Curl XTU Analysis

Baseline:

Curl without xtu - clang 4.0

http://cc.elte.hu:8080/#run=57

Curl with XTU - clang 4.0

http://cc.elte.hu:8080/#run=58

###Summary

Bug numbers do not match those on the linked viewer. The reason behind this is that we used bug deduplication not yet committed into the CodeChecker codebase.

Analyzed project	All Non-CTU Findings (baseline)	All CTU Findings	New CTU findings	Disappeared findings	Successfully analyzed	Failed to analyze	Analysis Time (baseline)[s]	Analysis Time XTU (1st Phase + 2nd Phase)[s]	Median of bug path length (BPL) in baseline	Median of BPL CTU	Median of BPL of new findings	Median of BPL of disappeared findings
Curl	7	11	4	0	280 files	13 files	32.93	54.30	1	16	12	N/A

Checker ID	Number of new findings
core.NullDereference	1
core.UndefinedBinaryOperatorResult	1
core.uninitialized.Assign	1
core.uninitialized.Branch	1

Number of new true positives: 1

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5875

Number of new false positives: 3 different

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5879

False positive since (list->length != 0) condition excludes that the head is null (listed 7 times since called from different TUs ,CTU uniqueing would solve it)

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5885

False positive since Curl_ntlm_core_mk_nt_hash(conn->data, conn->passwd, nt_hash) set the nt_hash pointer

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5889