[release][analyzer] Add 13.0.0 release notes

[Szelethus]

Summary

Scrolled through the log, and whatever felt like a good patch to highlight from a user's standpoint got into the notes!

git log llvmorg-13-init..llvmorg-13.0.0-rc1 --oneline -- clang/lib/StaticAnalyzer/ clang/include/clang/StaticAnalyzer/ clang/lib/Analysis/ clang/include/clang/Analysis/

If you think I forgot to add anybody, or have neglected to add an important patch, let me know!

[Szelethus]

clang/docs/ReleaseNotes.rst

294

Oops, should add this comment before commiting.

.. 2407eb08a574 [analyzer] Update static analyzer to be support sarif-html

[steakhal]

Maybe a couple other noteworthy commits:
efa7df1682c2859dabe3646ee7dc01e68629417f: better R-value tracking.
aa454dda2eed4e71081bc57b1f32dfce2486b177: fixing the modeling of std::bit_cast<>.
cad9b7f708e2b2d19d7890494980c5e427d6d4ea: Print time taken to analyze each function
9cca5c1391d637b5500ada646cf136ddb38254a3: Make checker silencing work for non-pathsensitive bug reports. (It might be valuable to highlight for other vendors.)

There must have been a couple of patches about std::unique_ptr<> as well.

But I'm fine with the current description. I think it's on the point.

clang/docs/ReleaseNotes.rst

315

abd -> and

[ASDenysPetrov]

Here is one more related to HTML diagnostics:
rG9e02f58780ab8734e5d27a0138bd477d18ae64a1 Highlight arrows for currently selected event

[Szelethus]

Fixes according to reviewer comments, cheers!

[Szelethus]

In D108912#2972167, @steakhal wrote:

Maybe a couple other noteworthy commits:
efa7df1682c2859dabe3646ee7dc01e68629417f: better R-value tracking.
aa454dda2eed4e71081bc57b1f32dfce2486b177: fixing the modeling of std::bit_cast<>.

I added a bit more text to the final "various fixes" point, thanks! I didn't dedicate a new point for them though, because although we know how meaningful they are, in the grand scheme of things, I don't think they are as "flashy" from an end user's perspective. Even if they greatly increase confidence in the tool, and are harder to fix then writing a simple checker ;)

cad9b7f708e2b2d19d7890494980c5e427d6d4ea: Print time taken to analyze each function

Good idea!

9cca5c1391d637b5500ada646cf136ddb38254a3: Make checker silencing work for non-pathsensitive bug reports. (It might be valuable to highlight for other vendors.)

We're yet to iron out checker silencing, or finish its discussion before introducing it to the set of function intended for end users. I wouldn't like to advertise it before that happens.

In D108912#2976529, @ASDenysPetrov wrote:

Here is one more related to HTML diagnostics:
rG9e02f58780ab8734e5d27a0138bd477d18ae64a1 Highlight arrows for currently selected event

Good idea!

[RedDocMD]

I suppose that the SmartPtrModelling patches from GSoC this year shouldn't be added since they only involve an alpha checker.

[whisperity]

clang/docs/ReleaseNotes.rst

300–304

Why is the commit prefix different between these two?

[Szelethus]

In D108912#2982169, @RedDocMD wrote:

I suppose that the SmartPtrModelling patches from GSoC this year shouldn't be added since they only involve an alpha checker.

It would be a real shame if they went unrecognized! Added! (only those patches though that landed before the rc2 tag, which always happens right in the middle of GSoC projects.)

[Szelethus]

clang/docs/ReleaseNotes.rst

300–304

I copied them from the reviewer comments. Mind that this file is reset each release, and will likely never be read, so I figured it doesn't matter much :^) Its mostly there for me to double check whether I summarized the patch correctly.

[Szelethus]

In D108912#2982169, @RedDocMD wrote:

I suppose that the SmartPtrModelling patches from GSoC this year shouldn't be added since they only involve an alpha checker.

Actually, you also patched the enabled-by-default modeling part of smart pointers, haven't you? Those definitely deserve their mention!

[RedDocMD]

In D108912#2982201, @Szelethus wrote:

In D108912#2982169, @RedDocMD wrote:

I suppose that the SmartPtrModelling patches from GSoC this year shouldn't be added since they only involve an alpha checker.

Actually, you also patched the enabled-by-default modeling part of smart pointers, haven't you? Those definitely deserve their mention!

Well, a part of it is in 0cd98bef1b6f [analyzer] Handle std::swap for std::unique_ptr.
The other major portion is in destructor modelling, and this patch hasn't landed yet.

[Szelethus]

Gonna land this in a day or two, regardless of whether its accepted! Please take a look if you have anything to object to!

[Szelethus]

Commited in rGee6913cc8317c08b603daed64b07a17a95ec926a to release/13.x.

clang/docs/ReleaseNotes.rst

 
 libclang
 --------
 
 - ...
 
 Static Analyzer
 ---------------
 
-- ...
+- Add a new analyzer output type, ``sarif-html``, that outputs both HTML and
+  Sarif files.
+
+.. 90377308de6c [analyzer] Support allocClassWithName in OSObjectCStyleCast checker
+
+- Add support for ``allocClassWithName`` in OSObjectCStyleCast checker.
+
+.. 21daada95079 [analyzer] Fix static_cast on pointer-to-member handling
+.. 170c67d5b8cc [analyzer] Use the MacroExpansionContext for macro expansions in plists
+.. 02b51e5316cd [analyzer][solver] Redesign constraint ranges data structure
+.. 3085bda2b348 [analyzer][solver] Fix infeasible constraints (PR49642)
+.. 015c39882ebc [Analyzer] Infer 0 value when the divisible is 0 (bug fix)
+.. 90377308de6c [analyzer] Support allocClassWithName in OSObjectCStyleCast checker
+.. df64f471d1e2 [analyzer] DynamicSize: Store the dynamic size
+.. e273918038a7 [analyzer] Track leaking object through stores
+.. 61ae2db2d7a9 [analyzer] Adjust the reported variable name in retain count checker
+.. 50f17e9d3139 [analyzer] RetainCountChecker: Disable reference counting for OSMetaClass.
+
+- Various fixes and improvements, including modeling of casts, constraint
+  solving, explaining bug-causing variable values, macro expansion notes,
+  modeling the size of dynamic objects abd the modeling and reporting of
+  Objective C/C++ retain count related bugs.
 
 .. _release-notes-ubsan:
 
 Undefined Behavior Sanitizer (UBSan)
 ------------------------------------
 
 Core Analysis Improvements
 ==========================