clang-analyzer-security.SetgidSetuidOrder¶
The checker checks for sequences of setuid(getuid()) and setgid(getgid())
calls (in this order). If such a sequence is found and there is no other
privilege-changing function call (seteuid, setreuid, setresuid and
the GID versions of these) in between, a warning is generated. The checker finds
only exactly setuid(getuid()) calls (and the GID versions), not for example
if the result of getuid() is stored in a variable.
The clang-analyzer-security.SetgidSetuidOrder check is an alias, please see Clang Static Analyzer Available Checkers for more information.