Infer is a static analysis tool for Java, C++, Objective-C, and C. Infer is written in OCaml.
Read our Getting Started page for details on how to install packaged versions of Infer. To build Infer from source, see INSTALL.md.
See CONTRIBUTING.md.
Infer is MIT-licensed.
Note: Enabling Java support may require you to download and install components licensed under the GPL.
This pull request adds a test to document the --dependencies options triggering the analysis of the classes appearing in the Java classpath. This feature is especially useful when analysing JAR files packaging all the code of a Java application including the dependencies.
The examples added in the test are outlining how running the Pulse taint analysis with the dependencies mode enabled can eliminate cases of false negatives and cases of false positives.
All the tests are passing locally.
CLA SignedI use : infer --incremental -- xcodebuild -workspace xxx.xcworkspace -scheme xxx -sdk iphonesimulator -configuration Debug -destination 'platform=iOS Simulator,OS=9.2,name=iPhone 6s' CLANG_ENABLE_MODULES=NO clean build
The following build commands failed:
CompileC /Users/jianzhang/Library/Developer/Xcode/DerivedData/xxxxxxxx-aiaocxwzriymuzayasydwppoqjls/Build/Intermediates/Pods.build/Debug-iphonesimulator/MQTTKit.build/Objects-normal/x86_64/logging_mosq.o MQTTKit/libmosquitto/logging_mosq.c normal x86_64 c com.apple.compilers.llvm.clang.1_0.compiler
(1 failure)
Traceback (most recent call last):
File "/usr/local/bin/infer", line 178, in
My project is created by Objective-C. And infer v0.12.0 was run successfully for my project in xcode 8 yesterday. Today I update my xcode to xcode 9, use some APIs in iOS 11, and update infer to v0.12.1. Then when I run infer v0.12.1 on Xcode 9 with iOS 11 and LLVM v9.0.0 using the following command:
![[java] add tests documenting the dependencies analysis mode](https://avatars.githubusercontent.com/u/12734194?v=4)
infer -- xcodebuild -workspace myProject.xcworkspace -scheme myProject -configuration Debug -sdk iphonesimulator
I got the following results:
Build Succeeded
Starting translating 463 files
*** ERROR: Failed to execute compilation command. Output:
clang: error: cannot specify -o when generating multiple output files
*** Infer needs a working compilation command to run.
..MANY OF THESE ERRORS...then...
...
*** ERROR: Failed to execute compilation command. Output:
clang: error: cannot specify -o when generating multiple output files
*** Infer needs a working compilation command to run.
..
Nothing to compile. Try running `xcodebuild -workspace myProject.xcworkspace -scheme myProject -configuration Debug -sdk iphonesimulator clean` first.
There was nothing to analyze.
Hi there! The Docusaurus team is currently developing Docusaurus 2 and are almost done with an MVP that doesn't include translations and versioning features, which means there's feature parity with your website's current usage of Docusaurus.
Docusaurus 2 brings about many improvements:
I will be helping you migrate and be the POC throughout the migration process. Let me know what you think!
cc @yangshun @endiliey @wgao19
When I run ./gradlew build, I get a BUILD SUCCESSFUL. When I run infer -- ./gradlew build, I get the following error:
$ ./gradlew build --stacktrace
...
BUILD SUCCESSFUL
...
$ infer -- ./gradlew build --stacktrace
Capturing in gradle mode...
Running and capturing gradle compilation...
Nothing to compile. Try running `./gradlew clean` first.
Uncaught exception:
(Unix.Exit_or_signal (Exit_non_zero 66))
Raised at file "src/error.ml", line 7, characters 20-30
Called from file "backend/infer.ml", line 455, characters 2-21
I'm running OS X El Capitan Version 10.11.6 and Infer 0.10.0.
I tried building clang after java and got stuck in the process.
details:
checking for ant... no checking for buck... no checking for mvn... no checking for ndk-build... no checking for ndk-build... no checking for Python module lxml... ok checking for xcpretty... no configure: saving configure flags to ./config.flags configure: creating ./config.status config.status: creating Makefile.autoconf
Warning: you are not using a release of Infer. The C and Objective-C analyses require a custom clang to be compiled now. This step takes ~30-60 minutes, possibly more.
