Balazs Benics e5ac9145ba [analyzer][taint] Recognize tainted LazyCompoundVals (4/4) (#115919) ...

returned by-value from opaque function calls.
If a struct is returned by-value from an opaque call, the "value" of the
whole struct is represented by a Conjured symbol.
Later fields may slice off smaller subregions by creating Derived
symbols of that Conjured symbol, but those are handled well, and
"isTainted" returns true as expected.

However, passing the whole struct to "isTainted" would be false, because
LazyCompoundVals and CompoundVals are not handled.
This patch addresses this.

Fixes #114270

Split from #114835

2024-11-15 10:56:04 +01:00

14 KiB

Raw Blame History

View Raw