infer_clone/infer/tests/codetoanalyze/cpp/quandary/.inferconfig

{
  "force-delete-results-dir": true,
  "quandary-sources": [
    {
      "procedure": "__infer_taint_source",
      "kind": "Other"
    },
    {
      "procedure": "basics::Obj::method_source",
      "kind": "Other"
    },
    {
      "procedure": "basics::Obj::static_source",
      "kind": "Other"
    },
    {
      "procedure": "basics::template_source",
      "kind": "Other"
    },
    {
      "procedure": "basics::Obj::string_source",
      "kind": "Other"
    },
    {
      "procedure": "basics::Obj::taint_arg_source",
      "kind": "Other",
      "index": "0"
    },
    {
      "procedure": "allocs::allocation_source",
      "kind": "EnvironmentVariable"
    }
  ],
  "quandary-sinks": [
    {
      "procedure": "__infer_taint_sink",
      "kind": "Other",
      "index": "0"
    },
    {
      "procedure": "__infer_sql_sink",
      "kind": "SQL",
      "index": "all"
    },
    {
      "procedure": "basics::Obj::method_sink",
      "kind": "Other",
      "index": "1"
    },
    {
      "procedure": "basics::Obj::static_sink",
      "kind": "Other",
      "index": "0"
    },
    {
      "procedure": "basics::template_sink",
      "kind": "Other",
      "index": "0"
    },
    {
      "procedure": "basics::Obj::string_sink",
      "kind": "Other",
      "index": "1"
    }
  ],
  "quandary-sanitizers": [
    {
      "procedure": "__infer_all_sanitizer",
      "kind": "All"
    },
    {
      "procedure": "__infer_string_sanitizer",
      "kind": "Escape"
    },
    {
      "procedure": "basics::Obj::sanitizer1"
    },
    {
      "procedure": "basics::Obj::sanitizer2"
    }
  ],
  "quandary-endpoints": [
    "basics::Obj::endpoint",
    "execs::Obj::endpoint"
  ]
}
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`{`
[config] add option to force deletion of results dir Summary: Since D5381239, infer is careful not to delete directories that do not "look like" results directories on startup, in case the user passed, eg, `-o /`. In our repo, lots of results dir are created by build/test of infer, and when the version of infer changes and the expected contents of results directories change then it might start refusing to delete the results directories created with another version of infer. Add an option to force infer to delete the results directory no matter how dodgy it looks, and use it in our repo by adding the option in every .inferconfig. Reviewed By: mbouaziz Differential Revision: D5870984 fbshipit-source-id: 09412de 7 years ago			`"force-delete-results-dir": true,`
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`"quandary-sources": [`
			`{`
			`"procedure": "__infer_taint_source",`
			`"kind": "Other"`
			`},`
			`{`
			`"procedure": "basics::Obj::method_source",`
			`"kind": "Other"`
			`},`
			`{`
			`"procedure": "basics::Obj::static_source",`
			`"kind": "Other"`
			`},`
			`{`
			`"procedure": "basics::template_source",`
			`"kind": "Other"`
[quandary] handle return value passed by reference in sources Summary: Needed because this is how the Clang frontend translates returns of non-POD, non pointer values (I think)? Will handle the more general case of pass by reference soon. Reviewed By: jvillard Differential Revision: D5017653 fbshipit-source-id: 1fbcea5 8 years ago			`},`
			`{`
			`"procedure": "basics::Obj::string_source",`
			`"kind": "Other"`
[quandary] allocation as a sink Reviewed By: the-st0rm Differential Revision: D5029613 fbshipit-source-id: db0924e 8 years ago			`},`
[quandary] allow specification of parameter sources via JSON Summary: Same as D5026082, but allowing specification in JSON rather than harcoded in Infer. Reviewed By: jeremydubreil Differential Revision: D5030042 fbshipit-source-id: 8a6cfee 8 years ago			`{`
			`"procedure": "basics::Obj::taint_arg_source",`
			`"kind": "Other",`
			`"index": "0"`
			`},`
[quandary] allocation as a sink Reviewed By: the-st0rm Differential Revision: D5029613 fbshipit-source-id: db0924e 8 years ago			`{`
			`"procedure": "allocs::allocation_source",`
			`"kind": "EnvironmentVariable"`
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`}`
			`],`
			`"quandary-sinks": [`
			`{`
			`"procedure": "__infer_taint_sink",`
