diff options
| author | David Malcolm <dmalcolm@redhat.com> | 2020-02-21 10:50:16 -0500 |
|---|---|---|
| committer | David Malcolm <dmalcolm@redhat.com> | 2020-02-24 18:31:07 -0500 |
| commit | b3d788a2cd35c734a683444c976abe14afc5c1c1 (patch) | |
| tree | 9a80941ec6fca09563085b88e97d534efe7a7e39 /gcc/analyzer/ChangeLog | |
| parent | 3a25f345d1fbe2de8c12cae84b0c7d2a76c0b78e (diff) | |
analyzer: disable the "taint" checker by default
PR analyzer/93032 tracks a false negative where we fail to report
FILE * leaks within zlib/contrib/minizip/mztools.c.
The underlying issue is a combinatorial explosion of states within the
exploded graph. In particular, the state of the "taint" checker is
exploding, leading to the analyzer bailing out.
I have a patch kit under construction that fixes the state explosion
issue enough for the "file" checker to report the leaks, but doing so
requires disabling the "taint" checker. Given that the latter is more
of a proof-of-concept, this patch disables it by default, to stop it
breaking the other checkers.
gcc/analyzer/ChangeLog:
PR analyzer/93032
* sm.cc (make_checkers): Require the "taint" checker to be
explicitly enabled.
gcc/ChangeLog:
PR analyzer/93032
* doc/invoke.texi (-Wnanalyzer-tainted-array-index): Note that
-fanalyzer-checker=taint is also required.
(-fanalyzer-checker=): Note that providing this option enables the
given checker, and doing so may be required for checkers that are
disabled by default.
gcc/testsuite/ChangeLog:
PR analyzer/93032
* gcc.dg/analyzer/pr93382.c: Add "-fanalyzer-checker=taint".
* gcc.dg/analyzer/taint-1.c: Likewise.
Diffstat (limited to 'gcc/analyzer/ChangeLog')
| -rw-r--r-- | gcc/analyzer/ChangeLog | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/gcc/analyzer/ChangeLog b/gcc/analyzer/ChangeLog index 0882ec6ac3a..7511c2dc92f 100644 --- a/gcc/analyzer/ChangeLog +++ b/gcc/analyzer/ChangeLog @@ -1,5 +1,11 @@ 2020-02-24 David Malcolm <dmalcolm@redhat.com> + PR analyzer/93032 + * sm.cc (make_checkers): Require the "taint" checker to be + explicitly enabled. + +2020-02-24 David Malcolm <dmalcolm@redhat.com> + PR analyzer/93899 * engine.cc (impl_region_model_context::impl_region_model_context): Add logger |