -I or --include to add handling of this code.\n", errout.str());
|
|
}
|
|
|
|
void syntax_case_default() {
|
|
ASSERT_THROW(checkCode("void f() {switch (n) { case: z(); break;}}"), InternalError);
|
|
|
|
ASSERT_THROW(checkCode("void f() {switch (n) { case;: z(); break;}}"), InternalError);
|
|
|
|
ASSERT_THROW(checkCode("void f() {switch (n) { case {}: z(); break;}}"), InternalError);
|
|
|
|
ASSERT_THROW(checkCode("void f() {switch (n) { case 0?{1}:{2} : z(); break;}}"), InternalError);
|
|
|
|
ASSERT_THROW(checkCode("void f() {switch (n) { case 0?1;:{2} : z(); break;}}"), InternalError);
|
|
|
|
checkCode("void f() {switch (n) { case 0?(1?{3:4}):2 : z(); break;}}");
|
|
|
|
//ticket #4234
|
|
ASSERT_THROW(checkCode("( ) { switch break ; { switch ( x ) { case } y break ; : } }"), InternalError);
|
|
|
|
//ticket #4267
|
|
ASSERT_THROW(checkCode("f ( ) { switch break; { switch ( x ) { case } case break; -6: ( ) ; } }"), InternalError);
|
|
}
|
|
|
|
void garbageCode1() {
|
|
checkCode("struct x foo_t; foo_t typedef y;");
|
|
}
|
|
|
|
void garbageCode2() { //#4300 (segmentation fault)
|
|
ASSERT_THROW(checkCode("enum { D = 1 struct { } ; } s.b = D;"), InternalError);
|
|
}
|
|
|
|
void garbageCode3() { //#4849 (segmentation fault in Tokenizer::simplifyStructDecl (invalid code))
|
|
ASSERT_THROW(checkCode("enum { D = 2 s ; struct y { x } ; } { s.a = C ; s.b = D ; }"), InternalError);
|
|
}
|
|
|
|
void garbageCode4() { // #4887
|
|
ASSERT_THROW(checkCode("void f ( ) { = a ; if ( 1 ) if = ( 0 ) ; }"), InternalError);
|
|
}
|
|
|
|
void garbageCode5() { // #5168
|
|
checkCode("( asm : ; void : );");
|
|
}
|
|
|
|
void garbageCode6() { // #5214
|
|
checkCode("int b = ( 0 ? ? ) 1 : 0 ;");
|
|
checkCode("int a = int b = ( 0 ? ? ) 1 : 0 ;");
|
|
}
|
|
|
|
void garbageCode7() {
|
|
checkCode("1 (int j) { return return (c) * sizeof } y[1];");
|
|
checkCode("foo(Args&&...) fn void = { } auto template<typename... bar(Args&&...)");
|
|
}
|
|
|
|
void garbageCode8() { // #5604
|
|
ASSERT_THROW(checkCode("{ enum struct : };"), InternalError);
|
|
ASSERT_THROW(checkCode("int ScopedEnum{ template<typename T> { { e = T::error }; };\n"
|
|
"ScopedEnum1<int> se1; { enum class E : T { e = 0 = e ScopedEnum2<void*> struct UnscopedEnum3 { T{ e = 4 }; };\n"
|
|
"arr[(int) E::e]; }; UnscopedEnum3<int> e2 = f()\n"
|
|
"{ { e = e1; T::error } int test1 ue2; g() { enum class E { e = T::error }; return E::e; } int test2 = } \n"
|
|
"namespace UnscopedEnum { template<typename T> struct UnscopedEnum1 { E{ e = T::error }; }; UnscopedEnum1<int> { enum E : { e = 0 }; };\n"
|
|
"UnscopedEnum2<void*> ue3; template<typename T> struct UnscopedEnum3 { enum { }; }; int arr[E::e]; };\n"
