hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

C++: Remove conflation from taint-tracking.

Browse Source
This commit is contained in:
Mathias Vorreiter Pedersen
2023-02-21 11:24:24 +00:00
parent a5bb093935
commit b951bf0f8f
6 changed files with 233 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/TaintTrackingUtil.qll
View File

@@ -28,18 +28,6 @@ predicate localAdditionalTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeT
or or
modeledTaintStep(nodeFrom, nodeTo) modeledTaintStep(nodeFrom, nodeTo)
or or
// Flow from `op` to `*op`.
exists(Operand operand, int indirectionIndex |
nodeHasOperand(nodeFrom, operand, indirectionIndex) and
nodeHasOperand(nodeTo, operand, indirectionIndex - 1)
)
or
// Flow from `instr` to `*instr`.
exists(Instruction instr, int indirectionIndex |
nodeHasInstruction(nodeFrom, instr, indirectionIndex) and
nodeHasInstruction(nodeTo, instr, indirectionIndex - 1)
)
or
// Flow from (the indirection of) an operand of a pointer arithmetic instruction to the // Flow from (the indirection of) an operand of a pointer arithmetic instruction to the
// indirection of the pointer arithmetic instruction. This provides flow from `source` // indirection of the pointer arithmetic instruction. This provides flow from `source`
// in `x[source]` to the result of the associated load instruction. // in `x[source]` to the result of the associated load instruction.

15
cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/annotate_sinks_only/tainted.expected
View File

@@ -1,2 +1,17 @@
WARNING: Module TaintedWithPath has been deprecated and may be removed in future (tainted.ql:10,8-47) WARNING: Module TaintedWithPath has been deprecated and may be removed in future (tainted.ql:10,8-47)
WARNING: Predicate tainted has been deprecated and may be removed in future (tainted.ql:21,3-28) WARNING: Predicate tainted has been deprecated and may be removed in future (tainted.ql:21,3-28)
| defaulttainttracking.cpp:4:33:4:52 | // $ ir MISSING: ast | Missing result:ir= |
| defaulttainttracking.cpp:5:32:5:42 | // $ ast,ir | Missing result:ir= |
| defaulttainttracking.cpp:10:37:10:47 | // $ ast,ir | Missing result:ir= |
| defaulttainttracking.cpp:12:14:12:24 | // $ ast,ir | Missing result:ir= |
| defaulttainttracking.cpp:174:16:174:26 | // $ ast,ir | Missing result:ir= |
| defaulttainttracking.cpp:178:14:178:24 | // $ ast,ir | Missing result:ir= |
| defaulttainttracking.cpp:179:14:179:34 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| defaulttainttracking.cpp:198:14:198:34 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stl.cpp:74:11:74:30 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:91:13:91:32 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:92:13:92:32 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:93:13:93:32 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:94:13:94:32 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:144:12:144:31 | // $ ir MISSING: ast | Missing result:ir= |
| stl.cpp:158:12:158:31 | // $ ir MISSING: ast | Missing result:ir= |

6
cpp/ql/test/library-tests/dataflow/security-taint/tainted_diff.expected
View File

