You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
116 lines
7.0 KiB
116 lines
7.0 KiB
#ifndef ANALYSIS_ANNOTATIONS_H
|
|
#define ANALYSIS_ANNOTATIONS_H
|
|
|
|
#if _MSC_VER >= 1600 // VS 2010 and above.
|
|
//-----------------------------------------------------------------------------
|
|
// Upgrading important helpful warnings to errors
|
|
//-----------------------------------------------------------------------------
|
|
#pragma warning(error : 4789 ) // warning C4789: destination of memory copy is too small
|
|
|
|
// Suppress some code analysis warnings
|
|
#ifdef _PREFAST_
|
|
// Include the annotation header file.
|
|
#include <sal.h>
|
|
|
|
// /Analyze warnings can only be suppressed when using a compiler that supports them, which VS 2010
|
|
// Professional does not.
|
|
|
|
// We don't care about these warnings because they are bugs that can only occur during resource
|
|
// exhaustion or other unexpected API failure, which we are nowhere near being able to handle.
|
|
#pragma warning(disable : 6308) // warning C6308: 'realloc' might return null pointer: assigning null pointer to 's_ppTestCases', which is passed as an argument to 'realloc', will cause the original memory block to be leaked
|
|
#pragma warning(disable : 6255) // warning C6255: _alloca indicates failure by raising a stack overflow exception. Consider using _malloca instead
|
|
#pragma warning(disable : 6387) // warning C6387: 'argument 1' might be '0': this does not adhere to the specification for the function 'GetProcAddress'
|
|
#pragma warning(disable : 6309) // warning C6309: Argument '1' is null: this does not adhere to function specification of 'GetProcAddress'
|
|
#pragma warning(disable : 6011) // warning C6011: Dereferencing NULL pointer 'm_ppTestCases'
|
|
#pragma warning(disable : 6211) // warning C6211: Leaking memory 'newKeyValue' due to an exception. Consider using a local catch block to clean up memory
|
|
#pragma warning(disable : 6031) // warning C6031: Return value ignored: '_getcwd'
|
|
|
|
// These warnings are because /analyze doesn't like our use of constants, especially things like IsPC()
|
|
#pragma warning(disable : 6326) // warning C6326: Potential comparison of a constant with another constant
|
|
#pragma warning(disable : 6239) // warning C6239: (<non-zero constant> && <expression>) always evaluates to the result of <expression>. Did you intend to use the bitwise-and operator?
|
|
#pragma warning(disable : 6285) // warning C6285: (<non-zero constant> || <non-zero constant>) is always a non-zero constant. Did you intend to use the bitwise-and operator?
|
|
#pragma warning(disable : 6237) // warning C6237: (<zero> && <expression>) is always zero. <expression> is never evaluated and might have side effects
|
|
#pragma warning(disable : 6235) // warning C6235: (<non-zero constant> || <expression>) is always a non-zero constant
|
|
#pragma warning(disable : 6240) // warning C6240: (<expression> && <non-zero constant>) always evaluates to the result of <expression>. Did you intend to use the bitwise-and operator?
|
|
|
|
// These warnings aren't really important:
|
|
#pragma warning(disable : 6323) // warning C6323: Use of arithmetic operator on Boolean type(s)
|
|
|
|
// Miscellaneous other /analyze warnings. We should consider fixing these at some point.
|
|
//#pragma warning(disable : 6204) // warning C6204: Possible buffer overrun in call to 'memcpy': use of unchecked parameter 'src'
|
|
//#pragma warning(disable : 6262) // warning C6262: Function uses '16464' bytes of stack: exceeds /analyze:stacksize'16384'. Consider moving some data to heap
|
|
// This is a serious warning. Don't suppress it.
|
|
//#pragma warning(disable : 6263) // warning C6263: Using _alloca in a loop: this can quickly overflow stack
|
|
// 6328 is also used for passing __int64 to printf when int is expected so we can't suppress it.
|
|
//#pragma warning(disable : 6328) // warning C6328: 'char' passed as parameter '1' when 'unsigned char' is required in call to 'V_isdigit'
|
|
// /analyze doesn't like GCOMPILER_ASSERT's implementation of compile-time asserts
|
|
#pragma warning(disable : 6326) // warning C6326: Potential comparison of a constant with another constant
|
|
#pragma warning(disable : 6335) // warning C6335: Leaking process information handle 'pi.hThread'
|
|
#pragma warning(disable : 6320) // warning C6320: Exception-filter expression is the constant EXCEPTION_EXECUTE_HANDLER. This might mask exceptions that were not intended to be handled
|
|
#pragma warning(disable : 6250) // warning C6250: Calling 'VirtualFree' without the MEM_RELEASE flag might free memory but not address descriptors (VADs). This causes address space leaks
|
|
#pragma warning(disable : 6384) // ientity2_class_h_schema_gen.cpp(76): warning C6384: Dividing sizeof a pointer by another value
|
|
|
|
// For temporarily suppressing warnings -- the warnings are suppressed for the next source line.
