1. 79c9c75 MacOSKeychainAPIChecker: If the allocated data address entered as an enclosing function parameter, skip it to avoid false positives. by Anna Zaks · 13 years ago
  2. 703ffb1 MacOSKeychainAPIChecker: by Anna Zaks · 13 years ago
  3. ddddd48 De-Unicode-ify. by NAKAMURA Takumi · 13 years ago
  4. 7d11c3f [analyzer] add more buffer overflow tests to show we handle sizeof(VLA) in obstruse ways... by Ted Kremenek · 13 years ago
  5. ca0b57e KeychainAPI checker: Generate an error on double allocation. Pull out getAsPointeeMemoryRegion so that it could be reused. by Anna Zaks · 13 years ago
  6. 62a811d KeychainAPI checker: forgot to commit the test with r136930. This should fix the bot. by Anna Zaks · 13 years ago
  7. 03826aa KeychainAPI checker: Add basic diagnostics. Track MemoryRegion istead of SymbolicRef since the address might not be a symbolic value in some cases, for example in fooOnlyFree() test. by Anna Zaks · 13 years ago
  8. 033a07e [analyzer] rename all experimental checker packages to have 'experimental' be the common root package. by Ted Kremenek · 13 years ago
  9. 17f7bdd [analyzer] Introduce MallocOverflowSecurityChecker, a simple flow-sensitive checker that may be useful for security auditing. This checker is currently too noisy to be on by default. by Ted Kremenek · 13 years ago
  10. e68b5f1 KeychainAPI checker: only check the paths on which the allocator function returned noErr. (+ minor cleanup) by Anna Zaks · 13 years ago
  11. f57be28 Add a skeleton for the Keychain Services API Checker. Register it as OSX experimental for now. Note, the checker still does not handle tracking of escaped values, taking into account the return value of the allocator functions, nor the actual bug reporting.. by Anna Zaks · 13 years ago
  12. a4c7a43 Really remove FlatStoreManager and BasicStoreManager, this time from the driver. Also remove associated tests. Sorry for the messy commits; this is the result of a botched Git merge. by Ted Kremenek · 13 years ago
  13. fc5b21d Remove flat store tests. by Ted Kremenek · 13 years ago
  14. 8829989 [analyzer] Overhaul how the static analyzer expects CFGs by forcing CFGs to be linearized only when used by the static analyzer. This required a rewrite of LiveVariables, and exposed a ton of subtle bugs. by Ted Kremenek · 13 years ago
  15. eea72a9 [analyzer] fix handling of MaterializeTemporaryExpr by binding the result value to by Ted Kremenek · 13 years ago
  16. eee3ef1 objc: clang should warn if redeclaration of methods by Fariborz Jahanian · 13 years ago
  17. 6c2c250 In Objective-C, pull arbitrary attributes from overridden by John McCall · 13 years ago
  18. dcb1d5d [analysis] Add checks for double-locking and lock order reversal bugs for by Jordy Rose · 13 years ago
  19. 797a7be [analyzer] Per discussions with the Cocoa team, extend CF naming conventions to extend to camel case functions instead of just title case functions. Fixes <rdar://problem/9732321>. by Ted Kremenek · 13 years ago
  20. deefaf6 Update retain-release.m to match updated warnings from r135310 by Jordy Rose · 13 years ago
  21. 5b5402b Add tests for CFRefReport's path notes, and fix a few typos and non-standard terminology ('+0 retain counts') caught by the tests. by Jordy Rose · 13 years ago
  22. 8f08426 [analyzer] GNU __null is a pointer-sized integer, not a pointer. Fixes PR10372. by Jordy Rose · 13 years ago
  23. 786dcd9 Teach the static analyzer's interpretation of Cocoa conventions to by Douglas Gregor · 13 years ago
  24. 0fa6bf7 [analyzer] strnlen isn't a builtin, don't test for it by Jordy Rose · 13 years ago
  25. eda3687 [analyzer] Use UnknownVal when default-initializing arrays whose element types we don't model, to distinguish them from uninitialized arrays (PR10163). by Jordy Rose · 13 years ago
  26. 8912aae [analyzer] Finish size argument checking for strncat (and strncpy). by Jordy Rose · 13 years ago
