clang/test/Sema/warn-fortify-source.c

   1 // RUN: %clang_cc1 -triple x86_64-apple-macosx10.14.0 %s -verify
   2 // RUN: %clang_cc1 -triple x86_64-apple-macosx10.14.0 %s -verify -DUSE_BUILTINS
   3 // RUN: %clang_cc1 -xc++ -triple x86_64-apple-macosx10.14.0 %s -verify
   4 // RUN: %clang_cc1 -xc++ -triple x86_64-apple-macosx10.14.0 %s -verify -DUSE_BUILTINS
   5
   6 typedef unsigned long size_t;
   7
   8 #ifdef __cplusplus
   9 extern "C" {
  10 #endif
  11
  12 extern int sprintf(char *str, const char *format, ...);
  13
  14 #if defined(USE_BUILTINS)
  15 #define memcpy(x,y,z) __builtin_memcpy(x,y,z)
  16 #else
  17 void *memcpy(void *dst, const void *src, size_t c);
  18 #endif
  19
  20 #ifdef __cplusplus
  21 }
  22 #endif
  23
  24 void call_memcpy(void) {
  25   char dst[10];
  26   char src[20];
  27   memcpy(dst, src, 20); // expected-warning {{memcpy' will always overflow; destination buffer has size 10, but size argument is 20}}
  28
  29   if (sizeof(dst) == sizeof(src))
  30     memcpy(dst, src, 20); // no warning, unreachable
  31 }
  32
  33 void call_memcpy_type(void) {
  34   struct pair {
  35     int first;
  36     int second;
  37   };
  38   struct pair p;
  39   char buf[20];
  40   memcpy(&p.first, buf, 20); // expected-warning {{memcpy' will always overflow; destination buffer has size 8, but size argument is 20}}
  41 }
  42
  43 void call_strncat(void) {
  44   char s1[10], s2[20];
  45   __builtin_strncat(s2, s1, 20);
  46   __builtin_strncat(s1, s2, 20); // expected-warning {{'strncat' size argument is too large; destination buffer has size 10, but size argument is 20}}
  47 }
  48
  49 void call_strncpy(void) {
  50   char s1[10], s2[20];
  51   __builtin_strncpy(s2, s1, 20);
  52   __builtin_strncpy(s1, s2, 20); // expected-warning {{'strncpy' size argument is too large; destination buffer has size 10, but size argument is 20}}
  53 }
  54
  55 void call_stpncpy(void) {
  56   char s1[10], s2[20];
  57   __builtin_stpncpy(s2, s1, 20);
  58   __builtin_stpncpy(s1, s2, 20); // expected-warning {{'stpncpy' size argument is too large; destination buffer has size 10, but size argument is 20}}
  59 }
  60
  61 void call_strcpy(void) {
  62   const char *const src = "abcd";
  63   char dst[4];
  64   __builtin_strcpy(dst, src); // expected-warning {{'strcpy' will always overflow; destination buffer has size 4, but the source string has length 5 (including NUL byte)}}
  65 }
  66
  67 void call_strcpy_nowarn(void) {
  68   const char *const src = "abcd";
  69   char dst[5];
  70   // We should not get a warning here.
