clang 20.0.0git
PrintfFormatString.cpp
Go to the documentation of this file.
1//== PrintfFormatString.cpp - Analysis of printf format strings --*- C++ -*-==//
2//
3// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
4// See https://llvm.org/LICENSE.txt for license information.
5// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
6//
7//===----------------------------------------------------------------------===//
8//
9// Handling of format string in printf and friends. The structure of format
10// strings for fprintf() are described in C99 7.19.6.1.
11//
12//===----------------------------------------------------------------------===//
13
14#include "FormatStringParsing.h"
16#include "clang/AST/OSLog.h"
18#include "llvm/Support/Regex.h"
19
26
27using namespace clang;
28
31
32//===----------------------------------------------------------------------===//
33// Methods for parsing format strings.
34//===----------------------------------------------------------------------===//
35
37
39 const char *Start, const char *&Beg, const char *E,
40 unsigned *argIndex) {
41 if (argIndex) {
42 FS.setPrecision(ParseNonPositionAmount(Beg, E, *argIndex));
43 } else {
44 const OptionalAmount Amt = ParsePositionAmount(H, Start, Beg, E,
46 if (Amt.isInvalid())
47 return true;
48 FS.setPrecision(Amt);
49 }
50 return false;
51}
52
54 const char *FlagBeg, const char *E, bool Warn) {
55 StringRef Flag(FlagBeg, E - FlagBeg);
56 // Currently there is only one flag.
57 if (Flag == "tt") {
58 FS.setHasObjCTechnicalTerm(FlagBeg);
59 return false;
60 }
61 // Handle either the case of no flag or an invalid flag.
62 if (Warn) {
63 if (Flag == "")
64 H.HandleEmptyObjCModifierFlag(FlagBeg, E - FlagBeg);
65 else
66 H.HandleInvalidObjCModifierFlag(FlagBeg, E - FlagBeg);
67 }
68 return true;
69}
70
72 const char *&Beg,
73 const char *E,
74 unsigned &argIndex,
75 const LangOptions &LO,
76 const TargetInfo &Target,
77 bool Warn,
78 bool isFreeBSDKPrintf) {
79
80 using namespace clang::analyze_format_string;
81 using namespace clang::analyze_printf;
82
83 const char *I = Beg;
84 const char *Start = nullptr;
85 UpdateOnReturn <const char*> UpdateBeg(Beg, I);
86
87 // Look for a '%' character that indicates the start of a format specifier.
88 for ( ; I != E ; ++I) {
89 char c = *I;
90 if (c == '\0') {
91 // Detect spurious null characters, which are likely errors.
92 H.HandleNullChar(I);
93 return true;
94 }
95 if (c == '%') {
96 Start = I++; // Record the start of the format specifier.
97 break;
98 }
99 }
100
101 // No format specifier found?
102 if (!Start)
103 return false;
104
105 if (I == E) {
106 // No more characters left?
107 if (Warn)
108 H.HandleIncompleteSpecifier(Start, E - Start);
109 return true;
110 }
111
113 if (ParseArgPosition(H, FS, Start, I, E))
114 return true;
115
116 if (I == E) {
117 // No more characters left?
118 if (Warn)
119 H.HandleIncompleteSpecifier(Start, E - Start);
120 return true;
121 }
122
123 if (*I == '{') {
124 ++I;
125 unsigned char PrivacyFlags = 0;
126 StringRef MatchedStr;
127
128 do {
129 StringRef Str(I, E - I);
130 std::string Match = "^[[:space:]]*"
131 "(private|public|sensitive|mask\\.[^[:space:],}]*)"
132 "[[:space:]]*(,|})";
133 llvm::Regex R(Match);
135
136 if (R.match(Str, &Matches)) {
137 MatchedStr = Matches[1];
138 I += Matches[0].size();
139
140 // Set the privacy flag if the privacy annotation in the
141 // comma-delimited segment is at least as strict as the privacy
142 // annotations in previous comma-delimited segments.
143 if (MatchedStr.starts_with("mask")) {
144 StringRef MaskType = MatchedStr.substr(sizeof("mask.") - 1);
145 unsigned Size = MaskType.size();
146 if (Warn && (Size == 0 || Size > 8))
147 H.handleInvalidMaskType(MaskType);
148 FS.setMaskType(MaskType);
149 } else if (MatchedStr == "sensitive")
151 else if (PrivacyFlags !=
153 MatchedStr == "private")
155 else if (PrivacyFlags == 0 && MatchedStr == "public")
157 } else {
158 size_t CommaOrBracePos =
159 Str.find_if([](char c) { return c == ',' || c == '}'; });
160
161 if (CommaOrBracePos == StringRef::npos) {
162 // Neither a comma nor the closing brace was found.
163 if (Warn)
164 H.HandleIncompleteSpecifier(Start, E - Start);
165 return true;
166 }
167
168 I += CommaOrBracePos + 1;
169 }
170 // Continue until the closing brace is found.
171 } while (*(I - 1) == ',');
172
173 // Set the privacy flag.
174 switch (PrivacyFlags) {
175 case 0:
176 break;
178 FS.setIsPrivate(MatchedStr.data());
179 break;
181 FS.setIsPublic(MatchedStr.data());
182 break;
184 FS.setIsSensitive(MatchedStr.data());
185 break;
186 default:
187 llvm_unreachable("Unexpected privacy flag value");
188 }
189 }
190
191 // Look for flags (if any).
192 bool hasMore = true;
193 for ( ; I != E; ++I) {
194 switch (*I) {
195 default: hasMore = false; break;
196 case '\'':
197 // FIXME: POSIX specific. Always accept?
198 FS.setHasThousandsGrouping(I);
199 break;
200 case '-': FS.setIsLeftJustified(I); break;
201 case '+': FS.setHasPlusPrefix(I); break;
202 case ' ': FS.setHasSpacePrefix(I); break;
203 case '#': FS.setHasAlternativeForm(I); break;
204 case '0': FS.setHasLeadingZeros(I); break;
205 }
206 if (!hasMore)
207 break;
208 }
209
210 if (I == E) {
211 // No more characters left?
