5 Commits

Author	SHA1	Message	Date
Jeroen Ketema	4fb43d56b3	C++: Exclude deallocation functions as scanf result accesses	2022-12-15 09:39:16 +01:00
Nora Dimitrijević	170d12bf5a	Write MissingCheckScanf.qhelp	2022-08-24 19:58:19 +02:00
Nora Dimitrijević	ca162a4365	C++: complete initial implementation of cpp/missing-check-scanf ... There are still some remaining FPs (haven't fully tested them) that should be ironed out in a follow-up to increase the precision, e.g.: * if scanf(&i) != 1 return if maybe() && scanf(&i) != 1 return use(i) // should be OK on both counts * The minimum guard constant for the *_s variants may not be right. * int i[2] scanf(i, i+1) // second i is flagged as a use of the first * Maybe loosen the "unguarded or badly guarded use() = bad" policy to "unguarded but already-initialized = good" and "badly guarded = bad", since a lot of FPs in MRVA fall into the "unguarded but already- initialized" bucket.	2022-08-24 11:25:06 +02:00
Geoffrey White	c62ae3b350	C++: First working. We now prefer flagging the cases where the variable was initialized, as in real world cases we haven't seen it done safely.	2022-08-11 12:27:48 +02:00
Geoffrey White	76ef779f60	C++: Add test and placeholder query.	2022-08-11 12:27:39 +02:00