You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
84 lines
1.3 KiB
84 lines
1.3 KiB
/*
|
|
* Copyright (c) 2016-present
|
|
*
|
|
* Programming Research Laboratory (ROPAS)
|
|
* Seoul National University, Korea
|
|
*
|
|
* This source code is licensed under the MIT license found in the
|
|
* LICENSE file in the root directory of this source tree.
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
|
|
char* safealloc(int n) {
|
|
char* x;
|
|
if (n > 0)
|
|
x = malloc(n);
|
|
else
|
|
x = malloc(10);
|
|
|
|
if (!x)
|
|
return x;
|
|
else
|
|
exit(1);
|
|
}
|
|
|
|
void for_loop() {
|
|
char* a;
|
|
int i;
|
|
|
|
a = safealloc(10);
|
|
for (i = 0; i < 10; i++) {
|
|
a[i] = 'a'; /* SAFE */
|
|
}
|
|
a = safealloc(5);
|
|
for (i = 0; i < 10; i++) {
|
|
a[i] = 'a'; /* BUG */
|
|
}
|
|
}
|
|
|
|
void nop() { int k = 0; }
|
|
|
|
int two_loops(int m) {
|
|
for (int i = 0; i < m; i++) {
|
|
nop();
|
|
}
|
|
for (int j = 0; j < m; j++) {
|
|
nop();
|
|
}
|
|
return m;
|
|
}
|
|
|
|
void call_two_loops_Good() {
|
|
int a[10];
|
|
int m = 5;
|
|
a[two_loops(m)] = 1;
|
|
}
|
|
|
|
void call_two_loops_Bad() {
|
|
int a[10];
|
|
int m = 15;
|
|
a[two_loops(m)] = 1;
|
|
}
|
|
|
|
struct payload {
|
|
int count;
|
|
int payload[];
|
|
};
|
|
|
|
#define COUNT 10
|
|
|
|
// memleak but no array out of bounds error
|
|
void malloc_sizeof_value_leak_good() {
|
|
struct payload* x;
|
|
x = malloc(sizeof(*x) + COUNT * sizeof(x->payload[0]));
|
|
if (x == NULL) {
|
|
return 1;
|
|
}
|
|
x->count = COUNT;
|
|
for (int i = 0; i < COUNT; i++) {
|
|
x->payload[i] = i;
|
|
}
|
|
/* missing free(x) */
|
|
}
|