@@ -28,7 +28,7 @@ WARNING: Predicate taintedIncludingGlobalVars has been deprecated and may be rem
| test.cpp:68:28:68:33 | call to getenv | test.cpp:69:10:69:13 | copy | AST only | | test.cpp:68:28:68:33 | call to getenv | test.cpp:69:10:69:13 | copy | AST only |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:70:5:70:10 | call to strcpy | AST only | | test.cpp:68:28:68:33 | call to getenv | test.cpp:70:5:70:10 | call to strcpy | AST only |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:70:12:70:15 | copy | AST only | | test.cpp:68:28:68:33 | call to getenv | test.cpp:70:12:70:15 | copy | AST only |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:71:12:71:15 | array to pointer conversion | IR only | | test.cpp:68:28:68:33 | call to getenv | test.cpp:71:12:71:15 | copy | AST only |
| test.cpp:75:20:75:25 | call to getenv | test.cpp:15:22:15:25 | nptr | AST only | | test.cpp:75:20:75:25 | call to getenv | test.cpp:15:22:15:25 | nptr | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:8:24:8:25 | s1 | AST only | | test.cpp:83:28:83:33 | call to getenv | test.cpp:8:24:8:25 | s1 | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:11:20:11:21 | s1 | AST only | | test.cpp:83:28:83:33 | call to getenv | test.cpp:11:20:11:21 | s1 | AST only |
@@ -37,6 +37,8 @@ WARNING: Predicate taintedIncludingGlobalVars has been deprecated and may be rem
| test.cpp:83:28:83:33 | call to getenv | test.cpp:85:8:85:11 | copy | AST only | | test.cpp:83:28:83:33 | call to getenv | test.cpp:85:8:85:11 | copy | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:86:2:86:7 | call to strcpy | AST only | | test.cpp:83:28:83:33 | call to getenv | test.cpp:86:2:86:7 | call to strcpy | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:86:9:86:12 | copy | AST only | | test.cpp:83:28:83:33 | call to getenv | test.cpp:86:9:86:12 | copy | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:14:88:17 | (const char *)... | AST only |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:14:88:17 | copy | AST only |
| test.cpp:100:12:100:15 | call to gets | test.cpp:98:8:98:14 | pointer | AST only | | test.cpp:100:12:100:15 | call to gets | test.cpp:98:8:98:14 | pointer | AST only |
| test.cpp:100:12:100:15 | call to gets | test.cpp:100:2:100:8 | pointer | AST only | | test.cpp:100:12:100:15 | call to gets | test.cpp:100:2:100:8 | pointer | AST only |
| test.cpp:100:17:100:22 | buffer | test.cpp:93:18:93:18 | s | AST only | | test.cpp:100:17:100:22 | buffer | test.cpp:93:18:93:18 | s | AST only |
@@ -49,3 +51,5 @@ WARNING: Predicate taintedIncludingGlobalVars has been deprecated and may be rem
| test.cpp:106:28:106:33 | call to getenv | test.cpp:108:8:108:11 | copy | AST only | | test.cpp:106:28:106:33 | call to getenv | test.cpp:108:8:108:11 | copy | AST only |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:109:2:109:7 | call to strcpy | AST only | | test.cpp:106:28:106:33 | call to getenv | test.cpp:109:2:109:7 | call to strcpy | AST only |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:109:9:109:12 | copy | AST only | | test.cpp:106:28:106:33 | call to getenv | test.cpp:109:9:109:12 | copy | AST only |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:14:111:17 | (const char *)... | AST only |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:14:111:17 | copy | AST only |

6
cpp/ql/test/library-tests/dataflow/security-taint/tainted_ir.expected
View File

