2 * Copyright (C) 2013 Oracle.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version 2
7 * of the License, or (at your option) any later version.
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, see http://www.gnu.org/copyleft/gpl.txt
19 * The plan here is to save all the possible values store to a given struct
22 * We will load all the values in to the function_type_val table first then
23 * run a script on that and load all the resulting values into the type_val
26 * So in this file we want to take the union of everything assigned to the
27 * struct member and insert it into the function_type_val at the end.
29 * You would think that we could use smatch_modification_hooks.c or
30 * extra_modification_hook() here to get the information here but in the end we
31 * need to code everything again a third time.
36 #include "smatch_slist.h"
37 #include "smatch_extra.h"
41 struct stree_stack
*fn_type_val_stack
;
42 struct stree
*fn_type_val
;
43 struct stree
*global_type_val
;
45 static int get_vals(void *_db_vals
, int argc
, char **argv
, char **azColName
)
47 char **db_vals
= _db_vals
;
49 *db_vals
= alloc_string(argv
[0]);
53 static void match_inline_start(struct expression
*expr
)
55 push_stree(&fn_type_val_stack
, fn_type_val
);
59 static void match_inline_end(struct expression
*expr
)
61 free_stree(&fn_type_val
);
62 fn_type_val
= pop_stree(&fn_type_val_stack
);
65 int get_db_type_rl(struct expression
*expr
, struct range_list
**rl
)
69 struct range_list
*tmp
;
72 member
= get_member_name(expr
);
76 run_sql(get_vals
, &db_vals
,
77 "select value from type_value where type = '%s';", member
);
81 type
= get_type(expr
);
82 str_to_rl(type
, db_vals
, &tmp
);
91 static void add_type_val(char *member
, struct range_list
*rl
)
93 struct smatch_state
*old
, *add
, *new;
95 member
= alloc_string(member
);
96 old
= get_state_stree(fn_type_val
, my_id
, member
, NULL
);
97 add
= alloc_estate_rl(rl
);
99 new = merge_estates(old
, add
);
102 set_state_stree(&fn_type_val
, my_id
, member
, NULL
, new);
105 static void add_fake_type_val(char *member
, struct range_list
*rl
, int ignore
)
107 struct smatch_state
*old
, *add
, *new;
109 member
= alloc_string(member
);
110 old
= get_state_stree(fn_type_val
, my_id
, member
, NULL
);
111 if (old
&& strcmp(old
->name
, "min-max") == 0)
113 if (ignore
&& old
&& strcmp(old
->name
, "ignore") == 0)
115 add
= alloc_estate_rl(rl
);
117 new = merge_estates(old
, add
);
121 new->name
= alloc_string("ignore");
123 new->name
= alloc_string("min-max");
125 set_state_stree(&fn_type_val
, my_id
, member
, NULL
, new);
128 static void add_global_type_val(char *member
, struct range_list
*rl
)
130 struct smatch_state
*old
, *add
, *new;
132 member
= alloc_string(member
);
133 old
= get_state_stree(global_type_val
, my_id
, member
, NULL
);
134 add
= alloc_estate_rl(rl
);
136 new = merge_estates(old
, add
);
139 new = clone_estate_perm(new);
140 set_state_stree_perm(&global_type_val
, my_id
, member
, NULL
, new);
143 static int has_link_cb(void *has_link
, int argc
, char **argv
, char **azColName
)
145 *(int *)has_link
= 1;
149 static int is_ignored_fake_assignment(void)
151 struct expression
*expr
;
156 expr
= get_faked_expression();
157 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
159 if (!is_void_pointer(expr
->right
))
161 member_name
= get_member_name(expr
->right
);
165 type
= get_type(expr
->left
);
166 if (!type
|| type
->type
!= SYM_PTR
)
168 type
= get_real_base_type(type
);
169 if (!type
|| type
->type
!= SYM_STRUCT
)
172 run_sql(has_link_cb
, &has_link
,
173 "select * from data_info where type = %d and data = '%s' and value = '%s';",
174 TYPE_LINK
, member_name
, type_to_str(type
));
178 static int is_ignored_macro(void)
180 struct expression
*expr
;
183 expr
= get_faked_expression();
