contrib/llvm/tools/clang/lib/StaticAnalyzer/Checkers/Checkers.td

   1 //===--- Checkers.td - Static Analyzer Checkers -===-----------------------===//
   2 //
   3 //                     The LLVM Compiler Infrastructure
   4 //
   5 // This file is distributed under the University of Illinois Open Source
   6 // License. See LICENSE.TXT for details.
   7 //
   8 //===----------------------------------------------------------------------===//
   9
  10 include "clang/StaticAnalyzer/Checkers/CheckerBase.td"
  11
  12 //===----------------------------------------------------------------------===//
  13 // Packages.
  14 //===----------------------------------------------------------------------===//
  15
  16 def Alpha : Package<"alpha">;
  17
  18 def Core : Package<"core">;
  19 def CoreBuiltin : Package<"builtin">, InPackage<Core>;
  20 def CoreUninitialized  : Package<"uninitialized">, InPackage<Core>;
  21 def CoreAlpha : Package<"core">, InPackage<Alpha>, Hidden;
  22
  23 def Cplusplus : Package<"cplusplus">;
  24 def CplusplusAlpha : Package<"cplusplus">, InPackage<Alpha>, Hidden;
  25
  26 def DeadCode : Package<"deadcode">;
  27 def DeadCodeAlpha : Package<"deadcode">, InPackage<Alpha>, Hidden;
  28
  29 def Security : Package <"security">;
  30 def InsecureAPI : Package<"insecureAPI">, InPackage<Security>;
  31 def SecurityAlpha : Package<"security">, InPackage<Alpha>, Hidden;
  32 def Taint : Package<"taint">, InPackage<SecurityAlpha>, Hidden;
  33
  34 def Unix : Package<"unix">;
  35 def UnixAlpha : Package<"unix">, InPackage<Alpha>, Hidden;
  36 def CString : Package<"cstring">, InPackage<Unix>, Hidden;
  37 def CStringAlpha : Package<"cstring">, InPackage<UnixAlpha>, Hidden;
  38
  39 def OSX : Package<"osx">;
  40 def OSXAlpha : Package<"osx">, InPackage<Alpha>, Hidden;
  41 def Cocoa : Package<"cocoa">, InPackage<OSX>;
  42 def CocoaAlpha : Package<"cocoa">, InPackage<OSXAlpha>, Hidden;
  43 def CoreFoundation : Package<"coreFoundation">, InPackage<OSX>;
  44 def Containers : Package<"containers">, InPackage<CoreFoundation>;
  45
  46 def LLVM : Package<"llvm">;
  47 def Debug : Package<"debug">;
  48
  49 //===----------------------------------------------------------------------===//
  50 // Core Checkers.
  51 //===----------------------------------------------------------------------===//
  52
  53 let ParentPackage = Core in {
  54
  55 def DereferenceChecker : Checker<"NullDereference">,
  56   HelpText<"Check for dereferences of null pointers">,
  57   DescFile<"DereferenceChecker.cpp">;
  58
  59 def CallAndMessageChecker : Checker<"CallAndMessage">,
  60   HelpText<"Check for logical errors for function calls and Objective-C message expressions (e.g., uninitialized arguments, null function pointers)">,
  61   DescFile<"CallAndMessageChecker.cpp">;
  62
  63 def NonNullParamChecker : Checker<"NonNullParamChecker">,
  64   HelpText<"Check for null pointers passed as arguments to a function whose arguments are references or marked with the 'nonnull' attribute">,
  65   DescFile<"NonNullParamChecker.cpp">;
  66
  67 def VLASizeChecker : Checker<"VLASize">,
  68   HelpText<"Check for declarations of VLA of undefined or zero size">,
  69   DescFile<"VLASizeChecker.cpp">;
  70
  71 def DivZeroChecker : Checker<"DivideZero">,
  72   HelpText<"Check for division by zero">,
  73   DescFile<"DivZeroChecker.cpp">;
  74
  75 def UndefResultChecker : Checker<"UndefinedBinaryOperatorResult">,
  76   HelpText<"Check for undefined results of binary operators">,
  77   DescFile<"UndefResultChecker.cpp">;
  78
  79 def StackAddrEscapeChecker : Checker<"StackAddressEscape">,
  80   HelpText<"Check that addresses to stack memory do not escape the function">,
