hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'upstream/rc/1.24' into alloc-size2

Browse Source
This commit is contained in:
Geoffrey White
2020-04-15 10:09:54 +01:00
parent 92187d9e71 bc250506a1
commit 2aa64db40e
69 changed files with 1167 additions and 276 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/defaulttainttracking.cpp
View File

@@ -86,4 +86,14 @@ namespace std {
void test_std_move() {
sink(std::move(getenv("VAR")));
}
void flow_to_outparam(char ** ret, char *arg) {
*ret = arg;
}
void test_outparams() {
char *p2 = nullptr;
flow_to_outparam(&p2, getenv("VAR"));
sink(p2); // tainted
}

8
cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/tainted.expected
View File

@@ -101,6 +101,14 @@
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | defaulttainttracking.cpp:88:18:88:23 | call to getenv |
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | defaulttainttracking.cpp:88:18:88:30 | (reference to) |
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | test_diff.cpp:1:11:1:20 | p#0 |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:9:11:9:20 | p#0 |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:91:42:91:44 | arg |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:92:12:92:14 | arg |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:96:11:96:12 | p2 |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:97:27:97:32 | call to getenv |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:98:10:98:11 | (const char *)... |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:98:10:98:11 | p2 |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | test_diff.cpp:1:11:1:20 | p#0 |
| globals.cpp:5:20:5:25 | call to getenv | globals.cpp:2:17:2:25 | sinkParam |
| globals.cpp:5:20:5:25 | call to getenv | globals.cpp:5:12:5:16 | local |
| globals.cpp:5:20:5:25 | call to getenv | globals.cpp:5:20:5:25 | call to getenv |

8
cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/test_diff.expected
View File

@@ -15,6 +15,14 @@
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | defaulttainttracking.cpp:88:8:88:32 | (reference dereference) | IR only |
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | defaulttainttracking.cpp:88:18:88:30 | (reference to) | IR only |
| defaulttainttracking.cpp:88:18:88:23 | call to getenv | test_diff.cpp:1:11:1:20 | p#0 | IR only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:9:11:9:20 | p#0 | IR only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:91:31:91:33 | ret | AST only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:92:5:92:8 | * ... | AST only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:92:6:92:8 | ret | AST only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:96:11:96:12 | p2 | IR only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:98:10:98:11 | (const char *)... | IR only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | defaulttainttracking.cpp:98:10:98:11 | p2 | IR only |
| defaulttainttracking.cpp:97:27:97:32 | call to getenv | test_diff.cpp:1:11:1:20 | p#0 | IR only |
| globals.cpp:13:15:13:20 | call to getenv | globals.cpp:13:5:13:11 | global1 | AST only |
| globals.cpp:23:15:23:20 | call to getenv | globals.cpp:23:5:23:11 | global2 | AST only |
| test_diff.cpp:104:12:104:15 | argv | test_diff.cpp:104:11:104:20 | (...) | IR only |

10
cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp
View File

@@ -460,3 +460,13 @@ void throughStmtExpr(int source1, int clean1) {
});
sink(local); // tainted
}
void intOutparamSource(int *p) {
*p = source();
}
void viaOutparam() {
int x = 0;
intOutparamSource(&x);
sink(x); // tainted [FALSE NEGATIVE]
}

205
cpp/ql/test/library-tests/ir/ir/PrintAST.expected
View File

@@ -4048,6 +4048,27 @@ ir.cpp:
#-----| Type = [RValueReferenceType] C &&
# 628| [Destructor] void C::~C()
# 628| params:
#-----| body: [Block] { ... }
#-----| 0: [ReturnStmt] return ...
# 628| destructions:
# 628| 0: [DestructorFieldDestruction] destructor field destruction of m_f
# 628| Type = [Struct] String
# 628| ValueCategory = prvalue
# 628| 0: [DestructorCall] call to ~String
# 628| Type = [VoidType] void
# 628| ValueCategory = prvalue
# 628| -1: [ImplicitThisFieldAccess] m_f
# 628| Type = [Struct] String
# 628| ValueCategory = lvalue
# 628| 1: [DestructorFieldDestruction] destructor field destruction of m_b
# 628| Type = [Struct] String
# 628| ValueCategory = prvalue
# 628| 0: [DestructorCall] call to ~String
# 628| Type = [VoidType] void
# 628| ValueCategory = prvalue
# 628| -1: [ImplicitThisFieldAccess] m_b
# 628| Type = [Struct] String
# 628| ValueCategory = lvalue
# 630| [MemberFunction] int C::StaticMemberFunction(int)
# 630| params:
# 630| 0: [Parameter] x
@@ -8545,6 +8566,190 @@ ir.cpp:
# 1255| Type = [CharPointerType] char *
# 1255| ValueCategory = prvalue(load)
# 1256| 3: [ReturnStmt] return ...
# 1258| [CopyAssignmentOperator] A& A::operator=(A const&)
# 1258| params:
#-----| 0: [Parameter] p#0
#-----| Type = [LValueReferenceType] const A &
# 1258| [MoveAssignmentOperator] A& A::operator=(A&&)
# 1258| params:
#-----| 0: [Parameter] p#0
#-----| Type = [RValueReferenceType] A &&
# 1261| [MemberFunction] void A::static_member(A*, int)
# 1261| params:
# 1261| 0: [Parameter] a
# 1261| Type = [PointerType] A *
# 1261| 1: [Parameter] x
# 1261| Type = [IntType] int
# 1261| body: [Block] { ... }
# 1262| 0: [ExprStmt] ExprStmt
# 1262| 0: [AssignExpr] ... = ...
# 1262| Type = [IntType] int
# 1262| ValueCategory = lvalue
# 1262| 0: [PointerFieldAccess] member
# 1262| Type = [IntType] int
# 1262| ValueCategory = lvalue
# 1262| -1: [VariableAccess] a
# 1262| Type = [PointerType] A *
# 1262| ValueCategory = prvalue(load)
# 1262| 1: [VariableAccess] x
# 1262| Type = [IntType] int
# 1262| ValueCategory = prvalue(load)
# 1263| 1: [ReturnStmt] return ...
# 1265| [MemberFunction] void A::static_member_without_def()
# 1265| params:
# 1268| [TopLevelFunction] A* getAnInstanceOfA()
# 1268| params:
# 1270| [TopLevelFunction] void test_static_member_functions(int, A*)
# 1270| params:
# 1270| 0: [Parameter] int_arg
# 1270| Type = [IntType] int
# 1270| 1: [Parameter] a_arg
# 1270| Type = [PointerType] A *
# 1270| body: [Block] { ... }
# 1271| 0: [DeclStmt] declaration
# 1271| 0: [VariableDeclarationEntry] definition of c
# 1271| Type = [Class] C
# 1271| init: [Initializer] initializer for c
# 1271| expr: [ConstructorCall] call to C
# 1271| Type = [VoidType] void
# 1271| ValueCategory = prvalue
# 1272| 1: [ExprStmt] ExprStmt
# 1272| 0: [FunctionCall] call to StaticMemberFunction
# 1272| Type = [IntType] int
# 1272| ValueCategory = prvalue
# 1272| -1: [VariableAccess] c
# 1272| Type = [Class] C
# 1272| ValueCategory = lvalue
# 1272| 0: [Literal] 10
# 1272| Type = [IntType] int
# 1272| Value = [Literal] 10
# 1272| ValueCategory = prvalue
# 1273| 2: [ExprStmt] ExprStmt
# 1273| 0: [FunctionCall] call to StaticMemberFunction
# 1273| Type = [IntType] int
# 1273| ValueCategory = prvalue
# 1273| 0: [Literal] 10
# 1273| Type = [IntType] int
# 1273| Value = [Literal] 10
# 1273| ValueCategory = prvalue
# 1275| 3: [DeclStmt] declaration
# 1275| 0: [VariableDeclarationEntry] definition of a
# 1275| Type = [Struct] A
# 1276| 4: [ExprStmt] ExprStmt
# 1276| 0: [FunctionCall] call to static_member
# 1276| Type = [VoidType] void
# 1276| ValueCategory = prvalue
# 1276| -1: [VariableAccess] a
# 1276| Type = [Struct] A
# 1276| ValueCategory = lvalue
# 1276| 0: [AddressOfExpr] & ...
# 1276| Type = [PointerType] A *
# 1276| ValueCategory = prvalue
# 1276| 0: [VariableAccess] a
# 1276| Type = [Struct] A
# 1276| ValueCategory = lvalue
# 1276| 1: [VariableAccess] int_arg
# 1276| Type = [IntType] int
# 1276| ValueCategory = prvalue(load)
# 1277| 5: [ExprStmt] ExprStmt
# 1277| 0: [FunctionCall] call to static_member
# 1277| Type = [VoidType] void
# 1277| ValueCategory = prvalue
# 1277| 0: [AddressOfExpr] & ...
# 1277| Type = [PointerType] A *
# 1277| ValueCategory = prvalue
# 1277| 0: [VariableAccess] a
# 1277| Type = [Struct] A
# 1277| ValueCategory = lvalue
# 1277| 1: [VariableAccess] int_arg
# 1277| Type = [IntType] int
# 1277| ValueCategory = prvalue(load)
# 1279| 6: [ExprStmt] ExprStmt
# 1279| 0: [FunctionCall] call to static_member
# 1279| Type = [VoidType] void
# 1279| ValueCategory = prvalue
# 1279| -1: [ParenthesisExpr] (...)
# 1279| Type = [PointerType] A *
# 1279| ValueCategory = prvalue
# 1279| expr: [AddressOfExpr] & ...
# 1279| Type = [PointerType] A *
# 1279| ValueCategory = prvalue
# 1279| 0: [VariableAccess] a
# 1279| Type = [Struct] A
# 1279| ValueCategory = lvalue
# 1279| 0: [VariableAccess] a_arg
# 1279| Type = [PointerType] A *
# 1279| ValueCategory = prvalue(load)
# 1279| 1: [AddExpr] ... + ...
# 1279| Type = [IntType] int
# 1279| ValueCategory = prvalue
# 1279| 0: [VariableAccess] int_arg
# 1279| Type = [IntType] int
# 1279| ValueCategory = prvalue(load)
# 1279| 1: [Literal] 2
# 1279| Type = [IntType] int
# 1279| Value = [Literal] 2
# 1279| ValueCategory = prvalue
# 1280| 7: [ExprStmt] ExprStmt
# 1280| 0: [FunctionCall] call to static_member
# 1280| Type = [VoidType] void
# 1280| ValueCategory = prvalue
# 1280| -1: [ParenthesisExpr] (...)
# 1280| Type = [Struct] A
# 1280| ValueCategory = lvalue
# 1280| expr: [PointerDereferenceExpr] * ...
# 1280| Type = [Struct] A
# 1280| ValueCategory = lvalue
# 1280| 0: [VariableAccess] a_arg
# 1280| Type = [PointerType] A *
# 1280| ValueCategory = prvalue(load)
# 1280| 0: [AddressOfExpr] & ...
# 1280| Type = [PointerType] A *
# 1280| ValueCategory = prvalue
# 1280| 0: [VariableAccess] a
# 1280| Type = [Struct] A
# 1280| ValueCategory = lvalue
# 1280| 1: [Literal] 99
# 1280| Type = [IntType] int
# 1280| Value = [Literal] 99
# 1280| ValueCategory = prvalue
# 1281| 8: [ExprStmt] ExprStmt
# 1281| 0: [FunctionCall] call to static_member
# 1281| Type = [VoidType] void
# 1281| ValueCategory = prvalue
# 1281| -1: [VariableAccess] a_arg
# 1281| Type = [PointerType] A *
# 1281| ValueCategory = prvalue(load)
# 1281| 0: [VariableAccess] a_arg
# 1281| Type = [PointerType] A *
# 1281| ValueCategory = prvalue(load)
# 1281| 1: [UnaryMinusExpr] - ...
# 1281| Type = [IntType] int
# 1281| Value = [UnaryMinusExpr] -1
# 1281| ValueCategory = prvalue
# 1281| 0: [Literal] 1
# 1281| Type = [IntType] int
# 1281| Value = [Literal] 1
# 1281| ValueCategory = prvalue
# 1283| 9: [ExprStmt] ExprStmt
# 1283| 0: [FunctionCall] call to static_member_without_def
# 1283| Type = [VoidType] void
# 1283| ValueCategory = prvalue
# 1283| -1: [VariableAccess] a
# 1283| Type = [Struct] A
# 1283| ValueCategory = lvalue
# 1284| 10: [ExprStmt] ExprStmt
# 1284| 0: [FunctionCall] call to static_member_without_def
# 1284| Type = [VoidType] void
# 1284| ValueCategory = prvalue
# 1286| 11: [ExprStmt] ExprStmt
# 1286| 0: [FunctionCall] call to static_member_without_def
# 1286| Type = [VoidType] void
# 1286| ValueCategory = prvalue
# 1286| -1: [FunctionCall] call to getAnInstanceOfA
# 1286| Type = [PointerType] A *
# 1286| ValueCategory = prvalue
# 1287| 12: [ReturnStmt] return ...
perf-regression.cpp:
# 4| [CopyAssignmentOperator] Big& Big::operator=(Big const&)
# 4| params:

31
cpp/ql/test/library-tests/ir/ir/ir.cpp
View File

@@ -1255,4 +1255,35 @@ void test_strings(char *s1, char *s2) {
strcat(buffer, s2);
}
struct A {
int member;
static void static_member(A* a, int x) {
a->member = x;
}
static void static_member_without_def();
};
A* getAnInstanceOfA();
void test_static_member_functions(int int_arg, A* a_arg) {
C c;
c.StaticMemberFunction(10);
C::StaticMemberFunction(10);
A a;
a.static_member(&a, int_arg);
A::static_member(&a, int_arg);
(&a)->static_member(a_arg, int_arg + 2);
(*a_arg).static_member(&a, 99);
a_arg->static_member(a_arg, -1);
a.static_member_without_def();
A::static_member_without_def();
getAnInstanceOfA()->static_member_without_def();
}
// semmle-extractor-options: -std=c++17 --clang

224
cpp/ql/test/library-tests/ir/ir/raw_ir.expected
View File

@@ -79,7 +79,7 @@ bad_asts.cpp:
# 27| r27_6(Point) = Load : &:r27_5, ~mu26_4
# 27| mu27_7(Point) = Store : &:r27_1, r27_6
# 28| v28_1(void) = NoOp :
# 26| v26_9(void) = ReturnIndirection : &:r26_7, ~mu26_4
# 26| v26_9(void) = ReturnIndirection[a] : &:r26_7, ~mu26_4
# 26| v26_10(void) = ReturnVoid :
# 26| v26_11(void) = UnmodeledUse : mu*
# 26| v26_12(void) = AliasedUse : ~mu26_4
@@ -836,7 +836,7 @@ ir.cpp:
# 168| r168_6(glval<bool>) = VariableAddress[b] :
# 168| mu168_7(bool) = Store : &:r168_6, r168_5
# 169| v169_1(void) = NoOp :
# 153| v153_11(void) = ReturnIndirection : &:r153_7, ~mu153_4
# 153| v153_11(void) = ReturnIndirection[p] : &:r153_7, ~mu153_4
# 153| v153_12(void) = ReturnVoid :
# 153| v153_13(void) = UnmodeledUse : mu*
# 153| v153_14(void) = AliasedUse : ~mu153_4
@@ -923,7 +923,7 @@ ir.cpp:
# 184| r184_7(glval<int>) = PointerAdd[4] : r184_4, r184_6
# 184| mu184_8(int) = Store : &:r184_7, r184_2
# 185| v185_1(void) = NoOp :
# 171| v171_11(void) = ReturnIndirection : &:r171_7, ~mu171_4
# 171| v171_11(void) = ReturnIndirection[p] : &:r171_7, ~mu171_4
# 171| v171_12(void) = ReturnVoid :
# 171| v171_13(void) = UnmodeledUse : mu*
# 171| v171_14(void) = AliasedUse : ~mu171_4
@@ -1023,8 +1023,8 @@ ir.cpp:
# 201| r201_6(glval<bool>) = VariableAddress[b] :
# 201| mu201_7(bool) = Store : &:r201_6, r201_5
# 202| v202_1(void) = NoOp :
# 193| v193_13(void) = ReturnIndirection : &:r193_7, ~mu193_4
# 193| v193_14(void) = ReturnIndirection : &:r193_11, ~mu193_4
# 193| v193_13(void) = ReturnIndirection[p] : &:r193_7, ~mu193_4
# 193| v193_14(void) = ReturnIndirection[q] : &:r193_11, ~mu193_4
# 193| v193_15(void) = ReturnVoid :
# 193| v193_16(void) = UnmodeledUse : mu*
# 193| v193_17(void) = AliasedUse : ~mu193_4
@@ -1073,7 +1073,7 @@ ir.cpp:
# 210| r210_7(glval<int *>) = VariableAddress[q] :
# 210| mu210_8(int *) = Store : &:r210_7, r210_6
# 211| v211_1(void) = NoOp :
# 204| v204_9(void) = ReturnIndirection : &:r204_7, ~mu204_4
# 204| v204_9(void) = ReturnIndirection[p] : &:r204_7, ~mu204_4
# 204| v204_10(void) = ReturnVoid :
# 204| v204_11(void) = UnmodeledUse : mu*
# 204| v204_12(void) = AliasedUse : ~mu204_4
@@ -1684,7 +1684,7 @@ ir.cpp:
# 343| r343_3(int *) = Load : &:r343_2, ~mu341_4
# 343| r343_4(int) = Load : &:r343_3, ~mu341_4
# 343| mu343_5(int) = Store : &:r343_1, r343_4
# 341| v341_9(void) = ReturnIndirection : &:r341_7, ~mu341_4
# 341| v341_9(void) = ReturnIndirection[p] : &:r341_7, ~mu341_4
# 341| r341_10(glval<int>) = VariableAddress[#return] :
# 341| v341_11(void) = ReturnValue : &:r341_10, ~mu341_4
# 341| v341_12(void) = UnmodeledUse : mu*
@@ -2984,13 +2984,34 @@ ir.cpp:
# 625| v625_6(void) = ^BufferReadSideEffect[-1] : &:r625_2, ~mu622_4
# 625| mu625_7(String) = ^IndirectMayWriteSideEffect[-1] : &:r625_2
# 626| v626_1(void) = NoOp :
# 622| v622_15(void) = ReturnIndirection : &:r622_7, ~mu622_4
# 622| v622_16(void) = ReturnIndirection : &:r622_11, ~mu622_4
# 622| v622_15(void) = ReturnIndirection[r] : &:r622_7, ~mu622_4
# 622| v622_16(void) = ReturnIndirection[p] : &:r622_11, ~mu622_4
# 622| v622_17(void) = ReturnVoid :
# 622| v622_18(void) = UnmodeledUse : mu*
# 622| v622_19(void) = AliasedUse : ~mu622_4
# 622| v622_20(void) = ExitFunction :
# 628| void C::~C()
# 628| Block 0
# 628| v628_1(void) = EnterFunction :
# 628| mu628_2(unknown) = AliasedDefinition :
# 628| mu628_3(unknown) = InitializeNonLocal :
# 628| mu628_4(unknown) = UnmodeledDefinition :
# 628| r628_5(glval<C>) = InitializeThis :
#-----| v0_1(void) = NoOp :
# 628| r628_6(glval<String>) = FieldAddress[m_f] : r628_5
# 628| r628_7(glval<unknown>) = FunctionAddress[~String] :
# 628| v628_8(void) = Call : func:r628_7, this:r628_6
# 628| mu628_9(unknown) = ^CallSideEffect : ~mu628_4
# 628| r628_10(glval<String>) = FieldAddress[m_b] : r628_5
# 628| r628_11(glval<unknown>) = FunctionAddress[~String] :
# 628| v628_12(void) = Call : func:r628_11, this:r628_10
# 628| mu628_13(unknown) = ^CallSideEffect : ~mu628_4
# 628| v628_14(void) = ReturnVoid :
# 628| v628_15(void) = UnmodeledUse : mu*
# 628| v628_16(void) = AliasedUse : ~mu628_4
# 628| v628_17(void) = ExitFunction :
# 630| int C::StaticMemberFunction(int)
# 630| Block 0
# 630| v630_1(void) = EnterFunction :
@@ -3177,7 +3198,7 @@ ir.cpp:
# 676| r676_3(int &) = Load : &:r676_2, ~mu675_4
# 676| r676_4(int) = Load : &:r676_3, ~mu675_4
# 676| mu676_5(int) = Store : &:r676_1, r676_4
# 675| v675_9(void) = ReturnIndirection : &:r675_7, ~mu675_4
# 675| v675_9(void) = ReturnIndirection[r] : &:r675_7, ~mu675_4
# 675| r675_10(glval<int>) = VariableAddress[#return] :
# 675| v675_11(void) = ReturnValue : &:r675_10, ~mu675_4
# 675| v675_12(void) = UnmodeledUse : mu*
@@ -3370,7 +3391,7 @@ ir.cpp:
# 716| r716_1(glval<long>) = VariableAddress[#return] :
# 716| r716_2(long) = Constant[0] :
# 716| mu716_3(long) = Store : &:r716_1, r716_2
# 715| v715_11(void) = ReturnIndirection : &:r715_7, ~mu715_4
# 715| v715_11(void) = ReturnIndirection[x] : &:r715_7, ~mu715_4
# 715| r715_12(glval<long>) = VariableAddress[#return] :
# 715| v715_13(void) = ReturnValue : &:r715_12, ~mu715_4
# 715| v715_14(void) = UnmodeledUse : mu*
@@ -3557,7 +3578,7 @@ ir.cpp:
#-----| r0_20(glval<Base>) = CopyValue : r0_19
#-----| r0_21(Base &) = CopyValue : r0_20
#-----| mu0_22(Base &) = Store : &:r0_18, r0_21
#-----| v0_23(void) = ReturnIndirection : &:r0_3, ~mu745_4
#-----| v0_23(void) = ReturnIndirection[p#0] : &:r0_3, ~mu745_4
# 745| r745_9(glval<Base &>) = VariableAddress[#return] :
# 745| v745_10(void) = ReturnValue : &:r745_9, ~mu745_4
# 745| v745_11(void) = UnmodeledUse : mu*
@@ -3581,7 +3602,7 @@ ir.cpp:
# 745| mu745_9(unknown) = ^CallSideEffect : ~mu745_4
# 745| mu745_10(String) = ^IndirectMayWriteSideEffect[-1] : &:r745_6
# 745| v745_11(void) = NoOp :
#-----| v0_5(void) = ReturnIndirection : &:r0_3, ~mu745_4
#-----| v0_5(void) = ReturnIndirection[p#0] : &:r0_3, ~mu745_4
# 745| v745_12(void) = ReturnVoid :
# 745| v745_13(void) = UnmodeledUse : mu*
# 745| v745_14(void) = AliasedUse : ~mu745_4
@@ -3671,7 +3692,7 @@ ir.cpp:
#-----| r0_34(glval<Middle>) = CopyValue : r0_33
#-----| r0_35(Middle &) = CopyValue : r0_34
#-----| mu0_36(Middle &) = Store : &:r0_32, r0_35
#-----| v0_37(void) = ReturnIndirection : &:r0_3, ~mu754_4
#-----| v0_37(void) = ReturnIndirection[p#0] : &:r0_3, ~mu754_4
# 754| r754_12(glval<Middle &>) = VariableAddress[#return] :
# 754| v754_13(void) = ReturnValue : &:r754_12, ~mu754_4
# 754| v754_14(void) = UnmodeledUse : mu*
@@ -3771,7 +3792,7 @@ ir.cpp:
#-----| r0_34(glval<Derived>) = CopyValue : r0_33
#-----| r0_35(Derived &) = CopyValue : r0_34
#-----| mu0_36(Derived &) = Store : &:r0_32, r0_35
#-----| v0_37(void) = ReturnIndirection : &:r0_3, ~mu763_4
#-----| v0_37(void) = ReturnIndirection[p#0] : &:r0_3, ~mu763_4
# 763| r763_12(glval<Derived &>) = VariableAddress[#return] :
# 763| v763_13(void) = ReturnValue : &:r763_12, ~mu763_4
# 763| v763_14(void) = UnmodeledUse : mu*
@@ -4475,7 +4496,7 @@ ir.cpp:
# 885| r885_4(glval<..(*)(..)>) = VariableAddress[pfn] :
# 885| mu885_5(..(*)(..)) = Store : &:r885_4, r885_3
# 886| v886_1(void) = NoOp :
# 883| v883_11(void) = ReturnIndirection : &:r883_9, ~mu883_4
# 883| v883_11(void) = ReturnIndirection[p] : &:r883_9, ~mu883_4
# 883| v883_12(void) = ReturnVoid :
# 883| v883_13(void) = UnmodeledUse : mu*
# 883| v883_14(void) = AliasedUse : ~mu883_4
@@ -4524,7 +4545,7 @@ ir.cpp:
# 893| r893_2(__va_list_tag *) = Convert : r893_1
# 893| v893_3(void) = VarArgsEnd : r893_2
# 894| v894_1(void) = NoOp :
# 888| v888_11(void) = ReturnIndirection : &:r888_9, ~mu888_4
# 888| v888_11(void) = ReturnIndirection[args] : &:r888_9, ~mu888_4
# 888| v888_12(void) = ReturnVoid :
# 888| v888_13(void) = UnmodeledUse : mu*
# 888| v888_14(void) = AliasedUse : ~mu888_4
@@ -5044,7 +5065,7 @@ ir.cpp:
# 997| mu997_11(unknown) = ^CallSideEffect : ~mu996_4
# 997| r997_12(int) = Add : r997_6, r997_10
# 997| mu997_13(int) = Store : &:r997_1, r997_12
# 996| v996_11(void) = ReturnIndirection : &:r996_7, ~mu996_4
# 996| v996_11(void) = ReturnIndirection[a] : &:r996_7, ~mu996_4
# 996| r996_12(glval<int>) = VariableAddress[#return] :
# 996| v996_13(void) = ReturnValue : &:r996_12, ~mu996_4
# 996| v996_14(void) = UnmodeledUse : mu*
@@ -5354,7 +5375,7 @@ ir.cpp:
# 1055| v1055_7(void) = ^BufferReadSideEffect[-1] : &:r1055_2, ~mu1040_4
# 1055| mu1055_8(decltype([...](...){...})) = ^IndirectMayWriteSideEffect[-1] : &:r1055_2
# 1056| v1056_1(void) = NoOp :
# 1040| v1040_11(void) = ReturnIndirection : &:r1040_9, ~mu1040_4
# 1040| v1040_11(void) = ReturnIndirection[s] : &:r1040_9, ~mu1040_4
# 1040| v1040_12(void) = ReturnVoid :
# 1040| v1040_13(void) = UnmodeledUse : mu*
# 1040| v1040_14(void) = AliasedUse : ~mu1040_4
@@ -5705,13 +5726,13 @@ ir.cpp:
#-----| Goto -> Block 5
# 1088| Block 5
# 1088| v1088_1(void) = NoOp :
# 1089| v1089_1(void) = NoOp :
# 1077| v1077_9(void) = ReturnIndirection : &:r1077_7, ~mu1077_4
# 1077| v1077_10(void) = ReturnVoid :
# 1077| v1077_11(void) = UnmodeledUse : mu*
# 1077| v1077_12(void) = AliasedUse : ~mu1077_4
# 1077| v1077_13(void) = ExitFunction :
# 1088| v1088_1(void) = NoOp :
# 1089| v1089_1(void) = NoOp :
# 1077| v1077_9(void) = ReturnIndirection[v] : &:r1077_7, ~mu1077_4
# 1077| v1077_10(void) = ReturnVoid :
# 1077| v1077_11(void) = UnmodeledUse : mu*
# 1077| v1077_12(void) = AliasedUse : ~mu1077_4
# 1077| v1077_13(void) = ExitFunction :
#-----| Block 6
