You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Sungkeun Cho 1531a3d538 [inferbo] Pruning return value of function call ... Summary: Problem: The analyzer did not know that the value of `v.size()` is an alias of `v.infer_size`, so `v.infer_size` is not pruned by the if condition. As a result it raises a false alarm. void safe_access(std::vector<int> v) { if (v.size() >= 10) { v[9] = 1; // error: BUFFER_OVERRUN Offset: [9, 9] Size: [5, 5] } } void call_safe_access_Good() { std::vector<int> v(5, 0); safe_access(v); } Solution: Adding alias for return value to the abstract domain. Now Inferbo can prune `v.infer_size` because it knows that the value of `v.size()` is an alias of `v.infer_size`. There is already an alias domain in Inferbo, so we added a specific room for the retrun value. Reviewed By: jvillard, mbouaziz Differential Revision: D5396988 fbshipit-source-id: 4a4702c		7 years ago
..
bufferoverrun	[inferbo] Pruning return value of function call	7 years ago
errors	[infer][backend] Invalidate by-ref parameters for logical variables as well as program variables when calling undefined functions	7 years ago
frontend	Propagating access of Decl from clang plugin to ProcAttributes.	8 years ago
quandary	[quandary] only report code injection via endpoints on strings	8 years ago
shared	Propagating access of Decl from clang plugin to ProcAttributes.	8 years ago
siof	[infer][checkers] remove the siof analyzer option and rely on the --siof flag only	8 years ago
threadsafety	[threadsafety] Fix divergence due to indexing string literal in loop	8 years ago