To speed this along, you are encouraged to use a release of Infer instead:
http://fbinfer.com/docs/getting-started.html
If you are only interested in analyzing Java programs, simply run this script with only the "java" argument:
./build-infer.sh java
Are you sure you want to compile clang? (y/N) y CMake Warning at cmake/modules/HandleLLVMOptions.cmake:143 (message): -fPIC is not supported. Call Stack (most recent call first): cmake/modules/HandleLLVMOptions.cmake:161 (add_flag_or_print_warning) CMakeLists.txt:497 (include)
CMake Warning (dev) at projects/libcxx/CMakeLists.txt:15 (project): Policy CMP0048 is not set: project() command manages VERSION variables. Run "cmake --help-policy CMP0048" for policy details. Use the cmake_policy command to set the policy and suppress this warning.
The following variable(s) would be set to empty:
PROJECT_VERSION
PROJECT_VERSION_MAJOR
PROJECT_VERSION_MINOR
PROJECT_VERSION_PATCH
This warning is for project developers. Use -Wno-dev to suppress it.
clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s' clang: warning: argument unused during compilation: '-s'
This warning is keeping coming and clang is not built
Thanks Shreyas
I am confused how to integrate Infer into our Gitlab CI pipeline at static analysis stage:
infer --reactive --continue -- xcodebuild -workspace xxx.xcworkspace -scheme xxx -sdk iphonesimulator10.2 -configuration Debug build
Can seperate two phases?
I just want to analyze the commit files ,but Infer must compile first,and use command infer -- <command>
Suppose our CI pipeline include build,test,pre-production,production 4 phase.
Assuming there are two jobs in the build phase, the first job is build, the second is static analysis, , and infer - <command> combine two jobs, and make the build phase become slow.
Can not set the threshold, analyze the results and throw error so that the pipeline to stop
Please give me a suggestion how to integrate infer into our CI process correctly，thanks!
I have tried to test infer using Hello.java which was located in Desktop/Hello folder in my mac. And it said "Failed to load any Java source code". (Refer below commands that I tried.).
CD-RWEERASOORI:Desktop rweerasooriya$ infer -v Infer version v0.1.1 Copyright 2009 - present Facebook. All Rights Reserved.
CD-RWEERASOORI:Desktop rweerasooriya$ java -version java version "1.6.0_65" Java(TM) SE Runtime Environment (build 1.6.0_65-b14-466.1-11M4716) Java HotSpot(TM) 64-Bit Server VM (build 20.65-b04-466.1, mixed mode)
CD-RWEERASOORI:Desktop rweerasooriya$ cd Hello/ CD-RWEERASOORI:Hello rweerasooriya$ ls Hello.java
CD-RWEERASOORI:Hello rweerasooriya$ infer -- javac Hello.java Fatal error: exception Failure("Failed to load any Java source code") [ERROR] Failure during frontend, original command was
[u'inferJ', u'-g', u'-a', 'infer', u'javac', 'Hello.java']
Traceback (most recent call last):
File "/Users/rweerasooriya/infer-osx-v0.1.1/infer/infer/bin/inferJ", line 19, in
the log trace is as below: wyw@wyw-System-Product-Name:~/workspace/test$ infer -- javac Hello.java TODO: print error message Starting analysis (Infer version v0.1.0) Fatal error: exception Sys_error("/home/wyw/workspace/test/infer-out/captured: No such file or directory") [ERROR] Failure during create_makefile, original command was
[u'inferJ', u'-g', u'-a', 'infer', u'javac', 'Hello.java']
Traceback (most recent call last):
File "/home/wyw/Downloads/infer-linux64-v0.1.0/infer/infer/bin/inferJ", line 19, in
Anyone could explain?
javaHi again,
In the checker I am trying to create, I need to know whether a fieldname is an instance field or not. Example:
class Hello{
int foo= 0;
public void test(){
int i = 0;
i=3+foo; // foo is a an instance field
System.out.println("ok");
}
}
I took a look at the Ident.java_fieldname_is_outer_instance to give me an idea method but I'm not quite sure when appears the string ".this$".
Do you have any suggestion?
Hi Infer team,
I am making a new checker using the abstract interpretation module of Infer. When reporting alarms, my checker sometimes ignores some of them.
