Print this page
new smatch
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/tools/smatch/src/smatch_param_to_mtag_data.c
+++ new/usr/src/tools/smatch/src/smatch_param_to_mtag_data.c
1 1 /*
2 2 * Copyright (C) 2017 Oracle.
3 3 *
4 4 * This program is free software; you can redistribute it and/or
5 5 * modify it under the terms of the GNU General Public License
6 6 * as published by the Free Software Foundation; either version 2
7 7 * of the License, or (at your option) any later version.
8 8 *
9 9 * This program is distributed in the hope that it will be useful,
10 10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 12 * GNU General Public License for more details.
13 13 *
14 14 * You should have received a copy of the GNU General Public License
15 15 * along with this program; if not, see http://www.gnu.org/copyleft/gpl.txt
16 16 */
17 17
18 18 /*
19 19 * Take a look at request_threaded_irq(). It takes thread_fn and dev_id. Then
20 20 * it does:
21 21 *
22 22 * action = kzalloc(sizeof(struct irqaction), GFP_KERNEL);
23 23 * action->thread_fn = thread_fn;
24 24 * action->dev_id = dev_id;
25 25 *
26 26 * It doesn't ever pass action back to the higher levels, but instead registers
27 27 * it with the lower levels.
28 28 *
29 29 * The kzalloc() allocation creates a new mtag. We don't know at this point
30 30 * what "thread_fn" and "dev_id" are because they come from many different
31 31 * sources.
32 32 *
33 33 * So what we do is we pass the information back to the callers that thread_fn
34 34 * and dev_id are stored as a specific mtag data. Then when the callers *do*
35 35 * know what values are passed they create an mtag_alias. An mtag_alias is a
36 36 * many to one relationship. Then they store that in mtag_data using the
37 37 * mtag_alias.
38 38 *
39 39 */
40 40
41 41 #include "smatch.h"
42 42 #include "smatch_extra.h"
43 43 #include "smatch_slist.h"
44 44
45 45 static int my_id;
46 46
47 47 struct tag_assign_info {
48 48 mtag_t tag;
49 49 int offset;
50 50 };
51 51 ALLOCATOR(tag_assign_info, "tag name offset");
52 52
53 53 static struct smatch_state *alloc_tag_data_state(mtag_t tag, char *name, int offset)
54 54 {
55 55 struct smatch_state *state;
56 56 struct tag_assign_info *data;
57 57
58 58 data = __alloc_tag_assign_info(0);
59 59 data->tag = tag;
60 60 data->offset = offset;
61 61
62 62 state = __alloc_smatch_state(0);
63 63 state->name = alloc_sname(name);
64 64 state->data = data;
65 65 return state;
66 66 }
67 67
68 68 struct smatch_state *merge_tag_info(struct smatch_state *s1, struct smatch_state *s2)
|
↓ open down ↓ |
68 lines elided |
↑ open up ↑ |
69 69 {
70 70 /* Basically ignore undefined states */
71 71 if (s1 == &undefined)
72 72 return s2;
73 73 if (s2 == &undefined)
74 74 return s1;
75 75
76 76 return &merged;
77 77 }
78 78
79 -static bool is_local_var(struct expression *expr)
80 -{
81 - struct symbol *sym;
82 -
83 - if (!expr || expr->type != EXPR_SYMBOL)
84 - return false;
85 - sym = expr->symbol;
86 - if (!(sym->ctype.modifiers & MOD_TOPLEVEL))
87 - return true;
88 - return false;
89 -}
90 -
91 79 static void match_assign(struct expression *expr)
92 80 {
93 81 struct expression *left;
94 82 struct symbol *right_sym;
95 83 char *name;
96 84 mtag_t tag;
97 85 int offset;
98 86 int param;
99 87
100 88 if (expr->op != '=')
101 89 return;
102 90 left = strip_expr(expr->left);
103 - if (is_local_var(left))
91 + if (is_local_variable(left))
104 92 return;
105 93 right_sym = expr_to_sym(expr->right);
106 94 if (!right_sym)
107 95 return;
108 96
109 97 param = get_param_num_from_sym(right_sym);
110 98 if (param < 0)
111 99 return;
112 100 // FIXME: modify param_has_filter_data() to take a name/sym
113 101 if (!expr_to_mtag_offset(left, &tag, &offset))
