Commits on Jan 17, 2024

1. security: Add compiler static analysis support …

   Enable GCC builtin static analysis in Zephyr's static code analysis
   (SCA) infra.
   
   When this option is enabled GCC performs a static analysis and
   can point problems like:
   
   sample.c
   
   +	int *j;
   +
   +	if (j != NULL) {
   +		printf("j != NULL\n");
   
   output:
   
   ${ZEPHYR_BASE}/samples/userspace/hello_world_user/src/main.c:30:12:
   warning: use of uninitialized value 'j' [CWE-457]
   [-Wanalyzer-use-of-uninitialized-value]
   
      30 |         if (j != NULL) {
         |            ^
     'main': events 1-2
       |
       |   25 |         int *j;
       |      |              ^
       |      |              |
       |      |              (1) region created on stack here
       |......
       |   30 |         if (j != NULL) {
       |      |            ~
       |      |            |
       |      |            (2) use of uninitialized value 'j' here
   
   Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>

   

   ceolin committed Jan 17, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for a9c7507
   • Browse repository at this point

   Copy the full SHA

   a9c7507 View commit details

   Browse the repository at this point in the history