tools/clang-tidy/test/clang-analyzer-unix.Malloc.cpp

   1 // https://clang-analyzer.llvm.org/available_checks.html
   2
   3 #include "structures.h"
   4
   5 void test_malloc()
   6 {
   7   int *p = (int*) malloc(1);
   8   free(p);
   9   free(p); // warning: attempt to free released memory
  10 }
  11
  12 void test_use_after_free()
  13 {
  14   int *p = (int*) malloc(sizeof(int));
  15   free(p);
  16   *p = 1; // warning: use after free
  17 }
  18
  19 void test_leak()
  20 {
  21   int *p = (int*) malloc(1);
  22   if (p)
  23     return; // warning: memory is never released
  24 }
  25
  26 void test_free_local()
  27 {
  28   int a[] = { 1 };
  29   free(a); // warning: argument is not allocated by malloc
  30 }
  31
  32 void test_free_offset()
  33 {
  34   int *p = (int*) malloc(sizeof(char));
  35   p = p - 1;
  36   free(p); // warning: argument to free() is offset by -4 bytes
  37 }