pavelkryukov / gnu-binutils-clang

Automated build of GNU Binutils with Clang static analyzer

GNU Binutils + Clang

Automated build of GNU Binutils and GDB with Clang Static Analyzer.

The methodology originates from MIPT-MIPS project which built GNU Binutils for MIPS as a part of CI.

Vulnerabilities found:

• PR22245 — potential UB in calling variadic argument function. Reported by Kirill Nedostoev while resolving MIPT-MIPS/#147.
• PR22612 — 64-bit DWARF support is dead due as offset variable is 32-bit.

Compilation errors:

• PR22485 — C89-imcompatible initialization of structure.
• PR22495 — deep call of "printf" with non-literal format.
• 3046d67
• ad9675d
• 382bc56

Clang bugs:

• llvm/llvm-project#35853 — Clang-tidy: expression with calls to a non-pure function is considered as always-true