  27. 5e5f150 [analyzer] Re-enable checking for strncpy, along with a new validation of the size argument. strncat is not yet up-to-date, but I'm leaving it enabled for now (there shouldn't be any false positives, at least...) by Jordy Rose · 13 years ago
  28. 9e49d9f [analyzer] Eliminate "byte string function" from CStringChecker's diagnostics, and make it easier to provide custom messages for overflow checking, in preparation for re-enabling strncpy checking. by Jordy Rose · 13 years ago
  29. adc42d4 [analyzer] Clean up modeling of strcmp, including cases where a string literal has an embedded null character, and where both arguments are the same buffer. Also use nested ifs rather than early returns; in this case early returns will lose any assumptions we've made earlier in the function. by Jordy Rose · 13 years ago
  30. f85e193 Automatic Reference Counting. by John McCall · 14 years ago
  31. d5af0e1 [analyzer] Revise CStringChecker's modelling of strcpy() and strcat(): by Jordy Rose · 14 years ago
  32. 467f7c8 [analyzer] CStringChecker checks functions in the C standard library, not C++. Its external name is now unix.experimental.CString. by Jordy Rose · 14 years ago
  33. 793bff3 [analyzer] Fix modeling of strnlen to be more conservative. Move tests we can't properly model (yet?) to string-fail.c. by Jordy Rose · 14 years ago
  34. 4c4efee Eliminate the -f[no]objc-infer-related-result-type flags; there's no by Douglas Gregor · 14 years ago
  35. ac73ea8 [analyzer] PR8962 again. Ban ParenExprs (and friends) from block-level expressions (by calling IgnoreParens before adding expressions to blocks). Undo 132769 (LiveVariables' local IgnoreParens), since it's no longer necessary. by Jordy Rose · 14 years ago
  36. 7fead31 [analyzer] Ignore parentheses around block-level expressions when computing liveness. Fixes the other half of PR8962. by Jordy Rose · 14 years ago
  37. 22043b5 [analyzer] Look through __extension__ expressions in a GRState's Environment. Fixes PR8962. by Jordy Rose · 14 years ago
  38. 3f8bb2f [analyzer] Don't crash when copying an unknown number of bytes with memcpy(). Also handle all memcpy-family return values in evalCopyCommon(), rather than having some outside and some inside. by Jordy Rose · 14 years ago
  39. 22d2717 [analyzer] Fix handling of "copy zero bytes" for memcpy and friends. by Jordy Rose · 14 years ago
  40. be460d8 [analyzer] __mempcpy_chk is the same as mempcpy (at least to CStringChecker) by Jordy Rose · 14 years ago
  41. f136546 Tighen analyzer diagnostics w.r.t ObjC/CF leaks. by Ted Kremenek · 14 years ago
  42. e5cfd52 static analyzer: when conservatively evaluating functions, don't invalidate the values of globals when the called function is strlen. by Ted Kremenek · 14 years ago
  43. d1e015e Teach analyzer about cf_returns_not_retained for C functions. by Ted Kremenek · 14 years ago
  44. d368d71 Enhance retain/release checker to flag warnings when functions returning CG types do not follow the Core Foundation naming conventions. by Ted Kremenek · 14 years ago
  45. 29c9e62 Add explicit CFG support for ignoring static_asserts. by Ted Kremenek · 14 years ago
  46. ce30688 Fix regression in static analyzer's handling of prefix '--' operator. It was being treated as postfix '--' in C mode. by Ted Kremenek · 14 years ago
  47. c46d641 Teach RegionStore not to symbolic array values whose indices it cannot reason about. by Ted Kremenek · 14 years ago
  48. 6e744db Teach static analyzer to analyze Objective-C methods in category implementations. by Ted Kremenek · 14 years ago
  49. bc869de Elide __label__ declarations from the CFG. This resolves a crash in CFGRecStmtDeclVisitor (crash in static analyzer). by Ted Kremenek · 14 years ago
  50. 094ea0a Removing strncpy() checking in CString checker for now. Some significant changes need to be made to properly support modeling of it since it potentially leaves strings non-null terminated. by Lenny Maiorani · 14 years ago
  51. 9ca2851 Tweak the retain/release checker to not stop tracking retained objects when calling C++ methods. This is a temporary solution to prune false positives until we have a general story using annotations. by Ted Kremenek · 14 years ago
  52. 35bdbf4 Augment retain/release checker to not warn about tracked objects passed as arguments to C++ constructors. This is a stop-gap measure for Objective-C++ code that uses smart pointers to manage reference counts. by Ted Kremenek · 14 years ago
  53. 454fd2d Implements strncasecmp() checker and simplifies some of the logic around creating substrings if necessary and calling the appropriate StringRef::compare/compare_lower(). by Lenny Maiorani · 14 years ago
  54. a2a3da6 Move the SelfInit checker to the 'cocoa.experimental' package. by Ted Kremenek · 14 years ago
  55. b94dd9e Adjust test/Analysis/retain-release.m to also test the retain/release checker in Objective-C++ mode. by Ted Kremenek · 14 years ago
  56. bd1d16a Implements strcasecmp() checker in Static Analyzer. by Lenny Maiorani · 14 years ago
  57. 4d8d803 More accurately model realloc() when the size argument is 0. realloc() with a size of 0 is equivalent to free(). The memory region should be marked as free and not used again. by Lenny Maiorani · 14 years ago
  58. 6b4f567 Allow 'Environment::getSVal()' to allow an optional way for checkers to do a direct lookup to values bound to expressions, without by Ted Kremenek · 14 years ago
  59. 8a285ae Emit a -Wnull-dereference warning for "*null" not just "*null = something". Addresses rdar://9269271. by Argyrios Kyrtzidis · 14 years ago
  60. 357f6ee Implements the strncmp() checker just like the strcmp() checker, but with bounds. Requires LLVM svn r129582. by Lenny Maiorani · 14 years ago
  61. e970c60 Add static analyzer support for C++'0X nullptr. Patch by Jim Goodnow II. by Ted Kremenek · 14 years ago
  62. f05982b Make the VariadicMethodTypeChecker accept block pointers as Objective-C pointers. Fixes PR9746. by Anders Carlsson · 14 years ago
  63. b403d6d Fix PR9741. The implicit declarations created for range-based for loops weren't being added to the DeclContext (nor were they being marked as implicit). Also, the declarations were being emitted in the wrong order when building the CFG. by Richard Smith · 14 years ago
  64. fc8f0e1 fix a bunch of comment typos found by codespell. Patch by by Chris Lattner · 14 years ago
  65. 9281efe Teach VariadicMethodTypeChecker to not crash when processing methods declared in protocols. by Ted Kremenek · 14 years ago
  66. 82cfc68 ArrayBoundCheckerV2: don't arbitrarily warn about indexing before the 0-index of a symbolic region. In many cases that isn't really the base offset. by Ted Kremenek · 14 years ago
  67. 318dd92 This patch adds modeling of strcmp() to the CString checker. Validates inputs are not NULL and are real C strings, then does the comparison and binds the proper return value. Unit tests included. by Lenny Maiorani · 14 years ago
  68. 9d5d308 static analyzer: invalidate by-ref arguments passed to constructors in a 'new' expression. by Ted Kremenek · 14 years ago
  69. 3bab50b Fix bug in SimpleSValBuilder where '--' pointer arithmetic was treated like '++' pointer arithmetic. by Ted Kremenek · 14 years ago
  70. bf1a667 RegionStoreManager::invalidateRegions: treat classes the same as structs. by Ted Kremenek · 14 years ago
  71. 235c02f Teach GRState::getSValAsScalarOrLoc() about C++ references. by Ted Kremenek · 14 years ago
  72. 9fec9b1 C++ static analysis: also invalidate fields of objects that are the callees in C++ method calls. by Ted Kremenek · 14 years ago
  73. 067bbd0 strcat() and strncat() model additions to CStringChecker. by Lenny Maiorani · 14 years ago
  74. 5fe9872 Start overhauling static analyzer support for C++ constructors. The inlining support isn't complete, and needs by Ted Kremenek · 14 years ago