#-----| r0_24(glval<iterator>) = VariableAddress[(__begin)] :
@@ -5838,8 +5859,8 @@ ir.cpp:
# 1118| r1118_9(unsigned int) = Load : &:r1118_8, ~mu1113_4
# 1115| mu1115_1(unknown) = InlineAsm : ~mu1113_4, 0:r1118_3, 1:r1118_4, 2:r1118_7, 3:r1118_9
# 1120| v1120_1(void) = NoOp :
# 1113| v1113_17(void) = ReturnIndirection : &:r1113_7, ~mu1113_4
# 1113| v1113_18(void) = ReturnIndirection : &:r1113_13, ~mu1113_4
# 1113| v1113_17(void) = ReturnIndirection[a] : &:r1113_7, ~mu1113_4
# 1113| v1113_18(void) = ReturnIndirection[c] : &:r1113_13, ~mu1113_4
# 1113| v1113_19(void) = ReturnVoid :
# 1113| v1113_20(void) = UnmodeledUse : mu*
# 1113| v1113_21(void) = AliasedUse : ~mu1113_4
@@ -6415,12 +6436,12 @@ ir.cpp:
#-----| Goto -> Block 5
# 1244| Block 5
# 1244| v1244_1(void) = NoOp :
# 1240| v1240_9(void) = ReturnIndirection : &:r1240_7, ~mu1240_4
# 1240| v1240_10(void) = ReturnVoid :
# 1240| v1240_11(void) = UnmodeledUse : mu*
# 1240| v1240_12(void) = AliasedUse : ~mu1240_4
# 1240| v1240_13(void) = ExitFunction :
# 1244| v1244_1(void) = NoOp :
# 1240| v1240_9(void) = ReturnIndirection[dynamic] : &:r1240_7, ~mu1240_4
# 1240| v1240_10(void) = ReturnVoid :
# 1240| v1240_11(void) = UnmodeledUse : mu*
# 1240| v1240_12(void) = AliasedUse : ~mu1240_4
# 1240| v1240_13(void) = ExitFunction :
# 1241| Block 6
# 1241| r1241_4(glval<String>) = VariableAddress[a] :
@@ -6476,13 +6497,140 @@ ir.cpp:
# 1255| v1255_9(void) = ^BufferReadSideEffect[1] : &:r1255_6, ~mu1251_4
# 1255| mu1255_10(unknown) = ^BufferMayWriteSideEffect[0] : &:r1255_3
# 1256| v1256_1(void) = NoOp :
# 1251| v1251_13(void) = ReturnIndirection : &:r1251_7, ~mu1251_4
# 1251| v1251_14(void) = ReturnIndirection : &:r1251_11, ~mu1251_4
# 1251| v1251_13(void) = ReturnIndirection[s1] : &:r1251_7, ~mu1251_4
# 1251| v1251_14(void) = ReturnIndirection[s2] : &:r1251_11, ~mu1251_4
# 1251| v1251_15(void) = ReturnVoid :
# 1251| v1251_16(void) = UnmodeledUse : mu*
# 1251| v1251_17(void) = AliasedUse : ~mu1251_4
# 1251| v1251_18(void) = ExitFunction :
# 1261| void A::static_member(A*, int)
# 1261| Block 0
# 1261| v1261_1(void) = EnterFunction :
# 1261| mu1261_2(unknown) = AliasedDefinition :
# 1261| mu1261_3(unknown) = InitializeNonLocal :
# 1261| mu1261_4(unknown) = UnmodeledDefinition :
# 1261| r1261_5(glval<A *>) = VariableAddress[a] :
# 1261| mu1261_6(A *) = InitializeParameter[a] : &:r1261_5
# 1261| r1261_7(A *) = Load : &:r1261_5, ~mu1261_6
# 1261| mu1261_8(unknown) = InitializeIndirection[a] : &:r1261_7
# 1261| r1261_9(glval<int>) = VariableAddress[x] :
# 1261| mu1261_10(int) = InitializeParameter[x] : &:r1261_9
# 1262| r1262_1(glval<int>) = VariableAddress[x] :
# 1262| r1262_2(int) = Load : &:r1262_1, ~mu1261_4
# 1262| r1262_3(glval<A *>) = VariableAddress[a] :
# 1262| r1262_4(A *) = Load : &:r1262_3, ~mu1261_4
# 1262| r1262_5(glval<int>) = FieldAddress[member] : r1262_4
# 1262| mu1262_6(int) = Store : &:r1262_5, r1262_2
# 1263| v1263_1(void) = NoOp :
# 1261| v1261_11(void) = ReturnIndirection[a] : &:r1261_7, ~mu1261_4
# 1261| v1261_12(void) = ReturnVoid :
# 1261| v1261_13(void) = UnmodeledUse : mu*
# 1261| v1261_14(void) = AliasedUse : ~mu1261_4
# 1261| v1261_15(void) = ExitFunction :
# 1270| void test_static_member_functions(int, A*)
# 1270| Block 0
# 1270| v1270_1(void) = EnterFunction :
# 1270| mu1270_2(unknown) = AliasedDefinition :
# 1270| mu1270_3(unknown) = InitializeNonLocal :
# 1270| mu1270_4(unknown) = UnmodeledDefinition :
# 1270| r1270_5(glval<int>) = VariableAddress[int_arg] :
# 1270| mu1270_6(int) = InitializeParameter[int_arg] : &:r1270_5
# 1270| r1270_7(glval<A *>) = VariableAddress[a_arg] :
# 1270| mu1270_8(A *) = InitializeParameter[a_arg] : &:r1270_7
# 1270| r1270_9(A *) = Load : &:r1270_7, ~mu1270_8
# 1270| mu1270_10(unknown) = InitializeIndirection[a_arg] : &:r1270_9
# 1271| r1271_1(glval<C>) = VariableAddress[c] :
# 1271| mu1271_2(C) = Uninitialized[c] : &:r1271_1
# 1271| r1271_3(glval<unknown>) = FunctionAddress[C] :
# 1271| v1271_4(void) = Call : func:r1271_3, this:r1271_1
# 1271| mu1271_5(unknown) = ^CallSideEffect : ~mu1270_4
# 1271| mu1271_6(C) = ^IndirectMayWriteSideEffect[-1] : &:r1271_1
# 1272| r1272_1(glval<C>) = VariableAddress[c] :
# 1272| r1272_2(glval<unknown>) = FunctionAddress[StaticMemberFunction] :
# 1272| r1272_3(int) = Constant[10] :
# 1272| r1272_4(int) = Call : func:r1272_2, 0:r1272_3
# 1272| mu1272_5(unknown) = ^CallSideEffect : ~mu1270_4
# 1273| r1273_1(glval<unknown>) = FunctionAddress[StaticMemberFunction] :
# 1273| r1273_2(int) = Constant[10] :
# 1273| r1273_3(int) = Call : func:r1273_1, 0:r1273_2
# 1273| mu1273_4(unknown) = ^CallSideEffect : ~mu1270_4
# 1275| r1275_1(glval<A>) = VariableAddress[a] :
# 1275| mu1275_2(A) = Uninitialized[a] : &:r1275_1
# 1276| r1276_1(glval<A>) = VariableAddress[a] :
# 1276| r1276_2(glval<unknown>) = FunctionAddress[static_member] :
# 1276| r1276_3(glval<A>) = VariableAddress[a] :
# 1276| r1276_4(A *) = CopyValue : r1276_3
# 1276| r1276_5(glval<int>) = VariableAddress[int_arg] :
# 1276| r1276_6(int) = Load : &:r1276_5, ~mu1270_4
# 1276| v1276_7(void) = Call : func:r1276_2, 0:r1276_4, 1:r1276_6
# 1276| mu1276_8(unknown) = ^CallSideEffect : ~mu1270_4
# 1276| v1276_9(void) = ^BufferReadSideEffect[0] : &:r1276_4, ~mu1270_4
# 1276| mu1276_10(unknown) = ^BufferMayWriteSideEffect[0] : &:r1276_4
# 1277| r1277_1(glval<unknown>) = FunctionAddress[static_member] :
# 1277| r1277_2(glval<A>) = VariableAddress[a] :
# 1277| r1277_3(A *) = CopyValue : r1277_2
# 1277| r1277_4(glval<int>) = VariableAddress[int_arg] :
# 1277| r1277_5(int) = Load : &:r1277_4, ~mu1270_4
# 1277| v1277_6(void) = Call : func:r1277_1, 0:r1277_3, 1:r1277_5
# 1277| mu1277_7(unknown) = ^CallSideEffect : ~mu1270_4
# 1277| v1277_8(void) = ^BufferReadSideEffect[0] : &:r1277_3, ~mu1270_4
# 1277| mu1277_9(unknown) = ^BufferMayWriteSideEffect[0] : &:r1277_3
# 1279| r1279_1(glval<A>) = VariableAddress[a] :
# 1279| r1279_2(A *) = CopyValue : r1279_1
# 1279| r1279_3(glval<unknown>) = FunctionAddress[static_member] :
# 1279| r1279_4(glval<A *>) = VariableAddress[a_arg] :
# 1279| r1279_5(A *) = Load : &:r1279_4, ~mu1270_4
# 1279| r1279_6(glval<int>) = VariableAddress[int_arg] :
# 1279| r1279_7(int) = Load : &:r1279_6, ~mu1270_4
# 1279| r1279_8(int) = Constant[2] :
# 1279| r1279_9(int) = Add : r1279_7, r1279_8
# 1279| v1279_10(void) = Call : func:r1279_3, 0:r1279_5, 1:r1279_9
# 1279| mu1279_11(unknown) = ^CallSideEffect : ~mu1270_4
# 1279| v1279_12(void) = ^BufferReadSideEffect[0] : &:r1279_5, ~mu1270_4
# 1279| mu1279_13(unknown) = ^BufferMayWriteSideEffect[0] : &:r1279_5
# 1280| r1280_1(glval<A *>) = VariableAddress[a_arg] :
# 1280| r1280_2(A *) = Load : &:r1280_1, ~mu1270_4
# 1280| r1280_3(glval<A>) = CopyValue : r1280_2
# 1280| r1280_4(glval<unknown>) = FunctionAddress[static_member] :
# 1280| r1280_5(glval<A>) = VariableAddress[a] :
# 1280| r1280_6(A *) = CopyValue : r1280_5
# 1280| r1280_7(int) = Constant[99] :
# 1280| v1280_8(void) = Call : func:r1280_4, 0:r1280_6, 1:r1280_7
# 1280| mu1280_9(unknown) = ^CallSideEffect : ~mu1270_4
# 1280| v1280_10(void) = ^BufferReadSideEffect[0] : &:r1280_6, ~mu1270_4
# 1280| mu1280_11(unknown) = ^BufferMayWriteSideEffect[0] : &:r1280_6
# 1281| r1281_1(glval<A *>) = VariableAddress[a_arg] :
# 1281| r1281_2(A *) = Load : &:r1281_1, ~mu1270_4
# 1281| r1281_3(glval<unknown>) = FunctionAddress[static_member] :
# 1281| r1281_4(glval<A *>) = VariableAddress[a_arg] :
# 1281| r1281_5(A *) = Load : &:r1281_4, ~mu1270_4
# 1281| r1281_6(int) = Constant[-1] :
# 1281| v1281_7(void) = Call : func:r1281_3, 0:r1281_5, 1:r1281_6
# 1281| mu1281_8(unknown) = ^CallSideEffect : ~mu1270_4
# 1281| v1281_9(void) = ^BufferReadSideEffect[0] : &:r1281_5, ~mu1270_4
# 1281| mu1281_10(unknown) = ^BufferMayWriteSideEffect[0] : &:r1281_5
# 1283| r1283_1(glval<A>) = VariableAddress[a] :
# 1283| r1283_2(glval<unknown>) = FunctionAddress[static_member_without_def] :
# 1283| v1283_3(void) = Call : func:r1283_2
# 1283| mu1283_4(unknown) = ^CallSideEffect : ~mu1270_4
# 1284| r1284_1(glval<unknown>) = FunctionAddress[static_member_without_def] :
# 1284| v1284_2(void) = Call : func:r1284_1
# 1284| mu1284_3(unknown) = ^CallSideEffect : ~mu1270_4
# 1286| r1286_1(glval<unknown>) = FunctionAddress[getAnInstanceOfA] :
# 1286| r1286_2(A *) = Call : func:r1286_1
# 1286| mu1286_3(unknown) = ^CallSideEffect : ~mu1270_4
# 1286| r1286_4(glval<unknown>) = FunctionAddress[static_member_without_def] :
# 1286| v1286_5(void) = Call : func:r1286_4
# 1286| mu1286_6(unknown) = ^CallSideEffect : ~mu1270_4
# 1287| v1287_1(void) = NoOp :
# 1270| v1270_11(void) = ReturnIndirection[a_arg] : &:r1270_9, ~mu1270_4
# 1270| v1270_12(void) = ReturnVoid :
# 1270| v1270_13(void) = UnmodeledUse : mu*
# 1270| v1270_14(void) = AliasedUse : ~mu1270_4
# 1270| v1270_15(void) = ExitFunction :
perf-regression.cpp:
# 6| void Big::Big()
# 6| Block 0
@@ -6545,7 +6693,7 @@ struct_init.cpp:
# 17| r17_3(glval<Info *>) = VariableAddress[global_pointer] :
# 17| mu17_4(Info *) = Store : &:r17_3, r17_2
# 18| v18_1(void) = NoOp :
# 16| v16_9(void) = ReturnIndirection : &:r16_7, ~mu16_4
# 16| v16_9(void) = ReturnIndirection[info] : &:r16_7, ~mu16_4
# 16| v16_10(void) = ReturnVoid :
# 16| v16_11(void) = UnmodeledUse : mu*
# 16| v16_12(void) = AliasedUse : ~mu16_4
@@ -6635,7 +6783,7 @@ struct_init.cpp:
# 41| v41_6(void) = ^BufferReadSideEffect[0] : &:r41_3, ~mu36_4
# 41| mu41_7(unknown) = ^BufferMayWriteSideEffect[0] : &:r41_3
# 42| v42_1(void) = NoOp :
# 36| v36_9(void) = ReturnIndirection : &:r36_7, ~mu36_4
# 36| v36_9(void) = ReturnIndirection[name1] : &:r36_7, ~mu36_4
# 36| v36_10(void) = ReturnVoid :
# 36| v36_11(void) = UnmodeledUse : mu*
# 36| v36_12(void) = AliasedUse : ~mu36_4

84
cpp/ql/test/library-tests/ir/ssa/aliased_ssa_ir.expected
View File

@@ -89,7 +89,7 @@ ssa.cpp:
# 28| r28_12(int) = Load : &:r28_11, m28_1
# 28| r28_13(int) = Add : r28_8, r28_12
# 28| m28_14(int) = Store : &:r28_4, r28_13
# 13| v13_14(void) = ReturnIndirection : &:r13_8, m28_3
# 13| v13_14(void) = ReturnIndirection[p] : &:r13_8, m28_3
# 13| r13_15(glval<int>) = VariableAddress[#return] :
# 13| v13_16(void) = ReturnValue : &:r13_15, m28_14
# 13| v13_17(void) = UnmodeledUse : mu*
@@ -257,12 +257,12 @@ ssa.cpp:
#-----| Goto (back edge) -> Block 1
# 71| Block 3
# 71| v71_1(void) = NoOp :
# 68| v68_12(void) = ReturnIndirection : &:r68_10, m68_11
# 68| v68_13(void) = ReturnVoid :
# 68| v68_14(void) = UnmodeledUse : mu*
# 68| v68_15(void) = AliasedUse : ~m69_3
# 68| v68_16(void) = ExitFunction :
# 71| v71_1(void) = NoOp :
# 68| v68_12(void) = ReturnIndirection[p] : &:r68_10, m68_11
# 68| v68_13(void) = ReturnVoid :
# 68| v68_14(void) = UnmodeledUse : mu*
# 68| v68_15(void) = AliasedUse : ~m69_3
# 68| v68_16(void) = ExitFunction :
# 75| void ScalarPhi(bool)
# 75| Block 0
@@ -806,7 +806,7 @@ ssa.cpp:
# 181| r181_3(int *) = Load : &:r181_2, m179_7
# 181| r181_4(int) = Load : &:r181_3, ~m179_9
# 181| m181_5(int) = Store : &:r181_1, r181_4
# 179| v179_10(void) = ReturnIndirection : &:r179_8, m179_9
# 179| v179_10(void) = ReturnIndirection[p] : &:r179_8, m179_9
# 179| r179_11(glval<int>) = VariableAddress[#return] :
# 179| v179_12(void) = ReturnValue : &:r179_11, m181_5
# 179| v179_13(void) = UnmodeledUse : mu*
@@ -853,10 +853,10 @@ ssa.cpp:
# 186| m186_1(unknown) = InlineAsm : ~m184_15, 0:r189_3, 1:r189_6, 2:r190_3, 3:r190_6
# 186| m186_2(unknown) = Chi : total:m184_15, partial:m186_1
# 192| v192_1(void) = NoOp :
# 184| v184_24(void) = ReturnIndirection : &:r184_8, ~m186_2
# 184| v184_25(void) = ReturnIndirection : &:r184_13, ~m186_2
# 184| v184_26(void) = ReturnIndirection : &:r184_18, m184_19
# 184| v184_27(void) = ReturnIndirection : &:r184_22, m184_23
# 184| v184_24(void) = ReturnIndirection[a] : &:r184_8, ~m186_2
# 184| v184_25(void) = ReturnIndirection[b] : &:r184_13, ~m186_2
# 184| v184_26(void) = ReturnIndirection[c] : &:r184_18, m184_19
# 184| v184_27(void) = ReturnIndirection[d] : &:r184_22, m184_23
# 184| v184_28(void) = ReturnVoid :
# 184| v184_29(void) = UnmodeledUse : mu*
# 184| v184_30(void) = AliasedUse : ~m186_2
@@ -913,8 +913,8 @@ ssa.cpp:
# 202| r202_2(glval<int>) = VariableAddress[ret] :
# 202| r202_3(int) = Load : &:r202_2, m201_8
# 202| m202_4(int) = Store : &:r202_1, r202_3
# 198| v198_16(void) = ReturnIndirection : &:r198_8, m198_9
# 198| v198_17(void) = ReturnIndirection : &:r198_12, m198_13
# 198| v198_16(void) = ReturnIndirection[str1] : &:r198_8, m198_9
# 198| v198_17(void) = ReturnIndirection[str2] : &:r198_12, m198_13
# 198| r198_18(glval<int>) = VariableAddress[#return] :
# 198| v198_19(void) = ReturnValue : &:r198_18, m202_4
# 198| v198_20(void) = UnmodeledUse : mu*
@@ -1189,7 +1189,7 @@ ssa.cpp:
# 251| r251_2(glval<char *>) = VariableAddress[dst] :
# 251| r251_3(char *) = Load : &:r251_2, m248_14
# 251| m251_4(char *) = Store : &:r251_1, r251_3
# 247| v247_13(void) = ReturnIndirection : &:r247_8, ~m250_13
# 247| v247_13(void) = ReturnIndirection[src] : &:r247_8, ~m250_13
# 247| r247_14(glval<char *>) = VariableAddress[#return] :
# 247| v247_15(void) = ReturnValue : &:r247_14, m251_4
# 247| v247_16(void) = UnmodeledUse : mu*
@@ -1283,7 +1283,7 @@ ssa.cpp:
# 271| r271_2(glval<void *>) = VariableAddress[buf] :
# 271| r271_3(void *) = Load : &:r271_2, m269_10
# 271| m271_4(void *) = Store : &:r271_1, r271_3
# 268| v268_13(void) = ReturnIndirection : &:r268_8, ~m270_11
# 268| v268_13(void) = ReturnIndirection[s] : &:r268_8, ~m270_11
# 268| r268_14(glval<void *>) = VariableAddress[#return] :
# 268| v268_15(void) = ReturnValue : &:r268_14, m271_4
# 268| v268_16(void) = UnmodeledUse : mu*
@@ -1377,7 +1377,7 @@ ssa.cpp:
# 287| r287_9(A *) = Load : &:r287_7, m287_8
# 287| m287_10(unknown) = InitializeIndirection[p#0] : &:r287_9
# 287| v287_11(void) = NoOp :
# 287| v287_12(void) = ReturnIndirection : &:r287_9, m287_10
# 287| v287_12(void) = ReturnIndirection[p#0] : &:r287_9, m287_10
# 287| v287_13(void) = ReturnVoid :
# 287| v287_14(void) = UnmodeledUse : mu*
# 287| v287_15(void) = AliasedUse : m287_3
@@ -1483,3 +1483,53 @@ ssa.cpp:
# 291| v291_10(void) = UnmodeledUse : mu*
# 291| v291_11(void) = AliasedUse : ~m295_12
# 291| v291_12(void) = ExitFunction :
# 301| int main(int, char**)
# 301| Block 0
# 301| v301_1(void) = EnterFunction :
# 301| m301_2(unknown) = AliasedDefinition :
# 301| m301_3(unknown) = InitializeNonLocal :
# 301| m301_4(unknown) = Chi : total:m301_2, partial:m301_3
# 301| mu301_5(unknown) = UnmodeledDefinition :
# 301| r301_6(glval<int>) = VariableAddress[argc] :
# 301| m301_7(int) = InitializeParameter[argc] : &:r301_6
# 301| r301_8(glval<char **>) = VariableAddress[argv] :
# 301| m301_9(char **) = InitializeParameter[argv] : &:r301_8
# 301| r301_10(char **) = Load : &:r301_8, m301_9
# 301| m301_11(unknown) = InitializeIndirection[argv] : &:r301_10
# 301| m301_12(unknown) = Chi : total:m301_4, partial:m301_11
# 302| r302_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 302| r302_2(glval<int>) = VariableAddress[argc] :
# 302| r302_3(int) = Load : &:r302_2, m301_7
# 302| r302_4(glval<char **>) = VariableAddress[argv] :
# 302| r302_5(char **) = Load : &:r302_4, m301_9
# 302| v302_6(void) = Call : func:r302_1, 0:r302_3, 1:r302_5
# 302| m302_7(unknown) = ^CallSideEffect : ~m301_12
# 302| m302_8(unknown) = Chi : total:m301_12, partial:m302_7
# 302| v302_9(void) = ^BufferReadSideEffect[1] : &:r302_5, ~m302_8
# 302| m302_10(unknown) = ^BufferMayWriteSideEffect[1] : &:r302_5
# 302| m302_11(unknown) = Chi : total:m302_8, partial:m302_10
# 303| r303_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 303| r303_2(glval<int>) = VariableAddress[argc] :
# 303| r303_3(int) = Load : &:r303_2, m301_7
# 303| r303_4(glval<char **>) = VariableAddress[argv] :
# 303| r303_5(char **) = Load : &:r303_4, m301_9
# 303| v303_6(void) = Call : func:r303_1, 0:r303_3, 1:r303_5
# 303| m303_7(unknown) = ^CallSideEffect : ~m302_11
# 303| m303_8(unknown) = Chi : total:m302_11, partial:m303_7
# 303| v303_9(void) = ^BufferReadSideEffect[1] : &:r303_5, ~m303_8
# 303| m303_10(unknown) = ^BufferMayWriteSideEffect[1] : &:r303_5
# 303| m303_11(unknown) = Chi : total:m303_8, partial:m303_10
# 304| r304_1(glval<int>) = VariableAddress[#return] :
# 304| r304_2(glval<char **>) = VariableAddress[argv] :
# 304| r304_3(char **) = Load : &:r304_2, m301_9
# 304| r304_4(char *) = Load : &:r304_3, ~m303_11
# 304| r304_5(char) = Load : &:r304_4, ~m303_11
# 304| r304_6(int) = Convert : r304_5
# 304| m304_7(int) = Store : &:r304_1, r304_6
# 301| v301_13(void) = ReturnIndirection[argv] : &:r301_10, ~m303_11
# 301| r301_14(glval<int>) = VariableAddress[#return] :
# 301| v301_15(void) = ReturnValue : &:r301_14, m304_7
# 301| v301_16(void) = UnmodeledUse : mu*
# 301| v301_17(void) = AliasedUse : ~m303_11
# 301| v301_18(void) = ExitFunction :

