122 lines
2.9 KiB
C
122 lines
2.9 KiB
C
/* Verify that writes at excessive offsets into declared or allocated
|
|
objects of unknown size are diagnosed.
|
|
{ dg-do compile }
|
|
{ dg-options "-O2" } */
|
|
|
|
#define DIFF_MAX __PTRDIFF_MAX__
|
|
|
|
typedef __SIZE_TYPE__ size_t;
|
|
|
|
void* malloc (size_t);
|
|
void* memcpy (void*, const void*, size_t);
|
|
void* memset (void*, int, size_t);
|
|
|
|
void sink (void*);
|
|
|
|
|
|
void char_array_cst_off_cst_size (void)
|
|
{
|
|
extern char caxcc[]; // { dg-message "at offset \\d+ into destination object 'caxcc'" }
|
|
|
|
char *p = caxcc;
|
|
size_t idx = DIFF_MAX - 3;
|
|
|
|
memset (p + idx, 0, 3);
|
|
sink (p);
|
|
|
|
++idx;
|
|
memset (p + idx, 0, 3); // { dg-warning "writing 3 bytes into a region of size 2" }
|
|
sink (p);
|
|
|
|
++idx;
|
|
memset (p + idx, 0, 3); // { dg-warning "writing 3 bytes into a region of size 1" }
|
|
sink (p);
|
|
|
|
++idx;
|
|
memset (p + idx, 0, 3); // { dg-warning "writing 3 bytes into a region of size 0" }
|
|
sink (p);
|
|
}
|
|
|
|
|
|
void char_array_var_off_cst_size (size_t idx)
|
|
{
|
|
/* The offset is a range with a very large lower bound and an upper
|
|
bound of DIFF_MAX. There's not point in also mentioning the latter
|
|
(it wouldn't make the note any more meaningful) so verify it only
|
|
mentions the lower bound. */
|
|
extern char caxvc[]; // { dg-message "at offset \\d+ into destination object 'caxvc'" "note" }
|
|
|
|
char *p = caxvc;
|
|
|
|
if (idx < DIFF_MAX - 3)
|
|
idx = DIFF_MAX - 3;
|
|
|
|
memset (p + idx, 0, 3);
|
|
sink (p);
|
|
|
|
memset (p + idx, 0, 5); // { dg-warning "writing 5 bytes into a region of size 3" }
|
|
sink (p);
|
|
}
|
|
|
|
|
|
void char_array_var_off_var_size (size_t idx, size_t n)
|
|
{
|
|
extern char caxvv[]; // { dg-message "at offset \\d+ into destination object 'caxvv'" "note" }
|
|
|
|
char *p = caxvv;
|
|
|
|
if (idx < DIFF_MAX - 3)
|
|
idx = DIFF_MAX - 3;
|
|
|
|
if (n < 3 || 7 < n)
|
|
n = 3;
|
|
|
|
memset (p + idx, 0, n);
|
|
sink (p);
|
|
|
|
++n;
|
|
memset (p + idx, 0, n); // { dg-warning "writing between 4 and 8 bytes into a region of size 3" }
|
|
sink (p);
|
|
}
|
|
|
|
|
|
void alloc_array_var_off_cst_size (size_t n, size_t idx)
|
|
{
|
|
char *p = malloc (n); // { dg-message "at offset \\d+ into destination object" "note" }
|
|
|
|
if (idx < DIFF_MAX - 3)
|
|
idx = DIFF_MAX - 3;
|
|
|
|
memset (p + idx, 0, 3);
|
|
sink (p);
|
|
|
|
memset (p + idx, 0, 5); // { dg-warning "writing 5 bytes into a region of size 3" }
|
|
sink (p);
|
|
}
|
|
|
|
|
|
void int_array_cst_off_cst_size (void)
|
|
{
|
|
extern int iaxc[]; // { dg-message "at offset \[1-9\]\[0-9\]+ into destination object 'iaxc'" }
|
|
|
|
int *p = iaxc;
|
|
size_t idx = DIFF_MAX / sizeof *iaxc;
|
|
|
|
memset (p + idx, 0, 3);
|
|
sink (p);
|
|
|
|
memset (p + idx, 0, 5); // { dg-warning "writing 5 bytes into a region of size 3" }
|
|
sink (p);
|
|
}
|
|
|
|
|
|
void* nowarn_anti_range_1 (char *p, char *q)
|
|
{
|
|
size_t n = q - p;
|
|
if (!n) return 0;
|
|
|
|
char *d = __builtin_malloc (n + 1);
|
|
memcpy (d, p, n + 1); // { dg-bogus "-Wstringop-overflow" }
|
|
return d;
|
|
}
|