[Bug analyzer/108251] false positive: null dereference

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108251 --- Comment #1 from David Malcolm --- Created attachment 54219 --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=54219=edit Simplified reproducer for smp_fetch_ssl_fc_has_early Thanks for filing this bug. I see the warnings, and have

[Bug driver/108307] New: ICE compiling .S file with -fdiagnostics-format=sarif-file

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108307 Bug ID: 108307 Summary: ICE compiling .S file with -fdiagnostics-format=sarif-file Product: gcc Version: 13.0 Status: UNCONFIRMED Keywords: diagnostic,

[Bug analyzer/106479] FAIL: gcc.dg/analyzer/pr104308.c (test for warnings, line 9)

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106479 --- Comment #3 from David Malcolm --- (In reply to David Malcolm from comment #2) > Thanks; should be fixed by the above patch (lightly tested with > hppa-linux-gnu and riscv32-unknown-linux-gnu). ...referring to the FAIL at line 9. I believe

[Bug analyzer/106479] FAIL: gcc.dg/analyzer/pr104308.c (test for warnings, line 9)

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106479 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|UNCONFIRMED

[Bug analyzer/108065] [13 Regression] ICE in binding_key::make with empty region since r13-4529-gdfe2ef7f2b6cac70

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108065 David Malcolm changed: What|Removed |Added Summary|[13 Regression] ICE in |[13 Regression] ICE in

[Bug analyzer/108028] Misleading -fanalyzer messages at -O2 and above

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108028 --- Comment #2 from David Malcolm --- (D) Also, the (3) dereference of NULL '0' is poorly worded; ideally we'd say: (3) dereference of NULL 'q'

[Bug analyzer/108028] Misleading -fanalyzer messages at -O2 and above

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108028 David Malcolm changed: What|Removed |Added Summary|--Wanalyzer-null-dereferenc |Misleading -fanalyzer

[Bug analyzer/108003] [13 Regression] ICE in bitmap_check_index, at sbitmap.h:105

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108003 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug analyzer/108003] [13 Regression] ICE in bitmap_check_index, at sbitmap.h:105

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108003 David Malcolm changed: What|Removed |Added Last reconfirmed||2022-12-08

[Bug analyzer/107882] [13 Regression] ICE in get_last_bit_offset, at analyzer/store.h:255 since 13-2582-g0ea5e3f4542832b8

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107882 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/107882] [13 Regression] ICE in get_last_bit_offset, at analyzer/store.h:255 since 13-2582-g0ea5e3f4542832b8

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107882 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #3 from David

[Bug analyzer/106325] -Wanalyzer-null-dereference false positive due to analyzer not making assumptions for `__attribute__((nonnull))`

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106325 --- Comment #8 from David Malcolm --- Should be fixed on trunk for GCC 13 by the above patch. Still affects GCC 12, GCC 11, and GCC 10.

[Bug analyzer/106325] -Wanalyzer-null-dereference false positive due to analyzer not making assumptions for `__attribute__((nonnull))`

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106325 --- Comment #6 from David Malcolm --- Fix for the overzealous reducing is to simply add "__attribute__((nonnull(1, 2)))" to the reproducer here: __attribute__((nonnull(1, 2))) void arranger_object_unsplit (ArrangerObject *r1, ArrangerObject

[Bug analyzer/106325] -Wanalyzer-null-dereference false positive due to analyzer not making assumptions for `__attribute__((nonnull))`

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106325 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #5 from David

[Bug analyzer/106325] -Wanalyzer-null-dereference false positive due to analyzer not making assumptions for `__attribute__((nonnull))`

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106325 --- Comment #4 from David Malcolm --- Created attachment 54023 --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=54023=edit Reduced reproducer Attached is a reduced version of the reproducer, which demonstrates the false +ve on trunk with

[Bug analyzer/107851] Issues with -Wanalyzer-allocation-size messages

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107851 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Ever confirmed|0

[Bug analyzer/107948] GCC Static Analyzer doesn't realize `0 - width <= 0` is always true when `width > 0` and `width is int` type，

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107948 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|UNCONFIRMED

[Bug middle-end/107941] json diagnostics format does not include header stack info

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107941 --- Comment #2 from David Malcolm --- Does the SARIF output format contain the information you need?

