Frama-C Bug Tracking System

View Issue Details Jump to Notes ] Related Changesets ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001000Frama-CPlug-in > Evapublic2011-10-25 16:262014-02-12 16:54
Assigned Toyakobowski 
PrioritynormalSeveritycrashReproducibilityunable to reproduce
PlatformOSOS Version
Product VersionFrama-C Nitrogen-20111001 
Target VersionFixed in VersionFrama-C Oxygen-20120901 
Summary0001000: Evaluation in the logic can cause crashes
DescriptionEvaluation in the logic sometimes causes the warning "using size of void". Worse, this can lead to crashes, as e.g. do_cast raises assert false when it encounters something of type void. It is not clear how one goes from something that has type void* to something that has type void, but this definitely happens.
Steps To ReproduceThis example can be used to cause the apparition of the warning frama-c -val -then -print void main (int i) { int x=1; while(1) Frama_C_memcpy((void *)&x, (void const*)&x, i); } The generated assertion cast the pointer to void*, then does arithmetic on it. This is incorrect.
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2011-10-25 16:26 yakobowski New Issue
2011-10-25 16:26 yakobowski Status new => assigned
2011-10-25 16:26 yakobowski Assigned To => yakobowski
2011-10-25 16:42 yakobowski Steps to Reproduce Updated
2011-10-26 11:25 yakobowski View Status private => public
2011-10-26 11:26 svn Checkin
2011-10-26 11:26 yakobowski Status assigned => resolved
2011-10-26 11:26 yakobowski Resolution open => fixed
2012-09-19 17:15 signoles Fixed in Version => Frama-C Oxygen-20120901
2012-09-19 17:16 signoles Status resolved => closed
2018-01-12 14:26 signoles Category Plug-in > value analysis => Plug-in > Eva

Copyright © 2000 - 2020 MantisBT Team
Powered by Mantis Bugtracker