Awesome Reviewers

Verification · Finding validation

Path reachability check

Decides whether the triggering state can reach the flagged line on this code path, given guards, early returns and types.

Sub-techniques

  • Guard analysis V1043.001

    Find early returns, enclosing conditions and defaults that exclude the trigger.

  • Caller analysis V1043.002

    Find a real caller, config or workflow that produces the triggering state.

How to build it

  1. For each finding, list the callers of the flagged function.
  2. Check each caller for guards that exclude the trigger.
  3. Mark findings with no established producer as unestablished, not confirmed.

Signals in a repository

  • Static analyzer configs with path-sensitive checks enabled.