7ceb9c54aa
Viktor Szakats
2025-08-29
Subject
clang-tidy: disable `clang-analyzer-security.ArrayBound`
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
.github/workflows/linux.yml+1 -1
| @@ -40,7 +40,7 @@ permissions: {} | |
| env: | |
| MAKEFLAGS: -j 5 | |
| CURL_CI: github | |
| - | CURL_CLANG_TIDYFLAGS: '-checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,-clang-analyzer-valist.Uninitialized' |
| + | CURL_CLANG_TIDYFLAGS: '-checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.ArrayBound,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,-clang-analyzer-valist.Uninitialized' |
| # renovate: datasource=github-tags depName=libressl-portable/portable versioning=semver registryUrl=https://github.com | |
| LIBRESSL_VERSION: 4.1.0 | |
| # renovate: datasource=github-tags depName=wolfSSL/wolfssl versioning=semver extractVersion=^v?(?<version>.+)-stable$ registryUrl=https://github.com | |
CMakeLists.txt+1 -0
| @@ -297,6 +297,7 @@ if(CURL_CLANG_TIDY) | |
| list(APPEND _tidy_checks "-clang-analyzer-security.insecureAPI.bzero") # for FD_ZERO() (seen on macOS) | |
| list(APPEND _tidy_checks "-clang-analyzer-security.insecureAPI.strcpy") | |
| list(APPEND _tidy_checks "-clang-analyzer-optin.performance.Padding") | |
| + | list(APPEND _tidy_checks "-clang-analyzer-security.ArrayBound") # false positives with clang-tidy v21.1.0 |
| list(APPEND _tidy_checks "-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling") | |
| string(REPLACE ";" "," _tidy_checks "${_tidy_checks}") | |
| find_program(CLANG_TIDY NAMES "clang-tidy" REQUIRED) | |
lib/Makefile.am+1 -1
| @@ -174,7 +174,7 @@ $(UNITPROTOS): $(CSOURCES) | |
| $(UNIT_V)(cd $(srcdir) && @PERL@ ../scripts/extract-unit-protos $(CSOURCES) > $(top_builddir)/lib/$(UNITPROTOS)) | |
| # disable the tests that are mostly causing false positives | |
| - | TIDYFLAGS := -checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling -quiet |
| + | TIDYFLAGS := -checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.ArrayBound,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling -quiet |
| if CURL_WERROR | |
| TIDYFLAGS += --warnings-as-errors=* | |
| endif | |
src/Makefile.am+1 -1
| @@ -220,7 +220,7 @@ endif | |
| endif | |
| # disable the tests that are mostly causing false positives | |
| - | TIDYFLAGS := -checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling -quiet |
| + | TIDYFLAGS := -checks=-clang-analyzer-security.insecureAPI.bzero,-clang-analyzer-security.insecureAPI.strcpy,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.ArrayBound,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling -quiet |
| if CURL_WERROR | |
| TIDYFLAGS += --warnings-as-errors=* | |
| endif | |