[clang] [analyzer] Fix security.VAList false positives with C23 va_start (PR #192024)

DonĂ¡t Nagy via cfe-commits cfe-commits at lists.llvm.org
Tue May 5 07:02:23 PDT 2026


================
@@ -64,7 +64,7 @@ class VAListChecker : public Checker<check::PreCall, check::PreStmt<VAArgExpr>,
     int ParamIndex;
   };
   static const SmallVector<VAListAccepter, 15> VAListAccepters;
-  static const CallDescription VaStart, VaEnd, VaCopy;
+  static const CallDescription VaStart, VaStartC23, VaEnd, VaCopy;
----------------
NagyDonat wrote:

Good suggestion; @bjosv [here](https://github.com/llvm/llvm-project/blob/f3294c2338d27e2cd411fddcf1afd169d1996ccf/clang/lib/StaticAnalyzer/Checkers/SetgidSetuidOrderChecker.cpp#L40) you can find an example of defining a `CallDescriptionSet` (which will be used as `OtherSetPrivilegeDesc.contains(Call)`.

https://github.com/llvm/llvm-project/pull/192024


More information about the cfe-commits mailing list