This patch adds a static analysis pass to the middle-end, focusing for this release on C code, and malloc/free issues in particular. See: https://gcc.gnu.org/wiki/DavidMalcolm/StaticAnalyzer gcc/ChangeLog: * Makefile.in (lang_opt_files): Add analyzer.opt. (ANALYZER_OBJS): New. (OBJS): Add digraph.o, graphviz.o, ordered-hash-map-tests.o, tristate.o and ANALYZER_OBJS. (TEXI_GCCINT_FILES): Add analyzer.texi. * common.opt (-fanalyzer): New driver option. * config.in: Regenerate. * configure: Regenerate. * configure.ac (--disable-analyzer, ENABLE_ANALYZER): New option. (gccdepdir): Also create depdir for "analyzer" subdir. * digraph.cc: New file. * digraph.h: New file. * doc/analyzer.texi: New file. * doc/gccint.texi ("Static Analyzer") New menu item. (analyzer.texi): Include it. * doc/invoke.texi ("Static Analyzer Options"): New list and new section. ("Warning Options"): Add static analysis warnings to the list. (-Wno-analyzer-double-fclose): New option. (-Wno-analyzer-double-free): New option. (-Wno-analyzer-exposure-through-output-file): New option. (-Wno-analyzer-file-leak): New option. (-Wno-analyzer-free-of-non-heap): New option. (-Wno-analyzer-malloc-leak): New option. (-Wno-analyzer-possible-null-argument): New option. (-Wno-analyzer-possible-null-dereference): New option. (-Wno-analyzer-null-argument): New option. (-Wno-analyzer-null-dereference): New option. (-Wno-analyzer-stale-setjmp-buffer): New option. (-Wno-analyzer-tainted-array-index): New option. (-Wno-analyzer-use-after-free): New option. (-Wno-analyzer-use-of-pointer-in-stale-stack-frame): New option. (-Wno-analyzer-use-of-uninitialized-value): New option. (-Wanalyzer-too-complex): New option. (-fanalyzer-call-summaries): New warning. (-fanalyzer-checker=): New warning. (-fanalyzer-fine-grained): New warning. (-fno-analyzer-state-merge): New warning. (-fno-analyzer-state-purge): New warning. (-fanalyzer-transitivity): New warning. (-fanalyzer-verbose-edges): New warning. (-fanalyzer-verbose-state-changes): New warning. (-fanalyzer-verbosity=): New warning. (-fdump-analyzer): New warning. (-fdump-analyzer-callgraph): New warning. (-fdump-analyzer-exploded-graph): New warning. (-fdump-analyzer-exploded-nodes): New warning. (-fdump-analyzer-exploded-nodes-2): New warning. (-fdump-analyzer-exploded-nodes-3): New warning. (-fdump-analyzer-supergraph): New warning. * doc/sourcebuild.texi (dg-require-dot): New. (dg-check-dot): New. * gdbinit.in (break-on-saved-diagnostic): New command. * graphviz.cc: New file. * graphviz.h: New file. * ordered-hash-map-tests.cc: New file. * ordered-hash-map.h: New file. * passes.def (pass_analyzer): Add before pass_ipa_whole_program_visibility. * selftest-run-tests.c (selftest::run_tests): Call selftest::ordered_hash_map_tests_cc_tests. * selftest.h (selftest::ordered_hash_map_tests_cc_tests): New decl. * shortest-paths.h: New file. * timevar.def (TV_ANALYZER): New timevar. (TV_ANALYZER_SUPERGRAPH): Likewise. (TV_ANALYZER_STATE_PURGE): Likewise. (TV_ANALYZER_PLAN): Likewise. (TV_ANALYZER_SCC): Likewise. (TV_ANALYZER_WORKLIST): Likewise. (TV_ANALYZER_DUMP): Likewise. (TV_ANALYZER_DIAGNOSTICS): Likewise. (TV_ANALYZER_SHORTEST_PATHS): Likewise. * tree-pass.h (make_pass_analyzer): New decl. * tristate.cc: New file. * tristate.h: New file. gcc/analyzer/ChangeLog: * ChangeLog: New file. * analyzer-selftests.cc: New file. * analyzer-selftests.h: New file. * analyzer.opt: New file. * analysis-plan.cc: New file. * analysis-plan.h: New file. * analyzer-logging.cc: New file. * analyzer-logging.h: New file. * analyzer-pass.cc: New file. * analyzer.cc: New file. * analyzer.h: New file. * call-string.cc: New file. * call-string.h: New file. * checker-path.cc: New file. * checker-path.h: New file. * constraint-manager.cc: New file. * constraint-manager.h: New file. * diagnostic-manager.cc: New file. * diagnostic-manager.h: New file. * engine.cc: New file. * engine.h: New file. * exploded-graph.h: New file. * pending-diagnostic.cc: New file. * pending-diagnostic.h: New file. * program-point.cc: New file. * program-point.h: New file. * program-state.cc: New file. * program-state.h: New file. * region-model.cc: New file. * region-model.h: New file. * sm-file.cc: New file. * sm-malloc.cc: New file. * sm-malloc.dot: New file. * sm-pattern-test.cc: New file. * sm-sensitive.cc: New file. * sm-signal.cc: New file. * sm-taint.cc: New file. * sm.cc: New file. * sm.h: New file. * state-purge.cc: New file. * state-purge.h: New file. * supergraph.cc: New file. * supergraph.h: New file. gcc/testsuite/ChangeLog: * gcc.dg/analyzer/CVE-2005-1689-minimal.c: New test. * gcc.dg/analyzer/abort.c: New test. * gcc.dg/analyzer/alloca-leak.c: New test. * gcc.dg/analyzer/analyzer-decls.h: New header. * gcc.dg/analyzer/analyzer-verbosity-0.c: New test. * gcc.dg/analyzer/analyzer-verbosity-1.c: New test. * gcc.dg/analyzer/analyzer-verbosity-2.c: New test. * gcc.dg/analyzer/analyzer.exp: New suite. * gcc.dg/analyzer/attribute-nonnull.c: New test. * gcc.dg/analyzer/call-summaries-1.c: New test. * gcc.dg/analyzer/conditionals-2.c: New test. * gcc.dg/analyzer/conditionals-3.c: New test. * gcc.dg/analyzer/conditionals-notrans.c: New test. * gcc.dg/analyzer/conditionals-trans.c: New test. * gcc.dg/analyzer/data-model-1.c: New test. * gcc.dg/analyzer/data-model-2.c: New test. * gcc.dg/analyzer/data-model-3.c: New test. * gcc.dg/analyzer/data-model-4.c: New test. * gcc.dg/analyzer/data-model-5.c: New test. * gcc.dg/analyzer/data-model-5b.c: New test. * gcc.dg/analyzer/data-model-5c.c: New test. * gcc.dg/analyzer/data-model-5d.c: New test. * gcc.dg/analyzer/data-model-6.c: New test. * gcc.dg/analyzer/data-model-7.c: New test. * gcc.dg/analyzer/data-model-8.c: New test. * gcc.dg/analyzer/data-model-9.c: New test. * gcc.dg/analyzer/data-model-11.c: New test. * gcc.dg/analyzer/data-model-12.c: New test. * gcc.dg/analyzer/data-model-13.c: New test. * gcc.dg/analyzer/data-model-14.c: New test. * gcc.dg/analyzer/data-model-15.c: New test. * gcc.dg/analyzer/data-model-16.c: New