有没有静态代码分析器可以捕捉到这个内存泄漏？
有没有静态代码分析器可以捕捉到这个内存泄漏？
提问于 2015-02-10 18:50:03
这样的泄漏对于肉眼来说似乎太微不足道了，我认为静态代码分析工具应该能够发现它们。
Ex1:
void foo(void) {
u32 *ptr = kmalloc(512, GFP_KERNEL);
ptr = (u32 *)0xffffffff;
kfree(ptr);
}我知道Coverity可以像下面这样发现漏洞，但对上面的一个不太确定:有谁能告诉我这是否会在Coverity或像Sparse这样的工具中被检测到
Ex2:
void foo(void) {
kmalloc(512, GFP_KERNEL);
}
Ex3:
void foo(void) {
void * ptr = kmalloc(512, GFP_KERNEL);
if (true)
return;
kfree(ptr)
}回答 2
Stack Overflow用户
发布于 2015-02-17 01:47:17
我不知道kmalloc (而且我没有一个带有Coverity许可证的Linux系统来测试它)，但是Coverity可以很容易地用malloc检测到这种形式的泄漏。所以我怀疑kmalloc会给它带来麻烦。
如果它确实带来了麻烦，您可以随时提供kmalloc函数的用户模型，该模型只是对malloc函数进行包装，以便Coverity知道如何处理该函数。
Stack Overflow用户
发布于 2015-02-10 20:10:57
Valgrind可用于检测Ex1中提到的内存泄漏。
e.g.
#include<stdio.h>
void foo(void) {
int *ptr = (int *)malloc(512);
ptr = (int *)0xffffffff;
free(ptr);
}
int main(){
foo();
return 1;
}
Valigrind Output:
[test@myhost /tmp]# valgrind --tool=memcheck --leak-check=full ./Ex1
==23780== Memcheck, a memory error detector
==23780== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==23780== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==23780== Command: ./Ex1
==23780==
==23780== Invalid free() / delete / delete[]
==23780== at 0x4A05A31: free (vg_replace_malloc.c:325)
==23780== by 0x400509: foo (in /tmp/Ex1)
==23780== by 0x400514: main (in /tmp/Ex1)
==23780== Address 0xffffffff is not stack'd, malloc'd or (recently) free'd
==23780==
==23780==
==23780== HEAP SUMMARY:
==23780== in use at exit: 512 bytes in 1 blocks
==23780== total heap usage: 1 allocs, 1 frees, 512 bytes allocated
==23780==
==23780== 512 bytes in 1 blocks are definitely lost in loss record 1 of 1
==23780== at 0x4A05E1C: malloc (vg_replace_malloc.c:195)
==23780== by 0x4004E9: foo (in /tmp/Ex1)
==23780== by 0x400514: main (in /tmp/Ex1)
==23780==
==23780== LEAK SUMMARY:
==23780== definitely lost: 512 bytes in 1 blocks
==23780== indirectly lost: 0 bytes in 0 blocks
==23780== possibly lost: 0 bytes in 0 blocks
==23780== still reachable: 0 bytes in 0 blocks
==23780== suppressed: 0 bytes in 0 blocks
==23780==
==23780== For counts of detected and suppressed errors, rerun with: -v
==23780== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 4 from 4)页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：
https://stackoverflow.com/questions/28429786
复制相关文章
相似问题
腾讯云开发者
