Home | History | Annotate | Download | only in Checkers 
      1 //===--- Checkers.td - Static Analyzer Checkers -===-----------------------===//
      2 //
      3 //                     The LLVM Compiler Infrastructure
      4 //
      5 // This file is distributed under the University of Illinois Open Source
      6 // License. See LICENSE.TXT for details.
      7 //
      8 //===----------------------------------------------------------------------===//
      9 
     10 include "clang/StaticAnalyzer/Checkers/CheckerBase.td"
     11 
     12 //===----------------------------------------------------------------------===//
     13 // Packages.
     14 //===----------------------------------------------------------------------===//
     15 
     16 def Alpha : Package<"alpha">;
     17 
     18 def Core : Package<"core">;
     19 def CoreBuiltin : Package<"builtin">, InPackage<Core>;
     20 def CoreUninitialized  : Package<"uninitialized">, InPackage<Core>;
     21 def CoreAlpha : Package<"core">, InPackage<Alpha>, Hidden;
     22 
     23 def Cplusplus : Package<"cplusplus">;
     24 def CplusplusAlpha : Package<"cplusplus">, InPackage<Alpha>, Hidden;
     25 
     26 def DeadCode : Package<"deadcode">;
     27 def DeadCodeAlpha : Package<"deadcode">, InPackage<Alpha>, Hidden;
     28 
     29 def Security : Package <"security">;
     30 def InsecureAPI : Package<"insecureAPI">, InPackage<Security>;
     31 def SecurityAlpha : Package<"security">, InPackage<Alpha>, Hidden;
     32 def Taint : Package<"taint">, InPackage<SecurityAlpha>, Hidden;  
     33 
     34 def Unix : Package<"unix">;
     35 def UnixAlpha : Package<"unix">, InPackage<Alpha>, Hidden;
     36 def CString : Package<"cstring">, InPackage<Unix>, Hidden;
     37 def CStringAlpha : Package<"cstring">, InPackage<UnixAlpha>, Hidden;
     38 
     39 def OSX : Package<"osx">;
     40 def OSXAlpha : Package<"osx">, InPackage<Alpha>, Hidden;
     41 def Cocoa : Package<"cocoa">, InPackage<OSX>;
     42 def CocoaAlpha : Package<"cocoa">, InPackage<OSXAlpha>, Hidden;
     43 def CoreFoundation : Package<"coreFoundation">, InPackage<OSX>;
     44 def Containers : Package<"containers">, InPackage<CoreFoundation>;
     45 
     46 def LLVM : Package<"llvm">;
     47 def Debug : Package<"debug">;
     48 
     49 //===----------------------------------------------------------------------===//
     50 // Core Checkers.
     51 //===----------------------------------------------------------------------===//
     52 
     53 let ParentPackage = Core in {
     54 
     55 def DereferenceChecker : Checker<"NullDereference">,
     56   HelpText<"Check for dereferences of null pointers">,
     57   DescFile<"DereferenceChecker.cpp">;
     58 
     59 def CallAndMessageChecker : Checker<"CallAndMessage">,
     60   HelpText<"Check for logical errors for function calls and Objective-C message expressions (e.g., uninitialized arguments, null function pointers)">,
     61   DescFile<"CallAndMessageChecker.cpp">;
     62 
     63 def NonNullParamChecker : Checker<"NonNullParamChecker">,
     64   HelpText<"Check for null pointers passed as arguments to a function whose arguments are references or marked with the 'nonnull' attribute">,
     65   DescFile<"NonNullParamChecker.cpp">;
     66 
     67 def VLASizeChecker : Checker<"VLASize">,
