2 * Copyright (C) 2013 Oracle.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version 2
7 * of the License, or (at your option) any later version.
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see http://www.gnu.org/copyleft/gpl.txt
19 * The plan here is to save all the possible values store to a given struct
22 * We will load all the values in to the function_type_val table first then
23 * run a script on that and load all the resulting values into the type_val
26 * So in this file we want to take the union of everything assigned to the
27 * struct member and insert it into the function_type_val at the end.
29 * You would think that we could use smatch_modification_hooks.c or
30 * extra_modification_hook() here to get the information here but in the end we
31 * need to code everything again a third time.
36 #include "smatch_slist.h"
37 #include "smatch_extra.h"
41 struct stree_stack
*fn_type_val_stack
;
42 struct stree
*fn_type_val
;
43 struct stree
*global_type_val
;
46 static int get_vals(void *unused
, int argc
, char **argv
, char **azColName
)
48 db_vals
= alloc_string(argv
[0]);
52 static void match_inline_start(struct expression
*expr
)
54 push_stree(&fn_type_val_stack
, fn_type_val
);
58 static void match_inline_end(struct expression
*expr
)
60 free_stree(&fn_type_val
);
61 fn_type_val
= pop_stree(&fn_type_val_stack
);
64 int get_db_type_rl(struct expression
*expr
, struct range_list
**rl
)
67 struct range_list
*tmp
;
70 member
= get_member_name(expr
);
75 run_sql(get_vals
, NULL
,
76 "select value from type_value where type = '%s';", member
);
80 type
= get_type(expr
);
81 str_to_rl(type
, db_vals
, &tmp
);
90 static void add_type_val(char *member
, struct range_list
*rl
)
92 struct smatch_state
*old
, *add
, *new;
94 member
= alloc_string(member
);
95 old
= get_state_stree(fn_type_val
, my_id
, member
, NULL
);
96 add
= alloc_estate_rl(rl
);
98 new = merge_estates(old
, add
);
101 set_state_stree(&fn_type_val
, my_id
, member
, NULL
, new);
104 static void add_fake_type_val(char *member
, struct range_list
*rl
, int ignore
)
106 struct smatch_state
*old
, *add
, *new;
108 member
= alloc_string(member
);
109 old
= get_state_stree(fn_type_val
, my_id
, member
, NULL
);
110 if (old
&& strcmp(old
->name
, "min-max") == 0)
112 if (ignore
&& old
&& strcmp(old
->name
, "ignore") == 0)
114 add
= alloc_estate_rl(rl
);
116 new = merge_estates(old
, add
);
120 new->name
= alloc_string("ignore");
122 new->name
= alloc_string("min-max");
124 set_state_stree(&fn_type_val
, my_id
, member
, NULL
, new);
127 static void add_global_type_val(char *member
, struct range_list
*rl
)
129 struct smatch_state
*old
, *add
, *new;
131 member
= alloc_string(member
);
132 old
= get_state_stree(global_type_val
, my_id
, member
, NULL
);
133 add
= alloc_estate_rl(rl
);
135 new = merge_estates(old
, add
);
138 new = clone_estate_perm(new);
139 set_state_stree_perm(&global_type_val
, my_id
, member
, NULL
, new);
142 static int has_link_cb(void *has_link
, int argc
, char **argv
, char **azColName
)
144 *(int *)has_link
= 1;
148 static int is_ignored_fake_assignment(void)
150 struct expression
*expr
;
155 expr
= get_faked_expression();
156 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
158 if (!is_void_pointer(expr
->right
))
160 member_name
= get_member_name(expr
->right
);
164 type
= get_type(expr
->left
);
165 if (!type
|| type
->type
!= SYM_PTR
)
167 type
= get_real_base_type(type
);
168 if (!type
|| type
->type
!= SYM_STRUCT
)
171 run_sql(has_link_cb
, &has_link
,
172 "select * from data_info where type = %d and data = '%s' and value = '%s';",
173 TYPE_LINK
, member_name
, type_to_str(type
));
177 static int is_ignored_macro(void)
179 struct expression
*expr
;
182 expr
= get_faked_expression();
183 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
185 name
= get_macro_name(expr
->right
->pos
);
188 if (strcmp(name
, "container_of") == 0)
190 if (strcmp(name
, "rb_entry") == 0)
192 if (strcmp(name
, "list_entry") == 0)
194 if (strcmp(name
, "list_first_entry") == 0)
196 if (strcmp(name
, "hlist_entry") == 0)
198 if (strstr(name
, "for_each"))
203 static int is_ignored_function(void)
205 struct expression
*expr
;
207 expr
= get_faked_expression();
208 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
210 expr
= strip_expr(expr
->right
);
211 if (!expr
|| expr
->type
!= EXPR_CALL
|| expr
->fn
->type
!= EXPR_SYMBOL
)
214 if (sym_name_is("kmalloc", expr
->fn
))
216 if (sym_name_is("netdev_priv", expr
->fn
))
222 static int is_uncasted_function(void)
224 struct expression
*expr
;
225 struct symbol
*left_type
, *right_type
;
227 expr
= get_faked_expression();
228 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
230 if (expr
->right
->type
!= EXPR_CALL
)
232 left_type
= get_type(expr
->left
);
233 right_type
= get_type(expr
->right
);
235 if (!left_type
|| !right_type
)
237 if (left_type
->type
!= SYM_PTR
|| right_type
->type
!= SYM_PTR
)
239 left_type
= get_real_base_type(left_type
);
240 right_type
= get_real_base_type(right_type
);
242 if (left_type
== right_type
)
247 static void match_assign_value(struct expression
*expr
)
249 char *member
, *right_member
;
250 struct range_list
*rl
;
253 type
= get_type(expr
->left
);
254 if (type
&& type
->type
== SYM_STRUCT
)
257 member
= get_member_name(expr
->left
);
261 /* if we're saying foo->mtu = bar->mtu then that doesn't add information */
262 right_member
= get_member_name(expr
->right
);
263 if (right_member
&& strcmp(right_member
, member
) == 0)
266 if (is_fake_call(expr
->right
)) {
267 if (is_ignored_macro())
269 if (is_ignored_function())
271 if (is_uncasted_function())
273 add_fake_type_val(member
, alloc_whole_rl(get_type(expr
->left
)), is_ignored_fake_assignment());
277 if (expr
->op
== '=') {
278 get_absolute_rl(expr
->right
, &rl
);
279 rl
= cast_rl(type
, rl
);
282 * This is a bit cheating. We order it so this will already be set
283 * by smatch_extra.c and we just look up the value.
