summaryrefslogtreecommitdiffstats
path: root/clang/lib/Analysis/CheckSecuritySyntaxOnly.cpp
Commit message (Collapse)AuthorAgeFilesLines
* Split libAnalysis into two libraries: libAnalysis and libChecker.Ted Kremenek2010-01-251-502/+0
| | | | | | | | | | | | | | | | | | | | | | | | | (1) libAnalysis is a generic analysis library that can be used by Sema. It defines the CFG, basic dataflow analysis primitives, and inexpensive flow-sensitive analyses (e.g. LiveVariables). (2) libChecker contains the guts of the static analyzer, incuding the path-sensitive analysis engine and domain-specific checks. Now any clients that want to use the frontend to build their own tools don't need to link in the entire static analyzer. This change exposes various obvious cleanups that can be made to the layout of files and headers in libChecker. More changes pending. :) This change also exposed a layering violation between AnalysisContext and MemRegion. BlockInvocationContext shouldn't explicitly know about BlockDataRegions. For now I've removed the BlockDataRegion* from BlockInvocationContext (removing context-sensitivity; although this wasn't used yet). We need to have a better way to extend BlockInvocationContext (and any LocationContext) to add context-sensitivty. llvm-svn: 94406
* Don't suggest the developer use 'arc4random' instead of 'rand' when that ↵Ted Kremenek2010-01-151-3/+15
| | | | | | function is not available. Fixes PR 6012. llvm-svn: 93508
* Add security syntactic checker for mktemp.Zhongxing Xu2009-12-031-1/+41
| | | | | | Patch by Lei Zhang! llvm-svn: 90444
* Port BugReporter and BugType to StringRef.Benjamin Kramer2009-11-291-3/+3
| | | | llvm-svn: 90086
* lib/Analysis: Remove VISIBILITY_HIDDEN from definitions in anonymous namespaceKovarththanan Rajaratnam2009-11-281-2/+1
| | | | llvm-svn: 90028
* Add check for obsolete function call of getpw().Zhongxing Xu2009-11-091-5/+46
| | | | llvm-svn: 86537
* Add comments.Zhongxing Xu2009-11-091-0/+1
| | | | llvm-svn: 86532
* Remove tabs, and whitespace cleanups.Mike Stump2009-09-091-62/+61
| | | | llvm-svn: 81346
* Implement: <rdar://problem/6337100> CWE-338: Use of cryptographically weak prngTed Kremenek2009-09-021-8/+105
| | | | | | Patch by Geoff Keating! llvm-svn: 80752
* Use C++ style comments.Ted Kremenek2009-08-281-2/+2
| | | | llvm-svn: 80320
* Implement: <rdar://problem/6337132> CWE-273: Failure to Check Whether PrivilegesTed Kremenek2009-08-281-2/+80
| | | | | | | | Were Dropped Successfully Patch by Geoff Keating! llvm-svn: 80313
* Remove 'AnalysisContext::setDecl()', as we the Decl associated with anTed Kremenek2009-08-211-1/+1
| | | | | | | AnalysisContext should never change. Along the way, propagate some constness around. llvm-svn: 79701
* In the "use of floating point variable as loop counter" check, checkTed Kremenek2009-07-241-5/+7
| | | | | | if the DeclRefExpr is a float, not just either argument. llvm-svn: 76998
* Implement: <rdar://problem/6335715> rule request: gets() buffer overflowTed Kremenek2009-07-231-2/+64
| | | | llvm-svn: 76905
* Add comments.Ted Kremenek2009-07-231-0/+2
| | | | llvm-svn: 76901
* Refine checking and diagnostics for use of floating point variable as a counter.Ted Kremenek2009-07-231-57/+104
| | | | | | | This implements <rdar://problem/6336718> and checks for CERT secure coding advisory FLP30-C. llvm-svn: 76900
* Add initial implementation of checking for uses of floating point as a loop ↵Ted Kremenek2009-07-231-0/+122
counter. llvm-svn: 76833
OpenPOWER on IntegriCloud