tree 34189ecbeabce2381b42962367f04a575bf747eb
parent c3272c34708de14c8912e97bf6b4b4d932888ad2
author Alex Lorenz <arphaman@gmail.com> 1566930968 +0000
committer Alex Lorenz <arphaman@gmail.com> 1566930968 +0000

Remove clang-tidy-vs from clang-tools-extra (PR41791)

The clang-tidy-vs visual studio plugin in clang-tools-extra contains a
security vulnerability in the YamlDotNet package [1]. I posted to cfe-dev [2],
asking if there was anyone who was interested in updating the the plugin
to address the vulnerability. Reid mentioned that Zach (the original committer),
said that there's another plugin (Clang Power Tools) that provides clang-tidy support,
with additional extra features, so it would be ok to remove clang-tidy-vs.

This commit removes the plugin to address the security vulnerability, and adds
a section to the release notes that mentions that the plugin was removed, and
suggests to use Clang Power Tools.

Fixes PR 41791.

[1]: https://nvd.nist.gov/vuln/detail/CVE-2018-1000210
[2]: http://lists.llvm.org/pipermail/cfe-dev/2019-August/063196.html

Differential Revision: https://reviews.llvm.org/D66813

git-svn-id: https://llvm.org/svn/llvm-project/clang-tools-extra/trunk@370096 91177308-0d34-0410-b5e6-96231b3b80d8