  71   __builtin_strcpy(dst, src);
  72 }
  73
  74 void call_memmove(void) {
  75   char s1[10], s2[20];
  76   __builtin_memmove(s2, s1, 20);
  77   __builtin_memmove(s1, s2, 20); // expected-warning {{'memmove' will always overflow; destination buffer has size 10, but size argument is 20}}
  78 }
  79
  80 void call_memset(void) {
  81   char buf[10];
  82   __builtin_memset(buf, 0xff, 10);
  83   __builtin_memset(buf, 0xff, 11); // expected-warning {{'memset' will always overflow; destination buffer has size 10, but size argument is 11}}
  84 }
  85
  86 void call_snprintf(void) {
  87   char buf[10];
  88   __builtin_snprintf(buf, 10, "merp");
  89   __builtin_snprintf(buf, 11, "merp"); // expected-warning {{'snprintf' size argument is too large; destination buffer has size 10, but size argument is 11}}
  90 }
  91
  92 void call_vsnprintf(void) {
  93   char buf[10];
  94   __builtin_va_list list;
  95   __builtin_vsnprintf(buf, 10, "merp", list);
  96   __builtin_vsnprintf(buf, 11, "merp", list); // expected-warning {{'vsnprintf' size argument is too large; destination buffer has size 10, but size argument is 11}}
  97 }
  98
  99 void call_sprintf_chk(char *buf) {
 100   __builtin___sprintf_chk(buf, 1, 6, "hell\n");
 101   __builtin___sprintf_chk(buf, 1, 5, "hell\n");     // expected-warning {{'sprintf' will always overflow; destination buffer has size 5, but format string expands to at least 6}}
 102   __builtin___sprintf_chk(buf, 1, 6, "hell\0 boy"); // expected-warning {{format string contains '\0' within the string body}}
 103   __builtin___sprintf_chk(buf, 1, 2, "hell\0 boy"); // expected-warning {{format string contains '\0' within the string body}}
 104   // expected-warning@-1 {{'sprintf' will always overflow; destination buffer has size 2, but format string expands to at least 5}}
 105   __builtin___sprintf_chk(buf, 1, 6, "hello");
 106   __builtin___sprintf_chk(buf, 1, 5, "hello"); // expected-warning {{'sprintf' will always overflow; destination buffer has size 5, but format string expands to at least 6}}
 107   __builtin___sprintf_chk(buf, 1, 2, "%c", '9');
 108   __builtin___sprintf_chk(buf, 1, 1, "%c", '9'); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 109   __builtin___sprintf_chk(buf, 1, 2, "%d", 9);
 110   __builtin___sprintf_chk(buf, 1, 1, "%d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 111   __builtin___sprintf_chk(buf, 1, 2, "%i", 9);
 112   __builtin___sprintf_chk(buf, 1, 1, "%i", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 113   __builtin___sprintf_chk(buf, 1, 2, "%o", 9);
 114   __builtin___sprintf_chk(buf, 1, 1, "%o", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 115   __builtin___sprintf_chk(buf, 1, 2, "%u", 9);
 116   __builtin___sprintf_chk(buf, 1, 1, "%u", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 117   __builtin___sprintf_chk(buf, 1, 2, "%x", 9);
 118   __builtin___sprintf_chk(buf, 1, 1, "%x", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 119   __builtin___sprintf_chk(buf, 1, 2, "%X", 9);
 120   __builtin___sprintf_chk(buf, 1, 1, "%X", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 121   __builtin___sprintf_chk(buf, 1, 2, "%hhd", (char)9);
 122   __builtin___sprintf_chk(buf, 1, 1, "%hhd", (char)9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 123   __builtin___sprintf_chk(buf, 1, 2, "%hd", (short)9);
 124   __builtin___sprintf_chk(buf, 1, 1, "%hd", (short)9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 125   __builtin___sprintf_chk(buf, 1, 2, "%ld", 9l);
 126   __builtin___sprintf_chk(buf, 1, 1, "%ld", 9l); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 127   __builtin___sprintf_chk(buf, 1, 2, "%lld", 9ll);
 128   __builtin___sprintf_chk(buf, 1, 1, "%lld", 9ll); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 129   __builtin___sprintf_chk(buf, 1, 2, "%%");
 130   __builtin___sprintf_chk(buf, 1, 1, "%%"); // expected-warning {{'sprintf' will always overflow; destination buffer has size 1, but format string expands to at least 2}}
 131   __builtin___sprintf_chk(buf, 1, 4, "%#x", 9);
 132   __builtin___sprintf_chk(buf, 1, 3, "%#x", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 3, but format string expands to at least 4}}
 133   __builtin___sprintf_chk(buf, 1, 4, "%p", (void *)9);
 134   __builtin___sprintf_chk(buf, 1, 3, "%p", (void *)9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 3, but format string expands to at least 4}}
 135   __builtin___sprintf_chk(buf, 1, 3, "%+d", 9);
 136   __builtin___sprintf_chk(buf, 1, 2, "%+d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 2, but format string expands to at least 3}}
 137   __builtin___sprintf_chk(buf, 1, 3, "% i", 9);
 138   __builtin___sprintf_chk(buf, 1, 2, "% i", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 2, but format string expands to at least 3}}
 139   __builtin___sprintf_chk(buf, 1, 6, "%5d", 9);
 140   __builtin___sprintf_chk(buf, 1, 5, "%5d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 5, but format string expands to at least 6}}
 141   __builtin___sprintf_chk(buf, 1, 9, "%f", 9.f);
 142   __builtin___sprintf_chk(buf, 1, 8, "%f", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 8, but format string expands to at least 9}}
 143   __builtin___sprintf_chk(buf, 1, 9, "%Lf", (long double)9.);
 144   __builtin___sprintf_chk(buf, 1, 8, "%Lf", (long double)9.); // expected-warning {{'sprintf' will always overflow; destination buffer has size 8, but format string expands to at least 9}}
 145   __builtin___sprintf_chk(buf, 1, 10, "%+f", 9.f);
 146   __builtin___sprintf_chk(buf, 1, 9, "%+f", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 9, but format string expands to at least 10}}
 147   __builtin___sprintf_chk(buf, 1, 12, "%e", 9.f);
 148   __builtin___sprintf_chk(buf, 1, 11, "%e", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 11, but format string expands to at least 12}}
 149 }
 150
 151 void call_sprintf(void) {
 152   char buf[6];
 153   sprintf(buf, "hell\0 boy"); // expected-warning {{format string contains '\0' within the string body}}
 154   sprintf(buf, "hello b\0y"); // expected-warning {{format string contains '\0' within the string body}}
 155   // expected-warning@-1 {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 8}}
 156   sprintf(buf, "hello");
 157   sprintf(buf, "hello!"); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 158   sprintf(buf, "1234%%");
 159   sprintf(buf, "12345%%"); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 160   sprintf(buf, "1234%c", '9');
 161   sprintf(buf, "12345%c", '9'); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 162   sprintf(buf, "1234%d", 9);
 163   sprintf(buf, "12345%d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 164   sprintf(buf, "1234%lld", 9ll);
 165   sprintf(buf, "12345%lld", 9ll); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 166   sprintf(buf, "12%#x", 9);
 167   sprintf(buf, "123%#x", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 168   sprintf(buf, "12%p", (void *)9);
 169   sprintf(buf, "123%p", (void *)9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 170   sprintf(buf, "123%+d", 9);
 171   sprintf(buf, "1234%+d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 172   sprintf(buf, "123% i", 9);
 173   sprintf(buf, "1234% i", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 174   sprintf(buf, "%5d", 9);
 175   sprintf(buf, "1%5d", 9); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 176   sprintf(buf, "%.3f", 9.f);
 177   sprintf(buf, "5%.3f", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 178   sprintf(buf, "%+.2f", 9.f);
 179   sprintf(buf, "%+.3f", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 7}}
 180   sprintf(buf, "%.0e", 9.f);
 181   sprintf(buf, "5%.1e", 9.f); // expected-warning {{'sprintf' will always overflow; destination buffer has size 6, but format string expands to at least 8}}
 182 }
 183
 184 #ifdef __cplusplus
 185 template <class> struct S {
 186   void mf() const {
 187     __builtin_memset(const_cast<char *>(mv), 0, 0);
 188   }
 189
 190   char mv[10];
 191 };
 192
 193 template <int A, int B>
 194 void call_memcpy_dep() {
 195   char bufferA[A];
 196   char bufferB[B];
 197   memcpy(bufferA, bufferB, 10); // expected-warning{{'memcpy' will always overflow; destination buffer has size 9, but size argument is 10}}
 198 }
 199
 200 void call_call_memcpy() {
 201   call_memcpy_dep<10, 9>();
 202   call_memcpy_dep<9, 10>(); // expected-note {{in instantiation of function template specialization 'call_memcpy_dep<9, 10>' requested here}}
 203 }
 204 #endif