Here is a brief description of the error reporting part in my checker code.
let checker { Callbacks.get_proc_desc; proc_name; proc_desc; tenv; } =
let post = Interprocedural.checker callback get_proc_desc in
match post with
| Some post ->
(* iteration on found errors *)
Error.iter (fun e ->
Checkers.ST.report_error tenv
e.proc_name (* here, I don't use the parameter *)
e.proc_desc (* here, I don't use the parameter *)
"MY CHECKER"
e.location
err_description
) errors
| _ -> ()
Basically I followed the tutorial and I think the only differences are the commented parts. ("proc_name" and "proc_desc")
In my experience, the alarm reporting works well when Infer takes a single file. But it ignores some of them when analyzing multiple files.
Could you give me an advice?
Thanks, Kihong
[ ] Infer version 1.1.0
[ ] Debian 11
[ ] Command: infer run --reactive --bufferoverrun --pulse --enable-issue-type ARRAY_OUT_OF_BOUNDS_L1 -- clang -c strn.c (also tried BUFFER_OVERRUN_Ux, BUFFER_OVERRUN_Lx, and ARRAY_OUT_OF_BOUNDS_Lx where x ranges from 1-6.)
[ ] The full output in a paste: Capturing in make/cc mode... Found 1 (out of 1) source file to analyze in /home/../infer/infer-out 1/1 [#################################################] 100% 4.458ms No issues found
[ ] Code:
#include<stdio.h> #include<string.h>
char *src="demo";
int main(){ char dest[4]; strncpy(dest,src,sizeof(dest)); printf("str=%s\n",dest); }
I cannot get Infer to find the buffer overflow caused in strncpy(). Please advise.
[1] The version of infer from infer --version.
Infer version v1.1.0 Copyright 2009 - present Facebook. All Rights Reserved.
[2] Your operating system and version, for example "Debian 9", "MacOS High Sierra", whether you are using Docker, etc.
Ubuntu 22.04.1 LTS
[3] Which command you ran, for example infer -- make.
infer run -- clang -c foo.c
Capturing in make/cc mode...
Found 1 source file to analyze in /tmp/infer-out
1/1 [################################################################################] 100% 51.704ms
foo.c:9: error: Uninitialized Value
The value read from rval was never initialized.
7. rval = 1;
8. }
9. if( rval == 2)
^
10. return( 1);
11. return( 0);
Found 1 issue
Issue Type(ISSUED_TYPE_ID): #
Uninitialized Value(UNINITIALIZED_VALUE): 1
foo.c:
int main( void)
{
int rval;
for(;;)
{
rval = 1;
}
if( rval == 2)
return( 1);
return( 0);
}
Please make sure your issue is not addressed in the FAQ.
Please include the following information:
infer --version.infer -- make.Infer version v1.1.0-669338131Linux 5.15.81-1-MANJAROTopl cannot detect the call to a function pointer located in a struct. Here is a simple example:
struct {
void (*func_to_void)(int arg1);
} *my_struct;
int main()
{
(my_struct->func_to_void) (1);
return 0;
}
I am particularly trying to detect the line (my_struct->func_to_void) (1); but without any success.
The property i'm using:
property anyName
start -> start: *
start -> error: ".*" (Arg1, VoidRet) when 1 == 1
property pointer
start -> start: *
start -> error: "\(->*\)" (Arg1, VoidRet) when 1 == 1
property fullname
start -> start: *
start -> error: "(my_struct->func_to_void)" (Arg1, VoidRet) when 1 == 1
property withoutParentesis
start -> start: *
start -> error: "my_struct->func_to_void" (Arg1, VoidRet) when 1 == 1
property somethingWithArrows
start -> start: *
start -> error: ".*->.*" (Arg1, VoidRet) when 1 == 1
property arrowExpansion
start -> start: *
start -> error: "\(\*my_struct\)\.func_to_void" (Arg1, VoidRet) when 1 == 1
I am running topl with:
infer --topl-only --topl-properties simple_prop.topl --function-pointer-specialization -- clang -c -O0 simple_file.c
Output of the command:
infer --topl-only --topl-properties simple_prop.topl --function-pointer-specialization -- clang -c -O0 simple_file.c
Capturing in make/cc mode...
