Finding Bugs using Path-Sensitive Static Analysis Gábor Horváth Gabor.Horvath@microsoft.com @XazaxHunWelcome to CppCon 2021! Join #visual_studio channel on CppCon Discord https://aka.ms/cppcon/discord latest announcements Take our survey https://aka.ms/cppconAgenda • Intro to path-sensitive static analysis • Path-sensitive checks in MSVC • A look under the hood • Upcoming features • Lessons learned2012 -> Unknown p -> Null p -> MaybeNull p -> MaybeNull Warning Unknown Null NotNull MaybeNull Analysis state Transition semi-lattice• Some paths are infeasible: • Not taking branch 1, but taking branch

Navigation ☑️� Linters ☑️� Colorization & Formatting ☑️� IntelliSense ⌛; ☑️�MSVC ☑️�MSVC Code Analysis ☑️�MSBuild ; CMake ⌛ ; GCC ⌛ ; Clang/LLVM ⌛ ☑️�Stepping ☑️�Parallel Stacks ☑️�Debugger Cross-platform development 4. Developer and Team Productivity Static Analysis ✴ New and improved checkers in MSVC Code Analysis • Returning a local variable with std::move • Path-sensitive bounds checking 4:45pm / Fri, Oct 29 – 12:00pm Finding bugs using path-sensitive static analysis Gabor Horvath – _3 Tue, Oct 26 – 3:15pm Static Analysis and Program Safety in C++: Making it Real Sunny Chatterjee – _2

recommendations Classifieds. Dating Search engine optimization Telecom traffic analysis DPI analysis CDR records analysis Fraud & spam detection DDoS protection Application performance monitoring Logs

What are coroutines used for?  They simplify implementing:  Generators  Asynchronous I/O  Lazy computations  Event driven applications17 Coroutines  C++20 contains language additions to support

A set of concepts that represent: • A handle to a compute resource (aka, scheduler) • A unit of lazy async work (aka, sender) • A completion handler (aka, receiver) • A small, initial set of generic

main 中的 interact 计算完毕后。 • 这种写法， download 的执行仍在主线程 中，他只是函数式编程范式意义上的异步 ，而不涉及到真正的多线程。可以用这个 实现惰性求值（ lazy evaluation ）之类。 std::async 的底层实现： std::promise • 如果不想让 std::async 帮你自动创建线程 ，想要手动创建线程，可以直接用 std::promise

Documentation in The Era of Concepts and Ranges – Sy Brand & Christopher Di Bella (Google) • Static Analysis and Program Safety in C+ +: Making it Real – Sunny Chatterjee • In-memory and Persistent Representations Reid • Why does std::format do that? – Charlie Barto • Finding bugs using path-sensitive static analysis – Gabor Horvath (online 29th)

Sources • IoT Protocols • Streaming Pipeline • Transformer • Data Share • Visualization • Analysis Platform • High Avalibility 2022.12 2023.05 2023.09 Usability Functionality taosX - 集群运维 •

AST Unresolved Logical Plan Logical Plan Optimized Logical Plan Physical Plan Program API Analysis rules Optimization rules: MATCH -> pushdown Planning Strategies Graph Execution Code Gen