184 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
186 name
= get_macro_name(expr
->right
->pos
);
189 if (strcmp(name
, "container_of") == 0)
191 if (strcmp(name
, "rb_entry") == 0)
193 if (strcmp(name
, "list_entry") == 0)
195 if (strcmp(name
, "list_first_entry") == 0)
197 if (strcmp(name
, "hlist_entry") == 0)
199 if (strstr(name
, "for_each"))
204 static int is_ignored_function(void)
206 struct expression
*expr
;
208 expr
= get_faked_expression();
209 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
211 expr
= strip_expr(expr
->right
);
212 if (!expr
|| expr
->type
!= EXPR_CALL
|| expr
->fn
->type
!= EXPR_SYMBOL
)
215 if (sym_name_is("kmalloc", expr
->fn
))
217 if (sym_name_is("netdev_priv", expr
->fn
))
223 static int is_uncasted_function(void)
225 struct expression
*expr
;
226 struct symbol
*left_type
, *right_type
;
228 expr
= get_faked_expression();
229 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
231 if (expr
->right
->type
!= EXPR_CALL
)
233 left_type
= get_type(expr
->left
);
234 right_type
= get_type(expr
->right
);
236 if (!left_type
|| !right_type
)
238 if (left_type
->type
!= SYM_PTR
|| right_type
->type
!= SYM_PTR
)
240 left_type
= get_real_base_type(left_type
);
241 right_type
= get_real_base_type(right_type
);
243 if (left_type
== right_type
)
248 static int set_param_type(void *_type_str
, int argc
, char **argv
, char **azColName
)
250 char **type_str
= _type_str
;
251 static char type_buf
[128];
254 if (strcmp(*type_str
, argv
[0]) == 0)
256 strncpy(type_buf
, "unknown", sizeof(type_buf
));
259 strncpy(type_buf
, argv
[0], sizeof(type_buf
));
260 *type_str
= type_buf
;
265 static char *db_get_parameter_type(int param
)
272 run_sql(set_param_type
, &ret
,
273 "select value from fn_data_link where "
274 "file = '%s' and function = '%s' and static = %d and type = %d and parameter = %d and key = '$';",
275 (cur_func_sym
->ctype
.modifiers
& MOD_STATIC
) ? get_base_file() : "extern",
276 cur_func_sym
->ident
->name
,
277 !!(cur_func_sym
->ctype
.modifiers
& MOD_STATIC
),
283 static int is_uncasted_fn_param_from_db(void)
285 struct expression
*expr
, *right
;
286 struct symbol
*left_type
;
287 char left_type_name
[128];
289 char *right_type_name
;
290 static struct expression
*prev_expr
;
293 expr
= get_faked_expression();
295 if (expr
== prev_expr
)
300 if (!expr
|| expr
->type
!= EXPR_ASSIGNMENT
)
302 left_type
= get_type(expr
->left
);
303 if (!left_type
|| left_type
->type
!= SYM_PTR
)
305 left_type
= get_real_base_type(left_type
);
306 if (!left_type
|| left_type
->type
!= SYM_STRUCT
)
308 snprintf(left_type_name
, sizeof(left_type_name
), "%s", type_to_str(left_type
));
310 right
= strip_expr(expr
->right
);
311 param
= get_param_num(right
);
314 right_type_name
= db_get_parameter_type(param
);
315 if (!right_type_name
)
318 if (strcmp(right_type_name
, left_type_name
) == 0) {
326 static void match_assign_value(struct expression
*expr
)
328 char *member
, *right_member
;
329 struct range_list
*rl
;
332 type
= get_type(expr
->left
);
333 if (type
&& type
->type
== SYM_STRUCT
)
336 member
= get_member_name(expr
->left
);
340 /* if we're saying foo->mtu = bar->mtu then that doesn't add information */
341 right_member
= get_member_name(expr
->right
);
342 if (right_member
&& strcmp(right_member
, member
) == 0)
345 if (is_fake_call(expr
->right
)) {
346 if (is_ignored_macro())
348 if (is_ignored_function())
350 if (is_uncasted_function())
352 if (is_uncasted_fn_param_from_db())
354 add_fake_type_val(member
, alloc_whole_rl(get_type(expr
->left
)), is_ignored_fake_assignment());
358 if (expr
->op
== '=') {
359 get_absolute_rl(expr
->right
, &rl
);
360 rl
= cast_rl(type
, rl
);
363 * This is a bit cheating. We order it so this will already be set
364 * by smatch_extra.c and we just look up the value.
