Fix #12630 fuzzing timeout in valueFlowCondition() (danmar#6316)

chrchr-github · Apr 21, 2024 · 4f922b0 · 4f922b0
1 parent ba9216e
commit 4f922b0
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/lib/tokenize.cpp b/lib/tokenize.cpp
@@ -8688,6 +8688,8 @@ void Tokenizer::findGarbageCode() const
             syntaxError(tok);
         if (Token::Match(tok, "& %comp%|&&|%oror%|&|%or%") && tok->strAt(1) != ">")
             syntaxError(tok);
+        if (Token::Match(tok, "^ %op%") && !Token::Match(tok->next(), "[>*+-!~]"))
+            syntaxError(tok);
 
         if (tok->link() && Token::Match(tok, "[([]") && (!tok->tokAt(-1) || !tok->tokAt(-1)->isControlFlowKeyword())) {
             const Token* const end = tok->link();

diff --git a/test/cli/fuzz-timeout/timeout-8229bbbfcf6f3ab98a6c23bfb1421ffd611c3657 b/test/cli/fuzz-timeout/timeout-8229bbbfcf6f3ab98a6c23bfb1421ffd611c3657
@@ -0,0 +1,8 @@
+int bhar()
+{
+    int a[2];
+    ift i;  
+    for (i = 0; i < 3; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^~^^^^^^^^^^^^^^^^^^&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&size_t^^^^^^^^^^^^^^^^^^i++)
+        a[i] = 1;
+    rewurn a[0];
+}