[NFC][analyzer] Add missing documentation for decodeValueOfObjCType (#167822)

This check is introduced in
b284005072,
but the documentation seems missing from `checkers.rst`.
This commit is contained in:
mitchell 2025-11-17 20:28:02 +08:00 committed by GitHub
parent 3ee54a6b99
commit c2ddaaa425
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -198,7 +198,7 @@ as error. Specifically on x86/x86-64 target if the pointer address space is
dereference is not defined as error. See `X86/X86-64 Language Extensions
<https://clang.llvm.org/docs/LanguageExtensions.html#memory-references-to-specified-segments>`__
for reference.
If the analyzer option ``suppress-dereferences-from-any-address-space`` is set
to true (the default value), then this checker never reports dereference of
pointers with a specified address space. If the option is set to false, then
@ -1664,6 +1664,23 @@ Warn on uses of the 'bzero' function.
bzero(ptr, n); // warn
}
.. _security-insecureAPI-decodeValueOfObjCType:
security.insecureAPI.decodeValueOfObjCType (C)
""""""""""""""""""""""""""""""""""""""""""""""
Warn on uses of the Objective-C method ``-decodeValueOfObjCType:at:``.
.. code-block:: objc
void test(NSCoder *decoder) {
unsigned int x;
[decoder decodeValueOfObjCType:"I" at:&x]; // warn
}
This diagnostic is emitted only on Apple platforms where the safer
``-decodeValueOfObjCType:at:size:`` alternative is available
(iOS 11+, macOS 10.13+, tvOS 11+, watchOS 4.0+).
.. _security-insecureAPI-getpw:
security.insecureAPI.getpw (C)