<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/123227>123227</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            Clang static analyzer false positive suppression does not suppress an issue report
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang,
            false-positive
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          SergeySatskiy
      </td>
    </tr>
</table>

<pre>
    We use the clang static analyzer for our C++ code as a part of a workflow. Sometimes there are false positives and I have troubles to suppress them. 
Here is an example of the code:

```c++
template<class TDescription>
inline
typename CParam<TDescription>::TValueType
CParam<TDescription>::Get(void) const
{
 if ( !m_ValueSet ) {
        // The lock prevents multiple initializations with the default value
        // in Get(), but does not prevent Set() from modifying the value
        // while another thread is reading it.
 CMutexGuard guard(s_GetLock());
        if ( !m_ValueSet ) {
 m_Value = GetThreadDefault();
            if (GetState() >= eState_Config) {
                // All sources checked or the value is set by user.
 m_ValueSet = true;
            }
        }
    }
    return m_Value;
}
```
An issue is reported for the
```return m_Value;```
line as follows: "Undefined or garbage value returned to caller".
The developer of the code investigated this case and it seems that the false positive is because the multithreaded nature of the code was not taken into consideration. It is understandable so I tried to suppress the issue reporting. Following the documentation I tried multiple options (adding before the ```return ...``` line):
- ```__attribute__((suppress))```
- ```[[clang::suppress]]```
- ```[[gsl::suppress("lifetime")]]```
- ```[[gsl::suppress("bounds")]]```
And none of this options suppressed the issue reporting.

Do I do something wrong or there is an issue with the clang analyzer so that the suppress attribute is not taken into consideration?

Note: the code is compiled with ```-std=gnu++17``` option. I tried ```-std=c++17``` option as well with the same outcome.
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJycVl-P4jYQ_zTmZbQRcWCBBx5YKNuT2qrSbttH5MSTxF3HjuwJHPfpK9sQ2N3eVSqKCDgzv_n7m4nwXjUGcc3mT2y-m4iBWuvWL-gaPL8I8m_qPCmtPK__Qhg8ArUIlRamAU-CVAXCCH3-hg5q68AODraMPzH-BJWVCMKDgF44AluDgJN1b7W2pwxebIekOvQB0SEIh1AL7RF66xWpI3oQRsIXaMURgZwdSh2kLfih7x36qNllwKabnwOCCgqAX0XXawzmoqtWIis2bBqvx2m6quQim24Iu14LQlZsKy28h9cd-sqpnpQ1rPiJTTfKaGUwyJ57NKJD2P4unOhYsf0oXGxYsXn9U-gBX8990Pmx6DMS48ujVZLxFVTWeApuLoJnoGpgfAmM590hQr4gQZC7PL98GN8zvofXFkHb6g16h0c05KEbNKmQCmUUKaHVNxGMezgpamNyJNZi0ATHgP4ZUhlIDjK-YnwL5UAgLXowlq5m4OUqAbWzHXRWqvqsTBMNfAf41CqNIIwNpQdqHQoZyhfuQVVRFpS2vw6EX58H4SQ04ZvxpT88I_1iq7erWytW3Gfjv5J2OQVW7EJwr9H2LuXhAvkO74b5jPRCoVNStLGGO8B4dthaU6vmc3E-BL7RGrwdXIUeqharN5Rg3S1VIQkeCcpz4JrL7jyOcRQ7IDfgZxfZYnef5vHf7ZdDGpy5oiWE9HRkBZtuNgaU98kRh711hDISm1q8F_2MdgcS6BKIX1ut7cmzYgOM8z-MxFqZFHEjXCmaa9QJDWUgdyW0Rsc4D8G_xiY9orY9untKgzJH9KQaERykVnmohMc4MRSBR-zCeBAUNd7PlRBbiZW4TrPIk9SEKMEIGty78QEnkVqexBsaUCZ4aY1XEl1kVAZfKIAORqLzJIwUpUbwFr4AOZXiuh9alxynBCvTZLCPqbrSRtpq6NBQRB9BRj7bPvGY8aWQkTAl1talaD6WKMuy8QjiIAstHqbhw032cBBETpUD4eEQG3x59fdCsrvy3unFpfEU10EaaKPWfBeuH2k1Xn_QCXa5VnXcC4zzYPd_45R2MNJ_D2VjJBhrLnVWfszpFSR21edCpT2yC5WVFnzYYW0owMlZ01yoPK6ipDxO27Q1x3Xp7a1Bx-YYyxAgftRzrNgnX36zYXlt7pjhobJdrzTKZHuM-8GTZMWuMUNaf_ni1hkp_mxsto9K1fdUAtFPqPUtTh9WpB2osh1mE7ku5KpYiQmu80WxmM5ni8flpF0jirwWj0suCpkjX9Y4K_IKH3ORz2VVyola8ymfT_P8MV_lfLbM6nK6ypfzRT6bzmc1X7HZFDuhdKb1scusayYx4eucF5wvJlqUqH18r-E8tWhohi3jPM6Dh-s8CMfz3cStA85DOTSezaZaefI3ZFKkcb399_ee99PlWsuQm3Fb3gps3vXUZHB63RL1YUqmJdEoaocyq2zH-D44cLk99M7-jRUxvo8InvH9JdTjmv8TAAD__yCiGKY">