PrintfFormatString.cpp 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934
  1. //== PrintfFormatString.cpp - Analysis of printf format strings --*- C++ -*-==//
  2. //
  3. // The LLVM Compiler Infrastructure
  4. //
  5. // This file is distributed under the University of Illinois Open Source
  6. // License. See LICENSE.TXT for details.
  7. //
  8. //===----------------------------------------------------------------------===//
  9. //
  10. // Handling of format string in printf and friends. The structure of format
  11. // strings for fprintf() are described in C99 7.19.6.1.
  12. //
  13. //===----------------------------------------------------------------------===//
  14. #include "clang/Analysis/Analyses/FormatString.h"
  15. #include "FormatStringParsing.h"
  16. #include "clang/Basic/TargetInfo.h"
  17. using clang::analyze_format_string::ArgType;
  18. using clang::analyze_format_string::FormatStringHandler;
  19. using clang::analyze_format_string::LengthModifier;
  20. using clang::analyze_format_string::OptionalAmount;
  21. using clang::analyze_format_string::ConversionSpecifier;
  22. using clang::analyze_printf::PrintfSpecifier;
  23. using namespace clang;
  24. typedef clang::analyze_format_string::SpecifierResult<PrintfSpecifier>
  25. PrintfSpecifierResult;
  26. //===----------------------------------------------------------------------===//
  27. // Methods for parsing format strings.
  28. //===----------------------------------------------------------------------===//
  29. using analyze_format_string::ParseNonPositionAmount;
  30. static bool ParsePrecision(FormatStringHandler &H, PrintfSpecifier &FS,
  31. const char *Start, const char *&Beg, const char *E,
  32. unsigned *argIndex) {
  33. if (argIndex) {
  34. FS.setPrecision(ParseNonPositionAmount(Beg, E, *argIndex));
  35. } else {
  36. const OptionalAmount Amt = ParsePositionAmount(H, Start, Beg, E,
  37. analyze_format_string::PrecisionPos);
  38. if (Amt.isInvalid())
  39. return true;
  40. FS.setPrecision(Amt);
  41. }
  42. return false;
  43. }
  44. static bool ParseObjCFlags(FormatStringHandler &H, PrintfSpecifier &FS,
  45. const char *FlagBeg, const char *E, bool Warn) {
  46. StringRef Flag(FlagBeg, E - FlagBeg);
  47. // Currently there is only one flag.
  48. if (Flag == "tt") {
  49. FS.setHasObjCTechnicalTerm(FlagBeg);
  50. return false;
  51. }
  52. // Handle either the case of no flag or an invalid flag.
  53. if (Warn) {
  54. if (Flag == "")
  55. H.HandleEmptyObjCModifierFlag(FlagBeg, E - FlagBeg);
  56. else
  57. H.HandleInvalidObjCModifierFlag(FlagBeg, E - FlagBeg);
  58. }
  59. return true;
  60. }
  61. static PrintfSpecifierResult ParsePrintfSpecifier(FormatStringHandler &H,
  62. const char *&Beg,
  63. const char *E,
  64. unsigned &argIndex,
  65. const LangOptions &LO,
  66. const TargetInfo &Target,
  67. bool Warn,
  68. bool isFreeBSDKPrintf) {
  69. using namespace clang::analyze_format_string;
  70. using namespace clang::analyze_printf;
  71. const char *I = Beg;
  72. const char *Start = nullptr;
  73. UpdateOnReturn <const char*> UpdateBeg(Beg, I);
  74. // Look for a '%' character that indicates the start of a format specifier.
  75. for ( ; I != E ; ++I) {
  76. char c = *I;
  77. if (c == '\0') {
  78. // Detect spurious null characters, which are likely errors.
  79. H.HandleNullChar(I);
  80. return true;
  81. }
  82. if (c == '%') {
  83. Start = I++; // Record the start of the format specifier.
  84. break;
  85. }
  86. }
  87. // No format specifier found?
  88. if (!Start)
  89. return false;
  90. if (I == E) {
  91. // No more characters left?
  92. if (Warn)
  93. H.HandleIncompleteSpecifier(Start, E - Start);
  94. return true;
  95. }
  96. PrintfSpecifier FS;
  97. if (ParseArgPosition(H, FS, Start, I, E))
  98. return true;
  99. if (I == E) {
  100. // No more characters left?
  101. if (Warn)
  102. H.HandleIncompleteSpecifier(Start, E - Start);
  103. return true;
  104. }
  105. // Look for flags (if any).
  106. bool hasMore = true;
  107. for ( ; I != E; ++I) {
  108. switch (*I) {
  109. default: hasMore = false; break;
  110. case '\'':
  111. // FIXME: POSIX specific. Always accept?
  112. FS.setHasThousandsGrouping(I);
  113. break;
  114. case '-': FS.setIsLeftJustified(I); break;
  115. case '+': FS.setHasPlusPrefix(I); break;
  116. case ' ': FS.setHasSpacePrefix(I); break;
  117. case '#': FS.setHasAlternativeForm(I); break;
  118. case '0': FS.setHasLeadingZeros(I); break;
  119. }
  120. if (!hasMore)
  121. break;
  122. }
  123. if (I == E) {
  124. // No more characters left?
  125. if (Warn)
  126. H.HandleIncompleteSpecifier(Start, E - Start);
  127. return true;
  128. }
  129. // Look for the field width (if any).
  130. if (ParseFieldWidth(H, FS, Start, I, E,
  131. FS.usesPositionalArg() ? nullptr : &argIndex))
  132. return true;
  133. if (I == E) {
  134. // No more characters left?
  135. if (Warn)
  136. H.HandleIncompleteSpecifier(Start, E - Start);
  137. return true;
  138. }
  139. // Look for the precision (if any).
  140. if (*I == '.') {
  141. ++I;
  142. if (I == E) {
  143. if (Warn)
  144. H.HandleIncompleteSpecifier(Start, E - Start);
  145. return true;
  146. }
  147. if (ParsePrecision(H, FS, Start, I, E,
  148. FS.usesPositionalArg() ? nullptr : &argIndex))
  149. return true;
  150. if (I == E) {
  151. // No more characters left?
  152. if (Warn)
  153. H.HandleIncompleteSpecifier(Start, E - Start);
  154. return true;
  155. }
  156. }
  157. // Look for the length modifier.
  158. if (ParseLengthModifier(FS, I, E, LO) && I == E) {
  159. // No more characters left?
  160. if (Warn)
  161. H.HandleIncompleteSpecifier(Start, E - Start);
  162. return true;
  163. }
  164. // Look for the Objective-C modifier flags, if any.
  165. // We parse these here, even if they don't apply to
  166. // the conversion specifier, and then emit an error
  167. // later if the conversion specifier isn't '@'. This
  168. // enables better recovery, and we don't know if
  169. // these flags are applicable until later.
  170. const char *ObjCModifierFlagsStart = nullptr,
  171. *ObjCModifierFlagsEnd = nullptr;
  172. if (*I == '[') {
  173. ObjCModifierFlagsStart = I;
  174. ++I;
  175. auto flagStart = I;
  176. for (;; ++I) {
  177. ObjCModifierFlagsEnd = I;
  178. if (I == E) {
  179. if (Warn)
  180. H.HandleIncompleteSpecifier(Start, E - Start);
  181. return true;
  182. }
  183. // Did we find the closing ']'?
  184. if (*I == ']') {
  185. if (ParseObjCFlags(H, FS, flagStart, I, Warn))
  186. return true;
  187. ++I;
  188. break;
  189. }
  190. // There are no separators defined yet for multiple
  191. // Objective-C modifier flags. When those are
  192. // defined, this is the place to check.
  193. }
  194. }
  195. if (*I == '\0') {
  196. // Detect spurious null characters, which are likely errors.
  197. H.HandleNullChar(I);
  198. return true;
  199. }
  200. // Finally, look for the conversion specifier.
  201. const char *conversionPosition = I++;
  202. ConversionSpecifier::Kind k = ConversionSpecifier::InvalidSpecifier;
  203. switch (*conversionPosition) {
  204. default:
  205. break;
  206. // C99: 7.19.6.1 (section 8).
  207. case '%': k = ConversionSpecifier::PercentArg; break;
  208. case 'A': k = ConversionSpecifier::AArg; break;
  209. case 'E': k = ConversionSpecifier::EArg; break;
  210. case 'F': k = ConversionSpecifier::FArg; break;
  211. case 'G': k = ConversionSpecifier::GArg; break;
  212. case 'X': k = ConversionSpecifier::XArg; break;
  213. case 'a': k = ConversionSpecifier::aArg; break;
  214. case 'c': k = ConversionSpecifier::cArg; break;
  215. case 'd': k = ConversionSpecifier::dArg; break;
  216. case 'e': k = ConversionSpecifier::eArg; break;
  217. case 'f': k = ConversionSpecifier::fArg; break;
  218. case 'g': k = ConversionSpecifier::gArg; break;
  219. case 'i': k = ConversionSpecifier::iArg; break;
  220. case 'n': k = ConversionSpecifier::nArg; break;
  221. case 'o': k = ConversionSpecifier::oArg; break;
  222. case 'p': k = ConversionSpecifier::pArg; break;
  223. case 's': k = ConversionSpecifier::sArg; break;
  224. case 'u': k = ConversionSpecifier::uArg; break;
  225. case 'x': k = ConversionSpecifier::xArg; break;
  226. // POSIX specific.