     68   HelpText<"Check for declarations of VLA of undefined or zero size">,
     69   DescFile<"VLASizeChecker.cpp">;
     70 
     71 def DivZeroChecker : Checker<"DivideZero">,
     72   HelpText<"Check for division by zero">,
     73   DescFile<"DivZeroChecker.cpp">;
     74 
     75 def UndefResultChecker : Checker<"UndefinedBinaryOperatorResult">,
     76   HelpText<"Check for undefined results of binary operators">,
     77   DescFile<"UndefResultChecker.cpp">;
     78 
     79 def StackAddrEscapeChecker : Checker<"StackAddressEscape">,
     80   HelpText<"Check that addresses to stack memory do not escape the function">,
     81   DescFile<"StackAddrEscapeChecker.cpp">;
     82 
     83 def DynamicTypePropagation : Checker<"DynamicTypePropagation">,
     84   HelpText<"Generate dynamic type information">,
     85   DescFile<"DynamicTypePropagation.cpp">;
     86 
     87 } // end "core"
     88 
     89 let ParentPackage = CoreAlpha in {
     90 
     91 def BoolAssignmentChecker : Checker<"BoolAssignment">,
     92   HelpText<"Warn about assigning non-{0,1} values to Boolean variables">,
     93   DescFile<"BoolAssignmentChecker.cpp">;
     94 
     95 def CastSizeChecker : Checker<"CastSize">,
     96   HelpText<"Check when casting a malloc'ed type T, whether the size is a multiple of the size of T">,
     97   DescFile<"CastSizeChecker.cpp">;
     98 
     99 def CastToStructChecker : Checker<"CastToStruct">,
    100   HelpText<"Check for cast from non-struct pointer to struct pointer">,
    101   DescFile<"CastToStructChecker.cpp">;
    102 
    103 def FixedAddressChecker : Checker<"FixedAddr">,
    104   HelpText<"Check for assignment of a fixed address to a pointer">,
    105   DescFile<"FixedAddressChecker.cpp">;
    106 
    107 def PointerArithChecker : Checker<"PointerArithm">,
    108   HelpText<"Check for pointer arithmetic on locations other than array elements">,
    109   DescFile<"PointerArithChecker">;
    110 
    111 def PointerSubChecker : Checker<"PointerSub">,
    112   HelpText<"Check for pointer subtractions on two pointers pointing to different memory chunks">,
    113   DescFile<"PointerSubChecker">;
    114 
    115 def SizeofPointerChecker : Checker<"SizeofPtr">,
    116   HelpText<"Warn about unintended use of sizeof() on pointer expressions">,
    117   DescFile<"CheckSizeofPointer.cpp">;
    118 
    119 } // end "alpha.core"
    120 
    121 //===----------------------------------------------------------------------===//
    122 // Evaluate "builtin" functions.
    123 //===----------------------------------------------------------------------===//
    124 
    125 let ParentPackage = CoreBuiltin in {
    126 
    127 def NoReturnFunctionChecker : Checker<"NoReturnFunctions">,
    128   HelpText<"Evaluate \"panic\" functions that are known to not return to the caller">,
    129   DescFile<"NoReturnFunctionChecker.cpp">;
    130 
    131 def BuiltinFunctionChecker : Checker<"BuiltinFunctions">,
    132   HelpText<"Evaluate compiler builtin functions (e.g., alloca())">,
    133   DescFile<"BuiltinFunctionChecker.cpp">;
    134 
    135 } // end "core.builtin"
    136 
    137 //===----------------------------------------------------------------------===//
    138 // Uninitialized values checkers.
