Sparse¶
Sparse is a semantic checker for C programs; it can be used to find anumber of potential problems with kernel code. Seehttps://lwn.net/Articles/689907/ for an overview of sparse; this documentcontains some kernel-specific sparse information.More information on sparse, mainly about its internals, can be found inits official pages athttps://sparse.docs.kernel.org.
Using sparse for typechecking¶
“__bitwise” is a type attribute, so you have to do something like this:
typedef int __bitwise pm_request_t;enum pm_request { PM_SUSPEND = (__force pm_request_t) 1, PM_RESUME = (__force pm_request_t) 2};which makes PM_SUSPEND and PM_RESUME “bitwise” integers (the “__force” isthere because sparse will complain about casting to/from a bitwise type,but in this case we really _do_ want to force the conversion). And becausetheenumvalues are all the same type, now “enumpm_request” will be thattype too.
And with gcc, all the “__bitwise”/”__force stuff” goes away, and it allends up looking just like integers to gcc.
Quite frankly, you don’t need theenumthere. The above all really justboils down to one special “int __bitwise” type.
So the simpler way is to just do:
typedef int __bitwise pm_request_t;#define PM_SUSPEND ((__force pm_request_t) 1)#define PM_RESUME ((__force pm_request_t) 2)
and you now have all the infrastructure needed for strict typechecking.
One small note: the constant integer “0” is special. You can use aconstant zero as a bitwise integer type without sparse ever complaining.This is because “bitwise” (as the name implies) was designed for makingsure that bitwise types don’t get mixed up (little-endian vs big-endianvs cpu-endian vs whatever), and there the constant “0” really _is_special.
Using sparse for lock checking¶
The following macros are undefined for gcc and defined during a sparserun to use the “context” tracking feature of sparse, applied tolocking. These annotations tell sparse when a lock is held, withregard to the annotated function’s entry and exit.
__must_hold - The specified lock is held on function entry and exit.
__acquires - The specified lock is held on function exit, but not entry.
__releases - The specified lock is held on function entry, but not exit.
If the function enters and exits without the lock held, acquiring andreleasing the lock inside the function in a balanced way, noannotation is needed. The three annotations above are for cases wheresparse would otherwise report a context imbalance.
Getting sparse¶
You can get tarballs of the latest released versions from:https://www.kernel.org/pub/software/devel/sparse/dist/
Alternatively, you can get snapshots of the latest development versionof sparse using git to clone:
git://git.kernel.org/pub/scm/devel/sparse/sparse.git
Once you have it, just do:
makemake install
as a regular user, and it will install sparse in your ~/bin directory.
Using sparse¶
Do a kernel make with “make C=1” to run sparse on all the C files that getrecompiled, or use “make C=2” to run sparse on the files whether they need tobe recompiled or not. The latter is a fast way to check the whole tree if youhave already built it.
The optional make variable CF can be used to pass arguments to sparse. Thebuild system passes -Wbitwise to sparse automatically.
Note that sparse defines the __CHECKER__ preprocessor symbol.