diff options
| author | Donát Nagy <donat.nagy@ericsson.com> | 2023-04-28 18:17:11 +0200 |
|---|---|---|
| committer | Donát Nagy <donat.nagy@ericsson.com> | 2023-05-03 18:52:27 +0200 |
| commit | 8c22cbea87beb74da3dc5891c40cdf574cd5fe56 (patch) | |
| tree | 5e25ea14aef6ceeccb7fa3935be568794f48cda4 /clang/lib/CodeGen/ObjectFilePCHContainerOperations.cpp | |
| parent | 9e6946c2522a3ddc9157b48a9a8b4050c19450f5 (diff) | |
| download | llvm-8c22cbea87beb74da3dc5891c40cdf574cd5fe56.zip llvm-8c22cbea87beb74da3dc5891c40cdf574cd5fe56.tar.gz llvm-8c22cbea87beb74da3dc5891c40cdf574cd5fe56.tar.bz2 | |
[analyzer] ArrayBoundCheckerV2: suppress false positives from ctype macros
The checker alpha.security.ArrayBoundV2 created bug reports in
situations when the (tainted) result of fgetc() or getchar() was passed
to one of the isXXXXX() macros from ctype.h.
This is a common input handling pattern (within the limited toolbox of
the C language) and several open source projects contained code where it
led to false positive reports; so this commit suppresses ArrayBoundV2
reports generated within the isXXXXX() macros.
Note that here even true positive reports would be difficult to
understand, as they'd refer to the implementation details of these
macros.
Differential Revision: https://reviews.llvm.org/D149460
Diffstat (limited to 'clang/lib/CodeGen/ObjectFilePCHContainerOperations.cpp')
0 files changed, 0 insertions, 0 deletions