Re: enabling gcc's -fanalyzer option
Werner Koch via Gnupg-devel <[email protected]>
| Newsgroups | gmane.comp.encryption.gpg.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi! and thanks for the report. On Wed, 6 Mar 2024 11:46, Falko Strenzke said: > I enabled -fanalyzer for GnuPG in my project. It reports quite a few findings. > Some of them (or even the majority) might be false positives. I haven't That is the reasons why we don't run this or other static analyzers regulary. Your case is pretty obvious. It is only in master due to gpg: Add parallelized filter for hashing. https://dev.gnupg.org/rG1ddd69935da629188dcf9215cd9e7a8f68b34a97 > Just as a suggestion from me to add a flag to the configure script to enable > this gcc feature. I am still looking for a way to inform the static analyzer make CFLAGS="-fanalyzet" is what I would do. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein _______________________________________________ Gnupg-devel mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-devel
openpgp-digital-signature.asc
(application/pgp-signature, 247 B)
-----BEGIN PGP SIGNATURE----- iIMEARYIACsWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCZeiDyA0cd2tAZ251cGcu b3JnAAoJEBnMHJ4IWxB6NVsA/iknUajQfTBE10sobnJ8mmNe/d2dOWNR6r8Cvt11 tbTtAP9CdNEf9BBlsy0ITdlKDjTBBeualDRCdR09YCSsN7fyAA== =40pu -----END PGP SIGNATURE-----