@@ -22,8 +22,6 @@ WARNING: Module TaintedWithPath has been deprecated and may be removed in future
| test.cpp:68:28:68:33 | call to getenv | test.cpp:68:28:68:33 | call to getenv | | test.cpp:68:28:68:33 | call to getenv | test.cpp:68:28:68:33 | call to getenv |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:68:28:68:46 | (const char *)... | | test.cpp:68:28:68:33 | call to getenv | test.cpp:68:28:68:46 | (const char *)... |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:70:18:70:25 | userName | | test.cpp:68:28:68:33 | call to getenv | test.cpp:70:18:70:25 | userName |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:71:12:71:15 | array to pointer conversion |
| test.cpp:68:28:68:33 | call to getenv | test.cpp:71:12:71:15 | copy |
| test.cpp:75:20:75:25 | call to getenv | test.cpp:75:15:75:18 | call to atoi | | test.cpp:75:20:75:25 | call to getenv | test.cpp:75:15:75:18 | call to atoi |
| test.cpp:75:20:75:25 | call to getenv | test.cpp:75:20:75:25 | call to getenv | | test.cpp:75:20:75:25 | call to getenv | test.cpp:75:20:75:25 | call to getenv |
| test.cpp:75:20:75:25 | call to getenv | test.cpp:75:20:75:45 | (const char *)... | | test.cpp:75:20:75:25 | call to getenv | test.cpp:75:20:75:45 | (const char *)... |
@@ -33,8 +31,6 @@ WARNING: Module TaintedWithPath has been deprecated and may be removed in future
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:6:88:27 | ! ... | | test.cpp:83:28:83:33 | call to getenv | test.cpp:88:6:88:27 | ! ... |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:7:88:12 | call to strcmp | | test.cpp:83:28:83:33 | call to getenv | test.cpp:88:7:88:12 | call to strcmp |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:7:88:27 | (bool)... | | test.cpp:83:28:83:33 | call to getenv | test.cpp:88:7:88:27 | (bool)... |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:14:88:17 | (const char *)... |
| test.cpp:83:28:83:33 | call to getenv | test.cpp:88:14:88:17 | copy |
| test.cpp:100:12:100:15 | call to gets | test.cpp:100:12:100:15 | call to gets | | test.cpp:100:12:100:15 | call to gets | test.cpp:100:12:100:15 | call to gets |
| test.cpp:100:17:100:22 | buffer | test.cpp:100:17:100:22 | array to pointer conversion | | test.cpp:100:17:100:22 | buffer | test.cpp:100:17:100:22 | array to pointer conversion |
| test.cpp:100:17:100:22 | buffer | test.cpp:100:17:100:22 | buffer | | test.cpp:100:17:100:22 | buffer | test.cpp:100:17:100:22 | buffer |
@@ -44,5 +40,3 @@ WARNING: Module TaintedWithPath has been deprecated and may be removed in future
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:6:111:27 | ! ... | | test.cpp:106:28:106:33 | call to getenv | test.cpp:111:6:111:27 | ! ... |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:7:111:12 | call to strcmp | | test.cpp:106:28:106:33 | call to getenv | test.cpp:111:7:111:12 | call to strcmp |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:7:111:27 | (bool)... | | test.cpp:106:28:106:33 | call to getenv | test.cpp:111:7:111:27 | (bool)... |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:14:111:17 | (const char *)... |
| test.cpp:106:28:106:33 | call to getenv | test.cpp:111:14:111:17 | copy |

1
cpp/ql/test/library-tests/dataflow/smart-pointers-taint/taint.expected
View File

