[all-commits] [llvm/llvm-project] 307d91: [clang][analyzer] Add taintedness to argv (#178054)

[Daniel Krupp via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 307d912378ac107e67ae26248e83fe3ddf8dc2df
      https://github.com/llvm/llvm-project/commit/307d912378ac107e67ae26248e83fe3ddf8dc2df
  Author: Daniel Krupp <daniel.krupp at ericsson.com>
  Date:   2026-03-02 (Mon, 02 Mar 2026)

  Changed paths:
    M clang/docs/analyzer/checkers.rst
    M clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
    M clang/test/Analysis/taint-generic.c
    A clang/test/Analysis/taint-main-parameters/argc.c
    A clang/test/Analysis/taint-main-parameters/envp.c
    A clang/test/Analysis/taint-main-parameters/envp2.c
    A clang/test/Analysis/taint-main-parameters/invalid.c
    A clang/test/Analysis/taint-main-parameters/main_void.c
    A clang/test/Analysis/taint-main-parameters/simple.c
    A clang/test/Analysis/taint-main-parameters/simple.cpp
    A clang/test/Analysis/taint-main-parameters/trusted.c

  Log Message:
  -----------
  [clang][analyzer] Add taintedness to argv (#178054)

If the execution environment is untrusted, we assume that the argv, argc
and envp parameters of the main function are attacker controlled values
and set them as taint analysis sources.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications