<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><style>body { line-height: 1.5; }body { font-size: 10.5pt; font-family: 微软雅黑; color: rgb(0, 0, 0); line-height: 1.5; }body { font-size: 10.5pt; color: rgb(0, 0, 0); line-height: 1.5; }</style></head><body>
<div><span></span>Hi, </div><div>Thanks <span style="font-family: 'Microsoft YaHei UI', Tahoma; font-size: 13px; font-weight: bold; line-height: normal; white-space: nowrap; background-color: transparent;">Balázs Benics</span><span style="font-family: 'Microsoft YaHei UI', Tahoma; font-size: 13px; line-height: normal; white-space: nowrap; background-color: transparent;"> for the reminding to add the [analyzer] tag into the title :)</span></div><div><span style="font-family: 'Microsoft YaHei UI', Tahoma; font-size: 13px; line-height: normal; white-space: nowrap; background-color: transparent;">My question is that:</span></div><div>I want to find the buffer overflow on the following case, but clang static analyzer can't report it out, how should I do?</div><div><div><span style="font-size: 10.5pt; line-height: 1.5; background-color: transparent;">=========== the case ============</span></div><div><span style="font-size: 10.5pt; line-height: 1.5; background-color: transparent;">int main(int argc, char **argv)</span></div><div>{</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>int a[10];</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>for (int i=0; i<=10; i++) {</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>a[i]=0; <---- array bound over run here</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>}</div><div>}</div></div><div>=========== the case =============</div><div>Thanks.</div><div><br></div>
</body></html>