1. 02019f7 [analyzer] Add taint awareness to DivZeroChecker. by Anna Zaks · 13 years ago
  2. a8180e5 Reenable DeadStoresChecker under --analyze, and move the IdempotentOperationsChecker to the 'experimental' category. Fixes <rdar://problem/10146347>. by Ted Kremenek · 13 years ago
  3. b63d8d8 Implement checker that looks for calls to mktemps and friends that have fewer than 6 Xs. Implements <rdar://problem/6336672>. by Ted Kremenek · 13 years ago
  4. 76a5424 Turn 'SecuritySyntaxChecker' into a "meta" security checker for insecure APIs. Now by Ted Kremenek · 13 years ago
  5. 2bf8fd8 [analyzer] Add socket API as a source of taint. by Anna Zaks · 13 years ago
  6. 556b1d0 objc: deprecate direct usage of 'isa' of objc objects by Fariborz Jahanian · 13 years ago
  7. 4e46221 [analyzer] Taint: warn when tainted data is used to specify a buffer by Anna Zaks · 13 years ago
  8. 9b0c749 [analyzer] Taint: add taint propagation rules for string and memory copy by Anna Zaks · 13 years ago
  9. 8568ee7 [analyzer] Taint: add system and popen as undesirable sinks for taint data. by Anna Zaks · 13 years ago
  10. b71d157 [analyzer] Unwrap the pointers when ignoring the const cast. by Anna Zaks · 13 years ago
  11. ce8ef16 [analyzer] RegionStoreManager::getBinding() should not crash when by Anna Zaks · 13 years ago
  12. 3d33622 Adjust set of default checkers. by Ted Kremenek · 13 years ago
  13. 0849ade [analyzer] fix inlining's handling of mapping actual to formal arguments and limit the call stack depth. The analyzer can now accurately simulate factorial for limited depths. by Ted Kremenek · 13 years ago
  14. 1fb826a [analyzer] Add taint transfer by strcpy & others (part 1). by Anna Zaks · 13 years ago
  15. 3e97758 "This change adds alloca/valloc checks to UnixAPIChecker. It includes a small refactoring for by Ted Kremenek · 13 years ago
  16. 97a72c3 Add elidable CXXConstructExpr as block-level expr. It converts an lvalue to a rvalue, which is a useful step during AST evaluation. by Zhongxing Xu · 13 years ago
  17. 256ef64 Remove '#if 0' from ExprEngine::InlineCall(), and start fresh by wiring up inlining for straight C calls. by Ted Kremenek · 13 years ago
  18. 9f03b62 [analyzer] Add basic format string vulnerability checking. by Anna Zaks · 13 years ago
  19. 273c3a3 [analyzer] Add another tests to taint tester. by Anna Zaks · 13 years ago
  20. eb31a76 [analyzer] Be less pessimistic about invalidation of global variables by Anna Zaks · 13 years ago
  21. d1247c5 Extend ConditionBRVisitor to handle condition variable assignments. by Ted Kremenek · 13 years ago
  22. 1c87980 Teach the static analyzer to not treat XPC types as CF types. by Ted Kremenek · 13 years ago
  23. c1275da Enhance UnixAPIChecker to also warn about zero-sized allocations to calloc() and realloc(). Patch by Cyril Roelandt! by Ted Kremenek · 13 years ago
  24. de9f253 Add initial version of checker to check if virtual member functions are called transitively by Ted Kremenek · 13 years ago
  25. 682060c Colorize and condense CFG pretty-printing. by Ted Kremenek · 13 years ago
  26. b7dcddf Fix typos in analyzer diagnostics pointed out by Matt Beaumont-Gay and Robert Purves. by Ted Kremenek · 13 years ago
  27. 280cf14 Fix regression in LiveVariables when reasoning about variables captured by blocks. by Ted Kremenek · 13 years ago
  28. 2cbe791 [analyzer] Do not invalidate arguments when the parameter's by Anna Zaks · 13 years ago
  29. 6ae3257 Fix inversion of static analyzer path diagnostics for path conditions. by Ted Kremenek · 13 years ago
  30. b44b966 test/Analysis: fix error message by Dylan Noblesmith · 13 years ago
  31. 5238474 [analyzer] Fixup for r146793. Add tests for atol and atoll. by Anna Zaks · 13 years ago
  32. 9ffbe24 [analyzer] Add support for taint flowing through a function (atoi). by Anna Zaks · 13 years ago
  33. d3d8548 [analyzer] Better stdin support. by Anna Zaks · 13 years ago
  34. 2135ebb Add support for matching one or more (aka regex +) diagnostic messages with -verify. by Anna Zaks · 13 years ago
  35. 557a382 [analyzer] Ensure that the order in which checker callbacks are called by Anna Zaks · 13 years ago
  36. 2fe9b7f Modify how the -verify flag works. Currently, the verification string and by Richard Trieu · 13 years ago