Found 1 source file to analyze in /home/username/issue/infer-out
1/1 [################################################################################] 100% 46.852ms
No issues found
CC: @dgutson
Hi, it seems that Infer is not recognizing the "isNull" method in java.utils.Objects.
infer capture -- ./gradlew --offline clean assemble
infer analyze --fail-on-issue
01. var client = getClient();
02. if (java.util.Objects.isNull(client)) {
03. throw new RuntimeException("client is null");
04. }
05. final var data = client.getData();
This codes produces a error: Null Dereference object client last assigned on line 01 could be null and is dereferenced at line 05.
The same code does not produce error if I replace "java.util.Objects.isNull(client)" by "client == null".
Thanks
Please make sure your issue is not addressed in the FAQ.
Please include the following information:
infer --version.infer -- make.Infer version v1.1.0-669338131Linux 5.15.81-1-MANJAROWhen trying to run a property in topl the following command fails if there is no newline at the end of file.
Running infer --topl-only --topl-properties property.topl -- clang -c file.c
where file.c is:
int foo(int number){
return number;
}
int main(){
foo(1);
}
and property.topl is:
property notOneAsArg
prefix "Main"
start -> start: *
start -> error: foo(Arg1, Ret) when Arg1 == 1
When there is a newline at the end of property.topl topl detect the property as expected:
➜ issue infer --topl-only --topl-properties property.topl -- clang -c file.c
Capturing in make/cc mode...
Found 1 source file to analyze in $HOME/issue/infer-out
1/1 [################################################################################] 100% 38.55ms
file.c:5: error: Topl Error
property notOneAsArg fails.
3. }
4.
5. int main(){
^
6. foo(1);
7. }
Found 1 issue
Issue Type(ISSUED_TYPE_ID): #
Topl Error(TOPL_ERROR): 1
When there is no newline at the end of property.topl the following error occurs
➜ issue infer --topl-only --topl-properties property.topl -- clang -c file.c
Usage Error: $HOME/property.topl:4:48: topl parse error
I don't know if this an expected behavior but couldn't find its explanation anywhere on the topl docs.
CC: @dgutson
For the following code:
static void expectNoError() throws IOException {
String[] paths = new String[5];
if (paths.length < 5) {
Object x = null;
x.hashCode();
}
}
We expect Pulse to determine that the path in which the nullptr dereference might occur is not satisfiable. However, it reports the null dereference. I'm attaching the complete debug output to this post for ease of explanation. infer-out.tar.gz
This is a new release of Infer, with a binary tarball for Linux. On MacOS, using Homebrew is recommended. Please follow these instructions.
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-linux64-v1.1.0.tar.xz
5f5d453814422e93e2a70998d8946b09a2721628ff427f67ff0123dea87461d4 infer-linux64-v1.1.0.tar.xz
This is a binary release of Infer for Linux and MacOS. To use it follow these instructions.
The Linux binary is built for Ubuntu 18 and may require adjustments to run on other configurations.
The Mac binary is built for the Catalina version. MacOS users may get an error "developer cannot be verified" and need to allow the app to run manually following these instructions, or alternatively get infer from Homebrew when it is released there.
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v1.0.0.tar.xz
510eeccc7e6bcc2678ac92a88f8e1cb9c07c3e14d272dcc06834e93845bb120f infer-linux64-v1.0.0.tar.xz
4f188959f7c61e2ef3b935c8a9e5e66632d7fcb90c5362336fb8305d4f74d6b7 infer-osx-v1.0.0.tar.xz
AL is now deprecated and may be removed in future versions.
Litho Required Properties: new Java checker to check that all non-optional @Props have been specified when constructing Litho components. Self in Block: new Objective-C checker to detect when an Objective-C block incorrectly captures self Starvation
--starvation-whole-programMiscellaneous improvements to most checkers, in particular Annotation Reachability, Cost Analysis, Eradicate, Inefficient Keyset Iterator, InferBO, Pulse, RacerD, Starvation, and Uninitialized Value.
--buck-java-flavorinfer help to display information about checkers and issue types.infer debug that replaces the uses of infer explore not related to reported issues.--debug no longer disables filtering, you have to pass -g -F to get the previous behaviour back.infer debug.--flavors, now with --buck-clang--buck-compilation-database, unchanged--genrule-master-mode, now with --buck-java--buck-java-flavor--report-hook option.Control-C instead of sometimes leaving around zombie processes.infer debug --procedures --procedures-summary.infer help command can be used locally to also get this information and more.--scheduler callgraph or --scheduler restart.This is a binary release of Infer for Linux and MacOS. To use it follow these instructions.
--inefficient-keyset-iterator checker for finding inefficient uses of Java's keyset iterators that retrieve both key and value (on by default).--starvation is now on by default. This analysis catches problems with threads not being able to make progress due to locking issues, incorrect scheduling priorities, etc. For instance, on Android calling Future.get from a UiThread without a sensible timeout will be flagged as a starvation issue.@optional methods: UNSAFE_CALL_TO_OPTIONAL_METHOD, enabled by default.--call-graph-schedule) improves performance of the analysis phase of Infer, especially when the number of files to analyze is less than available CPUs.--oom-threshold allows to throttle the analysis when the amount of free memory is below the provided threshold.--genrule-master-mode.SDKROOT (although you still might need it with non-standard toolchain setup).--pulse. Beware that it doesn’t report much yet.--ownership checker was superseded by Pulse and removed.... and many other fixes and improvements. For the full list of changes included see here.
The facebook-clang-plugins version used for this release is https://github.com/facebook/facebook-clang-plugins/commit/9386890e42043d04f9 cd9e7b204cb525d4417c41.
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v0.17.0.tar.xz
de972ba3043f18b29a8eff6cd7612e24f5ffaef038dc7949befeaf490931725e infer-linux64-v0.17.0.tar.xz
1a3ef6fb51846ae63ffd7fde3b0255f75bab6157f5de1842606fa32988d101f8 infer-osx-v0.17.0.tar.xz
This is a binary release of Infer for Linux and MacOS. To use it follow these instructions.
It's been a long time since the previous release, here are some new features and improvements you can find in this new release:
Backend analyses:
--cost (off by default) to Infer will output a costs-report.json file describing, among others, the computational complexity of each function in the code using the big-O notation, eg O(1), O(list.length), ...--starvation (off by default).--racerd (on by default).Frontends:
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v0.16.0.tar.xz
435c415a9a22f41e7f2074b542b035b972a2a8c237d5490285d763bf333a817b infer-linux64-v0.16.0.tar.xz
471f06c72754a45d73433623e8092bf9ea1315884b8ebff24d3f79f9a8b0380a infer-osx-v0.16.0.tar.xz
The facebook-clang-plugins version used for this release is https://github.com/facebook/facebook-clang-plugins/commit/36266f6c86041896bed32ffec0637fefbc4463e0.
Source code(tar.gz)This is a binary release of Infer for Linux and MacOS. To use it follow these instructions.
Highlights:
More changes in the full list of changes.
The facebook-clang-plugins version used for this release is https://github.com/facebook/facebook-clang-plugins/commit/f31f7c9c28d8fb9b59c0dacc74a24e4bfe90a904.
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v0.15.0.tar.xz
f6eb98162927735e8c545528bb5a472312e5defcf0761e43c07c73fe214cb18a infer-linux64-v0.15.0.tar.xz
0f87b8fd68b62717b8c3c143aeaea38b5102435f80fff484cb570a51cf510f9c infer-osx-v0.15.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
Highlights:
--ownership detects a subset of use-after-free issues due to bad manual memory management. This is a rough prototype of Rust-style borrow checker for C++. (enabled by default, C++)--uninit detects uses of uninitialized values (enabled by default, C/C++/Objective-C)--racerd now also detects inconsistent lock usage in C++. Also improved the lock domain to reduce false positives for all languages.The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v0.14.0.tar.xz
330b4bbb5fbf90c04d4c096ce0d8d713dac72925d68c0e1b55ab30e6d5201bcb infer-linux64-v0.14.0.tar.xz
350767bc29acdcb86734a2009e97bdf2a3603db0fbf3f18c59fc07b416977021 infer-osx-v0.14.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
This is a fix for the 0.13.0 release, whose build broke due to changes in opam.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.13.1.tar.xz
02ff3c49c83d3a4e967696f8818b1cffcb042c26eefbb2ba8d78c27244b5940c ?infer-linux64-v0.13.1.tar.xz
182ff5b76ff561408dc52b32611346e097098651a491fb8a0a453a1d098d4299 ?infer-osx-v0.13.1.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
The main changes are:
const pointers in Objective-CPlease note the following breaking changes:
-a eradicate is now simply --eradicate and can run alongside other checkersinferTraceBugs is now the explore subcommand: infer explore --helpThe sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.13.0.tar.xz
79a7fe8b7a05ea2a685997d9188fef7319c7b3d72064f14dea7a5f23ec50efac ?infer-linux64-v0.13.0.tar.xz
1abec8df73581d35e018f81285197d82a6f3e6101c528fb8be14405765da155e ?infer-osx-v0.13.0.tar.xz
This is a hotfix release to update infer's opam dependencies to cope with upgrades of cppo in opam (in particular, #718).
