From: Ted Kremenek <kremenek@apple.com>
Date: Thu, 29 Apr 2010 22:50:22 +0000 (+0000)
Subject: Do not enable '-analyze-check-security-syntactic' by default when using '--analyze... 
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=647aa46a22cda2345dec566c06962da9c54ad02f;p=clang

Do not enable '-analyze-check-security-syntactic' by default when using '--analyze'.  There
are several known issues to address for it should be turned on by default.

git-svn-id: https://llvm.org/svn/llvm-project/cfe/trunk@102664 91177308-0d34-0410-b5e6-96231b3b80d8
---

diff --git a/lib/Driver/Tools.cpp b/lib/Driver/Tools.cpp
index 450c5692bc..176d491bc0 100644
--- a/lib/Driver/Tools.cpp
+++ b/lib/Driver/Tools.cpp
@@ -827,7 +827,9 @@ void Clang::ConstructJob(Compilation &C, const JobAction &JA,
     // Add default argument set.
     if (!Args.hasArg(options::OPT__analyzer_no_default_checks)) {
       CmdArgs.push_back("-analyzer-check-dead-stores");
-      CmdArgs.push_back("-analyzer-check-security-syntactic");
+      // Do not enable the security-syntatic check since it
+      // it needs to be refined (known issues).
+      // CmdArgs.push_back("-analyzer-check-security-syntactic");
       CmdArgs.push_back("-analyzer-check-objc-mem");
       CmdArgs.push_back("-analyzer-eagerly-assume");
       CmdArgs.push_back("-analyzer-check-objc-methodsigs");