microsoft / infersharp

Infer# is an interprocedural and scalable static code analyzer for C#. Via the capabilities of Facebook's Infer, this tool detects null dereferences, resource leaks, and thread-safety violations. It also performs taint flow tracking to detect critical security vulnerabilities like SQL injections.
MIT License
730 stars 29 forks source link

Remove Translation of Methods Without Source Location #117

Closed matjin closed 2 years ago

matjin commented 2 years ago

Methods for which the source location cannot be found (which can occur when there is compiler-generated code) can result in confusing warnings; we do not want to add these to the CFG, as we wouldn't want to report on compiler-generated code anyway (nor is the user likely to write code that depends on it, either).