steakhal wrote:

In this PR, we decided to suppress some reports.
It turns out the `alpha.security.ReturnPtrRange` would overtake some the 
suppressed reports and issue a diagnostic itself.
Here is an example:
https://compiler-explorer.com/z/P9bGTjv5W
```c++
const char *unwindTerminator(const char *it) {
  return (*(it - 1) == '=') ? (it - 1) : it; 
}
```

In the past, it was diagnosed by the ArrayBoundV2, but since this PR, it gets 
suppressed, thus the `ReturnPtrRange` gets the chance to report these. Should 
we also patch that checker to suppress these reports for the same reason as we 
suppressed these in the ArrayBoundV2?
@NagyDonat

https://github.com/llvm/llvm-project/pull/81034
_______________________________________________
cfe-commits mailing list
cfe-commits@lists.llvm.org
https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits

Reply via email to