test. * gcc.dg/analyzer/data-model-17.c: New test. * gcc.dg/analyzer/data-model-18.c: New test. * gcc.dg/analyzer/data-model-19.c: New test. * gcc.dg/analyzer/data-model-path-1.c: New test. * gcc.dg/analyzer/disabling.c: New test. * gcc.dg/analyzer/dot-output.c: New test. * gcc.dg/analyzer/double-free-lto-1-a.c: New test. * gcc.dg/analyzer/double-free-lto-1-b.c: New test. * gcc.dg/analyzer/double-free-lto-1.h: New header. * gcc.dg/analyzer/equivalence.c: New test. * gcc.dg/analyzer/explode-1.c: New test. * gcc.dg/analyzer/explode-2.c: New test. * gcc.dg/analyzer/factorial.c: New test. * gcc.dg/analyzer/fibonacci.c: New test. * gcc.dg/analyzer/fields.c: New test. * gcc.dg/analyzer/file-1.c: New test. * gcc.dg/analyzer/file-2.c: New test. * gcc.dg/analyzer/function-ptr-1.c: New test. * gcc.dg/analyzer/function-ptr-2.c: New test. * gcc.dg/analyzer/function-ptr-3.c: New test. * gcc.dg/analyzer/gzio-2.c: New test. * gcc.dg/analyzer/gzio-3.c: New test. * gcc.dg/analyzer/gzio-3a.c: New test. * gcc.dg/analyzer/gzio.c: New test. * gcc.dg/analyzer/infinite-recursion.c: New test. * gcc.dg/analyzer/loop-2.c: New test. * gcc.dg/analyzer/loop-2a.c: New test. * gcc.dg/analyzer/loop-3.c: New test. * gcc.dg/analyzer/loop-4.c: New test. * gcc.dg/analyzer/loop.c: New test. * gcc.dg/analyzer/malloc-1.c: New test. * gcc.dg/analyzer/malloc-2.c: New test. * gcc.dg/analyzer/malloc-3.c: New test. * gcc.dg/analyzer/malloc-callbacks.c: New test. * gcc.dg/analyzer/malloc-dce.c: New test. * gcc.dg/analyzer/malloc-dedupe-1.c: New test. * gcc.dg/analyzer/malloc-ipa-1.c: New test. * gcc.dg/analyzer/malloc-ipa-10.c: New test. * gcc.dg/analyzer/malloc-ipa-11.c: New test. * gcc.dg/analyzer/malloc-ipa-12.c: New test. * gcc.dg/analyzer/malloc-ipa-13.c: New test. * gcc.dg/analyzer/malloc-ipa-2.c: New test. * gcc.dg/analyzer/malloc-ipa-3.c: New test. * gcc.dg/analyzer/malloc-ipa-4.c: New test. * gcc.dg/analyzer/malloc-ipa-5.c: New test. * gcc.dg/analyzer/malloc-ipa-6.c: New test. * gcc.dg/analyzer/malloc-ipa-7.c: New test. * gcc.dg/analyzer/malloc-ipa-8-double-free.c: New test. * gcc.dg/analyzer/malloc-ipa-8-lto-a.c: New test. * gcc.dg/analyzer/malloc-ipa-8-lto-b.c: New test. * gcc.dg/analyzer/malloc-ipa-8-lto-c.c: New test. * gcc.dg/analyzer/malloc-ipa-8-lto.h: New test. * gcc.dg/analyzer/malloc-ipa-8-unchecked.c: New test. * gcc.dg/analyzer/malloc-ipa-9.c: New test. * gcc.dg/analyzer/malloc-macro-inline-events.c: New test. * gcc.dg/analyzer/malloc-macro-separate-events.c: New test. * gcc.dg/analyzer/malloc-macro.h: New header. * gcc.dg/analyzer/malloc-many-paths-1.c: New test. * gcc.dg/analyzer/malloc-many-paths-2.c: New test. * gcc.dg/analyzer/malloc-many-paths-3.c: New test. * gcc.dg/analyzer/malloc-paths-1.c: New test. * gcc.dg/analyzer/malloc-paths-10.c: New test. * gcc.dg/analyzer/malloc-paths-2.c: New test. * gcc.dg/analyzer/malloc-paths-3.c: New test. * gcc.dg/analyzer/malloc-paths-4.c: New test. * gcc.dg/analyzer/malloc-paths-5.c: New test. * gcc.dg/analyzer/malloc-paths-6.c: New test. * gcc.dg/analyzer/malloc-paths-7.c: New test. * gcc.dg/analyzer/malloc-paths-8.c: New test. * gcc.dg/analyzer/malloc-paths-9.c: New test. * gcc.dg/analyzer/malloc-vs-local-1a.c: New test. * gcc.dg/analyzer/malloc-vs-local-1b.c: New test. * gcc.dg/analyzer/malloc-vs-local-2.c: New test. * gcc.dg/analyzer/malloc-vs-local-3.c: New test. * gcc.dg/analyzer/malloc-vs-local-4.c: New test. * gcc.dg/analyzer/operations.c: New test. * gcc.dg/analyzer/params-2.c: New test. * gcc.dg/analyzer/params.c: New test. * gcc.dg/analyzer/paths-1.c: New test. * gcc.dg/analyzer/paths-1a.c: New test. * gcc.dg/analyzer/paths-2.c: New test. * gcc.dg/analyzer/paths-3.c: New test. * gcc.dg/analyzer/paths-4.c: New test. * gcc.dg/analyzer/paths-5.c: New test. * gcc.dg/analyzer/paths-6.c: New test. * gcc.dg/analyzer/paths-7.c: New test. * gcc.dg/analyzer/pattern-test-1.c: New test. * gcc.dg/analyzer/pattern-test-2.c: New test. * gcc.dg/analyzer/pointer-merging.c: New test. * gcc.dg/analyzer/pr61861.c: New test. * gcc.dg/analyzer/pragma-1.c: New test. * gcc.dg/analyzer/scope-1.c: New test. * gcc.dg/analyzer/sensitive-1.c: New test. * gcc.dg/analyzer/setjmp-1.c: New test. * gcc.dg/analyzer/setjmp-2.c: New test. * gcc.dg/analyzer/setjmp-3.c: New test. * gcc.dg/analyzer/setjmp-4.c: New test. * gcc.dg/analyzer/setjmp-5.c: New test. * gcc.dg/analyzer/setjmp-6.c: New test. * gcc.dg/analyzer/setjmp-7.c: New test. * gcc.dg/analyzer/setjmp-7a.c: New test. * gcc.dg/analyzer/setjmp-8.c: New test. * gcc.dg/analyzer/setjmp-9.c: New test. * gcc.dg/analyzer/signal-1.c: New test. * gcc.dg/analyzer/signal-2.c: New test. * gcc.dg/analyzer/signal-3.c: New test. * gcc.dg/analyzer/signal-4a.c: New test. * gcc.dg/analyzer/signal-4b.c: New test. * gcc.dg/analyzer/strcmp-1.c: New test. * gcc.dg/analyzer/switch.c: New test. * gcc.dg/analyzer/taint-1.c: New test. * gcc.dg/analyzer/zlib-1.c: New test. * gcc.dg/analyzer/zlib-2.c: New test. * gcc.dg/analyzer/zlib-3.c: New test. * gcc.dg/analyzer/zlib-4.c: New test. * gcc.dg/analyzer/zlib-5.c: New test. * gcc.dg/analyzer/zlib-6.c: New test. * lib/gcc-defs.exp (dg-check-dot): New procedure. * lib/target-supports.exp (check_dot_available): New procedure. (check_effective_target_analyzer): New. * lib/target-supports-dg.exp (dg-require-dot): New procedure.
247 lines
6.6 KiB
C++
247 lines
6.6 KiB
C++
/* Template classes for directed graphs.
|
|
Copyright (C) 2019-2020 Free Software Foundation, Inc.
|
|
Contributed by David Malcolm <dmalcolm@redhat.com>.
|
|
|
|
This file is part of GCC.
|
|
|
|
GCC is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3, or (at your option)
|
|
any later version.
|
|
|
|
GCC is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with GCC; see the file COPYING3. If not see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
#ifndef GCC_DIGRAPH_H
|
|
#define GCC_DIGRAPH_H
|
|
|
|
#include "diagnostic.h"
|
|
#include "tree-diagnostic.h" /* for default_tree_printer. */
|
|
#include "graphviz.h"
|
|
|
|
/* Templates for a family of classes: digraph, node, edge, and cluster.