  37. 9929523 [analyzer] Disable verification step on the failing test. by Anna Zaks · 13 years ago
  38. 86277c5 [analyzer] Re-enable the test which was failing on one of the bots. by Anna Zaks · 13 years ago
  39. f512560 [analyzer] Revert the taint test, which is failing on one of the bots for time being. by Anna Zaks · 13 years ago
  40. efd6989 [analyzer] Treat stdin as a source of taint. by Anna Zaks · 13 years ago
  41. 1009ac7 [analyzer] Mark output of fscanf and fopen as tainted. by Anna Zaks · 13 years ago
  42. e55a22b [analyzer] Mark getenv output as tainted. by Anna Zaks · 13 years ago
  43. e3d250e [analyzer] CStringChecker should not rely on the analyzer generating UndefOrUnknown value when it cannot reason about the expression. by Anna Zaks · 13 years ago
  44. 6fcd932 Check that arguments to a scanf call match the format specifier, by Hans Wennborg · 13 years ago
  45. 432a455 [analyzer] Fix inconsistency on when SValBuilder assumes that 2 by Anna Zaks · 13 years ago
  46. 5fc7def [analyzer] If memory region is tainted mark data as tainted. + random comments by Anna Zaks · 13 years ago
  47. dc30967 Add an experimental MallocSizeofChecker, which reports inconsistencies by Peter Collingbourne · 13 years ago
  48. dcf06fa [analyzer] Propagate taint through MemRegions. by Anna Zaks · 13 years ago
  49. aace9ef [analyzer] Propagate taint through NonLoc to NonLoc casts. by Anna Zaks · 13 years ago
  50. 4473755 [analyzer] Simplify the expected-warning statement. by Anna Zaks · 13 years ago
  51. bea728b [analyzer] Add a missing taint tester warning. by Anna Zaks · 13 years ago
  52. 76462f0 [analyzer] Remove all uses of ConstraintManager::canResonAbout() from by Anna Zaks · 13 years ago
  53. a50b7ab [analyzer] Add a debug checker to test for tainted data. by Anna Zaks · 13 years ago
  54. ee5a21f [analyzer] Make KeychainAPI checker less aggressive. radar://10508828 by Anna Zaks · 13 years ago
  55. 60a4481 Fix typo. by Ted Kremenek · 13 years ago
  56. a078ecf When analyzing a C++ method (without a specific caller), assume 'this' is non-null. Fixes <rdar://problem/10508787>. by Ted Kremenek · 13 years ago
  57. 381c066 Per an offline conversation with John McCall, have StmtPrinter actually print out the source expression for OpaqueValueExpr. by Ted Kremenek · 13 years ago
  58. 214323b Relax RegionStore to allow loads from CodeTextRegions. Apparently you can actually write code that does this. This seems worthy of a checker, but the StoreManager should handle the memory abstraction without crashing. Fixes PR 11450. by Ted Kremenek · 13 years ago
  59. 3881c69 [analyzer] Add more simple taint tests. by Anna Zaks · 13 years ago
  60. 8f4caf5 [analyzer] Warn when non pointer arguments are passed to scanf (only when running taint checker). by Anna Zaks · 13 years ago
  61. 01f2a1e [analyzer] The compiler warning was disabling the analyzer in this test. by Anna Zaks · 13 years ago
  62. 0d339d0 [analyzer] Do not conjure a symbol when we need to propagate taint. by Anna Zaks · 13 years ago
  63. 960809e Added missing ImplicitCastExpr around conversion operator call. by Abramo Bagnara · 13 years ago
  64. e42a0ab Fixed crash with initializer lists and unnamed bitfields in the RegionStore by Jim Goodnow II · 13 years ago
  65. 9b0970f [analyzer] Catch the first taint propagation implied buffer overflow. by Anna Zaks · 13 years ago
  66. b302996 Use Sema::RequireCompleteType to check for the completeness of by Douglas Gregor · 13 years ago
  67. 4c42bb7 [static analyzer] Tweak RetainCountChecker's diagnostics to correctly indicate if a message was due to a property access. This can by Ted Kremenek · 13 years ago
  68. 729aa06 [analyzer;Regionstore] handle loads from StringLiteral elements for StringLiterals representing wide strings. Fixes PR 11294. by Ted Kremenek · 13 years ago
  69. ccf1bfd [analyzer] teach AnalysisDeclContext::getSelfDecl() about blocks that capture the 'self' variable of the enclosing ObjC method decl. Fixes <rdar://problem/10380300>. by Ted Kremenek · 13 years ago
  70. 4b9c2d2 Change the AST representation of operations on Objective-C by John McCall · 13 years ago
  71. 129d924 Switch these two tests to use the Clang driver instead of CC1. They want by Chandler Carruth · 13 years ago
  72. 6a9065a Per discussion with John McCall, don't add OpaqueValueExprs to the CFG. by Ted Kremenek · 13 years ago