|
|
#define ANALYZE_SUPPRESS(wnum) __pragma(warning(suppress: wnum))
|
|
#define ANALYZE_SUPPRESS2(wnum1, wnum2) __pragma(warning(supress: wnum1 wnum2))
|
|
#define ANALYZE_SUPPRESS3(wnum1, wnum2, wnum3) __pragma(warning(suppress: wnum1 wnum2 wnum3))
|
|
#define ANALYZE_SUPPRESS4(wnum1, wnum2, wnum3, wnum4) __pragma(warning(suppress: wnum1 wnum2 wnum3 wnum4))
|
|
|
|
// Tag all printf style format strings with this
|
|
#define PRINTF_FORMAT_STRING _Printf_format_string_
|
|
#define SCANF_FORMAT_STRING _Scanf_format_string_impl_
|
|
// Various macros for specifying the capacity of the buffer pointed
|
|
// to by a function parameter. Variations include in/out/inout,
|
|
// CAP (elements) versus BYTECAP (bytes), and null termination or
|
|
// not (_Z).
|
|
#define IN_Z _In_z_
|
|
#define IN_CAP(x) _In_count_(x)
|
|
#define IN_BYTECAP(x) _In_bytecount_(x)
|
|
#define OUT_Z_CAP(x) _Out_z_cap_(x)
|
|
#define OUT_CAP(x) _Out_cap_(x)
|
|
#define OUT_BYTECAP(x) _Out_bytecap_(x)
|
|
#define OUT_Z_BYTECAP(x) _Out_z_bytecap_(x)
|
|
#define INOUT_BYTECAP(x) _Inout_bytecap_(x)
|
|
#define INOUT_Z_CAP(x) _Inout_z_cap_(x)
|
|
#define INOUT_Z_BYTECAP(x) _Inout_z_bytecap_(x)
|
|
// These macros are use for annotating array reference parameters, typically used in functions
|
|
// such as V_strcpy_safe. Because they are array references the capacity is already known.
|
|
#if _MSC_VER >= 1700
|
|
#define IN_Z_ARRAY _Pre_z_
|
|
#define OUT_Z_ARRAY _Post_z_
|
|
#define INOUT_Z_ARRAY _Prepost_z_
|
|
#else
|
|
#define IN_Z_ARRAY _Deref_pre_z_
|
|
#define OUT_Z_ARRAY _Deref_post_z_
|
|
#define INOUT_Z_ARRAY _Deref_prepost_z_
|
|
#endif // _MSC_VER >= 1700
|
|
// Use the macros above to annotate string functions that fill buffers as shown here,
|
|
// in order to give VS's /analyze more opportunities to find bugs.
|
|
// void V_wcsncpy( OUT_Z_BYTECAP(maxLenInBytes) wchar_t *pDest, wchar_t const *pSrc, int maxLenInBytes );
|
|
// int V_snwprintf( OUT_Z_CAP(maxLenInCharacters) wchar_t *pDest, int maxLenInCharacters, PRINTF_FORMAT_STRING const wchar_t *pFormat, ... );
|
|
|
|
#endif // _PREFAST_
|
|
#endif // _MSC_VER >= 1600 // VS 2010 and above.
|
|
|
|
#ifndef ANALYZE_SUPPRESS
|
|
#define ANALYZE_SUPPRESS(wnum)
|
|
#define ANALYZE_SUPPRESS2(wnum1, wnum2)
|
|
#define ANALYZE_SUPPRESS3(wnum1, wnum2, wnum3)
|
|
#define ANALYZE_SUPPRESS4(wnum1, wnum2, wnum3, wnum4)
|
|
#define PRINTF_FORMAT_STRING
|
|
#define SCANF_FORMAT_STRING
|
|
#define IN_Z
|
|
#define IN_CAP(x)
|
|
#define IN_BYTECAP(x)
|
|
#define OUT_Z_CAP(x)
|
|
#define OUT_CAP(x)
|
|
#define OUT_BYTECAP(x)
|
|
#define OUT_Z_BYTECAP(x)
|
|
#define INOUT_BYTECAP(x)
|
|
#define INOUT_Z_CAP(x)
|
|
#define INOUT_Z_BYTECAP(x)
|
|
#define OUT_Z_ARRAY
|
|
#define INOUT_Z_ARRAY
|
|
#endif
|
|
|
|
#endif // ANALYSIS_ANNOTATIONS_H
|