5ce86a1501
[inferbo] Do not compare deref_kind
...
Reviewed By: skcho
Differential Revision: D13544747
fbshipit-source-id: cac5c635a
6 years ago
5d1a213f52
[Hil] Fix failure in exception node
...
Reviewed By: jberdine
Differential Revision: D13541755
fbshipit-source-id: a58458046
6 years ago
85bab87d16
[cost] The first cost model is a log
...
Reviewed By: ezgicicek
Differential Revision: D13175881
fbshipit-source-id: 7718bdf0d
6 years ago
2ebbf554e5
[inferbo] Do not expose unsafe Itv.lb/ub
...
Reviewed By: skcho
Differential Revision: D13533467
fbshipit-source-id: 4a810a411
6 years ago
ddc15ad663
[racerd] move models and domain operations to respective source files
...
Reviewed By: mbouaziz
Differential Revision: D13537501
fbshipit-source-id: 88dbc022d
6 years ago
11373c8a6b
[racerd] strip down domain interface
...
Reviewed By: mbouaziz
Differential Revision: D13537494
fbshipit-source-id: 42d8bc89b
6 years ago
c09068e3bf
[HIL] Preserve ExitScope location information in the translation from SIL
...
Summary: The title
Reviewed By: ngorogiannis
Differential Revision: D13537402
fbshipit-source-id: bee7b3662
6 years ago
a48421aa0a
[inferbo] XML escape in L.d_printfln
...
Reviewed By: mbouaziz
Differential Revision: D13527168
fbshipit-source-id: 0ae420cbb
6 years ago
002e470137
[racerd] fix bug in ownership transitivity
...
Reviewed By: jvillard
Differential Revision: D13488078
fbshipit-source-id: 9d40d75bc
6 years ago
33aa07357f
[inferbo] Model Java collections using arrays
...
Reviewed By: ezgicicek, skcho
Differential Revision: D13190960
fbshipit-source-id: fba435f34
6 years ago
b50f56de16
[racerd] properly recognize all non-source variables
...
Reviewed By: jeremydubreil, mbouaziz
Differential Revision: D13505828
fbshipit-source-id: f5a0be17d
6 years ago
846d6fa23d
[nullsafe][android] stop the analysis if there is no source file to analyze
...
Reviewed By: mbouaziz
Differential Revision: D13509512
fbshipit-source-id: 565a27eef
6 years ago
2a139a2220
[pulse] Fix operator= case with temporaries
...
Summary: In the `operator=` case that assigns from a temporary, we want to assign an object of a temporary not it's address (as a comment already says)
Reviewed By: jvillard
Differential Revision: D13518496
fbshipit-source-id: 72bd23623
6 years ago
1827b42f68
[inferbo] Improve traces of binary operators when nothing changes
...
Reviewed By: ezgicicek
Differential Revision: D13517607
fbshipit-source-id: 960d4e993
6 years ago
b19ad38dae
[pulse] Example of use after destructor for temporaries
...
Summary: Adding a test case for use after destructor for temporaries. At the moment pulse does not find it as frontend does not inject destructors for temporaries.
Reviewed By: jvillard
Differential Revision: D13506229
fbshipit-source-id: 31b9466f7
6 years ago
b46f55d0bc
[purity] Mark functions with empty modified params as pure
...
Reviewed By: mbouaziz, ngorogiannis
Differential Revision: D13452909
fbshipit-source-id: f0dc419b1
6 years ago
24bd229ada
[infer][eradicate] example of error messages involving the temporary variables used to translate logical operations and conditional assignment
...
Reviewed By: ezgicicek
Differential Revision: D13516477
fbshipit-source-id: 37096f273
6 years ago
de3c7bac45
[inferbo][easy] Shift right zero
...
Reviewed By: ezgicicek
Differential Revision: D13517435
fbshipit-source-id: fa107fc2c
6 years ago
8d3363f677
[pulse] record simple double free test
...
Summary: Just to make sure it is caught.
Reviewed By: da319
Differential Revision: D13517263
fbshipit-source-id: 976d3a3ae
6 years ago
8f060939d6
[inferbo] Java pointers, arrays and collections
...
Reviewed By: ezgicicek
Differential Revision: D13128600
fbshipit-source-id: 0dd876692
6 years ago
4343f9c8b2
[cost] Adds Log elements to polynomials
...
Reviewed By: ezgicicek
Differential Revision: D13175872
fbshipit-source-id: 2f1337317
6 years ago
fc26f79b92
[inferbo] Weaken canonical path in on-demand value generation
...
Summary:
It weakens canonical path in order to avoid an explosion of locations when a struct type has pointers to struct.
For example:
```
struct Tree {
struct Tree *root;
struct Tree *left;
struct Tree *right;
};
```
It was able to generate lots of abstract locations before this diff:
```
t->root
t->left
t->right
t->root->left
t->root->right
t->left->root
t->left->right
t->right->root
t->right->left
t->root->left->right
t->root->right->left
t->left->root->right
t->left->right->root
t->right->root->left
t->right->left->root
```
By this diff, pointer fields that have the same type are (unsoundly) canonicalized to the same one. For example,
```
t->root
t->root->left
t->root->right
t->root->left->right
t->root->right->left
```
are canonicalized to `t->root`. This is definitely unsound but I believe it is better than the location explosion by which analyses do not terminate in a reasonable time or giving a fixed limit of depth to the field access.
Reviewed By: mbouaziz
Differential Revision: D13503808
fbshipit-source-id: 867018712
6 years ago
1f2b0d4152
Add new predicate has_cxx_qual_name and macro %cxx_full_name%
...
Reviewed By: jvillard
Differential Revision: D13490505
fbshipit-source-id: df66224d6
6 years ago
a130556869
[quandary] Separate insecure intent handling issue type when call is in an exposed class
...
Reviewed By: AmarBhosale
Differential Revision: D13465395
fbshipit-source-id: ad0ed5b17
6 years ago
2d2d861686
[racerd] reduce size of IssueAuxData
...
Reviewed By: jvillard
Differential Revision: D13505031
fbshipit-source-id: 90f1974a7
6 years ago
397f4a1973
[inferbo] pp fields
...
Reviewed By: ezgicicek
Differential Revision: D13505835
fbshipit-source-id: 8179e5134
6 years ago
3acf5bf2ad
[Cost] Do not flag variations to/from zero-costing functions
...
Reviewed By: ezgicicek
Differential Revision: D13504638
fbshipit-source-id: 9f07b83d7
6 years ago
9f333bb433
[quandary] Different source kinds for endpoints
...
Reviewed By: ngorogiannis
Differential Revision: D13465357
fbshipit-source-id: 0e5f00a93
6 years ago
f6c2bd3f61
[quandary] Insecure Intent Handling
...
Reviewed By: ngorogiannis
Differential Revision: D13163873
fbshipit-source-id: 3f1417f9c
6 years ago
809100d612
[inferbo] Prettier field name for Java in traces
...
Reviewed By: ngorogiannis
Differential Revision: D13505750
fbshipit-source-id: f9a322449
6 years ago
dfd725d46c
[quandary] Also use summary for direct sources
...
Reviewed By: ngorogiannis
Differential Revision: D13488414
fbshipit-source-id: fcf2947cf
6 years ago
9868f7f763
[pulse] warn on returning address of C++ temporary
...
Summary:
When a C++ temporary goes out of scope, tag its address in the heap with
a new attribute `AddressOfCppTemporary` so that we can later check that
we don't return it.
Reviewed By: da319
Differential Revision: D13466898
fbshipit-source-id: 8808338b4
6 years ago
db1814b1d1
[pulse] detect stack variable address escape
...
Summary:
When assign to the special `return` variable, check that the result is
not the address of a local variable, otherwise report.
Reviewed By: ngorogiannis
Differential Revision: D13466896
fbshipit-source-id: 465da7f13
6 years ago
c77f22310a
[pulse] rewrite test to avoid stack variable address escape
...
Summary: Pulse is about to be smart enough to detect that bug.
Reviewed By: da319
Differential Revision: D13466895
fbshipit-source-id: 79afd2d51
6 years ago
1b79f13a18
[ownership] make heuristic for reporting on lambdas more shareable
...
Summary: I want to use that function in Pulse too so let's share it.
Reviewed By: da319
Differential Revision: D13466897
fbshipit-source-id: 1bf3afee4
6 years ago
2bb9e5ad85
[pulse] rename function that was never a pulse FP
...
Summary: Naming it `FP_` was a mistake in the original commit that copied the tests over as pulse has never reported on that method.
Reviewed By: da319
Differential Revision: D13465324
fbshipit-source-id: f8b24ebda
6 years ago
61d75d9991
[infer][nullsafe] use the same human readable error message for Eradicate and the new Nullsafe backend
...
Reviewed By: mbouaziz
Differential Revision: D13414508
fbshipit-source-id: 06a366177
6 years ago
6920532e12
[inferbo] Forget only updated locations from latest prune at Store
...
Reviewed By: mbouaziz
Differential Revision: D13414636
fbshipit-source-id: 8dbe7ceb6
6 years ago
a6d78db9b5
[quandary] Simplify endpoints config
...
Reviewed By: ngorogiannis
Differential Revision: D13465306
fbshipit-source-id: 18d25d048
6 years ago
19faf643dc
[racerd] optional arguments and missing actuals
...
Reviewed By: jeremydubreil
Differential Revision: D13488298
fbshipit-source-id: c4bb80769
6 years ago
a3f4bb01f4
[starvation] fix type bug occurring in class references
...
Reviewed By: jeremydubreil
Differential Revision: D13466456
fbshipit-source-id: 0b312d9c3
6 years ago
930dd2eb03
[quandary] Inline internal analyze_call
...
Reviewed By: ngorogiannis
Differential Revision: D13487935
fbshipit-source-id: da748169b
6 years ago
e52b1e077e
[inferbo] Conditional proof obligation
...
Summary:
In order to avoid FPs due to lack of relational info, we apply a heuristic: proof obligations has a latest pruned values,
then it is instantiated at Call statements. If there is a bottom value in the instantiated pruned values, we can say the
program point where the proof obligation is introduced is unreachable with the given parameters of the function.
Depends on D13414441
Reviewed By: mbouaziz
Differential Revision: D13414483
fbshipit-source-id: 61bd34ebb
6 years ago
4ad5d38b69
[inferbo] Revise join of LatestPrune
...
Reviewed By: mbouaziz
Differential Revision: D13449197
fbshipit-source-id: a2913c494
6 years ago
2531c75cea
[inferbo] Add literal string assignment
...
Reviewed By: mbouaziz
Differential Revision: D13335547
fbshipit-source-id: a1c6f6ced
6 years ago
b3c8d1dc67
[HIL] Fix ExitScope
...
Reviewed By: jvillard
Differential Revision: D13399373
fbshipit-source-id: 9fa20fb41
6 years ago
3ad33c979e
[quandary] Split exec_instr
...
Reviewed By: ngorogiannis
Differential Revision: D13465603
fbshipit-source-id: 02799eec4
6 years ago
9d6a9f52ec
[starvation] improve 2-way deadlock reports
...
Reviewed By: mbouaziz
Differential Revision: D13450650
fbshipit-source-id: 0dbd349d1
6 years ago
8d855bdcdb
[access paths] do not print class name of Java fields
...
Reviewed By: jeremydubreil, mbouaziz
Differential Revision: D13450595
fbshipit-source-id: 5e3c5e994
6 years ago
89b73e554e
[purity] Mark functions that write to global static vars as impure
...
Reviewed By: ngorogiannis
Differential Revision: D13434587
fbshipit-source-id: 6fb3cf917
6 years ago
Mehdi Bouaziz
Nikos Gorogiannis
Daiva Naudziuniene
Sungkeun Cho
Jeremy Dubreil
Ezgi Çiçek
Jules Villard
David Lively
Martino Luca