prog:gcc
Différences
Ci-dessous, les différences entre deux révisions de la page.
Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
prog:gcc [2020/02/24 21:03] – [-fdump-lang-class] : mise à jour avec gcc root | prog:gcc [2024/11/12 12:48] (Version actuelle) – Déplacement des sanitizer vers une page dédiée root | ||
---|---|---|---|
Ligne 1: | Ligne 1: | ||
Nightly pour [[https:// | Nightly pour [[https:// | ||
+ | |||
+ | [[https:// | ||
+ | |||
+ | ====Ubuntu==== | ||
+ | |||
+ | * Installation en parallèle | ||
+ | |||
+ | Ubuntu ne fournit pas de méthode 100% automatique. Il faut passer manuellement par '' | ||
+ | |||
+ | <code bash> | ||
+ | sudo update-alternatives --install / | ||
+ | </ | ||
+ | |||
+ | Utiliser pour switcher entre les versions : | ||
+ | |||
+ | <code bash> | ||
+ | sudo update-alternatives --config gcc | ||
+ | </ | ||
=====Diagnostic===== | =====Diagnostic===== | ||
- | ====-fdump-lang-class==== | + | ====Information et taille |
- | Taille | + | |
<code cpp> | <code cpp> | ||
Ligne 53: | Ligne 70: | ||
</ | </ | ||
- | ====gprof==== | + | * clang : '' |
- | Génère un graphe de l' | + | |
- | [[https:// | + | Ci-dessous, on affiche que le contenu des '' |
- | =====Commun avec clang===== | + | |
- | ====Sanitizer==== | + | |
- | Il existe | + | |
- | ===address=== | + | |
- | Il détecte des erreurs de type global-buffer-overflow, | + | |
- | [[https:// | + | |
- | * global-buffer-overflow | + | <code> |
- | <file c main.c> | + | *** Dumping AST Record Layout |
- | int global_array[100] = {-1}; | + | 0 | class VirtualBase |
+ | 0 | | ||
+ | | ||
+ | | ||
- | int main(int argc, char **argv) { | + | *** Dumping AST Record Layout |
- | | + | 0 | class VirtualDerived |
- | } | + | 0 | class VirtualBase (primary base) |
- | </file> | + | 0 | |
+ | 8 | int m_counter | ||
+ | | ||
+ | | nvsize=12, nvalign=8] | ||
+ | </code> | ||
- | | + | |
- | ================================================================= | + | < |
- | | + | Vtable for ' |
- | READ of size 4 at 0x000000740cf4 thread T0 | + | |
- | #0 0x50d9be in main / | + | |
- | #1 0x7f1208faa461 in __libc_start_main / | + | -- (VirtualBase, |
- | #2 0x419709 in _start | + | -- (VirtualDerived, |
- | + | 2 | int VirtualDerived::tick(int) | |
- | 0x000000740cf4 is located 4 bytes to the right of global variable ' | + | |
- | SUMMARY: AddressSanitizer: | + | |
- | | + | |
- | 0x0000800e0140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | + | |
- | 0x0000800e0150: | + | |
- | 0x0000800e0160: | + | |
- | 0x0000800e0170: | + | |
- | 0x0000800e0180: | + | |
- | => | + | |
- | 0x0000800e01a0: | + | |
- | 0x0000800e01b0: | + | |
- | 0x0000800e01c0: | + | |
- | 0x0000800e01d0: | + | |
- | 0x0000800e01e0: | + | |
- | Shadow byte legend | + | |
- | Addressable: | + | |
- | Partially addressable: | + | |
- | Heap left redzone: | + | |
- | Freed heap region: | + | |
- | Stack left redzone: | + | |
- | Stack mid redzone: | + | |
- | Stack right redzone: | + | |
- | Stack after return: | + | |
- | Stack use after scope: | + | |
- | Global redzone: | + | |
- | Global init order: | + | |
- | Poisoned by user: f7 | + | |