  81   DescFile<"StackAddrEscapeChecker.cpp">;
  82
  83 def DynamicTypePropagation : Checker<"DynamicTypePropagation">,
  84   HelpText<"Generate dynamic type information">,
  85   DescFile<"DynamicTypePropagation.cpp">;
  86
  87 } // end "core"
  88
  89 let ParentPackage = CoreAlpha in {
  90
  91 def BoolAssignmentChecker : Checker<"BoolAssignment">,
  92   HelpText<"Warn about assigning non-{0,1} values to Boolean variables">,
  93   DescFile<"BoolAssignmentChecker.cpp">;
  94
  95 def CastSizeChecker : Checker<"CastSize">,
  96   HelpText<"Check when casting a malloc'ed type T, whether the size is a multiple of the size of T">,
  97   DescFile<"CastSizeChecker.cpp">;
  98
  99 def CastToStructChecker : Checker<"CastToStruct">,
 100   HelpText<"Check for cast from non-struct pointer to struct pointer">,
 101   DescFile<"CastToStructChecker.cpp">;
 102
 103 def FixedAddressChecker : Checker<"FixedAddr">,
 104   HelpText<"Check for assignment of a fixed address to a pointer">,
 105   DescFile<"FixedAddressChecker.cpp">;
 106
 107 def PointerArithChecker : Checker<"PointerArithm">,
 108   HelpText<"Check for pointer arithmetic on locations other than array elements">,
 109   DescFile<"PointerArithChecker">;
 110
 111 def PointerSubChecker : Checker<"PointerSub">,
 112   HelpText<"Check for pointer subtractions on two pointers pointing to different memory chunks">,
 113   DescFile<"PointerSubChecker">;
 114
 115 def SizeofPointerChecker : Checker<"SizeofPtr">,
 116   HelpText<"Warn about unintended use of sizeof() on pointer expressions">,
 117   DescFile<"CheckSizeofPointer.cpp">;
 118
 119 } // end "alpha.core"
 120
 121 //===----------------------------------------------------------------------===//
 122 // Evaluate "builtin" functions.
 123 //===----------------------------------------------------------------------===//
 124
 125 let ParentPackage = CoreBuiltin in {
 126
 127 def NoReturnFunctionChecker : Checker<"NoReturnFunctions">,
 128   HelpText<"Evaluate \"panic\" functions that are known to not return to the caller">,
 129   DescFile<"NoReturnFunctionChecker.cpp">;
 130
 131 def BuiltinFunctionChecker : Checker<"BuiltinFunctions">,
 132   HelpText<"Evaluate compiler builtin functions (e.g., alloca())">,
 133   DescFile<"BuiltinFunctionChecker.cpp">;
 134
 135 } // end "core.builtin"
 136
 137 //===----------------------------------------------------------------------===//
 138 // Uninitialized values checkers.
 139 //===----------------------------------------------------------------------===//
 140
 141 let ParentPackage = CoreUninitialized in {
 142
 143 def UndefinedArraySubscriptChecker : Checker<"ArraySubscript">,
 144   HelpText<"Check for uninitialized values used as array subscripts">,
 145   DescFile<"UndefinedArraySubscriptChecker.cpp">;
 146
 147 def UndefinedAssignmentChecker : Checker<"Assign">,
 148   HelpText<"Check for assigning uninitialized values">,
 149   DescFile<"UndefinedAssignmentChecker.cpp">;
 150
 151 def UndefBranchChecker : Checker<"Branch">,
 152   HelpText<"Check for uninitialized values used as branch conditions">,
 153   DescFile<"UndefBranchChecker.cpp">;
 154
 155 def UndefCapturedBlockVarChecker : Checker<"CapturedBlockVariable">,
 156   HelpText<"Check for blocks that capture uninitialized values">,
 157   DescFile<"UndefCapturedBlockVarChecker.cpp">;
 158
 159 def ReturnUndefChecker : Checker<"UndefReturn">,
 160   HelpText<"Check for uninitialized values being returned to the caller">,
 161   DescFile<"ReturnUndefChecker.cpp">;
 162
 163 } // end "core.uninitialized"
 164
 165 //===----------------------------------------------------------------------===//
 166 // C++ checkers.
