blob: 72ae9fdebfa120560e14ab6aaeba8fa00dc64a3a (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
// Find and fix trivial use-after-free of Error objects
//
// Copyright (c) 2020 Virtuozzo International GmbH.
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License as
// published by the Free Software Foundation; either version 2 of the
// License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program. If not, see
// <http://www.gnu.org/licenses/>.
//
// How to use:
// spatch --sp-file scripts/coccinelle/error-use-after-free.cocci \
// --macro-file scripts/cocci-macro-file.h --in-place \
// --no-show-diff ( FILES... | --use-gitgrep . )
@ exists@
identifier fn, fn2;
expression err;
@@
fn(...)
{
<...
(
error_free(err);
+ err = NULL;
|
error_report_err(err);
+ err = NULL;
|
error_reportf_err(err, ...);
+ err = NULL;
|
warn_report_err(err);
+ err = NULL;
|
warn_reportf_err(err, ...);
+ err = NULL;
)
... when != err = NULL
when != exit(...)
fn2(..., err, ...)
...>
}
|