    139 //===----------------------------------------------------------------------===//
    140 
    141 let ParentPackage = CoreUninitialized in {
    142 
    143 def UndefinedArraySubscriptChecker : Checker<"ArraySubscript">,
    144   HelpText<"Check for uninitialized values used as array subscripts">,
    145   DescFile<"UndefinedArraySubscriptChecker.cpp">;
    146 
    147 def UndefinedAssignmentChecker : Checker<"Assign">,
    148   HelpText<"Check for assigning uninitialized values">,
    149   DescFile<"UndefinedAssignmentChecker.cpp">;
    150 
    151 def UndefBranchChecker : Checker<"Branch">,
    152   HelpText<"Check for uninitialized values used as branch conditions">,
    153   DescFile<"UndefBranchChecker.cpp">;
    154 
    155 def UndefCapturedBlockVarChecker : Checker<"CapturedBlockVariable">,
    156   HelpText<"Check for blocks that capture uninitialized values">,
    157   DescFile<"UndefCapturedBlockVarChecker.cpp">;
    158   
    159 def ReturnUndefChecker : Checker<"UndefReturn">,
    160   HelpText<"Check for uninitialized values being returned to the caller">,
    161   DescFile<"ReturnUndefChecker.cpp">;
    162 
    163 } // end "core.uninitialized"
    164 
    165 //===----------------------------------------------------------------------===//
    166 // C++ checkers.
    167 //===----------------------------------------------------------------------===//
    168 
    169 let ParentPackage = Cplusplus in {
    170 
    171 def NewDeleteChecker : Checker<"NewDelete">,
    172   HelpText<"Check for double-free and use-after-free problems. Traces memory managed by new/delete.">, 
    173   DescFile<"MallocChecker.cpp">;
    174 
    175 } // end: "cplusplus"
    176 
    177 let ParentPackage = CplusplusAlpha in {
    178 
    179 def VirtualCallChecker : Checker<"VirtualCall">,
    180   HelpText<"Check virtual function calls during construction or destruction">, 
    181   DescFile<"VirtualCallChecker.cpp">;
    182 
    183 def NewDeleteLeaksChecker : Checker<"NewDeleteLeaks">,
    184   HelpText<"Check for memory leaks. Traces memory managed by new/delete.">, 
    185   DescFile<"MallocChecker.cpp">;
    186 
    187 } // end: "alpha.cplusplus"
    188 
    189 //===----------------------------------------------------------------------===//
    190 // Deadcode checkers.
    191 //===----------------------------------------------------------------------===//
    192 
    193 let ParentPackage = DeadCode in {
    194 
    195 def DeadStoresChecker : Checker<"DeadStores">,
    196   HelpText<"Check for values stored to variables that are never read afterwards">,
    197   DescFile<"DeadStoresChecker.cpp">;
    198 } // end DeadCode
    199 
    200 let ParentPackage = DeadCodeAlpha in {
    201 
    202 def IdempotentOperationChecker : Checker<"IdempotentOperations">,
    203   HelpText<"Warn about idempotent operations">,
    204   DescFile<"IdempotentOperationChecker.cpp">;
    205 
    206 def UnreachableCodeChecker : Checker<"UnreachableCode">,
    207   HelpText<"Check unreachable code">,
    208   DescFile<"UnreachableCodeChecker.cpp">;
    209 
    210 } // end "alpha.deadcode"
    211 
    212 //===----------------------------------------------------------------------===//
    213 // Security checkers.