83
cpp/ql/test/library-tests/ir/ssa/aliased_ssa_ir_unsound.expected
View File

@@ -89,7 +89,7 @@ ssa.cpp:
# 28| r28_12(int) = Load : &:r28_11, m28_1
# 28| r28_13(int) = Add : r28_8, r28_12
# 28| m28_14(int) = Store : &:r28_4, r28_13
# 13| v13_14(void) = ReturnIndirection : &:r13_8, m28_3
# 13| v13_14(void) = ReturnIndirection[p] : &:r13_8, m28_3
# 13| r13_15(glval<int>) = VariableAddress[#return] :
# 13| v13_16(void) = ReturnValue : &:r13_15, m28_14
# 13| v13_17(void) = UnmodeledUse : mu*
@@ -257,12 +257,12 @@ ssa.cpp:
#-----| Goto (back edge) -> Block 1
# 71| Block 3
# 71| v71_1(void) = NoOp :
# 68| v68_12(void) = ReturnIndirection : &:r68_10, m68_11
# 68| v68_13(void) = ReturnVoid :
# 68| v68_14(void) = UnmodeledUse : mu*
# 68| v68_15(void) = AliasedUse : ~m69_3
# 68| v68_16(void) = ExitFunction :
# 71| v71_1(void) = NoOp :
# 68| v68_12(void) = ReturnIndirection[p] : &:r68_10, m68_11
# 68| v68_13(void) = ReturnVoid :
# 68| v68_14(void) = UnmodeledUse : mu*
# 68| v68_15(void) = AliasedUse : ~m69_3
# 68| v68_16(void) = ExitFunction :
# 75| void ScalarPhi(bool)
# 75| Block 0
@@ -803,7 +803,7 @@ ssa.cpp:
# 181| r181_3(int *) = Load : &:r181_2, m179_7
# 181| r181_4(int) = Load : &:r181_3, ~m179_9
# 181| m181_5(int) = Store : &:r181_1, r181_4
# 179| v179_10(void) = ReturnIndirection : &:r179_8, m179_9
# 179| v179_10(void) = ReturnIndirection[p] : &:r179_8, m179_9
# 179| r179_11(glval<int>) = VariableAddress[#return] :
# 179| v179_12(void) = ReturnValue : &:r179_11, m181_5
# 179| v179_13(void) = UnmodeledUse : mu*
@@ -848,10 +848,10 @@ ssa.cpp:
# 186| m186_1(unknown) = InlineAsm : ~m184_4, 0:r189_3, 1:r189_6, 2:r190_3, 3:r190_6
# 186| m186_2(unknown) = Chi : total:m184_4, partial:m186_1
# 192| v192_1(void) = NoOp :
# 184| v184_22(void) = ReturnIndirection : &:r184_8, m184_9
# 184| v184_23(void) = ReturnIndirection : &:r184_12, m184_13
# 184| v184_24(void) = ReturnIndirection : &:r184_16, m184_17
# 184| v184_25(void) = ReturnIndirection : &:r184_20, m184_21
# 184| v184_22(void) = ReturnIndirection[a] : &:r184_8, m184_9
# 184| v184_23(void) = ReturnIndirection[b] : &:r184_12, m184_13
# 184| v184_24(void) = ReturnIndirection[c] : &:r184_16, m184_17
# 184| v184_25(void) = ReturnIndirection[d] : &:r184_20, m184_21
# 184| v184_26(void) = ReturnVoid :
# 184| v184_27(void) = UnmodeledUse : mu*
# 184| v184_28(void) = AliasedUse : ~m186_2
@@ -908,8 +908,8 @@ ssa.cpp:
# 202| r202_2(glval<int>) = VariableAddress[ret] :
# 202| r202_3(int) = Load : &:r202_2, m201_8
# 202| m202_4(int) = Store : &:r202_1, r202_3
# 198| v198_16(void) = ReturnIndirection : &:r198_8, m198_9
# 198| v198_17(void) = ReturnIndirection : &:r198_12, m198_13
# 198| v198_16(void) = ReturnIndirection[str1] : &:r198_8, m198_9
# 198| v198_17(void) = ReturnIndirection[str2] : &:r198_12, m198_13
# 198| r198_18(glval<int>) = VariableAddress[#return] :
# 198| v198_19(void) = ReturnValue : &:r198_18, m202_4
# 198| v198_20(void) = UnmodeledUse : mu*
@@ -1180,7 +1180,7 @@ ssa.cpp:
# 251| r251_2(glval<char *>) = VariableAddress[dst] :
# 251| r251_3(char *) = Load : &:r251_2, m248_13
# 251| m251_4(char *) = Store : &:r251_1, r251_3
# 247| v247_12(void) = ReturnIndirection : &:r247_8, m249_6
# 247| v247_12(void) = ReturnIndirection[src] : &:r247_8, m249_6
# 247| r247_13(glval<char *>) = VariableAddress[#return] :
# 247| v247_14(void) = ReturnValue : &:r247_13, m251_4
# 247| v247_15(void) = UnmodeledUse : mu*
@@ -1272,7 +1272,7 @@ ssa.cpp:
# 271| r271_2(glval<void *>) = VariableAddress[buf] :
# 271| r271_3(void *) = Load : &:r271_2, m269_9
# 271| m271_4(void *) = Store : &:r271_1, r271_3
# 268| v268_12(void) = ReturnIndirection : &:r268_8, m268_9
# 268| v268_12(void) = ReturnIndirection[s] : &:r268_8, m268_9
# 268| r268_13(glval<void *>) = VariableAddress[#return] :
# 268| v268_14(void) = ReturnValue : &:r268_13, m271_4
# 268| v268_15(void) = UnmodeledUse : mu*
@@ -1365,7 +1365,7 @@ ssa.cpp:
# 287| r287_9(A *) = Load : &:r287_7, m287_8
# 287| m287_10(unknown) = InitializeIndirection[p#0] : &:r287_9
# 287| v287_11(void) = NoOp :
# 287| v287_12(void) = ReturnIndirection : &:r287_9, m287_10
# 287| v287_12(void) = ReturnIndirection[p#0] : &:r287_9, m287_10
# 287| v287_13(void) = ReturnVoid :
# 287| v287_14(void) = UnmodeledUse : mu*
# 287| v287_15(void) = AliasedUse : m287_3
@@ -1471,3 +1471,52 @@ ssa.cpp:
# 291| v291_10(void) = UnmodeledUse : mu*
# 291| v291_11(void) = AliasedUse : ~m295_12
# 291| v291_12(void) = ExitFunction :
# 301| int main(int, char**)
# 301| Block 0
# 301| v301_1(void) = EnterFunction :
# 301| m301_2(unknown) = AliasedDefinition :
# 301| m301_3(unknown) = InitializeNonLocal :
# 301| m301_4(unknown) = Chi : total:m301_2, partial:m301_3
# 301| mu301_5(unknown) = UnmodeledDefinition :
# 301| r301_6(glval<int>) = VariableAddress[argc] :
# 301| m301_7(int) = InitializeParameter[argc] : &:r301_6
# 301| r301_8(glval<char **>) = VariableAddress[argv] :
# 301| m301_9(char **) = InitializeParameter[argv] : &:r301_8
# 301| r301_10(char **) = Load : &:r301_8, m301_9
# 301| m301_11(unknown) = InitializeIndirection[argv] : &:r301_10
# 302| r302_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 302| r302_2(glval<int>) = VariableAddress[argc] :
# 302| r302_3(int) = Load : &:r302_2, m301_7
# 302| r302_4(glval<char **>) = VariableAddress[argv] :
# 302| r302_5(char **) = Load : &:r302_4, m301_9
# 302| v302_6(void) = Call : func:r302_1, 0:r302_3, 1:r302_5
# 302| m302_7(unknown) = ^CallSideEffect : ~m301_4
# 302| m302_8(unknown) = Chi : total:m301_4, partial:m302_7
# 302| v302_9(void) = ^BufferReadSideEffect[1] : &:r302_5, ~m301_11
# 302| m302_10(unknown) = ^BufferMayWriteSideEffect[1] : &:r302_5
# 302| m302_11(char *) = Chi : total:m301_11, partial:m302_10
# 303| r303_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 303| r303_2(glval<int>) = VariableAddress[argc] :
# 303| r303_3(int) = Load : &:r303_2, m301_7
# 303| r303_4(glval<char **>) = VariableAddress[argv] :
# 303| r303_5(char **) = Load : &:r303_4, m301_9
# 303| v303_6(void) = Call : func:r303_1, 0:r303_3, 1:r303_5
# 303| m303_7(unknown) = ^CallSideEffect : ~m302_8
# 303| m303_8(unknown) = Chi : total:m302_8, partial:m303_7
# 303| v303_9(void) = ^BufferReadSideEffect[1] : &:r303_5, ~m302_11
# 303| m303_10(unknown) = ^BufferMayWriteSideEffect[1] : &:r303_5
# 303| m303_11(char *) = Chi : total:m302_11, partial:m303_10
# 304| r304_1(glval<int>) = VariableAddress[#return] :
# 304| r304_2(glval<char **>) = VariableAddress[argv] :
# 304| r304_3(char **) = Load : &:r304_2, m301_9
# 304| r304_4(char *) = Load : &:r304_3, ~m303_11
# 304| r304_5(char) = Load : &:r304_4, ~m303_8
# 304| r304_6(int) = Convert : r304_5
# 304| m304_7(int) = Store : &:r304_1, r304_6
# 301| v301_12(void) = ReturnIndirection[argv] : &:r301_10, ~m303_11, m303_11
# 301| r301_13(glval<int>) = VariableAddress[#return] :
# 301| v301_14(void) = ReturnValue : &:r301_13, m304_7
# 301| v301_15(void) = UnmodeledUse : mu*
# 301| v301_16(void) = AliasedUse : ~m303_8
# 301| v301_17(void) = ExitFunction :

2
cpp/ql/test/library-tests/ir/ssa/aliased_ssa_sanity_unsound.expected
View File

@@ -1,6 +1,7 @@
missingOperand
unexpectedOperand
duplicateOperand
| ssa.cpp:301:27:301:30 | ReturnIndirection: argv | Instruction has 2 operands with tag 'SideEffect' in function '$@'. | ssa.cpp:301:5:301:8 | IR: main | int main(int, char**) |
missingPhiOperand
missingOperandType
duplicateChiOperand
@@ -19,6 +20,7 @@ switchInstructionWithoutDefaultEdge
notMarkedAsConflated
wronglyMarkedAsConflated
invalidOverlap
| ssa.cpp:301:27:301:30 | SideEffect | MemoryOperand 'SideEffect' has a `getDefinitionOverlap()` of 'MayPartiallyOverlap'. | ssa.cpp:301:5:301:8 | IR: main | int main(int, char**) |
missingCanonicalLanguageType
multipleCanonicalLanguageTypes
missingIRType

8
cpp/ql/test/library-tests/ir/ssa/ssa.cpp
View File

@@ -294,4 +294,12 @@ Point *NewAliasing(int x) {
int j = new A(new A(x))->i;
A* a = new A;
return p;
}
void unknownFunction(int argc, char **argv);
int main(int argc, char **argv) {
unknownFunction(argc, argv);
unknownFunction(argc, argv);
return **argv; // Chi chain goes through side effects from unknownFunction
}

