| // RUN: %clang_cc1 -analyze -analyzer-checker=core,unix.Malloc -analyzer-store=region -verify -fblocks %s |
| #include "system-header-simulator-objc.h" |
| |
| typedef __typeof(sizeof(int)) size_t; |
| void *malloc(size_t); |
| void free(void *); |
| |
| // Done with headers. Start testing. |
| void testNSDatafFreeWhenDoneNoError(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [NSData dataWithBytesNoCopy:data length:dataLength]; |
| free(data); // no warning |
| } |
| |
| void testNSDataFreeWhenDoneYES(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [NSData dataWithBytesNoCopy:data length:dataLength freeWhenDone:1]; // no-warning |
| } |
| |
| void testNSDataFreeWhenDoneYES2(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [[NSData alloc] initWithBytesNoCopy:data length:dataLength freeWhenDone:1]; // no-warning |
| } |
| |
| |
| void testNSStringFreeWhenDoneYES(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSString *nsstr = [[NSString alloc] initWithBytesNoCopy:data length:dataLength encoding:NSUTF8StringEncoding freeWhenDone:1]; // no-warning |
| } |
| |
| void testNSStringFreeWhenDoneYES2(NSUInteger dataLength) { |
| unichar *data = (unichar*)malloc(42); |
| NSString *nsstr = [[NSString alloc] initWithCharactersNoCopy:data length:dataLength freeWhenDone:1]; // no-warning |
| } |
| |
| |
| void testNSDataFreeWhenDoneNO(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [NSData dataWithBytesNoCopy:data length:dataLength freeWhenDone:0]; // expected-warning{{leak}} |
| } |
| |
| void testNSDataFreeWhenDoneNO2(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [[NSData alloc] initWithBytesNoCopy:data length:dataLength freeWhenDone:0]; // expected-warning{{leak}} |
| } |
| |
| |
| void testNSStringFreeWhenDoneNO(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSString *nsstr = [[NSString alloc] initWithBytesNoCopy:data length:dataLength encoding:NSUTF8StringEncoding freeWhenDone:0]; // expected-warning{{leak}} |
| } |
| |
| void testNSStringFreeWhenDoneNO2(NSUInteger dataLength) { |
| unichar *data = (unichar*)malloc(42); |
| NSString *nsstr = [[NSString alloc] initWithCharactersNoCopy:data length:dataLength freeWhenDone:0]; // expected-warning{{leak}} |
| } |
| |
| // TODO: False Negative. |
| void testNSDatafFreeWhenDoneFN(NSUInteger dataLength) { |
| unsigned char *data = (unsigned char *)malloc(42); |
| NSData *nsdata = [NSData dataWithBytesNoCopy:data length:dataLength freeWhenDone:1]; |
| free(data); // false negative |
| } |
| |
| // Test CF/NS...NoCopy. PR12100: Pointers can escape when custom deallocators are provided. |
| void testNSDatafFreeWhenDone(NSUInteger dataLength) { |
| CFStringRef str; |
| char *bytes = (char*)malloc(12); |
| str = CFStringCreateWithCStringNoCopy(0, bytes, NSNEXTSTEPStringEncoding, 0); // no warning |
| CFRelease(str); // default allocator also frees bytes |
| } |
| |
| void stringWithExternalContentsExample(void) { |
| #define BufferSize 1000 |
| CFMutableStringRef mutStr; |
| UniChar *myBuffer; |
| |
| myBuffer = (UniChar *)malloc(BufferSize * sizeof(UniChar)); |
| |
| mutStr = CFStringCreateMutableWithExternalCharactersNoCopy(0, myBuffer, 0, BufferSize, kCFAllocatorNull); // expected-warning{{leak}} |
| |
| CFRelease(mutStr); |
| //free(myBuffer); |
| } |
| |
| // PR12101 : pointers can escape through custom deallocators set on creation of a container. |
| void TestCallbackReleasesMemory(CFDictionaryKeyCallBacks keyCallbacks) { |
| void *key = malloc(12); |
| void *val = malloc(12); |
| CFMutableDictionaryRef x = CFDictionaryCreateMutable(kCFAllocatorDefault, 0, &keyCallbacks, &kCFTypeDictionaryValueCallBacks); |
| CFDictionarySetValue(x, key, val); |
| return;// no-warning |
| } |
| |
| NSData *radar10976702() { |
| void *bytes = malloc(10); |
| return [NSData dataWithBytesNoCopy:bytes length:10]; // no-warning |
| } |
| |
| void testBlocks() { |
| int *x= (int*)malloc(sizeof(int)); |
| int (^myBlock)(int) = ^(int num) { |
| free(x); |
| return num; |
| }; |
| myBlock(3); |
| } |
| |
| // Test that we handle pointer escaping through OSAtomicEnqueue. |
| typedef volatile struct { |
| void *opaque1; |
| long opaque2; |
| } OSQueueHead; |
| void OSAtomicEnqueue( OSQueueHead *__list, void *__new, size_t __offset) __attribute__((weak_import)); |
| static inline void radar11111210(OSQueueHead *pool) { |
| void *newItem = malloc(4); |
| OSAtomicEnqueue(pool, newItem, 4); |
| } |
| |