diff options
| author | Ted Kremenek <kremenek@apple.com> | 2012-01-26 03:02:34 +0000 |
|---|---|---|
| committer | Ted Kremenek <kremenek@apple.com> | 2012-01-26 03:02:34 +0000 |
| commit | 1ca6ce5a226b97b8f381c9da79402a11fa0c1cdc (patch) | |
| tree | 56635f462d5fc4df1bde945d3a4f1f68ced5020c | |
| parent | 34b49061aad6d57c60d5bb15ad1cc44ff3968ae7 (diff) | |
| download | bcm5719-llvm-1ca6ce5a226b97b8f381c9da79402a11fa0c1cdc.tar.gz bcm5719-llvm-1ca6ce5a226b97b8f381c9da79402a11fa0c1cdc.zip | |
Post link to checker-260, which is checker-259 with some experimental checks enabled.
llvm-svn: 149032
| -rw-r--r-- | clang/www/analyzer/latest_checker.html.incl | 2 | ||||
| -rw-r--r-- | clang/www/analyzer/release_notes.html | 16 |
2 files changed, 17 insertions, 1 deletions
diff --git a/clang/www/analyzer/latest_checker.html.incl b/clang/www/analyzer/latest_checker.html.incl index e47300a78db..2b5030a7bd7 100644 --- a/clang/www/analyzer/latest_checker.html.incl +++ b/clang/www/analyzer/latest_checker.html.incl @@ -1 +1 @@ -<b><a href="http://bit.ly/zOWf1P">checker-259.tar.bz2</a></b> (built January 25, 2012) +<b><a href="http://bit.ly/wpAqVP">checker-260.tar.bz2</a></b> (built January 25, 2012) diff --git a/clang/www/analyzer/release_notes.html b/clang/www/analyzer/release_notes.html index 423e136f4bf..b6a035923ec 100644 --- a/clang/www/analyzer/release_notes.html +++ b/clang/www/analyzer/release_notes.html @@ -15,6 +15,22 @@ <h1>Release notes for <tt>checker-XXX</tt> builds</h1> +<h4 id="checker_260">checker-260</h4> + +<p><b>built: </b>January 25, 2012<br> +<b>download:</b> <a href="http://bit.ly/wpAqVP">checker-260.tar.bz2</a></p> +<p><b>highlights:</b></p> + +<p>This is essentially the same as checker-259, but enables the following <i>experimental</i> checkers (please provide feedback):</p> + +<ul> + <li>Warns about unsafe uses of CFArrayCreate, CFSetCreate, and CFDictionaryCreate</li> + <li>Warns about unsafe uses of getpw, gets, which are sources of buffer overflows</li> + <li>Warns about unsafe uses of mktemp and mktemps, which can lead to insecure temporary files</li> + <li>Warns about unsafe uses of vfork, which is <a href="https://www.securecoding.cert.org/confluence/display/seccode/POS33-C.+Do+not+use+vfork()">insecure</a> to use</li> + <li>Warns about not checking the return values of setuid, setgid, seteuid, setegid, setreuid, setregid (another security issue)</li> +</ul> + <h4 id="checker_259">checker-259</h4> <p><b>built: </b>January 25, 2012<br> |
