- 8568ee7 [analyzer] Taint: add system and popen as undesirable sinks for taint data. by Anna Zaks · 13 years ago
- b71d157 [analyzer] Unwrap the pointers when ignoring the const cast. by Anna Zaks · 13 years ago
- 71d2909 [analyzer] Taint: when looking up a binding, provide the type. by Anna Zaks · 13 years ago
- ce8ef16 [analyzer] RegionStoreManager::getBinding() should not crash when by Anna Zaks · 13 years ago
- dba241d [analyzer] Fix a typo in a warning message. by Anna Zaks · 13 years ago
- 0849ade [analyzer] fix inlining's handling of mapping actual to formal arguments and limit the call stack depth. The analyzer can now accurately simulate factorial for limited depths. by Ted Kremenek · 13 years ago
- 1437425 [analyzer] Rename Store::Retrieve() -> getBinding(). by Anna Zaks · 13 years ago
- 1fb826a [analyzer] Add taint transfer by strcpy & others (part 1). by Anna Zaks · 13 years ago
- 3e97758 "This change adds alloca/valloc checks to UnixAPIChecker. It includes a small refactoring for by Ted Kremenek · 13 years ago
- 256ef64 Remove '#if 0' from ExprEngine::InlineCall(), and start fresh by wiring up inlining for straight C calls. by Ted Kremenek · 13 years ago
- f660f4b Make PathDiagnosticLocation more resilient to null Stmt pointers. by Ted Kremenek · 13 years ago
- 2215eef Remove unused variable. by Rafael Espindola · 13 years ago
- c5bdc55 [analyzer] Fix use-after-free in HandleTranslationUnit. by Anna Zaks · 13 years ago
- 9f03b62 [analyzer] Add basic format string vulnerability checking. by Anna Zaks · 13 years ago
- 3070e13 [analyzer] Remove CallEnterNodeBuilder and simplify ExprEngine::processCallEnter(). by Ted Kremenek · 13 years ago
- 242384d Correctly enqueue successors in ExprEngine::processCallExit(). by Ted Kremenek · 13 years ago
- 894212e [analyzer] Remove CallExitNodeBuilder, and have ExprEngine::processCallExit() do the work manually. This is a nice simplification. by Ted Kremenek · 13 years ago
- 5eca482 [analyzer] Make the entries in 'Environment' context-sensitive by making entries map from by Ted Kremenek · 13 years ago
- eb31a76 [analyzer] Be less pessimistic about invalidation of global variables by Anna Zaks · 13 years ago
- e3659a7 Fix 80 col violations. by Ted Kremenek · 13 years ago
- d1247c5 Extend ConditionBRVisitor to handle condition variable assignments. by Ted Kremenek · 13 years ago
- 0507f7e Minor code formatting cleanups. by Ted Kremenek · 13 years ago
- c1275da Enhance UnixAPIChecker to also warn about zero-sized allocations to calloc() and realloc(). Patch by Cyril Roelandt! by Ted Kremenek · 13 years ago
- de9f253 Add initial version of checker to check if virtual member functions are called transitively by Ted Kremenek · 13 years ago
- 63d32bd Fix cmake build with -DBUILD_SHARED_LIBS=ON. by Rafael Espindola · 13 years ago
- 80d4b55 Small refactoring and simplification of constant evaluation and some of its by Richard Smith · 13 years ago
- 682060c Colorize and condense CFG pretty-printing. by Ted Kremenek · 13 years ago
- b7dcddf Fix typos in analyzer diagnostics pointed out by Matt Beaumont-Gay and Robert Purves. by Ted Kremenek · 13 years ago
- 2cbe791 [analyzer] Do not invalidate arguments when the parameter's by Anna Zaks · 13 years ago
- 6ae3257 Fix inversion of static analyzer path diagnostics for path conditions. by Ted Kremenek · 13 years ago
- 3ff53b3 Update the CMake build for r146959's new files. by Chandler Carruth · 13 years ago
- 99ba9e3 Unweaken vtables as per http://llvm.org/docs/CodingStandards.html#ll_virtual_anch by David Blaikie · 13 years ago
- 9ffbe24 [analyzer] Add support for taint flowing through a function (atoi). by Anna Zaks · 13 years ago
- 777d706 [analyzer] Minor: Simplify & assert. by Anna Zaks · 13 years ago
- d3d8548 [analyzer] Better stdin support. by Anna Zaks · 13 years ago
- bcb3b98 [analyzer] Address Jordy's comments for r145985. by Anna Zaks · 13 years ago
- 557a382 [analyzer] Ensure that the order in which checker callbacks are called by Anna Zaks · 13 years ago
- efd6989 [analyzer] Treat stdin as a source of taint. by Anna Zaks · 13 years ago
- 28fd98d [analyzer] Minor refactor to addTaint. by Anna Zaks · 13 years ago
- 1009ac7 [analyzer] Mark output of fscanf and fopen as tainted. by Anna Zaks · 13 years ago
- e55a22b [analyzer] Mark getenv output as tainted. by Anna Zaks · 13 years ago
- e3d250e [analyzer] CStringChecker should not rely on the analyzer generating UndefOrUnknown value when it cannot reason about the expression. by Anna Zaks · 13 years ago
- 6d6a83c [analyzer]Fixup r146336. by Anna Zaks · 13 years ago
- 24d052c [analyzer] Introduce IntSymExpr, where the integer is on the lhs. by Anna Zaks · 13 years ago
- 432a455 [analyzer] Fix inconsistency on when SValBuilder assumes that 2 by Anna Zaks · 13 years ago
- 5fc7def [analyzer] If memory region is tainted mark data as tainted. + random comments by Anna Zaks · 13 years ago
- f4e8a12 Unbreak MSVC build. by Francois Pichet · 13 years ago
- dc30967 Add an experimental MallocSizeofChecker, which reports inconsistencies by Peter Collingbourne · 13 years ago
- b39c5b4 [analyzer] Cleanup: use the variable. by Anna Zaks · 13 years ago
- dcf06fa [analyzer] Propagate taint through MemRegions. by Anna Zaks · 13 years ago
- 0e35b4e DeadStoresChecker: when whitelisting dead initializations with constants, look by Richard Smith · 13 years ago
- a91efb1 [analyzer] Add comments related to symbol_iterator by Anna Zaks · 13 years ago
- 1d1d515 [analyzer] Refactor: Move symbol_iterator from SVal to SymExpr, use it by Anna Zaks · 13 years ago
- aace9ef [analyzer] Propagate taint through NonLoc to NonLoc casts. by Anna Zaks · 13 years ago
- e5ee70d [analyzer] Remove an unnecessary check. by Anna Zaks · 13 years ago
- 02f34c5 [analyzer] Rely on LLVM Dominators in Clang dominator computation. by Anna Zaks · 13 years ago
- eca4e6e [analyzer] Mark ConstraintManager::canReasonAbout as protected. by Anna Zaks · 13 years ago
- 084842d [analyzer] Simplify the condition. by Anna Zaks · 13 years ago
- 5344baa [analyzer] Unify SymbolVal and SymExprVal under a single SymbolVal class. by Anna Zaks · 13 years ago
- 76462f0 [analyzer] Remove all uses of ConstraintManager::canResonAbout() from by Anna Zaks · 13 years ago
- 3cdf584 [analyzer] First step toward removing by Anna Zaks · 13 years ago
- 1a00eef [analyzer] Minor improvements on RangeConstraint pretty-printing. by Anna Zaks · 13 years ago
- f62ceec [analyzer] Change RetainCountChecker to use symbol dump method instead by Anna Zaks · 13 years ago
- d016785 [analyzer] Add ability to do a simple ProgramState dump() without requiring CFG. by Anna Zaks · 13 years ago
- a50b7ab [analyzer] Add a debug checker to test for tainted data. by Anna Zaks · 13 years ago
- ee5a21f [analyzer] Make KeychainAPI checker less aggressive. radar://10508828 by Anna Zaks · 13 years ago
- b805c8f [analyzer] Refactor checkers to use helper function for getting callee Decl and name. by Anna Zaks · 13 years ago
- a078ecf When analyzing a C++ method (without a specific caller), assume 'this' is non-null. Fixes <rdar://problem/10508787>. by Ted Kremenek · 13 years ago
- 75df4ee Further tweak -Wurneachable-code and templates by allowing the warning to run on by Ted Kremenek · 13 years ago
- 90735f7 Update CMake build. by Benjamin Kramer · 13 years ago
- d699ade [analyzer] Add checker callback documentation. by Anna Zaks · 13 years ago
- 214323b Relax RegionStore to allow loads from CodeTextRegions. Apparently you can actually write code that does this. This seems worthy of a checker, but the StoreManager should handle the memory abstraction without crashing. Fixes PR 11450. by Ted Kremenek · 13 years ago
- 426a16d [analyzer] Minor cleanup of SValBuilder: Comments + code reuse. by Anna Zaks · 13 years ago
- 8f4caf5 [analyzer] Warn when non pointer arguments are passed to scanf (only when running taint checker). by Anna Zaks · 13 years ago
- 0d339d0 [analyzer] Do not conjure a symbol when we need to propagate taint. by Anna Zaks · 13 years ago
- ee081c4 [analyzer] Minor tweaks to the ProgramState::isTainted(). by Anna Zaks · 13 years ago
- 64595fa [analyzer] Add a helper method. by Anna Zaks · 13 years ago
- eeea7c4 [analysis] Constify CheckerContext. by Anna Zaks · 13 years ago
- 8687397 [analyzer] Put CheckerConext::getCalleeName out of line. by Anna Zaks · 13 years ago
- e42a0ab Fixed crash with initializer lists and unnamed bitfields in the RegionStore by Jim Goodnow II · 13 years ago
- 3d5f24a Update CMake build. by Benjamin Kramer · 13 years ago
- 9b0970f [analyzer] Catch the first taint propagation implied buffer overflow. by Anna Zaks · 13 years ago
- df18c5a [analyzer] Adding generic taint checker. by Anna Zaks · 13 years ago
- ceac1d6 [analyzer] Adding basic building blocks for taint propagation. by Anna Zaks · 13 years ago
- 57e156a [analyzer] Cleanup: Null->0, comments. by Anna Zaks · 13 years ago
- 0e12ebf [analyzer] Factor getCalleeName to the checker context. by Anna Zaks · 13 years ago
- 4c42bb7 [static analyzer] Tweak RetainCountChecker's diagnostics to correctly indicate if a message was due to a property access. This can by Ted Kremenek · 13 years ago
- 729aa06 [analyzer;Regionstore] handle loads from StringLiteral elements for StringLiterals representing wide strings. Fixes PR 11294. by Ted Kremenek · 13 years ago
- 9e9a3e6 [static analyzer] be more specific when running removeDeadBindings. Instead of seeing if the predecessor node was a non-StmtPoint, check if it is specifically a BlockEntrance node. by Ted Kremenek · 13 years ago
- ce117a7 [static analyzer]: only call RemoveDeadBindings() when analyzing non-Expr stmts, entering a basic block, or analyzing non-consumed expressions. This sigificantly speeds up analysis time, and reduces analysis time down to 27% less than before we linearized the CFG. by Ted Kremenek · 13 years ago
- 180f479 Constant expression evaluation: support for evaluation of structs and unions of by Richard Smith · 13 years ago
- 8d0ffc7 [analyzer] Remove redundant check from DivZeroChecker by Anna Zaks · 13 years ago
- 7864435 Rip out CK_GetObjCProperty. by John McCall · 13 years ago
- 4b9c2d2 Change the AST representation of operations on Objective-C by John McCall · 13 years ago
- de2a6a8 [analyzer] There should be a space between "expect" and "only" by Anna Zaks · 13 years ago
- 92d3dda Remove unused variables. by Benjamin Kramer · 13 years ago
- 21a2516 Fix various minor issues find via unreachable code warnings, from Ahmed Charles! by Douglas Gregor · 13 years ago
- 2eba859 Remove virtually empty file. by Benjamin Kramer · 13 years ago
- 6800ba6 [analyzer] Make sink attribute part of the node profile. by Anna Zaks · 13 years ago
- 2d950b1 [analyzer] Fix PR11282 - an assert in markAsSink by Anna Zaks · 13 years ago