|
Context sensitivity is the analyzers ability to distinguish between different calls to the same function. In this snippet, the function foo is called twice: first with a valid pointer b, and then with a freed pointer a. Without context sensitivity, the tool might get confused and report an error for both calls or neither. IKOS is context sensitive and analyzes foo within the specific context of each call site, correctly identifying that the second call is a Use-after-free while recognizing the first call is safe. |