From 1f96e2ffd188993ef2c105e47a11559ead7e1955 Mon Sep 17 00:00:00 2001 From: bruntib Date: Mon, 9 Dec 2024 13:48:53 +0100 Subject: [PATCH] [cfg] Separate SEI-CERT rules based on C and C++ language --- config/labels/analyzers/clang-tidy.json | 216 +++++++++++++----------- config/labels/analyzers/clangsa.json | 94 ++++++----- 2 files changed, 162 insertions(+), 148 deletions(-) diff --git a/config/labels/analyzers/clang-tidy.json b/config/labels/analyzers/clang-tidy.json index 52d32f04e0..032d3fd689 100644 --- a/config/labels/analyzers/clang-tidy.json +++ b/config/labels/analyzers/clang-tidy.json @@ -176,7 +176,7 @@ ], "bugprone-assert-side-effect": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/assert-side-effect.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -191,7 +191,7 @@ ], "bugprone-bad-signal-to-kill-thread": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/bad-signal-to-kill-thread.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -278,7 +278,7 @@ ], "bugprone-exception-escape": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/exception-escape.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -365,7 +365,7 @@ ], "bugprone-macro-parentheses": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/macro-parentheses.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "sei-cert:pre02-c", @@ -373,7 +373,7 @@ ], "bugprone-macro-repeated-side-effects": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/macro-repeated-side-effects.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -418,7 +418,7 @@ ], "bugprone-multiple-new-in-one-expression": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/multiple-new-in-one-expression.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -438,7 +438,7 @@ ], "bugprone-narrowing-conversions": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/narrowing-conversions.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -488,7 +488,7 @@ ], "bugprone-pointer-arithmetic-on-polymorphic-object": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/pointer-arithmetic-on-polymorphic-object.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "sei-cert:ctr56-cpp", @@ -508,7 +508,8 @@ ], "bugprone-reserved-identifier": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/reserved-identifier.html", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "sei-cert:dcl37-c", @@ -523,7 +524,7 @@ ], "bugprone-shared-ptr-array-mismatch": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/shared-ptr-array-mismatch.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -533,7 +534,8 @@ ], "bugprone-signal-handler": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/signal-handler.html", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -544,7 +546,7 @@ ], "bugprone-signed-char-misuse": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/signed-char-misuse.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -561,7 +563,7 @@ ], "bugprone-sizeof-expression": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/sizeof-expression.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -571,7 +573,8 @@ ], "bugprone-spuriously-wake-up-functions": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/spuriously-wake-up-functions.html", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -628,7 +631,7 @@ ], "bugprone-suspicious-memory-comparison": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/suspicious-memory-comparison.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -639,7 +642,7 @@ ], "bugprone-suspicious-memset-usage": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/suspicious-memset-usage.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -656,7 +659,7 @@ ], "bugprone-suspicious-realloc-usage": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/suspicious-realloc-usage.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -733,7 +736,7 @@ ], "bugprone-undefined-memory-manipulation": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/undefined-memory-manipulation.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -751,7 +754,7 @@ ], "bugprone-unhandled-exception-at-new": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/unhandled-exception-at-new.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -762,7 +765,7 @@ ], "bugprone-unhandled-self-assignment": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/unhandled-self-assignment.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -771,7 +774,7 @@ ], "bugprone-unique-ptr-array-mismatch": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/unique-ptr-array-mismatch.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -781,7 +784,7 @@ ], "bugprone-unsafe-functions": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/unsafe-functions.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -804,7 +807,7 @@ ], "bugprone-unused-return-value": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/unused-return-value.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -814,7 +817,7 @@ ], "bugprone-use-after-move": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/bugprone/use-after-move.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -847,7 +850,7 @@ ], "cert-dcl03-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/dcl03-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -856,7 +859,7 @@ ], "cert-dcl16-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/dcl16-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -865,7 +868,7 @@ ], "cert-dcl21-cpp": [ "doc_url:https://releases.llvm.org/18.1.1/tools/clang/tools/extra/docs/clang-tidy/checks/cert/dcl21-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -878,7 +881,7 @@ ], "cert-dcl50-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/dcl50-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -895,7 +898,7 @@ ], "cert-dcl58-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/dcl58-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -909,7 +912,7 @@ ], "cert-env33-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/env33-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -922,7 +925,7 @@ ], "cert-err33-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/err33-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -932,7 +935,7 @@ ], "cert-err34-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/err34-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -941,7 +944,7 @@ ], "cert-err52-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/err52-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -950,7 +953,7 @@ ], "cert-err58-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/err58-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -959,7 +962,7 @@ ], "cert-err60-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/err60-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -980,7 +983,7 @@ ], "cert-flp30-c": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/flp30-c.