|
|
|
|
---
|
|
|
|
|
title: "Buffer Overrun Analysis (InferBO)"
|
|
|
|
|
description: "InferBO is a detector for out-of-bounds array accesses."
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
InferBO is a detector for out-of-bounds array accesses.
|
|
|
|
|
|
|
|
|
|
Activate with `--bufferoverrun`.
|
|
|
|
|
|
|
|
|
|
Supported languages:
|
|
|
|
|
- C/C++/ObjC: Yes
|
|
|
|
|
- Java: Yes
|
|
|
|
|
|
|
|
|
|
You can read about its origins in this [blog post](https://research.fb.com/inferbo-infer-based-buffer-overrun-analyzer/).
|
|
|
|
|
|
|
|
|
|
## List of Issue Types
|
|
|
|
|
|
|
|
|
|
The following issue types are reported by this checker:
|
|
|
|
|
- [BUFFER_OVERRUN_L1](all-issue-types#buffer_overrun_l1)
|
|
|
|
|
- [BUFFER_OVERRUN_L2](all-issue-types#buffer_overrun_l2)
|
|
|
|
|
- [BUFFER_OVERRUN_L3](all-issue-types#buffer_overrun_l3)
|
|
|
|
|
- [BUFFER_OVERRUN_L4](all-issue-types#buffer_overrun_l4)
|
|
|
|
|
- [BUFFER_OVERRUN_L5](all-issue-types#buffer_overrun_l5)
|
|
|
|
|
- [BUFFER_OVERRUN_R2](all-issue-types#buffer_overrun_r2)
|
|
|
|
|
- [BUFFER_OVERRUN_S2](all-issue-types#buffer_overrun_s2)
|
|
|
|
|
- [BUFFER_OVERRUN_T1](all-issue-types#buffer_overrun_t1)
|
|
|
|
|
- [BUFFER_OVERRUN_U5](all-issue-types#buffer_overrun_u5)
|
|
|
|
|
- [CONDITION_ALWAYS_FALSE](all-issue-types#condition_always_false)
|
|
|
|
|
- [CONDITION_ALWAYS_TRUE](all-issue-types#condition_always_true)
|
|
|
|
|
- [INFERBO_ALLOC_IS_BIG](all-issue-types#inferbo_alloc_is_big)
|
|
|
|
|
- [INFERBO_ALLOC_IS_NEGATIVE](all-issue-types#inferbo_alloc_is_negative)
|
|
|
|
|
- [INFERBO_ALLOC_IS_ZERO](all-issue-types#inferbo_alloc_is_zero)
|
|
|
|
|
- [INFERBO_ALLOC_MAY_BE_BIG](all-issue-types#inferbo_alloc_may_be_big)
|
|
|
|
|
- [INFERBO_ALLOC_MAY_BE_NEGATIVE](all-issue-types#inferbo_alloc_may_be_negative)
|
|
|
|
|
- [INFERBO_ALLOC_MAY_BE_TAINTED](all-issue-types#inferbo_alloc_may_be_tainted)
|
|
|
|
|
- [INTEGER_OVERFLOW_L1](all-issue-types#integer_overflow_l1)
|
|
|
|
|
- [INTEGER_OVERFLOW_L2](all-issue-types#integer_overflow_l2)
|
|
|
|
|
- [INTEGER_OVERFLOW_L5](all-issue-types#integer_overflow_l5)
|
|
|
|
|
- [INTEGER_OVERFLOW_R2](all-issue-types#integer_overflow_r2)
|
|
|
|
|
- [INTEGER_OVERFLOW_U5](all-issue-types#integer_overflow_u5)
|
|
|
|
|
- [UNREACHABLE_CODE](all-issue-types#unreachable_code)
|
