clang/docs/analyzer/checkers/unix_malloc_example.c

   1
   2 void test() {
   3   int *p = malloc(1);
   4   free(p);
   5   free(p); // warn: attempt to free released memory
   6 }
   7
   8 void test() {
   9   int *p = malloc(sizeof(int));
  10   free(p);
  11   *p = 1; // warn: use after free
  12 }
  13
  14 void test() {
  15   int *p = malloc(1);
  16   if (p)
  17     return; // warn: memory is never released
  18 }
  19
  20 void test() {
  21   int a[] = { 1 };
  22   free(a); // warn: argument is not allocated by malloc
  23 }
  24
  25 void test() {
  26   int *p = malloc(sizeof(char));
  27   p = p - 1;
  28   free(p); // warn: argument to free() is offset by -4 bytes
  29 }
  30