  227. case 'C': k = ConversionSpecifier::CArg; break;
  228. case 'S': k = ConversionSpecifier::SArg; break;
  229. // Objective-C.
  230. case '@': k = ConversionSpecifier::ObjCObjArg; break;
  231. // Glibc specific.
  232. case 'm': k = ConversionSpecifier::PrintErrno; break;
  233. // FreeBSD kernel specific.
  234. case 'b':
  235. if (isFreeBSDKPrintf)
  236. k = ConversionSpecifier::FreeBSDbArg; // int followed by char *
  237. break;
  238. case 'r':
  239. if (isFreeBSDKPrintf)
  240. k = ConversionSpecifier::FreeBSDrArg; // int
  241. break;
  242. case 'y':
  243. if (isFreeBSDKPrintf)
  244. k = ConversionSpecifier::FreeBSDyArg; // int
  245. break;
  246. // Apple-specific.
  247. case 'D':
  248. if (isFreeBSDKPrintf)
  249. k = ConversionSpecifier::FreeBSDDArg; // void * followed by char *
  250. else if (Target.getTriple().isOSDarwin())
  251. k = ConversionSpecifier::DArg;
  252. break;
  253. case 'O':
  254. if (Target.getTriple().isOSDarwin())
  255. k = ConversionSpecifier::OArg;
  256. break;
  257. case 'U':
  258. if (Target.getTriple().isOSDarwin())
  259. k = ConversionSpecifier::UArg;
  260. break;
  261. // MS specific.
  262. case 'Z':
  263. if (Target.getTriple().isOSMSVCRT())
  264. k = ConversionSpecifier::ZArg;
  265. }
  266. // Check to see if we used the Objective-C modifier flags with
  267. // a conversion specifier other than '@'.
  268. if (k != ConversionSpecifier::ObjCObjArg &&
  269. k != ConversionSpecifier::InvalidSpecifier &&
  270. ObjCModifierFlagsStart) {
  271. H.HandleObjCFlagsWithNonObjCConversion(ObjCModifierFlagsStart,
  272. ObjCModifierFlagsEnd + 1,
  273. conversionPosition);
  274. return true;
  275. }
  276. PrintfConversionSpecifier CS(conversionPosition, k);
  277. FS.setConversionSpecifier(CS);
  278. if (CS.consumesDataArgument() && !FS.usesPositionalArg())
  279. FS.setArgIndex(argIndex++);
  280. // FreeBSD kernel specific.
  281. if (k == ConversionSpecifier::FreeBSDbArg ||
  282. k == ConversionSpecifier::FreeBSDDArg)
  283. argIndex++;
  284. if (k == ConversionSpecifier::InvalidSpecifier) {
  285. // Assume the conversion takes one argument.
  286. return !H.HandleInvalidPrintfConversionSpecifier(FS, Start, I - Start);
  287. }
  288. return PrintfSpecifierResult(Start, FS);
  289. }
  290. bool clang::analyze_format_string::ParsePrintfString(FormatStringHandler &H,
  291. const char *I,
  292. const char *E,
  293. const LangOptions &LO,
  294. const TargetInfo &Target,
  295. bool isFreeBSDKPrintf) {
  296. unsigned argIndex = 0;
  297. // Keep looking for a format specifier until we have exhausted the string.
  298. while (I != E) {
  299. const PrintfSpecifierResult &FSR = ParsePrintfSpecifier(H, I, E, argIndex,
  300. LO, Target, true,
  301. isFreeBSDKPrintf);
  302. // Did a fail-stop error of any kind occur when parsing the specifier?
  303. // If so, don't do any more processing.
  304. if (FSR.shouldStop())
  305. return true;
  306. // Did we exhaust the string or encounter an error that
  307. // we can recover from?
  308. if (!FSR.hasValue())
  309. continue;
  310. // We have a format specifier. Pass it to the callback.
  311. if (!H.HandlePrintfSpecifier(FSR.getValue(), FSR.getStart(),
  312. I - FSR.getStart()))
  313. return true;
  314. }
  315. assert(I == E && "Format string not exhausted");
  316. return false;
  317. }
  318. bool clang::analyze_format_string::ParseFormatStringHasSArg(const char *I,
  319. const char *E,
  320. const LangOptions &LO,
  321. const TargetInfo &Target) {
  322. unsigned argIndex = 0;
  323. // Keep looking for a %s format specifier until we have exhausted the string.
  324. FormatStringHandler H;
  325. while (I != E) {
  326. const PrintfSpecifierResult &FSR = ParsePrintfSpecifier(H, I, E, argIndex,
  327. LO, Target, false,
  328. false);
  329. // Did a fail-stop error of any kind occur when parsing the specifier?
