| Zhongxing Xu | a40a357 | 2008-10-25 14:56:36 +0000 | [diff] [blame] | 1 | //===----------------------------------------------------------------------===// |
| 2 | // Random notes for the static analysis module. |
| 3 | //===----------------------------------------------------------------------===// |
| 4 | |
| 5 | Currently the analyzer with basic store will report false alarm for such code: |
| 6 | |
| 7 | p[0] = "/bin/sh"; |
| 8 | p[1] = NULL; |
| 9 | |
| 10 | execv(p[0], argv); |
| 11 | |
| 12 | This is because BasicStore "collapses" all elements of an array into their base |
| 13 | region. BasicStore should return UnknownVal() when getLValueElement. But that |
| Zhongxing Xu | b621394 | 2008-10-28 09:09:48 +0000 | [diff] [blame] | 14 | way will break current test in null-deref-ps.c. |
| 15 | |
| 16 | //===----------------------------------------------------------------------===// |
| 17 | |
| 18 | Investigate what classes of exprs are passed silently in GRExprEngine::Visit(). |
| 19 | |
| Zhongxing Xu | afd7105 | 2008-10-28 09:32:08 +0000 | [diff] [blame^] | 20 | One is PredefinedExpr. |