    214 //===----------------------------------------------------------------------===//
    215 
    216 let ParentPackage = InsecureAPI in {
    217   def gets : Checker<"gets">,
    218     HelpText<"Warn on uses of the 'gets' function">,
    219     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    220   def getpw : Checker<"getpw">,
    221     HelpText<"Warn on uses of the 'getpw' function">,
    222     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    223   def mktemp : Checker<"mktemp">,
    224     HelpText<"Warn on uses of the 'mktemp' function">,
    225     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    226   def mkstemp : Checker<"mkstemp">,
    227     HelpText<"Warn when 'mkstemp' is passed fewer than 6 X's in the format string">,
    228     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    229   def rand : Checker<"rand">,
    230     HelpText<"Warn on uses of the 'rand', 'random', and related functions">,
    231     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    232   def strcpy : Checker<"strcpy">,
    233     HelpText<"Warn on uses of the 'strcpy' and 'strcat' functions">,
    234     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    235   def vfork : Checker<"vfork">,
    236     HelpText<"Warn on uses of the 'vfork' function">,
    237     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    238   def UncheckedReturn : Checker<"UncheckedReturn">,
    239     HelpText<"Warn on uses of functions whose return values must be always checked">,
    240     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    241 }
    242 let ParentPackage = Security in {
    243   def FloatLoopCounter : Checker<"FloatLoopCounter">,
    244     HelpText<"Warn on using a floating point value as a loop counter (CERT: FLP30-C, FLP30-CPP)">,
    245     DescFile<"CheckSecuritySyntaxOnly.cpp">;
    246 }
    247 
    248 let ParentPackage = SecurityAlpha in {
    249 
    250 def ArrayBoundChecker : Checker<"ArrayBound">,
    251   HelpText<"Warn about buffer overflows (older checker)">,
    252   DescFile<"ArrayBoundChecker.cpp">;  
    253 
    254 def ArrayBoundCheckerV2 : Checker<"ArrayBoundV2">,
    255   HelpText<"Warn about buffer overflows (newer checker)">,
    256   DescFile<"ArrayBoundCheckerV2.cpp">;
    257 
    258 def ReturnPointerRangeChecker : Checker<"ReturnPtrRange">,
    259   HelpText<"Check for an out-of-bound pointer being returned to callers">,
    260   DescFile<"ReturnPointerRangeChecker.cpp">;
    261 
    262 def MallocOverflowSecurityChecker : Checker<"MallocOverflow">,
    263   HelpText<"Check for overflows in the arguments to malloc()">,
    264   DescFile<"MallocOverflowSecurityChecker.cpp">;
    265 
    266 } // end "alpha.security"
    267 
    268 //===----------------------------------------------------------------------===//
    269 // Taint checkers.
    270 //===----------------------------------------------------------------------===//
    271 
    272 let ParentPackage = Taint in {
    273 
    274 def GenericTaintChecker : Checker<"TaintPropagation">,
    275   HelpText<"Generate taint information used by other checkers">,
    276   DescFile<"GenericTaintChecker.cpp">;
    277 
    278 } // end "alpha.security.taint"
    279 
    280 //===----------------------------------------------------------------------===//
    281 // Unix API checkers.
    282 //===----------------------------------------------------------------------===//
    283 
    284 let ParentPackage = Unix in {
    285 
    286 def UnixAPIChecker : Checker<"API">,
    287   HelpText<"Check calls to various UNIX/Posix functions">,
    288   DescFile<"UnixAPIChecker.cpp">;
    289 
    290 def MallocPessimistic : Checker<"Malloc">,
    291   HelpText<"Check for memory leaks, double free, and use-after-free problems. Traces memory managed by malloc()/free().">,
    292   DescFile<"MallocChecker.cpp">;
    293   
    294 def MallocSizeofChecker : Checker<"MallocSizeof">,
    295   HelpText<"Check for dubious malloc arguments involving sizeof">,
    296   DescFile<"MallocSizeofChecker.cpp">;
    297 
    298 def MismatchedDeallocatorChecker : Checker<"MismatchedDeallocator">,
