[cfe-dev] alpha.security.ArrayBound doesn't know when to stop?

[<Alexander G. Riccio> via cfe-dev]

Is this by design? The buffer size in the attached result is 32, and thus
every access beyond that is invalid. Yet, ArrayBound keeps iterating until
it reaches analyzer-max-loop. Is this by design, or is this a bug? I
realize that ArrayBound is the "old" version of the array bounds checker.


Sincerely,
Alexander Riccio
--
"Change the world or go home."
about.me/ariccio

<http://about.me/ariccio>
If left to my own devices, I will build more.
⁂
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20160229/e5c2469a/attachment.html>
-------------- next part --------------
C:\LLVM\build\Debug\bin\clang.exe -cc1 -triple i686-pc-windows-msvc18.0.0 -analyze -disable-free -main-file-name ahdec1-bad.c -analyzer-store=region -analyzer-opt-analyze-nested-blocks -analyzer-eagerly-assume "-analyzer-display-progress" "-analyzer-max-loop" "64" "-analyzer-stats" -analyzer-checker=core -analyzer-checker=unix.API -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-checker=alpha.security.ArrayBound -analyzer-output plist -w -mrelocation-model static -mthread-model posix -mdisable-fp-elim -fmath-errno -masm-verbose -mconstructor-aliases -target-cpu pentium4 -dwarf-column-info -debugger-tuning=gdb -resource-dir "C:\LLVM\build\Debug\bin\..\lib\clang\3.9.0" -internal-isystem "C:\LLVM\build\Debug\bin\..\lib\clang\3.9.0\include" -internal-isystem "C:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\include" -internal-isystem "C:\Program Files (x86)\Windows Kits\10\Include\10.0.10240.0\ucrt" -internal-isystem "C:\Program Files (x86)\Windows Kits\10\include\10.0.10240.0\shared" -internal-isystem "C:\Program Files (x86)\Windows Kits\10\include\10.0.10240.0\um" -internal-isystem "C:\Program Files (x86)\Windows Kits\10\include\10.0.10240.0\winrt" -Wno-deprecated-declarations -fdebug-compilation-dir "C:\Users\Alexander Riccio\SARD_BAD_scratch\SARD.testsuite-100.2015-12-02-23-22-45" -ferror-limit 19 -fmessage-length 0 -fms-extensions -fms-compatibility -fms-compatibility-version=18 -fno-threadsafe-statics -fdelayed-template-parsing -fobjc-runtime=gcc -fdiagnostics-show-option -analyzer-output=html -o "C:\Windows\Temp\scan-build-2016-02-28-184601-i4leaqif" -x c "C:\Users\Alexander Riccio\SARD_BAD_scratch\SARD.testsuite-100.2015-12-02-23-22-45\testcases\000\149\055\ahdec1-bad.c"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20160229/e5c2469a/attachment-0001.html>