[Bug analyzer/107928] ICE in on_bind, at analyzer/sm-fd.cc:1869

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107928 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/107928] ICE in on_bind, at analyzer/sm-fd.cc:1869

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107928 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #2 from David

[Bug analyzer/103546] Analyzer reports null dereference in flex scanners

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103546 --- Comment #7 from David Malcolm --- As it notes, the above patch reduces the number of false positives on flex-generated scanners, but doesn't fix them all. Keeping this bug open to track fixing them.

[Bug analyzer/105784] -Wanalyzer-use-of-uninitialized-value false positive on partly initialized array

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105784 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Bug analyzer/107807] gcc.dg/analyzer/errno-1.c FAILs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107807 David Malcolm changed: What|Removed |Added Status|WAITING |RESOLVED Resolution|---

[Bug analyzer/106473] [12/13 Regression] -Wanalyzer-malloc-leak false positive regression when returning heap-allocation through nested pointers

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106473 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug analyzer/107851] New: Issues with -Wanalyzer-allocation-size messages

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107851 Bug ID: 107851 Summary: Issues with -Wanalyzer-allocation-size messages Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component:

[Bug analyzer/100705] RFE: warn about dead store

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100705 --- Comment #3 from David Malcolm --- See also: PR 80066

[Bug analyzer/107788] [13 Regression] ICE in wide_int_to_tree_1, at tree.cc:1757 since r13-4074-g86a90006864840c2

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107788 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/107783] [13 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:3238 since r13-4074-g86a90006864840c2

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107783 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|WAITING

[Bug analyzer/107807] gcc.dg/analyzer/errno-1.c FAILs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107807 David Malcolm changed: What|Removed |Added Status|ASSIGNED|WAITING --- Comment #5 from David

[Bug analyzer/106473] [12/13 Regression] -Wanalyzer-malloc-leak false positive regression when returning heap-allocation through nested pointers

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106473 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1

[Bug analyzer/107807] gcc.dg/analyzer/errno-1.c FAILs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107807 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Bug analyzer/107807] gcc.dg/analyzer/errno-1.c FAILs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107807 --- Comment #1 from David Malcolm --- Thanks for filing this bug; sorry about the test failures. I've tested errno-1.c with glibc's errno.h, and with a simple "extern int errno;". What does look like on your machine? In particular, how is

[Bug analyzer/107788] [13 Regression] ICE in wide_int_to_tree_1, at tree.cc:1757 since r13-4074-g86a90006864840c2

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107788 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #4 from David

[Bug analyzer/107783] [13 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:3238 since r13-4074-g86a90006864840c2

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107783 David Malcolm changed: What|Removed |Added Status|ASSIGNED|WAITING --- Comment #4 from David

[Bug analyzer/107777] [13 Regression] ICE in get_representative_path_var_1, at analyzer/region-model.cc:4750 since r13-3770-g3d2d04cda493fb55

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=10 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug analyzer/107582] - -Wanalyzer-use-of-uninitialized-value false positive with while loop in pthread_cleanup_push

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582 --- Comment #9 from David Malcolm --- s/earlier/earliest/

[Bug analyzer/107582] - -Wanalyzer-use-of-uninitialized-value false positive with while loop in pthread_cleanup_push

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582 --- Comment #8 from David Malcolm --- (In reply to David Malcolm from comment #7) > I hope to backport this to GCC 12; keeping this open to track that. I believe the buggy implementation of dynamic_call_info_t::update_model was introduced in

[Bug analyzer/107582] - -Wanalyzer-use-of-uninitialized-value false positive with while loop in pthread_cleanup_push

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582 --- Comment #7 from David Malcolm --- Fixed on trunk for GCC 13 by the above commit. I hope to backport this to GCC 12; keeping this open to track that.

[Bug analyzer/107582] - -Wanalyzer-use-of-uninitialized-value false positive with while loop in pthread_cleanup_push

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582 --- Comment #5 from David Malcolm --- It's a bug in feasibility-checking when jumping through a function pointer: dynamic_call_info_t::update_model blindly copies over the state from the exploded_node's state, overwriting the precise knowledge

[Bug analyzer/107582] - -Wanalyzer-use-of-uninitialized-value false positive with while loop in pthread_cleanup_push

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Ever confirmed|0

[Bug analyzer/107750] Many gcc.dg/analyzer/fd-*.c tests FAIL

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107750 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Bug analyzer/107733] GCC - -Wanayzer-null-dereference false positive with wrong path note "(3) 'e' is NULL" and inconsistent behaviors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107733 --- Comment #2 from David Malcolm --- ...and also, as you note: * deleting the unrelated code ` int *d = 0;` should not affect the result (but does) > the path note `(3) 'e' is NULL` is wrong, this may suggest some problems. Note (3) seems