|
|
This assumes a traits type with the following typedefs:
|
|
node_t: the node class
|
|
edge_t: the edge class
|
|
dump_args_t: additional args for dot-dumps
|
|
cluster_t: the cluster class (for use when generating .dot files).
|
|
|
|
Using a template allows for typesafe nodes and edges: a node's
|
|
predecessor and successor edges can be of a node-specific edge
|
|
subclass, without needing casting. */
|
|
|
|
/* Abstract base class for a node in a directed graph. */
|
|
|
|
template <typename GraphTraits>
|
|
class dnode
|
|
{
|
|
public:
|
|
typedef typename GraphTraits::edge_t edge_t;
|
|
typedef typename GraphTraits::dump_args_t dump_args_t;
|
|
|
|
virtual ~dnode () {}
|
|
virtual void dump_dot (graphviz_out *gv, const dump_args_t &args) const = 0;
|
|
|
|
auto_vec<edge_t *> m_preds;
|
|
auto_vec<edge_t *> m_succs;
|
|
};
|
|
|
|
/* Abstract base class for an edge in a directed graph. */
|
|
|
|
template <typename GraphTraits>
|
|
class dedge
|
|
{
|
|
public:
|
|
typedef typename GraphTraits::node_t node_t;
|
|
typedef typename GraphTraits::dump_args_t dump_args_t;
|
|
|
|
dedge (node_t *src, node_t *dest)
|
|
: m_src (src), m_dest (dest) {}
|
|
|
|
virtual ~dedge () {}
|
|
|
|
virtual void dump_dot (graphviz_out *gv, const dump_args_t &args) const = 0;
|
|
|
|
node_t *const m_src;
|
|
node_t *const m_dest;
|
|
};
|
|
|
|
/* Abstract base class for a directed graph.
|
|
This class maintains the vectors of nodes and edges,
|
|
and owns the nodes and edges. */
|
|
|
|
template <typename GraphTraits>
|
|
class digraph
|
|
{
|
|
public:
|
|
typedef typename GraphTraits::node_t node_t;
|
|
typedef typename GraphTraits::edge_t edge_t;
|
|
typedef typename GraphTraits::dump_args_t dump_args_t;
|
|
typedef typename GraphTraits::cluster_t cluster_t;
|
|
|
|
digraph () {}
|
|
virtual ~digraph () {}
|
|
|
|
void dump_dot_to_pp (pretty_printer *pp,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const;
|
|
void dump_dot_to_file (FILE *fp,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const;
|
|
void dump_dot (const char *path,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const;
|
|
|
|
void add_node (node_t *node);
|
|
void add_edge (edge_t *edge);
|
|
|
|
auto_delete_vec<node_t> m_nodes;
|
|
auto_delete_vec<edge_t> m_edges;
|
|
};
|
|
|
|
/* Abstract base class for splitting dnodes into hierarchical clusters
|
|
in the generated .dot file.
|
|
|
|
See "Subgraphs and Clusters" within
|
|
https://www.graphviz.org/doc/info/lang.html
|
|
and e.g.
|
|
https://graphviz.gitlab.io/_pages/Gallery/directed/cluster.html
|
|
|
|
If a root_cluster is passed to dump_dot*, then all nodes will be
|
|
added to it at the start of dumping, via calls to add_node.
|
|
|
|
The root cluster can organize the nodes into a hierarchy of
|
|
child clusters.
|
|
|
|
After all nodes are added to the root cluster, dump_dot will then
|
|
be called on it (and not on the nodes themselves). */
|
|
|
|
template <typename GraphTraits>
|
|
class cluster
|
|
{
|
|
public:
|
|
typedef typename GraphTraits::node_t node_t;
|
|
typedef typename GraphTraits::dump_args_t dump_args_t;
|
|
|
|
virtual ~cluster () {}
|
|
|
|
virtual void add_node (node_t *node) = 0;
|
|
|
|
/* Recursively dump the cluster, all nodes, and child clusters. */
|
|
virtual void dump_dot (graphviz_out *gv, const dump_args_t &) const = 0;
|
|
};
|
|
|
|
/* Write .dot information for this graph to PP, passing ARGS to the nodes
|
|
and edges.
|
|
If ROOT_CLUSTER is non-NULL, use it to organize the nodes into clusters. */
|
|
|
|
template <typename GraphTraits>
|
|
inline void
|
|
digraph<GraphTraits>::dump_dot_to_pp (pretty_printer *pp,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const
|
|
{
|
|
graphviz_out gv (pp);
|
|
|
|
pp_string (pp, "digraph \"");
|
|
pp_string (pp, "base");
|
|
pp_string (pp, "\" {\n");
|
|
|
|
gv.indent ();
|
|
|
|
pp_string (pp, "overlap=false;\n");
|
|
pp_string (pp, "compound=true;\n");
|
|
|
|
/* If using clustering, emit all nodes via clusters. */
|
|
if (root_cluster)
|
|
{
|
|
int i;
|
|
node_t *n;
|
|
FOR_EACH_VEC_ELT (m_nodes, i, n)
|
|
root_cluster->add_node (n);
|
|
root_cluster->dump_dot (&gv, args);
|
|
}
|
|
else
|
|
{
|
|
/* Otherwise, display all nodes at top level. */
|
|
int i;
|
|
node_t *n;
|
|
FOR_EACH_VEC_ELT (m_nodes, i, n)
|
|
n->dump_dot (&gv, args);
|
|
}
|
|
|
|
/* Edges. */
|
|
int i;
|
|
edge_t *e;
|
|
FOR_EACH_VEC_ELT (m_edges, i, e)
|
|
e->dump_dot (&gv, args);
|
|
|
|
/* Terminate "digraph" */
|
|
gv.outdent ();
|
|
pp_string (pp, "}");
|
|
pp_newline (pp);
|
|
}
|
|
|
|
/* Write .dot information for this graph to FP, passing ARGS to the nodes
|
|
and edges.
|
|
If ROOT_CLUSTER is non-NULL, use it to organize the nodes into clusters. */
|
|
|
|
template <typename GraphTraits>
|
|
inline void
|
|
digraph<GraphTraits>::dump_dot_to_file (FILE *fp,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const
|
|
{
|
|
pretty_printer pp;
|
|
// TODO:
|
|
pp_format_decoder (&pp) = default_tree_printer;
|
|
pp.buffer->stream = fp;
|
|
dump_dot_to_pp (&pp, root_cluster, args);
|
|
pp_flush (&pp);
|
|
}
|
|
|
|
/* Write .dot information for this graph to a file at PATH, passing ARGS
|
|
to the nodes and edges.
|
|
If ROOT_CLUSTER is non-NULL, use it to organize the nodes into clusters. */
|
|
|
|
template <typename GraphTraits>
|
|
inline void
|
|
digraph<GraphTraits>::dump_dot (const char *path,
|
|
cluster_t *root_cluster,
|
|
const dump_args_t &args) const
|
|
{
|
|
FILE *fp = fopen (path, "w");
|
|
dump_dot_to_file (fp, root_cluster, args);
|
|
fclose (fp);
|
|
}
|
|
|
|
/* Add NODE to this DIGRAPH, taking ownership. */
|
|
|
|
template <typename GraphTraits>
|
|
inline void
|
|
digraph<GraphTraits>::add_node (node_t *node)
|
|
{
|
|
m_nodes.safe_push (node);
|
|
}
|
|
|
|
/* Add EDGE to this digraph, and to the preds/succs of its endpoints.
|
|
Take ownership of EDGE. */
|
|
|
|
template <typename GraphTraits>
|
|
inline void
|
|
digraph<GraphTraits>::add_edge (edge_t *edge)
|
|
{
|
|
m_edges.safe_push (edge);
|
|
edge->m_dest->m_preds.safe_push (edge);
|
|
edge->m_src->m_succs.safe_push (edge);
|
|
|
|
}
|
|
|
|
#endif /* GCC_DIGRAPH_H */
|