-
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1,325 changed files
with
137,807 additions
and
70,337 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
name: openttd | ||
queries: | ||
- uses: security-and-quality | ||
query-filters: | ||
- exclude: | ||
id: | ||
# Only feasible way is to move away from fopen; fopen_s is optional C11 and not implemented on most platforms. | ||
- cpp/world-writable-file-creation | ||
# Basically OpenTTD's coding style for adding things like ..._INVALID to enumerations | ||
- cpp/irregular-enum-init | ||
# Our GUI code tends to use switches for OnClick handlers, DrawWidget, and UpdateWidgetSize. Sometimes GUIs just don't have many elements, but we want to keep consistency. | ||
- cpp/trivial-switch |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,10 @@ | ||
version: 2 | ||
updates: | ||
- package-ecosystem: "github-actions" | ||
directory: "/" | ||
schedule: | ||
interval: "monthly" | ||
groups: | ||
actions: | ||
patterns: | ||
- "*" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,71 @@ | ||
""" | ||
Script to scan the OpenTTD's script API for functions that miss checks for the | ||
function being called from the right mode (deity or company mode). | ||
When a function calls either ScriptObject::Command or ScriptObject::GetCompany | ||
then the function is considered dangerous. When one of the mode enforcement | ||
macros from script_error.hpp, i.e. EnforceDeityMode, EnforceCompanyModeValid or | ||
EnforceDeityOrCompanyModeValid, are called in the function, then we consider | ||
that the function has mode enforcement. | ||
Any dangerous function for which no enforcement is found are emitted as errors. | ||
""" | ||
|
||
import glob | ||
import re | ||
import sys | ||
|
||
|
||
def check_mode_enforcement(path): | ||
errors = [] | ||
with open(path, "r") as reader: | ||
mode_enforcement_found = False | ||
dangerous_function = False | ||
for line in reader: | ||
# Line does not start with a tab and have <word>::<word>. That looks like the begin of a function, so reset the state. | ||
if re.match(r"^[^\t].*\w::\w", line): | ||
mode_enforcement_found = False | ||
dangerous_function = False | ||
currentFunction = line | ||
continue | ||
|
||
if re.match( | ||
r"\t(EnforceDeityMode|EnforceCompanyModeValid|EnforceCompanyModeValid_Void|EnforceDeityOrCompanyModeValid|EnforceDeityOrCompanyModeValid_Void)\(", | ||
line, | ||
): | ||
# Mode enforcement macro found | ||
mode_enforcement_found = True | ||
continue | ||
|
||
if re.match(r".*(ScriptObject::Command|ScriptObject::GetCompany).*", line): | ||
# Dangerous function found | ||
dangerous_function = True | ||
continue | ||
|
||
# Line with only a closing bracket. That looks like the end of a function, so check for the dangerous function without mode enforcement | ||
if re.match(r"^}$", line) and dangerous_function and not mode_enforcement_found: | ||
function_name = currentFunction.rstrip("\n").replace("/* static */ ", "") | ||
errors.append(f"{path}: {function_name}") | ||
|
||
return errors | ||
|
||
|
||
def main(): | ||
errors = [] | ||
for path in sorted(glob.glob("src/script/api/*.cpp")): | ||
# Skip a number of files that yield only false positives | ||
if path.endswith(("script_object.cpp", "script_companymode.cpp", "script_controller.cpp", "script_game.cpp")): | ||
continue | ||
|
||
errors.extend(check_mode_enforcement(path)) | ||
|
||
if errors: | ||
print("Mode enforcement was expected in the following files/functions:") | ||
print("\n".join(errors)) | ||
sys.exit(1) | ||
|
||
print("OK") | ||
|
||
|
||
if __name__ == "__main__": | ||
main() |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.