 167 //===----------------------------------------------------------------------===//
 168
 169 let ParentPackage = Cplusplus in {
 170
 171 def NewDeleteChecker : Checker<"NewDelete">,
 172   HelpText<"Check for double-free and use-after-free problems. Traces memory managed by new/delete.">,
 173   DescFile<"MallocChecker.cpp">;
 174
 175 } // end: "cplusplus"
 176
 177 let ParentPackage = CplusplusAlpha in {
 178
 179 def VirtualCallChecker : Checker<"VirtualCall">,
 180   HelpText<"Check virtual function calls during construction or destruction">,
 181   DescFile<"VirtualCallChecker.cpp">;
 182
 183 def NewDeleteLeaksChecker : Checker<"NewDeleteLeaks">,
 184   HelpText<"Check for memory leaks. Traces memory managed by new/delete.">,
 185   DescFile<"MallocChecker.cpp">;
 186
 187 } // end: "alpha.cplusplus"
 188
 189 //===----------------------------------------------------------------------===//
 190 // Deadcode checkers.
 191 //===----------------------------------------------------------------------===//
 192
 193 let ParentPackage = DeadCode in {
 194
 195 def DeadStoresChecker : Checker<"DeadStores">,
 196   HelpText<"Check for values stored to variables that are never read afterwards">,
 197   DescFile<"DeadStoresChecker.cpp">;
 198 } // end DeadCode
 199
 200 let ParentPackage = DeadCodeAlpha in {
 201
 202 def IdempotentOperationChecker : Checker<"IdempotentOperations">,
 203   HelpText<"Warn about idempotent operations">,
 204   DescFile<"IdempotentOperationChecker.cpp">;
 205
 206 def UnreachableCodeChecker : Checker<"UnreachableCode">,
 207   HelpText<"Check unreachable code">,
 208   DescFile<"UnreachableCodeChecker.cpp">;
 209
 210 } // end "alpha.deadcode"
 211
 212 //===----------------------------------------------------------------------===//
 213 // Security checkers.
 214 //===----------------------------------------------------------------------===//
 215
 216 let ParentPackage = InsecureAPI in {
 217   def gets : Checker<"gets">,
 218     HelpText<"Warn on uses of the 'gets' function">,
 219     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 220   def getpw : Checker<"getpw">,
 221     HelpText<"Warn on uses of the 'getpw' function">,
 222     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 223   def mktemp : Checker<"mktemp">,
 224     HelpText<"Warn on uses of the 'mktemp' function">,
 225     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 226   def mkstemp : Checker<"mkstemp">,
 227     HelpText<"Warn when 'mkstemp' is passed fewer than 6 X's in the format string">,
 228     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 229   def rand : Checker<"rand">,
 230     HelpText<"Warn on uses of the 'rand', 'random', and related functions">,
 231     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 232   def strcpy : Checker<"strcpy">,
 233     HelpText<"Warn on uses of the 'strcpy' and 'strcat' functions">,
 234     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 235   def vfork : Checker<"vfork">,
 236     HelpText<"Warn on uses of the 'vfork' function">,
 237     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 238   def UncheckedReturn : Checker<"UncheckedReturn">,
 239     HelpText<"Warn on uses of functions whose return values must be always checked">,
 240     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 241 }
 242 let ParentPackage = Security in {
 243   def FloatLoopCounter : Checker<"FloatLoopCounter">,
 244     HelpText<"Warn on using a floating point value as a loop counter (CERT: FLP30-C, FLP30-CPP)">,
 245     DescFile<"CheckSecuritySyntaxOnly.cpp">;
 246 }
 247
 248 let ParentPackage = SecurityAlpha in {
 249
 250 def ArrayBoundChecker : Checker<"ArrayBound">,
 251   HelpText<"Warn about buffer overflows (older checker)">,
 252   DescFile<"ArrayBoundChecker.cpp">;
 253
 254 def ArrayBoundCheckerV2 : Checker<"ArrayBoundV2">,
 255   HelpText<"Warn about buffer overflows (newer checker)">,
 256   DescFile<"ArrayBoundCheckerV2.cpp">;
 257
 258 def ReturnPointerRangeChecker : Checker<"ReturnPtrRange">,
 259   HelpText<"Check for an out-of-bound pointer being returned to callers">,
 260   DescFile<"ReturnPointerRangeChecker.cpp">;
 261
 262 def MallocOverflowSecurityChecker : Checker<"MallocOverflow">,
 263   HelpText<"Check for overflows in the arguments to malloc()">,
 264   DescFile<"MallocOverflowSecurityChecker.cpp">;
 265
 266 } // end "alpha.security"
 267
 268 //===----------------------------------------------------------------------===//
 269 // Taint checkers.
 270 //===----------------------------------------------------------------------===//
 271
 272 let ParentPackage = Taint in {
 273
 274 def GenericTaintChecker : Checker<"TaintPropagation">,
 275   HelpText<"Generate taint information used by other checkers">,
 276   DescFile<"GenericTaintChecker.cpp">;
 277
 278 } // end "alpha.security.taint"
 279
 280 //===----------------------------------------------------------------------===//
 281 // Unix API checkers.
