[Cocci] Parsing C source files by Coccinelle

[elfring@users.sourceforge.net (SF Markus Elfring)]

> Imagine that you are interested in finding uses after free. You may write a pattern more or less like
> 
>    kfree(x);
>    ... when != y = E
>    z
> 
> If you say "when != x = E" you can miss cases in which `x' is assigned through an alias,
> but with "when != y = E" that would match any variable `y' regardless of being aliased with `x' or not.

Would you like to restrict the source code search on data accesses over pointers
(or C++ references) in this use case?


> You would like to say, "when != y = E such that aliased(x,y)",

Would such a specification be a higher-level search operation?


> and for that Coccinelle's CTL engine should know about aliasing,

Did you fiddle with extensions for the technology "computation tree logic" eventually?


> or have support for user-supplied predicates.

Would you like to submit a feature request?

Regards,
Markus