Skip to content

Commit c43d348

Browse files
dkruppdkrupp
committed
Updating clangsa sei cert mapping for clang 18
The association of SEI CERT C and C++ Coding Standard Rules are updated for the Clang Static Analyzer version 18.
1 parent 2afffe6 commit c43d348

File tree

1 file changed

+58
-30
lines changed

1 file changed

+58
-30
lines changed

‎config/labels/analyzers/clangsa.json

Lines changed: 58 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -90,10 +90,8 @@
9090
],
9191
"alpha.cplusplus.ArrayDelete": [
9292
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#alpha-cplusplus-arraydelete-c",
93-
"guideline:sei-cert",
9493
"profile:extreme",
9594
"profile:sensitive",
96-
"sei-cert:exp51-cpp",
9795
"severity:HIGH"
9896
],
9997
"alpha.cplusplus.ContainerModeling": [
@@ -245,18 +243,15 @@
245243
"profile:sensitive",
246244
"profile:security",
247245
"profile:extreme",
248-
"severity:HIGH",
249-
"sei-cert:pos34-c"
246+
"severity:HIGH"
250247
],
251248
"alpha.security.cert.env.InvalidPtr": [
252249
"doc_url:https://releases.llvm.org/17.0.1/tools/clang/docs/analyzer/checkers.html#alpha-security-cert-env-invalidptr",
253250
"profile:default",
254251
"profile:sensitive",
255252
"profile:extreme",
256253
"profile:security",
257-
"severity:MEDIUM",
258-
"sei-cert:env31-c",
259-
"sei-cert:env34-c"
254+
"severity:MEDIUM"
260255
],
261256
"alpha.security.taint.TaintPropagation": [
262257
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#alpha-security-taint-taintpropagation-c-c",
@@ -342,6 +337,7 @@
342337
"profile:extreme",
343338
"profile:sensitive",
344339
"sei-cert:int34-c",
340+
"sei-cert:int32-c",
345341
"severity:HIGH"
346342
],
347343
"core.CallAndMessage": [
@@ -358,7 +354,6 @@
358354
"sei-cert:exp50-cpp",
359355
"sei-cert:exp53-cpp",
360356
"sei-cert:exp54-cpp",
361-
"sei-cert:exp57-cpp",
362357
"severity:HIGH"
363358
],
364359
"core.CallAndMessageModeling": [
@@ -388,7 +383,6 @@
388383
"profile:extreme",
389384
"profile:sensitive",
390385
"sei-cert:exp34-c",
391-
"sei-cert:mem34-c",
392386
"severity:HIGH"
393387
],
394388
"core.NonnilStringConstants": [
@@ -402,12 +396,14 @@
402396
"profile:default",
403397
"profile:extreme",
404398
"profile:sensitive",
405-
"sei-cert:arr30-c",
406-
"sei-cert:dcl38-c",
399+
"sei-cert:exp34-c",
407400
"severity:HIGH"
408401
],
409402
"core.StackAddrEscapeBase": [
410403
"guideline:sei-cert",
404+
"sei-cert:dcl30-c",
405+
"sei-cert:exp54-cpp",
406+
"sei-cert:exp61-cpp",
411407
"profile:default",
412408
"profile:extreme",
413409
"profile:sensitive"
@@ -419,6 +415,7 @@
419415
"profile:sensitive",
420416
"sei-cert:dcl30-c",
421417
"sei-cert:exp54-cpp",
418+
"sei-cert:exp61-cpp",
422419
"severity:HIGH"
423420
],
424421
"core.UndefinedBinaryOperatorResult": [
@@ -427,11 +424,8 @@
427424
"profile:default",
428425
"profile:extreme",
429426
"profile:sensitive",
427+
"sei-cert:exp50-cpp",
430428
"sei-cert:exp33-c",
431-
"sei-cert:exp36-c",
432-
"sei-cert:exp53-cpp",
433-
"sei-cert:int32-c",
434-
"sei-cert:int34-c",
435429
"severity:HIGH"
436430
],
437431
"core.VLASize": [
@@ -460,35 +454,45 @@
460454
"profile:default",
461455
"profile:extreme",
462456
"profile:sensitive",
457+
"guideline:sei-cert",
458+
"sei-cert:exp33-c",
463459
"severity:HIGH"
464460
],
465461
"core.uninitialized.Assign": [
466462
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-assign-c",
467463
"profile:default",
468464
"profile:extreme",
469465
"profile:sensitive",
470-
"severity:HIGH"
466+
"severity:HIGH",
467+
"guideline:sei-cert",
468+
"sei-cert:exp33-c"
471469
],
472470
"core.uninitialized.Branch": [
473471
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-branch-c",
474472
"profile:default",
475473
"profile:extreme",
476474
"profile:sensitive",
477-
"severity:HIGH"
475+
"severity:HIGH",
476+
"guideline:sei-cert",
477+
"sei-cert:exp33-c"
478478
],
479479
"core.uninitialized.CapturedBlockVariable": [
480480
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-capturedblockvariable-c",
481481
"profile:default",
482482
"profile:extreme",
483483
"profile:sensitive",
484-
"severity:HIGH"
484+
"severity:HIGH",
485+
"guideline:sei-cert",
486+
"sei-cert:exp33-c"
485487
],
486488
"core.uninitialized.NewArraySize": [
487489