 282 //===----------------------------------------------------------------------===//
 283
 284 let ParentPackage = Unix in {
 285
 286 def UnixAPIChecker : Checker<"API">,
 287   HelpText<"Check calls to various UNIX/Posix functions">,
 288   DescFile<"UnixAPIChecker.cpp">;
 289
 290 def MallocPessimistic : Checker<"Malloc">,
 291   HelpText<"Check for memory leaks, double free, and use-after-free problems. Traces memory managed by malloc()/free().">,
 292   DescFile<"MallocChecker.cpp">;
 293
 294 def MallocSizeofChecker : Checker<"MallocSizeof">,
 295   HelpText<"Check for dubious malloc arguments involving sizeof">,
 296   DescFile<"MallocSizeofChecker.cpp">;
 297
 298 def MismatchedDeallocatorChecker : Checker<"MismatchedDeallocator">,
 299   HelpText<"Check for mismatched deallocators.">,
 300   DescFile<"MallocChecker.cpp">;
 301
 302 } // end "unix"
 303
 304 let ParentPackage = UnixAlpha in {
 305
 306 def ChrootChecker : Checker<"Chroot">,
 307   HelpText<"Check improper use of chroot">,
 308   DescFile<"ChrootChecker.cpp">;
 309
 310 def MallocOptimistic : Checker<"MallocWithAnnotations">,
 311   HelpText<"Check for memory leaks, double free, and use-after-free problems. Traces memory managed by malloc()/free(). Assumes that all user-defined functions which might free a pointer are annotated.">,
 312   DescFile<"MallocChecker.cpp">;
 313
 314 def PthreadLockChecker : Checker<"PthreadLock">,
 315   HelpText<"Simple lock -> unlock checker">,
 316   DescFile<"PthreadLockChecker.cpp">;
 317
 318 def StreamChecker : Checker<"Stream">,
 319   HelpText<"Check stream handling functions">,
 320   DescFile<"StreamChecker.cpp">;
 321
 322 def SimpleStreamChecker : Checker<"SimpleStream">,
 323   HelpText<"Check for misuses of stream APIs">,
 324   DescFile<"SimpleStreamChecker.cpp">;
 325
 326 } // end "alpha.unix"
 327
 328 let ParentPackage = CString in {
 329
 330 def CStringNullArg : Checker<"NullArg">,
 331   HelpText<"Check for null pointers being passed as arguments to C string functions">,
 332   DescFile<"CStringChecker.cpp">;
 333
 334 def CStringSyntaxChecker : Checker<"BadSizeArg">,
 335   HelpText<"Check the size argument passed into C string functions for common erroneous patterns">,
 336   DescFile<"CStringSyntaxChecker.cpp">;
 337 }
 338
 339 let ParentPackage = CStringAlpha in {
 340
 341 def CStringOutOfBounds : Checker<"OutOfBounds">,
 342   HelpText<"Check for out-of-bounds access in string functions">,
 343   DescFile<"CStringChecker.cpp">;
 344
 345 def CStringBufferOverlap : Checker<"BufferOverlap">,
 346   HelpText<"Checks for overlap in two buffer arguments">,
 347   DescFile<"CStringChecker.cpp">;
 348
 349 def CStringNotNullTerm : Checker<"NotNullTerminated">,
 350   HelpText<"Check for arguments which are not null-terminating strings">,
 351   DescFile<"CStringChecker.cpp">;
 352 }
 353
 354 //===----------------------------------------------------------------------===//
 355 // Mac OS X, Cocoa, and Core Foundation checkers.