212 if (Warn)
213 H.HandleIncompleteSpecifier(Start, E - Start);
214 return true;
215 }
216
217 // Look for the field width (if any).
218 if (ParseFieldWidth(H, FS, Start, I, E,
219 FS.usesPositionalArg() ? nullptr : &argIndex))
220 return true;
221
222 if (I == E) {
223 // No more characters left?
224 if (Warn)
225 H.HandleIncompleteSpecifier(Start, E - Start);
226 return true;
227 }
228
229 // Look for the precision (if any).
230 if (*I == '.') {
231 ++I;
232 if (I == E) {
233 if (Warn)
234 H.HandleIncompleteSpecifier(Start, E - Start);
235 return true;
236 }
237
238 if (ParsePrecision(H, FS, Start, I, E,
239 FS.usesPositionalArg() ? nullptr : &argIndex))
240 return true;
241
242 if (I == E) {
243 // No more characters left?
244 if (Warn)
245 H.HandleIncompleteSpecifier(Start, E - Start);
246 return true;
247 }
248 }
249
250 if (ParseVectorModifier(H, FS, I, E, LO))
251 return true;
252
253 // Look for the length modifier.
254 if (ParseLengthModifier(FS, I, E, LO) && I == E) {
255 // No more characters left?
256 if (Warn)
257 H.HandleIncompleteSpecifier(Start, E - Start);
258 return true;
259 }
260
261 // Look for the Objective-C modifier flags, if any.
262 // We parse these here, even if they don't apply to
263 // the conversion specifier, and then emit an error
264 // later if the conversion specifier isn't '@'. This
265 // enables better recovery, and we don't know if
266 // these flags are applicable until later.
267 const char *ObjCModifierFlagsStart = nullptr,
268 *ObjCModifierFlagsEnd = nullptr;
269 if (*I == '[') {
270 ObjCModifierFlagsStart = I;
271 ++I;
272 auto flagStart = I;
273 for (;; ++I) {
274 ObjCModifierFlagsEnd = I;
275 if (I == E) {
276 if (Warn)
277 H.HandleIncompleteSpecifier(Start, E - Start);
278 return true;
279 }
280 // Did we find the closing ']'?
281 if (*I == ']') {
282 if (ParseObjCFlags(H, FS, flagStart, I, Warn))
283 return true;
284 ++I;
285 break;
286 }
287 // There are no separators defined yet for multiple
288 // Objective-C modifier flags. When those are
289 // defined, this is the place to check.
290 }
291 }
292
293 if (*I == '\0') {
294 // Detect spurious null characters, which are likely errors.
295 H.HandleNullChar(I);
296 return true;
297 }
298
299 // Finally, look for the conversion specifier.
300 const char *conversionPosition = I++;
302 switch (*conversionPosition) {
303 default:
304 break;
305 // C99: 7.19.6.1 (section 8).
306 case '%': k = ConversionSpecifier::PercentArg; break;
307 case 'A': k = ConversionSpecifier::AArg; break;
308 case 'E': k = ConversionSpecifier::EArg; break;
309 case 'F': k = ConversionSpecifier::FArg; break;
310 case 'G': k = ConversionSpecifier::GArg; break;
311 case 'X': k = ConversionSpecifier::XArg; break;
312 case 'a': k = ConversionSpecifier::aArg; break;
313 case 'c': k = ConversionSpecifier::cArg; break;
314 case 'd': k = ConversionSpecifier::dArg; break;
315 case 'e': k = ConversionSpecifier::eArg; break;
316 case 'f': k = ConversionSpecifier::fArg; break;
317 case 'g': k = ConversionSpecifier::gArg; break;
318 case 'i': k = ConversionSpecifier::iArg; break;
319 case 'n':
320 // Not handled, but reserved in OpenCL.
321 if (!LO.OpenCL)
323 break;
324 case 'o': k = ConversionSpecifier::oArg; break;
325 case 'p': k = ConversionSpecifier::pArg; break;
326 case 's': k = ConversionSpecifier::sArg; break;
327 case 'u': k = ConversionSpecifier::uArg; break;
328 case 'x': k = ConversionSpecifier::xArg; break;
329 // C23.
330 case 'b':
331 if (isFreeBSDKPrintf)
332 k = ConversionSpecifier::FreeBSDbArg; // int followed by char *
333 else
335 break;
336 case 'B': k = ConversionSpecifier::BArg; break;
337 // POSIX specific.
338 case 'C': k = ConversionSpecifier::CArg; break;
339 case 'S': k = ConversionSpecifier::SArg; break;
340 // Apple extension for os_log
341 case 'P':
343 break;
344 // Objective-C.
345 case '@': k = ConversionSpecifier::ObjCObjArg; break;
346 // Glibc specific.
347 case 'm': k = ConversionSpecifier::PrintErrno; break;
348 case 'r':
349 if (isFreeBSDKPrintf)
351 else if (LO.FixedPoint)
353 break;
354 case 'y':
355 if (isFreeBSDKPrintf)
357 break;
358 // Apple-specific.
359 case 'D':
360 if (isFreeBSDKPrintf)
361 k = ConversionSpecifier::FreeBSDDArg; // void * followed by char *
362 else if (Target.getTriple().isOSDarwin())
364 break;
365 case 'O':
366 if (Target.getTriple().isOSDarwin())
368 break;
369 case 'U':
370 if (Target.getTriple().isOSDarwin())
372 break;
373 // MS specific.
374 case 'Z':
375 if (Target.getTriple().isOSMSVCRT())
377 break;
378 // ISO/IEC TR 18037 (fixed-point) specific.
379 // NOTE: 'r' is handled up above since FreeBSD also supports %r.
380 case 'k':
381 if (LO.FixedPoint)
383 break;
384 case 'K':
385 if (LO.FixedPoint)
387 break;
388 case 'R':
389 if (LO.FixedPoint)
391 break;
392 }
393
394 // Check to see if we used the Objective-C modifier flags with
395 // a conversion specifier other than '@'.
398 ObjCModifierFlagsStart) {
399 H.HandleObjCFlagsWithNonObjCConversion(ObjCModifierFlagsStart,
400 ObjCModifierFlagsEnd + 1,
401 conversionPosition);
402 return true;
403 }
404
405 PrintfConversionSpecifier CS(conversionPosition, k);
406 FS.setConversionSpecifier(CS);
407 if (CS.consumesDataArgument() && !FS.usesPositionalArg())
408 FS.setArgIndex(argIndex++);
409 // FreeBSD kernel specific.
412 argIndex++;
413
415 unsigned Len = I - Start;
416 if (ParseUTF8InvalidSpecifier(Start, E, Len)) {
417 CS.setEndScanList(Start + Len);
418 FS.setConversionSpecifier(CS);
419 }
420 // Assume the conversion takes one argument.
421 return !H.HandleInvalidPrintfConversionSpecifier(FS, Start, Len);
422 }
423 return PrintfSpecifierResult(Start, FS);
424}
425
427 const char *I,
428 const char *E,
429 const LangOptions &LO,
430 const TargetInfo &Target,
431 bool isFreeBSDKPrintf) {
432
433 unsigned argIndex = 0;
434
435 // Keep looking for a format specifier until we have exhausted the string.
436 while (I != E) {
437 const PrintfSpecifierResult &FSR = ParsePrintfSpecifier(H, I, E, argIndex,
438 LO, Target, true,
439 isFreeBSDKPrintf);
440 // Did a fail-stop error of any kind occur when parsing the specifier?
441 // If so, don't do any more processing.
442 if (FSR.shouldStop())
443 return true;
444 // Did we exhaust the string or encounter an error that
445 // we can recover from?
446 if (!FSR.hasValue())
447 continue;
448 // We have a format specifier. Pass it to the callback.
449 if (!H.HandlePrintfSpecifier(FSR.getValue(), FSR.getStart(),
450 I - FSR.getStart(), Target))
451 return true;
452 }
453 assert(I == E && "Format string not exhausted");
454 return false;
455}
456
458 const char *E,
459 const LangOptions &LO,
460 const TargetInfo &Target) {
461
462 unsigned argIndex = 0;
463
464 // Keep looking for a %s format specifier until we have exhausted the string.
466 while (I != E) {
467 const PrintfSpecifierResult &FSR = ParsePrintfSpecifier(H, I, E, argIndex,
468 LO, Target, false,
469 false);
470 // Did a fail-stop error of any kind occur when parsing the specifier?
471 // If so, don't do any more processing.
472 if (FSR.shouldStop())
473 return false;
474 // Did we exhaust the string or encounter an error that
475 // we can recover from?
476 if (!FSR.hasValue())
477 continue;
479 // Return true if this a %s format specifier.
480 if (FS.getConversionSpecifier().getKind() == ConversionSpecifier::Kind::sArg)
481 return true;
482 }
483 return false;
484}
485
487 const char *Begin, const char *End, const LangOptions &LO,
488 const TargetInfo &Target) {
489 unsigned ArgIndex = 0;
490 // Keep looking for a formatting specifier until we have exhausted the string.
492 while (Begin != End) {
493 const PrintfSpecifierResult &FSR =
494 ParsePrintfSpecifier(H, Begin, End, ArgIndex, LO, Target, false, false);
495 if (FSR.shouldStop())
496 break;
497 if (FSR.hasValue())
498 return true;
499 }
500 return false;
501}
502
503//===----------------------------------------------------------------------===//
504// Methods on PrintfSpecifier.
505//===----------------------------------------------------------------------===//
506
507ArgType PrintfSpecifier::getScalarArgType(ASTContext &Ctx,
508 bool IsObjCLiteral) const {
509 if (CS.getKind() == ConversionSpecifier::cArg)
510 switch (LM.getKind()) {
512 return Ctx.IntTy;
515 return ArgType(ArgType::WIntTy, "wint_t");
517 if (Ctx.getTargetInfo().getTriple().isOSMSVCRT())
518 return Ctx.IntTy;
519 [[fallthrough]];
520 default:
521 return ArgType::Invalid();
522 }
523
524 if (CS.isIntArg())
525 switch (LM.getKind()) {
527 // GNU extension.
528 return Ctx.LongLongTy;
531 return Ctx.IntTy;
533 return ArgType(Ctx.IntTy, "__int32");
535 return ArgType::AnyCharTy;
536 case LengthModifier::AsShort: return Ctx.ShortTy;
537 case LengthModifier::AsLong: return Ctx.LongTy;
540 return Ctx.LongLongTy;
542 return ArgType(Ctx.LongLongTy, "__int64");
544 return ArgType(Ctx.getIntMaxType(), "intmax_t");
546 return ArgType::makeSizeT(ArgType(Ctx.getSignedSizeType(), "ssize_t"));
548 return Ctx.getTargetInfo().getTriple().isArch64Bit()
549 ? ArgType(Ctx.LongLongTy, "__int64")
550 : ArgType(Ctx.IntTy, "__int32");
553 ArgType(Ctx.getPointerDiffType(), "ptrdiff_t"));
557 return ArgType::Invalid();
558 }
559
560 if (CS.isUIntArg())
561 switch (LM.getKind()) {
563 // GNU extension.