  73. 2d950b1 [analyzer] Fix PR11282 - an assert in markAsSink by Anna Zaks · 13 years ago
  74. cdcc653 [analyzer] BranchNodeBuilder should not generate autotransitions. by Anna Zaks · 13 years ago
  75. 4a037c7 [analyzer] ObjC message sends to nil receivers that return structs are now okay (compiler zeroes out the data). Fixes <rdar://problem/9151319>. by Ted Kremenek · 13 years ago
  76. 58f6f1e Add source-level dominators analysis. Patch by Guoping Long! by Ted Kremenek · 13 years ago
  77. 1d26f48 Rename AnalysisContext to AnalysisDeclContext. Not only is this name more accurate, but it frees up the name AnalysisContext for other uses. by Ted Kremenek · 13 years ago
  78. beedc5f Add test case for analyzer crash reported in <rdar://problem/10308201> (which is already fixed in mainline). by Ted Kremenek · 13 years ago
  79. 18c9bd3 Fix the signatures of vfork, __sigsetjmp and sigsetjmp. by Rafael Espindola · 13 years ago
  80. 762bb9d Update all tests other than Driver/std.cpp to use -std=c++11 rather than by Richard Smith · 13 years ago
  81. 6700415 Add returns_twice to functions that are known to return twice. This implements by Rafael Espindola · 13 years ago
  82. a7957ff [analyzer] Warn about the use of insecure, deprecated vfork() function PR11053 (http://llvm.org/bugs/show_bug.cgi?id=11053). by Anna Zaks · 13 years ago
  83. 46eaf77 [analyzer] Teach the static analyzer about CXXForRangeStmt. Patch by Jim Goodnow II! by Ted Kremenek · 13 years ago
  84. 744f1cd Provide basic static analyzer support for CXXTemporaryObjectExpr. Patch by Jim Goodnow II. by Ted Kremenek · 13 years ago
  85. c808503 [static analyzer] Fix crash in LiveVariables and Environment::getSVal() when analyzing C++ pointer-to-member calls. Fixes <rdar://problem/10243398>. by Ted Kremenek · 13 years ago
  86. 93edbc5 Fix major regression in RetainCountChecker. DefaultSummaries were not being used when they were meant to be. Fixes <rdar://problem/10241614>. by Ted Kremenek · 13 years ago
  87. d1e40d5 Make -fobjc-nonfragile-abi the -cc1 default, since it's the by John McCall · 13 years ago
  88. 6a835dd Fix LiveVariables analysis bug with MaterializeTemporaryExpr and fix handling in ExprEngine. Fixes <rdar://problem/10201666>. by Ted Kremenek · 13 years ago
  89. b459cf3 Address PR10616. The crash has already been fixed by Ted in r140725, so just refactor to use existing API + test case. by Anna Zaks · 13 years ago
  90. 7df2ff4 Tweak the interface for analyzing the CF conventions for a name by John McCall · 13 years ago
  91. e4c6675 Fix crash when analyzing C++ code involving constant enums and switch statements (<rdar://problem/10202899>). by Ted Kremenek · 13 years ago
  92. 0658879 [analyzer] Fix a bug in RetainReleaseChecker diagnostics. It gives more precise error message on the modified test case (and prevents duplicate diagnostics when we purge at block granularity). by Anna Zaks · 13 years ago
  93. d309528 [analyzer] Add -analyzer-purge option which can take on multiple values, remove -analyzer-purge=none. (Small refactor as well: move the work of constructing AnalysisManager from the callers to the class itself.) by Anna Zaks · 13 years ago
  94. 7e5f112 Fix a crash in MallocOverflowSecurityChecker. Patch by Lei Zhang. by Anna Zaks · 13 years ago
  95. 6479c66 [analyzer] Remove target triple from the malloc overflow test. by Anna Zaks · 13 years ago
  96. 09ca9ef [analyzer] Fix a bug where PathDiagnosticLocation did not generate a valid range and add asserts to check validity of locations early on. Ignore invalid ranges in PathDiagnosticPiece (they could be added by checker writers). by Anna Zaks · 13 years ago
  97. 0cd5948 [analyzer] Refactor: make PathDiagnosticLocation responsible for validation of SourceLocations (commit 5 of ?): by Anna Zaks · 13 years ago
  98. f2b4e66 [analyzer] Refactor: make PathDiagnosticLocation responsible for validation of SourceLocations (commit 4 of ?): by Anna Zaks · 13 years ago
  99. 4d353eb [analyzer] After CFG has been linearized, we can have a situation where an ExpoledNode has an invalid SourceLocation (which has no correspondence in the source code). This commit is the first step to solve this problem. by Anna Zaks · 13 years ago
  100. 773d847 [analyzer] Simplify the test, use generic/more descriptive names. by Anna Zaks · 13 years ago