clippy_lints/src/transmuting_null.rs

   1 use crate::consts::{constant_context, Constant};
   2 use crate::utils::{match_qpath, paths, span_lint};
   3 use if_chain::if_chain;
   4 use rustc::hir::{Expr, ExprKind};
   5 use rustc::lint::{in_external_macro, LateContext, LateLintPass, LintArray, LintContext, LintPass};
   6 use rustc::{declare_lint_pass, declare_tool_lint};
   7 use syntax::ast::LitKind;
   8
   9 declare_clippy_lint! {
  10     /// **What it does:** Checks for transmute calls which would receive a null pointer.
  11     ///
  12     /// **Why is this bad?** Transmuting a null pointer is undefined behavior.
  13     ///
  14     /// **Known problems:** Not all cases can be detected at the moment of this writing.
  15     /// For example, variables which hold a null pointer and are then fed to a `transmute`
  16     /// call, aren't detectable yet.
  17     ///
  18     /// **Example:**
  19     /// ```rust
  20     /// let null_ref: &u64 = unsafe { std::mem::transmute(0 as *const u64) };
  21     /// ```
  22     pub TRANSMUTING_NULL,
  23     correctness,
  24     "transmutes from a null pointer to a reference, which is undefined behavior"
  25 }
  26
  27 declare_lint_pass!(TransmutingNull => [TRANSMUTING_NULL]);
  28
  29 const LINT_MSG: &str = "transmuting a known null pointer into a reference.";
  30
  31 impl<'a, 'tcx> LateLintPass<'a, 'tcx> for TransmutingNull {
  32     fn check_expr(&mut self, cx: &LateContext<'a, 'tcx>, expr: &'tcx Expr) {
  33         if in_external_macro(cx.sess(), expr.span) {
  34             return;
  35         }
  36
  37         if_chain! {
  38             if let ExprKind::Call(ref func, ref args) = expr.node;
  39             if let ExprKind::Path(ref path) = func.node;
  40             if match_qpath(path, &paths::STD_MEM_TRANSMUTE);
  41             if args.len() == 1;
  42
  43             then {
  44
  45                 // Catching transmute over constants that resolve to `null`.
  46                 let mut const_eval_context = constant_context(cx, cx.tables);
  47                 if_chain! {
  48                     if let ExprKind::Path(ref _qpath) = args[0].node;
  49                     let x = const_eval_context.expr(&args[0]);
  50                     if let Some(constant) = x;
  51                     if let Constant::RawPtr(ptr_value) = constant;
  52                     if ptr_value == 0;
  53                     then {
  54                         span_lint(
  55                             cx,
  56                             TRANSMUTING_NULL,
  57                             expr.span,
  58                             LINT_MSG)
  59                     }
  60                 }
  61
  62                 // Catching:
  63                 // `std::mem::transmute(0 as *const i32)`
  64                 if_chain! {
  65                     if let ExprKind::Cast(ref inner_expr, ref _cast_ty) = args[0].node;
  66                     if let ExprKind::Lit(ref lit) = inner_expr.node;
  67                     if let LitKind::Int(0, _) = lit.node;
  68                     then {
  69                         span_lint(
  70                             cx,
  71                             TRANSMUTING_NULL,
  72                             expr.span,
  73                             LINT_MSG)
  74                     }
  75                 }
  76
  77                 // Catching:
  78                 // `std::mem::transmute(std::ptr::null::<i32>())`
  79                 if_chain! {
  80                     if let ExprKind::Call(ref func1, ref args1) = args[0].node;
  81                     if let ExprKind::Path(ref path1) = func1.node;
  82                     if match_qpath(path1, &paths::STD_PTR_NULL);
  83                     if args1.len() == 0;
  84                     then {
  85                         span_lint(
  86                             cx,
  87                             TRANSMUTING_NULL,
  88                             expr.span,
  89                             LINT_MSG)
  90                     }
  91                 }
  92
  93                 // FIXME:
  94                 // Also catch transmutations of variables which are known nulls.
  95                 // To do this, MIR const propagation seems to be the better tool.
  96                 // Whenever MIR const prop routines are more developed, this will
  97                 // become available. As of this writing (25/03/19) it is not yet.
  98             }
  99         }
 100     }
 101 }