tree 86130f22ec39c4707d1192a3f5bf00299014b13c
parent f35e9fa478e25266f7a72aed5cd34437c6aa7c39
author LoboQ1ng <xpess@qq.com> 1754678930 +0800
committer GitHub <noreply@github.com> 1754678930 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJolkaSCRC1aQ7uu5UhlAAARu4QAJZU2a+dn+Fj1GAPqh3SG+pz
 kArBvSisddADX5WJzLaz8OsBOu1OBaaqiVu2+2X6V6XXfFFVbeh9NrNzAkuPjAZw
 9JAlmwK2nlHExdy8R7TN/LYuL61kY58o/kgjKSSjXxQ6ZjVbxwYrpyPMK/CWhdQ9
 HZ5KRYco/hu6XAQxi1esSogLOSs502Vl7wZ4ACHJftidQrCEHTpCWE7pjivL+TJV
 WDHPLa/I7GPhTaCvdxQ3NH+cFK25bsxFMOW6ZCY+8tSo0Ng+ZAyeHnd/lQ/315TT
 iklu9cK/xd+qMdZmEcs4Tfd4oIpmW5nrxmbiShGr77uVPmPYYOkYj8OPgyR46Ec9
 GH1zFVsj24PPEY3SVhsI14zOZhQe8xKv9Odsjg/zUgpp7uN1mDK5lVU0tooVU2B/
 AZHn9Vvog2xOe6NzHdKHqBp7skQx7bmuAVIbnAtBMG1CwTGMaDkj066ZepVgCr08
 eXyYhyE8p1TP+/zdsRSW1Q8eU1ubXhIrtDHUU38L7TRou48EKG8v+JB283SKe/CF
 F9ebPBoDzmZe1pOYJRJDOdnzeX4LuK2P1BIGEQ06Smiji9O6lFu57JhL2huO6kqY
 PkJ+VRpvwj1ygv8MgNlqb6rWvnvKGSgCaJcZCcSLyUhUKk8+IREJnp2jTm0nXsCn
 rMtHr8cf5ajTE4PTnaVp
 =PqSU
 -----END PGP SIGNATURE-----
 

[analyzer] Detect use-after-free for field address (e.g., &ptr->field) (#152462)

This patch improves MallocChecker to detect use-after-free bugs when
a freed structure's field is passed by address (e.g., `&ptr->field`).

Previously, MallocChecker would miss such cases, as it only checked the
top-level symbol of argument values.
This patch analyzes the base region of arguments and extracts the
symbolic region (if any), allowing UAF detection even for field address
expressions.

Fixes #152446