Frama-C Bug Tracking System

View Issue Details Jump to Notes ] Related Changesets ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001000Frama-CPlug-in > value analysispublic2011-10-25 16:262014-02-12 16:54
Reporteryakobowski 
Assigned Toyakobowski 
PrioritynormalSeveritycrashReproducibilityunable to reproduce
StatusclosedResolutionfixed 
PlatformOSOS Version
Product VersionFrama-C Nitrogen-20111001 
Target VersionFixed in VersionFrama-C Oxygen-20120901 
Summary0001000: Evaluation in the logic can cause crashes
DescriptionEvaluation in the logic sometimes causes the warning "using size of void". Worse, this can lead to crashes, as e.g. do_cast raises assert false when it encounters something of type void.

It is not clear how one goes from something that has type void* to something that has type void, but this definitely happens.
Steps To ReproduceThis example can be used to cause the apparition of the warning

frama-c -val -then -print

void main (int i) {
  int x=1;
  while(1)
    Frama_C_memcpy((void *)&x, (void const*)&x, i);
}

The generated assertion cast the pointer to void*, then does arithmetic on it. This is incorrect.
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2011-10-25 16:26 yakobowski New Issue
2011-10-25 16:26 yakobowski Status new => assigned
2011-10-25 16:26 yakobowski Assigned To => yakobowski
2011-10-25 16:42 yakobowski Steps to Reproduce Updated
2011-10-26 11:25 yakobowski View Status private => public
2011-10-26 11:26 svn Checkin
2011-10-26 11:26 yakobowski Status assigned => resolved
2011-10-26 11:26 yakobowski Resolution open => fixed
2012-09-19 17:15 signoles Fixed in Version => Frama-C Oxygen-20120901
2012-09-19 17:16 signoles Status resolved => closed


Copyright © 2000 - 2017 MantisBT Team
Powered by Mantis Bugtracker