cppcheck-py 2.16.0__py3-none-win_arm64.whl

cppcheck/data/addons/threadsafety.py

@@ -0,0 +1,350 @@
+#!/usr/bin/env python3
+"""
+cppcheck addon for threadsafety detection.
+
+ This script analyses Cppcheck dump files to locate threadsafety issues.
+ It warns about
+ - static local objects
+ - MT-Unsafe symbols listed in the "Attributes" sections of man pages.
+
+"""
+
+import re
+import sys
+
+import cppcheckdata
+
+# --------------------------------
+# List of MT-Unsafe identifiers
+# --------------------------------
+
+# This is Work In Progress.
+# Eventually it should contain all identifiers (types
+# and functions) which are MT-Unsafe.
+
+# The script tools/MT-Unsafe.py can help to re-generate this list.
+# It reads a man-page tree and report identifiers marked as "MT-Unsafe"
+# (see man 7 attributes for what this means), eg
+#   MT-Unsafe.py /usr/share/man/man3
+
+id_MTunsafe_full = {
+    # MT-Unsafe types by definition
+    # 'pthread_t',
+    # Types marked MT-Unsafe
+    'const:env',
+    'const:hostid',
+    'const:mallopt',
+    'const:sigintr',
+    'race:LogMask',
+    'race:asctime',
+    'race:crypt',
+    'race:crypt_gensalt',
+    'race:cuserid/!string',
+    'race:dirstream',
+    'race:drand48',
+    'race:ecvt',
+    'race:exit',
+    'race:fcvt',
+    'race:fgetgrent',
+    'race:fgetpwent',
+    'race:fgetspent',
+    'race:fsent',
+    'race:getdate',
+    'race:getlogin',
+    'race:getopt',
+    'race:getspent',
+    'race:getspnam',
+    'race:grent',
+    'race:grgid',
+    'race:grnam',
+    'race:hostbyaddr',
+    'race:hostbyname',
+    'race:hostbyname2',
+    'race:hostent',
+    'race:hsearch',
+    'race:l64a',
+    'race:localeconv',
+    'race:mbrlen/!ps',
+    'race:mbrtowc/!ps',
+    'race:mbsnrtowcs/!ps',
+    'race:mbsrtowcs/!ps',
+    'race:mcheck',
+    'race:mntentbuf',
+    'race:netbyaddr',
+    'race:netbyname',
+    'race:netent',
+    'race:netgrent',
+    'race:protobyname',
+    'race:protobynumber',
+    'race:protoent',
+    'race:ptsname',
+    'race:pwent',
+    'race:pwnam',
+    'race:pwuid',
+    'race:qecvt',
+    'race:qfcvt',
+    'race:servbyname',
+    'race:servbyport',
+    'race:servent',
+    'race:sgetspent',
+    'race:signgam',
+    'race:stdin',
+    'race:stdout',
+    'race:streams',
+    'race:strerror',
+    'race:strsignal',
+    'race:strtok',
+    'race:tmbuf',
+    'race:tmpnam/!s',
+    'race:ttyent',
+    'race:ttyname',
+    'race:utent',
+    'race:wcrtomb/!ps',
+    'race:wcsnrtombs/!ps',
+    'race:wcsrtombs/!ps',
+    'sig:ALRM',
+    'sig:SIGCHLD/linux',
+    # APIs marked MT-Unsafe
+    'asctime',
+    'clearenv',
+    'ctime',
+    'cuserid',
+    'drand48',
+    'ecvt',
+    'encrypt',
+    'endfsent',
+    'endgrent',
+    'endhostent',
+    'endnetent',
+    'endnetgrent',
+    'endprotoent',
+    'endpwent',
+    'endservent',
+    'endspent',
+    'endttyent',
+    'endusershell',
+    'endutent',
+    'erand48',
+    'error_at_line',
+    'ether_aton',
+    'ether_ntoa',
+    'exit',
+    'fcloseall',
+    'fcvt',
+    'fgetgrent',
+    'fgetpwent',
+    'fgetspent',
+    'fts_children',
+    'fts_read',
+    'gamma',
+    'gammaf',
+    'gammal',
+    'getaliasbyname',
+    'getaliasent',
+    'getchar_unlocked',
+    'getdate',
+    'getfsent',
+    'getfsfile',
+    'getfsspec',
+    'getgrent',
+    'getgrent_r',
+    'getgrgid',
+    'getgrnam',
+    'gethostbyaddr',
+    'gethostbyname',
+    'gethostbyname2',
+    'gethostent',
+    'gethostent_r',
+    'getlogin',
+    'getlogin_r',
+    'getmntent',