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -998,7 +1001,7 @@ ], "cert-mem57-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/mem57-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -1024,7 +1027,8 @@ ], "cert-msc50-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/msc50-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -1034,7 +1038,8 @@ ], "cert-msc51-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/msc51-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -1048,7 +1053,7 @@ ], "cert-oop11-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/oop11-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -1062,7 +1067,7 @@ ], "cert-oop57-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/oop57-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -1071,7 +1076,7 @@ ], "cert-oop58-cpp": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cert/oop58-cpp.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -1257,7 +1262,7 @@ ], "clang-diagnostic-array-bounds-pointer-arithmetic": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#warray-bounds-pointer-arithmetic", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1844,7 +1849,7 @@ ], "clang-diagnostic-conditional-uninitialized": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wconditional-uninitialized", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -1935,7 +1940,7 @@ ], "clang-diagnostic-dangling": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdangling", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:security", "sei-cert:mem50-cpp", @@ -1994,7 +1999,7 @@ ], "clang-diagnostic-delete-abstract-non-virtual-dtor": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdelete-abstract-non-virtual-dtor", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -2004,7 +2009,7 @@ ], "clang-diagnostic-delete-incomplete": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdelete-incomplete", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -2014,7 +2019,7 @@ ], "clang-diagnostic-delete-non-abstract-non-virtual-dtor": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdelete-non-abstract-non-virtual-dtor", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -2025,7 +2030,7 @@ ], "clang-diagnostic-delete-non-virtual-dtor": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdelete-non-virtual-dtor", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -2256,7 +2261,7 @@ ], "clang-diagnostic-double-promotion": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdouble-promotion", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2298,7 +2303,7 @@ ], "clang-diagnostic-dynamic-class-memaccess": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wdynamic-class-memaccess", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:security", "sei-cert:exp62-cpp", "sei-cert:oop57-cpp", @@ -2326,7 +2331,7 @@ ], "clang-diagnostic-embedded-directive": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wembedded-directive", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2398,7 +2403,7 @@ ], "clang-diagnostic-exceptions": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wexceptions", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -2504,7 +2509,7 @@ ], "clang-diagnostic-float-conversion": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wfloat-conversion", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2534,7 +2539,7 @@ ], "clang-diagnostic-format": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wformat", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -2570,7 +2575,7 @@ ], "clang-diagnostic-format-nonliteral": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wformat-nonliteral", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -2581,7 +2586,7 @@ ], "clang-diagnostic-format-overflow": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wformat-overflow", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:mem35-c", @@ -2589,7 +2594,7 @@ ], "clang-diagnostic-format-overflow-non-kprintf": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wformat-overflow-non-kprintf", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:mem35-c", @@ -2601,7 +2606,7 @@ ], "clang-diagnostic-format-security": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wformat-security", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2925,7 +2930,7 @@ ], "clang-diagnostic-implicit": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wimplicit", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2967,7 +2972,7 @@ ], "clang-diagnostic-implicit-function-declaration": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wimplicit-function-declaration", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2977,7 +2982,7 @@ ], "clang-diagnostic-implicit-int": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wimplicit-int", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -2987,7 +2992,7 @@ ], "clang-diagnostic-implicit-int-conversion": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wimplicit-int-conversion", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:int36-c", @@ -3039,7 +3044,7 @@ ], "clang-diagnostic-incompatible-function-pointer-types-strict": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wincompatible-function-pointer-types-strict", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:exp37-c", @@ -3059,7 +3064,7 @@ ], "clang-diagnostic-incompatible-pointer-types": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wincompatible-pointer-types", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -3069,7 +3074,7 @@ ], "clang-diagnostic-incompatible-pointer-types-discards-qualifiers": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wincompatible-pointer-types-discards-qualifiers", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -3127,7 +3132,7 @@ ], "clang-diagnostic-infinite-recursion": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#winfinite-recursion", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -3176,7 +3181,7 @@ ], "clang-diagnostic-int-conversion": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wint-conversion", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:int36-c", @@ -3239,7 +3244,7 @@ ], "clang-diagnostic-invalid-noreturn": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#winvalid-noreturn", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:security", "sei-cert:msc53-cpp", "severity:MEDIUM" @@ -3551,7 +3556,7 @@ ], "clang-diagnostic-mismatched-new-delete": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wmismatched-new-delete", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:security", "sei-cert:mem51-cpp", @@ -3792,7 +3797,7 @@ ], "clang-diagnostic-non-virtual-dtor": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wnon-virtual-dtor", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -4148,7 +4153,7 @@ ], "clang-diagnostic-over-aligned": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wover-aligned", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:security", "sei-cert:mem57-cpp", @@ -4214,7 +4219,7 @@ ], "clang-diagnostic-parentheses": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wparentheses", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -4303,7 +4308,7 @@ ], "clang-diagnostic-pointer-to-int-cast": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wpointer-to-int-cast", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:security", "sei-cert:int36-c", @@ -4578,7 +4583,7 @@ ], "clang-diagnostic-reorder-ctor": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreorder-ctor", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -4603,7 +4608,8 @@ ], "clang-diagnostic-reserved-identifier": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreserved-identifier", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -4614,7 +4620,8 @@ ], "clang-diagnostic-reserved-macro-identifier": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreserved-macro-identifier", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -4625,7 +4632,7 @@ ], "clang-diagnostic-reserved-module-identifier": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreserved-module-identifier", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -4654,7 +4661,8 @@ ], "clang-diagnostic-return-stack-address": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreturn-stack-address", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -4673,7 +4681,8 @@ ], "clang-diagnostic-return-type": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wreturn-type", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -4742,7 +4751,7 @@ ], "clang-diagnostic-self-assign-overloaded": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wself-assign-overloaded", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -4903,7 +4912,7 @@ ], "clang-diagnostic-sometimes-uninitialized": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wsometimes-uninitialized", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -4947,7 +4956,7 @@ ], "clang-diagnostic-static-in-inline": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wstatic-in-inline", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -5363,7 +5372,7 @@ ], "clang-diagnostic-unevaluated-expression": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wunevaluated-expression", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -5397,7 +5406,7 @@ ], "clang-diagnostic-uninitialized": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wuninitialized", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -5408,7 +5417,7 @@ ], "clang-diagnostic-uninitialized-const-reference": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wuninitialized-const-reference", - "guideline:sei-cert", + "guideline:sei-cert-c", "label-tool-skip:severity", "profile:default", "profile:extreme", @@ -5513,7 +5522,7 @@ ], "clang-diagnostic-unsequenced": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wunsequenced", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -5716,7 +5725,7 @@ ], "clang-diagnostic-user-defined-literals": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wuser-defined-literals", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -5733,7 +5742,8 @@ ], "clang-diagnostic-varargs": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wvarargs", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "label-tool-skip:severity", "profile:security", "sei-cert:exp47-c", @@ -5758,7 +5768,7 @@ ], "clang-diagnostic-vexing-parse": [ "doc_url:https://clang.llvm.org/docs/DiagnosticsReference.html#wvexing-parse", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -5839,14 +5849,14 @@ ], "concurrency-mt-unsafe": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/concurrency/mt-unsafe.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:security", "sei-cert:con33-c", "severity:MEDIUM" ], "concurrency-thread-canceltype-asynchronous": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/concurrency/thread-canceltype-asynchronous.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -5997,7 +6007,7 @@ ], "cppcoreguidelines-pro-type-const-cast": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cppcoreguidelines/pro-type-const-cast.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -6043,7 +6053,7 @@ ], "cppcoreguidelines-slicing": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/cppcoreguidelines/slicing.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -6106,7 +6116,7 @@ ], "google-build-namespaces": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/google/build-namespaces.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -6409,7 +6419,7 @@ ], "misc-assert-side-effect": [ "doc_url:https://releases.llvm.org/6.0.1/tools/clang/tools/extra/docs/clang-tidy/checks/misc-assert-side-effect.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -6588,7 +6598,7 @@ ], "misc-new-delete-overloads": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/misc/new-delete-overloads.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -6598,7 +6608,7 @@ ], "misc-no-recursion": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/misc/no-recursion.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "sei-cert:dcl56-cpp", @@ -6611,7 +6621,7 @@ ], "misc-non-copyable-objects": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/misc/non-copyable-objects.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -6640,7 +6650,7 @@ ], "misc-sizeof-expression": [ "doc_url:https://releases.llvm.org/6.0.1/tools/clang/tools/extra/docs/clang-tidy/checks/misc-sizeof-expression.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -6716,7 +6726,7 @@ ], "misc-throw-by-value-catch-by-reference": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/misc/throw-by-value-catch-by-reference.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -6770,7 +6780,7 @@ ], "misc-use-after-move": [ "doc_url:https://releases.llvm.org/6.0.1/tools/clang/tools/extra/docs/clang-tidy/checks/misc-use-after-move.html", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -7266,7 +7276,7 @@ ], "readability-enum-initial-value": [ "doc_url:https://clang.llvm.org/extra/clang-tidy/checks/readability/enum-initial-value.html", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", diff --git a/config/labels/analyzers/clangsa.json b/config/labels/analyzers/clangsa.json index 0741636245..891edee714 100644 --- a/config/labels/analyzers/clangsa.json +++ b/config/labels/analyzers/clangsa.json @@ -322,7 +322,7 @@ ], "core.BitwiseShift": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-bitwiseshift-c-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -333,7 +333,8 @@ ], "core.CallAndMessage": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-callandmessage-c-c-objc", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -355,7 +356,7 @@ ], "core.DivideZero": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-dividezero-c-c-objc", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -371,7 +372,7 @@ ], "core.NonNullParamChecker": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-nonnullparamchecker-c-c-objc", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -386,7 +387,7 @@ ], "core.NullDereference": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-nulldereference-c-c-objc", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -395,7 +396,8 @@ "severity:HIGH" ], "core.StackAddrEscapeBase": [ - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -406,7 +408,8 @@ ], "core.StackAddressEscape": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-stackaddressescape-c", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -418,7 +421,8 @@ ], "core.UndefinedBinaryOperatorResult": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-undefinedbinaryoperatorresult-c", - "guideline:sei-cert", + "guideline:sei-cert-c", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -429,7 +433,7 @@ ], "core.VLASize": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-vlasize-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -451,7 +455,7 @@ ], "core.uninitialized.ArraySubscript": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-arraysubscript-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -461,7 +465,7 @@ ], "core.uninitialized.Assign": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-assign-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -471,7 +475,7 @@ ], "core.uninitialized.Branch": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-branch-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -481,7 +485,7 @@ ], "core.uninitialized.CapturedBlockVariable": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-capturedblockvariable-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -491,7 +495,7 @@ ], "core.uninitialized.NewArraySize": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-newarraysize-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -501,7 +505,7 @@ ], "core.uninitialized.UndefReturn": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#core-uninitialized-undefreturn-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -511,7 +515,7 @@ ], "cplusplus.ArrayDelete": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-arraydelete-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -521,7 +525,7 @@ ], "cplusplus.InnerPointer": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-innerpointer-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -531,7 +535,7 @@ "severity:HIGH" ], "cplusplus.Move": [ - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -541,7 +545,7 @@ ], "cplusplus.NewDelete": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-newdelete-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -554,7 +558,7 @@ ], "cplusplus.NewDeleteLeaks": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-newdeleteleaks-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -564,7 +568,7 @@ ], "cplusplus.PlacementNew": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-placementnew-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -580,7 +584,7 @@ ], "cplusplus.SelfAssignment": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-selfassignment-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -595,7 +599,7 @@ ], "cplusplus.StringChecker": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#cplusplus-stringchecker-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -610,7 +614,7 @@ ], "deadcode.DeadStores": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#deadcode-deadstores-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -709,7 +713,7 @@ ], "optin.core.EnumCastOutOfRange": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#optin-core-enumcastoutofrange-c-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:extreme", "profile:security", "profile:sensitive", @@ -725,7 +729,7 @@ ], "optin.cplusplus.VirtualCall": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#optin-cplusplus-virtualcall-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -761,7 +765,7 @@ ], "optin.portability.UnixAPI": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#optin-portability-unixapi", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:portability", @@ -881,7 +885,7 @@ ], "security.FloatLoopCounter": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-floatloopcounter-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -899,7 +903,7 @@ ], "security.PointerSub": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-pointersub-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -909,7 +913,7 @@ ], "security.PutenvStackArray": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-putenvstackarray-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -919,7 +923,7 @@ ], "security.SetgidSetuidOrder": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-setgidsetuidorder-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -929,7 +933,7 @@ ], "security.cert.env.InvalidPtr": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-cert-env-invalidptr", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -980,7 +984,7 @@ ], "security.insecureAPI.gets": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-insecureapi-gets-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1011,7 +1015,7 @@ ], "security.insecureAPI.strcpy": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-insecureapi-strcpy-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "sei-cert:str31-c", @@ -1019,7 +1023,7 @@ ], "security.insecureAPI.vfork": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#security-insecureapi-vfork-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1029,7 +1033,7 @@ ], "unix.API": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-api-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1050,7 +1054,7 @@ ], "unix.Errno": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-errno-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:extreme", "profile:security", "profile:sensitive", @@ -1059,7 +1063,7 @@ ], "unix.Malloc": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-malloc-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1073,7 +1077,7 @@ ], "unix.MallocSizeof": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-mallocsizeof-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1083,7 +1087,7 @@ ], "unix.MismatchedDeallocator": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-mismatcheddeallocator-c-c", - "guideline:sei-cert", + "guideline:sei-cert-cpp", "profile:default", "profile:extreme", "profile:security", @@ -1093,7 +1097,7 @@ ], "unix.StdCLibraryFunctions": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-stdclibraryfunctions-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1105,7 +1109,7 @@ ], "unix.Stream": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-stream-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1115,7 +1119,7 @@ ], "unix.Vfork": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-vfork-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1125,7 +1129,7 @@ ], "unix.cstring.BadSizeArg": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-cstring-badsizearg-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security", @@ -1140,7 +1144,7 @@ ], "unix.cstring.NullArg": [ "doc_url:https://clang.llvm.org/docs/analyzer/checkers.html#unix-cstring-nullarg-c", - "guideline:sei-cert", + "guideline:sei-cert-c", "profile:default", "profile:extreme", "profile:security",