			`"kind": "Other",`
			`"index": "0"`
			`},`
[quandary] SQL sinks Reviewed By: jeremydubreil Differential Revision: D5214059 fbshipit-source-id: 101f94e 8 years ago			`{`
			`"procedure": "__infer_sql_sink",`
			`"kind": "SQL",`
			`"index": "all"`
			`},`
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`{`
			`"procedure": "basics::Obj::method_sink",`
			`"kind": "Other",`
			`"index": "1"`
			`},`
			`{`
			`"procedure": "basics::Obj::static_sink",`
			`"kind": "Other",`
			`"index": "0"`
[quandary] handle return value passed by reference in sources Summary: Needed because this is how the Clang frontend translates returns of non-POD, non pointer values (I think)? Will handle the more general case of pass by reference soon. Reviewed By: jvillard Differential Revision: D5017653 fbshipit-source-id: 1fbcea5 8 years ago			`},`
[quandary] treat call to unknown operator= as assignment Summary: This lets us handle basic stuff like writes to fields. Reviewed By: jvillard Differential Revision: D5017735 fbshipit-source-id: 5697b12 8 years ago			`{`
			`"procedure": "basics::template_sink",`
			`"kind": "Other",`
			`"index": "0"`
			`},`
[quandary] handle return value passed by reference in sources Summary: Needed because this is how the Clang frontend translates returns of non-POD, non pointer values (I think)? Will handle the more general case of pass by reference soon. Reviewed By: jvillard Differential Revision: D5017653 fbshipit-source-id: 1fbcea5 8 years ago			`{`
			`"procedure": "basics::Obj::string_sink",`
			`"kind": "Other",`
			`"index": "1"`
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`}`
[quandary] allowing specification of C++ endpoints Reviewed By: jeremydubreil Differential Revision: D5095655 fbshipit-source-id: 269959d 8 years ago			`],`
[quandary] support for basic return value sanitizers Summary: For now, we just support clearing the taint on a return value. Ideally, we would associate a kind with the sanitizer and only clear taint that matches that kind. However, it's fairly complicated to make that work properly with footprint sources. I have some ideas about how to do it with passthroughs instead, but let's just do the simple thing for now. Reviewed By: jeremydubreil Differential Revision: D5141906 fbshipit-source-id: a5b8b5e 8 years ago			`"quandary-sanitizers": [`
[quandary] thrift services as sources + remote code execution risk issue type Differential Revision: D6177526 fbshipit-source-id: 245095e 7 years ago			`{`
[quandary] support multiple sanitizer kinds in C++ Summary: Just changing ClangTrace to actually look at the different sanitizer kinds. Reviewed By: jeremydubreil Differential Revision: D6325086 fbshipit-source-id: 5da236d 7 years ago			`"procedure": "__infer_all_sanitizer",`
			`"kind": "All"`
			`},`
			`{`
			`"procedure": "__infer_string_sanitizer",`
			`"kind": "Escape"`
[quandary] thrift services as sources + remote code execution risk issue type Differential Revision: D6177526 fbshipit-source-id: 245095e 7 years ago			`},`
[quandary] support for basic return value sanitizers Summary: For now, we just support clearing the taint on a return value. Ideally, we would associate a kind with the sanitizer and only clear taint that matches that kind. However, it's fairly complicated to make that work properly with footprint sources. I have some ideas about how to do it with passthroughs instead, but let's just do the simple thing for now. Reviewed By: jeremydubreil Differential Revision: D5141906 fbshipit-source-id: a5b8b5e 8 years ago			`{`
			`"procedure": "basics::Obj::sanitizer1"`
			`},`
			`{`
			`"procedure": "basics::Obj::sanitizer2"`
			`}`
			`],`
[quandary] allowing specification of C++ endpoints Reviewed By: jeremydubreil Differential Revision: D5095655 fbshipit-source-id: 269959d 8 years ago			`"quandary-endpoints": [`
[quandary] only report code injection via endpoints on strings Reviewed By: oebeling, jeremydubreil Differential Revision: D5214471 fbshipit-source-id: 9af7341 8 years ago			`"basics::Obj::endpoint",`
			`"execs::Obj::endpoint"`
[quandary] allow custom sources/sinks in C++ Reviewed By: akotulski Differential Revision: D4975414 fbshipit-source-id: 4fd7078 8 years ago			`]`
			`}`