Thank you very much, it works now! And do u know where can I get more document about SmPL grammer? I only have a < The SmPL Grammar (version 0.1.4)Research group on Coccinelle June 5, 2009> Which describe some simply, and there are not enough examples,
Btw, I will cc maillist, :) Thank you. -----邮件原件----- 发件人: Julia Lawall [mailto:[email protected]] 发送时间: 2014年1月2日 17:33 收件人: 林嘉(程二 福州) 抄送: [email protected] 主题: Re: 答复: 答复: [Cocci] hi all, how to match the args in function On Thu, 2 Jan 2014, 林嘉(程二 福州) wrote: > Thank you very much, and > I wrote as following which works now: > > ------------ > @@ > identifier fn, vp; > typedef bri_vlan_set_t; > @@ > -fn(...,bri_vlan_set_t *vp,...) > -{ > -... > -} > ------------- > > Now, here comes another problem, I want to find out those functions > matching the prototype and memset vp in this function, for example > > void vl_conbitmap(bri_vlan_set_t *vlanset) <-- condition 1 { > if (action == BITMAP_EXCEPT) { > memset(vlanset, 0xff, sizeof(bri_vlan_set_t)); <-- condition2 > } > } > > > How to write the patch? > > I tried this: > @@ > identifier fn, vp; > typedef bri_vlan_set_t; > expression e1,e2; > @@ > -fn(...,bri_vlan_set_t *vp,...) > -{ > -... > -memset(vp, e1, e2); > -... > -} > > But it seems failed, nothing output. This means that every execution path has exactly one call to memset with vp as the first argument. If you just mean that there should be at least one on every (non error) execution path, then you can put the following: @@ identifier fn, vp; typedef bri_vlan_set_t; expression e1,e2; @@ -fn(...,bri_vlan_set_t *vp,...) -{ -<+... -memset(vp, e1, e2); -...+> -} If you want that there is at least one somewhere, with no constraints on the execution path, and you just want to find out about this, then you can put the following: @@ identifier fn, vp; typedef bri_vlan_set_t; expression e1,e2; @@ fn(...,bri_vlan_set_t *vp,...) { <+... *memset(vp, e1, e2); ...+> } * implicitly checks for the existence of such an execution path with the property, rather than requiring that all execution paths have the property. If you really want to completely remove such functions, it is a bit more complicated. First, you need the following rule, which explicitly uses exists, to find a fuction of interest: @r exists@ <----- new identifier fn, vp; typedef bri_vlan_set_t; expression e1,e2; position p; <----- new @@ fn@p(...,bri_vlan_set_t *vp,...) <----- new { <+... memset(vp, e1, e2); ...+> } And then the following rule, which considers all execution paths to remove the whole function: @@ identifier r.fn; position r.p; @@ - fn@p(...) { ... } The position variable is used to be sure that the second rule is matching the same function as the first one. With ifdefs, you could have two definitions of functions with the same name. julia PS, please keep the mailing list in CC, as others could be interested in your question. _______________________________________________ Cocci mailing list [email protected] https://systeme.lip6.fr/mailman/listinfo/cocci