[Bug analyzer/107733] GCC - -Wanayzer-null-dereference false positive with wrong path note "(3) 'e' is NULL" and inconsistent behaviors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107733 --- Comment #1 from David Malcolm --- Thanks for filing this bug. It's analyzing "a" twice: as called by main, and as a standalone function. The warning comes from the analysis of "a" as a standalone function; if I delete "main" from the

[Bug analyzer/107711] [13 Regression] ICE with "-fanalyzer -Wunused-macros" since r13-4073-gd8aba860b34203

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 David Malcolm changed: What|Removed |Added Status|WAITING |RESOLVED Resolution|---

[Bug analyzer/107711] [13 Regression] ICE with "-fanalyzer -Wunused-macros" since r13-4073-gd8aba860b34203

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 David Malcolm changed: What|Removed |Added Keywords||patch Status|ASSIGNED

[Bug analyzer/107711] [13 Regression] ICE with "-fanalyzer -Wunused-macros" since r13-4073-gd8aba860b34203

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 --- Comment #9 from David Malcolm --- It's a use-after-free of the ident_hash hash_table. Testing a fix...

[Bug analyzer/107725] Spurious warning: use of uninitialized value with std::any

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107725 --- Comment #4 from David Malcolm --- Aha thanks: presumably "Ep 350 - The Right Way to Write C++ Code in 2022"? I'm watching it now.

[Bug analyzer/107711] ICE with -fanalyzer with -Wunused-macros since r13-4073-gd8aba860b34203

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 David Malcolm changed: What|Removed |Added Summary|internal compiler error:|ICE with -fanalyzer with

[Bug analyzer/107725] Spurious warning: use of uninitialized value with std::any

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107725 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |NEW Last reconfirmed|

[Bug analyzer/107725] Spurious warning: use of uninitialized value with std::any

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107725 David Malcolm changed: What|Removed |Added Blocks||97110 --- Comment #2 from David

[Bug analyzer/107711] internal compiler error: Segmentation fault

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 --- Comment #4 from David Malcolm --- (In reply to urs from comment #2) > On Wed, Nov 16, 2022 at 02:41:40PM +, dmalcolm at gcc dot gnu.org wrote: > > Unfortunately I can't reproduce the ICE with the attachment. > > Yes, attachment was

[Bug analyzer/107711] internal compiler error: Segmentation fault

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 --- Comment #3 from David Malcolm --- Created attachment 53911 --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=53911=edit Work-in-progress patch to add logging to ana::on_finish_translation_unit

[Bug analyzer/107711] internal compiler error: Segmentation fault

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107711 --- Comment #1 from David Malcolm --- Thanks for filing this bug report. Unfortunately I can't reproduce the ICE with the attachment. I have a suspicion that this relates to commits r13-4073-gd8aba860b34203 and/or r13-4074-g86a90006864840 and

[Bug analyzer/106003] RFE: -fanalyzer could complain about misuse of file-descriptors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106003 Bug 106003 depends on bug 106140, which changed state. Bug 106140 Summary: RFE: analyzer could complain about misuses of socket APIs https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106140 What|Removed |Added

[Bug analyzer/106140] RFE: analyzer could complain about misuses of socket APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106140 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|WAITING

[Bug analyzer/107472] Support for the Linux kernel's memory-management APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107472 Bug 107472 depends on bug 106302, which changed state. Bug 106302 Summary: RFE: provide a way for -fanalyzer to use target flags https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 What|Removed |Added

[Bug analyzer/106301] RFE: analyzer support of mmap

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106301 Bug 106301 depends on bug 106302, which changed state. Bug 106302 Summary: RFE: provide a way for -fanalyzer to use target flags https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 What|Removed |Added

[Bug analyzer/106003] RFE: -fanalyzer could complain about misuse of file-descriptors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106003 Bug 106003 depends on bug 106302, which changed state. Bug 106302 Summary: RFE: provide a way for -fanalyzer to use target flags https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 What|Removed |Added

[Bug analyzer/106140] RFE: analyzer could complain about misuses of socket APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106140 Bug 106140 depends on bug 106302, which changed state. Bug 106302 Summary: RFE: provide a way for -fanalyzer to use target flags https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 What|Removed |Added