- | Container overflow: | + | |
- | Array cookie: | + | |
- | Intra object redzone: | + | |
- | ASan internal: | + | |
- | Left alloca redzone: | + | |
- | Right alloca redzone: | + | |
- | ==2500==ABORTING | + | |
- | [[prog: | + | VTable indices for 'VirtualDerived' |
+ | 0 | int VirtualDerived:: | ||
- | | + | Vtable for ' |
- | <file c main2.cc> | + | |
- | int main(int argc, char **argv) { | + | 1 | VirtualBase RTTI |
- | int *array = new int[100]; | + | -- (VirtualBase, 0) vtable address -- |
- | delete [] array; | + | 2 | int VirtualBase:: |
- | return array[argc]; | + | |
- | } | + | |
- | </ | + | |
- | g++ main2.c -g -fsanitize=address | + | VTable indices for ' |
+ | 0 | int VirtualBase:: | ||
+ | </ | ||
+ | ====gprof==== | ||
+ | Génère un graphe de l' | ||
- | ================================================================= | + | [[https://www.thegeekstuff.com/2012/08/gprof-tutorial/|GPROF Tutorial – How to use Linux GNU GCC Profiling Tool]] {{ :prog:gcc:gprof_tutorial_how_to_use_linux_gnu_gcc_profiling_tool_2020-02-24_3_24_57_pm_.html |Archive du 20/08/2012 le 24/02/2020}} |
- | ==2765==ERROR: | + | |
- | READ of size 4 at 0x614000000044 thread T0 | + | |
- | #0 0x512444 in main / | + | |
- | #1 0x7fd8d0086461 in __libc_start_main / | + | |
- | #2 0x419d29 in _start (/ | + | |
- | + | ||
- | 0x614000000044 is located 4 bytes inside of 400-byte region | + | |
- | freed by thread T0 here: | + | |
- | #0 0x50ef30 in operator delete[](void*) / | + | |
- | #1 0x5123f6 in main /tmp/main2.c:3:3 | + | |
- | #2 0x7fd8d0086461 in __libc_start_main / | + | |
- | #3 0x419d29 in _start (/tmp/ | + | |
- | + | ||
- | previously allocated by thread T0 here: | + | |
- | #0 0x50e1c8 in operator new[](unsigned long) / | + | |
- | #1 0x5123d4 in main / | + | |
- | #2 0x7fd8d0086461 in __libc_start_main / | + | |
- | #3 0x419d29 in _start (/ | + | |
- | + | ||
- | SUMMARY: AddressSanitizer: | + | |
- | Shadow bytes around the buggy address: | + | |
- | 0x0c287fff7fb0: | + | |
- | 0x0c287fff7fc0: | + | |
- | 0x0c287fff7fd0: | + | |
- | 0x0c287fff7fe0: | + | |
- | 0x0c287fff7ff0: | + | |
- | => | + | |
- | 0x0c287fff8010: | + | |
- | 0x0c287fff8020: | + | |
- | 0x0c287fff8030: | + | |
- | 0x0c287fff8040: | + | |
- | 0x0c287fff8050: | + | |
- | [[prog: | + | ====Couverture de code==== |
- | ==2787== Command: ./main2 | + | Options à ajouter à la compilation |
- | ==2787== | + | |
- | ==2787== Invalid read of size 4 | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | ==2787== | + | |
- | * stack-use-after-return | + | Options à ajouter au lieur : '' |
- | <file c main3.c> | + | |
- | int *g; | + | |
- | void LeakLocal() { | + | Puis exécuter le ou les programmes. Attention, pas d' |
- | int local; | + | |
- | g = & | + | |
- | } | + | |
- | int main(){ | + | <code bash> |
- | LeakLocal(); | + | lcov --capture |
- | return *g; | + | lcov --remove build/ |
- | } | + | genhtml |
- | </file> | + | find build/coverage |
- | + | </code> | |
- | gcc main3.c | + | |
- | ASAN_OPTIONS=detect_stack_use_after_return=1 ./main3 | + | |
- | + | ||
- | L' | + | |
- | + | ||
