1. 8568ee7 [analyzer] Taint: add system and popen as undesirable sinks for taint data. by Anna Zaks · 13 years ago
  2. b71d157 [analyzer] Unwrap the pointers when ignoring the const cast. by Anna Zaks · 13 years ago
  3. 71d2909 [analyzer] Taint: when looking up a binding, provide the type. by Anna Zaks · 13 years ago
  4. ce8ef16 [analyzer] RegionStoreManager::getBinding() should not crash when by Anna Zaks · 13 years ago
  5. dba241d [analyzer] Fix a typo in a warning message. by Anna Zaks · 13 years ago
  6. 0849ade [analyzer] fix inlining's handling of mapping actual to formal arguments and limit the call stack depth. The analyzer can now accurately simulate factorial for limited depths. by Ted Kremenek · 13 years ago
  7. 1437425 [analyzer] Rename Store::Retrieve() -> getBinding(). by Anna Zaks · 13 years ago
  8. 1fb826a [analyzer] Add taint transfer by strcpy & others (part 1). by Anna Zaks · 13 years ago
  9. 3e97758 "This change adds alloca/valloc checks to UnixAPIChecker. It includes a small refactoring for by Ted Kremenek · 13 years ago
  10. 256ef64 Remove '#if 0' from ExprEngine::InlineCall(), and start fresh by wiring up inlining for straight C calls. by Ted Kremenek · 13 years ago
  11. f660f4b Make PathDiagnosticLocation more resilient to null Stmt pointers. by Ted Kremenek · 13 years ago
  12. 2215eef Remove unused variable. by Rafael Espindola · 13 years ago
  13. c5bdc55 [analyzer] Fix use-after-free in HandleTranslationUnit. by Anna Zaks · 13 years ago
  14. 9f03b62 [analyzer] Add basic format string vulnerability checking. by Anna Zaks · 13 years ago
  15. 3070e13 [analyzer] Remove CallEnterNodeBuilder and simplify ExprEngine::processCallEnter(). by Ted Kremenek · 13 years ago
  16. 242384d Correctly enqueue successors in ExprEngine::processCallExit(). by Ted Kremenek · 13 years ago
  17. 894212e [analyzer] Remove CallExitNodeBuilder, and have ExprEngine::processCallExit() do the work manually. This is a nice simplification. by Ted Kremenek · 13 years ago
  18. 5eca482 [analyzer] Make the entries in 'Environment' context-sensitive by making entries map from by Ted Kremenek · 13 years ago
  19. eb31a76 [analyzer] Be less pessimistic about invalidation of global variables by Anna Zaks · 13 years ago
  20. e3659a7 Fix 80 col violations. by Ted Kremenek · 13 years ago
  21. d1247c5 Extend ConditionBRVisitor to handle condition variable assignments. by Ted Kremenek · 13 years ago
  22. 0507f7e Minor code formatting cleanups. by Ted Kremenek · 13 years ago
  23. c1275da Enhance UnixAPIChecker to also warn about zero-sized allocations to calloc() and realloc(). Patch by Cyril Roelandt! by Ted Kremenek · 13 years ago
  24. de9f253 Add initial version of checker to check if virtual member functions are called transitively by Ted Kremenek · 13 years ago
  25. 63d32bd Fix cmake build with -DBUILD_SHARED_LIBS=ON. by Rafael Espindola · 13 years ago
  26. 80d4b55 Small refactoring and simplification of constant evaluation and some of its by Richard Smith · 13 years ago
  27. 682060c Colorize and condense CFG pretty-printing. by Ted Kremenek · 13 years ago
  28. b7dcddf Fix typos in analyzer diagnostics pointed out by Matt Beaumont-Gay and Robert Purves. by Ted Kremenek · 13 years ago
  29. 2cbe791 [analyzer] Do not invalidate arguments when the parameter's by Anna Zaks · 13 years ago
  30. 6ae3257 Fix inversion of static analyzer path diagnostics for path conditions. by Ted Kremenek · 13 years ago
  31. 3ff53b3 Update the CMake build for r146959's new files. by Chandler Carruth · 13 years ago
  32. 99ba9e3 Unweaken vtables as per http://llvm.org/docs/CodingStandards.html#ll_virtual_anch by David Blaikie · 13 years ago
  33. 9ffbe24 [analyzer] Add support for taint flowing through a function (atoi). by Anna Zaks · 13 years ago
  34. 777d706 [analyzer] Minor: Simplify & assert. by Anna Zaks · 13 years ago
  35. d3d8548 [analyzer] Better stdin support. by Anna Zaks · 13 years ago
  36. bcb3b98 [analyzer] Address Jordy's comments for r145985. by Anna Zaks · 13 years ago
  37. 557a382 [analyzer] Ensure that the order in which checker callbacks are called by Anna Zaks · 13 years ago
  38. efd6989 [analyzer] Treat stdin as a source of taint. by Anna Zaks · 13 years ago
  39. 28fd98d [analyzer] Minor refactor to addTaint. by Anna Zaks · 13 years ago
  40. 1009ac7 [analyzer] Mark output of fscanf and fopen as tainted. by Anna Zaks · 13 years ago
  41. e55a22b [analyzer] Mark getenv output as tainted. by Anna Zaks · 13 years ago
  42. e3d250e [analyzer] CStringChecker should not rely on the analyzer generating UndefOrUnknown value when it cannot reason about the expression. by Anna Zaks · 13 years ago
  43. 6d6a83c [analyzer]Fixup r146336. by Anna Zaks · 13 years ago
  44. 24d052c [analyzer] Introduce IntSymExpr, where the integer is on the lhs. by Anna Zaks · 13 years ago
  45. 432a455 [analyzer] Fix inconsistency on when SValBuilder assumes that 2 by Anna Zaks · 13 years ago
  46. 5fc7def [analyzer] If memory region is tainted mark data as tainted. + random comments by Anna Zaks · 13 years ago
  47. f4e8a12 Unbreak MSVC build. by Francois Pichet · 13 years ago
  48. dc30967 Add an experimental MallocSizeofChecker, which reports inconsistencies by Peter Collingbourne · 13 years ago
  49. b39c5b4 [analyzer] Cleanup: use the variable. by Anna Zaks · 13 years ago
  50. dcf06fa [analyzer] Propagate taint through MemRegions. by Anna Zaks · 13 years ago
  51. 0e35b4e DeadStoresChecker: when whitelisting dead initializations with constants, look by Richard Smith · 13 years ago
  52. a91efb1 [analyzer] Add comments related to symbol_iterator by Anna Zaks · 13 years ago
  53. 1d1d515 [analyzer] Refactor: Move symbol_iterator from SVal to SymExpr, use it by Anna Zaks · 13 years ago
  54. aace9ef [analyzer] Propagate taint through NonLoc to NonLoc casts. by Anna Zaks · 13 years ago
  55. e5ee70d [analyzer] Remove an unnecessary check. by Anna Zaks · 13 years ago
  56. 02f34c5 [analyzer] Rely on LLVM Dominators in Clang dominator computation. by Anna Zaks · 13 years ago
  57. eca4e6e [analyzer] Mark ConstraintManager::canReasonAbout as protected. by Anna Zaks · 13 years ago
  58. 084842d [analyzer] Simplify the condition. by Anna Zaks · 13 years ago
  59. 5344baa [analyzer] Unify SymbolVal and SymExprVal under a single SymbolVal class. by Anna Zaks · 13 years ago
  60. 76462f0 [analyzer] Remove all uses of ConstraintManager::canResonAbout() from by Anna Zaks · 13 years ago
  61. 3cdf584 [analyzer] First step toward removing by Anna Zaks · 13 years ago
  62. 1a00eef [analyzer] Minor improvements on RangeConstraint pretty-printing. by Anna Zaks · 13 years ago
  63. f62ceec [analyzer] Change RetainCountChecker to use symbol dump method instead by Anna Zaks · 13 years ago
  64. d016785 [analyzer] Add ability to do a simple ProgramState dump() without requiring CFG. by Anna Zaks · 13 years ago
  65. a50b7ab [analyzer] Add a debug checker to test for tainted data. by Anna Zaks · 13 years ago
  66. ee5a21f [analyzer] Make KeychainAPI checker less aggressive. radar://10508828 by Anna Zaks · 13 years ago
  67. b805c8f [analyzer] Refactor checkers to use helper function for getting callee Decl and name. by Anna Zaks · 13 years ago
  68. a078ecf When analyzing a C++ method (without a specific caller), assume 'this' is non-null. Fixes <rdar://problem/10508787>. by Ted Kremenek · 13 years ago
  69. 75df4ee Further tweak -Wurneachable-code and templates by allowing the warning to run on by Ted Kremenek · 13 years ago
  70. 90735f7 Update CMake build. by Benjamin Kramer · 13 years ago
  71. d699ade [analyzer] Add checker callback documentation. by Anna Zaks · 13 years ago
  72. 214323b Relax RegionStore to allow loads from CodeTextRegions. Apparently you can actually write code that does this. This seems worthy of a checker, but the StoreManager should handle the memory abstraction without crashing. Fixes PR 11450. by Ted Kremenek · 13 years ago
  73. 426a16d [analyzer] Minor cleanup of SValBuilder: Comments + code reuse. by Anna Zaks · 13 years ago
  74. 8f4caf5 [analyzer] Warn when non pointer arguments are passed to scanf (only when running taint checker). by Anna Zaks · 13 years ago
  75. 0d339d0 [analyzer] Do not conjure a symbol when we need to propagate taint. by Anna Zaks · 13 years ago
  76. ee081c4 [analyzer] Minor tweaks to the ProgramState::isTainted(). by Anna Zaks · 13 years ago
  77. 64595fa [analyzer] Add a helper method. by Anna Zaks · 13 years ago
  78. eeea7c4 [analysis] Constify CheckerContext. by Anna Zaks · 13 years ago
  79. 8687397 [analyzer] Put CheckerConext::getCalleeName out of line. by Anna Zaks · 13 years ago
  80. e42a0ab Fixed crash with initializer lists and unnamed bitfields in the RegionStore by Jim Goodnow II · 13 years ago
  81. 3d5f24a Update CMake build. by Benjamin Kramer · 13 years ago
  82. 9b0970f [analyzer] Catch the first taint propagation implied buffer overflow. by Anna Zaks · 13 years ago
  83. df18c5a [analyzer] Adding generic taint checker. by Anna Zaks · 13 years ago
  84. ceac1d6 [analyzer] Adding basic building blocks for taint propagation. by Anna Zaks · 13 years ago
  85. 57e156a [analyzer] Cleanup: Null->0, comments. by Anna Zaks · 13 years ago
  86. 0e12ebf [analyzer] Factor getCalleeName to the checker context. by Anna Zaks · 13 years ago
  87. 4c42bb7 [static analyzer] Tweak RetainCountChecker's diagnostics to correctly indicate if a message was due to a property access. This can by Ted Kremenek · 13 years ago
  88. 729aa06 [analyzer;Regionstore] handle loads from StringLiteral elements for StringLiterals representing wide strings. Fixes PR 11294. by Ted Kremenek · 13 years ago
  89. 9e9a3e6 [static analyzer] be more specific when running removeDeadBindings. Instead of seeing if the predecessor node was a non-StmtPoint, check if it is specifically a BlockEntrance node. by Ted Kremenek · 13 years ago
  90. ce117a7 [static analyzer]: only call RemoveDeadBindings() when analyzing non-Expr stmts, entering a basic block, or analyzing non-consumed expressions. This sigificantly speeds up analysis time, and reduces analysis time down to 27% less than before we linearized the CFG. by Ted Kremenek · 13 years ago
  91. 180f479 Constant expression evaluation: support for evaluation of structs and unions of by Richard Smith · 13 years ago
  92. 8d0ffc7 [analyzer] Remove redundant check from DivZeroChecker by Anna Zaks · 13 years ago
  93. 7864435 Rip out CK_GetObjCProperty. by John McCall · 13 years ago
  94. 4b9c2d2 Change the AST representation of operations on Objective-C by John McCall · 13 years ago
  95. de2a6a8 [analyzer] There should be a space between "expect" and "only" by Anna Zaks · 13 years ago
  96. 92d3dda Remove unused variables. by Benjamin Kramer · 13 years ago
  97. 21a2516 Fix various minor issues find via unreachable code warnings, from Ahmed Charles! by Douglas Gregor · 13 years ago
  98. 2eba859 Remove virtually empty file. by Benjamin Kramer · 13 years ago
  99. 6800ba6 [analyzer] Make sink attribute part of the node profile. by Anna Zaks · 13 years ago
  100. 2d950b1 [analyzer] Fix PR11282 - an assert in markAsSink by Anna Zaks · 13 years ago