mirror of
https://github.com/intel/llvm.git
synced 2026-02-05 04:19:25 +08:00
Casting to void* or any other pointer-to-sizeless type (e.g. function pointers) causes a divide-by-zero error. Simple fix: check if the pointee type size is 0 and bail out early if it is.
llvm-svn: 106401
This commit is contained in:
@@ -63,6 +63,11 @@ void CastSizeChecker::PreVisitCastExpr(CheckerContext &C, const CastExpr *CE) {
|
||||
|
||||
CharUnits RegionSize = CharUnits::fromQuantity(CI->getValue().getSExtValue());
|
||||
CharUnits TypeSize = C.getASTContext().getTypeSizeInChars(ToPointeeTy);
|
||||
|
||||
// void, and a few other un-sizeable types
|
||||
if (TypeSize.isZero())
|
||||
return;
|
||||
|
||||
if (RegionSize % TypeSize != 0) {
|
||||
if (ExplodedNode *N = C.GenerateSink()) {
|
||||
if (!BT)
|
||||
|
||||
@@ -75,8 +75,20 @@ void PR6123() {
|
||||
void PR7217() {
|
||||
int *buf = malloc(2); // expected-warning{{Cast a region whose size is not a multiple of the destination type size.}}
|
||||
buf[1] = 'c'; // not crash
|
||||
|
||||
}
|
||||
|
||||
void mallocCastToVoid() {
|
||||
void *p = malloc(2);
|
||||
const void *cp = p; // not crash
|
||||
free(p);
|
||||
}
|
||||
|
||||
void mallocCastToFP() {
|
||||
void *p = malloc(2);
|
||||
void (*fp)() = p; // not crash
|
||||
free(p);
|
||||
}
|
||||
|
||||
// This tests that malloc() buffers are undefined by default
|
||||
char mallocGarbage () {
|
||||
char *buf = malloc(2);
|
||||
|
||||
Reference in New Issue
Block a user