@@ -0,0 +1 @@
| test.cpp:34:13:34:23 | // $ ast,ir | Missing result:ir= |

212
cpp/ql/test/library-tests/dataflow/taint-tests/taint.expected
View File

@@ -0,0 +1,212 @@
| format.cpp:57:17:57:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:62:17:62:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:67:17:67:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:72:17:72:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:83:17:83:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:88:17:88:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:94:17:94:50 | // $ ast,ir // tainted (debatable) | Missing result:ir= |
| format.cpp:100:17:100:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:105:17:105:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:110:18:110:28 | // $ ast,ir | Missing result:ir= |
| format.cpp:115:17:115:27 | // $ ast,ir | Missing result:ir= |
| format.cpp:136:17:136:27 | // $ ast,ir | Missing result:ir= |
| smart_pointer.cpp:13:14:13:24 | // $ ast,ir | Missing result:ir= |
| smart_pointer.cpp:25:14:25:24 | // $ ast,ir | Missing result:ir= |
| smart_pointer.cpp:38:14:38:24 | // $ ast,ir | Missing result:ir= |
| smart_pointer.cpp:46:14:46:24 | // $ ast,ir | Missing result:ir= |
| string.cpp:31:11:31:21 | // $ ast,ir | Missing result:ir= |
| string.cpp:33:19:33:29 | // $ ast,ir | Missing result:ir= |
| string.cpp:39:28:39:38 | // $ ast,ir | Missing result:ir= |
| string.cpp:43:28:43:38 | // $ ast,ir | Missing result:ir= |
| string.cpp:46:28:46:38 | // $ ast,ir | Missing result:ir= |
| string.cpp:57:12:57:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:70:12:70:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:71:12:71:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:93:13:93:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:94:13:94:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:95:13:95:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:114:13:114:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:115:13:115:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:159:13:159:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:162:19:162:29 | // $ ast,ir | Missing result:ir= |
| string.cpp:163:13:163:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:167:20:167:30 | // $ ast,ir | Missing result:ir= |
| string.cpp:168:13:168:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:172:13:172:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:177:13:177:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:185:14:185:24 | // $ ast,ir | Missing result:ir= |
| string.cpp:199:23:199:33 | // $ ast,ir | Missing result:ir= |
| string.cpp:200:12:200:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:202:26:202:36 | // $ ast,ir | Missing result:ir= |
| string.cpp:203:12:203:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:206:12:206:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| string.cpp:220:26:220:36 | // $ ast,ir | Missing result:ir= |
| string.cpp:221:12:221:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:224:26:224:36 | // $ ast,ir | Missing result:ir= |
| string.cpp:225:12:225:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:228:29:228:39 | // $ ast,ir | Missing result:ir= |
| string.cpp:229:12:229:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:243:30:243:40 | // $ ast,ir | Missing result:ir= |
| string.cpp:244:12:244:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:247:30:247:40 | // $ ast,ir | Missing result:ir= |
| string.cpp:248:12:248:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:251:33:251:43 | // $ ast,ir | Missing result:ir= |
| string.cpp:252:12:252:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:265:12:265:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:275:12:275:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:277:12:277:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:282:12:282:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:283:12:283:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| string.cpp:284:12:284:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:285:12:285:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| string.cpp:293:12:293:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:294:12:294:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:295:12:295:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:301:12:301:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| string.cpp:303:12:303:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:312:18:312:28 | // $ ast,ir | Missing result:ir= |
| string.cpp:340:11:340:21 | // $ ast,ir | Missing result:ir= |
| string.cpp:341:11:341:21 | // $ ast,ir | Missing result:ir= |
| string.cpp:342:11:342:21 | // $ ast,ir | Missing result:ir= |
| string.cpp:350:13:350:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:351:20:351:30 | // $ ast,ir | Missing result:ir= |
| string.cpp:363:42:363:52 | // $ ast,ir | Missing result:ir= |
| string.cpp:364:13:364:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:436:27:436:37 | // $ ast,ir | Missing result:ir= |
| string.cpp:437:12:437:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:450:12:450:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:463:12:463:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:466:13:466:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:478:41:478:51 | // $ ast,ir | Missing result:ir= |
| string.cpp:479:12:479:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:481:42:481:52 | // $ ast,ir | Missing result:ir= |
| string.cpp:482:13:482:23 | // $ ast,ir | Missing result:ir= |
| string.cpp:494:43:494:53 | // $ ast,ir | Missing result:ir= |
| string.cpp:495:12:495:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:498:13:498:33 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| string.cpp:511:12:511:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:513:12:513:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:536:33:536:43 | // $ ast,ir | Missing result:ir= |
| string.cpp:538:36:538:46 | // $ ast,ir | Missing result:ir= |
| string.cpp:541:12:541:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:542:12:542:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:543:12:543:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:544:12:544:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:556:41:556:51 | // $ ast,ir | Missing result:ir= |
| string.cpp:557:44:557:54 | // $ ast,ir | Missing result:ir= |
| string.cpp:561:12:561:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:562:12:562:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:563:12:563:22 | // $ ast,ir | Missing result:ir= |
| string.cpp:564:12:564:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:38:13:38:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:39:13:39:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:40:13:40:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:41:13:41:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:52:13:52:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:53:13:53:33 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:56:36:56:46 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:57:55:57:65 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:59:13:59:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:60:14:60:24 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:63:33:63:43 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:64:72:64:82 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:66:14:66:24 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:67:14:67:24 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:76:23:76:33 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:78:19:78:29 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:81:13:81:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:100:43:100:53 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:103:13:103:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:105:13:105:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:107:13:107:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:120:13:120:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:121:13:121:33 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:122:13:122:23 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:123:13:123:33 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:149:12:149:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:150:12:150:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:151:12:151:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:162:27:162:37 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:166:27:166:37 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:179:21:179:31 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:196:39:196:49 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:215:31:215:41 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:216:31:216:41 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:223:36:223:46 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:224:36:224:46 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:230:49:230:59 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:239:12:239:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:240:12:240:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:247:12:247:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:248:12:248:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| stringstream.cpp:251:12:251:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:252:12:252:22 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:262:47:262:57 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:266:80:266:90 | // $ ast,ir | Missing result:ir= |
| stringstream.cpp:267:13:267:23 | // $ ast,ir | Missing result:ir= |
| taint.cpp:173:17:173:27 | // $ ast,ir | Missing result:ir= |
| taint.cpp:374:11:374:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:376:11:376:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:384:11:384:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:393:11:393:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:404:11:404:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:406:11:406:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:414:11:414:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:460:11:460:21 | // $ ast,ir | Missing result:ir= |
| taint.cpp:469:23:469:33 | // $ ast,ir | Missing result:ir= |
| taint.cpp:527:13:527:33 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| taint.cpp:553:14:553:51 | // $ ast=550:24 ir SPURIOUS: ast=551:6 | Missing result:ir= |
| taint.cpp:562:15:562:25 | // $ ast,ir | Missing result:ir= |
| taint.cpp:575:15:575:35 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| taint.cpp:668:19:668:29 | // $ ast,ir | Missing result:ir= |
| taint.cpp:680:19:680:29 | // $ ast,ir | Missing result:ir= |
| taint.cpp:694:13:694:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:52:12:52:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:58:12:58:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:64:12:64:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:70:12:70:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:75:12:75:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:83:12:83:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:97:12:97:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:109:12:109:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:112:12:112:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:117:12:117:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| vector.cpp:118:12:118:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:119:12:119:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:120:12:120:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| vector.cpp:130:12:130:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:131:12:131:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:132:12:132:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:139:12:139:32 | // $ SPURIOUS: ast,ir | Fixed spurious result:ir= |
| vector.cpp:140:12:140:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:141:12:141:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:242:12:242:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:243:12:243:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:258:13:258:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:259:13:259:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:260:13:260:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:261:13:261:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:273:13:273:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:274:13:274:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:275:13:275:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:285:12:285:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:286:19:286:29 | // $ ast,ir | Missing result:ir= |
| vector.cpp:290:12:290:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:291:19:291:29 | // $ ast,ir | Missing result:ir= |
| vector.cpp:309:11:309:21 | // $ ast,ir | Missing result:ir= |
| vector.cpp:312:11:312:21 | // $ ast,ir | Missing result:ir= |
| vector.cpp:324:12:324:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:326:12:326:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:357:12:357:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:392:7:392:8 | v9 | Unexpected result: ir= |
| vector.cpp:392:12:392:65 | // $ ast=330:10 ir=330:10 SPURIOUS: ast=389:8 ir=389:8 | Fixed spurious result:ir=389:8 |
| vector.cpp:392:12:392:65 | // $ ast=330:10 ir=330:10 SPURIOUS: ast=389:8 ir=389:8 | Missing result:ir=330:10 |
| vector.cpp:400:13:400:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:429:14:429:24 | // $ ast,ir | Missing result:ir= |
| vector.cpp:436:14:436:24 | // $ ast,ir | Missing result:ir= |
| vector.cpp:473:12:473:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:482:14:482:24 | // $ ast,ir | Missing result:ir= |
| vector.cpp:485:14:485:24 | // $ ast,ir | Missing result:ir= |
| vector.cpp:486:13:486:23 | // $ ast,ir | Missing result:ir= |
| vector.cpp:494:12:494:22 | // $ ast,ir | Missing result:ir= |
| vector.cpp:497:12:497:22 | // $ ast,ir | Missing result:ir= |