564 return Ctx.UnsignedLongLongTy;
567 return Ctx.UnsignedIntTy;
569 return ArgType(Ctx.UnsignedIntTy, "unsigned __int32");
570 case LengthModifier::AsChar: return Ctx.UnsignedCharTy;
572 case LengthModifier::AsLong: return Ctx.UnsignedLongTy;
575 return Ctx.UnsignedLongLongTy;
577 return ArgType(Ctx.UnsignedLongLongTy, "unsigned __int64");
579 return ArgType(Ctx.getUIntMaxType(), "uintmax_t");
581 return ArgType::makeSizeT(ArgType(Ctx.getSizeType(), "size_t"));
583 return Ctx.getTargetInfo().getTriple().isArch64Bit()
584 ? ArgType(Ctx.UnsignedLongLongTy, "unsigned __int64")
585 : ArgType(Ctx.UnsignedIntTy, "unsigned __int32");
588 ArgType(Ctx.getUnsignedPointerDiffType(), "unsigned ptrdiff_t"));
592 return ArgType::Invalid();
593 }
594
595 if (CS.isDoubleArg()) {
596 if (!VectorNumElts.isInvalid()) {
597 switch (LM.getKind()) {
599 return Ctx.HalfTy;
601 return Ctx.FloatTy;
603 default:
604 return Ctx.DoubleTy;
605 }
606 }
607
609 return Ctx.LongDoubleTy;
610 return Ctx.DoubleTy;
611 }
612
613 if (CS.getKind() == ConversionSpecifier::nArg) {
614 switch (LM.getKind()) {
616 return ArgType::PtrTo(Ctx.IntTy);
618 return ArgType::PtrTo(Ctx.SignedCharTy);
620 return ArgType::PtrTo(Ctx.ShortTy);
622 return ArgType::PtrTo(Ctx.LongTy);
625 return ArgType::PtrTo(Ctx.LongLongTy);
627 return ArgType::PtrTo(ArgType(Ctx.getIntMaxType(), "intmax_t"));
629 return ArgType::PtrTo(ArgType(Ctx.getSignedSizeType(), "ssize_t"));
631 return ArgType::PtrTo(ArgType(Ctx.getPointerDiffType(), "ptrdiff_t"));
633 return ArgType(); // FIXME: Is this a known extension?
640 return ArgType::Invalid();
642 llvm_unreachable("only used for OpenCL which doesn not handle nArg");
643 }
644 }
645
646 if (CS.isFixedPointArg() && !Ctx.getLangOpts().FixedPoint)
647 return ArgType::Invalid();
648
649 switch (CS.getKind()) {
650 case ConversionSpecifier::sArg:
652 if (IsObjCLiteral)
654 "const unichar *");
655 return ArgType(ArgType::WCStrTy, "wchar_t *");
656 }
658 return ArgType(ArgType::WCStrTy, "wchar_t *");
659 return ArgType::CStrTy;
660 case ConversionSpecifier::SArg:
661 if (IsObjCLiteral)
663 "const unichar *");
664 if (Ctx.getTargetInfo().getTriple().isOSMSVCRT() &&
666 return ArgType::CStrTy;
667 return ArgType(ArgType::WCStrTy, "wchar_t *");
668 case ConversionSpecifier::CArg:
669 if (IsObjCLiteral)
670 return ArgType(Ctx.UnsignedShortTy, "unichar");
671 if (Ctx.getTargetInfo().getTriple().isOSMSVCRT() &&
673 return Ctx.IntTy;
674 return ArgType(Ctx.WideCharTy, "wchar_t");
675 case ConversionSpecifier::pArg:
676 case ConversionSpecifier::PArg:
677 return ArgType::CPointerTy;
678 case ConversionSpecifier::ObjCObjArg:
680 case ConversionSpecifier::kArg:
681 switch (LM.getKind()) {
683 return Ctx.AccumTy;
685 return Ctx.ShortAccumTy;
687 return Ctx.LongAccumTy;
688 default:
689 return ArgType::Invalid();
690 }
691 case ConversionSpecifier::KArg:
692 switch (LM.getKind()) {
694 return Ctx.UnsignedAccumTy;
696 return Ctx.UnsignedShortAccumTy;
698 return Ctx.UnsignedLongAccumTy;
699 default:
700 return ArgType::Invalid();
701 }
702 case ConversionSpecifier::rArg:
703 switch (LM.getKind()) {
705 return Ctx.FractTy;
707 return Ctx.ShortFractTy;
709 return Ctx.LongFractTy;
710 default:
711 return ArgType::Invalid();
712 }
713 case ConversionSpecifier::RArg:
714 switch (LM.getKind()) {
716 return Ctx.UnsignedFractTy;
718 return Ctx.UnsignedShortFractTy;
720 return Ctx.UnsignedLongFractTy;
721 default:
722 return ArgType::Invalid();
723 }
724 default:
725 break;
726 }
727
728 // FIXME: Handle other cases.
729 return ArgType();
730}
731
732
734 bool IsObjCLiteral) const {
736
738 return ArgType::Invalid();
739
740 ArgType ScalarTy = getScalarArgType(Ctx, IsObjCLiteral);
741 if (!ScalarTy.isValid() || VectorNumElts.isInvalid())
742 return ScalarTy;
743
744 return ScalarTy.makeVectorType(Ctx, VectorNumElts.getConstantAmount());
745}
746
748 ASTContext &Ctx, bool IsObjCLiteral) {
749 // %n is different from other conversion specifiers; don't try to fix it.
750 if (CS.getKind() == ConversionSpecifier::nArg)
751 return false;
752
753 // Handle Objective-C objects first. Note that while the '%@' specifier will
754 // not warn for structure pointer or void pointer arguments (because that's
755 // how CoreFoundation objects are implemented), we only show a fixit for '%@'
756 // if we know it's an object (block, id, class, or __attribute__((NSObject))).
757 if (QT->isObjCRetainableType()) {
758 if (!IsObjCLiteral)
759 return false;
760
761 CS.setKind(ConversionSpecifier::ObjCObjArg);
762
763 // Disable irrelevant flags
764 HasThousandsGrouping = false;
765 HasPlusPrefix = false;
766 HasSpacePrefix = false;
767 HasAlternativeForm = false;
768 HasLeadingZeroes = false;
771
772 return true;
773 }
774
775 // Handle strings next (char *, wchar_t *)
776 if (QT->isPointerType() && (QT->getPointeeType()->isAnyCharacterType())) {
777 CS.setKind(ConversionSpecifier::sArg);
778
779 // Disable irrelevant flags
780 HasAlternativeForm = false;
781 HasLeadingZeroes = false;
782
783 // Set the long length modifier for wide characters
784 if (QT->getPointeeType()->isWideCharType())
786 else
788
789 return true;
790 }
791
792 // If it's an enum, get its underlying type.
