gcc/testsuite/gcc.dg/Wstringop-overflow-42.c

/* Verify -Wstringop-overflow a with destination pointer pointing either
   before the beginning or past the end of an object.
  { dg-do compile }
  { dg-options "-O -Wall -Wno-array-bounds -Wno-restrict" } */

typedef __SIZE_TYPE__ size_t;

char* strcpy (char *, const char *);


extern char a[1];

volatile char *d;

void cpy_si_1_max (int i, const char *s)
{
  if (i < 1) i = 1;
  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" }
  d = strcpy (a + i + 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" }
}

void cpy_ui_1_max (unsigned i, const char *s)
{
  if (i < 1) i = 1;
  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" }
  d = strcpy (a + i + 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" "" { xfail { ! lp64 } } }
}

void cpy_sl_1_max (long i, const char *s)
{
  if (i < 1) i = 1;
  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" "" { target { ! ptr_eq_short } } }
  d = strcpy (a + i + 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" "" { target { ! ptr_eq_short } } }
}

void cpy_ul_1_max (unsigned long i, const char *s)
{
  if (i < 1) i = 1;

  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" "" { target { ! ptr_eq_short } } }

  /* Because of integer wraparound the offset's range is [1, 0] so
     the overflow isn't diagnosed (yet).  */
  d = strcpy (a + i + 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" "" { xfail *-*-* } }
}


void cpy_si_min_m1 (int i, const char *s)
{
  if (i > -1) i = -1;
  d = strcpy (a + i - 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" }
  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" }
  d = strcpy (a + i + 2, s);
}

void cpy_sl_min_m1 (long i, const char *s)
{
  if (i > -1) i = -1;
  d = strcpy (a + i - 1, s);  // { dg-warning "writing 1 or more bytes into a region of size 0" "" { target { ! ptr_eq_short } } }
  d = strcpy (a + i, s);      // { dg-warning "writing 1 or more bytes into a region of size 0" "" { target { ! ptr_eq_short } } }
  d = strcpy (a + i + 2, s);
}