|
|
"UnscopedEnum3<int> namespace template<typename T> int f() { enum E { e }; T::error }; return (int) E(); } int test1 int g() { enum E { e = E };\n"
|
|
"E::e; } int test2 = g<int>(); }"), InternalError);
|
|
}
|
|
|
|
void garbageCode9() {
|
|
ASSERT_THROW(checkCode("enum { e = { } } ( ) { { enum { } } } { e } "), InternalError);
|
|
}
|
|
|
|
void garbageCode10() { // #6127
|
|
checkCode("for( rl=reslist; rl!=NULL; rl=rl->next )");
|
|
}
|
|
|
|
void garbageCode11() { // do not crash
|
|
checkCode("( ) &");
|
|
}
|
|
|
|
void garbageCode12() { // do not crash
|
|
checkCode("{ g; S (void) { struct } { } int &g; }");
|
|
}
|
|
|
|
void garbageCode13() {
|
|
checkCode("struct C {} {} x");
|
|
}
|
|
|
|
void garbageCode14() {
|
|
checkCode("static f() { int i; int source[1] = { 1 }; for (i = 0; i < 4; i++) (u, if (y u.x e)) }"); // Garbage code
|
|
}
|
|
|
|
void garbageCode15() { // Ticket #5203
|
|
checkCode("int f ( int* r ) { { int s[2] ; f ( s ) ; if ( ) } }");
|
|
}
|
|
|
|
void garbageCode16() {
|
|
checkCode("{ } A() { delete }"); // #6080
|
|
}
|
|
|
|
void garbageCode17() {
|
|
ASSERT_THROW(checkCode("void h(int l) {\n"
|
|
" while\n" // Don't crash (#3870)
|
|
"}"), InternalError);
|
|
}
|
|
|
|
void garbageCode18() {
|
|
ASSERT_THROW(checkCode("switch(){case}"), InternalError);
|
|
}
|
|
|
|
void garbageCode19() {
|
|
// ticket #3512 - Don't crash on garbage code
|
|
ASSERT_EQUALS("p = const", checkCode("1 *p = const"));
|
|
}
|
|
|
|
void garbageCode20() {
|
|
// #3953 (valgrind errors on garbage code)
|
|
ASSERT_EQUALS("void f ( 0 * ) ;", checkCode("void f ( 0 * ) ;"));
|
|
}
|
|
|
|
void garbageCode21() {
|
|
// Ticket #3486 - Don't crash garbage code
|
|
checkCode("void f()\n"
|
|
"{\n"
|
|
" (\n"
|
|
" x;\n"
|
|
" int a, a2, a2*x; if () ;\n"
|
|
" )\n"
|
|
"}");
|
|
}
|
|
|
|
void garbageCode22() {
|
|
// Ticket #3480 - Don't crash garbage code
|
|
ASSERT_THROW(checkCode("int f()\n"
|
|
"{\n"
|
|
" return if\n"
|
|
"}"), InternalError);
|
|
}
|
|
|
|
void garbageCode23() {
|
|
//garbage code : don't crash (#3481)
|
|
checkCode("{\n"
|
|
" if (1) = x\n"
|
|
" else abort s[2]\n"
|
|
"}");
|
|
ASSERT_EQUALS("", errout.str());
|
|
}
|
|
|
|
void garbageCode24() {
|
|
// don't crash (example from #6361)
|
|
checkCode("float buffer[64];\n"
|
|
"main (void)\n"
|
|
"{\n"
|
|
" char *cptr;\n"
|
|
" cptr = (char *)buffer;\n"
|
|
" cptr += (-(long int) buffer & (16 * sizeof (float) - 1));\n"
|
|
"}\n");
|
|
}
|
|
|
|
void garbageCode25() {
|
|
// Ticket #2386 - Segmentation fault upon strange syntax
|
|
ASSERT_THROW(checkCode("void f() {\n"
|
|
" switch ( x ) {\n"
|
|
" case struct Tree : break;\n"
|
|
" }\n"
|
|
"}"), InternalError);
|
|
}
|
|
|
|
void garbageCode26() {
|
|
// See tickets #2518 #2555 #4171
|
|
ASSERT_THROW(checkCode("void f() {\n"
|
|
" switch MAKEWORD(1)\n"
|
|
" {\n"
|
|
" case 0:\n"
|
|
" return;\n"
|
|
" }\n"
|
|
"}"), InternalError);
|
|
}
|
|
|
|
void garbageCode27() {
|
|
ASSERT_THROW(checkCode("int f() {\n"
|
|
" return if\n"
|
|
"}"), InternalError);
|
|
}
|
|
|
|
void garbageCode28() {
|
|
// 5702
|
|
checkCode("struct R1 {\n"
|
|
" int a;\n"
|
|
" R1 () : a { }\n"
|
|
"};\n");
|
|
}
|
|
|
|
void garbageCode29() {
|
|
// ticket #2601 segmentation fault
|
|
checkCode("|| #if #define <=");
|
|
}
|
|
|
|
void garbageCode30() {
|
|
// simply survive - a syntax error would be even better (#5867)
|
|
checkCode("void f(int x) {\n"
|
|
" x = 42\n"
|
|
"}");
|
|
}
|
|
|
|
void garbageCode31() {
|
|
ASSERT_THROW(checkCode("typedef struct{}x[([],)]typedef e y;(y,x 0){}"), InternalError);
|
|
}
|
|
|
|
void garbageCode32() { // #6135
|
|
checkCode(" ( * const ( size_t ) ; foo )");
|
|
}
|
|
|
|
void garbageCode33() { // #6613
|
|
ASSERT_THROW(checkCode("main(()B{});"), InternalError);
|
|
|
|
checkCode("f::y:y : <x::");
|
|
|
|
checkCode("\xe2u.");
|
|
}
|
|
|
|
// Bug #6626 crash: Token::astOperand2() const ( do while )
|
|
void garbageCode34() {
|
|
checkCode("void foo(void) {\n"
|
|
" do\n"
|
|
" while (0);\n"
|
|
"}");
|
|
ASSERT_EQUALS("", errout.str());
|
|
}
|
|
|
|
void garbageCode35() {
|
|
// ticket #2599 segmentation fault
|
|
checkCode("sizeof");
|
|
|
|
// ticket #2604 segmentation fault
|
|
checkCode("sizeof <= A");
|
|
}
|
|
|
|
void garbageCode36() { // #6334
|
|
checkCode("{ } < class template < > , { = } ; class... >\n"
|
|
"struct Y { }\n"
|
|
"class Types { }\n"
|
|
"( X < int > \"uses template\" ) ( < ( ) \"uses ; \n"
|
|
"( int int ::primary \"uses template\" ) int double \"uses )\n"
|
|
"::primary , \"uses template\" ;\n");
|
|
}
|
|
|
|
void garbageCode37() {
|
|
// #5166 segmentation fault (invalid code) in lib/checkother.cpp:329 ( void * f { } void b ( ) { * f } )
|
|
checkCode("void * f { } void b ( ) { * f }");
|
|
}
|
|
|
|
void garbageValueFlow() {
|
|
// #6089
|
|
const char* code = "{} int foo(struct, x1, struct x2, x3, int, x5, x6, x7)\n"
|
|
"{\n"
|
|
" (foo(s, , 2, , , 5, , 7)) abort()\n"
|
|
"}\n";
|
|
checkCode(code);
|
|
|
|
// #6106
|
|
code = " f { int i ; b2 , [ ] ( for ( i = 0 ; ; ) ) }";
|
|
checkCode(code);
|
|
|
|
// 6122 survive garbage code
|
|
code = "; { int i ; for ( i = 0 ; = 123 ; ) - ; }";
|
|
checkCode(code);
|
|
|
|
code = "void f1() { for (int n = 0 n < 10 n++); }";
|
|
checkCode(code);
|
|
}
|
