Anna Zaks | a50b7ab | 2011-12-05 18:58:01 +0000 | [diff] [blame] | 1 | // RUN: %clang_cc1 -analyze -analyzer-checker=experimental.security.taint,debug.TaintTest -verify %s |
2 | |||||
3 | int scanf(const char *restrict format, ...); | ||||
4 | int getchar(void); | ||||
5 | |||||
6 | #define BUFSIZE 10 | ||||
7 | int Buffer[BUFSIZE]; | ||||
8 | |||||
9 | void bufferScanfAssignment(int x) { | ||||
10 | int n; | ||||
11 | int *addr = &Buffer[0]; | ||||
12 | scanf("%d", &n); | ||||
13 | addr += n;// expected-warning {{tainted}} | ||||
14 | *addr = n; // expected-warning {{tainted}} | ||||
15 | } |