diff options
| author | David Benjamin <davidben@google.com> | 2024-03-24 19:43:58 -0400 |
|---|---|---|
| committer | David Benjamin <davidben@google.com> | 2024-03-24 20:00:01 -0400 |
| commit | 8a7ecd774c4032f30949665b42910c2d2cae53f2 (patch) | |
| tree | 1a2f955d0570cd592703c96ef01890a997af005e /tests/data/empty-code.c | |
| parent | protocol: document that color channels provide electrical values (diff) | |
| download | wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar.gz wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar.bz2 wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar.lz wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar.xz wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.tar.zst wayland-8a7ecd774c4032f30949665b42910c2d2cae53f2.zip | |
util: fix undefined behavior in wl_array_for_each
If a wl_array has size zero, wl_array_for_each computes NULL + 0 to get
to the end pointer. This should be fine, and indeed it would be fine in
C++. But the C specification has a mistake here and it is actually
undefined behavior. See
https://davidben.net/2024/01/15/empty-slices.html
Clang's -fsanitize=undefined flags this. I ran into this in Chromium's
build with wayland-scanner on one of our XML files.
../../third_party/wayland/src/src/scanner.c:1853:2: runtime error: applying zero offset to null pointer
#0 0x55c979b8e02c in emit_code third_party/wayland/src/src/scanner.c:1853:2
#1 0x55c979b89323 in main third_party/wayland/src/src/scanner.c
#2 0x7f8dfdb8c6c9 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
#3 0x7f8dfdb8c784 in __libc_start_main csu/../csu/libc-start.c:360:3
#4 0x55c979b70f39 in _start (...)
An empty XML file is sufficient to hit this case, so I've added it as a
test. To reproduce, undo the fix and include only the test, then build
with:
CC=clang CFLAGS="-fno-sanitize-recover=undefined" meson build/ -Db_sanitize=undefined -Db_lundef=false
ninja -C build test
Signed-off-by: David Benjamin <davidben@google.com>
Diffstat (limited to 'tests/data/empty-code.c')
| -rw-r--r-- | tests/data/empty-code.c | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/tests/data/empty-code.c b/tests/data/empty-code.c new file mode 100644 index 0000000..6f0f619 --- /dev/null +++ b/tests/data/empty-code.c @@ -0,0 +1,20 @@ +/* SCANNER TEST */ + +#include <stdlib.h> +#include <stdint.h> +#include "wayland-util.h" + + +static const struct wl_interface *empty_types[] = { +}; + +static const struct wl_message empty_requests[] = { + { "empty", "", empty_types + 0 }, +}; + +WL_EXPORT const struct wl_interface empty_interface = { + "empty", 1, + 1, empty_requests, + 0, NULL, +}; + |