  330. // If so, don't do any more processing.
  331. if (FSR.shouldStop())
  332. return false;
  333. // Did we exhaust the string or encounter an error that
  334. // we can recover from?
  335. if (!FSR.hasValue())
  336. continue;
  337. const analyze_printf::PrintfSpecifier &FS = FSR.getValue();
  338. // Return true if this a %s format specifier.
  339. if (FS.getConversionSpecifier().getKind() == ConversionSpecifier::Kind::sArg)
  340. return true;
  341. }
  342. return false;
  343. }
  344. //===----------------------------------------------------------------------===//
  345. // Methods on PrintfSpecifier.
  346. //===----------------------------------------------------------------------===//
  347. ArgType PrintfSpecifier::getArgType(ASTContext &Ctx,
  348. bool IsObjCLiteral) const {
  349. const PrintfConversionSpecifier &CS = getConversionSpecifier();
  350. if (!CS.consumesDataArgument())
  351. return ArgType::Invalid();
  352. if (CS.getKind() == ConversionSpecifier::cArg)
  353. switch (LM.getKind()) {
  354. case LengthModifier::None:
  355. return Ctx.IntTy;
  356. case LengthModifier::AsLong:
  357. case LengthModifier::AsWide:
  358. return ArgType(ArgType::WIntTy, "wint_t");
  359. case LengthModifier::AsShort:
  360. if (Ctx.getTargetInfo().getTriple().isOSMSVCRT())
  361. return Ctx.IntTy;
  362. default:
  363. return ArgType::Invalid();
  364. }
  365. if (CS.isIntArg())
  366. switch (LM.getKind()) {
  367. case LengthModifier::AsLongDouble:
  368. // GNU extension.
  369. return Ctx.LongLongTy;
  370. case LengthModifier::None:
  371. return Ctx.IntTy;
  372. case LengthModifier::AsInt32:
  373. return ArgType(Ctx.IntTy, "__int32");
  374. case LengthModifier::AsChar: return ArgType::AnyCharTy;
  375. case LengthModifier::AsShort: return Ctx.ShortTy;
  376. case LengthModifier::AsLong: return Ctx.LongTy;
  377. case LengthModifier::AsLongLong:
  378. case LengthModifier::AsQuad:
  379. return Ctx.LongLongTy;
  380. case LengthModifier::AsInt64:
  381. return ArgType(Ctx.LongLongTy, "__int64");
  382. case LengthModifier::AsIntMax:
  383. return ArgType(Ctx.getIntMaxType(), "intmax_t");
  384. case LengthModifier::AsSizeT:
  385. // FIXME: How to get the corresponding signed version of size_t?
  386. return ArgType();
  387. case LengthModifier::AsInt3264:
  388. return Ctx.getTargetInfo().getTriple().isArch64Bit()
  389. ? ArgType(Ctx.LongLongTy, "__int64")
  390. : ArgType(Ctx.IntTy, "__int32");
  391. case LengthModifier::AsPtrDiff:
  392. return ArgType(Ctx.getPointerDiffType(), "ptrdiff_t");
  393. case LengthModifier::AsAllocate:
  394. case LengthModifier::AsMAllocate:
  395. case LengthModifier::AsWide:
  396. return ArgType::Invalid();
  397. }
  398. if (CS.isUIntArg())
  399. switch (LM.getKind()) {
  400. case LengthModifier::AsLongDouble:
  401. // GNU extension.
  402. return Ctx.UnsignedLongLongTy;
  403. case LengthModifier::None:
  404. return Ctx.UnsignedIntTy;
  405. case LengthModifier::AsInt32:
  406. return ArgType(Ctx.UnsignedIntTy, "unsigned __int32");
  407. case LengthModifier::AsChar: return Ctx.UnsignedCharTy;
  408. case LengthModifier::AsShort: return Ctx.UnsignedShortTy;
  409. case LengthModifier::AsLong: return Ctx.UnsignedLongTy;
  410. case LengthModifier::AsLongLong:
  411. case LengthModifier::AsQuad:
  412. return Ctx.UnsignedLongLongTy;
  413. case LengthModifier::AsInt64:
  414. return ArgType(Ctx.UnsignedLongLongTy, "unsigned __int64");
  415. case LengthModifier::AsIntMax:
  416. return ArgType(Ctx.getUIntMaxType(), "uintmax_t");
  417. case LengthModifier::AsSizeT:
  418. return ArgType(Ctx.getSizeType(), "size_t");
  419. case LengthModifier::AsInt3264:
  420. return Ctx.getTargetInfo().getTriple().isArch64Bit()
  421. ? ArgType(Ctx.UnsignedLongLongTy, "unsigned __int64")
  422. : ArgType(Ctx.UnsignedIntTy, "unsigned __int32");
  423. case LengthModifier::AsPtrDiff:
  424. // FIXME: How to get the corresponding unsigned
  425. // version of ptrdiff_t?