[Bug analyzer/106302] RFE: provide a way for -fanalyzer to use target flags

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 David Malcolm changed: What|Removed |Added Status|WAITING |RESOLVED Resolution|---

[Bug analyzer/106235] RFE: -fanalyzer could complain about tainted data triggering assertion failure

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106235 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/106235] RFE: -fanalyzer could complain about tainted data triggering assertion failure

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106235 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Last reconfirmed|

[Bug other/107655] New: [meta-bug] tracker bug for issues encountered in the texinfo-to-sphinx migration

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107655 Bug ID: 107655 Summary: [meta-bug] tracker bug for issues encountered in the texinfo-to-sphinx migration Product: gcc Version: 13.0 Status: UNCONFIRMED

[Bug analyzer/106147] RFE: -fanalyzer could complain about some cases of infinite loops and infinite recursion

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106147 --- Comment #6 from David Malcolm --- The above patch implements -Wanalyzer-infinite-recursion for GCC 13. I also have the beginnings of an implementation of -Wanalyzer-infinite-loop, but it won't be ready for the close of GCC 13 stage 1.

[Bug analyzer/107648] New: RFE: add an attribute for indicating security-sensitive data

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107648 Bug ID: 107648 Summary: RFE: add an attribute for indicating security-sensitive data Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal

[Bug analyzer/107646] RFE: can we reimplement gcc-python-plugin's cpychecker as a -fanalyzer plugin?

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107646 --- Comment #1 from David Malcolm --- In particular, reference-count checking would probably be the most interesting aspect of the project.

[Bug analyzer/107646] New: RFE: can we reimplement gcc-python-plugin's cpychecker as a -fanalyzer plugin?

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107646 Bug ID: 107646 Summary: RFE: can we reimplement gcc-python-plugin's cpychecker as a -fanalyzer plugin? Product: gcc Version: 13.0 Status: UNCONFIRMED

[Bug other/107634] New: Very long filenames and URLs for sphinx-based docs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107634 Bug ID: 107634 Summary: Very long filenames and URLs for sphinx-based docs Product: gcc Version: 13.0 Status: UNCONFIRMED Keywords: documentation Severity: normal

[Bug analyzer/107625] New: RFE: analyzer support for dlopen etc

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107625 Bug ID: 107625 Summary: RFE: analyzer support for dlopen etc Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: analyzer

[Bug analyzer/106147] RFE: -fanalyzer could complain about some cases of infinite loops and infinite recursion

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106147 David Malcolm changed: What|Removed |Added See Also||https://gcc.gnu.org/bugzill

[Bug middle-end/77432] warn about null check after pointer dereference

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=77432 --- Comment #7 from David Malcolm --- (In reply to David Malcolm from comment #5) > I hadn't seen this, and I filed PR analyzer/99671 last year to track adding > a -fanalyzer warning for this. I now have a mostly-working implementation > of the

[Bug analyzer/99671] RFE: analyzer could complain about ptr derefs that occur before the ptr is checked

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99671 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/99671] RFE: analyzer could complain about ptr derefs that occur before the ptr is checked

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99671 --- Comment #2 from David Malcolm --- Created attachment 53863 --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=53863=edit Implementation of this (not yet ported to Sphinx) This patch implements the new warning; still uses texinfo rather

[Bug middle-end/77432] warn about null check after pointer dereference

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=77432 David Malcolm changed: What|Removed |Added CC||dmalcolm at gcc dot gnu.org --- Comment

[Bug analyzer/99671] RFE: analyzer could complain about ptr derefs that occur before the ptr is checked

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99671 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Bug analyzer/107573] New: RFE: analyzer handling of strtok

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107573 Bug ID: 107573 Summary: RFE: analyzer handling of strtok Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: analyzer

[Bug analyzer/107566] array out of bounds not detected

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107566 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Last reconfirmed|

[Bug target/107565] [12/13 Regression] -Wanalyzer-use-of-uninitialized-value false positive with rdrand

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107565 --- Comment #2 from David Malcolm --- (In reply to Andrew Pinski from comment #1) > Confirmed. > else if (!fndecl_has_gimple_body_p (callee_fndecl) >&& (!(callee_fndecl_flags & (ECF_CONST | ECF_PURE))) >&&

[Bug analyzer/106140] RFE: analyzer could complain about misuses of socket APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106140 David Malcolm changed: What|Removed |Added Status|ASSIGNED|WAITING --- Comment #3 from David

