CHERI CSA: CHERI support for Clang Static Analyzer + cheri.* Checkers #744
+4,789
−65
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Detects tag-stripping loads and stores that may be used to copy or swap capabilities
Rely on ElementRegion type alignment solely when shift value is unknown Except for char shifts
ProvenanceSourceChecker, CapabilityCopyChecker, CapabilityAlignmentChecker
Report warning when an underaligned pointer gets converted or stored as a capability-aligned pointer value for the first time. Do not report if it already has a strictly-aligned type.
Rework detection of addresses of capability-containing regions and generic regions (those that are intended to hold arbitrary data) by analyzing address Symbol type and origin.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
cheri.CapabilityCopyCheck tag-stripping memory copy.cheri.CheriAPIModellingModel CheriAPIcheri.PointerSizeAssumptionsDetect hardcoded expectations on pointer sizescheri.ProvenanceSourceCheck expressions with ambiguous provenance source.cheri.SubObjectRepresentabilityCheck for record fields with unrepresentable subobject boundsoptin.portability.PointerAlignmentCheck underaligned pointersalpha.cheri.Allocation(Enable only for development!) Suggest narrowing bounds for escaping suballocation capabilities