-
Notifications
You must be signed in to change notification settings - Fork 6.1k
8362889: [GCC static analyzer] leak in libstringPlatformChars.c #26415
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
👋 Welcome back mbaesken! A progress list of the required criteria for merging this PR into |
❗ This change is not yet ready to be integrated. |
Webrevs
|
@@ -71,6 +71,8 @@ Java_StringPlatformChars_newString(JNIEnv *env, jclass unused, jbyteArray bytes) | |||
str[len] = '\0'; | |||
(*env)->ReleasePrimitiveArrayCritical(env, bytes, (void*)jbytes, 0); | |||
|
|||
return JNU_NewStringPlatform(env, str); | |||
jstring res = JNU_NewStringPlatform(env, str); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
At line 66: where it returns null, it seem like it should also be freeing str
. (The analyzer didn't catch that?)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It catches that too
/jdk/test/jdk/java/lang/String/nativeEncoding/libstringPlatformChars.c:65:8: warning: leak of 'str' [CWE-401] [-Wanalyzer-malloc-leak]
65 | if (jbytes == NULL) {
and also
/jdk/test/jdk/java/lang/String/nativeEncoding/libstringPlatformChars.c:69:16: warning: dereference of possibly-NULL 'str' [CWE-690] [-Wanalyzer-possible-null-dereference]
69 | str[i] = (char)jbytes[i];
| ~~~~~~~^~~~~~~~~~~~~~~~~
I just overlooked it because a log of a full build with '-fanalyzer' enabled contains quite a lot of output (the event explanations of every finding are rather long).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems better to defer the malloc
until after you know jbytes
is not null; and also check the malloc
result for null.
This is reported by the gcc static analyzer (-fanalyzer); it is just test coding so not very critical but probably should still be adjusted .
Progress
Issue
Reviewing
Using
git
Checkout this PR locally:
$ git fetch https://git.openjdk.org/jdk.git pull/26415/head:pull/26415
$ git checkout pull/26415
Update a local copy of the PR:
$ git checkout pull/26415
$ git pull https://git.openjdk.org/jdk.git pull/26415/head
Using Skara CLI tools
Checkout this PR locally:
$ git pr checkout 26415
View PR using the GUI difftool:
$ git pr show -t 26415
Using diff file
Download this PR as a diff file:
https://git.openjdk.org/jdk/pull/26415.diff
Using Webrev
Link to Webrev Comment