78
cpp/ql/test/library-tests/ir/ssa/unaliased_ssa_ir.expected
View File

@@ -78,7 +78,7 @@ ssa.cpp:
# 28| r28_9(int) = Load : &:r28_8, ~mu13_4
# 28| r28_10(int) = Add : r28_5, r28_9
# 28| m28_11(int) = Store : &:r28_1, r28_10
# 13| v13_13(void) = ReturnIndirection : &:r13_7, ~mu13_4
# 13| v13_13(void) = ReturnIndirection[p] : &:r13_7, ~mu13_4
# 13| r13_14(glval<int>) = VariableAddress[#return] :
# 13| v13_15(void) = ReturnValue : &:r13_14, m28_11
# 13| v13_16(void) = UnmodeledUse : mu*
@@ -249,12 +249,12 @@ ssa.cpp:
#-----| Goto (back edge) -> Block 1
# 71| Block 3
# 71| v71_1(void) = NoOp :
# 68| v68_11(void) = ReturnIndirection : &:r68_9, ~mu68_4
# 68| v68_12(void) = ReturnVoid :
# 68| v68_13(void) = UnmodeledUse : mu*
# 68| v68_14(void) = AliasedUse : ~mu68_4
# 68| v68_15(void) = ExitFunction :
# 71| v71_1(void) = NoOp :
# 68| v68_11(void) = ReturnIndirection[p] : &:r68_9, ~mu68_4
# 68| v68_12(void) = ReturnVoid :
# 68| v68_13(void) = UnmodeledUse : mu*
# 68| v68_14(void) = AliasedUse : ~mu68_4
# 68| v68_15(void) = ExitFunction :
# 75| void ScalarPhi(bool)
# 75| Block 0
@@ -752,7 +752,7 @@ ssa.cpp:
# 181| r181_3(int *) = Load : &:r181_2, m179_6
# 181| r181_4(int) = Load : &:r181_3, ~mu179_4
# 181| m181_5(int) = Store : &:r181_1, r181_4
# 179| v179_9(void) = ReturnIndirection : &:r179_7, ~mu179_4
# 179| v179_9(void) = ReturnIndirection[p] : &:r179_7, ~mu179_4
# 179| r179_10(glval<int>) = VariableAddress[#return] :
# 179| v179_11(void) = ReturnValue : &:r179_10, m181_5
# 179| v179_12(void) = UnmodeledUse : mu*
@@ -795,10 +795,10 @@ ssa.cpp:
# 190| r190_6(unsigned int) = Load : &:r190_5, ~mu184_4
# 186| mu186_1(unknown) = InlineAsm : ~mu184_4, 0:r189_3, 1:r189_6, 2:r190_3, 3:r190_6
# 192| v192_1(void) = NoOp :
# 184| v184_21(void) = ReturnIndirection : &:r184_7, ~mu184_4
# 184| v184_22(void) = ReturnIndirection : &:r184_11, ~mu184_4
# 184| v184_23(void) = ReturnIndirection : &:r184_15, ~mu184_4
# 184| v184_24(void) = ReturnIndirection : &:r184_19, ~mu184_4
# 184| v184_21(void) = ReturnIndirection[a] : &:r184_7, ~mu184_4
# 184| v184_22(void) = ReturnIndirection[b] : &:r184_11, ~mu184_4
# 184| v184_23(void) = ReturnIndirection[c] : &:r184_15, ~mu184_4
# 184| v184_24(void) = ReturnIndirection[d] : &:r184_19, ~mu184_4
# 184| v184_25(void) = ReturnVoid :
# 184| v184_26(void) = UnmodeledUse : mu*
# 184| v184_27(void) = AliasedUse : ~mu184_4
@@ -854,8 +854,8 @@ ssa.cpp:
# 202| r202_2(glval<int>) = VariableAddress[ret] :
# 202| r202_3(int) = Load : &:r202_2, m201_8
# 202| m202_4(int) = Store : &:r202_1, r202_3
# 198| v198_15(void) = ReturnIndirection : &:r198_7, ~mu198_4
# 198| v198_16(void) = ReturnIndirection : &:r198_11, ~mu198_4
# 198| v198_15(void) = ReturnIndirection[str1] : &:r198_7, ~mu198_4
# 198| v198_16(void) = ReturnIndirection[str2] : &:r198_11, ~mu198_4
# 198| r198_17(glval<int>) = VariableAddress[#return] :
# 198| v198_18(void) = ReturnValue : &:r198_17, m202_4
# 198| v198_19(void) = UnmodeledUse : mu*
@@ -1098,7 +1098,7 @@ ssa.cpp:
# 251| r251_2(glval<char *>) = VariableAddress[dst] :
# 251| r251_3(char *) = Load : &:r251_2, m248_12
# 251| m251_4(char *) = Store : &:r251_1, r251_3
# 247| v247_11(void) = ReturnIndirection : &:r247_7, ~mu247_4
# 247| v247_11(void) = ReturnIndirection[src] : &:r247_7, ~mu247_4
# 247| r247_12(glval<char *>) = VariableAddress[#return] :
# 247| v247_13(void) = ReturnValue : &:r247_12, m251_4
# 247| v247_14(void) = UnmodeledUse : mu*
@@ -1183,7 +1183,7 @@ ssa.cpp:
# 271| r271_2(glval<void *>) = VariableAddress[buf] :
# 271| r271_3(void *) = Load : &:r271_2, m269_8
# 271| m271_4(void *) = Store : &:r271_1, r271_3
# 268| v268_11(void) = ReturnIndirection : &:r268_7, ~mu268_4
# 268| v268_11(void) = ReturnIndirection[s] : &:r268_7, ~mu268_4
# 268| r268_12(glval<void *>) = VariableAddress[#return] :
# 268| v268_13(void) = ReturnValue : &:r268_12, m271_4
# 268| v268_14(void) = UnmodeledUse : mu*
@@ -1267,7 +1267,7 @@ ssa.cpp:
# 287| r287_8(A *) = Load : &:r287_6, m287_7
# 287| mu287_9(unknown) = InitializeIndirection[p#0] : &:r287_8
# 287| v287_10(void) = NoOp :
# 287| v287_11(void) = ReturnIndirection : &:r287_8, ~mu287_4
# 287| v287_11(void) = ReturnIndirection[p#0] : &:r287_8, ~mu287_4
# 287| v287_12(void) = ReturnVoid :
# 287| v287_13(void) = UnmodeledUse : mu*
# 287| v287_14(void) = AliasedUse : ~mu287_4
@@ -1359,3 +1359,47 @@ ssa.cpp:
# 291| v291_9(void) = UnmodeledUse : mu*
# 291| v291_10(void) = AliasedUse : ~mu291_4
# 291| v291_11(void) = ExitFunction :
# 301| int main(int, char**)
# 301| Block 0
# 301| v301_1(void) = EnterFunction :
# 301| mu301_2(unknown) = AliasedDefinition :
# 301| mu301_3(unknown) = InitializeNonLocal :
# 301| mu301_4(unknown) = UnmodeledDefinition :
# 301| r301_5(glval<int>) = VariableAddress[argc] :
# 301| m301_6(int) = InitializeParameter[argc] : &:r301_5
# 301| r301_7(glval<char **>) = VariableAddress[argv] :
# 301| m301_8(char **) = InitializeParameter[argv] : &:r301_7
# 301| r301_9(char **) = Load : &:r301_7, m301_8
# 301| mu301_10(unknown) = InitializeIndirection[argv] : &:r301_9
# 302| r302_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 302| r302_2(glval<int>) = VariableAddress[argc] :
# 302| r302_3(int) = Load : &:r302_2, m301_6
# 302| r302_4(glval<char **>) = VariableAddress[argv] :
# 302| r302_5(char **) = Load : &:r302_4, m301_8
# 302| v302_6(void) = Call : func:r302_1, 0:r302_3, 1:r302_5
# 302| mu302_7(unknown) = ^CallSideEffect : ~mu301_4
# 302| v302_8(void) = ^BufferReadSideEffect[1] : &:r302_5, ~mu301_4
# 302| mu302_9(unknown) = ^BufferMayWriteSideEffect[1] : &:r302_5
# 303| r303_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 303| r303_2(glval<int>) = VariableAddress[argc] :
# 303| r303_3(int) = Load : &:r303_2, m301_6
# 303| r303_4(glval<char **>) = VariableAddress[argv] :
# 303| r303_5(char **) = Load : &:r303_4, m301_8
# 303| v303_6(void) = Call : func:r303_1, 0:r303_3, 1:r303_5
# 303| mu303_7(unknown) = ^CallSideEffect : ~mu301_4
# 303| v303_8(void) = ^BufferReadSideEffect[1] : &:r303_5, ~mu301_4
# 303| mu303_9(unknown) = ^BufferMayWriteSideEffect[1] : &:r303_5
# 304| r304_1(glval<int>) = VariableAddress[#return] :
# 304| r304_2(glval<char **>) = VariableAddress[argv] :
# 304| r304_3(char **) = Load : &:r304_2, m301_8
# 304| r304_4(char *) = Load : &:r304_3, ~mu301_4
# 304| r304_5(char) = Load : &:r304_4, ~mu301_4
# 304| r304_6(int) = Convert : r304_5
# 304| m304_7(int) = Store : &:r304_1, r304_6
# 301| v301_11(void) = ReturnIndirection[argv] : &:r301_9, ~mu301_4
# 301| r301_12(glval<int>) = VariableAddress[#return] :
# 301| v301_13(void) = ReturnValue : &:r301_12, m304_7
# 301| v301_14(void) = UnmodeledUse : mu*
# 301| v301_15(void) = AliasedUse : ~mu301_4
# 301| v301_16(void) = ExitFunction :

