diff options
author | Ted Kremenek <kremenek@apple.com> | 2012-06-29 21:01:35 +0000 |
---|---|---|
committer | Ted Kremenek <kremenek@apple.com> | 2012-06-29 21:01:35 +0000 |
commit | afddb9c81c3a7d95f75cd4c6633a40cd4358a706 (patch) | |
tree | 5889bad379ad648282f941bc8081791a74a60c40 /clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp | |
parent | 3e3cdecf98e5a5a2ef1296f96c52da4b435dd950 (diff) | |
download | llvm-afddb9c81c3a7d95f75cd4c6633a40cd4358a706.zip llvm-afddb9c81c3a7d95f75cd4c6633a40cd4358a706.tar.gz llvm-afddb9c81c3a7d95f75cd4c6633a40cd4358a706.tar.bz2 |
Revert "Tweak insecureAPI analyzer checks to have the ability to be individually disabled."
Jordan Rose corrected me that this actually isn't needed.
llvm-svn: 159462
Diffstat (limited to 'clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp')
-rw-r--r-- | clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp b/clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp index 053b83f..dde9071 100644 --- a/clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp +++ b/clang/lib/StaticAnalyzer/Checkers/CheckSecuritySyntaxOnly.cpp @@ -379,6 +379,13 @@ void WalkAST::checkCall_getpw(const CallExpr *CE, const FunctionDecl *FD) { //===----------------------------------------------------------------------===// void WalkAST::checkCall_mktemp(const CallExpr *CE, const FunctionDecl *FD) { + if (!filter.check_mktemp) { + // Fall back to the security check of looking for enough 'X's in the + // format string, since that is a less severe warning. + checkCall_mkstemp(CE, FD); + return; + } + const FunctionProtoType *FPT = dyn_cast<FunctionProtoType>(FD->getType().IgnoreParens()); if(!FPT) @@ -762,9 +769,8 @@ public: } #define REGISTER_CHECKER(name) \ -namespace { class Checker_##name : public SecuritySyntaxChecker {}; }\ void ento::register##name(CheckerManager &mgr) {\ - mgr.registerChecker<Checker_##name>()->filter.check_##name = true;\ + mgr.registerChecker<SecuritySyntaxChecker>()->filter.check_##name = true;\ } REGISTER_CHECKER(gets) |