Go to file

Sam Blackshear 0b9727214d [quandary] support `StringBuilder`'s and other methods for propagating `String` taint Summary: Our default strategy for handling unknown code is to propagate taint from the actuals to the return value. But for commonly-used methods like `StringBuilder.append` (used every time you do `+` with a string in Java), this doesn't work. The taint should be propagated to both the receiver and the return value in these cases. I'm considering a solution where we always propagate taint to the receiver of unknown functions in the future, but I am concerned about the performance. So let's stick with a few special string cases for now. Reviewed By: cristianoc Differential Revision: D4124355 fbshipit-source-id: 5b2a232		8 years ago
.travis	…
dependencies	[mod_dep] Color and cluster mod_dep graph by directory	8 years ago
docker	bump version: 0.9.3 -> 0.9.4	8 years ago
examples	…
facebook-clang-plugins@248d630ea8	update facebook-clang-plugins	8 years ago
infer	[quandary] support `StringBuilder`'s and other methods for propagating `String` taint	8 years ago
m4	…
scripts	Add tuareg and core as dependencies	8 years ago
.buckconfig	[tests] Convert java harness and crashcontext tests to new direct format.	9 years ago
.clang-format	…
.gitignore	[clang] Remove INFER_XX environment variable	8 years ago
.gitmodules	…
.inferconfig	[tests] Convert the linter tests to the new direct format	9 years ago
.npmrc	Update infer to use yarn to manage dependencies	8 years ago
.travis.yml	[travis] use new reason version	8 years ago
CONTRIBUTING.md	…
FILES.md	…
INSTALL.md	Reason is automatically installed with the right version by build-infer.sh	9 years ago
LICENSE	…
Makefile	[tests] convert ant integration test to a Makefile	8 years ago
Makefile.config.in	[base] resolve links when guessing which executable we are running, move infer into bin/	8 years ago
PATENTS	…
README.md	…
autogen.sh	…
build-infer.sh	Update infer to use yarn to manage dependencies	8 years ago
configure.ac	bump version: 0.9.3 -> 0.9.4	8 years ago
install-sh	…
opam	Add tuareg and core as dependencies	8 years ago
package.json	Add tuareg and core as dependencies	8 years ago
yarn.lock	Remove a test call to Core	8 years ago

README.md

Infer

Infer is a static analysis tool for Java, Objective-C and C, written in OCaml.

Installation

Read our Getting Started page for details on how to install packaged versions of Infer. To build Infer from source, see INSTALL.md.

License

Infer is BSD-licensed. We also provide an additional patent grant.

Note: Enabling Java support may require you to download and install components licensed under the GPL.