78
cpp/ql/test/library-tests/ir/ssa/unaliased_ssa_ir_unsound.expected
View File

@@ -78,7 +78,7 @@ ssa.cpp:
# 28| r28_9(int) = Load : &:r28_8, ~mu13_4
# 28| r28_10(int) = Add : r28_5, r28_9
# 28| m28_11(int) = Store : &:r28_1, r28_10
# 13| v13_13(void) = ReturnIndirection : &:r13_7, ~mu13_4
# 13| v13_13(void) = ReturnIndirection[p] : &:r13_7, ~mu13_4
# 13| r13_14(glval<int>) = VariableAddress[#return] :
# 13| v13_15(void) = ReturnValue : &:r13_14, m28_11
# 13| v13_16(void) = UnmodeledUse : mu*
@@ -249,12 +249,12 @@ ssa.cpp:
#-----| Goto (back edge) -> Block 1
# 71| Block 3
# 71| v71_1(void) = NoOp :
# 68| v68_11(void) = ReturnIndirection : &:r68_9, ~mu68_4
# 68| v68_12(void) = ReturnVoid :
# 68| v68_13(void) = UnmodeledUse : mu*
# 68| v68_14(void) = AliasedUse : ~mu68_4
# 68| v68_15(void) = ExitFunction :
# 71| v71_1(void) = NoOp :
# 68| v68_11(void) = ReturnIndirection[p] : &:r68_9, ~mu68_4
# 68| v68_12(void) = ReturnVoid :
# 68| v68_13(void) = UnmodeledUse : mu*
# 68| v68_14(void) = AliasedUse : ~mu68_4
# 68| v68_15(void) = ExitFunction :
# 75| void ScalarPhi(bool)
# 75| Block 0
@@ -752,7 +752,7 @@ ssa.cpp:
# 181| r181_3(int *) = Load : &:r181_2, m179_6
# 181| r181_4(int) = Load : &:r181_3, ~mu179_4
# 181| m181_5(int) = Store : &:r181_1, r181_4
# 179| v179_9(void) = ReturnIndirection : &:r179_7, ~mu179_4
# 179| v179_9(void) = ReturnIndirection[p] : &:r179_7, ~mu179_4
# 179| r179_10(glval<int>) = VariableAddress[#return] :
# 179| v179_11(void) = ReturnValue : &:r179_10, m181_5
# 179| v179_12(void) = UnmodeledUse : mu*
@@ -795,10 +795,10 @@ ssa.cpp:
# 190| r190_6(unsigned int) = Load : &:r190_5, ~mu184_4
# 186| mu186_1(unknown) = InlineAsm : ~mu184_4, 0:r189_3, 1:r189_6, 2:r190_3, 3:r190_6
# 192| v192_1(void) = NoOp :
# 184| v184_21(void) = ReturnIndirection : &:r184_7, ~mu184_4
# 184| v184_22(void) = ReturnIndirection : &:r184_11, ~mu184_4
# 184| v184_23(void) = ReturnIndirection : &:r184_15, ~mu184_4
# 184| v184_24(void) = ReturnIndirection : &:r184_19, ~mu184_4
# 184| v184_21(void) = ReturnIndirection[a] : &:r184_7, ~mu184_4
# 184| v184_22(void) = ReturnIndirection[b] : &:r184_11, ~mu184_4
# 184| v184_23(void) = ReturnIndirection[c] : &:r184_15, ~mu184_4
# 184| v184_24(void) = ReturnIndirection[d] : &:r184_19, ~mu184_4
# 184| v184_25(void) = ReturnVoid :
# 184| v184_26(void) = UnmodeledUse : mu*
# 184| v184_27(void) = AliasedUse : ~mu184_4
@@ -854,8 +854,8 @@ ssa.cpp:
# 202| r202_2(glval<int>) = VariableAddress[ret] :
# 202| r202_3(int) = Load : &:r202_2, m201_8
# 202| m202_4(int) = Store : &:r202_1, r202_3
# 198| v198_15(void) = ReturnIndirection : &:r198_7, ~mu198_4
# 198| v198_16(void) = ReturnIndirection : &:r198_11, ~mu198_4
# 198| v198_15(void) = ReturnIndirection[str1] : &:r198_7, ~mu198_4
# 198| v198_16(void) = ReturnIndirection[str2] : &:r198_11, ~mu198_4
# 198| r198_17(glval<int>) = VariableAddress[#return] :
# 198| v198_18(void) = ReturnValue : &:r198_17, m202_4
# 198| v198_19(void) = UnmodeledUse : mu*
@@ -1098,7 +1098,7 @@ ssa.cpp:
# 251| r251_2(glval<char *>) = VariableAddress[dst] :
# 251| r251_3(char *) = Load : &:r251_2, m248_12
# 251| m251_4(char *) = Store : &:r251_1, r251_3
# 247| v247_11(void) = ReturnIndirection : &:r247_7, ~mu247_4
# 247| v247_11(void) = ReturnIndirection[src] : &:r247_7, ~mu247_4
# 247| r247_12(glval<char *>) = VariableAddress[#return] :
# 247| v247_13(void) = ReturnValue : &:r247_12, m251_4
# 247| v247_14(void) = UnmodeledUse : mu*
@@ -1183,7 +1183,7 @@ ssa.cpp:
# 271| r271_2(glval<void *>) = VariableAddress[buf] :
# 271| r271_3(void *) = Load : &:r271_2, m269_8
# 271| m271_4(void *) = Store : &:r271_1, r271_3
# 268| v268_11(void) = ReturnIndirection : &:r268_7, ~mu268_4
# 268| v268_11(void) = ReturnIndirection[s] : &:r268_7, ~mu268_4
# 268| r268_12(glval<void *>) = VariableAddress[#return] :
# 268| v268_13(void) = ReturnValue : &:r268_12, m271_4
# 268| v268_14(void) = UnmodeledUse : mu*
@@ -1267,7 +1267,7 @@ ssa.cpp:
# 287| r287_8(A *) = Load : &:r287_6, m287_7
# 287| mu287_9(unknown) = InitializeIndirection[p#0] : &:r287_8
# 287| v287_10(void) = NoOp :
# 287| v287_11(void) = ReturnIndirection : &:r287_8, ~mu287_4
# 287| v287_11(void) = ReturnIndirection[p#0] : &:r287_8, ~mu287_4
# 287| v287_12(void) = ReturnVoid :
# 287| v287_13(void) = UnmodeledUse : mu*
# 287| v287_14(void) = AliasedUse : ~mu287_4
@@ -1359,3 +1359,47 @@ ssa.cpp:
# 291| v291_9(void) = UnmodeledUse : mu*
# 291| v291_10(void) = AliasedUse : ~mu291_4
# 291| v291_11(void) = ExitFunction :
# 301| int main(int, char**)
# 301| Block 0
# 301| v301_1(void) = EnterFunction :
# 301| mu301_2(unknown) = AliasedDefinition :
# 301| mu301_3(unknown) = InitializeNonLocal :
# 301| mu301_4(unknown) = UnmodeledDefinition :
# 301| r301_5(glval<int>) = VariableAddress[argc] :
# 301| m301_6(int) = InitializeParameter[argc] : &:r301_5
# 301| r301_7(glval<char **>) = VariableAddress[argv] :
# 301| m301_8(char **) = InitializeParameter[argv] : &:r301_7
# 301| r301_9(char **) = Load : &:r301_7, m301_8
# 301| mu301_10(unknown) = InitializeIndirection[argv] : &:r301_9
# 302| r302_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 302| r302_2(glval<int>) = VariableAddress[argc] :
# 302| r302_3(int) = Load : &:r302_2, m301_6
# 302| r302_4(glval<char **>) = VariableAddress[argv] :
# 302| r302_5(char **) = Load : &:r302_4, m301_8
# 302| v302_6(void) = Call : func:r302_1, 0:r302_3, 1:r302_5
# 302| mu302_7(unknown) = ^CallSideEffect : ~mu301_4
# 302| v302_8(void) = ^BufferReadSideEffect[1] : &:r302_5, ~mu301_4
# 302| mu302_9(unknown) = ^BufferMayWriteSideEffect[1] : &:r302_5
# 303| r303_1(glval<unknown>) = FunctionAddress[unknownFunction] :
# 303| r303_2(glval<int>) = VariableAddress[argc] :
# 303| r303_3(int) = Load : &:r303_2, m301_6
# 303| r303_4(glval<char **>) = VariableAddress[argv] :
# 303| r303_5(char **) = Load : &:r303_4, m301_8
# 303| v303_6(void) = Call : func:r303_1, 0:r303_3, 1:r303_5
# 303| mu303_7(unknown) = ^CallSideEffect : ~mu301_4
# 303| v303_8(void) = ^BufferReadSideEffect[1] : &:r303_5, ~mu301_4
# 303| mu303_9(unknown) = ^BufferMayWriteSideEffect[1] : &:r303_5
# 304| r304_1(glval<int>) = VariableAddress[#return] :
# 304| r304_2(glval<char **>) = VariableAddress[argv] :
# 304| r304_3(char **) = Load : &:r304_2, m301_8
# 304| r304_4(char *) = Load : &:r304_3, ~mu301_4
# 304| r304_5(char) = Load : &:r304_4, ~mu301_4
# 304| r304_6(int) = Convert : r304_5
# 304| m304_7(int) = Store : &:r304_1, r304_6
# 301| v301_11(void) = ReturnIndirection[argv] : &:r301_9, ~mu301_4
# 301| r301_12(glval<int>) = VariableAddress[#return] :
# 301| v301_13(void) = ReturnValue : &:r301_12, m304_7
# 301| v301_14(void) = UnmodeledUse : mu*
# 301| v301_15(void) = AliasedUse : ~mu301_4
# 301| v301_16(void) = ExitFunction :

28
cpp/ql/test/library-tests/valuenumbering/GlobalValueNumbering/ir_gvn.expected
View File

@@ -355,7 +355,7 @@ test.cpp:
# 46| m46_4(int) = Store : &:r46_3, r46_2
# 46| valnum = m43_10, m45_10, m46_4, r43_8, r45_8, r46_2
# 47| v47_1(void) = NoOp :
# 39| v39_14(void) = ReturnIndirection : &:r39_12, m44_6
# 39| v39_14(void) = ReturnIndirection[p2] : &:r39_12, m44_6
# 39| r39_15(glval<int>) = VariableAddress[#return] :
# 39| valnum = unique
# 39| v39_16(void) = ReturnValue : &:r39_15
@@ -531,8 +531,8 @@ test.cpp:
# 65| valnum = m53_1, m65_4, r62_2, r65_3
# 65| m65_4(unsigned int) = Store : &:r65_1, r65_3
# 65| valnum = m53_1, m65_4, r62_2, r65_3
# 49| v49_14(void) = ReturnIndirection : &:r49_8, m49_9
# 49| v49_15(void) = ReturnIndirection : &:r49_12, m49_13
# 49| v49_14(void) = ReturnIndirection[str] : &:r49_8, m49_9
# 49| v49_15(void) = ReturnIndirection[chars] : &:r49_12, m49_13
# 49| r49_16(glval<unsigned int>) = VariableAddress[#return] :
# 49| valnum = r49_16, r65_1
# 49| v49_17(void) = ReturnValue : &:r49_16, m65_4
@@ -625,14 +625,14 @@ test.cpp:
#-----| Goto -> Block 2
# 82| Block 2
# 82| m82_1(unknown) = Phi : from 0:~m77_5, from 1:~m80_4
# 82| m82_1(unknown) = Phi : from 0:~m77_5, from 1:~m80_4
# 82| valnum = unique
# 82| v82_2(void) = NoOp :
# 75| v75_10(void) = ReturnIndirection : &:r75_8, m75_9
# 75| v75_11(void) = ReturnVoid :
# 75| v75_12(void) = UnmodeledUse : mu*
# 75| v75_13(void) = AliasedUse : ~m82_1
# 75| v75_14(void) = ExitFunction :
# 82| v82_2(void) = NoOp :
# 75| v75_10(void) = ReturnIndirection[vals] : &:r75_8, m75_9
# 75| v75_11(void) = ReturnVoid :
# 75| v75_12(void) = UnmodeledUse : mu*
# 75| v75_13(void) = AliasedUse : ~m82_1
# 75| v75_14(void) = ExitFunction :
# 84| void test05(int, int, void*)
# 84| Block 0
@@ -689,7 +689,7 @@ test.cpp:
# 88| m88_10(int) = Store : &:r88_9, r88_8
# 88| valnum = m88_10, m88_6, r88_8
# 89| v89_1(void) = NoOp :
# 84| v84_14(void) = ReturnIndirection : &:r84_12, m84_13
# 84| v84_14(void) = ReturnIndirection[p] : &:r84_12, m84_13
# 84| v84_15(void) = ReturnVoid :
# 84| v84_16(void) = UnmodeledUse : mu*
# 84| v84_17(void) = AliasedUse : m84_3
@@ -818,7 +818,7 @@ test.cpp:
# 109| valnum = m105_7, m107_6, m109_4, r105_6, r107_5, r109_3
# 109| m109_4(int) = Store : &:r109_1, r109_3
# 109| valnum = m105_7, m107_6, m109_4, r105_6, r107_5, r109_3
# 104| v104_10(void) = ReturnIndirection : &:r104_8, m104_9
# 104| v104_10(void) = ReturnIndirection[pd] : &:r104_8, m104_9
# 104| r104_11(glval<int>) = VariableAddress[#return] :
# 104| valnum = r104_11, r109_1
# 104| v104_12(void) = ReturnValue : &:r104_11, m109_4
@@ -925,7 +925,7 @@ test.cpp:
# 129| m129_6(int) = Store : &:r129_1, r129_5
# 129| valnum = m124_11, m128_6, m129_6, r128_2, r129_5
# 130| v130_1(void) = NoOp :
# 124| v124_12(void) = ReturnIndirection : &:r124_8, m128_7
# 124| v124_12(void) = ReturnIndirection[pa] : &:r124_8, m128_7
# 124| v124_13(void) = ReturnVoid :
# 124| v124_14(void) = UnmodeledUse : mu*
# 124| v124_15(void) = AliasedUse : m124_3
@@ -1068,7 +1068,7 @@ test.cpp:
# 149| m149_6(int) = Store : &:r149_1, r149_5
# 149| valnum = m144_6, m149_6, r144_5, r149_5
# 150| v150_1(void) = NoOp :
# 143| v143_10(void) = ReturnIndirection : &:r143_8, m147_7
# 143| v143_10(void) = ReturnIndirection[pa] : &:r143_8, m147_7
# 143| v143_11(void) = ReturnVoid :
# 143| v143_12(void) = UnmodeledUse : mu*
# 143| v143_13(void) = AliasedUse : m143_3

1
cpp/ql/test/qlpack.yml
View File

@@ -1,3 +1,4 @@
name: codeql-cpp-tests
version: 0.0.0
libraryPathDependencies: codeql-cpp
extractor: cpp

31
cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/argv/argvLocal.expected
View File

