[PATCH] D114706: [analyzer] Fix sensitive argument logic in GenericTaintChecker

Endre Fülöp via Phabricator via cfe-commits cfe-commits at lists.llvm.org
Mon Nov 29 06:18:33 PST 2021


gamesh411 created this revision.
gamesh411 added reviewers: steakhal, Szelethus, NoQ.
Herald added subscribers: manas, ASDenysPetrov, martong, dkrupp, donat.nagy, mikhail.ramalho, a.sidorin, szepet, baloghadamsoftware, xazax.hun.
gamesh411 requested review of this revision.
Herald added a project: clang.
Herald added a subscriber: cfe-commits.

The semantics of taint sinks is that if ANY of the arguments is tainted, a
warning should be emmitted. Before this change, if there were multiple
arguments that are sensitive, and if the first arg is not tainted, but any of
the noninitial are tainted, a warning is not emitted. After this change the
correct semantics is reflected in code.


Repository:
  rG LLVM Github Monorepo

https://reviews.llvm.org/D114706

Files:
  clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
  clang/test/Analysis/taint-generic.c

-------------- next part --------------
A non-text attachment was scrubbed...
Name: D114706.390330.patch
Type: text/x-patch
Size: 6033 bytes
Desc: not available
URL: <http://lists.llvm.org/pipermail/cfe-commits/attachments/20211129/67c5e1e8/attachment-0001.bin>


More information about the cfe-commits mailing list