ra8_sbrk_trap.c

Go to the documentation of this file.

 
#include "ra8_sbrk_trap.h"
 
#include <stddef.h> // ra8-keep-include: `ptrdiff_t` used directly
 
#include "ra8_error_handler.h"
 
/* The newlib-nano heap allocator calls ``_sbrk`` by that exact name,
 * so we must use a reserved identifier here. clang-tidy's
 * bugprone-reserved-identifier / cert-dcl51-cpp complain correctly
 * but we override because the name is fixed by newlib. */
 
/* No coverage-exclusion marker here: the trap body is exercised
 * deterministically by the host white-box test
 * tests/hal/src/test_ra8_sbrk_trap_cov.c, which renames `_sbrk` to `_sbrk_cov`, mocks
 * the fatal-error sink, and proves the function never returns. On a
 * correctly-built firmware image this stays unreached at run time (glibc
 * malloc on the host resolves its own break), but the three lines are
 * covered on host, so no marker is needed. */
void* _sbrk(ptrdiff_t incr)
{
  (void)incr;
  ra8_fatal_error("SBRK", "_sbrk called -- firmware is heap-free", 0U);
  __builtin_unreachable();
}