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.12.1.tar.xz
d26dd519c19345530a92a6ae3f7058af3bd8ddfd7c2c945d116c6fd658be6c4 ?infer-linux64-v0.12.1.tar.xz
ce76b87bf4f70be594aaddc7402609af6338623fbb448dacca610e10bcb7c60a ?infer-osx-v0.12.1.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
This introduces subcommands and man pages for all subcommands. If you are used to infer's command line already, here are some rough equivalences (the commands might not be completely equivalent in some cases):
infer [options] -- [build command] becomes infer run [options] -- [build command]infer becomes infer analyzeinfer -a capture [options] -- [build command] becomes infer capture [options] -- [build command]infer -a compile [options] -- [build command] becomes infer compile [options] -- [build command]The previous forms of invocations are still supported but may go away in future releases.
If you were using them, the internal binaries have disappeared and are replaced as follows:
InferPrint [options] becomes infer report [options]InferAnalyze [options] becomes infer analyze [options]See man infer, man infer-capture, man infer-analyze, etc. for more details, and let us know if anything is missing.
This release introduces AL, a language for writing linters against the clang AST. AL lets you check syntactic properties of source code by traversing the AST of the program. Using the included domain-specific language (DSL), you can write your own set of checks.
As usual, this release also includes lots of fixes and improvements. For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.12.0.tar.xz
698c9ff83a23fb3d6ffa0d62d5394e691ad5e3352f27bf2d4105afdfd07cc201 ?infer-linux64-v0.12.0.tar.xz
3b97bcabf85af8feb8d6fd0b8622fe2b4fbf27fa215fab61e3a660b5435b6d21 ?infer-osx-v0.12.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
Highlights:
infer -a checkers .... This checker will try and detect races (unprotected concurrent accesses with at least one write) in classes bearing the @ThreadSafe annotation.For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.11.0.tar.xz
c2a893d66befc2652a28e9e6481f680fe863512f8c507b52616c5731878c22f0 ?infer-linux64-v0.11.0.tar.xz
0c435efa311cb70a79b5b8ae9cc4e714651e6653c5542a58cc624f2439d68e36 ?infer-osx-v0.11.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
infer --compilation-database compile_commands.json (for cmake and Buck), or with infer --compilation-database-escaped compile_commands.json (for xcbuild and xcpretty).infer --iphoneos-target-sdk-version <min version you support> ... or with infer -a linters --iphoneos-target-sdk-version <min version you support> ....@SuppressWarnings support removed. Use @SuppressLint instead. android.annotation.SuppressLint is only available on Android, but do let us know if that is an issue for you.For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.10.0.tar.xz
62287344459e2e467def603f97dac9cfb335a8f2852a51217696db948164780c ?infer-linux64-v0.10.0.tar.xz
6fdcfe52cee28f57a86e8cd80bf4cac7b2dda83a3cc511f86834636ada14a808 ?infer-osx-v0.10.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS.
This includes a fix for #577.
