blob: 50fc0b6a4e263c80ee41b45b6d202766b4e20314 [file] [log] [blame]
// RUN: %clang_cc1 -analyze,core -analyzer-output=text -verify %s
// This file is for testing enhanced diagnostics produced by the GenericTaintChecker
int scanf(const char *restrict format, ...);
int system(const char *command);
void taintDiagnostic()
char buf[128];
scanf("%s", buf); // expected-note {{Taint originated here}}
system(buf); // expected-warning {{Untrusted data is passed to a system call}} // expected-note {{Untrusted data is passed to a system call (CERT/STR02-C. Sanitize data passed to complex subsystems)}}