# -*- coding: utf-8 -*- # Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. # See https://llvm.org/LICENSE.txt for license information. # SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception """ This module parses and validates arguments for command-line interfaces. It uses argparse module to create the command line parser. (This library is in the standard python library since 3.2 and backported to 2.7, but not earlier.) It also implements basic validation methods, related to the command. Validations are mostly calling specific help methods, or mangling values. """ from __future__ import absolute_import, division, print_function import os import sys import argparse import logging import tempfile from libscanbuild import reconfigure_logging, CtuConfig from libscanbuild.clang import get_checkers, is_ctu_capable __all__ = ['parse_args_for_intercept_build', 'parse_args_for_analyze_build', 'parse_args_for_scan_build'] def parse_args_for_intercept_build(): """ Parse and validate command-line arguments for intercept-build. """ parser = create_intercept_parser() args = parser.parse_args() reconfigure_logging(args.verbose) logging.debug('Raw arguments %s', sys.argv) # short validation logic if not args.build: parser.error(message='missing build command') logging.debug('Parsed arguments: %s', args) return args def parse_args_for_analyze_build(): """ Parse and validate command-line arguments for analyze-build. """ from_build_command = False parser = create_analyze_parser(from_build_command) args = parser.parse_args() reconfigure_logging(args.verbose) logging.debug('Raw arguments %s', sys.argv) normalize_args_for_analyze(args, from_build_command) validate_args_for_analyze(parser, args, from_build_command) logging.debug('Parsed arguments: %s', args) return args def parse_args_for_scan_build(): """ Parse and validate command-line arguments for scan-build. """ from_build_command = True parser = create_analyze_parser(from_build_command) args = parser.parse_args() reconfigure_logging(args.verbose) logging.debug('Raw arguments %s', sys.argv) normalize_args_for_analyze(args, from_build_command) validate_args_for_analyze(parser, args, from_build_command) logging.debug('Parsed arguments: %s', args) return args def normalize_args_for_analyze(args, from_build_command): """ Normalize parsed arguments for analyze-build and scan-build. :param args: Parsed argument object. (Will be mutated.) :param from_build_command: Boolean value tells is the command suppose to run the analyzer against a build command or a compilation db. """ # make plugins always a list. (it might be None when not specified.) if args.plugins is None: args.plugins = [] # make exclude directory list unique and absolute. uniq_excludes = set(os.path.abspath(entry) for entry in args.excludes) args.excludes = list(uniq_excludes) # because shared codes for all tools, some common used methods are # expecting some argument to be present. so, instead of query the args # object about the presence of the flag, we fake it here. to make those # methods more readable. (it's an arguable choice, took it only for those # which have good default value.) if from_build_command: # add cdb parameter invisibly to make report module working. args.cdb = 'compile_commands.json' # Make ctu_dir an abspath as it is needed inside clang if not from_build_command and hasattr(args, 'ctu_phases') \ and hasattr(args.ctu_phases, 'dir'): args.ctu_dir = os.path.abspath(args.ctu_dir) def validate_args_for_analyze(parser, args, from_build_command): """ Command line parsing is done by the argparse module, but semantic validation still needs to be done. This method is doing it for analyze-build and scan-build commands. :param parser: The command line parser object. :param args: Parsed argument object. :param from_build_command: Boolean value tells is the command suppose to run the analyzer against a build command or a compilation db. :return: No return value, but this call might throw when validation fails. """ if args.help_checkers_verbose: print_checkers(get_checkers(args.clang, args.plugins)) parser.exit(status=0) elif args.help_checkers: print_active_checkers(get_checkers(args.clang, args.plugins)) parser.exit(status=0) elif from_build_command and not args.build: parser.error(message='missing build command') elif not from_build_command and not os.path.exists(args.cdb): parser.error(message='compilation database is missing') # If the user wants CTU mode if not from_build_command and hasattr(args, 'ctu_phases') \ and hasattr(args.ctu_phases, 'dir'): # If CTU analyze_only, the input directory should exist if args.ctu_phases.analyze and not args.ctu_phases.collect \ and not os.path.exists(args.ctu_dir): parser.error(message='missing CTU directory') # Check CTU capability via checking clang-extdef-mapping if not is_ctu_capable(args.extdef_map_cmd): parser.error(message="""This version of clang does not support CTU functionality or clang-extdef-mapping command not found.""") def create_intercept_parser(): """ Creates a parser for command-line arguments to 'intercept'. """ parser = create_default_parser() parser_add_cdb(parser) parser_add_prefer_wrapper(parser) parser_add_compilers(parser) advanced = parser.add_argument_group('advanced options') group = advanced.add_mutually_exclusive_group() group.add_argument( '--append', action='store_true', help="""Extend existing compilation database with new entries. Duplicate entries are