  75. 98b8f16 When updating the retain summary based on {cf,ns}_consumed attributes, by John McCall · 14 years ago
  76. 9cb677e Add security syntax checker for strcat() which causes the Static Analyzer to generate a warning any time the strcat() function is used with a note suggesting to use a function which provides bounded buffers. CWE-119. by Lenny Maiorani · 14 years ago
  77. d40066b Fix PR 9626 (duplicated self-init warnings under -Wuninitialized) with numerous CFG and UninitializedValues analysis changes: by Ted Kremenek · 14 years ago
  78. 1659acb Change test/Analysis/idempotent-operations.c to output the .plist file in the test output directory. by Argyrios Kyrtzidis · 14 years ago
  79. 45fa623 Fix RegionStore bug when doing a field load whose parent is also a field assigned a LazyCompoundValue. Fixes <rdar://problem/9163742> and PR 9522. by Ted Kremenek · 14 years ago
  80. 422ab7a Teach IdempotentOperationsChecker about paths aborted because ExprEngine didn't know how to handle a specific Expr type. by Ted Kremenek · 14 years ago
  81. 5b67a82 Add security syntax checker for strcpy() which causes the Static Analyzer to generate a warning any time the strcpy() function is used with a note suggesting to use a function which provides bounded buffers. by Lenny Maiorani · 14 years ago
  82. b8b875b Adding Static Analyzer checker for mempcpy(). by Lenny Maiorani · 14 years ago
  83. 94ae8fd Static analyzer: fix bug in handling of dynamic_cast<>. The sink node wouldn't always be the final node, thus causing the state to continue propagating. Instead, by Ted Kremenek · 14 years ago
  84. 41c5f49 Teach static analyzer about the basics of handling new[]. We still don't simulate constructors, but at least the analyzer doesn't think the return value is uninitialized. by Ted Kremenek · 14 years ago
  85. b277159 Begin reworking static analyzer support for C++ method calls. The current logic was divorced by Ted Kremenek · 14 years ago
  86. 65b427f Don't add a symbolic region for 'this' if the member function is static. by Anders Carlsson · 14 years ago
  87. 5188507 Rework checker "packages" and groups to be more hierarchical. by Ted Kremenek · 14 years ago
  88. f3f9293 Teach VariadicMethodTypeChecker about pointers attributed as 'NSObject'. by Ted Kremenek · 14 years ago
  89. 928c415 Teach VariadicMethodTypeChecker that CF references are valid arguments to variadic Objective-C methods. by Ted Kremenek · 14 years ago
  90. 6137441 Tweak RegionStore's handling of lazy compound values to use the 'Default' versus 'Direct' binding key, thus allowing specific elements of an array/struct to be overwritten without by Ted Kremenek · 14 years ago
  91. d5fde21 VariadicMethodTypeChecker: don't warn for null pointer constants passed to variadic Objective-C methods. by Ted Kremenek · 14 years ago
  92. cf995d3 Remove bogus assertion in IdempotentOperationsChecker. by Ted Kremenek · 14 years ago
  93. f3f5379 Remove old UninitializedValues analysis. by Ted Kremenek · 14 years ago
  94. 6fb5c1f Tweak VariadicMethodTypeChecker to only create one ExplodedNode when issuing multiple warnings for the same message expression. by Ted Kremenek · 14 years ago
  95. 4597b7b Add an Objective-C checker that checks that arguments passed to some variadic Objective-C methods are of Objective-C pointer types. by Anders Carlsson · 14 years ago
  96. e9cd9c0 Fix CFG assertion failure reported in PR 9467. This was due to recent changes in optimizing CFGs for switch statements. by Ted Kremenek · 14 years ago
  97. 603ea78 XFAIL this on windows where <vector> contains surprises. by Jakob Stoklund Olesen · 14 years ago
  98. 9ede307 Tweak test to hopefully appease FreeBSD buildbot. by Ted Kremenek · 14 years ago
  99. e56d349 Remove stray output file. by Ted Kremenek · 14 years ago
  100. ade3195 Re-enable the IdempotentOperations checker for --analyze, and put it and the DeadStores checker into the "deadcode" group. by Ted Kremenek · 14 years ago