114 102 return;
115 103 name = expr_to_str(left);
116 104 if (!name)
117 105 return;
118 106 set_state_expr(my_id, expr->right, alloc_tag_data_state(tag, name, offset));
119 107 free_string(name);
120 108 }
121 109
122 110 static void propogate_assignment(struct expression *expr, mtag_t tag, int offset, int param, char *key)
123 111 {
124 112 struct expression *arg;
125 113 int orig_param;
126 114 char buf[32];
127 115 char *name;
128 116 struct symbol *sym;
129 117
130 118 arg = get_argument_from_call_expr(expr->args, param);
131 119 if (!arg)
132 120 return;
133 121 name = get_variable_from_key(arg, key, &sym);
134 122 if (!name || !sym)
135 123 goto free;
136 124
137 125 orig_param = get_param_num_from_sym(sym);
138 126 if (orig_param < 0)
139 127 goto free;
140 128
141 129 snprintf(buf, sizeof(buf), "$->[%d]", offset);
142 130 set_state(my_id, name, sym, alloc_tag_data_state(tag, buf, offset));
143 131 free:
144 132 free_string(name);
145 133 }
146 134
147 135 static void assign_to_alias(struct expression *expr, int param, mtag_t tag, int offset, char *key)
148 136 {
149 137 struct expression *arg, *gen_expr;
150 138 struct range_list *rl;
151 139 mtag_t arg_tag;
152 140 mtag_t alias;
153 141 int arg_offset;
154 142
155 143 arg = get_argument_from_call_expr(expr->args, param);
156 144 if (!arg)
157 145 return;
158 146
159 147 gen_expr = gen_expression_from_key(arg, key);
160 148 if (!gen_expr)
161 149 return;
162 150
163 151 get_absolute_rl(gen_expr, &rl);
164 152
165 153 if (!create_mtag_alias(tag, expr, &alias))
166 154 return;
167 155
168 156 // insert_mtag_data(alias, offset, rl);
169 157
170 158 // FIXME: is arg_offset handled correctly?
171 159 if (expr_to_mtag_offset(gen_expr, &arg_tag, &arg_offset) && arg_offset == 0)
172 160 sql_insert_mtag_map(arg_tag, -offset, alias);
173 161 }
174 162
175 163 static void call_does_mtag_assign(struct expression *expr, int param, char *key, char *value)
176 164 {
177 165 char *p;
178 166 mtag_t tag;
179 167 int offset;
180 168
181 169 while (expr->type == EXPR_ASSIGNMENT)
182 170 expr = strip_expr(expr->right);
183 171 if (expr->type != EXPR_CALL)
184 172 return;
185 173
186 174 tag = strtoul(value, NULL, 10);
187 175 p = strchr(value, '+');
188 176 if (!p)
189 177 return;
190 178 offset = atoi(p + 1);
191 179
192 180 // save_mtag_to_map(expr, tag, offset, param, key, value);
193 181 propogate_assignment(expr, tag, offset, param, key);
194 182 assign_to_alias(expr, param, tag, offset, key);
195 183 }
196 184
197 185 static void print_stored_to_mtag(int return_id, char *return_ranges, struct expression *expr)
198 186 {
199 187 struct sm_state *sm;
200 188 struct tag_assign_info *data;
201 189 char buf[256];
202 190 const char *param_name;
203 191 int param;
204 192
205 193 FOR_EACH_MY_SM(my_id, __get_cur_stree(), sm) {
206 194 if (!sm->state->data)
207 195 continue;
208 196
209 197 param = get_param_num_from_sym(sm->sym);
210 198 if (param < 0)
211 199 continue;
212 200 param_name = get_param_name(sm);
213 201 if (!param_name)
214 202 continue;
215 203
216 204 data = sm->state->data;
217 205 snprintf(buf, sizeof(buf), "%lld+%d", data->tag, data->offset);
218 206 sql_insert_return_states(return_id, return_ranges, MTAG_ASSIGN, param, param_name, buf);
219 207 } END_FOR_EACH_SM(sm);
220 208 }
221 209
222 210 void register_param_to_mtag_data(int id)
223 211 {
224 212 my_id = id;
225 213
226 214 set_dynamic_states(my_id);
227 215 add_hook(&match_assign, ASSIGNMENT_HOOK);
228 216 select_return_states_hook(MTAG_ASSIGN, &call_does_mtag_assign);
229 217 add_merge_hook(my_id, &merge_tag_info);
230 218 add_split_return_callback(&print_stored_to_mtag);
231 219 }
232 220
|
↓ open down ↓ |
119 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX