30 lines
1.4 KiB
C
30 lines
1.4 KiB
C
|
// RUN: %clang_analyze_cc1 %s -verify \
|
||
|
|
// RUN: -analyzer-checker=security.insecureAPI
|
||
|
|
// RUN: %clang_analyze_cc1 %s -verify -std=gnu11 \
|
||
|
|
// RUN: -analyzer-checker=security.insecureAPI
|
||
|
|
// RUN: %clang_analyze_cc1 %s -verify -std=gnu99 \
|
||
|
|
// RUN: -analyzer-checker=security.insecureAPI
|
||
|
|
|
||
|
|
#include "Inputs/system-header-simulator.h"
|
||
|
|
|
||
|
|
extern FILE *fp;
|
||
|
|
extern char buf[128];
|
||
|
|
|
||
|
|
void builtin_function_call_crash_fixes(char *c) {
|
||
|
|
__builtin_strncpy(c, "", 6);
|
||
|
|
__builtin_memset(c, '\0', (0));
|
||
|
|
__builtin_memcpy(c, c, 0);
|
||
|
|
__builtin_sprintf(buf, "%s", c);
|
||
|
|
__builtin_fprintf(fp, "%s", c);
|
||
|
|
|
||
|
|
#if __STDC_VERSION__ > 199901
|
||
|
|
// expected-warning@-7{{Call to function 'strncpy' is insecure as it does not provide security checks introduced in the C11 standard.}}
|
||
|
|
// expected-warning@-7{{Call to function 'memset' is insecure as it does not provide security checks introduced in the C11 standard.}}
|
||
|
|
// expected-warning@-7{{Call to function 'memcpy' is insecure as it does not provide security checks introduced in the C11 standard.}}
|
||
|
|
// expected-warning@-7{{Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard.}}
|
||
|
|
// expected-warning@-7{{Call to function 'fprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard.}}
|
||
|
|
#else
|
||
|
|
// expected-no-diagnostics
|
||
|
|
#endif
|
||
|
|
}
|