+    'getnetbyaddr',
+    'getnetbyname',
+    'getnetent',
+    'getnetgrent',
+    'getnetgrent_r',
+    'getopt',
+    'getopt_long',
+    'getopt_long_only',
+    'getpass',
+    'getprotobyname',
+    'getprotobynumber',
+    'getprotoent',
+    'getpwent',
+    'getpwent_r',
+    'getpwnam',
+    'getpwuid',
+    'getrpcbyname',
+    'getrpcbynumber',
+    'getrpcent',
+    'getservbyname',
+    'getservbyport',
+    'getservent',
+    'getspent',
+    'getspent_r',
+    'getspnam',
+    'getttyent',
+    'getttynam',
+    'getusershell',
+    'getutent',
+    'getutid',
+    'getutline',
+    'getwchar_unlocked',
+    'glob',
+    'gmtime',
+    'hcreate',
+    'hdestroy',
+    'hsearch',
+    'innetgr',
+    'jrand48',
+    'l64a',
+    'lcong48',
+    'localeconv',
+    'localtime',
+    'login',
+    'login_tty',
+    'logout',
+    'logwtmp',
+    'lrand48',
+    'mallinfo',
+    'mallinfo2',
+    'mblen',
+    'mbrlen',
+    'mbrtowc',
+    'mbsnrtowcs',
+    'mbsrtowcs',
+    'mbtowc',
+    'mcheck',
+    'mcheck_check_all',
+    'mcheck_pedantic',
+    'mprobe',
+    'mrand48',
+    'mtrace',
+    'muntrace',
+    'nrand48',
+    'profil',
+    'ptsname',
+    'putchar_unlocked',
+    'putenv',
+    'pututline',
+    'putwchar_unlocked',
+    'pvalloc',
+    'qecvt',
+    'qfcvt',
+    'rcmd',
+    'rcmd_af',
+    're_comp',
+    're_exec',
+    'readdir',
+    'rexec',
+    'rexec_af',
+    'seed48',
+    'setenv',
+    'setfsent',
+    'setgrent',
+    'sethostent',
+    'sethostid',
+    'setkey',
+    'setlogmask',
+    'setnetent',
+    'setnetgrent',
+    'setprotoent',
+    'setpwent',
+    'setservent',
+    'setspent',
+    'setttyent',
+    'setusershell',
+    'setutent',
+    'sgetspent',
+    'siginterrupt',
+    'sleep',
+    'srand48',
+    'strerror',
+    'strsignal',
+    'strtok',
+    'tmpnam',
+    'ttyname',
+    'ttyslot',
+    'unsetenv',
+    'updwtmp',
+    'utmpname',
+    'valloc',
+    'wcrtomb',
+    'wcsnrtombs',
+    'wcsrtombs',
+    'wctomb',
+    'wordexp'
+}
+
+# From man 7 attributes
+# the full token could be feature:function/condition - we just want function.
+id_MTunsafe = [re.sub('^.*:', '', re.sub('/.*$', '', x))
+               for x in id_MTunsafe_full
+               ]
+
+
+def reportError(token, severity, msg, errid):    # noqa: D103
+    cppcheckdata.reportError(token, severity, msg, 'threadsafety', errid)
+
+
+def checkstatic(data):    # noqa: D103
+    for var in data.variables:
+        if var.isStatic and var.isLocal:
+            vartype = None
+            if var.isClass:
+                vartype = 'object'
+            else:
+                vartype = 'variable'
+            if var.isConst:
+                if data.standards.cpp == 'c++03':
+                    reportError(
+                        var.typeStartToken,
+                        'warning',
+                        'Local constant static '
+                        + vartype + "'" + var.nameToken.str
+                        + "', dangerous if it is initialized"
+                        + ' in parallel threads',
+                        'threadsafety-const')
+            else:
+                reportError(var.typeStartToken, 'warning',
+                            'Local static ' + vartype + ': '
+                            + var.nameToken.str,
+                            'threadsafety')
+
+
+def check_MTunsafe(cfg):
+    """
+    Look for functions marked MT-unsafe in their man pages.
+
+    The MT-unsafe functions are listed in id_MTunsafe (and id_MTunsafe_full).
