40 improve uninitialized variable analysis with byte range lattice and interprocedural function summaries - #41

Merged

SizzleUnrlsd merged 41 commits into

mainfrom

40-improve-uninitialized-variable-analysis-with-byte-range-lattice-and-interprocedural-function-summaries

Feb 9, 2026

Commits on Feb 9, 2026

chore(build): register uninitialized variable analysis sources
SizzleUnrlsd
committed
891fa97
docs(cli): document STL filtering behavior and analysis options
SizzleUnrlsd
committed
72d1151
feat(reporting): extend diagnostic metadata for uninitialized checks
SizzleUnrlsd
committed
234a26a
feat(cli): add --STL flag to include system and STL functions
SizzleUnrlsd
committed
07e6f33
test(cli): add coverage for STL flag and uninitialized scenarios
SizzleUnrlsd
committed
a44a953
feat(diagnostics): add call-based uninitialized read diagnostic messaging
SizzleUnrlsd
committed
53cf436
feat(filter): default to user-code analysis and gate STL via option
SizzleUnrlsd
committed
2c67585
feat(reporting): serialize uninitialized rule metadata with confidence and CWE
SizzleUnrlsd
committed
bace875
feat(uninitialized): add call-aware issue kind and callee context
SizzleUnrlsd
committed
27dee24
feat(uninitialized): implement byte-range lattice with interprocedural summaries
SizzleUnrlsd
committed
745dc51
test(uninitialized): add never-used local variable case
SizzleUnrlsd
committed
aadf00b
test(uninitialized): add C argument path with conditional initialization
SizzleUnrlsd
committed
b2f11c9
test(uninitialized): add C++ argument handling without false positives on argc argv
SizzleUnrlsd
committed
42dde51
test(uninitialized): add fully initialized array no-warning case
SizzleUnrlsd
committed
e862076
test(uninitialized): add partially initialized array warning case
SizzleUnrlsd
committed
9068b9f
test(uninitialized): add basic uninitialized array read case
SizzleUnrlsd
committed
6cfc38a
test(uninitialized): add baseline uninitialized scalar read case
SizzleUnrlsd
committed
2f1f28a
test(uninitialized): add branch-dependent initialization case
SizzleUnrlsd
committed
800e43c
test(uninitialized): add goto-based control flow initialization case
SizzleUnrlsd
committed
a7a51de
test(uninitialized): add initialized local no-warning case
SizzleUnrlsd
committed
1ebd167
test(uninitialized): add interprocedural call-chain read-before-write case
SizzleUnrlsd
committed
717e3ce
test(uninitialized): add interprocedural read-before-write case
SizzleUnrlsd
committed
24363a1
test(uninitialized): add interprocedural partial struct initialization case
SizzleUnrlsd
committed
e1603da
test(uninitialized): add interprocedural write call-chain no-warning case
SizzleUnrlsd
committed
5a711cd
test(uninitialized): add interprocedural write-before-read no-warning case
SizzleUnrlsd
committed
49c5dcc
test(uninitialized): add nested loop partial initialization case
SizzleUnrlsd
committed
1adb6a7
test(uninitialized): add uninitialized pointer dereference case
SizzleUnrlsd
committed
c000c27
test(uninitialized): add C++ reference propagation case
SizzleUnrlsd
committed
ce44309
test(uninitialized): add fully initialized struct no-warning case
SizzleUnrlsd
committed
425eed8
test(uninitialized): add partially initialized struct warning case
SizzleUnrlsd
committed
2611acd
test(uninitialized): add basic uninitialized struct field read case
SizzleUnrlsd
committed
49aa131
test(uninitialized): add switch-dependent initialization case
SizzleUnrlsd
committed
75ee66e
test(uninitialized): add unused uninitialized local declaration case
SizzleUnrlsd
committed
5603a9c
fix(test): add cstdint include for uninitialized local argument fixture
SizzleUnrlsd
committed
de7191a
fix(uninitialized): optimize range updates and harden summary/read tracking logic
SizzleUnrlsd
committed
4dd6175
fix(filter): make path normalization deterministic for relative paths
SizzleUnrlsd
committed
59c4b73
fix(report): sort SARIF rules deterministically and format confidence values
SizzleUnrlsd
committed
a915ea4
test(uninitialized): add regression for memcpy reading uninitialized source
SizzleUnrlsd
committed
9801e8b
test(uninitialized): add negative memcpy case with initialized source
SizzleUnrlsd
committed
31074b3
test(uninitialized): add pointer redirection case to prevent false positive
SizzleUnrlsd
committed
4413236
chore(style): format code with clang-format
SizzleUnrlsd
committed
d34af67