[Openmp-commits] [openmp] [NFC][CodeQL] Suppress intentional ITT collector library loading (PR #217116)

David Justo via Openmp-commits openmp-commits at lists.llvm.org
Wed Aug 19 14:00:23 PDT 2026


davidmrdavid wrote:

@jprotze - I just learned about `secure_getenv` so take this with a graint of salt - I am not aware of a 'more secure' alternative to `GetEnvironmentVariableA`. I feel that if one existed, it'd be listed in the mslearn page here: https://learn.microsoft.com/en-us/windows/win32/api/processenv/nf-processenv-getenvironmentvariablea

I think it should be 'ok' to suppress this warning, at least until another static analyzer complains, at which point maybe there's more reason to look into an alternative.

https://github.com/llvm/llvm-project/pull/217116


More information about the Openmp-commits mailing list