[Bug analyzer/94355] support for C++ new expression

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=94355 --- Comment #13 from David Malcolm --- (In reply to Jonathan Wakely from comment #10) [...snip...] > As already noted above, new can't return null here, and there is no > dereference anyway. And the pointer isn't leaked, but it seems maybe the

[Bug analyzer/107486] [13 Regression] ICE when pipe's argument is not a pointer type

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107486 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug analyzer/106003] RFE: -fanalyzer could complain about misuse of file-descriptors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106003 Bug 106003 depends on bug 107486, which changed state. Bug 107486 Summary: [13 Regression] ICE when pipe's argument is not a pointer type https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107486 What|Removed

[Bug analyzer/107486] [13 Regression] ICE when pipe's argument is not a pointer type

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107486 David Malcolm changed: What|Removed |Added Summary|[13 Regression] ICE in |[13 Regression] ICE when

[Bug analyzer/106302] RFE: provide a way for -fanalyzer to use target flags

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106302 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Last reconfirmed|

[Bug analyzer/107472] Support for the Linux kernel's memory-management APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107472 --- Comment #1 from David Malcolm --- (In reply to David Malcolm from comment #0) > In particular, note the GPF flags GFP, even

[Bug analyzer/106140] RFE: analyzer could complain about misuses of socket APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106140 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Depends on|

[Bug analyzer/107472] New: Support for the Linux kernel's memory-management APIs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107472 Bug ID: 107472 Summary: Support for the Linux kernel's memory-management APIs Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal Priority: P3

[Bug analyzer/106703] during IPA pass: analyzer ICE: error reporting routines re-entered. with -fanalyzer -fsanitize-address-use-after-scope -fsanitize=kernel-address -fdiagnostics-format=sarif-stderr

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106703 --- Comment #2 from David Malcolm --- Looks like a dup of 107366; possibly fixed by r13-3469-g2e8a0553918adc919f98ac5c0224fc6ce1fef68d.

[Bug analyzer/107349] [13 Regression] ICE in get_va_copy_arg, at analyzer/varargs.cc:175

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107349 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug analyzer/107366] ICE with -fanalyzer with -fdiagnostics-format=sarif-file or sarif-stderr

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107366 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/107345] - -Wanayzer-null-dereference false positive with giving weird path infomation

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107345 --- Comment #3 from David Malcolm --- Fixed on trunk for GCC 13 by the above patch. Keeping open for backporting to GCC 12.

[Bug analyzer/106300] RFE: analyzer support for more ways of obtaining an open file descriptor

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106300 David Malcolm changed: What|Removed |Added Resolution|--- |FIXED Status|UNCONFIRMED

[Bug analyzer/106003] RFE: -fanalyzer could complain about misuse of file-descriptors

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106003 Bug 106003 depends on bug 106300, which changed state. Bug 106300 Summary: RFE: analyzer support for more ways of obtaining an open file descriptor https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106300 What|Removed

[Bug analyzer/107349] [13 Regression] ICE in get_va_copy_arg, at analyzer/varargs.cc:175

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107349 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Last reconfirmed|

[Bug analyzer/107366] ICE with -fanalyzer with -fdiagnostics-format=sarif-file or sarif-stderr

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107366 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #4 from David

[Bug analyzer/107345] - -Wanayzer-null-dereference false positive with giving weird path infomation

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107345 David Malcolm changed: What|Removed |Added Ever confirmed|0 |1 Status|UNCONFIRMED

[Bug analyzer/105765] [13 Regression] ICE: Segmentation fault on __builtin_ms_va_copy with -fanalyzer since r13-514-g2402dc6b982c4dac

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105765 David Malcolm changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug analyzer/105765] [13 Regression] ICE: Segmentation fault on __builtin_ms_va_copy with -fanalyzer since r13-514-g2402dc6b982c4dac

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105765 David Malcolm changed: What|Removed |Added Status|NEW |ASSIGNED Summary|[13

[Bug analyzer/107289] - -Wanayzer-null-dereference false positive with f = *b

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107289 David Malcolm changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Last reconfirmed|

[Bug analyzer/107289] - -Wanayzer-null-dereference false positive with f = *b

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107289 --- Comment #1 from David Malcolm --- Thanks for filing this bug; I get the same results with trunk: https://godbolt.org/z/3ThE6E5q6

<    1   2   3   4   5   6   7   8   9   10   >