[all-commits] [llvm/llvm-project] 26b19a: [clang][analyzer]Fix non-effective taint sanitation

Daniel Krupp via All-commits all-commits at lists.llvm.org
Fri Jul 21 06:11:34 PDT 2023


  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 26b19a67e5c398a30b26214544878ec364dc59af
      https://github.com/llvm/llvm-project/commit/26b19a67e5c398a30b26214544878ec364dc59af
  Author: Daniel Krupp <daniel.krupp at ericsson.com>
  Date:   2023-07-21 (Fri, 21 Jul 2023)

  Changed paths:
    M clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
    M clang/test/Analysis/Inputs/taint-generic-config.yaml
    M clang/test/Analysis/taint-generic.c

  Log Message:
  -----------
  [clang][analyzer]Fix non-effective taint sanitation

There was a bug in alpha.security.taint.TaintPropagation checker
in Clang Static Analyzer.
Taint filtering could only sanitize const arguments.
After this patch, taint filtering is effective also
on non-const parameters.

Differential Revision: https://reviews.llvm.org/D155848




More information about the All-commits mailing list