793 if (const EnumType *ETy = QT->getAs<EnumType>())
794 QT = ETy->getDecl()->getIntegerType();
795
796 const BuiltinType *BT = QT->getAs<BuiltinType>();
797 if (!BT) {
798 const VectorType *VT = QT->getAs<VectorType>();
799 if (VT) {
800 QT = VT->getElementType();
801 BT = QT->getAs<BuiltinType>();
803 }
804 }
805
806 // We can only work with builtin types.
807 if (!BT)
808 return false;
809
810 // Set length modifier
811 switch (BT->getKind()) {
812 case BuiltinType::Bool:
813 case BuiltinType::WChar_U:
814 case BuiltinType::WChar_S:
815 case BuiltinType::Char8: // FIXME: Treat like 'char'?
816 case BuiltinType::Char16:
817 case BuiltinType::Char32:
818 case BuiltinType::UInt128:
819 case BuiltinType::Int128:
820 case BuiltinType::Half:
821 case BuiltinType::BFloat16:
822 case BuiltinType::Float16:
823 case BuiltinType::Float128:
824 case BuiltinType::Ibm128:
825 case BuiltinType::ShortAccum:
826 case BuiltinType::Accum:
827 case BuiltinType::LongAccum:
828 case BuiltinType::UShortAccum:
829 case BuiltinType::UAccum:
830 case BuiltinType::ULongAccum:
831 case BuiltinType::ShortFract:
832 case BuiltinType::Fract:
833 case BuiltinType::LongFract:
834 case BuiltinType::UShortFract:
835 case BuiltinType::UFract:
836 case BuiltinType::ULongFract:
837 case BuiltinType::SatShortAccum:
838 case BuiltinType::SatAccum:
839 case BuiltinType::SatLongAccum:
840 case BuiltinType::SatUShortAccum:
841 case BuiltinType::SatUAccum:
842 case BuiltinType::SatULongAccum:
843 case BuiltinType::SatShortFract:
844 case BuiltinType::SatFract:
845 case BuiltinType::SatLongFract:
846 case BuiltinType::SatUShortFract:
847 case BuiltinType::SatUFract:
848 case BuiltinType::SatULongFract:
849 // Various types which are non-trivial to correct.
850 return false;
851
852#define IMAGE_TYPE(ImgType, Id, SingletonId, Access, Suffix) \
853 case BuiltinType::Id:
854#include "clang/Basic/OpenCLImageTypes.def"
855#define EXT_OPAQUE_TYPE(ExtType, Id, Ext) \
856 case BuiltinType::Id:
857#include "clang/Basic/OpenCLExtensionTypes.def"
858#define SVE_TYPE(Name, Id, SingletonId) \
859 case BuiltinType::Id:
860#include "clang/Basic/AArch64SVEACLETypes.def"
861#define PPC_VECTOR_TYPE(Name, Id, Size) \
862 case BuiltinType::Id:
863#include "clang/Basic/PPCTypes.def"
864#define RVV_TYPE(Name, Id, SingletonId) case BuiltinType::Id:
865#include "clang/Basic/RISCVVTypes.def"
866#define WASM_TYPE(Name, Id, SingletonId) case BuiltinType::Id:
867#include "clang/Basic/WebAssemblyReferenceTypes.def"
868#define AMDGPU_TYPE(Name, Id, SingletonId) case BuiltinType::Id:
869#include "clang/Basic/AMDGPUTypes.def"
870#define HLSL_INTANGIBLE_TYPE(Name, Id, SingletonId) case BuiltinType::Id:
871#include "clang/Basic/HLSLIntangibleTypes.def"
872#define SIGNED_TYPE(Id, SingletonId)
873#define UNSIGNED_TYPE(Id, SingletonId)
874#define FLOATING_TYPE(Id, SingletonId)
875#define BUILTIN_TYPE(Id, SingletonId) \
876 case BuiltinType::Id:
877#include "clang/AST/BuiltinTypes.def"
878 // Misc other stuff which doesn't make sense here.
879 return false;
880
881 case BuiltinType::UInt:
882 case BuiltinType::Int:
883 case BuiltinType::Float:
886 break;
887 case BuiltinType::Double:
890 break;
891 case BuiltinType::Char_U:
892 case BuiltinType::UChar:
893 case BuiltinType::Char_S:
894 case BuiltinType::SChar:
896 break;
897
898 case BuiltinType::Short:
899 case BuiltinType::UShort:
901 break;
902
903 case BuiltinType::Long:
904 case BuiltinType::ULong:
906 break;
907
908 case BuiltinType::LongLong:
909 case BuiltinType::ULongLong:
911 break;
912
913 case BuiltinType::LongDouble:
915 break;
916 }
917
918 // Handle size_t, ptrdiff_t, etc. that have dedicated length modifiers in C99.
919 if (LangOpt.C99 || LangOpt.CPlusPlus11)
921
922 // If fixing the length modifier was enough, we might be done.
923 if (hasValidLengthModifier(Ctx.getTargetInfo(), LangOpt)) {
924 // If we're going to offer a fix anyway, make sure the sign matches.
925 switch (CS.getKind()) {
926 case ConversionSpecifier::uArg:
927 case ConversionSpecifier::UArg:
928 if (QT->isSignedIntegerType())
930 break;
931 case ConversionSpecifier::dArg:
932 case ConversionSpecifier::DArg:
933 case ConversionSpecifier::iArg:
934 if (QT->isUnsignedIntegerType() && !HasPlusPrefix)
936 break;
937 default:
938 // Other specifiers do not have signed/unsigned variants.
939 break;
940 }
941
942 const analyze_printf::ArgType &ATR = getArgType(Ctx, IsObjCLiteral);
943 if (ATR.isValid() && ATR.matchesType(Ctx, QT))
944 return true;
945 }
946
947 // Set conversion specifier and disable any flags which do not apply to it.
948 // Let typedefs to char fall through to int, as %c is silly for uint8_t.
949 if (!QT->getAs<TypedefType>() && QT->isCharType()) {
950 CS.setKind(ConversionSpecifier::cArg);
953 HasAlternativeForm = false;
954 HasLeadingZeroes = false;
955 HasPlusPrefix = false;
956 }
957 // Test for Floating type first as LongDouble can pass isUnsignedIntegerType
958 else if (QT->isRealFloatingType()) {
959 CS.setKind(ConversionSpecifier::fArg);
960 } else if (QT->isSignedIntegerType()) {
961 CS.setKind(ConversionSpecifier::dArg);
962 HasAlternativeForm = false;
963 } else if (QT->isUnsignedIntegerType()) {
964 CS.setKind(ConversionSpecifier::uArg);
965 HasAlternativeForm = false;
966 HasPlusPrefix = false;
967 } else {
968 llvm_unreachable("Unexpected type");
969 }
970
971 return true;
972}
973
974void PrintfSpecifier::toString(raw_ostream &os) const {
975 // Whilst some features have no defined order, we are using the order
976 // appearing in the C99 standard (ISO/IEC 9899:1999 (E) 7.19.6.1)
977 os << "%";
978
979 // Positional args
980 if (usesPositionalArg()) {
981 os << getPositionalArgIndex() << "$";
982 }
983
984 // Conversion flags
985 if (IsLeftJustified) os << "-";
986 if (HasPlusPrefix) os << "+";
987 if (HasSpacePrefix) os << " ";
988 if (HasAlternativeForm) os << "#";
989 if (HasLeadingZeroes) os << "0";
990
991 // Minimum field width
993 // Precision
994 Precision.toString(os);
995
996 // Vector modifier
998 os << 'v' << VectorNumElts.getConstantAmount();
999
1000 // Length modifier
1001 os << LM.toString();
1002 // Conversion specifier
1003 os << CS.toString();
1004}
1005
1007 if (!HasPlusPrefix)
1008 return true;
1009
1010 // The plus prefix only makes sense for signed conversions
1011 switch (CS.getKind()) {
1012 case ConversionSpecifier::dArg:
1013 case ConversionSpecifier::DArg:
1014 case ConversionSpecifier::iArg:
1015 case ConversionSpecifier::fArg:
1016 case ConversionSpecifier::FArg:
1017 case ConversionSpecifier::eArg:
1018 case ConversionSpecifier::EArg:
1019 case ConversionSpecifier::gArg:
1020 case ConversionSpecifier::GArg:
1021 case ConversionSpecifier::aArg:
1022 case ConversionSpecifier::AArg:
1023 case ConversionSpecifier::FreeBSDrArg:
1024 case ConversionSpecifier::FreeBSDyArg:
1025 case ConversionSpecifier::rArg:
1026 case ConversionSpecifier::kArg:
1027 return true;
1028
1029 default:
1030 return false;
1031 }
1032}
1033
1035 if (!HasAlternativeForm)
1036 return true;
1037
1038 // Alternate form flag only valid with the bBoxXaAeEfFgGrRkK conversions
1039 switch (CS.getKind()) {
1040 case ConversionSpecifier::bArg:
1041 case ConversionSpecifier::BArg:
1042 case ConversionSpecifier::oArg:
1043 case ConversionSpecifier::OArg:
1044 case ConversionSpecifier::xArg:
1045 case ConversionSpecifier::XArg:
1046 case ConversionSpecifier::aArg:
1047 case ConversionSpecifier::AArg:
1048 case ConversionSpecifier::eArg:
1049 case ConversionSpecifier::EArg:
1050 case ConversionSpecifier::fArg:
1051 case ConversionSpecifier::FArg:
1052 case ConversionSpecifier::gArg:
1053 case ConversionSpecifier::GArg:
1054 case ConversionSpecifier::FreeBSDrArg:
1055 case ConversionSpecifier::FreeBSDyArg:
1056 case ConversionSpecifier::rArg:
1057 case ConversionSpecifier::RArg:
1058 case ConversionSpecifier::kArg:
1059 case ConversionSpecifier::KArg:
1060 return true;
1061
1062 default:
1063 return false;
1064 }
1065}
1066
1068 if (!HasLeadingZeroes)
1069 return true;
1070
1071 // Leading zeroes flag only valid with the bBdiouxXaAeEfFgGrRkK conversions
1072 switch (CS.getKind()) {
1073 case ConversionSpecifier::bArg:
1074 case ConversionSpecifier::BArg:
1075 case ConversionSpecifier::dArg:
1076 case ConversionSpecifier::DArg:
1077 case ConversionSpecifier::iArg:
1078 case ConversionSpecifier::oArg:
1079 case ConversionSpecifier::OArg:
1080 case ConversionSpecifier::uArg:
1081 case ConversionSpecifier::UArg:
1082 case ConversionSpecifier::xArg:
1083 case ConversionSpecifier::XArg:
1084 case ConversionSpecifier::aArg:
1085 case ConversionSpecifier::AArg:
1086 case ConversionSpecifier::eArg:
1087 case ConversionSpecifier::EArg:
1088 case ConversionSpecifier::fArg:
1089 case ConversionSpecifier::FArg:
1090 case ConversionSpecifier::gArg:
1091 case ConversionSpecifier::GArg:
1092 case ConversionSpecifier::FreeBSDrArg:
1093 case ConversionSpecifier::FreeBSDyArg:
1094 case ConversionSpecifier::rArg:
1095 case ConversionSpecifier::RArg:
1096 case ConversionSpecifier::kArg:
1097 case ConversionSpecifier::KArg:
1098 return true;
1099
1100 default:
1101 return false;
1102 }
1103}
1104
1106 if (!HasSpacePrefix)
1107 return true;
1108
1109 // The space prefix only makes sense for signed conversions
1110 switch (CS.getKind()) {
1111 case ConversionSpecifier::dArg:
1112 case ConversionSpecifier::DArg:
1113 case ConversionSpecifier::iArg:
1114 case ConversionSpecifier::fArg:
1115 case ConversionSpecifier::FArg:
1116 case ConversionSpecifier::eArg:
1117 case ConversionSpecifier::EArg:
1118 case ConversionSpecifier::gArg:
1119 case ConversionSpecifier::GArg:
1120 case ConversionSpecifier::aArg:
1121 case ConversionSpecifier::AArg:
1122 case ConversionSpecifier::FreeBSDrArg:
1123 case ConversionSpecifier::FreeBSDyArg:
1124 case ConversionSpecifier::rArg:
1125 case ConversionSpecifier::kArg:
1126 return true;
1127