  426. return ArgType();
  427. case LengthModifier::AsAllocate:
  428. case LengthModifier::AsMAllocate:
  429. case LengthModifier::AsWide:
  430. return ArgType::Invalid();
  431. }
  432. if (CS.isDoubleArg()) {
  433. if (LM.getKind() == LengthModifier::AsLongDouble)
  434. return Ctx.LongDoubleTy;
  435. return Ctx.DoubleTy;
  436. }
  437. if (CS.getKind() == ConversionSpecifier::nArg) {
  438. switch (LM.getKind()) {
  439. case LengthModifier::None:
  440. return ArgType::PtrTo(Ctx.IntTy);
  441. case LengthModifier::AsChar:
  442. return ArgType::PtrTo(Ctx.SignedCharTy);
  443. case LengthModifier::AsShort:
  444. return ArgType::PtrTo(Ctx.ShortTy);
  445. case LengthModifier::AsLong:
  446. return ArgType::PtrTo(Ctx.LongTy);
  447. case LengthModifier::AsLongLong:
  448. case LengthModifier::AsQuad:
  449. return ArgType::PtrTo(Ctx.LongLongTy);
  450. case LengthModifier::AsIntMax:
  451. return ArgType::PtrTo(ArgType(Ctx.getIntMaxType(), "intmax_t"));
  452. case LengthModifier::AsSizeT:
  453. return ArgType(); // FIXME: ssize_t
  454. case LengthModifier::AsPtrDiff:
  455. return ArgType::PtrTo(ArgType(Ctx.getPointerDiffType(), "ptrdiff_t"));
  456. case LengthModifier::AsLongDouble:
  457. return ArgType(); // FIXME: Is this a known extension?
  458. case LengthModifier::AsAllocate:
  459. case LengthModifier::AsMAllocate:
  460. case LengthModifier::AsInt32:
  461. case LengthModifier::AsInt3264:
  462. case LengthModifier::AsInt64:
  463. case LengthModifier::AsWide:
  464. return ArgType::Invalid();
  465. }
  466. }
  467. switch (CS.getKind()) {
  468. case ConversionSpecifier::sArg:
  469. if (LM.getKind() == LengthModifier::AsWideChar) {
  470. if (IsObjCLiteral)
  471. return ArgType(Ctx.getPointerType(Ctx.UnsignedShortTy.withConst()),
  472. "const unichar *");
  473. return ArgType(ArgType::WCStrTy, "wchar_t *");
  474. }
  475. if (LM.getKind() == LengthModifier::AsWide)
  476. return ArgType(ArgType::WCStrTy, "wchar_t *");
  477. return ArgType::CStrTy;
  478. case ConversionSpecifier::SArg:
  479. if (IsObjCLiteral)
  480. return ArgType(Ctx.getPointerType(Ctx.UnsignedShortTy.withConst()),
  481. "const unichar *");
  482. if (Ctx.getTargetInfo().getTriple().isOSMSVCRT() &&
  483. LM.getKind() == LengthModifier::AsShort)
  484. return ArgType::CStrTy;
  485. return ArgType(ArgType::WCStrTy, "wchar_t *");
  486. case ConversionSpecifier::CArg:
  487. if (IsObjCLiteral)
  488. return ArgType(Ctx.UnsignedShortTy, "unichar");
  489. if (Ctx.getTargetInfo().getTriple().isOSMSVCRT() &&
  490. LM.getKind() == LengthModifier::AsShort)
  491. return Ctx.IntTy;
  492. return ArgType(Ctx.WideCharTy, "wchar_t");
  493. case ConversionSpecifier::pArg:
  494. return ArgType::CPointerTy;
  495. case ConversionSpecifier::ObjCObjArg:
  496. return ArgType::ObjCPointerTy;
  497. default:
  498. break;
  499. }
  500. // FIXME: Handle other cases.
  501. return ArgType();
  502. }
  503. bool PrintfSpecifier::fixType(QualType QT, const LangOptions &LangOpt,
  504. ASTContext &Ctx, bool IsObjCLiteral) {
  505. // %n is different from other conversion specifiers; don't try to fix it.
  506. if (CS.getKind() == ConversionSpecifier::nArg)
  507. return false;
  508. // Handle Objective-C objects first. Note that while the '%@' specifier will
  509. // not warn for structure pointer or void pointer arguments (because that's
  510. // how CoreFoundation objects are implemented), we only show a fixit for '%@'
  511. // if we know it's an object (block, id, class, or __attribute__((NSObject))).
