[CHERIoT] Implement a basic checker for CHERIoT heap APIs.

clang/include/clang/StaticAnalyzer/Checkers/Checkers.td

@@ -126,6 +126,7 @@ def WebKitAlpha : Package<"webkit">, ParentPackage<Alpha>;
 
 def CHERI : Package<"cheri">;
 def CHERIAlpha : Package<"cheri">, ParentPackage<Alpha>;
+def CHERIoT : Package<"cheriot">;
 
 //===----------------------------------------------------------------------===//
 // Core Checkers.
@@ -1862,3 +1863,10 @@ let ParentPackage = CHERIAlpha in {
         Documentation<NotDocumented>;
 
 } // end alpha.cheri
+
+let ParentPackage = CHERIoT in {
+  def CheriotHeapChecker
+      : Checker<"CheriotHeap">,
+        HelpText<"Check use of CHERIoT heap allocations APIs">,
+        Documentation<NotDocumented>;
+} // end cheriot

clang/lib/Driver/ToolChains/Arch/RISCV.cpp

@@ -72,6 +72,12 @@ bool riscv::isCheriPurecap(const llvm::opt::ArgList &Args,
   return isCheriPurecapABIName(getRISCVABI(Args, Triple));
 }
 
+bool riscv::isCheriot(const llvm::opt::ArgList &Args,
+                      const llvm::Triple &Triple) {
+  auto ABI = getRISCVABI(Args, Triple);
+  return (Triple.getOS() == llvm::Triple::CheriotRTOS ||
+          (ABI == "cheriot" || ABI == "cheriot-baremetal"));
+}
 
 // Get features except standard extension feature
 static void getRISCFeaturesFromMcpu(const Driver &D, const Arg *A,

clang/lib/Driver/ToolChains/Arch/RISCV.h

@@ -27,6 +27,7 @@ StringRef getRISCVABI(const llvm::opt::ArgList &Args,
 std::string getRISCVArch(const llvm::opt::ArgList &Args,
                          const llvm::Triple &Triple);
 bool isCheriPurecap(const llvm::opt::ArgList &Args, const llvm::Triple &Triple);
+bool isCheriot(const llvm::opt::ArgList &Args, const llvm::Triple &Triple);
 std::string getRISCVTargetCPU(const llvm::opt::ArgList &Args,
                               const llvm::Triple &Triple);
 } // end namespace riscv

clang/lib/Driver/ToolChains/Clang.cpp

@@ -3518,6 +3518,9 @@ static void RenderAnalyzerOptions(const ArgList &Args, ArgStringList &CmdArgs,
 
       CmdArgs.push_back("-analyzer-checker=optin.portability.PointerAlignment");
       CmdArgs.push_back("-analyzer-checker=alpha.core.PointerSub");
+
+      if (tools::riscv::isCheriot(Args, Triple))
+        CmdArgs.push_back("-analyzer-checker=cheriot");
     }
 
     // Default nullability checks.