1128 default:
1129 return false;
1130 }
1131}
1132
1134 if (!IsLeftJustified)
1135 return true;
1136
1137 // The left justified flag is valid for all conversions except n
1138 switch (CS.getKind()) {
1139 case ConversionSpecifier::nArg:
1140 return false;
1141
1142 default:
1143 return true;
1144 }
1145}
1146
1148 if (!HasThousandsGrouping)
1149 return true;
1150
1151 switch (CS.getKind()) {
1152 case ConversionSpecifier::dArg:
1153 case ConversionSpecifier::DArg:
1154 case ConversionSpecifier::iArg:
1155 case ConversionSpecifier::uArg:
1156 case ConversionSpecifier::UArg:
1157 case ConversionSpecifier::fArg:
1158 case ConversionSpecifier::FArg:
1159 case ConversionSpecifier::gArg:
1160 case ConversionSpecifier::GArg:
1161 return true;
1162 default:
1163 return false;
1164 }
1165}
1166
1169 return true;
1170
1171 // Precision is only valid with the bBdiouxXaAeEfFgGsPrRkK conversions
1172 switch (CS.getKind()) {
1173 case ConversionSpecifier::bArg:
1174 case ConversionSpecifier::BArg:
1175 case ConversionSpecifier::dArg:
1176 case ConversionSpecifier::DArg:
1177 case ConversionSpecifier::iArg:
1178 case ConversionSpecifier::oArg:
1179 case ConversionSpecifier::OArg:
1180 case ConversionSpecifier::uArg:
1181 case ConversionSpecifier::UArg:
1182 case ConversionSpecifier::xArg:
1183 case ConversionSpecifier::XArg:
1184 case ConversionSpecifier::aArg:
1185 case ConversionSpecifier::AArg:
1186 case ConversionSpecifier::eArg:
1187 case ConversionSpecifier::EArg:
1188 case ConversionSpecifier::fArg:
1189 case ConversionSpecifier::FArg:
1190 case ConversionSpecifier::gArg:
1191 case ConversionSpecifier::GArg:
1192 case ConversionSpecifier::sArg:
1193 case ConversionSpecifier::FreeBSDrArg:
1194 case ConversionSpecifier::FreeBSDyArg:
1195 case ConversionSpecifier::PArg:
1196 case ConversionSpecifier::rArg:
1197 case ConversionSpecifier::RArg:
1198 case ConversionSpecifier::kArg:
1199 case ConversionSpecifier::KArg:
1200 return true;
1201
1202 default:
1203 return false;
1204 }
1205}
1208 return true;
1209
1210 // The field width is valid for all conversions except n
1211 switch (CS.getKind()) {
1212 case ConversionSpecifier::nArg:
1213 return false;
1214
1215 default:
1216 return true;
1217 }
1218}
Expr * E
llvm::MachO::Target Target
Definition: MachO.h:51
clang::analyze_format_string::SpecifierResult< PrintfSpecifier > PrintfSpecifierResult
static bool ParsePrecision(FormatStringHandler &H, PrintfSpecifier &FS, const char *Start, const char *&Beg, const char *E, unsigned *argIndex)
static PrintfSpecifierResult ParsePrintfSpecifier(FormatStringHandler &H, const char *&Beg, const char *E, unsigned &argIndex, const LangOptions &LO, const TargetInfo &Target, bool Warn, bool isFreeBSDKPrintf)
static bool ParseObjCFlags(FormatStringHandler &H, PrintfSpecifier &FS, const char *FlagBeg, const char *E, bool Warn)
SourceLocation Begin
__device__ __2f16 float c
Holds long-lived AST nodes (such as types and decls) that can be referred to throughout the semantic ...
Definition: ASTContext.h:187
CanQualType AccumTy
Definition: ASTContext.h:1132
CanQualType LongTy
Definition: ASTContext.h:1128
CanQualType UnsignedShortAccumTy
Definition: ASTContext.h:1134
QualType getUnsignedPointerDiffType() const
Return the unique unsigned counterpart of "ptrdiff_t" integer type.
CanQualType ShortAccumTy
Definition: ASTContext.h:1132
CanQualType FloatTy
Definition: ASTContext.h:1131
CanQualType DoubleTy
Definition: ASTContext.h:1131
CanQualType getIntMaxType() const
Return the unique type for "intmax_t" (C99 7.18.1.5), defined in <stdint.h>.
CanQualType LongDoubleTy
Definition: ASTContext.h:1131
QualType getPointerType(QualType T) const
Return the uniqued reference to the type for a pointer to the specified type.
CanQualType UnsignedLongFractTy
Definition: ASTContext.h:1136
CanQualType WideCharTy
Definition: ASTContext.h:1123
const LangOptions & getLangOpts() const
Definition: ASTContext.h:797
QualType getPointerDiffType() const
Return the unique type for "ptrdiff_t" (C99 7.17) defined in <stddef.h>.
CanQualType UnsignedFractTy
Definition: ASTContext.h:1136
CanQualType UnsignedLongTy
Definition: ASTContext.h:1129
CanQualType UnsignedLongAccumTy
Definition: ASTContext.h:1134
CanQualType getSizeType() const
Return the unique type for "size_t" (C99 7.17), defined in <stddef.h>.
CanQualType ShortFractTy
Definition: ASTContext.h:1135
CanQualType IntTy
Definition: ASTContext.h:1128
CanQualType SignedCharTy
Definition: ASTContext.h:1128
CanQualType UnsignedCharTy
Definition: ASTContext.h:1129
CanQualType UnsignedShortFractTy
Definition: ASTContext.h:1136
CanQualType UnsignedIntTy
Definition: ASTContext.h:1129
CanQualType UnsignedLongLongTy
Definition: ASTContext.h:1130
CanQualType UnsignedShortTy
Definition: ASTContext.h:1129
CanQualType ShortTy
Definition: ASTContext.h:1128
CanQualType FractTy
Definition: ASTContext.h:1135
CanQualType LongAccumTy
Definition: ASTContext.h:1133
const TargetInfo & getTargetInfo() const
Definition: ASTContext.h:779
CanQualType LongFractTy
Definition: ASTContext.h:1135
CanQualType LongLongTy
Definition: ASTContext.h:1128
CanQualType getSignedSizeType() const
Return the unique signed counterpart of the integer type corresponding to size_t.
