gcc/testsuite/c-c++-common/analyzer/out-of-bounds-read-struct-arr.c

   1 #include <stdint.h>
   2
   3 struct st
   4 {
   5   char buf[16];
   6   int32_t x;
   7   int32_t y;
   8 };
   9
  10 struct st arr[10];
  11
  12 int32_t struct_arr_read_x_element_before_start_far(void)
  13 {
  14   return arr[-100].x; /* { dg-warning "buffer under-read" "warning" } */
  15   /* { dg-message "out-of-bounds read from byte -2384 till byte -2381 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  16   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
  17 }
  18
  19 int32_t struct_arr_read_x_element_before_start_near(void)
  20 {
  21   return arr[-2].x; /* { dg-warning "buffer under-read" "warning" } */
  22   /* { dg-message "out-of-bounds read from byte -32 till byte -29 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  23   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
  24 }
  25
  26 int32_t struct_arr_read_x_element_before_start_off_by_one(void)
  27 {
  28   return arr[-1].x; /* { dg-warning "buffer under-read" "warning" } */
  29   /* { dg-message "out-of-bounds read from byte -8 till byte -5 but 'arr' starts at byte 0" "final event" { target *-*-* } .-1 } */
  30   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-2 } */
  31 }
  32
  33 int32_t struct_arr_read_x_element_at_start(void)
  34 {
  35   return arr[0].x;
  36 }
  37
  38 int32_t struct_arr_read_x_element_at_end(void)
  39 {
  40   return arr[9].x;
  41 }
  42
  43 int32_t struct_arr_read_x_element_after_end_off_by_one(void)
  44 {
  45   return arr[10].x; /* { dg-warning "buffer over-read" "warning" } */
  46   /* { dg-message "out-of-bounds read from byte 256 till byte 259 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  47   /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  48   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
  49 }
  50
  51 int32_t struct_arr_read_x_element_after_end_near(void)
  52 {
  53   return arr[11].x; /* { dg-warning "buffer over-read" "warning" } */
  54   /* { dg-message "out-of-bounds read from byte 280 till byte 283 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  55   /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  56   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
  57 }
  58
  59 int32_t struct_arr_read_x_element_after_end_far(void)
  60 {
  61   return arr[100].x; /* { dg-warning "buffer over-read" "warning" } */
  62   /* { dg-message "out-of-bounds read from byte 2416 till byte 2419 but 'arr' ends at byte 240" "final event" { target *-*-* } .-1 } */
  63   /* { dg-message "read of 4 bytes from after the end of 'arr'" "num bad bytes note" { target *-*-* } .-2 } */
  64   /* { dg-message "valid subscripts for 'arr' are '\\\[0\\\]' to '\\\[9\\\]'" "valid subscript note" { target *-*-* } .-3 } */
  65 }