What function annotation flags are available for Coverity Scan?

Question

The Coverity Scan tuning documentation talks about adding function annotations to source files. There are three options listed:

• +kill
• +alloc
• +free

However, from that same page there is a link to an example file that uses as-of-yet unseen flags:

• toctou
• string_size

What do these flags mean? What other flags are available for function annotation, and where are they documented?

Answer 1

Apparently the content between the brackets should be the Coverity event tag name. The comment should immediately precede the line with the false positive in it, and will cause that defect to be flagged as intentional (as long as it matches the flagged event.)

For example, the toctou event tag name is detailed here.

Source