- | ================================================================= | + | |
- | ==2907==ERROR: | + | |
- | READ of size 4 at 0x7f57b2a00020 thread T0 | + | |
- | #0 0x50db24 in main /tmp/ | + | |
- | #1 0x7f57b604d461 in __libc_start_main / | + | |
- | #2 0x419709 in _start (/ | + | |
- | + | ||
- | Address 0x7f57b2a00020 is located in stack of thread T0 at offset 32 in frame | + | |
- | #0 0x50d95f in LeakLocal / | + | |
- | + | ||
- | This frame has 1 object(s): | + | |
- | [32, 36) ' | + | |
- | HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext | + | |
- | (longjmp and C++ exceptions *are* supported) | + | |
- | SUMMARY: AddressSanitizer: | + | |
- | Shadow bytes around the buggy address: | + | |
- | 0x0feb76537fb0: | + | |
- | 0x0feb76537fc0: | + | |
- | 0x0feb76537fd0: | + | |
- | 0x0feb76537fe0: | + | |
- | 0x0feb76537ff0: | + | |
- | => | + | |
- | 0x0feb76538010: | + | |
- | 0x0feb76538020: | + | |
- | 0x0feb76538030: | + | |
- | 0x0feb76538040: | + | |
- | 0x0feb76538050: | + | |
- | + | ||
- | [[prog: | + | |
- | + | ||
- | | + | |
- | + | ||
- | ==2961== Syscall param exit_group(status) contains uninitialised byte(s) | + | |
- | ==2961== | + | |
- | ==2961== | + | |
- | ==2961== | + | |
- | ==2961== | + | |
- | ==2961== | + | |
- | ==2961== | + | |
- | + | ||
- | ===thread=== | + | |
- | <file cpp main4.cc> | + | |
- | #include | + | |
- | + | ||
- | int main() { | + | |
- | int x; | + | |
- | std::thread t([& | + | |
- | x = 43; | + | |
- | t.join(); | + | |
- | + | ||
- | return 0; | + | |
- | } | + | |
- | </file> | + | |
- | + | ||
- | g++ -std=c++11 main4.c -g -o main4 -fsanitize=thread | + | |
- | + | ||
- | <note important> | + | |
- | </ | + | |
- | + | ||
- | ================== | + | |
- | WARNING: ThreadSanitizer: | + | |
- | Write of size 4 at 0x7ffd04d5b144 by thread T1: | + | |
- | #0 operator() /tmp/main4.c:5 (main4+0x000000400d0b) | + | |
- | #1 __invoke_impl< | + | |
- | #2 __invoke< | + | |
- | #3 _M_invoke< | + | |
- | #4 operator() / | + | |
- | #5 _M_run | + | |
- | | + | |
- | + | ||
- | Previous write of size 4 at 0x7ffd04d5b144 by main thread: | + | |
- | #0 main /tmp/main4.c:6 (main4+0x000000400d75) | + | |
- | + | ||
- | Location is stack of main thread. | + | |
- | + | ||
- | Thread T1 (tid=3228, running) created by main thread at: | + | |
- | #0 pthread_create < | + | |
- | | + | |
- | | + | |
- | + | ||
- | SUMMARY: ThreadSanitizer: | + | |
- | ================== | + | |
- | ThreadSanitizer: | + | |
- | + | ||
- | [[prog: | + | |
- | + | ||
- | ===undefined=== | + | |
- | <file c main5.c> | + | |
- | int main(int argc, char **argv) | + | |
- | int t = argc << 16; | + | |
- | return t*t; | + | |
- | } | + | |
- | </file> | + | |
- | + | ||
- | gcc -fsanitize=undefined main5.c -g -o main5 | + | |
- | main6.c:3:11: runtime error: signed integer overflow: 65536 * 65536 cannot be represented in type ' | + | Attention, la version de gcov doit correspondre à celle de gcc. |
- | [[prog: | + | En option, on supprime la date pour qu'un diff simple puisse se faire. |
prog/gcc.1582574581.txt.gz · Dernière modification : 2020/02/24 21:03 de root