2020 LLVM Developers’ Meeting: V. Bridgers “Using the Clang Static Analyzer to Find Bugs”
https://llvm.org/devmtg/2020-09/
—
Using the Clang Static Analyzer to Find Bugs - Vince Bridgers
Slides: https://llvm.org/devmtg/2020-09/slide...
—
In this tutorial, I'll present some motivating examples for the use of the clang static analyzer to find bugs in production source code, and source code under development. I'll compare and contrast the value of using Z3 to refute certain false positives. The value of cross-translation-unit analysis will be presented, and a basic flow will be presented demonstrated how this works. I'll present how Ericsson's CodeChecker tool can be used to drive analysis using Z3 and cross-translation-unit analysis.
If time permits, I'll present how a small custom static analysis check can be added and driven from CodeChecker.
The audience is assumed to be programmers interested in using static analysis for mid to large scale source projects. Programmers of any experience level that are new to static analysis (not necessarily LLVM/Clang), or need a review of that material, would benefit from this tutorial.
I put together a tutorial like this for an online LLVM meetup about a month ago, the material is located here if you'd like to review that https://github.com/vabridgers/Austin-... . I would use that material as a starting point and extend that for this LLVM 2020 meeting.
—