You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

114 lines
1.9 KiB

/*
* Copyright (c) 2017-present, Facebook, Inc.
*
* This source code is licensed under the MIT license found in the
* LICENSE file in the root directory of this source tree.
*/
#include <stdint.h>
void cast_Good() {
char arr[5];
*(int32_t*)(arr + 1) = 123;
}
void cast_Bad_FN() {
char arr[1];
*(int32_t*)arr = 123;
}
void cast2_Good() {
int32_t arr[4];
*(((char*)arr) + 4) = 123;
}
void cast2_Bad() {
int32_t arr[4];
*(((char*)arr) + 20) = 123;
}
void cast_unsigned_to_signed_Good() {
char arr[10];
uint32_t x = 15;
int32_t y = (int32_t)x;
if (y < 10) {
arr[y] = 0;
}
}
void cast_unsigned_to_signed_Bad_FN() {
char arr[10];
uint32_t x = 4294967295;
int32_t y = (int32_t)x; // y is -1.
if (y < 10) {
arr[y] = 0;
}
}
void cast_signed_to_unsigned_Good() {
char arr[10];
int32_t x = 15;
uint32_t y = (uint32_t)x;
if (y < 10) {
arr[y] = 0;
}
}
void cast_signed_to_unsigned_Bad() {
char arr[10];
int32_t x = -1;
uint32_t y = (uint32_t)x;
if (y > 0) {
arr[y] = 0;
}
}
void cast_signed_to_unsigned2_Bad_FN() {
char arr[10];
int32_t x = -2;
uint32_t y = (uint32_t)x;
if (y > 0) {
arr[y] = 0;
}
}
void cast_float_to_int_Good() {
char arr[10];
float x = 15.0;
int32_t y = (int32_t)x;
if (y < 10) {
arr[y] = 0;
}
}
void cast_float_to_int_Bad_FN() {
char arr[10];
float x = 15000000000.0;
int32_t y = (int32_t)x; // y is -2147483648.
if (y < 10) {
arr[y] = 0;
}
}
/*
Testing that the analyzer doesn't run infinitely on these cases
*/
typedef struct s_cast {
char* data;
struct s_cast* another;
char* data2;
} t_cast;
char cast_field_to_struct(struct s_cast* s, int i0) {
for (int i = i0; i > 0; i--) {
s = (struct s_cast*)(&s->data);
}
s = s->another;
for (int i = i0; i > 0; i--) {
s = (struct s_cast*)(&s->data);
s = (struct s_cast*)((unsigned char*)(void*)(s->data2) -
offsetof(s->data2));
}
return *s->data;
}