@@ -55,6 +55,8 @@ edges
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:116:9:116:10 | i3 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | array to pointer conversion |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | array to pointer conversion |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | array to pointer conversion |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | array to pointer conversion |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | i3 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:117:15:117:16 | i3 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:121:9:121:10 | (const char *)... |
@@ -65,6 +67,8 @@ edges
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | (const char *)... |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | (const char *)... |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:135:9:135:12 | ... ++ |
@@ -73,12 +77,29 @@ edges
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:115:13:115:16 | argv | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:117:15:117:16 | array to pointer conversion | argvLocal.c:117:15:117:16 | printWrapper output argument |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:121:9:121:10 | (const char *)... |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:121:9:121:10 | i4 |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:122:15:122:16 | i4 |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:135:9:135:12 | (const char *)... |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:135:9:135:12 | ... ++ |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:117:15:117:16 | printWrapper output argument | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:122:15:122:16 | i4 | argvLocal.c:122:15:122:16 | printWrapper output argument |
| argvLocal.c:122:15:122:16 | printWrapper output argument | argvLocal.c:135:9:135:12 | (const char *)... |
| argvLocal.c:122:15:122:16 | printWrapper output argument | argvLocal.c:135:9:135:12 | ... ++ |
| argvLocal.c:122:15:122:16 | printWrapper output argument | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:122:15:122:16 | printWrapper output argument | argvLocal.c:136:15:136:18 | -- ... |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:127:9:127:10 | (const char *)... |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:127:9:127:10 | (const char *)... |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:127:9:127:10 | i5 |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:127:9:127:10 | i5 |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | array to pointer conversion |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | array to pointer conversion |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | array to pointer conversion |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | array to pointer conversion |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | i5 |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:128:15:128:16 | i5 |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:131:9:131:14 | (const char *)... |
@@ -89,6 +110,11 @@ edges
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:132:15:132:20 | ... + ... |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:132:15:132:20 | ... + ... |
| argvLocal.c:126:10:126:13 | argv | argvLocal.c:132:15:132:20 | ... + ... |
| argvLocal.c:128:15:128:16 | array to pointer conversion | argvLocal.c:128:15:128:16 | printWrapper output argument |
| argvLocal.c:128:15:128:16 | printWrapper output argument | argvLocal.c:131:9:131:14 | (const char *)... |
| argvLocal.c:128:15:128:16 | printWrapper output argument | argvLocal.c:131:9:131:14 | ... + ... |
| argvLocal.c:128:15:128:16 | printWrapper output argument | argvLocal.c:132:15:132:20 | ... + ... |
| argvLocal.c:128:15:128:16 | printWrapper output argument | argvLocal.c:132:15:132:20 | ... + ... |
| argvLocal.c:149:11:149:14 | argv | argvLocal.c:150:9:150:10 | (const char *)... |
| argvLocal.c:149:11:149:14 | argv | argvLocal.c:150:9:150:10 | (const char *)... |
| argvLocal.c:149:11:149:14 | argv | argvLocal.c:150:9:150:10 | i8 |
@@ -130,6 +156,8 @@ edges
| argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 |
| argvLocal.c:168:18:168:21 | argv | argvLocal.c:170:24:170:26 | i10 |
nodes
| argvLocal.c:9:25:9:31 | correct | semmle.label | correct |
| argvLocal.c:10:9:10:15 | Chi | semmle.label | Chi |
| argvLocal.c:95:9:95:12 | argv | semmle.label | argv |
| argvLocal.c:95:9:95:12 | argv | semmle.label | argv |
| argvLocal.c:95:9:95:15 | (const char *)... | semmle.label | (const char *)... |
@@ -178,12 +206,14 @@ nodes
| argvLocal.c:117:15:117:16 | array to pointer conversion | semmle.label | array to pointer conversion |
| argvLocal.c:117:15:117:16 | array to pointer conversion | semmle.label | array to pointer conversion |
| argvLocal.c:117:15:117:16 | i3 | semmle.label | i3 |
| argvLocal.c:117:15:117:16 | printWrapper output argument | semmle.label | printWrapper output argument |
| argvLocal.c:121:9:121:10 | (const char *)... | semmle.label | (const char *)... |
| argvLocal.c:121:9:121:10 | (const char *)... | semmle.label | (const char *)... |
| argvLocal.c:121:9:121:10 | i4 | semmle.label | i4 |
| argvLocal.c:122:15:122:16 | i4 | semmle.label | i4 |
| argvLocal.c:122:15:122:16 | i4 | semmle.label | i4 |
| argvLocal.c:122:15:122:16 | i4 | semmle.label | i4 |
| argvLocal.c:122:15:122:16 | printWrapper output argument | semmle.label | printWrapper output argument |
| argvLocal.c:126:10:126:13 | argv | semmle.label | argv |
| argvLocal.c:126:10:126:13 | argv | semmle.label | argv |
| argvLocal.c:127:9:127:10 | (const char *)... | semmle.label | (const char *)... |
@@ -192,6 +222,7 @@ nodes
| argvLocal.c:128:15:128:16 | array to pointer conversion | semmle.label | array to pointer conversion |
| argvLocal.c:128:15:128:16 | array to pointer conversion | semmle.label | array to pointer conversion |
| argvLocal.c:128:15:128:16 | i5 | semmle.label | i5 |
| argvLocal.c:128:15:128:16 | printWrapper output argument | semmle.label | printWrapper output argument |
| argvLocal.c:131:9:131:14 | (const char *)... | semmle.label | (const char *)... |
| argvLocal.c:131:9:131:14 | (const char *)... | semmle.label | (const char *)... |
| argvLocal.c:131:9:131:14 | ... + ... | semmle.label | ... + ... |

8
cpp/ql/test/query-tests/Security/CWE/CWE-134/semmle/funcs/funcsLocal.expected
View File

@@ -1,8 +1,12 @@
edges
| funcsLocal.c:16:8:16:9 | fread output argument | funcsLocal.c:17:9:17:10 | (const char *)... |
| funcsLocal.c:16:8:16:9 | fread output argument | funcsLocal.c:17:9:17:10 | i1 |
| funcsLocal.c:16:8:16:9 | fread output argument | funcsLocal.c:58:9:58:10 | (const char *)... |
| funcsLocal.c:16:8:16:9 | fread output argument | funcsLocal.c:58:9:58:10 | e1 |
| funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:17:9:17:10 | (const char *)... |
| funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:17:9:17:10 | i1 |
| funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:58:9:58:10 | (const char *)... |
| funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:58:9:58:10 | e1 |
| funcsLocal.c:26:8:26:9 | fgets output argument | funcsLocal.c:27:9:27:10 | (const char *)... |
| funcsLocal.c:26:8:26:9 | fgets output argument | funcsLocal.c:27:9:27:10 | i3 |
| funcsLocal.c:26:8:26:9 | i3 | funcsLocal.c:27:9:27:10 | (const char *)... |
@@ -65,6 +69,9 @@ nodes
| funcsLocal.c:42:9:42:10 | i6 | semmle.label | i6 |
| funcsLocal.c:42:9:42:10 | i6 | semmle.label | i6 |
| funcsLocal.c:42:9:42:10 | i6 | semmle.label | i6 |
| funcsLocal.c:58:9:58:10 | (const char *)... | semmle.label | (const char *)... |
| funcsLocal.c:58:9:58:10 | (const char *)... | semmle.label | (const char *)... |
| funcsLocal.c:58:9:58:10 | e1 | semmle.label | e1 |
#select
| funcsLocal.c:17:9:17:10 | i1 | funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:17:9:17:10 | i1 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:16:8:16:9 | i1 | fread |
| funcsLocal.c:27:9:27:10 | i3 | funcsLocal.c:26:8:26:9 | i3 | funcsLocal.c:27:9:27:10 | i3 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:26:8:26:9 | i3 | fgets |
@@ -73,3 +80,4 @@ nodes
| funcsLocal.c:37:9:37:10 | i5 | funcsLocal.c:36:7:36:8 | i5 | funcsLocal.c:37:9:37:10 | i5 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:36:7:36:8 | i5 | gets |
| funcsLocal.c:42:9:42:10 | i6 | funcsLocal.c:41:13:41:16 | call to gets | funcsLocal.c:42:9:42:10 | i6 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:41:13:41:16 | call to gets | gets |
| funcsLocal.c:42:9:42:10 | i6 | funcsLocal.c:41:18:41:20 | i61 | funcsLocal.c:42:9:42:10 | i6 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:41:18:41:20 | i61 | gets |
| funcsLocal.c:58:9:58:10 | e1 | funcsLocal.c:16:8:16:9 | i1 | funcsLocal.c:58:9:58:10 | e1 | The value of this argument may come from $@ and is being used as a formatting argument to printf(format) | funcsLocal.c:16:8:16:9 | i1 | fread |

26
cpp/ql/test/query-tests/Security/CWE/CWE-190/semmle/uncontrolled/ArithmeticUncontrolled.expected
View File

@@ -42,8 +42,18 @@ edges
| test.cpp:8:9:8:12 | Store | test.cpp:24:11:24:18 | call to get_rand |
| test.cpp:8:9:8:12 | call to rand | test.cpp:8:9:8:12 | Store |
| test.cpp:8:9:8:12 | call to rand | test.cpp:8:9:8:12 | Store |
| test.cpp:13:2:13:15 | Chi | test.cpp:30:13:30:14 | get_rand2 output argument |
| test.cpp:13:10:13:13 | call to rand | test.cpp:13:2:13:15 | Chi |
| test.cpp:13:10:13:13 | call to rand | test.cpp:13:2:13:15 | Chi |
| test.cpp:18:2:18:14 | Chi | test.cpp:36:13:36:13 | get_rand3 output argument |
| test.cpp:18:9:18:12 | call to rand | test.cpp:18:2:18:14 | Chi |
| test.cpp:18:9:18:12 | call to rand | test.cpp:18:2:18:14 | Chi |
| test.cpp:24:11:24:18 | call to get_rand | test.cpp:25:7:25:7 | r |
| test.cpp:24:11:24:18 | call to get_rand | test.cpp:25:7:25:7 | r |
| test.cpp:30:13:30:14 | get_rand2 output argument | test.cpp:31:7:31:7 | r |
| test.cpp:30:13:30:14 | get_rand2 output argument | test.cpp:31:7:31:7 | r |
| test.cpp:36:13:36:13 | get_rand3 output argument | test.cpp:37:7:37:7 | r |
| test.cpp:36:13:36:13 | get_rand3 output argument | test.cpp:37:7:37:7 | r |
nodes
| test.c:18:13:18:16 | call to rand | semmle.label | call to rand |
| test.c:18:13:18:16 | call to rand | semmle.label | call to rand |
@@ -96,10 +106,24 @@ nodes
| test.cpp:8:9:8:12 | Store | semmle.label | Store |
| test.cpp:8:9:8:12 | call to rand | semmle.label | call to rand |
| test.cpp:8:9:8:12 | call to rand | semmle.label | call to rand |
| test.cpp:13:2:13:15 | Chi | semmle.label | Chi |
| test.cpp:13:10:13:13 | call to rand | semmle.label | call to rand |
| test.cpp:13:10:13:13 | call to rand | semmle.label | call to rand |
| test.cpp:18:2:18:14 | Chi | semmle.label | Chi |
| test.cpp:18:9:18:12 | call to rand | semmle.label | call to rand |
| test.cpp:18:9:18:12 | call to rand | semmle.label | call to rand |
| test.cpp:24:11:24:18 | call to get_rand | semmle.label | call to get_rand |
| test.cpp:25:7:25:7 | r | semmle.label | r |
| test.cpp:25:7:25:7 | r | semmle.label | r |
| test.cpp:25:7:25:7 | r | semmle.label | r |
| test.cpp:30:13:30:14 | get_rand2 output argument | semmle.label | get_rand2 output argument |
| test.cpp:31:7:31:7 | r | semmle.label | r |
| test.cpp:31:7:31:7 | r | semmle.label | r |
| test.cpp:31:7:31:7 | r | semmle.label | r |
| test.cpp:36:13:36:13 | get_rand3 output argument | semmle.label | get_rand3 output argument |
| test.cpp:37:7:37:7 | r | semmle.label | r |
| test.cpp:37:7:37:7 | r | semmle.label | r |
| test.cpp:37:7:37:7 | r | semmle.label | r |
#select
| test.c:21:17:21:17 | r | test.c:18:13:18:16 | call to rand | test.c:21:17:21:17 | r | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:18:13:18:16 | call to rand | Uncontrolled value |
| test.c:35:5:35:5 | r | test.c:34:13:34:18 | call to rand | test.c:35:5:35:5 | r | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.c:34:13:34:18 | call to rand | Uncontrolled value |
@@ -110,3 +134,5 @@ nodes
| test.c:77:9:77:9 | r | test.c:75:13:75:19 | ... ^ ... | test.c:77:9:77:9 | r | $@ flows to here and is used in arithmetic, potentially causing an underflow. | test.c:75:13:75:19 | ... ^ ... | Uncontrolled value |
| test.c:100:5:100:5 | r | test.c:99:14:99:19 | call to rand | test.c:100:5:100:5 | r | $@ flows to here and is used in arithmetic, potentially causing an underflow. | test.c:99:14:99:19 | call to rand | Uncontrolled value |
| test.cpp:25:7:25:7 | r | test.cpp:8:9:8:12 | call to rand | test.cpp:25:7:25:7 | r | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.cpp:8:9:8:12 | call to rand | Uncontrolled value |
| test.cpp:31:7:31:7 | r | test.cpp:13:10:13:13 | call to rand | test.cpp:31:7:31:7 | r | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.cpp:13:10:13:13 | call to rand | Uncontrolled value |
| test.cpp:37:7:37:7 | r | test.cpp:18:9:18:12 | call to rand | test.cpp:37:7:37:7 | r | $@ flows to here and is used in arithmetic, potentially causing an overflow. | test.cpp:18:9:18:12 | call to rand | Uncontrolled value |