[PATCH] D35068: Detect usages of unsafe I/O functions

2017-07-06 Thread Roman Lebedev via Phabricator via cfe-commits
lebedev.ri added a comment. This does not do anything more than traversing the AST, shouldn't this be a clang-tidy check? Also, i suspect CERT-MSC24-C might be relevant

[PATCH] D35068: Detect usages of unsafe I/O functions

2017-07-06 Thread Daniel Kolozsvari via Phabricator via cfe-commits
koldaniel created this revision. There are certain unsafe or deprecated (since C11) buffer handling functions which should be avoided in safety critical code. They could cause buffer overflows. Two new checks had been implemented which warn for every occurrence of such functions (unsafe or