[Linux]用Clang实现代码静态分析

1.按转Clang

    sudo apt-get install Clang

2.编写测试程序  memleak.c

#include<stdio.h>
#include<stdlib.h>
 
int main()
{
    int *mem;
    mem=malloc(sizeof(int));
    if(mem) return 1;
    *mem=0xdeadbeaf;
    free(mem);
    return 0;
}

3. 运行代码静态检查 
scan-build -o memleak gcc memleak.c -o m

结果如下:

memleak.c:9:5: warning: Dereference of null pointer (loaded from variable 'mem')
    *mem=0xdeadbeaf;
    ^~~~
1 warning generated.
scan-build: 1 bugs found.

4.在当前目录下会生存一个 memleak文件夹，内有一个以日期命名的文件夹，用浏览器打开该文件夹内的 index.html 查看错误bug报告

5.修改 memleak.c 

#include<stdio.h>
#include<stdlib.h>
 
int main()
{
    int *mem;
    mem=malloc(sizeof(int));
    if(mem==NULL) return 1;
    *mem=0xdeadbeaf;
    free(mem);
    return 0;
}

6.再次运行 scan-build -o memleak gcc memleak.c -o m
7. 此时bug消失

8. 下载开源 cgdb http://cgdb.github.io/

9.切换到 cgdb 所在目录，运行 scan-build -o cgdb-scan ./configure --prefix=$PWD/build

10. 运行 scan-build -o cgdb-scan make

11.用浏览器打开当前目录下 cgdb-scan 下的 index.html 查看 bug 报告

参考文献

http://events.linuxfoundation.org/images/stories/pdf/lcjp2012_matsumotoh.pdf

http://clang-analyzer.llvm.org/scan-build.html

http://www.hackhowtofaq.com/blog/static-analysis-with-llvm-clang-in-linux/