+    That section of code can be regenerated by the external script MT-Unsafe.py
+    """
+    for token in cfg.tokenlist:
+        if token.str in id_MTunsafe:
+            reportError(token, 'warning', token.str + ' is MT-unsafe',
+                        'unsafe-call')
+
+
+if __name__ == '__main__':
+    parser = cppcheckdata.ArgumentParser()
+    args = parser.parse_args()
+
+    quiet = args.quiet or args.cli
+
+    if not args.dumpfile:
+        if not args.quiet:
+            print('no input files.')
+        sys.exit(0)
+
+    for dumpfile in args.dumpfile:
+        # load XML from .dump file
+        data = cppcheckdata.CppcheckData(dumpfile)
+
+        for cfg in data.iterconfigurations():
+            if not args.quiet:
+                srcfile = data.files[0]
+                print('Checking %s, config %s...' % (srcfile, cfg.name))
+            check_MTunsafe(cfg)
+            checkstatic(cfg)
+
+    sys.exit(cppcheckdata.EXIT_CODE)

cppcheck/data/addons/y2038.py

@@ -0,0 +1,241 @@
+#!/usr/bin/env python3
+#
+# cppcheck addon for Y2038 safeness detection
+#
+# Detects:
+#
+# 1. _TIME_BITS being defined to something else than 64 bits
+# 2. _USE_TIME_BITS64 being defined when _TIME_BITS is not
+# 3. Any Y2038-unsafe symbol when _USE_TIME_BITS64 is not defined.
+#
+# Example usage:
+# $ cppcheck --addon=y2038 path-to-src/test.c
+#
+
+from __future__ import print_function
+
+import cppcheckdata
+import sys
+import re
+
+
+# --------------------------------------------
+# #define/#undef detection regular expressions
+# --------------------------------------------
+
+# test for '#define _TIME_BITS 64'
+re_define_time_bits_64 = re.compile(r'^\s*#\s*define\s+_TIME_BITS\s+64\s*$')
+
+# test for '#define _TIME_BITS ...' (combine w/ above to test for 'not 64')
+re_define_time_bits = re.compile(r'^\s*#\s*define\s+_TIME_BITS\s+.*$')
+
+# test for '#undef _TIME_BITS' (if it ever happens)
+re_undef_time_bits = re.compile(r'^\s*#\s*undef\s+_TIME_BITS\s*$')
+
+# test for '#define _USE_TIME_BITS64'
+re_define_use_time_bits64 = re.compile(r'^\s*#\s*define\s+_USE_TIME_BITS64\s*$')
+
+# test for '#undef _USE_TIME_BITS64' (if it ever happens)
+re_undef_use_time_bits64 = re.compile(r'^\s*#\s*undef\s+_USE_TIME_BITS64\s*$')
+
+# --------------------------------
+# List of Y2038-unsafe identifiers
+# --------------------------------
+
+# This is WIP. Eventually it should contain all identifiers (types
+# and functions) which would be affected by the Y2038 bug.
+
+id_Y2038 = {
+    # Y2038-unsafe types by definition
+    'time_t'
+    # Types using Y2038-unsafe types
+    'lastlog',
+    'msqid_ds',
+    'semid_ds',
+    'timeb',
+    'timespec',
+    'timeval',
+    'utimbuf',
+    'itimerspec',
+    'clnt_ops',
+    'elf_prstatus',
+    'itimerval',
+    'ntptimeval',
+    'rusage',
+    'timex',
+    'utmp',
+    'utmpx',
+    # APIs using 2038-unsafe types
+    'ctime',
+    'ctime_r',
+    'difftime',
+    'gmtime',
+    'gmtime_r',
+    'localtime',
+    'localtime_r',
+    'mktime',
+    'stime',
+    'timegm',
+    'timelocal',
+    'time',
+    'msgctl',
+    'ftime',
+    'aio_suspend',
+    'clock_getres',
+    'clock_gettime',
+    'clock_nanosleep',
+    'clock_settime',
+    'futimens',
+    'mq_timedreceive',
+    'mq_timedsend',
+    'nanosleep',
+    'pselect',
+    'pthread_cond_timedwait',
+    'pthread_mutex_timedlock',
+    'pthread_rwlock_timedrdlock',
+    'pthread_rwlock_timedwrlock',
+    'sched_rr_get_interval',
+    'sem_timedwait',
+    'sigtimedwait',
+    'timespec_get',
+    'utimensat',
+    'adjtime',
+    'pmap_rmtcall',
+    'clntudp_bufcreate',
+    'clntudp_create',
+    'futimes',
+    'gettimeofday',
+    'lutimes',
+    'select',
+    'settimeofday',
+    'utimes',
+    'utime',
+    'timerfd_gettime',
+    'timerfd_settime',
+    'timer_gettime',
+    'timer_settime',
+    'fstatat',
+    'fstat',
+    '__fxstatat',
+    '__fxstat',
+    'lstat',
+    '__lxstat',
