NagyDonat wrote: The evaluation on open source projects showed that this change did not introduce any crash and did not influence the set of results.
I was surprised by the lack of new results at first, but I confirmed that the taint modeling was active during this evaluation. It seems that there are few taint sources in these projects, so enabling taint modeling only adds +0.2% of new reports and it is not surprising that we didn't see any underflow with tainted index report. (Note that these are stable open source projects, so we don't expect to see true positive reports in them.) https://github.com/llvm/llvm-project/pull/216077 _______________________________________________ cfe-commits mailing list [email protected] https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits
