DO NOT MERGE; practical example of how gcc -fanalyzer works #1261

jiridanek · 2023-10-15T11:21:38Z

No description provided.

router/src/main.c

@@ -288,6 +288,8 @@

 int main(int argc, char **argv)
 {
+    char *buf                 = malloc(42);
+    buf[6]                    = '7';


codecov · 2023-10-15T11:30:56Z

Codecov Report

Merging #1261 (ad0f844) into main (3d81fb8) will decrease coverage by 0.11%.
The diff coverage is 100.00%.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1261      +/-   ##
==========================================
- Coverage   78.41%   78.30%   -0.11%     
==========================================
  Files         246      246              
  Lines       63516    63517       +1     
  Branches     5872     5872              
==========================================
- Hits        49805    49738      -67     
- Misses      11079    11114      +35     
- Partials     2632     2665      +33

Flag	Coverage Δ
pysystemtests	`87.69% <ø> (-0.07%)`	⬇️
pyunittests	`54.60% <ø> (ø)`
systemtests	`72.27% <100.00%> (-0.13%)`	⬇️
unittests	`26.52% <0.00%> (-0.02%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
calculator	`30.06% <0.00%> (-0.02%)`	⬇️
systemtests	`78.92% <100.00%> (-0.10%)`	⬇️

jiridanek · 2023-10-19T07:24:36Z

Effectiveness of -fanalyzer has been proven.

My chosen approach for running clang-analyzer unfortunately does not seem to provide SARIF outputs and they cannot be obtained easily.

DO NOT MERGE; practical example of how gcc -fanalyzer works

ad0f844

jiridanek self-assigned this Oct 15, 2023

github-advanced-security bot found potential problems Oct 15, 2023

View reviewed changes

router/src/main.c

@@ -288,6 +288,8 @@

int main(int argc, char **argv)

{

char *buf = malloc(42);

buf[6] = '7';

Check warning

Code scanning / GNU C11

dereference of possibly-NULL 'buf' Warning

dereference of possibly-NULL 'buf'

jiridanek closed this Oct 19, 2023

jiridanek deleted the jd_2023_10_15_introduce_bug_fanalyzer branch October 19, 2023 07:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

DO NOT MERGE; practical example of how gcc -fanalyzer works #1261

DO NOT MERGE; practical example of how gcc -fanalyzer works #1261

jiridanek commented Oct 15, 2023

codecov bot commented Oct 15, 2023 •

edited

Loading

jiridanek commented Oct 19, 2023

DO NOT MERGE; practical example of how gcc -fanalyzer works #1261

DO NOT MERGE; practical example of how gcc -fanalyzer works #1261

Conversation

jiridanek commented Oct 15, 2023

codecov bot commented Oct 15, 2023 • edited Loading

Codecov Report

jiridanek commented Oct 19, 2023

codecov bot commented Oct 15, 2023 •

edited

Loading