detected and not present in the final output. The output is not continuously updated, it's done when the build command finished. """) parser.add_argument( dest='build', nargs=argparse.REMAINDER, help="""Command to run.""") return parser def create_analyze_parser(from_build_command): """ Creates a parser for command-line arguments to 'analyze'. """ parser = create_default_parser() if from_build_command: parser_add_prefer_wrapper(parser) parser_add_compilers(parser) parser.add_argument( '--intercept-first', action='store_true', help="""Run the build commands first, intercept compiler calls and then run the static analyzer afterwards. Generally speaking it has better coverage on build commands. With '--override-compiler' it use compiler wrapper, but does not run the analyzer till the build is finished.""") else: parser_add_cdb(parser) parser.add_argument( '--status-bugs', action='store_true', help="""The exit status of '%(prog)s' is the same as the executed build command. This option ignores the build exit status and sets to be non zero if it found potential bugs or zero otherwise.""") parser.add_argument( '--exclude', metavar='', dest='excludes', action='append', default=[], help="""Do not run static analyzer against files found in this directory. (You can specify this option multiple times.) Could be useful when project contains 3rd party libraries.""") output = parser.add_argument_group('output control options') output.add_argument( '--output', '-o', metavar='', default=tempfile.gettempdir(), help="""Specifies the output directory for analyzer reports. Subdirectory will be created if default directory is targeted.""") output.add_argument( '--keep-empty', action='store_true', help="""Don't remove the build results directory even if no issues were reported.""") output.add_argument( '--html-title', metavar='', help="""Specify the title used on generated HTML pages. If not specified, a default title will be used.""") format_group = output.add_mutually_exclusive_group() format_group.add_argument( '--plist', '-plist', dest='output_format', const='plist', default='html', action='store_const', help="""Cause the results as a set of .plist files.""") format_group.add_argument( '--plist-html', '-plist-html', dest='output_format', const='plist-html', default='html', action='store_const', help="""Cause the results as a set of .html and .plist files.""") format_group.add_argument( '--plist-multi-file', '-plist-multi-file', dest='output_format', const='plist-multi-file', default='html', action='store_const', help="""Cause the results as a set of .plist files with extra information on related files.""") format_group.add_argument( '--sarif', '-sarif', dest='output_format', const='sarif', default='html', action='store_const', help="""Cause the results as a result.sarif file.""") format_group.add_argument( '--sarif-html', '-sarif-html', dest='output_format', const='sarif-html', default='html', action='store_const', help="""Cause the results as a result.sarif file and .html files.""") advanced = parser.add_argument_group('advanced options') advanced.add_argument( '--use-analyzer', metavar='<path>', dest='clang', default='clang', help="""'%(prog)s' uses the 'clang' executable relative to itself for static analysis. One can override this behavior with this option by using the 'clang' packaged with Xcode (on OS X) or from the PATH.""") advanced.add_argument( '--no-failure-reports', '-no-failure-reports', dest='output_failures', action='store_false', help="""Do not create a 'failures' subdirectory that includes analyzer crash reports and preprocessed source files.""") parser.add_argument( '--analyze-headers', action='store_true', help="""Also analyze functions in #included files. By default, such functions are skipped unless they are called by functions within the main source file.""") advanced.add_argument( '--stats', '-stats', action='store_true', help="""Generates visitation statistics for the project.""") advanced.add_argument( '--internal-stats', action='store_true', help="""Generate internal analyzer statistics.""") advanced.add_argument( '--maxloop', '-maxloop', metavar='<loop count>', type=int, help="""Specify the number of times a block can be visited before giving up. Increase for more comprehensive coverage at a cost of speed.""") advanced.add_argument( '--store', '-store', metavar='<model>', dest='store_model', choices=['region', 'basic'], help="""Specify the store model used by the analyzer. 'region' specifies a field- sensitive store model. 'basic' which is far less precise but can more quickly analyze code. 'basic' was the default store model for checker-0.221 and earlier.""") advanced.add_argument( '--constraints', '-constraints', metavar='<model>', dest='constraints_model', choices=['range', 'basic'], help="""Specify the constraint engine used by the analyzer. Specifying 'basic' uses a simpler, less powerful constraint model used by checker-0.160 and earlier.""") advanced.add_argument( '--analyzer-config', '-analyzer-config', metavar='<options>', help="""Provide options to pass through to the analyzer's -analyzer-config flag. Several options are separated with comma: 'key1=val1,key2=val2' Available options: stable-report-filename=true or false (default) Switch the page naming to: report-<filename>-<function/method name>-<id>.html instead of report-XXXXXX.html""") advanced.add_argument( '--force-analyze-debug-code', dest='force_debug', action='store_true', help="""Tells