 356 //===----------------------------------------------------------------------===//
 357
 358 let ParentPackage = OSX in {
 359
 360 def MacOSXAPIChecker : Checker<"API">,
 361   InPackage<OSX>,
 362   HelpText<"Check for proper uses of various Apple APIs">,
 363   DescFile<"MacOSXAPIChecker.cpp">;
 364
 365 def MacOSKeychainAPIChecker : Checker<"SecKeychainAPI">,
 366   InPackage<OSX>,
 367   HelpText<"Check for proper uses of Secure Keychain APIs">,
 368   DescFile<"MacOSKeychainAPIChecker.cpp">;
 369
 370 } // end "osx"
 371
 372 let ParentPackage = Cocoa in {
 373
 374 def ObjCAtSyncChecker : Checker<"AtSync">,
 375   HelpText<"Check for nil pointers used as mutexes for @synchronized">,
 376   DescFile<"ObjCAtSyncChecker.cpp">;
 377
 378 def NilArgChecker : Checker<"NilArg">,
 379   HelpText<"Check for prohibited nil arguments to ObjC method calls">,
 380   DescFile<"BasicObjCFoundationChecks.cpp">;
 381
 382 def ClassReleaseChecker : Checker<"ClassRelease">,
 383   HelpText<"Check for sending 'retain', 'release', or 'autorelease' directly to a Class">,
 384   DescFile<"BasicObjCFoundationChecks.cpp">;
 385
 386 def VariadicMethodTypeChecker : Checker<"VariadicMethodTypes">,
 387   HelpText<"Check for passing non-Objective-C types to variadic collection "
 388            "initialization methods that expect only Objective-C types">,
 389   DescFile<"BasicObjCFoundationChecks.cpp">;
 390
 391 def NSAutoreleasePoolChecker : Checker<"NSAutoreleasePool">,
 392   HelpText<"Warn for suboptimal uses of NSAutoreleasePool in Objective-C GC mode">,
 393   DescFile<"NSAutoreleasePoolChecker.cpp">;
 394
 395 def ObjCMethSigsChecker : Checker<"IncompatibleMethodTypes">,
 396   HelpText<"Warn about Objective-C method signatures with type incompatibilities">,
 397   DescFile<"CheckObjCInstMethSignature.cpp">;
 398
 399 def ObjCUnusedIvarsChecker : Checker<"UnusedIvars">,
 400   HelpText<"Warn about private ivars that are never used">,
 401   DescFile<"ObjCUnusedIVarsChecker.cpp">;
 402
 403 def ObjCSelfInitChecker : Checker<"SelfInit">,
 404   HelpText<"Check that 'self' is properly initialized inside an initializer method">,
 405   DescFile<"ObjCSelfInitChecker.cpp">;
 406
 407 def ObjCLoopChecker : Checker<"Loops">,
 408   HelpText<"Improved modeling of loops using Cocoa collection types">,
 409   DescFile<"BasicObjCFoundationChecks.cpp">;
 410
 411 def ObjCNonNilReturnValueChecker : Checker<"NonNilReturnValue">,
 412   HelpText<"Model the APIs that are guaranteed to return a non-nil value">,
 413   DescFile<"BasicObjCFoundationChecks.cpp">;
 414
 415 def NSErrorChecker : Checker<"NSError">,
 416   HelpText<"Check usage of NSError** parameters">,
 417   DescFile<"NSErrorChecker.cpp">;
 418
 419 def RetainCountChecker : Checker<"RetainCount">,
 420   HelpText<"Check for leaks and improper reference count management">,
 421   DescFile<"RetainCountChecker.cpp">;
 422
 423 } // end "osx.cocoa"
 424
 425 let ParentPackage = CocoaAlpha in {
 426
 427 def ObjCDeallocChecker : Checker<"Dealloc">,
 428   HelpText<"Warn about Objective-C classes that lack a correct implementation of -dealloc">,
 429   DescFile<"CheckObjCDealloc.cpp">;
 430
 431 def InstanceVariableInvalidation : Checker<"InstanceVariableInvalidation">,
 432   HelpText<"Check that the invalidatable instance variables are invalidated in the methods annotated with objc_instance_variable_invalidator">,
 433   DescFile<"IvarInvalidationChecker.cpp">;
 434
 435 def MissingInvalidationMethod : Checker<"MissingInvalidationMethod">,
 436   HelpText<"Check that the invalidation methods are present in classes that contain invalidatable instance variables">,
 437   DescFile<"IvarInvalidationChecker.cpp">;
 438
 439 def DirectIvarAssignment : Checker<"DirectIvarAssignment">,
 440   HelpText<"Check for direct assignments to instance variables">,
 441   DescFile<"DirectIvarAssignment.cpp">;
 442
 443 def DirectIvarAssignmentForAnnotatedFunctions : Checker<"DirectIvarAssignmentForAnnotatedFunctions">,