|
|
|
void garbageSymbolDatabase() {
|
|
checkCode("void f( { u = 1 ; } ) { }");
|
|
|
|
checkCode("{ }; void namespace A::f; { g() { int } }");
|
|
|
|
ASSERT_THROW(checkCode("class Foo {}; class Bar : public Foo"), InternalError);
|
|
|
|
checkCode("YY_DECL { switch (yy_act) {\n"
|
|
" case 65: YY_BREAK\n"
|
|
" case YY_STATE_EOF(block):\n"
|
|
" yyterminate(); \n"
|
|
"} }"); // #5663
|
|
}
|
|
|
|
void garbageAST() {
|
|
checkCode("--"); // don't crash
|
|
|
|
checkCode("N 1024 float a[N], b[N + 3], c[N]; void N; (void) i;\n"
|
|
"int #define for (i = avx_test i < c[i]; i++)\n"
|
|
"b[i + 3] = a[i] * {}"); // Don't hang (#5787)
|
|
|
|
checkCode("START_SECTION([EXTRA](bool isValid(const String &filename)))"); // Don't crash (#5991)
|
|
}
|
|
|
|
void templateSimplifierCrashes() {
|
|
checkCode( //5950
|
|
"struct A { \n"
|
|
" template <class T> operator T*();\n"
|
|
"}; \n"
|
|
"\n"
|
|
"template <> A::operator char*(){ return 0; } // specialization\n"
|
|
"\n"
|
|
"int main() { \n"
|
|
" A a;\n"
|
|
" int *ip = a.operator int*();\n"
|
|
"}\n"
|
|
"\n"
|
|
"namespace PR5742 {\n"
|
|
" template <class T> struct A { };\n"
|
|
" struct S {\n"
|
|
" template <class T> operator T();\n"
|
|
" } s;\n"
|
|
" void f() {\n"
|
|
" s.operator A<A<int> >();\n"
|
|
" }\n"
|
|
"}\n");
|
|
|
|
checkCode( // 6034
|
|
"template<template<typename...> class T, typename... Args>\n"
|
|
"struct foo<T<Args...> > {\n"
|
|
" const bool value = true;\n"
|
|
"};\n"
|
|
"\n"
|
|
"template<int I>\n"
|
|
"struct int_\n"
|
|
"{};\n"
|
|
"\n"
|
|
"int main() {\n"
|
|
" foo<int_<0> >::value;\n"
|
|
"}\n"
|
|
);
|
|
|
|
checkCode(" > template < . > struct Y < T > { = } ;\n"); //6108
|
|
|
|
checkCode( // 6117
|
|
"template <typename ...> struct something_like_tuple\n"
|
|
"{};\n"
|
|
"template <typename, typename> struct is_last {\n"
|
|
" static const bool value = false;\n"
|
|
"};\n"
|
|
"template <typename T, template <typename ...> class Tuple, typename ... Head>\n"
|
|
"struct is_last<T, Tuple<Head ..., T>>\n"
|
|
"{\n"
|
|
" static const bool value = true;\n"
|
|
"};\n"
|
|
"\n"
|
|
"#define SA(X) static_assert (X, #X)\n"
|
|
"\n"
|
|
"typedef something_like_tuple<char, int, float> something_like_tuple_t;\n"
|
|
"SA ((is_last<float, something_like_tuple_t>::value == false));\n"
|
|
"SA ((is_last<int, something_like_tuple_t>::value == false));\n"
|
|
);
|
|
|
|
checkCode( //6225
|
|
"template <typename...>\n"
|
|
"void templ_fun_with_ty_pack() {}\n"
|
|
" \n"
|
|
"namespace PR20047 {\n"
|
|
" template <typename T>\n"
|
|
" struct A {};\n"
|
|
" using AliasA = A<T>;\n"
|
|
"}\n"
|
|
);
|
|
}
|
|
};
|
|
|
|
REGISTER_TEST(TestGarbage)
|