    299   HelpText<"Check for mismatched deallocators.">,
    300   DescFile<"MallocChecker.cpp">;
    301   
    302 } // end "unix"
    303 
    304 let ParentPackage = UnixAlpha in {
    305 
    306 def ChrootChecker : Checker<"Chroot">,
    307   HelpText<"Check improper use of chroot">,
    308   DescFile<"ChrootChecker.cpp">;
    309 
    310 def MallocOptimistic : Checker<"MallocWithAnnotations">,
    311   HelpText<"Check for memory leaks, double free, and use-after-free problems. Traces memory managed by malloc()/free(). Assumes that all user-defined functions which might free a pointer are annotated.">,
    312   DescFile<"MallocChecker.cpp">;
    313 
    314 def PthreadLockChecker : Checker<"PthreadLock">,
    315   HelpText<"Simple lock -> unlock checker">,
    316   DescFile<"PthreadLockChecker.cpp">;
    317 
    318 def StreamChecker : Checker<"Stream">,
    319   HelpText<"Check stream handling functions">,
    320   DescFile<"StreamChecker.cpp">;
    321 
    322 def SimpleStreamChecker : Checker<"SimpleStream">,
    323   HelpText<"Check for misuses of stream APIs">,
    324   DescFile<"SimpleStreamChecker.cpp">;
    325 
    326 } // end "alpha.unix"
    327 
    328 let ParentPackage = CString in {
    329 
    330 def CStringNullArg : Checker<"NullArg">,
    331   HelpText<"Check for null pointers being passed as arguments to C string functions">,
    332   DescFile<"CStringChecker.cpp">;
    333 
    334 def CStringSyntaxChecker : Checker<"BadSizeArg">,
    335   HelpText<"Check the size argument passed into C string functions for common erroneous patterns">,
    336   DescFile<"CStringSyntaxChecker.cpp">;  
    337 }
    338 
    339 let ParentPackage = CStringAlpha in {
    340 
    341 def CStringOutOfBounds : Checker<"OutOfBounds">,
    342   HelpText<"Check for out-of-bounds access in string functions">,
    343   DescFile<"CStringChecker.cpp">;
    344 
    345 def CStringBufferOverlap : Checker<"BufferOverlap">,
    346   HelpText<"Checks for overlap in two buffer arguments">,
    347   DescFile<"CStringChecker.cpp">;
    348 
    349 def CStringNotNullTerm : Checker<"NotNullTerminated">,
    350   HelpText<"Check for arguments which are not null-terminating strings">,
    351   DescFile<"CStringChecker.cpp">;
    352 }
    353 
    354 //===----------------------------------------------------------------------===//
    355 // Mac OS X, Cocoa, and Core Foundation checkers.
    356 //===----------------------------------------------------------------------===//
    357 
    358 let ParentPackage = OSX in {
    359 
    360 def MacOSXAPIChecker : Checker<"API">,
    361   InPackage<OSX>,
    362   HelpText<"Check for proper uses of various Apple APIs">,
    363   DescFile<"MacOSXAPIChecker.cpp">;
    364 
    365 def MacOSKeychainAPIChecker : Checker<"SecKeychainAPI">,
    366   InPackage<OSX>,
    367   HelpText<"Check for proper uses of Secure Keychain APIs">,
    368   DescFile<"MacOSKeychainAPIChecker.cpp">;
    369 
    370 } // end "osx"
    371 
    372 let ParentPackage = Cocoa in {
    373 
    374 def ObjCAtSyncChecker : Checker<"AtSync">,
    375   HelpText<"Check for nil pointers used as mutexes for @synchronized">,
    376   DescFile<"ObjCAtSyncChecker.cpp">;
    377 
    378 def NilArgChecker : Checker<"NilArg">,
    379   HelpText<"Check for prohibited nil arguments to ObjC method calls">,
    380   DescFile<"BasicObjCFoundationChecks.cpp">;
    381 
    382 def ClassReleaseChecker : Checker<"ClassRelease">,
    383   HelpText<"Check for sending 'retain', 'release', or 'autorelease' directly to a Class">,
    384   DescFile<"BasicObjCFoundationChecks.cpp">;
    385 
    386 def VariadicMethodTypeChecker : Checker<"VariadicMethodTypes">,
    387   HelpText<"Check for passing non-Objective-C types to variadic collection "
    388            "initialization methods that expect only Objective-C types">,
    389   DescFile<"BasicObjCFoundationChecks.cpp">;
    390 
    391 def NSAutoreleasePoolChecker : Checker<"NSAutoreleasePool">,
    392   HelpText<"Warn for suboptimal uses of NSAutoreleasePool in Objective-C GC mode">,
    393   DescFile<"NSAutoreleasePoolChecker.cpp">;
    394 
    395 def ObjCMethSigsChecker : Checker<"IncompatibleMethodTypes">,
