[all-commits] [llvm/llvm-project] f80b50: [analyzer] Fix use-after-free in CheckerContext::g...

[Balázs Benics via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: f80b50bb6c5df237a15bdc4578c8b6aaf59fb3b1
      https://github.com/llvm/llvm-project/commit/f80b50bb6c5df237a15bdc4578c8b6aaf59fb3b1
  Author: Balázs Benics <benicsbalazs at gmail.com>
  Date:   2026-04-27 (Mon, 27 Apr 2026)

  Changed paths:
    M clang/include/clang/StaticAnalyzer/Core/PathSensitive/CheckerContext.h
    M clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
    M clang/lib/StaticAnalyzer/Core/CheckerContext.cpp

  Log Message:
  -----------
  [analyzer] Fix use-after-free in CheckerContext::getMacroNameOrSpelling (#194174)

This UAF bug was introduced 14 years ago, in 43de767b55c07.
The first use of this API was in
3b754b25bde4914e5ab693e7db9533c3260e926e, roughly around the same era.
It was dormant because the first param of `socket` and friends are
macros, and those didn't trigger this UAF.

I decided to go against adding a test because I figure that would be not
really meaningful.

Fixes #194136



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications