- d814eaf Switch PerformImplicitConversion over to use DefaultLvalueConversion for lvalue-to-rvalue conversion. by Eli Friedman · 13 years ago
- b9ac30c [analyzer] Add more C taint sources/sinks. by Anna Zaks · 13 years ago
- 665b002 [analyzer] It's possible to have a non PointerType expression evaluate to a Loc value. When this happens, use the default type. by Anna Zaks · 13 years ago
- 3bfd6d7 [analyzer] Make VLA checker taint aware. by Anna Zaks · 13 years ago
- ce506ae Tighten format string diagnostic and make it a bit clearer (and a bit closer to GCC's). by Ted Kremenek · 13 years ago
- 02019f7 [analyzer] Add taint awareness to DivZeroChecker. by Anna Zaks · 13 years ago
- a8180e5 Reenable DeadStoresChecker under --analyze, and move the IdempotentOperationsChecker to the 'experimental' category. Fixes <rdar://problem/10146347>. by Ted Kremenek · 13 years ago
- b63d8d8 Implement checker that looks for calls to mktemps and friends that have fewer than 6 Xs. Implements <rdar://problem/6336672>. by Ted Kremenek · 13 years ago
- 76a5424 Turn 'SecuritySyntaxChecker' into a "meta" security checker for insecure APIs. Now by Ted Kremenek · 13 years ago
- 2bf8fd8 [analyzer] Add socket API as a source of taint. by Anna Zaks · 13 years ago
- 556b1d0 objc: deprecate direct usage of 'isa' of objc objects by Fariborz Jahanian · 13 years ago
- 4e46221 [analyzer] Taint: warn when tainted data is used to specify a buffer by Anna Zaks · 13 years ago
- 9b0c749 [analyzer] Taint: add taint propagation rules for string and memory copy by Anna Zaks · 13 years ago
- 8568ee7 [analyzer] Taint: add system and popen as undesirable sinks for taint data. by Anna Zaks · 13 years ago
- b71d157 [analyzer] Unwrap the pointers when ignoring the const cast. by Anna Zaks · 13 years ago
- ce8ef16 [analyzer] RegionStoreManager::getBinding() should not crash when by Anna Zaks · 13 years ago
- 3d33622 Adjust set of default checkers. by Ted Kremenek · 13 years ago
- 0849ade [analyzer] fix inlining's handling of mapping actual to formal arguments and limit the call stack depth. The analyzer can now accurately simulate factorial for limited depths. by Ted Kremenek · 13 years ago
- 1fb826a [analyzer] Add taint transfer by strcpy & others (part 1). by Anna Zaks · 13 years ago
- 3e97758 "This change adds alloca/valloc checks to UnixAPIChecker. It includes a small refactoring for by Ted Kremenek · 13 years ago
- 97a72c3 Add elidable CXXConstructExpr as block-level expr. It converts an lvalue to a rvalue, which is a useful step during AST evaluation. by Zhongxing Xu · 13 years ago
- 256ef64 Remove '#if 0' from ExprEngine::InlineCall(), and start fresh by wiring up inlining for straight C calls. by Ted Kremenek · 13 years ago
- 9f03b62 [analyzer] Add basic format string vulnerability checking. by Anna Zaks · 13 years ago
- 273c3a3 [analyzer] Add another tests to taint tester. by Anna Zaks · 13 years ago
- eb31a76 [analyzer] Be less pessimistic about invalidation of global variables by Anna Zaks · 13 years ago
- d1247c5 Extend ConditionBRVisitor to handle condition variable assignments. by Ted Kremenek · 13 years ago
- 1c87980 Teach the static analyzer to not treat XPC types as CF types. by Ted Kremenek · 13 years ago
- c1275da Enhance UnixAPIChecker to also warn about zero-sized allocations to calloc() and realloc(). Patch by Cyril Roelandt! by Ted Kremenek · 13 years ago
- de9f253 Add initial version of checker to check if virtual member functions are called transitively by Ted Kremenek · 13 years ago
- 682060c Colorize and condense CFG pretty-printing. by Ted Kremenek · 13 years ago
- b7dcddf Fix typos in analyzer diagnostics pointed out by Matt Beaumont-Gay and Robert Purves. by Ted Kremenek · 13 years ago
- 280cf14 Fix regression in LiveVariables when reasoning about variables captured by blocks. by Ted Kremenek · 13 years ago
- 2cbe791 [analyzer] Do not invalidate arguments when the parameter's by Anna Zaks · 13 years ago
- 6ae3257 Fix inversion of static analyzer path diagnostics for path conditions. by Ted Kremenek · 13 years ago
- b44b966 test/Analysis: fix error message by Dylan Noblesmith · 13 years ago
- 5238474 [analyzer] Fixup for r146793. Add tests for atol and atoll. by Anna Zaks · 13 years ago
- 9ffbe24 [analyzer] Add support for taint flowing through a function (atoi). by Anna Zaks · 13 years ago
- d3d8548 [analyzer] Better stdin support. by Anna Zaks · 13 years ago
- 2135ebb Add support for matching one or more (aka regex +) diagnostic messages with -verify. by Anna Zaks · 13 years ago
- 557a382 [analyzer] Ensure that the order in which checker callbacks are called by Anna Zaks · 13 years ago
- 2fe9b7f Modify how the -verify flag works. Currently, the verification string and by Richard Trieu · 13 years ago
- 9929523 [analyzer] Disable verification step on the failing test. by Anna Zaks · 13 years ago
- 86277c5 [analyzer] Re-enable the test which was failing on one of the bots. by Anna Zaks · 13 years ago
- f512560 [analyzer] Revert the taint test, which is failing on one of the bots for time being. by Anna Zaks · 13 years ago
- efd6989 [analyzer] Treat stdin as a source of taint. by Anna Zaks · 13 years ago
- 1009ac7 [analyzer] Mark output of fscanf and fopen as tainted. by Anna Zaks · 13 years ago
- e55a22b [analyzer] Mark getenv output as tainted. by Anna Zaks · 13 years ago
- e3d250e [analyzer] CStringChecker should not rely on the analyzer generating UndefOrUnknown value when it cannot reason about the expression. by Anna Zaks · 13 years ago
- 6fcd932 Check that arguments to a scanf call match the format specifier, by Hans Wennborg · 13 years ago
- 432a455 [analyzer] Fix inconsistency on when SValBuilder assumes that 2 by Anna Zaks · 13 years ago
- 5fc7def [analyzer] If memory region is tainted mark data as tainted. + random comments by Anna Zaks · 13 years ago
- dc30967 Add an experimental MallocSizeofChecker, which reports inconsistencies by Peter Collingbourne · 13 years ago
- dcf06fa [analyzer] Propagate taint through MemRegions. by Anna Zaks · 13 years ago
- aace9ef [analyzer] Propagate taint through NonLoc to NonLoc casts. by Anna Zaks · 13 years ago
- 4473755 [analyzer] Simplify the expected-warning statement. by Anna Zaks · 13 years ago
- bea728b [analyzer] Add a missing taint tester warning. by Anna Zaks · 13 years ago
- 76462f0 [analyzer] Remove all uses of ConstraintManager::canResonAbout() from by Anna Zaks · 13 years ago
- a50b7ab [analyzer] Add a debug checker to test for tainted data. by Anna Zaks · 13 years ago
- ee5a21f [analyzer] Make KeychainAPI checker less aggressive. radar://10508828 by Anna Zaks · 13 years ago
- 60a4481 Fix typo. by Ted Kremenek · 13 years ago
- a078ecf When analyzing a C++ method (without a specific caller), assume 'this' is non-null. Fixes <rdar://problem/10508787>. by Ted Kremenek · 13 years ago
- 381c066 Per an offline conversation with John McCall, have StmtPrinter actually print out the source expression for OpaqueValueExpr. by Ted Kremenek · 13 years ago
- 214323b Relax RegionStore to allow loads from CodeTextRegions. Apparently you can actually write code that does this. This seems worthy of a checker, but the StoreManager should handle the memory abstraction without crashing. Fixes PR 11450. by Ted Kremenek · 13 years ago
- 3881c69 [analyzer] Add more simple taint tests. by Anna Zaks · 13 years ago
- 8f4caf5 [analyzer] Warn when non pointer arguments are passed to scanf (only when running taint checker). by Anna Zaks · 13 years ago
- 01f2a1e [analyzer] The compiler warning was disabling the analyzer in this test. by Anna Zaks · 13 years ago
- 0d339d0 [analyzer] Do not conjure a symbol when we need to propagate taint. by Anna Zaks · 13 years ago
- 960809e Added missing ImplicitCastExpr around conversion operator call. by Abramo Bagnara · 13 years ago
- e42a0ab Fixed crash with initializer lists and unnamed bitfields in the RegionStore by Jim Goodnow II · 13 years ago
- 9b0970f [analyzer] Catch the first taint propagation implied buffer overflow. by Anna Zaks · 13 years ago
- b302996 Use Sema::RequireCompleteType to check for the completeness of by Douglas Gregor · 13 years ago
- 4c42bb7 [static analyzer] Tweak RetainCountChecker's diagnostics to correctly indicate if a message was due to a property access. This can by Ted Kremenek · 13 years ago
- 729aa06 [analyzer;Regionstore] handle loads from StringLiteral elements for StringLiterals representing wide strings. Fixes PR 11294. by Ted Kremenek · 13 years ago
- ccf1bfd [analyzer] teach AnalysisDeclContext::getSelfDecl() about blocks that capture the 'self' variable of the enclosing ObjC method decl. Fixes <rdar://problem/10380300>. by Ted Kremenek · 13 years ago
- 4b9c2d2 Change the AST representation of operations on Objective-C by John McCall · 13 years ago
- 129d924 Switch these two tests to use the Clang driver instead of CC1. They want by Chandler Carruth · 13 years ago
- 6a9065a Per discussion with John McCall, don't add OpaqueValueExprs to the CFG. by Ted Kremenek · 13 years ago
- 2d950b1 [analyzer] Fix PR11282 - an assert in markAsSink by Anna Zaks · 13 years ago
- cdcc653 [analyzer] BranchNodeBuilder should not generate autotransitions. by Anna Zaks · 13 years ago
- 4a037c7 [analyzer] ObjC message sends to nil receivers that return structs are now okay (compiler zeroes out the data). Fixes <rdar://problem/9151319>. by Ted Kremenek · 13 years ago
- 58f6f1e Add source-level dominators analysis. Patch by Guoping Long! by Ted Kremenek · 13 years ago
- 1d26f48 Rename AnalysisContext to AnalysisDeclContext. Not only is this name more accurate, but it frees up the name AnalysisContext for other uses. by Ted Kremenek · 13 years ago
- beedc5f Add test case for analyzer crash reported in <rdar://problem/10308201> (which is already fixed in mainline). by Ted Kremenek · 13 years ago
- 18c9bd3 Fix the signatures of vfork, __sigsetjmp and sigsetjmp. by Rafael Espindola · 13 years ago
- 762bb9d Update all tests other than Driver/std.cpp to use -std=c++11 rather than by Richard Smith · 13 years ago
- 6700415 Add returns_twice to functions that are known to return twice. This implements by Rafael Espindola · 13 years ago
- a7957ff [analyzer] Warn about the use of insecure, deprecated vfork() function PR11053 (http://llvm.org/bugs/show_bug.cgi?id=11053). by Anna Zaks · 13 years ago
- 46eaf77 [analyzer] Teach the static analyzer about CXXForRangeStmt. Patch by Jim Goodnow II! by Ted Kremenek · 13 years ago
- 744f1cd Provide basic static analyzer support for CXXTemporaryObjectExpr. Patch by Jim Goodnow II. by Ted Kremenek · 13 years ago
- c808503 [static analyzer] Fix crash in LiveVariables and Environment::getSVal() when analyzing C++ pointer-to-member calls. Fixes <rdar://problem/10243398>. by Ted Kremenek · 13 years ago
- 93edbc5 Fix major regression in RetainCountChecker. DefaultSummaries were not being used when they were meant to be. Fixes <rdar://problem/10241614>. by Ted Kremenek · 13 years ago
- d1e40d5 Make -fobjc-nonfragile-abi the -cc1 default, since it's the by John McCall · 13 years ago
- 6a835dd Fix LiveVariables analysis bug with MaterializeTemporaryExpr and fix handling in ExprEngine. Fixes <rdar://problem/10201666>. by Ted Kremenek · 13 years ago
- b459cf3 Address PR10616. The crash has already been fixed by Ted in r140725, so just refactor to use existing API + test case. by Anna Zaks · 13 years ago
- 7df2ff4 Tweak the interface for analyzing the CF conventions for a name by John McCall · 13 years ago
- e4c6675 Fix crash when analyzing C++ code involving constant enums and switch statements (<rdar://problem/10202899>). by Ted Kremenek · 13 years ago
- 0658879 [analyzer] Fix a bug in RetainReleaseChecker diagnostics. It gives more precise error message on the modified test case (and prevents duplicate diagnostics when we purge at block granularity). by Anna Zaks · 13 years ago
- d309528 [analyzer] Add -analyzer-purge option which can take on multiple values, remove -analyzer-purge=none. (Small refactor as well: move the work of constructing AnalysisManager from the callers to the class itself.) by Anna Zaks · 13 years ago
- 7e5f112 Fix a crash in MallocOverflowSecurityChecker. Patch by Lei Zhang. by Anna Zaks · 13 years ago
- 6479c66 [analyzer] Remove target triple from the malloc overflow test. by Anna Zaks · 13 years ago