    396   HelpText<"Warn about Objective-C method signatures with type incompatibilities">,
    397   DescFile<"CheckObjCInstMethSignature.cpp">;
    398 
    399 def ObjCUnusedIvarsChecker : Checker<"UnusedIvars">,
    400   HelpText<"Warn about private ivars that are never used">,
    401   DescFile<"ObjCUnusedIVarsChecker.cpp">;
    402 
    403 def ObjCSelfInitChecker : Checker<"SelfInit">,
    404   HelpText<"Check that 'self' is properly initialized inside an initializer method">,
    405   DescFile<"ObjCSelfInitChecker.cpp">;
    406 
    407 def ObjCLoopChecker : Checker<"Loops">,
    408   HelpText<"Improved modeling of loops using Cocoa collection types">,
    409   DescFile<"BasicObjCFoundationChecks.cpp">;
    410 
    411 def ObjCNonNilReturnValueChecker : Checker<"NonNilReturnValue">,
    412   HelpText<"Model the APIs that are guaranteed to return a non-nil value">,
    413   DescFile<"BasicObjCFoundationChecks.cpp">;
    414 
    415 def NSErrorChecker : Checker<"NSError">,
    416   HelpText<"Check usage of NSError** parameters">,
    417   DescFile<"NSErrorChecker.cpp">;
    418 
    419 def RetainCountChecker : Checker<"RetainCount">,
    420   HelpText<"Check for leaks and improper reference count management">,
    421   DescFile<"RetainCountChecker.cpp">;
    422 
    423 } // end "osx.cocoa"
    424 
    425 let ParentPackage = CocoaAlpha in {
    426 
    427 def ObjCDeallocChecker : Checker<"Dealloc">,
    428   HelpText<"Warn about Objective-C classes that lack a correct implementation of -dealloc">,
    429   DescFile<"CheckObjCDealloc.cpp">;
    430 
    431 def InstanceVariableInvalidation : Checker<"InstanceVariableInvalidation">,
    432   HelpText<"Check that the invalidatable instance variables are invalidated in the methods annotated with objc_instance_variable_invalidator">,
    433   DescFile<"IvarInvalidationChecker.cpp">;
    434 
    435 def MissingInvalidationMethod : Checker<"MissingInvalidationMethod">,
    436   HelpText<"Check that the invalidation methods are present in classes that contain invalidatable instance variables">,
    437   DescFile<"IvarInvalidationChecker.cpp">;
    438 
    439 def DirectIvarAssignment : Checker<"DirectIvarAssignment">,
    440   HelpText<"Check for direct assignments to instance variables">,
    441   DescFile<"DirectIvarAssignment.cpp">;
    442 
    443 def DirectIvarAssignmentForAnnotatedFunctions : Checker<"DirectIvarAssignmentForAnnotatedFunctions">,
    444   HelpText<"Check for direct assignments to instance variables in the methods annotated with objc_no_direct_instance_variable_assignment">,
    445   DescFile<"DirectIvarAssignment.cpp">;
    446 
    447 def ObjCSuperCallChecker : Checker<"MissingSuperCall">,
    448   HelpText<"Warn about Objective-C methods that lack a necessary call to super">,
    449   DescFile<"ObjCMissingSuperCallChecker.cpp">;
    450 
    451 } // end "alpha.osx.cocoa"
    452 
    453 let ParentPackage = CoreFoundation in {
    454 
    455 def CFNumberCreateChecker : Checker<"CFNumber">,
    456   HelpText<"Check for proper uses of CFNumberCreate">,
    457   DescFile<"BasicObjCFoundationChecks.cpp">;
    458 
    459 def CFRetainReleaseChecker : Checker<"CFRetainRelease">,
    460   HelpText<"Check for null arguments to CFRetain/CFRelease/CFMakeCollectable">,
    461   DescFile<"BasicObjCFoundationChecks.cpp">;
    462 
    463 def CFErrorChecker : Checker<"CFError">,
    464   HelpText<"Check usage of CFErrorRef* parameters">,
    465   DescFile<"NSErrorChecker.cpp">;
    466 }
    467 
    468 let ParentPackage = Containers in {
    469 def ObjCContainersASTChecker : Checker<"PointerSizedValues">,
    470   HelpText<"Warns if 'CFArray', 'CFDictionary', 'CFSet' are created with non-pointer-size values">,
    471   DescFile<"ObjCContainersASTChecker.cpp">;
    472 
    473 def ObjCContainersChecker : Checker<"OutOfBounds">,
    474   HelpText<"Checks for index out-of-bounds when using 'CFArray' API">,
    475   DescFile<"ObjCContainersChecker.cpp">;
    476     
    477 }
    478 //===----------------------------------------------------------------------===//
    479 // Checkers for LLVM development.
