40 improve uninitialized variable analysis with byte range lattice and interprocedural function summaries#41

Merged

SizzleUnrlsd merged 41 commits intomainfrom

40-improve-uninitialized-variable-analysis-with-byte-range-lattice-and-interprocedural-function-summaries

Feb 9, 2026

Commits on Feb 9, 2026

chore(build): register uninitialized variable analysis sources
SizzleUnrlsd
committed
docs(cli): document STL filtering behavior and analysis options
SizzleUnrlsd
committed
feat(reporting): extend diagnostic metadata for uninitialized checks
SizzleUnrlsd
committed
feat(cli): add --STL flag to include system and STL functions
SizzleUnrlsd
committed
test(cli): add coverage for STL flag and uninitialized scenarios
SizzleUnrlsd
committed
feat(diagnostics): add call-based uninitialized read diagnostic messaging
SizzleUnrlsd
committed
feat(filter): default to user-code analysis and gate STL via option
SizzleUnrlsd
committed
feat(reporting): serialize uninitialized rule metadata with confidence and CWE
SizzleUnrlsd
committed
feat(uninitialized): add call-aware issue kind and callee context
SizzleUnrlsd
committed
feat(uninitialized): implement byte-range lattice with interprocedural summaries
SizzleUnrlsd
committed
test(uninitialized): add never-used local variable case
SizzleUnrlsd
committed
test(uninitialized): add C argument path with conditional initialization
SizzleUnrlsd
committed
test(uninitialized): add C++ argument handling without false positives on argc argv
SizzleUnrlsd
committed
test(uninitialized): add fully initialized array no-warning case
SizzleUnrlsd
committed
test(uninitialized): add partially initialized array warning case
SizzleUnrlsd
committed
test(uninitialized): add basic uninitialized array read case
SizzleUnrlsd
committed
test(uninitialized): add baseline uninitialized scalar read case
SizzleUnrlsd
committed
test(uninitialized): add branch-dependent initialization case
SizzleUnrlsd
committed
test(uninitialized): add goto-based control flow initialization case
SizzleUnrlsd
committed
test(uninitialized): add initialized local no-warning case
SizzleUnrlsd
committed
test(uninitialized): add interprocedural call-chain read-before-write case
SizzleUnrlsd
committed
test(uninitialized): add interprocedural read-before-write case
SizzleUnrlsd
committed
test(uninitialized): add interprocedural partial struct initialization case
SizzleUnrlsd
committed
test(uninitialized): add interprocedural write call-chain no-warning case
SizzleUnrlsd
committed
test(uninitialized): add interprocedural write-before-read no-warning case
SizzleUnrlsd
committed
test(uninitialized): add nested loop partial initialization case
SizzleUnrlsd
committed
test(uninitialized): add uninitialized pointer dereference case
SizzleUnrlsd
committed
test(uninitialized): add C++ reference propagation case
SizzleUnrlsd
committed
test(uninitialized): add fully initialized struct no-warning case
SizzleUnrlsd
committed
test(uninitialized): add partially initialized struct warning case
SizzleUnrlsd
committed
test(uninitialized): add basic uninitialized struct field read case
SizzleUnrlsd
committed
test(uninitialized): add switch-dependent initialization case
SizzleUnrlsd
committed
test(uninitialized): add unused uninitialized local declaration case
SizzleUnrlsd
committed
fix(test): add cstdint include for uninitialized local argument fixture
SizzleUnrlsd
committed
fix(uninitialized): optimize range updates and harden summary/read tracking logic
SizzleUnrlsd
committed
fix(filter): make path normalization deterministic for relative paths
SizzleUnrlsd
committed
fix(report): sort SARIF rules deterministically and format confidence values
SizzleUnrlsd
committed
test(uninitialized): add regression for memcpy reading uninitialized source
SizzleUnrlsd
committed
test(uninitialized): add negative memcpy case with initialized source
SizzleUnrlsd
committed
test(uninitialized): add pointer redirection case to prevent false positive
SizzleUnrlsd
committed
chore(style): format code with clang-format
SizzleUnrlsd
committed