To use it follow these instructions.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.5.tar.xz
199f5cc6466db63375774d20bbea8f50e0394380b7e8b258b73a44c2578b5159 ?infer-linux64-v0.9.5.tar.xz
43d6c68d4e41057be8188877872544bf7c0e6a53a122be64efe06f3f3b772f47 ?infer-osx-v0.9.5.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions. It only contains hotfix to infer 0.9.4 fixing https://github.com/facebook/infer/issues/508
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.4.1.tar.xz
860f20741bd54f1e058e0e0c4550fc4211016ef93f154938eb173df555a560df ?infer-linux64-v0.9.4.1.tar.xz
a738a3492a4e0229df8abd745cd88bca8fb547bc3bcca15ec194d6780b07cbda ?infer-osx-v0.9.4.1.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.4.tar.xz
1b85b84a5f798919d2630b313033e710b1e20fba24f5c751ca1b5e0a3c601cff ?infer-linux64-v0.9.4.tar.xz
529d147bccf3285ddb7500c22e0c50d6e0cbdb2c7f9b11a84e8005873994b3e2 ?infer-osx-v0.9.4.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.3.tar.xz
a55a940082690d06c0c05d8b772b8a9eef8b98ecb0ea82f86e5d473bcf878211 ?infer-linux64-v0.9.3.tar.xz
8bfbb7ee76388393b5cf513984da79c305af3a1e6bbd057f83082f093d3cc0d7 ?infer-osx-v0.9.3.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.2.tar.xz
7c374d14affc19c44cd23746696eba7b4422a900e03f8a6b9985d95a05d2d95f ?infer-linux64-v0.9.2.tar.xz
3935f8be25982a023aba306b66804d73a7316ab833296277c1ec6c3694bfc7c7 ?infer-osx-v0.9.2.tar.xz
This is a minor source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. It contains bugfixes to 0.9.0, in particular to enable packaging via Homebrew and to fix an issue with locales. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.1.tar.xz
c6dc64db4a6075d4fac32712bbd0e087ecb6d909ac590220acd64bd4a33480c3 ?infer-linux64-v0.9.1.tar.xz
6dbb1bb7b3e28d99a8c02fd42f2f87894bf0c5564c13645aae679effb8ee8418 ?infer-osx-v0.9.1.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
Since the changelog is so big, let's just mention these two items:
--cxx in infer --help. This is still in heavy development and only includes a few bug types. Feedback welcome!The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.9.0.tar.xz
1596e2d4e67f920349de4950a2b6b98451d5115602826b508eb7b4d8e1b41caf ?infer-linux64-v0.9.0.tar.xz
3aebf37bbcbb3c17912c24bfd1f2aec7b8d1256f0617cca5ddeab7aeab58b3ce ?infer-osx-v0.9.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
This release includes:
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.8.1.tar.xz
7f75ae69d91fb9a8c43163f02a9b2a4919b8ebc42dfb2f729722201a0b18ea6b ?infer-linux64-v0.8.1.tar.xz
0cd33936966fcb4761251279aa737ca07352fb8a8e864697a1d2cc5735c56ae7 ?infer-osx-v0.8.1.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
--reactive mode to rapidly analyze the effects of a code change. Be sure to check out the documentation of the new workflow. As a result, the incremental mode (--incremental) is now deprecated.--pmd-xml flag to Infer (see infer --help).@SuppressWarnings("infer") in your Java projects to annotate methods or classes where Infer shouldn't report.This release incorporates a number of contributions (#284 #289 #300 #301) and addresses a number of issues (#279 #281 #283 #288 #291 #294).
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.8.0.tar.xz
4942ca2c8ad9e76ff6e31c6473b7f360cc95d9db43218dc7747ae34aef6294f4 ?infer-linux64-v0.8.0.tar.xz
2b494a2b595bd7cf0f0cfaac4e9bece568575a4bcf25cc00161ed34c0319dc58 ?infer-osx-v0.8.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
This release addresses a number of bugs, eg #270 #274 #275 #276. Thanks to all of you who reported bugs!
There are also new features:
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.7.0.tar.xz
b8c4f32bc286893aded3302a2915a66fe7e799edbbaf286ffdcc5218866db3ae ?infer-linux64-v0.7.0.tar.xz
c83753c04bea8ad1dae3877d23d094d963d293b5d926a21ea8ea9443c870404a ?infer-osx-v0.7.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
New features:
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 -p infer-*-v0.6.0.tar.xz
26abc0312c892b53e4b93c22c2c051381ce1012a3d8458e8e2574b27302eec37 infer-linux64-v0.6.0.tar.xz
8a1c4d0425c0ef3efcf4683cdbeebba63f3dd2fd5e75df4f04142dc9a5a5f15d infer-osx-v0.6.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
New features:
@PerformanceCritical and @Expensive method annotations. Infer will check that an expensive method is never called during the execution of a performance critical method (run it with infer -a checkers -- ...).For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ shasum -a 256 infer-*-v0.5.0*.tar.xz
9d6eefeb63742bd408bc5769e93f34b378b36c0561c8e80035797c1be0c6fc66 infer-linux64-v0.5.0.tar.xz
6a8547ac0b75a5e2bbeccae2169e39f753a60adbcacb6c94599fd31343a71ce7 infer-osx-v0.5.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ sha256sum infer-*-v0.4.0.tar.xz
bb84656153b59ff43f477c2432039195b614ecb5c19ed2a3f73aea7921696730 infer-osx-v0.4.0.tar.xz
14f6e6d96a450d7acb17de0b26b136851d1b2815edd267e5865ea0af7aaf2887 infer-linux64-v0.4.0.tar.xz
This is a source release of Infer packaged with pre-built binaries for clang and facebook-clang-plugins for Linux and MacOS. To use it follow these instructions.