 444   HelpText<"Check for direct assignments to instance variables in the methods annotated with objc_no_direct_instance_variable_assignment">,
 445   DescFile<"DirectIvarAssignment.cpp">;
 446
 447 def ObjCSuperCallChecker : Checker<"MissingSuperCall">,
 448   HelpText<"Warn about Objective-C methods that lack a necessary call to super">,
 449   DescFile<"ObjCMissingSuperCallChecker.cpp">;
 450
 451 } // end "alpha.osx.cocoa"
 452
 453 let ParentPackage = CoreFoundation in {
 454
 455 def CFNumberCreateChecker : Checker<"CFNumber">,
 456   HelpText<"Check for proper uses of CFNumberCreate">,
 457   DescFile<"BasicObjCFoundationChecks.cpp">;
 458
 459 def CFRetainReleaseChecker : Checker<"CFRetainRelease">,
 460   HelpText<"Check for null arguments to CFRetain/CFRelease/CFMakeCollectable">,
 461   DescFile<"BasicObjCFoundationChecks.cpp">;
 462
 463 def CFErrorChecker : Checker<"CFError">,
 464   HelpText<"Check usage of CFErrorRef* parameters">,
 465   DescFile<"NSErrorChecker.cpp">;
 466 }
 467
 468 let ParentPackage = Containers in {
 469 def ObjCContainersASTChecker : Checker<"PointerSizedValues">,
 470   HelpText<"Warns if 'CFArray', 'CFDictionary', 'CFSet' are created with non-pointer-size values">,
 471   DescFile<"ObjCContainersASTChecker.cpp">;
 472
 473 def ObjCContainersChecker : Checker<"OutOfBounds">,
 474   HelpText<"Checks for index out-of-bounds when using 'CFArray' API">,
 475   DescFile<"ObjCContainersChecker.cpp">;
 476
 477 }
 478 //===----------------------------------------------------------------------===//
 479 // Checkers for LLVM development.
 480 //===----------------------------------------------------------------------===//
 481
 482 def LLVMConventionsChecker : Checker<"Conventions">,
 483   InPackage<LLVM>,
 484   HelpText<"Check code for LLVM codebase conventions">,
 485   DescFile<"LLVMConventionsChecker.cpp">;
 486
 487 //===----------------------------------------------------------------------===//
 488 // Debugging checkers (for analyzer development).
 489 //===----------------------------------------------------------------------===//
 490
 491 let ParentPackage = Debug in {
 492
 493 def DominatorsTreeDumper : Checker<"DumpDominators">,
 494   HelpText<"Print the dominance tree for a given CFG">,
 495   DescFile<"DebugCheckers.cpp">;
 496
 497 def LiveVariablesDumper : Checker<"DumpLiveVars">,
 498   HelpText<"Print results of live variable analysis">,
 499   DescFile<"DebugCheckers.cpp">;
 500
 501 def CFGViewer : Checker<"ViewCFG">,
 502   HelpText<"View Control-Flow Graphs using GraphViz">,
 503   DescFile<"DebugCheckers.cpp">;
 504
 505 def CFGDumper : Checker<"DumpCFG">,
 506   HelpText<"Display Control-Flow Graphs">,
 507   DescFile<"DebugCheckers.cpp">;
 508
 509 def CallGraphViewer : Checker<"ViewCallGraph">,
 510   HelpText<"View Call Graph using GraphViz">,
 511   DescFile<"DebugCheckers.cpp">;
 512
 513 def CallGraphDumper : Checker<"DumpCallGraph">,
 514   HelpText<"Display Call Graph">,
 515   DescFile<"DebugCheckers.cpp">;
 516
 517 def ConfigDumper : Checker<"ConfigDumper">,
 518   HelpText<"Dump config table">,
 519   DescFile<"DebugCheckers.cpp">;
 520
 521 def TraversalDumper : Checker<"DumpTraversal">,
 522   HelpText<"Print branch conditions as they are traversed by the engine">,
 523   DescFile<"TraversalChecker.cpp">;
 524
 525 def CallDumper : Checker<"DumpCalls">,
 526   HelpText<"Print calls as they are traversed by the engine">,
 527   DescFile<"TraversalChecker.cpp">;
 528
 529 def AnalyzerStatsChecker : Checker<"Stats">,
 530   HelpText<"Emit warnings with analyzer statistics">,
 531   DescFile<"AnalyzerStatsChecker.cpp">;
 532
 533 def TaintTesterChecker : Checker<"TaintTest">,
 534   HelpText<"Mark tainted symbols as such.">,
 535   DescFile<"TaintTesterChecker.cpp">;
 536
 537 def ExprInspectionChecker : Checker<"ExprInspection">,
 538   HelpText<"Check the analyzer's understanding of expressions">,
 539   DescFile<"ExprInspectionChecker.cpp">;
 540
 541 } // end "debug"