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-newarraysize-c",
488490
"profile:default",
489491
"profile:extreme",
490492
"profile:sensitive",
491-
"severity:HIGH"
493+
"severity:HIGH",
494+
"guideline:sei-cert",
495+
"sei-cert:exp33-c"
492496
],
493497
"core.uninitialized.UndefReturn": [
494498
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-undefreturn-c",
@@ -549,7 +553,6 @@
549553
"profile:default",
550554
"profile:extreme",
551555
"profile:sensitive",
552-
"sei-cert:exp62-cpp",
553556
"sei-cert:mem51-cpp",
554557
"severity:HIGH"
555558
],
@@ -574,7 +577,9 @@
574577
"profile:default",
575578
"profile:extreme",
576579
"profile:sensitive",
577-
"severity:MEDIUM"
580+
"severity:MEDIUM",
581+
"guideline:sei-cert",
582+
"sei-cert:oop54-cpp"
578583
],
579584
"cplusplus.SmartPtrModeling": [
580585
"profile:default",
@@ -586,7 +591,9 @@
586591
"profile:default",
587592
"profile:extreme",
588593
"profile:sensitive",
589-
"severity:HIGH"
594+
"severity:HIGH",
595+
"guideline:sei-cert",
596+
"sei-cert:str51-cpp"
590597
],
591598
"cplusplus.VirtualCallModeling": [
592599
"profile:default",
@@ -598,7 +605,9 @@
598605
"profile:default",
599606
"profile:extreme",
600607
"profile:sensitive",
601-
"severity:LOW"
608+
"guideline:sei-cert",
609+
"severity:LOW",
610+
"sei-cert:msc12-c"
602611
],
603612
"debug.AnalysisOrder": [
604613
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#debug-analysisorder"
@@ -693,7 +702,9 @@
693702
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#optin-core-enumcastoutofrange-c-c",
694703
"profile:extreme",
695704
"profile:sensitive",
696-
"severity:MEDIUM"
705+
"severity:MEDIUM",
706+
"sei-cert:mem54-cpp",
707+
"guideline:sei-cert"
697708
],
698709
"optin.cplusplus.UninitializedObject": [
699710
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#optin-cplusplus-uninitializedobject-c",
@@ -840,7 +851,8 @@
840851
"profile:security",
841852
"severity:MEDIUM",
842853
"sei-cert:env31-c",
843-
"sei-cert:env34-c"
854+
"sei-cert:env34-c",
855+
"guideline:sei-cert"
844856
],
845857
"security.FloatLoopCounter": [
846858
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-floatloopcounter-c",
@@ -924,6 +936,8 @@
924936
"security.insecureAPI.strcpy": [
925937
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-insecureapi-strcpy-c",
926938
"profile:extreme",
939+
"sei-cert:str31-c",
940+
"guideline:sei-cert",
927941
"severity:MEDIUM"
928942
],
929943
"security.insecureAPI.vfork": [
@@ -940,7 +954,9 @@
940954
"profile:default",
941955
"profile:extreme",
942956
"profile:sensitive",
943-
"severity:MEDIUM"
957+
"severity:MEDIUM",
958+
"sei-cert:exp37-c",
959+
"guideline:sei-cert"
944960
],
945961
"unix.DynamicMemoryModeling": [
946962
"profile:default",
@@ -951,7 +967,9 @@
951967
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-errno-c",
952968
"profile:sensitive",
953969
"profile:extreme",
954-
"severity:HIGH"
970+
"severity:HIGH",
971+
"guideline:sei-cert",
972+
"sei-cert:err30-c"
955973
],
956974
"unix.Malloc": [
957975
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-malloc-c",
@@ -962,6 +980,8 @@
962980
"sei-cert:mem30-c",
963981
"sei-cert:mem31-c",
964982
"sei-cert:mem34-c",
983+
"sei-cert:mem35-c",
984+
"sei-cert:mem36-c",
965985
"severity:MEDIUM"
966986
],
967987
"unix.MallocSizeof": [
@@ -988,7 +1008,11 @@
9881008
"profile:extreme",
9891009
"profile:sensitive",
9901010
"profile:security",
991-
"severity:HIGH"
1011+
"severity:HIGH",
1012+
"guideline:sei-cert",
1013+
"sei-cert:err33-c",
1014+
"sei-cert:pos52-c",
1015+
"sei-cert:arr38-c"
9921016
],
9931017
"unix.Vfork": [
9941018
"doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-vfork-c",
@@ -1004,7 +1028,9 @@
10041028
"profile:default",
10051029
"profile:extreme",
10061030
"profile:sensitive",
1007-
"severity:MEDIUM"
1031+
"severity:MEDIUM",
1032+
"sei-cert:str31-c",
1033+
"guideline:sei-cert"
10081034
],
10091035
"unix.cstring.CStringModeling": [
10101036
"profile:default",
@@ -1016,7 +1042,9 @@
10161042
"profile:default",
10171043
"profile:extreme",
10181044
"profile:sensitive",
1019-
"severity:MEDIUM"
1045+
"severity:HIGH",
1046+
"guideline:sei-cert",
1047+
"sei-cert:exp34-c"
10201048
],
10211049
"valist.CopyToSelf": [
10221050
"profile:default",

0 commit comments

Comments
 (0)