c - How tight is the checker core.StackAddressEscape for clang?

Question

Clang static analyzer has a check so that "addresses to stack memory do not escape the function." How smart or tight is this check? Is it a guarantee or just heuristic? Which kind of code would it be confused by?

https://clang.llvm.org/docs/analyzer/checkers.html#core-stackaddressescape-c

Answer 1

等待大神答复