| View Issue Details [ Jump to Notes ] [ Related Changesets ] | [ Issue History ] [ Print ] |
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0001000 | Frama-C | Plug-in > value analysis | public | 2011-10-25 16:26 | 2014-02-12 16:54 |
|
| Reporter | yakobowski | |
| Assigned To | yakobowski | |
| Priority | normal | Severity | crash | Reproducibility | unable to reproduce |
| Status | closed | Resolution | fixed | |
| Platform | | OS | | OS Version | |
| Product Version | Frama-C Nitrogen-20111001 | |
| Target Version | | Fixed in Version | Frama-C Oxygen-20120901 | |
|
| Summary | 0001000: Evaluation in the logic can cause crashes |
| Description | Evaluation in the logic sometimes causes the warning "using size of void". Worse, this can lead to crashes, as e.g. do_cast raises assert false when it encounters something of type void.
It is not clear how one goes from something that has type void* to something that has type void, but this definitely happens. |
| Steps To Reproduce | This example can be used to cause the apparition of the warning
frama-c -val -then -print
void main (int i) {
int x=1;
while(1)
Frama_C_memcpy((void *)&x, (void const*)&x, i);
}
The generated assertion cast the pointer to void*, then does arithmetic on it. This is incorrect. |
| Tags | No tags attached. |
|
| Attached Files | |
|
Relationships 
Relationships