analyzer to enable assertions in code even if they were disabled during compilation, enabling more precise results.""") plugins = parser.add_argument_group('checker options') plugins.add_argument( '--load-plugin', '-load-plugin', metavar='<plugin library>', dest='plugins', action='append', help="""Loading external checkers using the clang plugin interface.""") plugins.add_argument( '--enable-checker', '-enable-checker', metavar='<checker name>', action=AppendCommaSeparated, help="""Enable specific checker.""") plugins.add_argument( '--disable-checker', '-disable-checker', metavar='<checker name>', action=AppendCommaSeparated, help="""Disable specific checker.""") plugins.add_argument( '--help-checkers', action='store_true', help="""A default group of checkers is run unless explicitly disabled. Exactly which checkers constitute the default group is a function of the operating system in use. These can be printed with this flag.""") plugins.add_argument( '--help-checkers-verbose', action='store_true', help="""Print all available checkers and mark the enabled ones.""") if from_build_command: parser.add_argument( dest='build', nargs=argparse.REMAINDER, help="""Command to run.""") else: ctu = parser.add_argument_group('cross translation unit analysis') ctu_mutex_group = ctu.add_mutually_exclusive_group() ctu_mutex_group.add_argument( '--ctu', action='store_const', const=CtuConfig(collect=True, analyze=True, dir='', extdef_map_cmd=''), dest='ctu_phases', help="""Perform cross translation unit (ctu) analysis (both collect and analyze phases) using default <ctu-dir> for temporary output. At the end of the analysis, the temporary directory is removed.""") ctu.add_argument( '--ctu-dir', metavar='<ctu-dir>', dest='ctu_dir', default='ctu-dir', help="""Defines the temporary directory used between ctu phases.""") ctu_mutex_group.add_argument( '--ctu-collect-only', action='store_const', const=CtuConfig(collect=True, analyze=False, dir='', extdef_map_cmd=''), dest='ctu_phases', help="""Perform only the collect phase of ctu. Keep <ctu-dir> for further use.""") ctu_mutex_group.add_argument( '--ctu-analyze-only', action='store_const', const=CtuConfig(collect=False, analyze=True, dir='', extdef_map_cmd=''), dest='ctu_phases', help="""Perform only the analyze phase of ctu. <ctu-dir> should be present and will not be removed after analysis.""") ctu.add_argument( '--use-extdef-map-cmd', metavar='<path>', dest='extdef_map_cmd', default='clang-extdef-mapping', help="""'%(prog)s' uses the 'clang-extdef-mapping' executable relative to itself for generating external definition maps for static analysis. One can override this behavior with this option by using the 'clang-extdef-mapping' packaged with Xcode (on OS X) or from the PATH.""") return parser def create_default_parser(): """ Creates command line parser for all build wrapper commands. """ parser = argparse.ArgumentParser( formatter_class=argparse.ArgumentDefaultsHelpFormatter) parser.add_argument( '--verbose', '-v', action='count', default=0, help="""Enable verbose output from '%(prog)s'. A second, third and fourth flags increases verbosity.""") return parser def parser_add_cdb(parser): parser.add_argument( '--cdb', metavar='<file>', default="compile_commands.json", help="""The JSON compilation database.""") def parser_add_prefer_wrapper(parser): parser.add_argument( '--override-compiler', action='store_true', help="""Always resort to the compiler wrapper even when better intercept methods are available.""") def parser_add_compilers(parser): parser.add_argument( '--use-cc', metavar='<path>', dest='cc', default=os.getenv('CC', 'cc'), help="""When '%(prog)s' analyzes a project by interposing a compiler wrapper, which executes a real compiler for compilation and do other tasks (record the compiler invocation). Because of this interposing, '%(prog)s' does not know what compiler your project normally uses. Instead, it simply overrides the CC environment variable, and guesses your default compiler. If you need '%(prog)s' to use a specific compiler for *compilation* then you can use this option to specify a path to that compiler.""") parser.add_argument( '--use-c++', metavar='<path>', dest='cxx', default=os.getenv('CXX', 'c++'), help="""This is the same as "--use-cc" but for C++ code.""") class AppendCommaSeparated(argparse.Action): """ argparse Action class to support multiple comma separated lists. """ def __call__(self, __parser, namespace, values, __option_string): # getattr(obj, attr, default) does not really returns default but none if getattr(namespace, self.dest, None) is None: setattr(namespace, self.dest, []) # once it's fixed we can use as expected actual = getattr(namespace, self.dest) actual.extend(values.split(',')) setattr(namespace, self.dest, actual) def print_active_checkers(checkers): """ Print active checkers to stdout. """ for name in sorted(name for name, (_, active) in checkers.items() if active): print(name) def print_checkers(checkers): """ Print verbose checker help to stdout. """ print('') print('available checkers:') print('') for name in sorted(checkers.keys()): description, active = checkers[name] prefix = '+' if active else ' ' if len(name) > 30: print(' {0} {1}'.format(prefix, name)) print(' ' * 35 + description) else: print(' {0} {1: <30} {2}'.format(prefix, name, description)) print('') print('NOTE: "+" indicates that an analysis is enabled by default.') print('')