CanQualType getUIntMaxType() const
Return the unique type for "uintmax_t" (C99 7.18.1.5), defined in <stdint.h>.
CanQualType HalfTy
Definition: ASTContext.h:1143
CanQualType UnsignedAccumTy
Definition: ASTContext.h:1134
This class is used for builtin types like 'int'.
Definition: Type.h:3028
Kind getKind() const
Definition: Type.h:3076
QualType withConst() const
Retrieves a version of this type with const applied.
A helper class that allows the use of isa/cast/dyncast to detect TagType objects of enums.
Definition: Type.h:5996
Keeps track of the various options that can be enabled, which controls the dialect of C or C++ that i...
Definition: LangOptions.h:476
A (possibly-)qualified type.
Definition: Type.h:941
Exposes information about the current target.
Definition: TargetInfo.h:218
const llvm::Triple & getTriple() const
Returns the target triple of the primary target.
Definition: TargetInfo.h:1256
bool isSignedIntegerType() const
Return true if this is an integer type that is signed, according to C99 6.2.5p4 [char,...
Definition: Type.cpp:2146
bool isCharType() const
Definition: Type.cpp:2089
bool isPointerType() const
Definition: Type.h:8008
QualType getPointeeType() const
If this is a pointer, ObjC object pointer, or block pointer, this returns the respective pointee.
Definition: Type.cpp:705
bool isAnyCharacterType() const
Determine whether this type is any of the built-in character types.
Definition: Type.cpp:2125
bool isRealFloatingType() const
Floating point categories.
Definition: Type.cpp:2266
bool isWideCharType() const
Definition: Type.cpp:2098
bool isUnsignedIntegerType() const
Return true if this is an integer type that is unsigned, according to C99 6.2.5p6 [which returns true...
Definition: Type.cpp:2196
const T * getAs() const
Member-template getAs<specific type>'.
Definition: Type.h:8545
bool isObjCRetainableType() const
Definition: Type.cpp:4950
Represents a GCC generic vector type.
Definition: Type.h:4026
unsigned getNumElements() const
Definition: Type.h:4041
QualType getElementType() const
Definition: Type.h:4040
static ArgType makePtrdiffT(const ArgType &A)
Create an ArgType which corresponds to the ptrdiff_t/unsigned ptrdiff_t type.
Definition: FormatString.h:334
static ArgType PtrTo(const ArgType &A)
Create an ArgType which corresponds to the type pointer to A.
Definition: FormatString.h:318
ArgType makeVectorType(ASTContext &C, unsigned NumElts) const
static ArgType makeSizeT(const ArgType &A)
Create an ArgType which corresponds to the size_t/ssize_t type.
Definition: FormatString.h:326
MatchKind matchesType(ASTContext &C, QualType argTy) const
static bool namedTypeToLengthModifier(QualType QT, LengthModifier &LM)
For a TypedefType QT, if it is a named integer type such as size_t, assign the appropriate value to L...
bool hasValidLengthModifier(const TargetInfo &Target, const LangOptions &LO) const
virtual bool HandleInvalidPrintfConversionSpecifier(const analyze_printf::PrintfSpecifier &FS, const char *startSpecifier, unsigned specifierLen)
Definition: FormatString.h:744
virtual void HandleObjCFlagsWithNonObjCConversion(const char *flagsStart, const char *flagsEnd, const char *conversionPosition)
Definition: FormatString.h:739
virtual void HandleInvalidObjCModifierFlag(const char *startFlag, unsigned flagLen)
Definition: FormatString.h:736
virtual void HandleNullChar(const char *nullCharacter)
Definition: FormatString.h:721
virtual void handleInvalidMaskType(StringRef MaskType)
Handle mask types whose sizes are not between one and eight bytes.
Definition: FormatString.h:759
virtual bool HandlePrintfSpecifier(const analyze_printf::PrintfSpecifier &FS, const char *startSpecifier, unsigned specifierLen, const TargetInfo &Target)
Definition: FormatString.h:751
virtual void HandleEmptyObjCModifierFlag(const char *startFlags, unsigned flagsLen)
Definition: FormatString.h:733
virtual void HandleIncompleteSpecifier(const char *startSpecifier, unsigned specifierLen)
Definition: FormatString.h:730
Represents the length modifier in a format string in scanf/printf.
Definition: FormatString.h:65
bool fixType(QualType QT, const LangOptions &LangOpt, ASTContext &Ctx, bool IsObjCLiteral)
Changes the specifier and length according to a QualType, retaining any flags or options.
const PrintfConversionSpecifier & getConversionSpecifier() const
Definition: FormatString.h:584
ArgType getArgType(ASTContext &Ctx, bool IsObjCLiteral) const
Returns the builtin type that a data argument paired with this format specifier should have.
Defines the clang::TargetInfo interface.
Common components of both fprintf and fscanf format strings.
Definition: FormatString.h:30
bool parseFormatStringHasFormattingSpecifiers(const char *Begin, const char *End, const LangOptions &LO, const TargetInfo &Target)
Return true if the given string has at least one formatting specifier.
OptionalAmount ParseNonPositionAmount(const char *&Beg, const char *E, unsigned &argIndex)
bool ParsePrintfString(FormatStringHandler &H, const char *beg, const char *end, const LangOptions &LO, const TargetInfo &Target, bool isFreeBSDKPrintf)
bool ParseFormatStringHasSArg(const char *beg, const char *end, const LangOptions &LO, const TargetInfo &Target)
Pieces specific to fprintf format strings.
Definition: FormatString.h:499
The JSON file list parser is used to communicate input to InstallAPI.