1 /* Coverity Scan model
2 *
3 * Copyright (C) 2014 Red Hat, Inc.
4 *
5 * Authors:
6 * Markus Armbruster <armbru@redhat.com>
7 * Paolo Bonzini <pbonzini@redhat.com>
8 *
9 * This work is licensed under the terms of the GNU GPL, version 2 or, at your
10 * option, any later version. See the COPYING file in the top-level directory.
11 */
12 /*
13 * This is the source code for our Coverity user model file. The
14 * purpose of user models is to increase scanning accuracy by explaining
15 * code Coverity can't see (out of tree libraries) or doesn't
16 * sufficiently understand. Better accuracy means both fewer false
17 * positives and more true defects. Memory leaks in particular.
18 *
19 * - A model file can't import any header files. Some built-in primitives are
20 * available but not wchar_t, NULL etc.
21 * - Modeling doesn't need full structs and typedefs. Rudimentary structs
22 * and similar types are sufficient.
23 * - An uninitialized local variable signifies that the variable could be
24 * any value.
25 *
26 * The model file must be uploaded by an admin in the analysis settings of
27 * https://scan.coverity.com/projects/54
28 *
29 * above text is based on https://github.com/qemu/qemu/blob/master/scripts/coverity-model.c
30 */
31
32 #define NULL (void *)0
33
35
43 };
44
45 // Based on https://scan.coverity.com/models
47 int has_memory;
48 __coverity_negative_sink__(
size);
49 if (has_memory) {
50 void *ptr = __coverity_alloc__(
size);
51 __coverity_mark_as_uninitialized_buffer__(ptr);
52 __coverity_mark_as_afm_allocated__(ptr, "av_free");
53 return ptr;
54 } else {
55 return 0;
56 }
57 }
58
60 int has_memory;
61 __coverity_negative_sink__(
size);
62 if (has_memory) {
63 void *ptr = __coverity_alloc__(
size);
64 __coverity_writeall0__(ptr);
65 __coverity_mark_as_afm_allocated__(ptr, "av_free");
66 return ptr;
67 } else {
68 return 0;
69 }
70 }
71
73 int has_memory;
74 __coverity_negative_sink__(
size);
75 if (has_memory) {
76 __coverity_escape__(ptr);
77 ptr = __coverity_alloc__(
size);
78 __coverity_writeall__(ptr);
79 __coverity_mark_as_afm_allocated__(ptr, "av_free");
80 return ptr;
81 } else {
82 return 0;
83 }
84 }
85
87 __coverity_free__(ptr);
88 __coverity_mark_as_afm_freed__(ptr, "av_free");
89 }
90
91
93 __coverity_negative_sink__(
b);
94 __coverity_negative_sink__(
c);
95
97 }