For the full list of changes included see here.
The sha256 checksums of the tarballs are:
$ sha256sum infer-*-v0.3.0.tar.xz
325013468da5b221e81ad3f1ba348e07a87f061c698e46b32d20f94d599ab463 infer-linux64-v0.3.0.tar.xz
cfd17c647098baff2875f3ff4db994f2ee02e7b5577cde5fe59ee21ec57a2d44 infer-osx-v0.3.0.tar.xz
Notable fixes and improvements:
Action required to compile from source when upgrading from a previous version:
opam update && opam upgrade. You'll also
need to run make -C infer clean before recompiling Infer../update-fcp.sh && ../facebook-clang-plugin/clang/setup.sh && ./compile-fcp.sh.See the full list of changes here.
Source code(tar.gz)This release fixes a number of bugs. Non-exhaustive list below.
assert (closes #68)@import (closes #2)
This project is abandoned and unlikely will be supported in future HuntBugs 0.0.11 New Java bytecode static analyzer tool based on Procyon Compiler To
PMD About PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and
Tackle-DiVA (Data-intensive Validity Analyzer) Tackle-DiVA is a command-line tool for data-centric application analysis. It imports a set of target ap
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
SpotBugs is the spiritual successor of FindBugs, carrying on from the point where it left off with support of its community. SpotBugs is licensed unde
Violations Lib This is a Java library for parsing report files like static code analysis. Example of supported reports are available here. A number of
Spoon Spoon is an open-source library to analyze, rewrite, transform, transpile Java source code. It parses source files to build a well-designed AST
Checkstyle is a tool for checking Java source code for adherence to a Code Standard or set of validation rules (best practices). Members chat: Contrib
Copyright (c) 2006, 2020 Oracle and/or its affiliates. All rights reserved. OpenGrok - a wicked fast source browser OpenGrok - a wicked fast source br
What is Astra? Astra is a Java tool for analysing and refactoring Java source code. For example: "References to type A should instead reference type B
google-java-format google-java-format is a program that reformats Java source code to comply with Google Java Style. Using the formatter from the comm
Sourcetrail Sourcetrail is a free and open-source cross-platform source explorer that helps you get productive on unfamiliar source code. Windows: Lin
Error Prone Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time. public class ShortSet { public
NullAway: Fast Annotation-Based Null Checking for Java NullAway is a tool to help eliminate NullPointerExceptions (NPEs) in your Java code. To use Nul
Swift Swift is a free and open-source injection hacked client base for Minecraft using Java-agents. Issues If you notice any bugs, you can let us know
Code Quality and Security for Java This SonarSource project is a code analyzer for Java projects. Information about the analysis of Java features is a
This project is abandoned and unlikely will be supported in future HuntBugs 0.0.11 New Java bytecode static analyzer tool based on Procyon Compiler To
PMD About PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and
J2ObjC: Java to Objective-C Translator and Runtime Project site: https://j2objc.org J2ObjC blog: https://j2objc.blogspot.com Questions and discussion:
React Native Indy SDK React Native Indy SDK wrapper. Installation with npm: $ npm install indy-sdk-react-native --save with Yarn: $ yarn add indy-sdk-
302 Aug 13, 2022
4.1k Jan 2, 2023
38 Oct 31, 2022
347 Dec 29, 2022
2.9k Jan 4, 2023
127 Nov 23, 2022
1.4k Dec 29, 2022
7.5k Jan 8, 2023
3.8k Jan 8, 2023
51 Dec 26, 2022
4.8k Dec 31, 2022
13.2k Jan 5, 2023
3.2k Dec 29, 2022
36 Oct 8, 2022
976 Jan 5, 2023
21 Dec 5, 2022