False negative: buffer overflow in array parameter
Alejandro Colomar via Gcc-help <[email protected]>
| Newsgroups | gmane.comp.gcc.help |
|---|---|
| Message-ID | <6fkj2l4b4kx2t2ckvllindl6og4l2q3gumgth5fnsaozvmqx6e@kzartctt4w6q> |
Hi!
Is there any bug ticket open for this thing?
alx@devuan:~/tmp$ cat bo.c
void
f(int n, int a[n])
{
a[n + 100] = 42;
}
alx@devuan:~/tmp$ gcc -Wall -Wextra -O3 -fanalyzer -S bo.c
alx@devuan:~/tmp$ /opt/local/gnu/gcc/maxof3/bin/gcc -Wall -Wextra -O3 -fanalyzer -S bo.c
alx@devuan:~/tmp$
It's hard to find in bugzilla such common bugs, as there's a lot of
noise.
I expect such code would have a diagnostic, as it seems trivial to
realize that n+100 is >= n.
Have a lovely night!
Alex
--
<https://www.alejandro-colomar.es>
Use port 80 (that is, <...:80/>).
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEES7Jt9u9GbmlWADAi64mZXMKQwqkFAmkaGXMACgkQ64mZXMKQ wqkNoA/+IUatGbdxtNBK8+/X4tuOaRU2jdig3J2/Jt5qrRS3s7+1BOS2AxG92nEP Nq6UQBzb2sZ/wswakqFiNt0hF+Zk1Ug0c/injJ34s/27nHUgkntfWMcSLmv4GcA6 ZXp+gegkm6xw2p/zKtIDnjbWyNnj2t6GJNRaAW8svX5rW+LsPPDzM3h4U2G4tv3I zU2SY0QzH6DN0rDcFbhsX7YpCQNMAui8MOkjY7BLMyAL6E8Wclgh8605swdT6JVc ByuGe//q+uZxEjRdZzkgr8Ay7CCP3pJZcF01wHvBOlAElOQzijhgseop0s0UuwJa xAkD1uNZg94IMN4+K0jO8BiwmKAjWcDQ+HVVNf2ApPdrDx1wv+48/eR9VBuXi8ln Vo6qAJpUsVwrEJNJR9ESA31QkKm1pxSKs32p7moIueL2MM+F5fBi8NDGO/kaXpOe 16zc835EDaD1jvoWJGeJDCZiOdK5beGtdmTZhFkab/AYx+LNEf4JV+DcLlP8sJZO mbKgljfHEHTZiKk64S4n3M3Qlwb/HJ3NdanvtLcWCkzsSUYY25fDnHrr9iIvp+Fw vWOQ7bXvbuNypjuVDvWyYpVfmZ39x8AuYWswxwBlQG4u/l1emE96noCMgNKFYbCA XtZCTKd6SoMo4t6/sdLOMYshTRDIFIjEHWP3T7m3rxLXphAa+rM= =Bk3f -----END PGP SIGNATURE-----