  512. if (QT->isObjCRetainableType()) {
  513. if (!IsObjCLiteral)
  514. return false;
  515. CS.setKind(ConversionSpecifier::ObjCObjArg);
  516. // Disable irrelevant flags
  517. HasThousandsGrouping = false;
  518. HasPlusPrefix = false;
  519. HasSpacePrefix = false;
  520. HasAlternativeForm = false;
  521. HasLeadingZeroes = false;
  522. Precision.setHowSpecified(OptionalAmount::NotSpecified);
  523. LM.setKind(LengthModifier::None);
  524. return true;
  525. }
  526. // Handle strings next (char *, wchar_t *)
  527. if (QT->isPointerType() && (QT->getPointeeType()->isAnyCharacterType())) {
  528. CS.setKind(ConversionSpecifier::sArg);
  529. // Disable irrelevant flags
  530. HasAlternativeForm = 0;
  531. HasLeadingZeroes = 0;
  532. // Set the long length modifier for wide characters
  533. if (QT->getPointeeType()->isWideCharType())
  534. LM.setKind(LengthModifier::AsWideChar);
  535. else
  536. LM.setKind(LengthModifier::None);
  537. return true;
  538. }
  539. // If it's an enum, get its underlying type.
  540. if (const EnumType *ETy = QT->getAs<EnumType>())
  541. QT = ETy->getDecl()->getIntegerType();
  542. // We can only work with builtin types.
  543. const BuiltinType *BT = QT->getAs<BuiltinType>();
  544. if (!BT)
  545. return false;
  546. // Set length modifier
  547. switch (BT->getKind()) {
  548. case BuiltinType::Bool:
  549. case BuiltinType::WChar_U:
  550. case BuiltinType::WChar_S:
  551. case BuiltinType::Char16:
  552. case BuiltinType::Char32:
  553. case BuiltinType::UInt128:
  554. case BuiltinType::Int128:
  555. case BuiltinType::Half:
  556. // Various types which are non-trivial to correct.
  557. return false;
  558. #define SIGNED_TYPE(Id, SingletonId)
  559. #define UNSIGNED_TYPE(Id, SingletonId)
  560. #define FLOATING_TYPE(Id, SingletonId)
  561. #define BUILTIN_TYPE(Id, SingletonId) \
  562. case BuiltinType::Id:
  563. #include "clang/AST/BuiltinTypes.def"
  564. // Misc other stuff which doesn't make sense here.
  565. return false;
  566. case BuiltinType::UInt:
  567. case BuiltinType::Int:
  568. case BuiltinType::Float:
  569. case BuiltinType::Double:
  570. LM.setKind(LengthModifier::None);
  571. break;
  572. case BuiltinType::Char_U:
  573. case BuiltinType::UChar:
  574. case BuiltinType::Char_S:
  575. case BuiltinType::SChar:
  576. LM.setKind(LengthModifier::AsChar);
  577. break;
  578. case BuiltinType::Short:
  579. case BuiltinType::UShort:
  580. LM.setKind(LengthModifier::AsShort);
  581. break;
  582. case BuiltinType::Long:
  583. case BuiltinType::ULong:
  584. LM.setKind(LengthModifier::AsLong);
  585. break;
  586. case BuiltinType::LongLong:
  587. case BuiltinType::ULongLong:
  588. LM.setKind(LengthModifier::AsLongLong);
  589. break;
  590. case BuiltinType::LongDouble:
  591. LM.setKind(LengthModifier::AsLongDouble);
  592. break;
  593. }
  594. // Handle size_t, ptrdiff_t, etc. that have dedicated length modifiers in C99.
  595. if (isa<TypedefType>(QT) && (LangOpt.C99 || LangOpt.CPlusPlus11))
  596. namedTypeToLengthModifier(QT, LM);
  597. // If fixing the length modifier was enough, we might be done.
  598. if (hasValidLengthModifier(Ctx.getTargetInfo())) {
  599. // If we're going to offer a fix anyway, make sure the sign matches.
  600. switch (CS.getKind()) {
  601. case ConversionSpecifier::uArg:
  602. case ConversionSpecifier::UArg:
  603. if (QT->isSignedIntegerType())
  604. CS.setKind(clang::analyze_format_string::ConversionSpecifier::dArg);
  605. break;
  606. case ConversionSpecifier::dArg:
  607. case ConversionSpecifier::DArg:
  608. case ConversionSpecifier::iArg:
  609. if (QT->isUnsignedIntegerType() && !HasPlusPrefix)
  610. CS.setKind(clang::analyze_format_string::ConversionSpecifier::uArg);
  611. break;
  612. default:
  613. // Other specifiers do not have signed/unsigned variants.
  614. break;
  615. }
  616. const analyze_printf::ArgType &ATR = getArgType(Ctx, IsObjCLiteral);
  617. if (ATR.isValid() && ATR.matchesType(Ctx, QT))
  618. return true;
  619. }
  620. // Set conversion specifier and disable any flags which do not apply to it.
  621. // Let typedefs to char fall through to int, as %c is silly for uint8_t.
  622. if (!isa<TypedefType>(QT) && QT->isCharType()) {
  623. CS.setKind(ConversionSpecifier::cArg);
  624. LM.setKind(LengthModifier::None);
  625. Precision.setHowSpecified(OptionalAmount::NotSpecified);
  626. HasAlternativeForm = 0;
  627. HasLeadingZeroes = 0;
  628. HasPlusPrefix = 0;
  629. }
  630. // Test for Floating type first as LongDouble can pass isUnsignedIntegerType
  631. else if (QT->isRealFloatingType()) {
  632. CS.setKind(ConversionSpecifier::fArg);
  633. }
  634. else if (QT->isSignedIntegerType()) {
  635. CS.setKind(ConversionSpecifier::dArg);
  636. HasAlternativeForm = 0;
  637. }
  638. else if (QT->isUnsignedIntegerType()) {
  639. CS.setKind(ConversionSpecifier::uArg);
  640. HasAlternativeForm = 0;
  641. HasPlusPrefix = 0;
  642. } else {
  643. llvm_unreachable("Unexpected type");
  644. }
  645. return true;
  646. }
  647. void PrintfSpecifier::toString(raw_ostream &os) const {
  648. // Whilst some features have no defined order, we are using the order
  649. // appearing in the C99 standard (ISO/IEC 9899:1999 (E) 7.19.6.1)
  650. os << "%";
  651. // Positional args
  652. if (usesPositionalArg()) {
  653. os << getPositionalArgIndex() << "$";
  654. }
  655. // Conversion flags
  656. if (IsLeftJustified) os << "-";
  657. if (HasPlusPrefix) os << "+";
  658. if (HasSpacePrefix) os << " ";
  659. if (HasAlternativeForm) os << "#";
  660. if (HasLeadingZeroes) os << "0";
  661. // Minimum field width
  662. FieldWidth.toString(os);
  663. // Precision
  664. Precision.toString(os);
  665. // Length modifier
  666. os << LM.toString();
  667. // Conversion specifier
  668. os << CS.toString();
  669. }
  670. bool PrintfSpecifier::hasValidPlusPrefix() const {
  671. if (!HasPlusPrefix)
  672. return true;
  673. // The plus prefix only makes sense for signed conversions
  674. switch (CS.getKind()) {
  675. case ConversionSpecifier::dArg:
  676. case ConversionSpecifier::DArg:
  677. case ConversionSpecifier::iArg:
  678. case ConversionSpecifier::fArg:
  679. case ConversionSpecifier::FArg:
  680. case ConversionSpecifier::eArg:
  681. case ConversionSpecifier::EArg:
  682. case ConversionSpecifier::gArg:
  683. case ConversionSpecifier::GArg:
  684. case ConversionSpecifier::aArg:
  685. case ConversionSpecifier::AArg:
  686. case ConversionSpecifier::FreeBSDrArg:
  687. case ConversionSpecifier::FreeBSDyArg:
  688. return true;
  689. default:
  690. return false;
  691. }
  692. }
  693. bool PrintfSpecifier::hasValidAlternativeForm() const {
  694. if (!HasAlternativeForm)
  695. return true;
  696. // Alternate form flag only valid with the oxXaAeEfFgG conversions
  697. switch (CS.getKind()) {
  698. case ConversionSpecifier::oArg:
  699. case ConversionSpecifier::OArg:
  700. case ConversionSpecifier::xArg:
  701. case ConversionSpecifier::XArg:
  702. case ConversionSpecifier::aArg:
  703. case ConversionSpecifier::AArg:
  704. case ConversionSpecifier::eArg:
  705. case ConversionSpecifier::EArg:
  706. case ConversionSpecifier::fArg:
  707. case ConversionSpecifier::FArg:
  708. case ConversionSpecifier::gArg:
  709. case ConversionSpecifier::GArg:
  710. case ConversionSpecifier::FreeBSDrArg:
  711. case ConversionSpecifier::FreeBSDyArg:
  712. return true;
  713. default:
  714. return false;
  715. }
  716. }
  717. bool PrintfSpecifier::hasValidLeadingZeros() const {
  718. if (!HasLeadingZeroes)
  719. return true;
  720. // Leading zeroes flag only valid with the diouxXaAeEfFgG conversions
  721. switch (CS.getKind()) {
  722. case ConversionSpecifier::dArg:
  723. case ConversionSpecifier::DArg:
  724. case ConversionSpecifier::iArg:
  725. case ConversionSpecifier::oArg:
  726. case ConversionSpecifier::OArg:
  727. case ConversionSpecifier::uArg:
  728. case ConversionSpecifier::UArg:
  729. case ConversionSpecifier::xArg:
  730. case ConversionSpecifier::XArg:
  731. case ConversionSpecifier::aArg:
  732. case ConversionSpecifier::AArg:
  733. case ConversionSpecifier::eArg:
  734. case ConversionSpecifier::EArg:
  735. case ConversionSpecifier::fArg:
  736. case ConversionSpecifier::FArg:
  737. case ConversionSpecifier::gArg:
  738. case ConversionSpecifier::GArg:
  739. case ConversionSpecifier::FreeBSDrArg:
  740. case ConversionSpecifier::FreeBSDyArg:
  741. return true;
  742. default:
  743. return false;
  744. }
  745. }
  746. bool PrintfSpecifier::hasValidSpacePrefix() const {
  747. if (!HasSpacePrefix)
  748. return true;
  749. // The space prefix only makes sense for signed conversions
  750. switch (CS.getKind()) {
  751. case ConversionSpecifier::dArg:
  752. case ConversionSpecifier::DArg:
  753. case ConversionSpecifier::iArg:
  754. case ConversionSpecifier::fArg:
  755. case ConversionSpecifier::FArg:
  756. case ConversionSpecifier::eArg:
  757. case ConversionSpecifier::EArg:
  758. case ConversionSpecifier::gArg:
  759. case ConversionSpecifier::GArg:
  760. case ConversionSpecifier::aArg:
  761. case ConversionSpecifier::AArg:
  762. case ConversionSpecifier::FreeBSDrArg:
  763. case ConversionSpecifier::FreeBSDyArg:
  764. return true;
  765. default:
  766. return false;
  767. }
  768. }
  769. bool PrintfSpecifier::hasValidLeftJustified() const {
  770. if (!IsLeftJustified)
  771. return true;
  772. // The left justified flag is valid for all conversions except n
  773. switch (CS.getKind()) {
  774. case ConversionSpecifier::nArg:
  775. return false;
  776. default:
  777. return true;
  778. }
  779. }
  780. bool PrintfSpecifier::hasValidThousandsGroupingPrefix() const {
  781. if (!HasThousandsGrouping)
  782. return true;
  783. switch (CS.getKind()) {
  784. case ConversionSpecifier::dArg:
  785. case ConversionSpecifier::DArg:
  786. case ConversionSpecifier::iArg:
  787. case ConversionSpecifier::uArg:
  788. case ConversionSpecifier::UArg:
  789. case ConversionSpecifier::fArg:
  790. case ConversionSpecifier::FArg:
  791. case ConversionSpecifier::gArg:
  792. case ConversionSpecifier::GArg:
  793. return true;
  794. default:
  795. return false;
  796. }
  797. }
  798. bool PrintfSpecifier::hasValidPrecision() const {
  799. if (Precision.getHowSpecified() == OptionalAmount::NotSpecified)
  800. return true;
  801. // Precision is only valid with the diouxXaAeEfFgGs conversions
  802. switch (CS.getKind()) {
  803. case ConversionSpecifier::dArg:
  804. case ConversionSpecifier::DArg:
  805. case ConversionSpecifier::iArg:
  806. case ConversionSpecifier::oArg:
  807. case ConversionSpecifier::OArg:
  808. case ConversionSpecifier::uArg:
  809. case ConversionSpecifier::UArg:
  810. case ConversionSpecifier::xArg:
  811. case ConversionSpecifier::XArg:
  812. case ConversionSpecifier::aArg:
  813. case ConversionSpecifier::AArg:
  814. case ConversionSpecifier::eArg:
  815. case ConversionSpecifier::EArg:
  816. case ConversionSpecifier::fArg:
  817. case ConversionSpecifier::FArg:
  818. case ConversionSpecifier::gArg:
  819. case ConversionSpecifier::GArg:
  820. case ConversionSpecifier::sArg:
  821. case ConversionSpecifier::FreeBSDrArg:
  822. case ConversionSpecifier::FreeBSDyArg:
  823. return true;
  824. default:
  825. return false;
  826. }
  827. }
  828. bool PrintfSpecifier::hasValidFieldWidth() const {
  829. if (FieldWidth.getHowSpecified() == OptionalAmount::NotSpecified)
  830. return true;
  831. // The field width is valid for all conversions except n
  832. switch (CS.getKind()) {
  833. case ConversionSpecifier::nArg:
  834. return false;
  835. default:
  836. return true;
  837. }
  838. }