gcc/testsuite/c-c++-common/analyzer/infinite-recursion-pr108524-1.c

   1 /* Reduced from qemu-7.2.0's qobject/json-parser.c, which
   2    is licensed under LGPLv2.1 or later.  */
   3
   4 /* { dg-additional-options "-fno-analyzer-call-summaries -Wno-analyzer-too-complex" } */
   5
   6 #include "../../gcc.dg/analyzer/analyzer-decls.h"
   7
   8
   9 typedef __builtin_va_list va_list;
  10
  11 typedef struct _GQueue GQueue;
  12 typedef struct Error Error;
  13 typedef struct QList QList;
  14 typedef struct QObject QObject;
  15
  16 struct QObjectBase_ {
  17   /* [...snip...] */
  18 };
  19
  20
  21 struct QObject {
  22   struct QObjectBase_ base;
  23 };
  24
  25 #define QOBJECT(obj) ((QObject *)obj)
  26 #define qobject_unref(OBJ) /* [...snip...] */
  27
  28 typedef struct QTailQLink {
  29   void *tql_next;
  30   struct QTailQLink *tql_prev;
  31 } QTailQLink;
  32
  33 struct QList {
  34   struct QObjectBase_ base;
  35   union {
  36     struct QListEntry *tqh_first;
  37     QTailQLink tqh_circ;
  38   } head;
  39 };
  40 QList *qlist_new(void);
  41 void qlist_append_obj(QList *qlist, QObject *obj);
  42
  43 typedef enum json_token_type {
  44   /* [...snip...] */
  45   JSON_LSQUARE,
  46   JSON_RSQUARE,
  47   /* [...snip...] */
  48   JSON_COMMA,
  49   /* [...snip...] */
  50   JSON_KEYWORD,
  51   /* [...snip...] */
  52 } JSONTokenType;
  53 typedef struct JSONToken JSONToken;
  54
  55 struct JSONToken {
  56   JSONTokenType type;
  57   int x;
  58   int y;
  59   char str[];
  60 };
  61
  62 typedef struct JSONParserContext {
  63   Error *err;
  64   JSONToken *current;
  65   GQueue *buf;
  66   va_list *ap;
  67 } JSONParserContext;
  68 static QObject *parse_value(JSONParserContext *ctxt);
  69
  70 JSONToken *parser_context_pop_token(JSONParserContext *ctxt);
  71 JSONToken *parser_context_peek_token(JSONParserContext *ctxt);
  72
  73 static QObject *parse_array(JSONParserContext *ctxt) {
  74   QList *list = NULL;
  75   JSONToken *token, *peek;
  76
  77   token = parser_context_pop_token(ctxt);
  78
  79   list = qlist_new();
  80
  81   peek = parser_context_peek_token(ctxt);
  82   if (peek == NULL) {
  83     goto out;
  84   }
  85
  86   if (peek->type != JSON_RSQUARE) {
  87     QObject *obj;
  88
  89     obj = parse_value(ctxt); /* { dg-bogus "infinite recursion" } */
  90     if (obj == NULL) {
  91       goto out;
  92     }
  93
  94     qlist_append_obj(list, obj);
  95
  96     token = parser_context_pop_token(ctxt);
  97     if (token == NULL) {
  98       goto out;
  99     }
 100
 101     while (token->type != JSON_RSQUARE) {
 102       if (token->type != JSON_COMMA) {
 103         goto out;
 104       }
 105
 106       obj = parse_value(ctxt);
 107       if (obj == NULL) {
 108         goto out;
 109       }
 110
 111       qlist_append_obj(list, obj);
 112
 113       token = parser_context_pop_token(ctxt);
 114       if (token == NULL) {
 115         goto out;
 116       }
 117     }
 118   } else {
 119     (void)parser_context_pop_token(ctxt);
 120   }
 121
 122   return QOBJECT(list);
 123
 124 out:
 125   qobject_unref(list);
 126   return NULL;
 127 }
 128
 129 QObject *parse_keyword(JSONParserContext *ctxt);
 130
 131 QObject *parse_value(JSONParserContext *ctxt) {
 132   JSONToken *token;
 133
 134   token = parser_context_peek_token(ctxt);
 135   if (token == NULL) {
 136     return NULL;
 137   }
 138
 139   switch (token->type) {
 140   case JSON_LSQUARE:
 141     return parse_array(ctxt); /* { dg-bogus "infinite recursion" } */
 142   case JSON_KEYWORD:
 143     return parse_keyword(ctxt);
 144   default:
 145     return NULL;
 146   }
 147 }