[cfe-dev] Clang Static Analyzer multipass checker

[Artem Dergachev via cfe-dev]

Multi-pass path-sensitive analysis is indeed not a thing. However, you 
can do arbitrary AST-based analysis before path-sensitive analysis or 
after it by subscribing to the respective callback, and you can also 
explore the whole path-sensitive analysis graph at the end of the 
analysis. But none of this is actually used actively; there's usually no 
need for this.

Also all path-sensitive checkers have a way to affect other checkers and 
communicate to each other via mutating the common program state. This is 
used much more actively and allows conducting multiple interconnected 
analysis in a single path.

There's most likely an easier solution to what you're trying to do; i 
recommend discussing it.

On 6/9/19 6:51 AM, Алексеев Кирилл via cfe-dev wrote:
>
> Hello, I'm beginner in CSA programming. I have read clang SA a checker 
> developer manual
> and have some questions.
> How can I pass command line options to CSA checker? Does -Xanalyzer 
> option can help me?
> May be I need to see AnalyzerOptions.cpp, but can't understand how to 
> catch options from my checker.
>
> Also I want to know  is it possible to realize multi-pass analyzer 
> with parallel or sequential running of one or multiply checker with 
> data transfer between passes.
> I need to run first checker that taint some input, observes taint 
> values and find some AST expressions (or with path sensible analysis).
> After this checker ends up I need to start the second checker, that 
> uses search results of 1'st in analysis from begining of ExplodedGraph.
>
>
> _______________________________________________
> cfe-dev mailing list
> cfe-dev at lists.llvm.org
> https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/cfe-dev/attachments/20190610/a12b9f80/attachment.html>