    480 //===----------------------------------------------------------------------===//
    481 
    482 def LLVMConventionsChecker : Checker<"Conventions">,
    483   InPackage<LLVM>,
    484   HelpText<"Check code for LLVM codebase conventions">,
    485   DescFile<"LLVMConventionsChecker.cpp">;
    486 
    487 //===----------------------------------------------------------------------===//
    488 // Debugging checkers (for analyzer development).
    489 //===----------------------------------------------------------------------===//
    490 
    491 let ParentPackage = Debug in {
    492 
    493 def DominatorsTreeDumper : Checker<"DumpDominators">,
    494   HelpText<"Print the dominance tree for a given CFG">,
    495   DescFile<"DebugCheckers.cpp">;
    496 
    497 def LiveVariablesDumper : Checker<"DumpLiveVars">,
    498   HelpText<"Print results of live variable analysis">,
    499   DescFile<"DebugCheckers.cpp">;
    500 
    501 def CFGViewer : Checker<"ViewCFG">,
    502   HelpText<"View Control-Flow Graphs using GraphViz">,
    503   DescFile<"DebugCheckers.cpp">;
    504 
    505 def CFGDumper : Checker<"DumpCFG">,
    506   HelpText<"Display Control-Flow Graphs">,
    507   DescFile<"DebugCheckers.cpp">;
    508 
    509 def CallGraphViewer : Checker<"ViewCallGraph">,
    510   HelpText<"View Call Graph using GraphViz">,
    511   DescFile<"DebugCheckers.cpp">;
    512 
    513 def CallGraphDumper : Checker<"DumpCallGraph">,
    514   HelpText<"Display Call Graph">,
    515   DescFile<"DebugCheckers.cpp">;
    516 
    517 def ConfigDumper : Checker<"ConfigDumper">,
    518   HelpText<"Dump config table">,
    519   DescFile<"DebugCheckers.cpp">;
    520 
    521 def TraversalDumper : Checker<"DumpTraversal">,
    522   HelpText<"Print branch conditions as they are traversed by the engine">,
    523   DescFile<"TraversalChecker.cpp">;
    524 
    525 def CallDumper : Checker<"DumpCalls">,
    526   HelpText<"Print calls as they are traversed by the engine">,
    527   DescFile<"TraversalChecker.cpp">;
    528 
    529 def AnalyzerStatsChecker : Checker<"Stats">,
    530   HelpText<"Emit warnings with analyzer statistics">,
    531   DescFile<"AnalyzerStatsChecker.cpp">;
    532 
    533 def TaintTesterChecker : Checker<"TaintTest">,
    534   HelpText<"Mark tainted symbols as such.">,
    535   DescFile<"TaintTesterChecker.cpp">;
    536 
    537 def ExprInspectionChecker : Checker<"ExprInspection">,
    538   HelpText<"Check the analyzer's understanding of expressions">,
    539   DescFile<"ExprInspectionChecker.cpp">;
    540 
    541 def ExplodedGraphViewer : Checker<"ViewExplodedGraph">,
    542   HelpText<"View Exploded Graphs using GraphViz">,
    543   DescFile<"DebugCheckers.cpp">;
    544 
    545 } // end "debug"
    546