awslabs / ar-go-tools

ar-go-tools (Argot) is a collection of analysis tools for Go
Apache License 2.0
25 stars 1 forks source link

Adding warning for usage of unsound features when a function is being… #97

Closed victornicolet closed 1 month ago

victornicolet commented 1 month ago

The tool will now warn when Go features that are a threat to soundness are use in a function being analyzed by the dataflow analyses (see #95 ):

Screenshot 2024-10-04 at 1 52 24 PM

This is in addition to the existing warnings about possibly unbound defer stacks and data flowing through Go calls. This feature is meant to help users understand what may threaten soundness, but we won't give guarantees about "a warning will be produced iff the analyzer encounters a feature that is a threat to soundness".