31 lines
507 B
C
31 lines
507 B
C
|
|
void test() {
|
|
int *p = malloc(1);
|
|
free(p);
|
|
free(p); // warn: attempt to free released memory
|
|
}
|
|
|
|
void test() {
|
|
int *p = malloc(sizeof(int));
|
|
free(p);
|
|
*p = 1; // warn: use after free
|
|
}
|
|
|
|
void test() {
|
|
int *p = malloc(1);
|
|
if (p)
|
|
return; // warn: memory is never released
|
|
}
|
|
|
|
void test() {
|
|
int a[] = { 1 };
|
|
free(a); // warn: argument is not allocated by malloc
|
|
}
|
|
|
|
void test() {
|
|
int *p = malloc(sizeof(char));
|
|
p = p - 1;
|
|
free(p); // warn: argument to free() is offset by -4 bytes
|
|
}
|
|
|