aboutsummaryrefslogtreecommitdiff
path: root/clang/lib/StaticAnalyzer/Checkers/GenericTaintChecker.cpp
AgeCommit message (Expand)AuthorFilesLines
2017-05-29[analyzer] Support partially tainted records.Artem Dergachev1-59/+24
2017-03-09[analyzer] Extend taint propagation and checking to support LazyCompoundValAnna Zaks1-0/+37
2017-03-09[analyzer] Add bug visitor for taint checker.Anna Zaks1-2/+46
2015-12-28Refactor: Simplify boolean conditional return statements in lib/StaticAnalyze...Alexander Kornienko1-14/+5
2015-09-16[analyzer] Add generateErrorNode() APIs to CheckerContext.Devin Coughlin1-1/+1
2015-09-08[analyzer] Apply whitespace cleanups by Honggyu Kim.Ted Kremenek1-5/+5
2015-06-23Clarify pointer ownership semantics by hoisting the std::unique_ptr creation ...Aaron Ballman1-2/+2
2015-06-03Fixes a typo in a comment.Enrico Pertoso1-1/+1
2014-05-27[C++11] Use 'nullptr'. StaticAnalyzer edition.Craig Topper1-7/+7
2014-03-23remove a bunch of unused private methodsNuno Lopes1-1/+0
2014-03-10[C++11] Replacing DeclBase iterators specific_attr_begin() and specific_attr_...Aaron Ballman1-5/+1
2014-03-07Replace OwningPtr with std::unique_ptr.Ahmed Charles1-1/+1
2014-02-11Expose the name of the checker producing each diagnostic message.Alexander Kornienko1-1/+1
2013-09-03Switched FormatAttr to using an IdentifierArgument instead of a StringArgumen...Aaron Ballman1-1/+2
2013-02-20Include llvm::Optional in clang/Basic/LLVM.hDavid Blaikie1-1/+1
2013-02-20Replace SVal llvm::cast support to be well-defined.David Blaikie1-1/+1
2013-01-12Remove useless 'llvm::' qualifier from names like StringRef and others that areDmitri Gribenko1-1/+1
2012-12-04Sort all of Clang's files under 'lib', and fix up the broken headersChandler Carruth1-3/+3
2012-12-01Pull the Attr iteration parts out of Attr.h, so including DeclBase.h doesn't ...Benjamin Kramer1-0/+1
2012-11-02[analyzer] Use nice macros for the common ProgramStateTraits (map, set, list).Jordan Rose1-8/+2
2012-11-02[analyzer] Rename 'EmitReport' to 'emitReport'.Jordan Rose1-1/+1
2012-07-18Remove trivial destructor from SVal.Benjamin Kramer1-1/+0
2012-07-10[analyzer] Guard against C++ member functions that look like system functions.Jordan Rose1-1/+11
2012-06-02Fix typos found by http://github.com/lyda/misspell-checkBenjamin Kramer1-1/+1
2012-04-10[analyzer] Don't crash even when the system functions are redefined.Anna Zaks1-7/+13
2012-02-22[analyzer] Change naming in bug reports "tainted" -> "untrusted"Anna Zaks1-4/+5
2012-02-05Basic: import OwningPtr<> into clang namespaceDylan Noblesmith1-1/+1
2012-01-26Change references to 'const ProgramState *' to typedef 'ProgramStateRef'.Ted Kremenek1-22/+22
2012-01-24[analyzer] Add more C taint sources/sinks.Anna Zaks1-22/+45
2012-01-21[analyzer] It's possible to have a non PointerType expression evaluate to a L...Anna Zaks1-2/+2
2012-01-20More dead code removal (using -Wunreachable-code)David Blaikie1-3/+0
2012-01-20[analyzer] Add socket API as a source of taint.Anna Zaks1-0/+27
2012-01-18[analyzer] Refactor: prePropagateTaint ->Anna Zaks1-43/+27
2012-01-18[analyzer] Taint: warn when tainted data is used to specify a bufferAnna Zaks1-4/+62
2012-01-18[analyzer] Taint: add taint propagation rules for string and memory copyAnna Zaks1-53/+111
2012-01-17[analyzer] Taint: generalize taint propagation to simplify adding moreAnna Zaks1-4/+128
2012-01-14[analyzer] Taint: add system and popen as undesirable sinks for taintAnna Zaks1-20/+77
2012-01-13[analyzer] Taint: when looking up a binding, provide the type.Anna Zaks1-1/+4
2012-01-12[analyzer] Add taint transfer by strcpy & others (part 1).Anna Zaks1-89/+100
2012-01-07Remove unused variable.Rafael Espindola1-1/+0
2012-01-07[analyzer] Add basic format string vulnerability checking.Anna Zaks1-6/+92
2012-01-06[analyzer] Make the entries in 'Environment' context-sensitive by making entr...Ted Kremenek1-7/+9
2011-12-17[analyzer] Add support for taint flowing through a function (atoi).Anna Zaks1-43/+140
2011-12-16[analyzer] Better stdin support.Anna Zaks1-22/+28
2011-12-14[analyzer] Treat stdin as a source of taint.Anna Zaks1-6/+44
2011-12-14[analyzer] Mark output of fscanf and fopen as tainted.Anna Zaks1-1/+30
2011-12-14[analyzer] Mark getenv output as tainted.Anna Zaks1-0/+1
2011-12-11[analyzer] CStringChecker should not rely on the analyzer generating UndefOrU...Anna Zaks1-0/+5
2011-11-18[analyzer] Warn when non pointer arguments are passed to scanf (only when run...Anna Zaks1-4/+35
2011-11-16[analyzer] Adding generic taint checker.Anna Zaks1-0/+97