+    'stat',
+    '__xstat',
+    'struct itimerval',
+    'setitimer',
+    'getitimer',
+    'ntp_gettime',
+    'getrusage',
+    'wait3',
+    'wait4',
+    'adjtimex',
+    'ntp_adjtime',
+    'getutent_r',
+    'getutent',
+    'getutid_r',
+    'getutid',
+    'getutline_r',
+    'getutline',
+    'login',
+    'pututline',
+    'updwtmp',
+    'getutxent',
+    'getutxid',
+    'getutxline',
+    'pututxline'
+}
+
+
+def check_y2038_safe(dumpfile, quiet=False):
+    # Assume that the code is Y2038 safe until proven otherwise
+    y2038safe = True
+    # load XML from .dump file
+    data = cppcheckdata.CppcheckData(dumpfile)
+
+    srcfile = data.files[0]
+    for cfg in data.iterconfigurations():
+        if not quiet:
+            print('Checking %s, config %s...' % (srcfile, cfg.name))
+        safe_ranges = []
+        safe = -1
+        time_bits_defined = False
+        srclinenr = 0
+
+        for directive in cfg.directives:
+            # track source line number
+            if directive.file == srcfile:
+                srclinenr = directive.linenr
+            # check for correct _TIME_BITS if present
+            if re_define_time_bits_64.match(directive.str):
+                time_bits_defined = True
+            elif re_define_time_bits.match(directive.str):
+                cppcheckdata.reportError(directive, 'error',
+                                         '_TIME_BITS must be defined equal to 64',
+                                         'y2038',
+                                         'type-bits-not-64')
+                time_bits_defined = False
+                y2038safe = False
+            elif re_undef_time_bits.match(directive.str):
+                time_bits_defined = False
+            # check for _USE_TIME_BITS64 (un)definition
+            if re_define_use_time_bits64.match(directive.str):
+                safe = int(srclinenr)
+                # warn about _TIME_BITS not being defined
+                if not time_bits_defined:
+                    cppcheckdata.reportError(directive, 'warning',
+                                             '_USE_TIME_BITS64 is defined but _TIME_BITS was not',
+                                             'y2038',
+                                             'type-bits-undef')
+            elif re_undef_use_time_bits64.match(directive.str):
+                unsafe = int(srclinenr)
+                # do we have a safe..unsafe area?
+                if unsafe > safe > 0:
+                    safe_ranges.append((safe, unsafe))
+                    safe = -1
+
+        # check end of source beyond last directive
+        if len(cfg.tokenlist) > 0:
+            unsafe = int(cfg.tokenlist[-1].linenr)
+            if unsafe > safe > 0:
+                safe_ranges.append((safe, unsafe))
+
+        # go through all tokens
+        for token in cfg.tokenlist:
+            if token.str in id_Y2038:
+                if not any(lower <= int(token.linenr) <= upper
+                           for (lower, upper) in safe_ranges):
+                    cppcheckdata.reportError(token, 'warning',
+                                             token.str + ' is Y2038-unsafe',
+                                             'y2038',
+                                             'unsafe-call')
+                    y2038safe = False
+            token = token.next
+
+    return y2038safe
+
+
+def get_args_parser():
+    parser = cppcheckdata.ArgumentParser()
+    return parser
+
+
+if __name__ == '__main__':
+    parser = get_args_parser()
+    args = parser.parse_args()
+
+    exit_code = 0
+    quiet = args.quiet or args.cli
+
+    if not args.dumpfile:
+        if not args.quiet:
+            print("no input files.")
+        sys.exit(0)
+
+    for dumpfile in args.dumpfile:
+        if not quiet:
+            print('Checking ' + dumpfile + '...')
+
+        check_y2038_safe(dumpfile, quiet)
+
+    sys.exit(cppcheckdata.EXIT_CODE)