366 get_absolute_rl(expr
->left
, &rl
);
368 add_type_val(member
, rl
);
370 free_string(right_member
);
375 * If we too: int *p = &my_struct->member then abandon all hope of tracking
378 static void match_assign_pointer(struct expression
*expr
)
380 struct expression
*right
;
382 struct range_list
*rl
;
385 right
= strip_expr(expr
->right
);
386 if (right
->type
!= EXPR_PREOP
|| right
->op
!= '&')
388 right
= strip_expr(right
->unop
);
390 member
= get_member_name(right
);
393 type
= get_type(right
);
394 rl
= alloc_whole_rl(type
);
395 add_type_val(member
, rl
);
399 static void match_global_assign(struct expression
*expr
)
402 struct range_list
*rl
;
405 type
= get_type(expr
->left
);
406 if (type
&& (type
->type
== SYM_ARRAY
|| type
->type
== SYM_STRUCT
))
408 member
= get_member_name(expr
->left
);
411 get_absolute_rl(expr
->right
, &rl
);
412 rl
= cast_rl(type
, rl
);
413 add_global_type_val(member
, rl
);
417 static void unop_expr(struct expression
*expr
)
419 struct range_list
*rl
;
422 if (expr
->op
!= SPECIAL_DECREMENT
&& expr
->op
!= SPECIAL_INCREMENT
)
425 expr
= strip_expr(expr
->unop
);
426 member
= get_member_name(expr
);
429 rl
= alloc_whole_rl(get_type(expr
));
430 add_type_val(member
, rl
);
434 static void asm_expr(struct statement
*stmt
)
436 struct expression
*expr
;
437 struct range_list
*rl
;
441 FOR_EACH_PTR(stmt
->asm_outputs
, expr
) {
443 case 0: /* identifier */
444 case 1: /* constraint */
447 case 2: /* expression */
449 member
= get_member_name(expr
);
452 rl
= alloc_whole_rl(get_type(expr
));
453 add_type_val(member
, rl
);
457 } END_FOR_EACH_PTR(expr
);
460 static void db_param_add(struct expression
*expr
, int param
, char *key
, char *value
)
462 struct expression
*arg
;
464 struct range_list
*rl
;
467 if (strcmp(key
, "*$") != 0)
470 while (expr
->type
== EXPR_ASSIGNMENT
)
471 expr
= strip_expr(expr
->right
);
472 if (expr
->type
!= EXPR_CALL
)
475 arg
= get_argument_from_call_expr(expr
->args
, param
);
476 arg
= strip_expr(arg
);
479 type
= get_member_type_from_key(arg
, key
);
480 if (arg
->type
!= EXPR_PREOP
|| arg
->op
!= '&')
482 arg
= strip_expr(arg
->unop
);
484 member
= get_member_name(arg
);
487 call_results_to_rl(expr
, type
, value
, &rl
);
488 add_type_val(member
, rl
);
492 static void match_end_func_info(struct symbol
*sym
)
496 FOR_EACH_SM(fn_type_val
, sm
) {
497 sql_insert_function_type_value(sm
->name
, sm
->state
->name
);
498 } END_FOR_EACH_SM(sm
);
501 static void match_after_func(struct symbol
*sym
)
503 free_stree(&fn_type_val
);
506 static void match_end_file(struct symbol_list
*sym_list
)
510 FOR_EACH_SM(global_type_val
, sm
) {
511 sql_insert_function_type_value(sm
->name
, sm
->state
->name
);
512 } END_FOR_EACH_SM(sm
);
515 void register_type_val(int id
)
522 add_hook(&match_assign_value
, ASSIGNMENT_HOOK_AFTER
);
523 add_hook(&match_assign_pointer
, ASSIGNMENT_HOOK
);
524 add_hook(&unop_expr
, OP_HOOK
);
525 add_hook(&asm_expr
, ASM_HOOK
);
526 select_return_states_hook(PARAM_ADD
, &db_param_add
);
527 select_return_states_hook(PARAM_SET
, &db_param_add
);
530 add_hook(&match_inline_start
, INLINE_FN_START
);
531 add_hook(&match_inline_end
, INLINE_FN_END
);
533 add_hook(&match_end_func_info
, END_FUNC_HOOK
);
534 add_hook(&match_after_func
, AFTER_FUNC_HOOK
);
536 add_hook(&match_global_assign
, GLOBAL_ASSIGNMENT_HOOK
);
537 add_hook(&match_end_file
, END_FILE_HOOK
);