Finding Bugs using Path-Sensitive Static Analysis Gábor Horváth Gabor.Horvath@microsoft.com @XazaxHunWelcome to CppCon 2021! Join #visual_studio channel on CppCon Discord https://aka.ms/cppcon/discord announcements Take our survey https://aka.ms/cppconAgenda • Intro to path-sensitive static analysis • Path-sensitive checks in MSVC • A look under the hood • Upcoming features • Lessons learned2012 Analysisint f(int x) { if (x == 472349) { return 5/(x- 472349); } // ... }Flow- sensitive checksvoid flow_sensitive(int *p, bool cond) { int var = 0; // branch 1 if (p != nullptr) {

expansion using Gradle Git commit information 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway

expansion using Gradle Git commit information 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway

expansion using Gradle Git commit information 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway

expansion using Gradle Git commit information 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway

expansion using Gradle Git commit information 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway

information Writing custom InfoContributors 47. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Configuring mapped to /health. The following technology agnostic endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires true flyway Shows any Flyway database migrations that have been applied. true ID Description Sensitive Default health Shows application health information (when the application is secure, a simple ‘status’

information Writing custom InfoContributors 50. Monitoring and management over HTTP Accessing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Configuring /application/health. The following technology agnostic endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires dump. true env Exposes properties from Spring’s ConfigurableEnvironment. true ID Description Sensitive Default flyway Shows any Flyway database migrations that have been applied. true health Shows

information Writing custom InfoContributors 48. Monitoring and management over HTTP Accessing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Configuring mapped to /health. The following technology agnostic endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires dump. true env Exposes properties from Spring’s ConfigurableEnvironment. true ID Description Sensitive Default flyway Shows any Flyway database migrations that have been applied. true health Shows

information Writing custom InfoContributors 46. Monitoring and management over HTTP Securing sensitive endpoints Customizing the management endpoint paths Customizing the management server port Customizing health endpoint will be mapped to /health. The following endpoints are available: ID Description Sensitive Default actuator Provides a hypermedia-based “discovery page” for the other endpoints. Requires spring-boot-actuator-docs to be on the classpath. false dump Performs a thread dump. true ID Description Sensitive Default env Exposes properties from Spring’s ConfigurableEnvironment. true flyway Shows any Flyway