diff options
Diffstat (limited to 'test/Analysis/taint-tester.c')
-rw-r--r-- | test/Analysis/taint-tester.c | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/test/Analysis/taint-tester.c b/test/Analysis/taint-tester.c new file mode 100644 index 0000000000..54480beabc --- /dev/null +++ b/test/Analysis/taint-tester.c @@ -0,0 +1,15 @@ +// RUN: %clang_cc1 -analyze -analyzer-checker=experimental.security.taint,debug.TaintTest -verify %s + +int scanf(const char *restrict format, ...); +int getchar(void); + +#define BUFSIZE 10 +int Buffer[BUFSIZE]; + +void bufferScanfAssignment(int x) { + int n; + int *addr = &Buffer[0]; + scanf("%d", &n); + addr += n;// expected-warning {{tainted}} + *addr = n; // expected-warning {{tainted}} +} |