Curl XTU Analysis

Baseline:

Curl without xtu - clang 4.0

http://cc.elte.hu:8080/#run=57

Curl with XTU - clang 4.0

http://cc.elte.hu:8080/#run=58

###Summary

Analyzed project	All Non-CTU Findings (baseline)	All CTU Findings	New CTU findings	Disappeared findings	Successfully analyzed	Failed to analyze	Analysis Time (baseline)[s]	Analysis Time XTU (1st Phase + 2nd Phase)[s]	Median of bug path length (BPL) in baseline	Median of BPL CTU	Median of BPL of new findings	Median of BPL of disappeared findings
Curl	9	19	10	0	280 files	13 files	32.93	54.30	1	16	12	N/A

Checker ID	Number of new findings
core.NullDereference	1
core.UndefinedBinaryOperatorResult	1
core.uninitialized.Assign	1
core.uninitialized.Branch	1

Number of new true positives: 1

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5875

Number of new false positives: 3 different

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5879

False positive since (list->length != 0) condition excludes that the head is null (listed 7 times since called from different TUs ,CTU uniqueing would solve it)

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5885

False positive since Curl_ntlm_core_mk_nt_hash(conn->data, conn->passwd, nt_hash) set the nt_hash pointer

http://cc.elte.hu:8080/#baseline=57&newcheck=58&report=5889