285 get_absolute_rl(expr
->left
, &rl
);
287 add_type_val(member
, rl
);
289 free_string(right_member
);
294 * If we too: int *p = &my_struct->member then abandon all hope of tracking
297 static void match_assign_pointer(struct expression
*expr
)
299 struct expression
*right
;
301 struct range_list
*rl
;
304 right
= strip_expr(expr
->right
);
305 if (right
->type
!= EXPR_PREOP
|| right
->op
!= '&')
307 right
= strip_expr(right
->unop
);
309 member
= get_member_name(right
);
312 type
= get_type(right
);
313 rl
= alloc_whole_rl(type
);
314 add_type_val(member
, rl
);
318 static void match_global_assign(struct expression
*expr
)
321 struct range_list
*rl
;
324 type
= get_type(expr
->left
);
325 if (type
&& (type
->type
== SYM_ARRAY
|| type
->type
== SYM_STRUCT
))
327 member
= get_member_name(expr
->left
);
330 get_absolute_rl(expr
->right
, &rl
);
331 add_global_type_val(member
, rl
);
335 static void unop_expr(struct expression
*expr
)
337 struct range_list
*rl
;
340 if (expr
->op
!= SPECIAL_DECREMENT
&& expr
->op
!= SPECIAL_INCREMENT
)
343 expr
= strip_expr(expr
->unop
);
344 member
= get_member_name(expr
);
347 rl
= alloc_whole_rl(get_type(expr
));
348 add_type_val(member
, rl
);
352 static void asm_expr(struct statement
*stmt
)
354 struct expression
*expr
;
355 struct range_list
*rl
;
359 FOR_EACH_PTR(stmt
->asm_outputs
, expr
) {
361 case 0: /* identifier */
362 case 1: /* constraint */
365 case 2: /* expression */
367 member
= get_member_name(expr
);
370 rl
= alloc_whole_rl(get_type(expr
));
371 add_type_val(member
, rl
);
375 } END_FOR_EACH_PTR(expr
);
378 static void db_param_add(struct expression
*expr
, int param
, char *key
, char *value
)
380 struct expression
*arg
;
382 struct range_list
*rl
;
385 if (strcmp(key
, "*$") != 0)
388 while (expr
->type
== EXPR_ASSIGNMENT
)
389 expr
= strip_expr(expr
->right
);
390 if (expr
->type
!= EXPR_CALL
)
393 arg
= get_argument_from_call_expr(expr
->args
, param
);
394 arg
= strip_expr(arg
);
397 type
= get_member_type_from_key(arg
, key
);
398 if (arg
->type
!= EXPR_PREOP
|| arg
->op
!= '&')
400 arg
= strip_expr(arg
->unop
);
402 member
= get_member_name(arg
);
405 call_results_to_rl(expr
, type
, value
, &rl
);
406 add_type_val(member
, rl
);
410 static void match_end_func_info(struct symbol
*sym
)
414 FOR_EACH_SM(fn_type_val
, sm
) {
415 sql_insert_function_type_value(sm
->name
, sm
->state
->name
);
416 } END_FOR_EACH_SM(sm
);
419 static void match_after_func(struct symbol
*sym
)
421 free_stree(&fn_type_val
);
424 static void match_end_file(struct symbol_list
*sym_list
)
428 FOR_EACH_SM(global_type_val
, sm
) {
429 sql_insert_function_type_value(sm
->name
, sm
->state
->name
);
430 } END_FOR_EACH_SM(sm
);
433 void register_type_val(int id
)
440 add_hook(&match_assign_value
, ASSIGNMENT_HOOK_AFTER
);
441 add_hook(&match_assign_pointer
, ASSIGNMENT_HOOK
);
442 add_hook(&unop_expr
, OP_HOOK
);
443 add_hook(&asm_expr
, ASM_HOOK
);
444 select_return_states_hook(PARAM_ADD
, &db_param_add
);
445 select_return_states_hook(PARAM_SET
, &db_param_add
);
448 add_hook(&match_inline_start
, INLINE_FN_START
);
449 add_hook(&match_inline_end
, INLINE_FN_END
);
451 add_hook(&match_end_func_info
, END_FUNC_HOOK
);
452 add_hook(&match_after_func
, AFTER_FUNC_HOOK
);
454 add_hook(&match_global_assign
, GLOBAL_ASSIGNMENT_HOOK
);
455 add_hook(&match_end_file
, END_FILE_HOOK
);